Cyber Risk Insurance. Vendor shall have and maintain insurance in the minimum amount of $1,000,000 per claim to be maintained for the duration of this Agreement and three years following its termination to respond to privacy and network security liability claims including, but not limited to:
1. Liability arising from theft, dissemination, and/or use of Cornell University Confidential Information, including, but not limited to, bank, credit card account and personally identifiable information, such as name, address, social security numbers, etc. regardless of how stored or transmitted;
2. Network security liability arising from (i) the unauthorized access to, use of, or tampering with computer systems, including hacker attacks or (ii) the inability of an authorized third party to gain access to Supplier systems and/or Cornell University data, including denial of service, unless caused by a mechanical or electrical failure;
3. Liability arising from the introduction of a computer virus into, or otherwise causing damage to, a customer’s or third person’s computer, computer system, network, or similar computer related property and the data, software, and programs thereon;
4. Crisis Management expenses (i.e. notification, public relations, reputation damage, forensics, etc.) for a data breach.
Cyber Risk Insurance. Consultant shall have and maintain insurance subject to the limit of at least $1,000,000 per claim to be maintained for the duration of this Agreement and three years following its termination to respond to privacy and network security liability claims including, but not limited to:
a. Liability arising from theft, dissemination, and/or use of Cornell University Confidential Information, including, but not limited to, bank, credit card account and personally identifiable information, such as name, address, social security numbers, etc. regardless of how stored or transmitted;
b. Network security liability arising from (i) the unauthorized access to, use of, or tampering with computer systems, including hacker attacks or (ii) the inability of an authorized third party to gain access to Consultant systems and/or Cornell University data, including denial of service, unless caused by a mechanical orelectrical failure;
c. Liability arising from the introduction of a computer virus into, or otherwise causing damage to, a customer’s or third person’s computer, computer system, network, or similar computer related property and the data, software, and programs thereon;
d. Crisis Management expenses (i.e., notification, public relations, reputation damage, forensics, etc.) for adata breach.
Cyber Risk Insurance. Vendor shall have and maintain insurance in the minimum amount of $1,000,000 per claim to be maintained for the duration of this Agreement and three years following its termination to respond to privacy and network security liability claims including, but not limited to:
Cyber Risk Insurance. Employee Dishonesty insurance against the fraudulent acts of employees of Project Co and its Affiliates which will include the following terms: Coverage in the amount of not less than $1 million per occurrence and will include the following principal extensions: Broad form money and securities Money orders and counterfeit paper Depositors’ forgery Computer fraud and funds transfer fraud Audit expenses Credit card forgery Custodial endorsement extension to third parties Cyber Risk Insurance coverage covering all Damages, Claims Expenses, Penalties, Cyber Extortion Loss, Data Protection Loss, Business Interruption and Forensic Expenses subject to a minimum limit of $5 million Employee Dishonesty insurance against the fraudulent/dishonest acts of employees of Project Co and its Affiliates including additional coverage for Broad Form Money and Securities, Money Orders and Counterfeit Paper, Depositors’ Forgery, Computer Fraud and Funds Transfer Fraud, Audit Expenses, Credit Card Forgery and Custodial Endorsement Extension to Third Parties. Coverage shall be maintained continuously from Commercial Close until Construction Completion Date. Coverage shall be primary without any right of contribution of any insurance carried by the City or Senior Lenders. Cyber Risk Insurance for all Damages, Claims Expenses, Penalties, Cyber Extortion Loss, Data Protection Loss, Business Interruption and Forensic Expenses
Cyber Risk Insurance. Cyber Risk insurance (Network Security and Privacy Liability Insurance) and data protection liability insurance (cyber liability). Such coverage shall include: (i) violation or infringement of any right, privacy, or breach of federal, state or foreign security and/or privacy laws or regulations; (ii) data theft, damage, destruction or corruption, including unauthorized access, unauthorized use, identity theft, theft of personally identifiable information or confidential corporate information, transmission of a computer virus or other type of Malicious Code and participation in a denial of service attack on a third party; and (iii) contractual liability coverage for the confidentiality/data breach indemnity requirements in this License Agreement for civil liability, regulatory investigations and notification costs and expenses resulting from a Security Incident with a minimum limit of $20,000,000 for each and every claim and in the aggregate. Such insurance must address all of the foregoing without limitation if caused by an employee, agent, Subcontractor or an independent contractor working on behalf of the Concessionaire in connection with this License Agreement. The MTA shall have the right to require the Concessionaire to require additional coverage limits beyond the $20,000,000 to the extent required by Applicable Law or additional coverage limits are consistent with Good Industry Practice. The Parties acknowledge that the Concessionaire has provided its policy wording in force as at the Execution Date in relation to “civil liability” which is as follows:
Cyber Risk Insurance. Contractor shall continuously maintain, at its expense, Privacy and Security Coverage or the equivalent Cyber Risk Insurance, with policy limits sufficient to cover liability arising under this agreement and to cover any regulatory response requirements associated with a data breach, to be maintained for the duration of the agreement and three years following its termination, to respond to privacy and network security liability claims including, but not limited to:
