Common use of Cybersecurity Policies Clause in Contracts

Cybersecurity Policies. Broker-Dealer shall implement and maintain a written policy or policies, approved by its board of directors or equivalent governing body, setting forth Broker-Dealer’s policies and procedures for the protection of its Information Systems and Nonpublic Information stored on such Information Systems. Such policies will address the following areas, to the extent applicable: (a) information security; (b) data governance and classification; (c) asset inventory and device management; (d) access controls and identity management; (e) business continuity and disaster recovery planning and resources; (f) systems operations and availability concerns; (g) systems and network security; (h) systems and network monitoring; (i) systems and application development and quality assurance; (j) physical security and environmental controls; (k) customer data privacy; (l) vendor and third party service provider management; (m) risk assessments; and (n) incident response.