Common use of Cybersecurity Training Program Clause in Contracts

Cybersecurity Training Program. If Contractor and/or its subcontractors, officers, or employees will have an account on a state computer system (for example, to access a database on that system), then pursuant to Section 2054.5192, Texas Government Code, Contractor and its subcontractors, officers, and employees must complete a cybersecurity training program certified under Section 2054.519, Texas Government Code and selected by the University. The cybersecurity training program must be completed by Contractor and its subcontractors, officers, and employees during the term and any renewal period of this Agreement. Contractor shall verify completion of the program to the University. University and Contractor have executed and delivered this Agreement to be effective as of the Effective Date. UNIVERSITY: CONTRACTOR: THE UNIVERSITY OF TEXAS HEALTH SCIENCE CENTER AT HOUSTON By: By: ___________________________ Name: ______________________________ Name: ________________________ Title: ______________________________ Title: __________________________ [Option (Include if Contractor is a corporation.): Attest: ________________________ Corporate Secretary] Attach: EXHIBIT A – Scope of Work EXHIBIT B – Schedule EXHIBIT C – Payment for Services [Option (Include if University is a HIPAA Covered Entity and Contractor will receive, create and/or maintain for or on behalf of University data covered by HIPAA.): EXHIBIT D – HIPAA Business Associate Agreement] [Option (Include if HUB Subcontracting Plan was prepared in connection with Work covered by this Agreement.): EXHIBIT E – HUB Subcontracting Plan] [Option (Include if federal contract provisions are included in this Agreement.): EXHIBIT ___ – Affirmative Action Compliance Program] [Option: (Include if this Agreement relates to electronic and information resources, including hardware, software or related services.): EXHIBIT ___ – Environment Specifications] [Option: (Include if this Agreement relates to electronic and information resources, including hardware, software or related services.): EXHIBIT ___ – Security Characteristics and Functionality of Contractor’s Information Resources] [Option: (Include if Contractor will receive, create and/or maintain for or on behalf of University FERPA Data.): EXHIBIT ___ – FERPA Confidentiality and Security Addendum] [Option: (Include if Contractor will trigger GDPR provisions with the services provided to University or on behalf of University: EXHIBIT ____ – GDPR Data Protection Addendum] EXHIBIT A SCOPE OF WORK [Note: Provide a detailed description and break-down of all tasks Contractor is to perform and technical standards for the tasks, if appropriate.] EXHIBIT B SCHEDULE [Note: Describe specific time deadlines and due dates for each phase of Work and, if appropriate, for Work as a whole.] EXHIBIT C PAYMENT FOR SERVICES SERVICE FEES: [Note: Specify payment model. If the fee is not a stipulated lump sum, include a “not to exceed” fee cap amount.] Notwithstanding the foregoing, the cumulative amount of Service Fees remitted by University to Contractor will not exceed $_______________ (Fee Cap) without the prior written approval of University. In addition, total fees for each Phase of Work will not exceed the following specified amounts without the prior written approval of University: _________________ _________________ If University submits, in advance, a written request for additional services not contemplated or reasonably inferred by this Agreement, Contractor will be paid for actual hours incurred by Contractor’s personnel directly and solely in support of the additional services at the Rates provided above. [Note: Air Travel and Rental Car At this time, Contractor may not book air travel or rental car directly with travel vendors and obtain the State rates. If the UT institution books air travel and rental car for Contractor and pays the travel vendor directly (direct xxxx to UT), then the UT institution will receive the State rate for Contractor’s airfare and rental car. Hotel Reservations

Cybersecurity Training Program. If Contractor and/or its subcontractors, officers, or employees will have an account on a state computer system (for example, to access a database on that system), then pursuant to Section 2054.5192, Texas Government Code, Contractor and its subcontractors, officers, and employees must complete a cybersecurity training program certified under Section 2054.519, Texas Government Code and selected by the University. The cybersecurity training program must be completed by Contractor and its subcontractors, officers, and employees during the term and any renewal period of this Agreement. Contractor shall verify completion of the program to the University. University and Contractor have executed and delivered this Agreement to be effective as of the Effective Date. UNIVERSITY: CONTRACTOR: THE UNIVERSITY OF TEXAS HEALTH SCIENCE CENTER AT HOUSTON By: By: ___________________________ Name: ______________________________ Name: ________________________ Title: ______________________________ Title: __________________________ [Option (Include if Contractor is a corporation.): Attest: ________________________ Corporate Secretary] Attach: EXHIBIT A – Scope of Work EXHIBIT B – Schedule EXHIBIT C – Payment for Services [Option (Include if University is a HIPAA Covered Entity and Contractor will receive, create and/or maintain for or on behalf of University data covered by HIPAA.): EXHIBIT D – HIPAA Business Associate Agreement] [Option (Include if HUB Subcontracting Plan was prepared in connection with Work covered by this Agreement.): EXHIBIT E – HUB Subcontracting Plan] [Option (Include if federal contract provisions are included in this Agreement.): EXHIBIT ___ – Affirmative Action Compliance Program] [Option: (Include if this Agreement relates to electronic and information resources, including hardware, software or related services.): EXHIBIT ___ – Environment Specifications] [Option: (Include if this Agreement relates to electronic and information resources, including hardware, software or related services.): EXHIBIT ___ – Security Characteristics and Functionality of Contractor’s Information Resources] [Option: (Include if Contractor will receive, create and/or maintain for or on behalf of University FERPA Data.): EXHIBIT ___ – FERPA Confidentiality and Security Addendum] [Option: (Include if Contractor will trigger GDPR provisions with the services provided to University or on behalf of University: EXHIBIT ____ – GDPR Data Protection Addendum] EXHIBIT A SCOPE OF WORK [Note: Provide a detailed description and break-down of all tasks Contractor is to perform and technical standards for the tasks, if appropriate.] EXHIBIT B SCHEDULE [Note: Describe specific time deadlines and due dates for each phase of Work and, if appropriate, for Work as a whole.] EXHIBIT C PAYMENT FOR SERVICES SERVICE FEES: [Note: Specify payment model. If the fee is not a stipulated lump sum, include a “not to exceed” fee cap amount.] Notwithstanding the foregoing, the cumulative amount of Service Fees remitted by University to Contractor will not exceed $_______________ (Fee Cap) without the prior written approval of University. In addition, total fees for each Phase of Work will not exceed the following specified amounts without the prior written approval of University: _________________ _________________ If University submits, in advance, a written request for additional services not contemplated or reasonably inferred by this Agreement, Contractor will be paid for actual hours incurred by Contractor’s personnel directly and solely in support of the additional services at the Rates provided above. [Note: Air Travel and Rental Car At this time, Contractor may not book air travel or rental car directly with travel vendors and obtain the State rates. If the UT institution books air travel and rental car for Contractor and pays the travel vendor directly (direct xxxx bill to UT), then the UT institution will receive the State rate for Contractor’s airfare and rental car. Hotel Reservations

Cybersecurity Training Program. If Contractor and/or its subcontractors, officers, or employees will have an account on a state computer system (for example, to access a database on that system), then pursuant to Section 2054.5192, Texas Government Code, Contractor and its subcontractors, officers, and employees must complete a cybersecurity training program certified under Section 2054.519, Texas Government Code and selected by the University. The cybersecurity training program must be completed by Contractor and its subcontractors, officers, and employees during the term and any renewal period of this Agreement. Contractor shall verify completion of the program to the University. University and Contractor have executed and delivered this Agreement to be effective as of the Effective Date. UNIVERSITY: CONTRACTOR: THE UNIVERSITY OF TEXAS HEALTH SCIENCE CENTER AT HOUSTON AUSTIN By: By: ___________________________ Name: ______________________________ Name: ________________________ Title: ______________________________ Title: __________________________ [Option (Include if Contractor is a corporation.): Attest: ________________________ Corporate Secretary] Attach: EXHIBIT A – Scope of Work EXHIBIT B – Schedule EXHIBIT C – Payment for Services [Option (Include if University is a HIPAA Covered Entity and Contractor will receive, create and/or maintain for or on behalf of University data covered by HIPAA.): EXHIBIT D – HIPAA Business Associate Agreement] [Option (Include if HUB Subcontracting Plan was prepared in connection with Work covered by this Agreement.): Agreement EXHIBIT E – HUB Subcontracting Plan] [Option (Include if federal contract provisions are included in this Agreement.): EXHIBIT ___ – Affirmative Action Compliance Program] [Option: (Include if this Agreement relates to electronic and information resources, including hardware, software or related services.): Plan EXHIBIT ___ – Environment Specifications] [Option: (Include if this Agreement relates to electronic and information resources, including hardware, software or related services.): Specifications EXHIBIT ___ – Security Characteristics and Functionality of Contractor’s Information Resources] [Option: (Include if Contractor will receive, create and/or maintain for or on behalf of University FERPA Data.): EXHIBIT ___ – FERPA Confidentiality and Security Addendum] [Option: (Include if Contractor will trigger GDPR provisions with the services provided to University or on behalf of University: Resources EXHIBIT ____ – GDPR Data Protection Addendum] Addendum EXHIBIT A SCOPE OF WORK [Note: Provide a detailed description and break-down of all tasks Contractor is to perform and technical standards for the tasks, if appropriate.] EXHIBIT B SCHEDULE [Note: Describe specific time deadlines and due dates for each phase of Work and, if appropriate, for Work as a whole.] EXHIBIT C PAYMENT FOR SERVICES SERVICE FEES: [Note: Specify payment model. If the fee is not a stipulated lump sum, include a “not to exceed” fee cap amount.] Notwithstanding the foregoing, the cumulative amount of Service Fees remitted by University to Contractor will not exceed $_______________ (Fee Cap) without the prior written approval of University. In addition, total fees for each Phase of Work will not exceed the following specified amounts without the prior written approval of University: _________________ _________________ If University submits, in advance, a written request for additional services not contemplated or reasonably inferred by this Agreement, Contractor will be paid for actual hours incurred by Contractor’s personnel directly and solely in support of the additional services at the Rates provided above. [NoteEXPENSES AND DISBURSEMENTS: Air Travel Contractor will be reimbursed without xxxx-up for reasonable expenses (including meals, rental car or mileage, coach class airfare, and Rental Car At this timelodging) validly incurred directly and solely in support of the Project and approved by University in advance. Provided, however, Contractor may not book air travel or rental car directly with travel vendors agrees and obtain acknowledges that Contractor will be subject to the then-current Travel Reimbursement Rates promulgated by the Comptroller of Public Accounts for the State ratesof Texas at xxxxx://xxx.xxx.xxxxx.xx.xx/fm/travel/travelrates.php with regard to meals, mileage. If Contractor agrees and acknowledges that Contractor will not be reimbursed by University for expenses that are prohibited or that exceed the UT institution books air travel allowable amounts provided in the then-current Travel Reimbursement Rates. As a condition precedent to receiving reimbursement for expenses and rental car disbursements, Contractor will submit to University receipts, invoices, and other documentation as requested University. Notwithstanding the foregoing, reimbursement for Contractor expenses and pays disbursements will not exceed a maximum of $_____________ (Expense Cap) without the travel vendor directly (direct xxxx prior written approval of University. The Fee Cap and the Expense Cap are sometimes collectively referred to UT), then as the UT institution will receive the State rate for Contractor’s airfare and rental carContract Amount. Hotel ReservationsEXHIBIT HUB SUBCONTRACTING PLAN EXHIBIT____ ENVIRONMENT SPECIFICATIONS EXHIBIT ____ SECURITY CHARACTERISTICS AND FUNCTIONALITY OF CONTRACTOR’S INFORMATION RESOURCES