Right of Review and Audit Upon request by the EA, Contractor shall provide the EA with copies of its policies and related procedures that pertain to the protection of PII. It may be made available in a form that does not violate Contractor’s own information security policies, confidentiality obligations, and applicable laws. In addition, Contractor may be required to undergo an audit of its privacy and security safeguards, measures and controls as it pertains to alignment with the requirements of New York State laws and regulations, the EA’s policies applicable to Contractor, and alignment with the NIST Cybersecurity Framework performed by an independent third party at Contractor’s expense, and provide the audit report to the EA. Contractor may provide the EA with a recent industry standard independent audit report on Contractor’s privacy and security practices as an alternative to undergoing an audit.
Judicial Review Any determination made by NYSERDA pursuant to this Exhibit that prevents the commencement of the time in which interest will be paid is subject to judicial review in a proceeding pursuant to Article 78 of the Civil Practice Law and Rules. Such proceedings shall only be commenced upon completion of the review procedure specified in Section 504.9 of this Exhibit or any other review procedure that may be specified in this Agreement or by other law, rule, or regulation.