General Information Security Requirements Sample Clauses

General Information Security Requirements a. Vendor must ensure appropriate segregation of duties exist for all job functions and roles performed by its employees and Agents to ensure that no individual, within or external to Vendor’s organization, has conflicting duties that could jeopardize Customer Information Assets. b. Customer Information Assets should not be divulged in any way to anyone without a specific valid business “need to know” and Customer written authorization. c. Access to all Customer Information Assets must: 1. adhere to the principle of “least privilege,” ensuring that only the most minimal level of access needed for a given job function of access is granted to Vendor’s employees and its Agents; 2. be restricted to only authorized personnel who have a specific business “need to know.” d. Computer services employed to view, host, store, process, transmit, print, back-up or destroy Customer Information Assets must adhere to the principle of “least privilege,” ensuring that only the most minimal level of access needed to perform processing is granted to these computer services. e. Hardware and software owned by Vendor personnel must not be allowed to connect to or interact with the Customer’s company network without: 1. an appropriately scoped risk assessment, including the identification of existing and compensating controls based upon the requirements within this Exhibit; 2. verification of the implementation of controls identified within the risk assessment; 3. obtained approvals of Customer IT Network Management and the appropriate Chief Information Officer of the enterprise or division of Customer involved. f. Vendor’s users should not be allowed to install their own personal software on Vendor Information Assets. Vendor portable devices that store, process, transmit or destroy Customer Information Assets, such as laptops, personal digital assistants, Blackberries®, smart phones, hand-held or palmtop computers, portable memory drives, and other similar portable devices must be configured to make use of industry standard encryption technology that fully protects these devices’ storage and transmission capabilities from unauthorized access.

General Information Security Requirements x. Xxxxx agrees to take reasonable measures to segregate job functions and roles performed by its employees or Agents to ensure that no individual, internal or external to Xxxxx, has conflicting duties that could jeopardize the security, integrity or availability of Customer Information Assets. Such measures may include, but are not limited to, permitting only Xxxxx employees or Agents with a “business need to know” to access and manage Customer Information Assets, providing the most minimal level of access needed to perform a given job function (the “principle of least privilege”). x. Xxxxx agrees to prohibit the installation of unauthorized or unlicensed software on Xxxxx Information Assets by its employees or Agents or to permit unauthorized connection to or interaction with Customer’s company network. b. To guard against unauthorized access, Xxxxx agrees to configure with industry standard encryption technology, its portable devices that store, process, transmit or destroy Customer Information Assets, such as, laptops, personal digital assistants, Blackberries®, smart phones, hand-held or palmtop computers, portable memory drives, and other similar portable devices.

General Information Security Requirements a. No employee of Contractor or its subcontractors will be granted access to State of Oklahoma agency information systems without the prior completion and approval of applicable logon authorization and acceptable use requests. b. Contractor or its subcontractors will notify applicable State of Oklahoma agencies when employees who have access to agency information systems are terminated. c. Contractor or its subcontractors will disclose to Client any suspected breach of the security of the information system or the data contained therein in the most expedient time possible and without unreasonable delay and will cooperate with Client during the investigation of any such incident. d. Contractor or its subcontractors agree to adhere to the State of Oklahoma “Information Security Policy, Procedures, and Guidelines” available at: xxxxx://xxxxxxxx.xxx/content/dam/ok/en/omes/documents/InfoSecPPG.pdf

General Information Security Requirements. Provider must provide a totally separate environment for Company, isolated from other customers/suppliers.

General Information Security Requirements. 1. The Partner shall appoint a member of its personnel to coordinate and manage information and technology security issues and processes related to the Cooperation. This employee shall act as primary contact person to DBG for any Information Security related matters. 2. The Partner warrants that its and client´s and its or its client´s customers’ or members’ IT- systems that are directly or indirectly interfacing with the IT-assets of CBL or any of its Affiliates use state of the art measures to protect such IT-systems against any viruses, worms, Trojan horses, rootkits, backdoors or other software, macros or information assets that could adversely affect any IT-assets or any services of CBL, its Affiliates or other CBL customers. 3. The Partner shall ensure that its IT systems and IT processes adequately and effectively ensure that the integrity, availability, authenticity, and confidentiality of DBG’s data is not adversely affected by the Partner’s access to DBG’s IT-assets or services.