Handling of Subscriber’s Data. “Subscriber’s Data” is any information, data, files, or software (but not, for the avoidance of doubt, any Contractor owned or licensed software) that is generated by Subscriber Endpoints and stored on those computer systems hosting the Services covered by this Agreement (“Contractor Systems”) in conjunction with the Services. Neither Execution Profile/Metric Data or Threat Actor Data are Subscriber’s Data. The Contractor must use due diligence to ensure computer and telecommunications systems and Services involved in storing, using, or transmitting Subscriber’s Data are secure and to protect that data from unauthorized disclosure, modification, or destruction. To accomplish this, the Contractor must comply with all applicable National Institute of Standards and Technology (“NIST”) standards for Moderate Impact systems and with respect to Contractor Systems:
Handling of Subscriber’s Data. “Subscriber’s Data” is any information, data, files, or software that a Subscriber uses or stores on or in conjunction with the Services, including but not limited to Generated Files. The Contractor must use due diligence to ensure computer and telecommunications systems and Services involved in storing, using, or transmitting Subscriber’s Data are secure and to protect that data from unauthorized disclosure, modification, or destruction. To accomplish this, the Contractor must comply with all applicable National Institute of Standards and Technology (“NIST”) standards for Moderate Impact systems and:
