Hosting Operations, Safety and Security. Supplier shall be responsible, at its own expense, for operating and maintaining the hosting environment. Supplier shall maintain and protect the hosting environment and all its other assets utilized in providing the Cloud Service to INTESA (including leased and licensed assets) in good condition and in such locations and configurations to be readily identifiable to INTESA or its designees. Supplier will not disclose Content other than to Supplier Personnel for use only to the extent needed to deliver the Cloud Service. Supplier will return or destroy Content upon the expiration or cancellation of the Cloud Service, or earlier upon INTESA’s request. Supplier warrants that it does and will maintain physical, technical, and administrative security procedures and practices equal to or better than industry security standards for ensuring protection of the Cloud Service, including Content stored therein, from unauthorized access, destruction, use, modification or disclosure. Upon request, Supplier will provide evidence of relevant compliance and accreditation, such as certificates or summary reports resulting from audits such as ISO, SSAE, or other industry good practices standards. In addition, and on request, Supplier shall provide INTESA with the most recent certifications and/or summary audit reports concerning the security measures for the Cloud Service or Supplier’s computing environment used to provide the Cloud Service.
