Incident Remediation. Provider, at its sole cost and expense, shall be responsible for determining the cause of an Incident, and for producing a remediation plan to reduce the risk of a similar Incident in the future. Provider shall present its analysis and remediation plan to the State within ten (10) days of notifying the State of an Incident. The State reserves the right to adjust this plan, in its sole discretion. If Provider cannot produce its analysis and plan within the allotted time, the State or an independent third-party engaged by the State, in the State’s sole discretion, may perform such analysis and produce a remediation plan, and Provider shall timely reimburse the State for the reasonable costs thereof. In any case where Provider has an issue with Provider’s system providing information to the state tracking system via the API, Provider will furnish a written plan to the State within 48 hours showing the affected Licensees with a remediation plan addressing how the issue will be resolved and information corrected.
Incident Remediation. 5.1 Upon becoming aware of an Incident, Vendor shall Mitigate or Remediate any Incident within 48 hours from the time Vendor becomes aware of the Incident. With respect to Incidents that are Mitigated (but not Remediated), Vendor shall Remediate such Incidents within five business days after being Mitigated. If Vendor fails to Mitigate or Remediate any Incident within the required timeframe: (a) such failure shall be deemed a material breach of this Agreement; and (b) City may immediately terminate this Agreement or Vendor’s access to City Information, including any system interfaces, connectors, or links without cost or penalty, and Vendor shall not be relieved of its obligation to continue to provide services under this Agreement, except to the extent such services are directly impacted by the termination of access.
Incident Remediation. Contractor shall be responsible for determining the cause of an Incident, and for producing a remediation plan to reduce the risk of incurring a similar type of breach in the future. Contractor shall present its analysis and remediation plan to the State within ten (10) days of notifying the State of an Incident. The State reserves the right to adjust this plan, in its sole discretion. If Contractor cannot produce its analysis and plan within the allotted time, the State, in its sole discretion, may perform such analysis and produce a remediation plan, and Contractor shall reimburse the State for the reasonable costs thereof.
Incident Remediation. Upon becoming aware of a Security Incident, Vendor will assign a severity level (i.e., High Severity, Medium Severity or Low Severity) based on the definitions set forth in this Exhibit. Vendor will reclassify the Severity Level of any Security Incident upon Customer’s reasonable request. Vendor will Mitigate or Remediate any High Severity Security Incident within [***] from the time Vendor becomes aware of the incident. Vendor will Mitigate or Remediate any Medium Severity or Low Severity Security Incident within [***] from the time Vendor becomes aware of the incident. With respect to Security Incidents that are Mitigated (but not Remediated), Vendor must Remediate such Security Incidents within [***] after being Mitigated (in the case of High Severity incidents) and [***] after being Mitigated (in the case of Medium Severity incidents), and [***] after being Mitigated (in the case of Low Severity incidents). If Vendor fails to Mitigate or Remediate any Security Incident within the required timeframe: [***].
Incident Remediation. Third party point of sale software vendor, at its sole cost, shall be responsible for determining the cause of an Incident, and for producing a remediation plan to reduce the risk of a similar Incident in the future. Third party point of sale software vendor shall present its analysis and remediation plan to the State within ten (10) days of notifying the State of an Incident. The State reserves the right to adjust this plan, in its sole discretion. If Third party point of sale software vendor cannot produce its analysis and plan within the allotted time, the State, in its sole discretion, may perform such analysis and produce a remediation plan, and Third party point of sale software vendor shall timely reimburse the State for the reasonable costs thereof.
