Information Security Audits Sample Clauses

Information Security Audits. Contractor must contract with an independent third party to perform yearly information security audits of their primary and backup Data Centers. The annual audits must include an outside penetration/vulnerability test, and internal penetration and vulnerability tests with the third-party directly on the internal network. The summary results of the audits must be shared with the City. All audit findings must be remedied.
Sample 1Sample 2Sample 3See All (16)
AutoNDA by SimpleDocs
Information Security Audits. During the term of this Agreement, and for one (1) year following termination:
Sample 1Sample 2Sample 3See All (7)
Information Security Audits. During the term of this Agreement, and for one (1) year following termination Lender may provide prior written notice to Servicer or the intent to review the summary of the information security program, at Servicer’s Headquarters, upon reasonable notice of not less than 30 days.
Sample 1Sample 2
Information Security Audits. Contractor must contract with an independent third party to perform yearly information security audits of their primary and backup Data Centers. The annual audits must include an outside penetration/vulnerability test, and internal penetration and vulnerability tests with the third-party directly on the internal network. The summary results of the audits must be shared with the City. All audit findings must be remedied. Audit Findings. Contractor shall implement reasonably required safeguards as identified by City or by any audit of Contractor’s data privacy and information security program. Protected Health Information. Contractor, all subcontractors, all agents and employees of Contractor, and any subcontractor shall comply with all federal and state laws regarding the transmission, storage and protection of all private health information disclosed to Contractor by City in the performance of this Agreement. Contractor agrees that any failure of Contactor to comply with the requirements of federal and/or state and/or local privacy laws shall be a material breach of the Contract. In the event that the City pays a regulatory fine, and/or is assessed civil penalties or damages through private rights of action, based on an impermissible use or disclosure of protected health information given to Contractor or its subcontractors or agents by City, Contractor shall indemnify City for the amount of such fine or penalties or damages, including costs of notification. In such an event, in addition to any other remedies available to it under equity or law, the City may terminate the Agreement.
Sample 1Sample 2
Information Security Audits. The Contractor must contract with a third -party to perform a yearly Information Security Audits of their primary and backup datacenter. All findings must be remedied. Included must be an outside penetration/vulnerability test as well as putting the third-party directly on the internal network for the third-party to provide internal penetration and vulnerability tests. The summary results of the audits must be shared with the City. Audit Findings. Contractor shall implement reasonably required safeguards as identified by City or by any audit of Contractor’s data privacy and information security program. Payment Card Industry (“PCI”) Requirements. Contractors providing services and products that handle, transmit or store cardholder data, are subject to the following requirements: Applications shall be compliant with the Payment Application Data Security Standard (PA-DSS) and validated by a Payment Application Qualified Security Assessor (PA-QSA). A Contractor whose application has achieved PA-DSS certification must then be listed on the PCI Councils list of PA-DSS approved and validated payment applications. Gateway providers shall have appropriate Payment Card Industry Data Security Standards (PCI DSS) certification as service providers (xxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/xxxxx.xxxxx). Compliance with the PCI DSS shall be achieved through a third-party audit process. The Contractor shall comply with Visa Cardholder Information Security Program (CISP) and MasterCard Site Data Protection (SDP) programs. For any Contractor that processes PIN Debit Cards, payment card devices supplied by Contractor shall be validated against the PCI Council PIN Transaction Security (PTS) program. For items 11.4.1 to 11.4.3 above, Contractor shall provide a letter from their qualified security assessor (QSA) affirming their compliance and current PCI or PTS compliance certificate. Contractor shall be responsible for furnishing City with an updated PCI compliance certificate 30 calendar days prior to its expiration. Bank Accounts. Collections that represent funds belonging to the City and County of San Francisco shall be deposited, without detour to a third-party’s bank account, into a City and County of San Francisco bank account designated by the Office of the Treasurer and Tax Collector.
Sample 1
Information Security Audits. Provider shall procure no less than annual security audits of their data centers by an independent third party. Such audits shall meet or exceed SAS 70 Type II standards as the same may be amended, modified, supplemented, or superseded from time to time. In addition, Provider shall also conduct such audits as may be required to maintain compliance with Section 8.8 (Cardholder Information) hereto. Provider shall promptly provide T-Mobile with the results of each such audit; including (a) whether the audit revealed any material vulnerabilities, inadequacies, or insufficiencies in or breaches of Safeguards or otherwise in any Facilities; and (b) if so, the nature of each such vulnerability, inadequacy, insufficiency or breach discovered. If the audit reveals one or more material vulnerabilities, Provider shall, within thirty (30) days, correct each such vulnerability inadequacy, insufficiency or breach at its sole cost and expense and provide written certification to T-Mobile that it has corrected all such vulnerabilities inadequacies, insufficiencies or breaches.
Sample 1
Information Security Audits. Provider shall procure no less than annual security audits of the Facilities by an independent third party. Such audits shall meet or exceed SAS 70 Type II standards no later than December, 2008. In addition, Provider shall also conduct such audits as may be required to maintain compliance with Section 7.1.8. Provider shall promptly provide T-Mobile with the results of each such audit; including (a) whether the audit revealed any material vulnerabilities in Safeguards or otherwise in any Facilities; and (b) if so, the nature of each vulnerability discovered. If the audit reveals one or more material vulnerabilities, Provider shall, within thirty (30) days, correct each such vulnerability at its sole cost and expense and provide written certification to T-Mobile that it has corrected all such vulnerabilities.
Sample 1
AutoNDA by SimpleDocs
Information Security Audits. Contractor will provide PCI Level 4 attestation for any Point-of-Sale systems owned and installed by Contractor on-site at customer sites.
Sample 1
Information Security Audits. If Contractor will be hosting data on behalf of the City, Contractor must contract with an independent third-party to perform yearly information security audits of their primary and backup Data Centers. The annual audits must include an outside penetration/vulnerability test, and internal penetration and vulnerability tests with the third-party directly on the internal network. The summary results of the audits must be shared with the City. All audit findings must be remedied.
Sample 1

Related to Information Security Audits

  • Information Security IET information security management practices, policies and regulatory compliance requirements are aimed at assuring the confidentiality, integrity and availability of Customer information. The UC Xxxxx Cyber-safety Policy, UC Xxxxx Security Standards Policy (PPM Section 310-22), is adopted by the campus and IET to define the responsibilities and key practices for assuring the security of UC Xxxxx computing systems and electronic data.

  • Information Security Program (1) DTI shall implement and maintain a comprehensive written information security program applicable to the Personal Information ("Information Security Program") which shall include commercially reasonable measures, including, as appropriate, policies and procedures and technical, physical, and administrative safeguards that are consistent with industry standards, providing for (i) the security and confidentiality of the Personal Information, (ii) protection of the Personal Information against reasonably foreseeable threats or hazards to the security or integrity of the Personal Information, (iii) protection against unauthorized access to or use of or loss or theft of the Personal Information, and (iv) appropriate disposal of the Personal Information. Without limiting the generality of the foregoing, the Information Security Program shall provide for (i) continual assessment and re-assessment of the risks to the security of Personal Information acquired or maintained by DTI and its agents, contractors and subcontractors in connection with the Services, including but not limited to (A) identification of internal and external threats that could result in unauthorized disclosure, alteration or destruction of Personal Information and systems used by DTI and its agents, contractors and subcontractors, (B) assessment of the likelihood and potential damage of such threats, taking into account the sensitivity of such Personal Information, and (C) assessment of the sufficiency of policies, procedures, information systems of DTI and its agents, contractors and subcontractors, and other arrangements in place, to control risks; and (ii) appropriate protection against such risks. (2) The Information Security Program shall require encryption of any Personal Information in electronic format while in transit or in storage, and enhanced controls and standards for transport and disposal of physical media containing Personal Information. DTI shall, and shall require its agents, contractors and subcontractors who access or use Personal Information or Confidential Information to, regularly test key controls, systems and procedures relating to the Information Security Program ("ISP Tests"). DTI shall advise the Funds of any material issues identified in the ISP Tests potentially affecting the Information Security Program. (3) DTI shall comply with its Information Security Program.

  • Personal Information security breach Supplier/Service Provider’s Obligations a) The Supplier/Service Provider shall notify the Information Officer of Transnet, in writing as soon as possible after it becomes aware of or suspects any loss, unauthorised access or unlawful use of any personal data and shall, at its own cost, take all necessary remedial steps to mitigate the extent of the loss or compromise of personal data and to restore the integrity of the affected Goods/Services as quickly as is possible. The Supplier/Service Provider shall also be required to provide Transnet with details of the persons affected by the compromise and the nature and extent of the compromise, including details of the identity of the unauthorised person who may have accessed or acquired the personal data. b) The Supplier/Service Provider shall provide on-going updates on its progress in resolving the compromise at reasonable intervals until such time as the compromise is resolved. c) Where required, the Supplier/Service Provider may be required to notify the South African Police Service; and/or the State Security Agency and where applicable, the relevant regulator and/or the affected persons of the security breach. Any such notification shall always include sufficient information to allow the persons to take protective measures against the potential consequences of the compromise. d) The Supplier/Service Provider undertakes to co‑operate in any investigation relating to security which is carried out by or on behalf of Transnet including providing any information or material in its possession or control and implementing new security measures.

  • Background and Security Investigations 7.5.1 Each of Contractor’s staff performing services under this Contract, who is in a designated sensitive position, as determined by County in County's sole discretion, shall undergo and pass a background investigation to the satisfaction of County as a condition of beginning and continuing to perform services under this Contract. Such background investigation must be obtained through fingerprints submitted to the California Department of Justice to include State, local, and federal-level review, which may include, but shall not be limited to, criminal conviction information. The fees associated with the background investigation shall be at the expense of the Contractor, regardless of whether the member of Contractor’s staff passes or fails the background investigation. If a member of Contractor’s staff does not pass the background investigation, County may request that the member of Contractor’s staff be removed immediately from performing services under the Contract. Contractor shall comply with County’s request at any time during the term of the Contract. County will not provide to Contractor or to Contractor’s staff any information obtained through the County’s background investigation. 7.5.2 County, in its sole discretion, may immediately deny or terminate facility access to any member of Contractor’s staff that does not pass such investigation to the satisfaction of the County or whose background or conduct is incompatible with County facility access. 7.5.3 Disqualification of any member of Contractor’s staff pursuant to this Paragraph 7.5 shall not relieve Contractor of its obligation to complete all work in accordance with the terms and conditions of this Contract.

  • Information Regarding Collateral (a) Level 3 and the Borrower will furnish to the Collateral Agent prompt written notice of any change (i) in any Loan Party’s corporate name or in any trade name used to identify it in the conduct of its business or in the ownership of its properties, (ii) in any Loan Party’s identity or corporate structure or (iii) in any Loan Party’s Federal Taxpayer Identification Number. Each of Level 3 and the Borrower agrees not to effect or permit any change referred to in the preceding sentence unless all filings (or arrangements therefor satisfactory to the Collateral Agent) have been made under the Uniform Commercial Code or otherwise that are required in order for the Collateral Agent to continue at all times following such change to have a valid, legal and perfected security interest in all the Collateral. Each of Level 3 and the Borrower also agrees promptly to notify the Collateral Agent if any material portion of the Collateral is damaged or destroyed. (b) Each year, at the time of delivery of the certificate pursuant to paragraph (c) of Section 5.01, Level 3 shall deliver to the Collateral Agent certificates of an authorized officer of Level 3 (i) setting forth the information required pursuant to (A) the Annual Perfection Certificate and (B) until such time as the Collateral Permit Condition is satisfied with respect to Level 3 LLC, the Annual Loan Proceeds Note Perfection Certificate, or confirming that there has been no change in such information since the dates of the Effective Date Perfection Certificate or the Effective Date Loan Proceeds Note Perfection Certificate, as the case may be, or the date of the most recent certificates delivered pursuant to this Section and (ii) certifying that all Uniform Commercial Code financing statements (excluding fixture filings) or other appropriate filings, recordings or registrations, including all refilings, rerecordings and reregistrations, containing a description of the Collateral required to be set forth therein have been filed of record in each United States governmental, municipal or other appropriate office in each jurisdiction identified pursuant to clause (i) above to the extent necessary to perfect and continue the perfection of the security interests under the applicable Security Documents for a period of not less than 18 months after the date of such certificate (except as noted therein with respect to any continuation statements to be filed within such period).

  • Examination of Mortgage Loan Files and Due Diligence Review The Mortgage Loan Seller shall reasonably cooperate with any examination of the Mortgage Files for, and any other documents and records relating to, the Mortgage Loans, that may be undertaken by or on behalf of the Purchaser on or before the Closing Date. The fact that the Purchaser has conducted or has failed to conduct any partial or complete examination of any of the Mortgage Files for, and/or any of such other documents and records relating to, the Mortgage Loans, shall not affect the Purchaser’s right to pursue any remedy available in equity or at law for a breach of the Mortgage Loan Seller’s representations and warranties made pursuant to Section 4, except as expressly set forth in Section 5.

  • AUDITS AND INVESTIGATIONS 27.1 Each invoice paid by UNDP shall be subject to a post-payment audit by auditors, whether internal or external, of UNDP or by other authorized and qualified agents of UNDP at any time during the term of the Contract and for a period of three (3) years following the expiration or prior termination of the Contract. 27.2 UNDP may conduct investigations relating to any aspect of the Contract or the award thereof, the obligations performed under the Contract, and the operations of the Contractor generally relating to performance of the Contract at any time during the term of the Contract and for a period of three 27.3 The Contractor shall provide its full and timely cooperation with any such inspections, post- payment audits or investigations. Such cooperation shall include, but shall not be limited to, the Contractor’s obligation to make available its personnel and any relevant documentation for such purposes at reasonable times and on reasonable conditions and to grant to UNDP access to the Contractor’s premises at reasonable times and on reasonable conditions in connection with such access to the Contractor’s personnel and relevant documentation. The Contractor shall require its agents, including, but not limited to, the Contractor’s attorneys, accountants or other advisers, to reasonably cooperate with any inspections, post-payment audits or investigations carried out by UNDP hereunder. 27.4 UNDP shall be entitled to a refund from the Contractor for any amounts shown by such audits or investigations to have been paid by UNDP other than in accordance with the terms and conditions of the Contract. The Contractor also agrees that, where applicable, donors to UNDP whose funding is the source of, in whole or in part, the funding for the procurement of Goods and/or Services which are the subject of this Contract, shall have direct recourse to the Contractor for the recovery of any funds determined by UNDP to have been used in violation of or inconsistent with this Contract.

  • COMPLAINTS AND INVESTIGATIONS 1. This article applies to complaints or allegations made externally and not from normal supervisory activities. 2. A department head shall be responsible for ensuring that all allegations of misconduct or other complaints against an employee on which any action is to be taken or a record is to be made shall be investigated. The investigator shall be allowed to interview the complainant prior to notifying the employee.

  • Information Regarding the Collateral (a) Furnish to the Administrative Agent at least fifteen (15) days (or such shorter period as the Administrative Agent may agree) prior written notice of any change in: (i) any Loan Party’s legal name; (ii) the location of any Loan Party’s chief executive office, its principal place of business, any office in which it maintains books or records relating to Collateral owned by it or any office or facility at which Collateral owned by it is located (including the establishment of any such new office or facility, but excluding in-transit Collateral); (iii) any Loan Party’s organizational structure or jurisdiction of incorporation or formation; or (iv) any Loan Party’s Federal Taxpayer Identification Number or organizational identification number assigned to it by its state of organization. The Loan Parties shall not effect or permit any change referred to in the preceding sentence unless the Loan Parties have undertaken all such action, if any, reasonably requested by the Administrative Agent under the UCC or otherwise that is required in order for the Collateral Agent to continue at all times following such change to have a valid, legal and perfected first priority security interest in all the Collateral for its own benefit and the benefit of the other Credit Parties. (b) From time to time as may be reasonably requested by the Administrative Agent, the Lead Borrower shall supplement each Schedule hereto, or any representation herein or in any other Loan Document, with respect to any matter arising after the Restatement Effective Date that is required to be set forth or described in such Schedule or as an exception to such representation or that is necessary to correct any information in such Schedule or representation which has been rendered inaccurate thereby (and, in the case of any supplements to any Schedule, such Schedule shall be appropriately marked to show the changes made therein). Notwithstanding the foregoing, no supplement or revision to any Schedule or representation shall be deemed the Credit Parties’ consent to the matters reflected in such updated Schedules or revised representations nor permit the Loan Parties to undertake any actions otherwise prohibited hereunder or fail to undertake any action required hereunder from the restrictions and requirements in existence prior to the delivery of such updated Schedules or such revision of a representation; nor shall any such supplement or revision to any Schedule or representation be deemed the Credit Parties’ waiver of any Default resulting from the matters disclosed therein.

  • EXAMINATION OF MORTGAGE FILES AND DUE DILIGENCE REVIEW 3.1 Seller shall (i) deliver to Purchaser on or before the Closing Date a diskette acceptable to Purchaser that contains such information about the Mortgage Loans as may be reasonably requested by Purchaser, (ii) deliver to Purchaser on or before the Closing Date investor files (collectively the “Collateral Information”) with respect to the Mortgage Loans proposed to be included in the Issuing Entity and made available at Purchaser’s headquarters in New York, and (iii) otherwise cooperate fully with Purchaser in its examination of the credit files, underwriting documentation and Mortgage Files for the Mortgage Loans and its due diligence review of the Mortgage Loans. The fact that Purchaser has conducted or has failed to conduct any partial or complete examination of the credit files, underwriting documentation or Mortgage Files for the Mortgage Loans shall not affect the right of Purchaser or the Trustee to cause Seller to cure any Material Defect, or to repurchase or replace the defective Mortgage Loans pursuant to Section 5 hereof. 3.2 On or prior to the Closing Date, Seller shall allow representatives of Purchaser and any designees thereof to examine and audit all books, records and files pertaining to the Mortgage Loans, Seller’s underwriting procedures and Seller’s ability to perform or observe all of the terms, covenants and conditions of this Agreement. Such examinations and audits shall take place upon reasonable prior advance notice at one or more offices of Seller during normal business hours and shall not be conducted in a manner that is disruptive to Seller’s normal business operations. In the course of such examinations and audits, Seller will make available to such representatives of Purchaser and any designees thereof reasonably adequate facilities, as well as the assistance of a sufficient number of knowledgeable and responsible individuals who are familiar with the Mortgage Loans and the terms of this Agreement, and Seller shall cooperate fully with any such examination and audit in all material respects. On or prior to the Closing Date, Seller shall provide Purchaser with all material information regarding Seller’s financial condition and access to knowledgeable financial or accounting officers for the purpose of answering questions with respect to Seller’s financial condition, financial statements as provided to Purchaser or other developments affecting Seller’s ability to consummate the transactions contemplated hereby or otherwise affecting Seller in any material respect. Within forty-five (45) days after the Closing Date, Seller shall provide the Master Servicer with any additional information identified by the Master Servicer as necessary to complete the CREFC® Property File, to the extent that such information is available to Seller. 3.3 Purchaser may exercise any of its rights hereunder through one or more designees or agents, provided Purchaser has provided Seller with prior notice of the identity of such designee or agent. 3.4 Purchaser shall keep confidential any information regarding Seller and, to the extent required pursuant to the terms of the Pooling and Servicing Agreement, the Mortgage Loans that has been delivered into Purchaser’s possession and that is not otherwise publicly available; provided, that such information shall not be kept confidential (and the right to require confidentiality under any confidentiality agreement is hereby waived) to the extent Purchaser deems such information necessary and appropriate or required to be included in the Preliminary Memorandum, the Final Memorandum, the Preliminary Prospectus, the Prospectus (as defined in the Pooling and Servicing Agreement) or any other disclosure document relating to the Certificates or Purchaser is required by law or court order to disclose such information. If Purchaser is required or otherwise deems it necessary and appropriate to disclose in the Preliminary Prospectus, the Preliminary Memorandum, the Final Memorandum, the Prospectus or any other disclosure document relating to the Certificates confidential information regarding Seller as described in the preceding sentence, Purchaser shall provide to Seller a copy of the proposed form of such disclosure prior to making such disclosure and Seller shall promptly, and in any event within two (2) Business Days, notify Purchaser of any inaccuracies therein, in which case Purchaser shall modify such form in a manner that corrects such inaccuracies. If Purchaser is required by law or court order to disclose confidential information regarding Seller as described in the second preceding sentence, Purchaser shall notify Seller and cooperate in Seller’s efforts to obtain a protective order or other reasonable assurance that confidential treatment will be accorded such information and, if in the absence of a protective order or such assurance, Purchaser is compelled as a matter of law to disclose such information, Purchaser shall, prior to making such disclosure, advise and consult with Seller and its counsel as to such disclosure and the nature and wording of such disclosure and Purchaser shall use reasonable efforts to obtain confidential treatment therefor. Notwithstanding the foregoing, if reasonably advised by counsel that Purchaser is required by a regulatory agency or court order to make such disclosure immediately, then Purchaser shall be permitted to make such disclosure without prior review by Seller and shall give Seller prompt notice of such disclosure.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!