INFORMATION SECURITY GOVERNANCE. 5.1 The Reseller will:
INFORMATION SECURITY GOVERNANCE. Information security management is a critical area that requires central intervention and governance. The Chief Information Security Officer will provide leadership, guidance and direction for enterprise-wide governance of information security management at Manulife Financial. The Information Security Office has the authority to define, and periodically modify information security standards, guidelines and processes, which support this Policy. They form part of the overall INFORMATION SECURITY MANAGEMENT PROGRAM (see the DATABASE) to enable compliance to this Policy. INFORMATION SECURITY MANAGEMENT PROGRAM KEY ELEMENTS OF THE PROGRAM The key elements of the Information Security Management Program are as follows:
INFORMATION SECURITY GOVERNANCE. Empower employs Information Security Governance through its IT Security Board’s implementation of IT control standards and policies such as data classification, security awareness training, risk assessment, and risk analysis to identify the threats, classify assets, and rate their risks so that effective security controls can be implemented. In connection with its Services hereunder and as part of its Information Security Governance, Empower maintains stringent Information Security Policies which mandate the secure protection of Participant data. Empower personnel must complete initial privacy training at the time they are first employed with Empower and annually thereafter. All personnel attest annually to Empower’s Code of Business Conduct and Ethics, which enforces the tenets of the Information Security Policies.
INFORMATION SECURITY GOVERNANCE. Signicat shall have a documented Information Security Management System (ISMS) aligned with ISO 27001:2013 (or subsequent versions), or a set of policies to that effect, and Signicat shall, prior to entering into this Contract and subsequently upon Customer request and reasonable advance notice, provide documentation thereof to the Customer. The ISMS, or set of policies, shall have top level management commitment. Signicat shall have a documented risk management process, with supporting procedures and controls that are effective and operational.
INFORMATION SECURITY GOVERNANCE. As detailed in this Exhibit C, Partner will implement organizational, personnel, physical, and technical measures and controls designed to ensure the security and confidentiality of Personal Information and to prevent accidental, unauthorized, or unlawful destruction, alteration, disclosure, use, or access of Personal Information. Partner is responsible for compliance with the Security Measures by all of Partner’s directors, officers, and employees (“Partner Personnel”).
INFORMATION SECURITY GOVERNANCE. The information security function within Data Importer reports directly to a company executive. • A Security and Privacy Steering Committee made up of representatives from business, information security, and privacy meets regularly to discuss and review information security policies, projects, and practices. • A comprehensive set of information security policies and standards are documented, approved, and regularly reviewed. • Personnel with access to Personal Data are subject to confidentiality obligations.
