Common use of Information Security Management Clause in Contracts

Information Security Management. 15.1 The Provider shall provide the Administering Authority with either: 15.1.1 such evidence as the Administering Authority may reasonably require that the Provider has been certified and continues to be certified ISO 27001 Information Security Management compliant; or 15.1.2 a valid Cyber Essentials Scheme Basic Certificate, as a condition for the award of a contract(s) under this DPS Agreement. 15.2 Where the Provider continues to process Cyber Essentials Scheme Data during the Term or the contract period of any Contract the Provider shall deliver to the Administering Authority evidence of renewal of a valid Cyber Essentials Scheme Basic Certificate on each anniversary of the first applicable certificate obtained by the Provider under Clause 15.1 (Information Security Management). 15.3 In the event that the Provider fails to comply with Clauses 15.1 or 15.2 (Information Security Management), the Administering Authority reserves the right to terminate this DPS Agreement for material Default.