INFORMATION SECURITY RESPONSIBILITIES Clause Samples
The INFORMATION SECURITY RESPONSIBILITIES clause defines the obligations of parties to protect sensitive data and maintain secure information systems. Typically, it outlines specific measures such as implementing access controls, following data encryption standards, and reporting security breaches promptly. This clause ensures that all parties understand and adhere to best practices for information security, thereby reducing the risk of data breaches and safeguarding confidential information.
INFORMATION SECURITY RESPONSIBILITIES. In addition to any personnel security responsibilities covered under HHSAR 352.239- 72, the contractor shall comply with the below personnel security responsibilities:
a. In accordance with Paragraph (h) of HHSAR 352.239-72, the Contractor shall notify the Contracting officer and the COR within five working days before a new employee assumes a position that requires access to HHS information systems or data, or when an employee with such access stops working on this contract. The Government will initiate a background investigation on new employees assuming a position that requires access to HHS information systems or data, and will stop pending background investigations for employees that no longer work under the contract or no longer have such access.
b. New contractor employees who have or will have access to HHS information systems or data: The Contractor shall provide the COR with the name, position title, e– mail address, and phone number of all new contract employees working under the contract and provide the name, position title and position sensitivity level held by the former incumbent. If an employee is filling a new position, the Contractor shall provide a position description and the Government will determine the appropriate position sensitivity level.
INFORMATION SECURITY RESPONSIBILITIES. Provider must have roles with clearly defined responsibilities for the administration of the Information Security Management System.
INFORMATION SECURITY RESPONSIBILITIES. NTICO has dedicated roles with clearly defined responsibilities for the administration of the information security management system.