INFORMATION SYSTEMS ACTIVITY REVIEW PROCEDURES Sample Clauses

INFORMATION SYSTEMS ACTIVITY REVIEW PROCEDURES. 1.4.1. Maintain activity logs from the following Cloud hosted systems that contain transmitted ePHI: ● Amazon AWS ● Heroku 1.4.2. The AliveCor application software shall encrypt all ePHI, per these Information Systems Activity Review procedures. ● For the Alivecor ECG recordings from customers, the communication between the hardware and software is through the mobile computing platform (MCP) microphone, the software for which is controlled by a microphone application program interface (API). This communication occurs directly and it is impossible for a third-party app or malware to inject data into this pathway without the user maliciously providing application root (superuser) access. ● The MCP operating systems on which the AliveCor application software is used is designed to prevent applications from interacting with one another. In the event that malicious software was loaded onto the same MCP as the AliveCor application, it should not be able to impact its functionality. 1.4.3. AliveCor shall implement the following cybersecurity measures for its application software: ● The AliveCor application software shall encrypt the transmitting of the customer passwords. ● All data stored on the MCP shall be encrypted using native hardware encryption. ● Metadata, including patient information, shall be stored in a local database which is inaccessible to other users. ● This local storage database is encrypted if backed up in iTunes or iCloud and while at rest in a locked device. ● Communication between the MCP and Heroku cloud server shall use transport layer security (TLS 1.1 or 1.2 or better) to establish a secure link with cloud servers and to encrypt data in transit, such as customer passwords and customer ECG data. ● Analyze security of our site’s SSL certificate configuration biannually (twice per year) using publicly available server testers, such as the Qualys SSL Server Test, xxxxx://xxx.xxxxxxx.xxx/ssltest/.
AutoNDA by SimpleDocs

Related to INFORMATION SYSTEMS ACTIVITY REVIEW PROCEDURES

  • Information Systems The Customer is aware that vehicles manufactured, supplied or marketed by a company within the Volvo Group are equipped with one or more systems which may gather and store information about the vehicle (the “Information Systems”), including but not limited to information relating to vehicle condition and performance and information relating to the operation of the vehicle (together, the “Vehicle Data”). The Customer agrees not to interfere with the operation of the Information System in any way.

  • Review Systems; Personnel It will maintain business process management and/or other systems necessary to ensure that it can perform each Test and, on execution of this Agreement, will load each Test into these systems. The Asset Representations Reviewer will ensure that these systems allow for each Review Receivable and the related Review Materials to be individually tracked and stored as contemplated by this Agreement. The Asset Representations Reviewer will maintain adequate staff that is properly trained to conduct Reviews as required by this Agreement.

  • Information Services Traffic 5.1 For purposes of this Section 5, Voice Information Services and Voice Information Services Traffic refer to switched voice traffic, delivered to information service providers who offer recorded voice announcement information or open vocal discussion programs to the general public. Voice Information Services Traffic does not include any form of Internet Traffic. Voice Information Services Traffic also does not include 555 traffic or similar traffic with AIN service interfaces, which traffic shall be subject to separate arrangements between the Parties. Voice Information services Traffic is not subject to Reciprocal Compensation charges under Section 7 of the Interconnection Attachment. 5.2 If a D&E Customer is served by resold Verizon Telecommunications Service or a Verizon Local Switching UNE, subject to any call blocking feature used by D&E, to the extent reasonably feasible, Verizon will route Voice Information Services Traffic originating from such Service or UNE to the Voice Information Service platform. For such Voice Information Services Traffic, unless D&E has entered into an arrangement with Verizon to xxxx and collect Voice Information Services provider charges from D&E’s Customers, D&E shall pay to Verizon without discount the Voice Information Services provider charges. D&E shall pay Verizon such charges in full regardless of whether or not it collects such charges from its own Customers. 5.3 D&E shall have the option to route Voice Information Services Traffic that originates on its own network to the appropriate Voice Information Services platform(s) connected to Verizon’s network. In the event D&E exercises such option, D&E will establish, at its own expense, a dedicated trunk group to the Verizon Voice Information Service serving switch. This trunk group will be utilized to allow D&E to route Voice Information Services Traffic originated on its network to Verizon. For such Voice Information Services Traffic, unless D&E has entered into an arrangement with Verizon to xxxx and collect Voice Information Services provider charges from D&E’s Customers, D&E shall pay to Verizon without discount the Voice Information Services provider charges. 5.4 D&E shall pay Verizon such charges in full regardless of whether or not it collects charges for such calls from its own Customers. 5.5 For variable rated Voice Information Services Traffic (e.g., NXX 550, 540, 976, 970, 940, as applicable) from D&E Customers served by resold Verizon Telecommunications Services or a Verizon Local Switching Network Element, D&E shall either (a) pay to Verizon without discount the Voice Information Services provider charges, or (b) enter into an arrangement with Verizon to xxxx and collect Voice Information Services provider charges from D&E’s Customers. 5.6 Either Party may request the other Party provide the requesting Party with non discriminatory access to the other party’s information services platform, where such platform exists. If either Party makes such a request, the Parties shall enter into a mutually acceptable written agreement for such access. 5.7 In the event D&E exercises such option, D&E will establish, at its own expense, a dedicated trunk group to the Verizon Information Service serving switch. This trunk group will be utilized to allow D&E to route information services traffic originated on its network to Verizon.

  • Review Systems The Asset Representations Reviewer will maintain and utilize an electronic case management system to manage the Tests and provide systematic control over each step in the Review process and ensure consistency and repeatability among the Tests.

  • Review Procedures a. In consultation with the Illinois SHPO, NRCS shall identify those undertakings with little to no potential to affect historic properties and list those undertakings in Appendix A. Upon the determination by the CRS that a proposed undertaking is included in Appendix A, the NRCS is not required to consult further with the SHPO for that undertaking. A list of undertakings with the potential to affect historic properties comprises Appendix B. b. The lists of undertakings provided in Appendices A and B may be modified through consultation and written agreement between the NRCS State Conservationist and the SHPO without requiring an amendment to this Illinois Prototype Agreement. The NRCS State Office will maintain the master list and will provide an updated list to all consulting parties with an explanation of the rationale for classifying the practices accordingly. c. Undertakings identified in Appendix B shall require further review as outlined in Stipulation V. a. The NRCS shall consult with the SHPO to define the undertaking’s APE, identify and evaluate historic properties that may be affected by the undertaking, assess potential effects, and identify strategies for resolving adverse effects prior to implementing the undertaking. 1) NRCS may provide its proposed APE, identification of historic properties and/or scope of identification efforts, and assessment of effects in a single transmittal to the SHPO, provided this documentation meets the substantive standards in 36 CFR Part 800.4-5 and 800.11. 2) The NRCS shall attempt to avoid adverse effects to historic properties whenever possible; where historic properties are located in the APE, NRCS shall describe how it proposes to modify, buffer, or move the undertaking to avoid adverse effects to historic properties. 3) Where the NRCS proposes a finding of "no historic properties affected" or "no adverse effect" to historic properties, the SHPO shall have 30 calendar days from receipt of this documented description and information to review it and provide comments. The NRCS shall take into account all timely comments. i. If the SHPO, or another consulting party, disagrees with NRCS' findings and/or determination, it shall notify the NRCS within the thirty (30) calendar daytime period. The NRCS shall consult with the SHPO or other consulting party to attempt to resolve the disagreement. If the disagreement cannot be resolved through this consultation, NRCS shall follow the dispute resolution process in Stipulation VIII below. ii. If the SHPO does not respond to the NRCS within the thirty (30) calendar day period and/or the NRCS receives no objections from other consulting parties, or if the SHPO concurs with the NRCS' determination and proposed actions to avoid adverse effects, the NRCS shall document the concurrence/lack of response within the review time noted above and may move forward with the undertaking. 4) Where a proposed undertaking may adversely affect historic properties, NRCS shall describe proposed measures to minimize or mitigate the adverse effects, and follow the process in 36 CFR Part 800.6, including consultation with other consulting patties and notification to the ACHP, to develop a Memorandum of Agreement to resolve the adverse effects. Should the proposed undertaking have the potential to adversely affect a known NHL, the NRCS shall, to the maximum extent possible, undertake such planning and actions that may be necessary to minimize harm to the NHL in accordance with 54 U.S.C. § 306107 of the NHPA and 36 CFR Part 800.6 and 800.10, including consultation with the ACHP and respective National Park Service, Regional National Historic Landmark Program Coordinator, to develop a Memorandum of Agreement. d. NRCS will conduct archaeological surveys and will submit reports and other documentation to SHPO for review and comment. When no archaeological sites have been located by the archaeological survey, NRCS may proceed with the proposed undertaking. Reports for negative surveys must be submitted to SHPO on a quarterly basis. All positive and negative reports submitted to SHPO will be sent digitally for submission to the Inventory of Illinois Archaeological Sites (IAS) data file maintained by staff at the Illinois State Museum (ISM) housed under the Illinois Department of Natural Resources (IDNR). The NRCS further agrees that access to specific site location data will be restricted to the CRS, the NRCS field personnel installing conservation practices adjacent to the cultural resource, and the landowner. Specific site location information for individual projects will be maintained in a secure cultural resources file kept in the field offices and will not be available to the public. e. Curation: NRCS personnel will not collect artifactual material during routine field inspections. However, if a professional survey, evaluation testing, or mitigation is required, NRCS shall ensure that all materials and records resulting from cultural resources surveys or data recovery activities on federal or state property are curated by the Illinois State Museum. The NRCS shall ensure that all records resulting from cultural resource surveys or data recovery activities on private property are curated by the Illinois State Museum or an equivalent curation facility in accordance with 36 CFR Part 79. Subject to the landowner's permission, all objects resulting from cultural resources surveys or data recovery activities are maintained by the Illinois State Museum or equivalent research institution until their analysis is complete and they are returned to their owner(s). Although landowners will be encouraged to donate artifactual material, it is understood that objects collected on private land remain the property of the landowner(s) unless the landowner(s) donates the material to the Illinois State Museum or equivalent research institution. This excludes burial goods, as stipulated by XXXXXX.

  • Safety Procedures The Contractor shall: (a) comply with all applicable safety regulations according to Attachment H; (b) take care for the safety of all persons entitled to be on the Site; (c) use reasonable efforts to keep the Site and Works clear of unnecessary obstruction so as to avoid danger to these persons; (d) provide fencing, lighting, guarding and watching of the Works until completion and taking over under clause 10 [Employer's Taking Over]; and (e) provide any Temporary Works (including roadways, footways, guards and fences) which may be necessary, because of the execution of the Works, for the use and protection of the public and of owners and occupiers of adjacent land.

  • Information Services The Custodian may rely upon information received from issuers of Securities or agents of such issuers, information received from Subcustodians or depositories, information from data reporting services that provide detail on corporate actions and other securities information, and other commercially reasonable industry sources; and, provided the Custodian has acted in accordance with the standard of care set forth in Section 6 (a), the Custodian shall have no liability as a result of relying upon such information sources, including but not limited to errors in any such information.

  • Enterprise Information Management Standards Grantee shall conform to HHS standards for data management as described by the policies of the HHS Office of Data, Analytics, and Performance. These include, but are not limited to, standards for documentation and communication of data models, metadata, and other data definition methods that are required by HHS for ongoing data governance, strategic portfolio analysis, interoperability planning, and valuation of HHS System data assets.

  • OVERSIGHT SERVICES Oversight services for the Fund provided by Price Associates shall include all oversight of BNY Mellon, Delegates and service providers that provide accounting, administrative, and tax support services and not specifically provided for under each Fund’s Investment Management Agreement. Price Associates provides all accounting, administrative, tax and oversight services to the Funds listed on Exhibit A2, including the below. Accounting Services provided by Price Associates shall include, among other things: · oversight of quality control, including processing results related to fund accounting services provided by Delegates or other third party service providers relating to pricing. Such oversight includes, but is not limited to, review of (a) NAV calculations and fund valuations, (b) securities pricing and resolution of pricing exceptions, and (c) calculation and preparation of any financial information or schedules; · end-of-day INAV oversight for ETFs that provide INAV · determining accounting and valuation policies, instructing Delegates and/or other service providers, and/or providing it with such advice that may be reasonably necessary, to properly account for all financial transactions and to maintain the Fund’s accounting procedures and records so as to ensure compliance with generally accepted accounting principles and tax practices and rules; and · calculating and authorizing expense accruals and payments; annual fund expense budgets; accrual analysis; rollforward calculations; payment of expenses; fees for payment to service providers; · facilitating on behalf of the Fund resolution and remediation of fund accounting issues escalated by Delegates and/or other service providers; · preparing daily NAV calculations, including all necessary component services such as valuation and particularly private company investment valuation, corporate actions processing, trade processing, and performing month-end and fiscal-period-end close processes; · recordkeeping as required; and · such other accounting services as agreed to by the parties not otherwise performed by Price Associates under the Investment Management Agreement. Administrative Services provided by Price Associates shall include, among other things: · ensuring maintenance for the Fund of all records that may be reasonably required in connection with the audit performed by the Fund’s independent registered public accountants, or by the Securities and Exchange Commission (“SEC”), the Internal Revenue Service (“IRS”) or such other Federal or state regulatory agencies; · cooperating with the Fund’s independent registered public accountants and taking all reasonable action in the performance of its obligations under the Agreement to assure that the necessary information is made available to such accountants for the expression of their opinion without any qualification as to the scope of their examination including, but not limited to, their opinion included in the Fund’s annual report on Form N-CSR and annual amendment to Form N-1A; · implementing and maintaining the systems, data storage and reporting necessary to perform services outlined herein; · all efforts concerning financial reporting services, including shareholder reports and financial information in regulatory filings; N-PORT and N-CEN; and other financial reporting services as necessary; · determining financial reporting policies, maintaining adequate controls over financial reporting to provide complete and accurate financial information and disclosures that are certified by officers of the Funds. Providing sub-certifications, as requested by officers of the Funds, for the adequacy of such controls and the completeness and accuracy of information included in Form N-CSR or any other form that may require certification; · periodic testing of Internal Revenue Code qualification requirements; · prepare and furnish fund performance information; · prepare and disseminate vendor survey information; · prepare and file Rule 24f-2 notices and payment; and · such other administrative services as agreed to by the parties, not otherwise performed by Price Associates under the Investment Management Agreement.

  • Procurement procedures 11.1 The Recipient must secure the best value for money and shall act in a fair, open and non-discriminatory manner in all purchases of goods and services.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!