ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 6 contracts
Samples: Call Off Contract, Call Off Contract, Call Off Order Form and Call Off Terms for Goods and/or Services (Non Ict)
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 of this Call Off Contract Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 3 contracts
Samples: Contract Order Form and Contract Terms, Contract Order Form and Contract Terms for Goods and/or Services (Non Ict), Contract Order Form and Contract Terms
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 101.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 3 contracts
Samples: Call Off Contract, Call Off Contract, Call Off Contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 105.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 3 contracts
Samples: Call Off Contract, Call Off Agreement, Call Off Contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 16.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 2 contracts
Samples: Call Off Terms for Services, Call Off Terms for Services
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 5.35 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 2 contracts
Samples: Call Off Contract, Call Off Contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 83.35 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 5.35 of this Call Off Lease Agreement Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Lease Agreement
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 32.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Call Off Contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 6.35 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Call Off Contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 7.2 of this Call Off Contract Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Contract Order Form and Contract Terms for Goods and/or Services (Non Ict)
ISMS COMPLIANCE. The Customer Contracting Authority shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the CustomerContracting Authority's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer Contracting Authority shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer Contracting Authority shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 7.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer Contracting Authority in obtaining such audit.
Appears in 1 contract
Samples: Framework Agreement
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 104.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Call Off Contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 78.35 of this Call Off Contract Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Contract Order Form
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 95.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Call Off Contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Call Off Contract
ISMS COMPLIANCE. The Customer shall be entitled to carry out such security audits as it may reasonably deem necessary in order to ensure that the ISMS maintains compliance with the principles and practices of ISO 27001 and/or the Security Policy. If, on the basis of evidence provided by such security audits, it is the Customer's reasonable opinion that compliance with the principles and practices of ISO/IEC 27001 and/or the Security Policy are not being achieved by the Supplier, then the Customer shall notify the Supplier of the same and give the Supplier a reasonable time (having regard to the extent and criticality of any non-compliance and any other relevant circumstances) to implement and remedy. If the Supplier does not become compliant within the required time then the Customer shall have the right to obtain an independent audit against these standards in whole or in part. If, as a result of any such independent audit as described in paragraph 102.2 107.2 of this Call Off Schedule 7 the Supplier is found to be non-compliant with the principles and practices of ISO/IEC 27001 and/or the Security Policy then the Supplier shall, at its own expense, undertake those actions required in order to achieve the necessary compliance and shall reimburse in full the costs incurred by the Customer in obtaining such audit.
Appears in 1 contract
Samples: Call Off Contract