Access Controls The system providing access to PHI COUNTY discloses to 20 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 21 must use role based access controls for all user authentications, enforcing the principle of least privilege.
Laboratory a. Drug tests shall be conducted by laboratories licensed and approved by SAMSHA which comply with the American Occupational Medical Association (AOMA) ethical standards. Upon advance notice, the parties retain the right to inspect the laboratory to determine conformity with the standards described in this policy. The laboratory will only test for drugs identified in this policy. The City shall bear the cost of all required testing unless otherwise specified herein. b. Tests for all controlled substances, except alcohol, shall be by oral fluid testing and shall consist of two procedures, a screen test and, if that is positive, a confirmation test. c. To be considered positive for reporting by the laboratory to the City, both samples must be tested separately in separate batches and must also show positive results on the confirmatory test. d. In the event of a positive test, the testing laboratory will perform an automatic confirmation test on the original specimen at no cost to the Covered Employee. In addition, the testing laboratory shall preserve a sufficient specimen to permit an independent re-testing at the Covered Employee’s request and expense. The same, or any other, approved laboratory may conduct re-tests. The laboratory shall endeavor to notify the designated MRO of positive drug, alcohol, or adulterant tests results within five (5) working days after receipt of the specimen.
Trade Controls DXC and Supplier will comply with all applicable export, import and trade-related laws and regulations of the United States and other nations. To this effect, Supplier warrants that: (i) if necessary and upon DXC’s request, it will provide DXC with technical specifications concerning commodities, software, technology or services covered by this agreement sufficient for DXC to determine the appropriate export and import classification of such items under applicable regulations; (ii) to the best of the Supplier’s knowledge, the Supplier is not listed on any U.S. Government international trade sanctions lists and that Supplier will give immediate notice to DXC in the event that it is so listed; and
Audit Controls a. System Security Review. CONTRACTOR must ensure audit control mechanisms that record and examine system activity are in place. All systems processing and/or storing PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY must have at least an annual system risk assessment/security review which provides assurance that administrative, physical, and technical controls are functioning effectively and providing adequate levels of protection. Reviews should include vulnerability scanning tools.
Research Use Reporting To assure adherence to NIH GDS Policy, the PI agrees to provide annual Progress Updates as part of the annual Project Renewal or Project Close-out processes, prior to the expiration of the one (1) year data access period. The PI who is seeking Renewal or Close-out of a project agree to complete the appropriate online forms and provide specific information such as how the data have been used, including publications or presentations that resulted from the use of the requested dataset(s), a summary of any plans for future research use (if the PI is seeking renewal), any violations of the terms of access described within this Agreement and the implemented remediation, and information on any downstream intellectual property generated from the data. The PI also may include general comments regarding suggestions for improving the data access process in general. Information provided in the progress updates helps NIH evaluate program activities and may be considered by the NIH GDS governance committees as part of NIH’s effort to provide ongoing stewardship of data sharing activities subject to the NIH GDS Policy.
TIA Controls If any provision of this Indenture limits, qualifies, or conflicts with another provision which is required to be included in this Indenture by the TIA, the required provision shall control.
Export Controls Both Parties will adhere to all applicable laws, regulations and rules relating to the export of technical data and will not export or re-export any technical data, any products received from the other Party or the direct product of such technical data to any proscribed country listed in such applicable laws, regulations and rules unless properly authorized.
Technical Safeguards 1. USAC and DSS will process the data matched and any data created by the match under the immediate supervision and control of authorized personnel to protect the confidentiality of the data, so unauthorized persons cannot retrieve any data by computer, remote terminal, or other means. 2. USAC and DSS will strictly limit authorization to these electronic data areas necessary for the authorized user to perform their official duties. All data in transit will be encrypted using algorithms that meet the requirements of the Federal Information Processing Standard (FIPS) Publication 140-2 or 140-3 (when applicable). 3. Authorized system users will be identified by User ID and password, and individually tracked to safeguard against the unauthorized access and use of the system. System logs of all user actions will be saved, tracked and monitored periodically. 4. USAC will transmit data to DSS via encrypted secure file delivery system. For each request, a response will be sent back to USAC to indicate success or failure of transmission.
Administrative Controls The Contractor must have the following controls in place: a. A documented security policy governing the secure use of its computer network and systems, and which defines sanctions that may be applied to Contractor staff for violating that policy. b. If the Data shared under this agreement is classified as Category 4, the Contractor must be aware of and compliant with the applicable legal or regulatory requirements for that Category 4 Data. c. If Confidential Information shared under this agreement is classified as Category 4, the Contractor must have a documented risk assessment for the system(s) housing the Category 4 Data.
Studies The clinical, pre-clinical and other studies and tests conducted by or on behalf of or sponsored by the Company or its subsidiaries that are described or referred to in the Registration Statement, the Pricing Disclosure Package and the Prospectus were and, if still pending, are being conducted in accordance in all material respects with all statutes, laws, rules and regulations, as applicable (including, without limitation, those administered by the FDA or by any foreign, federal, state or local governmental or regulatory authority performing functions similar to those performed by the FDA). The descriptions of the results of such studies and tests that are described or referred to in the Registration Statement, the Pricing Disclosure Package and the Prospectus are accurate and complete in all material respects and fairly present the published data derived from such studies and tests, and each of the Company and its subsidiaries has no knowledge of other studies or tests the results of which are materially inconsistent with or otherwise call into question the results described or referred to in the Registration Statement, the Pricing Disclosure Package and the Prospectus. Except as described in the Registration Statement, the Pricing Disclosure Package and the Prospectus, neither the Company nor its subsidiaries has received any notices or other correspondence from the FDA or any other foreign, federal, state or local governmental or regulatory authority performing functions similar to those performed by the FDA with respect to any ongoing clinical or pre-clinical studies or tests requiring the termination or suspension of such studies or tests. For the avoidance of doubt, the Company makes no representation or warranty that the results of any studies, tests or preclinical or clinical trials conducted by or on behalf of the Company will be sufficient to obtain governmental approval from the FDA or any foreign, state or local governmental body exercising comparable authority.