Media Protection. Supplier will, as applicable to the Services provided: a. Protect information system media, both paper and digital, including encrypting data at rest stored on portable media (e.g. USB drives, removable hard drives). b. Restrict access to media related to Verizon services performed under this Agreement. Access to such media will be granted in accordance with these Requirements. c. Label media containing Verizon data commensurate with the highest confidentiality level of data contained. EA-5 Baseline Security Requirements For Verizon Suppliers d. When (a) directed by Verizon, or (b) unless specifically otherwise required by law or directed by Verizon, upon conclusion or termination of Supplier’s work for Verizon or when no longer required for the performance of work under an Agreement, Supplier will Sanitize (or at Verizon’s election return to Verizon) all copies of all Verizon Confidential Information, including all backup and archival copies, in any electronic or non-electronic form. e. All hardcopy documents will be cross-cut shredded. f. Maintain records for all media that have been destroyed, sanitized or returned to Verizon. Records will be maintained for a minimum of four (4) years and made available to Verizon for inspection upon request.
Appears in 4 contracts
Samples: Transfer and Servicing Agreement (Verizon Master Trust), Transfer and Servicing Agreement (Verizon Master Trust), Transfer and Servicing Agreement (Verizon Master Trust)
