Common use of Patch Management Clause in Contracts

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within thirty (30) days of vendor release. Applications and systems that 25 cannot be patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within thirty (30) calendar or business days of vendor release. Applications 25 and systems that 25 cannot be patched due to operational reasons must have compensatory controls 26 implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store 17 PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 18 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 19 must be a documented patch management process which determines installation 23 timeframe based on risk 20 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 21 thirty (30) calendar or business days of vendor release. Applications and systems that 25 cannot be patched 22 due to operational reasons must have compensatory controls implemented to 26 minimize risk, where 23 possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store 16 PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 17 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 18 must be a documented patch management process which determines installation 23 timeframe based on risk 19 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 20 thirty (30) days of vendor release. Applications and systems that 25 cannot be patched due to operational 21 reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 28 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 29 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 30 necessary. There must be a documented patch management process which determines installation 23 31 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 32 patches must be installed within thirty (30) calendar or business days of vendor release. Applications 33 and systems that 25 cannot be patched due to operational reasons must have compensatory controls 34 implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within thirty (30) days of vendor release. Applications and systems that 25 cannot 25 be patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, 26 where possible.

Patch Management. All workstations, laptops and other systems that process and/or store 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits 21 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 22 must be a documented patch management process which determines installation 23 timeframe based on risk 23 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within thirty (30) 24 30 days of vendor release. Applications and systems that 25 cannot be patched due to operational reasons 25 must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 16 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 17 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 18 necessary. There must be a documented patch management process which determines installation 23 19 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 20 patches must be installed within thirty (30) days of vendor release. Applications and systems that 25 21 cannot be patched due to operational reasons must have compensatory controls implemented to 26 22 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store 16 PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 17 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 18 must be a documented patch management process which determines installation 23 timeframe based on risk 19 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 20 thirty (30) calendar or business days of vendor release. Applications and systems that 25 cannot be patched 21 due to operational reasons must have compensatory controls implemented to 26 minimize risk, where 22 possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 22 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 23 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 24 necessary. There must be a documented patch management process which determines installation 23 25 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 26 patches must be installed within thirty (30) calendar or business days of vendor release. Applications 27 and systems that 25 cannot be patched due to operational reasons must have compensatory controls 28 implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store 15 PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 16 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 17 must be a documented patch management process which determines installation 23 timeframe based on risk 18 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 19 thirty (30) calendar or business days of vendor release. Applications and systems that 25 cannot be patched 20 due to operational reasons must have compensatory controls implemented to 26 minimize risk, where 21 possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store 21 PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 22 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 23 must be a documented patch management process which determines installation 23 timeframe based on risk 24 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 25 thirty (30) calendar or business days of vendor release. Applications and systems that 25 cannot be patched 26 due to operational reasons must have compensatory controls implemented to 26 minimize risk, where 27 possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 19 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 20 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within thirty (30) calendar or business days of vendor release. Applications 22 and systems that 25 cannot be patched due to operational reasons must have compensatory controls 23 implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 19 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 20 must be a documented patch management process which determines installation 23 timeframe based on risk 21 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 22 thirty (30) days of vendor release. Applications and systems that 25 cannot be patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 22 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 23 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 24 necessary. There must be a documented patch management process which determines installation 23 25 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 26 patches must be installed within thirty (30) calendar days of vendor release. Applications and systems 27 that 25 cannot be patched due to operational reasons must have compensatory controls implemented to 26 28 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable patches 24 patches must be installed within thirty (30) days of vendor release. Applications and systems that 25 cannot be 25 patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, 26 where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 9 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 10 must be a documented patch management process which determines installation 23 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 11 thirty (30) calendar or business days of vendor release. Applications and systems that 25 cannot be patched 12 due to operational reasons must have compensatory controls implemented to 26 minimize risk, where 13 possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 28 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 29 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 30 necessary. There must be a documented patch management process which determines installation 23 31 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 32 patches must be installed within thirty (30) 30 days of vendor release. Applications and systems that 25 cannot be 33 patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, 34 where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store 15 PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 16 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 17 must be a documented patch management process which determines installation 23 timeframe based on risk 18 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 19 thirty (30) days of vendor release. Applications and systems that 25 cannot be patched due to operational 20 reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within thirty (30) business days of vendor release. Applications and systems 25 that 25 cannot be patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store 17 PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 18 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk 19 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 20 thirty (30) calendar or business days of vendor release. Applications and systems that 25 cannot be patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable patches 24 patches must be installed within thirty (30) 30 days of vendor release. Applications and systems that 25 cannot be patched due 25 to operational reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 16 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 17 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 18 necessary. There must be a documented patch management process which determines installation 23 19 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 20 patches must be installed within thirty (30) days of vendor release. Applications and systems that 25 cannot 21 be patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, 22 where possible.

Patch Management. All workstations, laptops and other systems that process and/or store 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits 21 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 22 must be a documented patch management process which determines installation 23 timeframe based on risk 23 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 24 thirty (30) days of vendor release. Applications and systems that 25 cannot be patched due to operational 25 reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 27 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 28 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 29 necessary. There must be a documented patch management process which determines installation 23 30 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 patches 31 must be installed within thirty (30) calendar or business days of vendor release. Applications and systems 32 that 25 cannot be patched due to operational reasons must have compensatory controls implemented to 26 33 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 22 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 23 transmits on behalf of COUNTY must have critical security patches applied, with system reboot if 22 24 necessary. There must be a documented patch management process which determines installation 23 25 timeframe based on risk assessment and vendor recommendations. At a maximum, all applicable 24 26 patches must be installed within thirty (30) days of vendor release. Applications and systems that 25 27 cannot be patched due to operational reasons must have compensatory controls implemented to 26 28 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store 17 PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 18 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There must be a documented patch management process which determines installation 23 timeframe based on risk 19 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within 20 thirty (30) days of vendor release. Applications and systems that 25 cannot be patched due to operational reasons must have compensatory controls implemented to 26 minimize risk, where possible.

Patch Management. All workstations, laptops and other systems that process and/or 20 store PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or 21 transmits 16 on behalf of COUNTY must have critical security patches applied, with system reboot if 22 necessary. There 17 must be a documented patch management process which determines installation 23 timeframe based on risk 18 assessment and vendor recommendations. At a maximum, all applicable 24 patches must be installed within thirty (30) calendar or business days of vendor release. Applications and systems that 25 cannot be patched 19 due to operational reasons must have compensatory controls implemented to 26 minimize risk, where 20 possible.