Physical Security Administration. Service Provider’s responsibilities include:
1. Communicate the physical and logical security management processes and procedures to Service Provider and each other Service Component Provider(s) with which an OLA exists.
2. Comply with Service Provider physical and logical security responsibilities.
2.1. Ensure proper segregation of duties exists where appropriate, including where processes span to Service Provider, other Service Component Provider, and/or Third Party Vendor(s).
2.2. Notify DIR if it is not possible to maintain the proper segregation of duties.
3. Inform DIR and DIR Customer immediately if Service Provider becomes aware of any vulnerability or weakness in the Services, and recommend a solution or mitigation.
4. Provide reports, on at least a weekly basis, to DIR and DIR Customers to identify those physical access rights that should be removed from DIR and DIR customer locations.
5. Integrate the Physical Security Administration process with Service Management processes, including IT Service Continuity Management.
Physical Security Administration. Supplier will provide physical security administration for Supplier’s data centers and facilities under Supplier’s control, which will include authorized access control. Supplier’s responsibilities for physical security administration Services include the tasks, subtasks, and Deliverables set forth in Table 30 (Physical Security Administration Requirements) below.
Physical Security Administration. In addition to the requirements as identified in Exhibit 17, Service Provider responsibilities:
1. For Legacy Data Centers for which the Service Provider has operational responsibilities the Service Provider will:
1.1. Recommend supplemental physical security standards and procedures to increase the overall level of security as necessary in the locations and facilities operated by Service Provider.
Physical Security Administration. Service Provider responsibilities include:
1. At DIR and DIR Customer Sites; where the Service Provider uses or visits locations and facilities, Service Provider responsibilities include:
1.1. Ensure compliance with all DIR and DIR Customer security policies, standards and procedures, and all applicable laws and regulations, as they may be revised or updated.
1.2. Comply with DIR and DIR Customers’ policies, including security, Occupational Health and Safety, data and records management, and electronic records and data archiving.
1.3. Integrate Service Provider Physical Security Administration process with DIR’s, DIR Customers, and Third Party Vendor(s)’ Physical Security Administration processes, where the processes interact.
2. At other Locations; where the Service Provider uses other locations and facilities to support the provision of Services to DIR or DIR Customers Service Provider responsibilities include:
2.1. Provide security processes, facilities, Equipment, and Software that meet or exceed DIR’s physical security policies, standards, and procedures. Such processes and physical attributes will be at a minimum consistent with similar security provisions maintained by large, well-managed sourcing services companies.
2.2. Upon request, provide DIR, its representative(s), and/or regulatory agencies access to all facilities and assets used in providing the Services for audits, investigations, and compliance reviews.
2.3. Perform all physical security functions (e.g. identification badge controls, and alarm responses) at facilities under Service Provider control.
Physical Security Administration. In performing its responsibilities with respect to physical security administration, Supplier shall comply with Gap’s Policies and Procedures and the Procedures Manual, which shall include, at a minimum, the following:
(a) Where Supplier uses locations and facilities at Gap Sites, Supplier’s responsibilities include:
(1) Compliance with the Procedures Manual, as they may be revised or updated.
(b) Where Supplier uses other locations and facilities to support the provision of Services to Gap, Supplier’s responsibilities include:
(1) Providing security processes, facilities, Equipment, and Software that meets or exceeds Gap’s physical security policies, standards and procedures.
(2) Upon Gap’s request, providing Gap, its representative(s), and/or regulatory agencies access to all facilities and assets used in providing the Services for audits, investigations and compliance reviews.
(3) Assuming accountability for all Equipment from the time Supplier takes possession or assumes responsibility of such Equipment until such time as it relinquishes custody of the Equipment back to Gap. The chain of custody for all Equipment shall be documented in an auditable custody document in a form Approved by Gap. Supplier shall be responsible for assuring the safety of all Equipment while such Equipment is in Supplier’s possession. * Certain information on this page has been omitted and filed separately with the Commission. Confidential treatment has been requested with respect to the omitted portions.
(4) Performing all * functions (for example *) at facilities under Supplier’s control.
Physical Security Administration. To prevent unauthorized entry to the facility, ALICOMP has a security system that controls access into and within the building, automatically limiting access to sensitive areas. Access is also logged. Additionally, cameras are installed both inside and outside the building in Leonia. The entire premises are constantly scanned by a comprehensive camera system and guarded by a 24 hour guard service.
Physical Security Administration. The Service Provider’s shall, at a minimum:
3.3.4.1 Communicate the physical and logical security management processes and procedures to Service Provider’s staff.
3.3.4.2 Comply with Service Provider physical and logical security responsibilities.
3.3.4.3 Inform MSI and DIR Customer immediately if Service Provider becomes aware of any vulnerability or weakness in the Services, and recommend a solution or mitigation.
3.3.4.4 Provide near real-time information, to MSI and DIR Customers to identify those physical access rights that should be removed from MSI and DIR Customer Facilities and where, within the Service Provider’s scope of responsibilities, initiate the access rights revocation request.
Physical Security Administration. 117 8. Logical Security Administration:............................................. 118 9. On-going Business Divestitures and Acquisitions:............................. 121 10. Consolidation and Relation Services.......................................... 121 11. License Management and Compliance:........................................... 121 12. Installs, Moves, Adds, and Changes:.......................................... 122 13.
Physical Security Administration. SUPPLIER'
Physical Security Administration. This Section details the obligations and responsibilities of the Parties regarding physical security administration. Except where a responsibility is identified as a “P” responsibility for CoreLogic in the matrix below, Supplier shall be responsible for the following activities:
