Preventing Improper Use and Unauthorized Logical Access. 1. Edge USA will take practicable measures to prevent unauthorized logical Access to Wet Infrastructure and DCI in the PLCN System used exclusively for the U.S.- Philippines Segment, and to prevent any unlawful use or disclosure of information while carried on the same, including Domestic Communications, and Edge USA will include these measures in the policies that it develops and implements pursuant to this NSA. For purposes of this Section, “practicable measures,” at a minimum, includes measures equal, comparable, or superior to generally recognized industry standards governing cybersecurity, information security, and privacy and will be measured consistent with best practices and guidelines, such as but not limited to the Cybersecurity Framework of the National Institute of Standards and Technology and 27001 Series Standards of the International Organization for Standardization. These practicable measures should also include items such as configuration management, security audits, and system interconnection documentation, as well as contractual safeguards and screening procedures for personnel with logical Access to the DCI.
2. Edge USA will take appropriate measures to protect and promote resiliency of the U.S.-Philippines Segment, including measures to ensure that security patches for systems and applications are up to date.
3. Edge USA will maintain or exceed security standards and best practices utilized within the U.S. telecommunications industry for maintenance of password systems and firewalls, monitoring and oversight of logical Access to the U.S.-Philippines Segment, adequate maintenance of logical Access logs, and periodic internal audits of network security and associated network devices. Edge USA agrees that its security standards and practices for PLCN will also include, among other things, policies or plans relating to its information security, supply chain security, cybersecurity incident response, remote Access, cybersecurity, third-party contractors, outsourcing and offshoring, maintenance and retention of system logs, protection of lawful U.S. process, protection of U.S. Records obtained by Edge USA in the ordinary course of business, and Edge USA’s plans regarding new contracts or amendments to existing contracts with third-party providers requiring those third parties to notify Edge USA in the event of a breach or loss of U.S. Records within a specified time period after discovery, not to exceed 72 hours from the time of discovery, u...
Preventing Improper Use and Unauthorized Logical Access. 1. GU Holdings will take practicable measures to prevent unauthorized logical Access to the PLCN System; Wet Infrastructure; and DCI used in the U.S.-Taiwan Segment, and to prevent any unlawful use or disclosure of information while carried on the same, including Domestic Communications, and GU Holdings will include these measures in the policies that it develops and implements pursuant to this NSA. For purposes of this Section, “practicable measures,” at a minimum, includes measures equal, comparable, or superior to generally recognized industry standards governing cybersecurity, information security, and privacy and will be measured consistent with best practices and guidelines, such as but not limited to the Cybersecurity Framework of the National Institute of Standards and Technology and 27001 Series Standards of the International Organization for Standardization. These practicable measures should also include items such as configuration management, security audits, and system interconnection documentation, as well as contractual safeguards and screening procedures for personnel with logical Access to the DCI.
2. GU Holdings will take appropriate measures to protect and promote resiliency of PLCN, including measures to ensure that security patches for systems and applications are up to date.
3. GU Holdings will maintain or exceed security standards and best practices utilized within the U.S. telecommunications industry for maintenance of password systems and firewalls, monitoring and oversight of logical Access to PLCN, adequate maintenance of logical Access logs, and periodic internal audits of network security and associated network devices. GU Holdings agrees that its security standards and practices for PLCN will also include, among other things, policies or plans relating to its information security, supply chain security, cybersecurity incident response, remote Access, cybersecurity, third-party contractors, outsourcing and offshoring, maintenance and retention of system logs, protection of lawful U.S. process, protection of U.S. Records obtained by GU Holdings in the ordinary course of business, and GU Holdings’ plans regarding new contracts or amendments to existing contracts with third-party providers requiring those third parties to notify GU Holdings in the event of a breach or loss of U.S. Records within a specified time period after discovery, not to exceed 72 hours from the time of discovery, unless the CMAs grant a waiver.
4. Within 60 d...
