Reasonable and Appropriate Security Controls. 1. Seller shall apply reasonable and appropriate administrative, technical, physical, organizational, and operational safeguards and operations including Countermeasures to protect Sensitive Information against accidental and unlawful destruction, alteration, and unauthorized or improper disclosure or access regardless of whether such Sensitive Information is on Seller’s internal systems or a cloud environment.
