Common use of Report Security Incident Clause in Contracts

Report Security Incident. Business Associate agrees to notify Covered Entity of any se- curity incident involving PHI experienced by Business Associate or its subcontractors and agents of which Business Associate becomes aware; provided, however, the Parties acknowledge and agree that this section 2.1(l) constitutes notice by Business Associate to Covered Entity of the ongoing existence and occurrence or attempts of Unsuccessful Security Incidents for which no additional notice to Covered Entity shall be required. “Unsuccessful Security Incidents” means, without limitation, pings and other broadcast attacks on Business Associate’s firewall, port scans, unsuccessful log-on attempts, denial of service attacks, and any combination of the above, so long as no such incident results in unauthorized access to, use, or disclosure of PHI. Business Associate shall make such notification in writing, to the individuals designated as contacts by Covered Entity in pa- ragraph 5.6 below, within ten (10) business days of having been made aware of the se- curity incident.

Report Security Incident. Business Associate agrees to notify Covered Entity of any se- curity incident involving PHI experienced by Business Associate or its subcontractors and agents of which Business Associate becomes aware; provided, however, the Parties acknowledge and agree that this section 2.1(l) constitutes notice by Business Associate to Covered Entity of the ongoing existence and occurrence or attempts of Unsuccessful Security Se- curity Incidents for which no additional notice to Covered Entity shall be required. “Unsuccessful Un- successful Security Incidents” means, without limitation, pings and other broadcast attacks at- tacks on Business Associate’s firewall, port scans, unsuccessful log-on attempts, denial of service attacks, and any combination of the above, so long as no such incident results in unauthorized access to, use, or disclosure of PHI. Business Associate shall make such notification in writing, to the individuals designated as contacts by Covered Entity in pa- ragraph 5.6 below, within ten (10) business days of having been made aware of the se- curity incident.

Report Security Incident. Business Associate agrees to notify Covered Entity of any se- curity security incident involving PHI experienced by Business Associate or its subcontractors and agents of which Business Associate becomes aware; provided, however, the Parties acknowledge and agree that this section 2.1(l) constitutes notice by Business Associate to Covered Entity of the ongoing existence and occurrence or attempts of Unsuccessful Security Incidents for which no additional notice to Covered Entity shall be required. “Unsuccessful Security Incidents” means, without limitation, pings and other broadcast attacks on Business Associate’s firewall, port scans, unsuccessful log-on attempts, denial of service attacks, and any combination of the above, so long as no such incident results in unauthorized access to, use, or disclosure of PHI. Business Associate shall make such notification in writing, to the individuals designated as contacts by Covered Entity in pa- ragraph paragraph 5.6 below, within ten (10) business days of having been made aware of the se- curity security incident.

Report Security Incident. Business Associate agrees to notify Covered Entity of any se- curity security incident involving PHI experienced by Business Associate or its subcontractors and agents of which Business Associate becomes aware; provided, however, the Parties acknowledge and agree that this section 2.1(l) constitutes notice by Business Associate to Covered Entity of the ongoing existence and occurrence or attempts of Unsuccessful Security Incidents for which no additional notice to Covered Entity shall be required. “Unsuccessful Security Incidents” means, without limitation, pings and other broadcast attacks on Business Associate’s firewall, port scans, unsuccessful log-on attempts, denial of service attacks, and any combination of the above, so long as no such incident results in unauthorized access to, use, or disclosure of PHI. Business Associate shall make such notification in writing, to the individuals designated as contacts by Covered Entity in pa- ragraph 5.6 paragraph 5.7 below, within ten (10) business days of having been made aware of the se- curity security incident.