Common use of Reporting of Concerns Regarding the Integrity of Software, Unauthorized Disclosures or Misuse of District Information Clause in Contracts

Reporting of Concerns Regarding the Integrity of Software, Unauthorized Disclosures or Misuse of District Information. Contractor, within one (1) business day of discovery, shall report to District any information it receives, discovers, or learns that suggests the Software provided to District may exhibit any defects, errors, vulnerabilities, or other problems that could adversely affect the District (collectively, a “Vulnerability”). Contractor’s report shall identify: (i) the nature of the Vulnerability; (ii) the actual or possible nature of the harm District may experience as a result of the Vulnerability; (iii) anyone involved with the Vulnerability including those who may try to exploit the Vulnerability; (iv) what Contractor has done or shall do to mitigate any effect of the Vulnerability; and (v) what corrective action Contractor has taken or shall take to prevent future similar Vulnerability. Contractor shall provide such other information, including a written report, requested by District.