Review of User Access Rights. All access rights shall be regularly reviewed by management through a formal documented process.
Review of User Access Rights Sample Clauses
Related to Review of User Access Rights
Data Access Control Persons entitled to use data processing systems gain access only to the Personal Data that they have a right to access, and Personal Data must not be read, copied, modified or removed without authorization in the course of processing, use and storage. Measures: • As part of the SAP Security Policy, Personal Data requires at least the same protection level as “confidential” information according to the SAP Information Classification standard. • Access to Personal Data is granted on a need-to-know basis. Personnel have access to the information that they require in order to fulfill their duty. SAP uses authorization concepts that document grant processes and assigned roles per account (user ID). All Customer Data is protected in accordance with the SAP Security Policy. • All production servers are operated in the Data Centers or in secure server rooms. Security measures that protect applications processing Personal Data are regularly checked. To this end, SAP conducts internal and external security checks and penetration tests on its IT systems. • SAP does not allow the installation of software that has not been approved by SAP. • An SAP security standard governs how data and data carriers are deleted or destroyed once they are no longer required.
Access Rights Upon reasonable notice and supervision by the Granting Party, and subject to any required or necessary regulatory approvals, either the Connecting Transmission Owner or Developer (“Granting Party”) shall furnish to the other of those two Parties (“Access Party”) at no cost any rights of use, licenses, rights of way and easements with respect to lands owned or controlled by the Granting Party, its agents (if allowed under the applicable agency agreement), or any Affiliate, that are necessary to enable the Access Party to obtain ingress and egress at the Point of Interconnection to construct, operate, maintain, repair, test (or witness testing), inspect, replace or remove facilities and equipment to: (i) interconnect the Large Generating Facility with the New York State Transmission System; (ii) operate and maintain the Large Generating Facility, the Attachment Facilities and the New York State Transmission System; and (iii) disconnect or remove the Access Party’s facilities and equipment upon termination of this Agreement. In exercising such licenses, rights of way and easements, the Access Party shall not unreasonably disrupt or interfere with normal operation of the Granting Party’s business and shall adhere to the safety rules and procedures established in advance, as may be changed from time to time, by the Granting Party and provided to the Access Party. The Access Party shall indemnify the Granting Party against all claims of injury or damage from third parties resulting from the exercise of the access rights provided for herein.
User Access Transfer Agent shall have a process to promptly disable access to Fund Data by any Transfer Agent personnel who no longer requires such access. Transfer Agent will also promptly remove access of Fund personnel upon receipt of notification from Fund.
System Access Control Data processing systems used to provide the Cloud Service must be prevented from being used without authorization. Measures: • Multiple authorization levels are used when granting access to sensitive systems, including those storing and processing Personal Data. Authorizations are managed via defined processes according to the SAP Security Policy • All personnel access SAP’s systems with a unique identifier (user ID). • SAP has procedures in place so that requested authorization changes are implemented only in accordance with the SAP Security Policy (for example, no rights are granted without authorization). In case personnel leaves the company, their access rights are revoked. • SAP has established a password policy that prohibits the sharing of passwords, governs responses to password disclosure, and requires passwords to be changed on a regular basis and default passwords to be altered. Personalized user IDs are assigned for authentication. All passwords must fulfill defined minimum requirements and are stored in encrypted form. In the case of domain passwords, the system forces a password change every six months in compliance with the requirements for complex passwords. Each computer has a password-protected screensaver. • The company network is protected from the public network by firewalls. • SAP uses up–to-date antivirus software at access points to the company network (for e-mail accounts), as well as on all file servers and all workstations. • Security patch management is implemented to provide regular and periodic deployment of relevant security updates. Full remote access to SAP’s corporate network and critical infrastructure is protected by strong authentication.
Additional Access Rights For the avoidance of doubt any grant of Access Rights not covered by the Grant Agreement or this Consortium Agreement shall be at the absolute discretion of the owning Party and subject to such terms and conditions as may be agreed between the owning and receiving Parties.
Access to Network Interface Device (NID 2.4.3.1. Due to the wide variety of NIDs utilized by BellSouth (based on subscriber size and environmental considerations), Mpower may access the on-premises wiring by any of the following means: BellSouth shall allow Mpower to connect its loops directly to BellSouth’s multi-line residential NID enclosures that have additional space and are not used by BellSouth or any other telecommunications carriers to provide service to the premise. Mpower agrees to install compatible protectors and test jacks and to maintain the protection system and equipment and to indemnify BellSouth pursuant to Section 8 of the General Terms and Conditions of this Agreement.
Access Control Supplier will maintain an appropriate access control policy that is designed to restrict access to Accenture Data and Supplier assets to authorized Personnel. Supplier will require that all accounts have complex passwords that contain letters, numbers, and special characters, be changed at least every 90 days, and have a minimum length of 8 characters.
Access Right Buyer grants to Seller a limited, nontransferable, nonexclusive, revocable (at Buyer’s discretion) right to access the Boeing Systems electronically solely during the term of this Contract and solely to the extent authorized in writing by Buyer and necessary for Seller to perform this Contract. Seller shall not access or use the Boeing Systems for any other purpose. This provision does not grant to Seller any ownership interest in, or any express or implied license or right to, any of the Proprietary Information and Materials or to any software or intellectual property rights owned by Buyer or any third party. SELLER EXPRESSLY AGREES THAT BUYER MAKES NO WARRANTY, EXPRESS OR IMPLIED, AS TO RELIABILITY OF THE BOEING SYSTEMS. Seller shall not remove any restrictive legends or markings in the Proprietary Information and Materials or Boeing Systems. To the fullest extent consistent with applicable law, Xxxxx has the right to monitor, record, retrieve and disclose to others (including, but not limited to, law enforcement officials) all information, including the content of communications, related to any Electronic Access by Seller and Seller Personnel. Without limiting the foregoing, Seller hereby understands and agrees that it has no expectation of privacy in the use of Boeing Information Systems and that such use is at all times and in all circumstances fully subject to the consents, including those to monitoring and disclosure, provided in the Boeing warning banner and applicable written Boeing policy.
Access to Software Access Rights to Software which is Results shall comprise: Access to the Object Code; and, where normal use of such an Object Code requires an Application Programming Interface (hereafter API), Access to the Object Code and such an API; and, if a Party can show that the execution of its tasks under the Project or the Exploitation of its own Results is technically or legally impossible without Access to the Source Code, Access to the Source Code to the extent necessary. Background shall only be provided in Object Code unless otherwise agreed between the Parties concerned.
Access to System If Business Associate needs access to a Covered Entity Information Technology system to comply with its obligations under the Contract or this Agreement, Business Associate shall request, review, and comply with any and all policies applicable to Covered Entity regarding such system including, but not limited to, any policies promulgated by the Office of Information Technology and available at xxxx://xxx.xxxxx.xx.xx/about/policies.
