Security Certification and Accreditation Sample Clauses

Security Certification and Accreditation. C.12.2.26 Systems Vulnerability Analysis/Assessment and Risk Assessment
AutoNDA by SimpleDocs
Security Certification and Accreditation. § 1. The Department of Defense (DoD) is a primary stakeholder and user of the system. Therefore, the DoD portion of the system is subject to formal Assessment and Authorization under the Risk Management Framework (RMF) in accordance with DoD Instruction 8500.01, Cybersecurity, and DoD Instruction 8510.01, DoD 8310.01 Information Technology Standards in the DoD, Risk Management Framework (RMF) for DoD Information Technology (IT). § 2. Assessment and authorization by the DoD Authorizing Official (AO) will be based on examination and risk assessment of those system components that fall within a boundary defined as those components owned, installed, and managed by the DoD. However, because this subset of the system is neither physically nor logically isolated from the rest of the system, authorization by the AO is contingent upon compliance by the entire system, and all users, with the identification, implementation, assessment, and management of cybersecurity capabilities and services (expressed as security controls), and authorization for the operation of the Information System established by DoD 8510.01 and included in the risk assessment performed as part of RMF. § 3. An Authorization to Operate (ATO) by the AO certifies that the system complies with the most stringent security requirements of any user, a comprehensive risk assessment has been conducted, risk mitigation measures have been completed, and the AO accepts the residual risks regarding system vulnerabilities. § 4. It is incumbent upon all system users to be aware of RMF-related information assurance (IA) security policies, procedures, and plans. The parties, once informed by the DoD AO regarding RMF-related security policies and any updates to RMF-related security policies, must ensure complete and consistent compliance as a condition of continued participation in the system. In the absence of system-wide compliance, the level of residual risk accepted by the AO may not be valid and the authorization of the system could be subject to nullification. § 5. Users who fail to comply with RMF security provisions pertaining to the “Authorization to Operate” for the system by the AO will be subject to sanctions by the Executive Council. These sanctions, depending upon the severity of the compliance deficiency and the responsiveness of the user in addressing required corrective actions, may range from: § 5.1. An advisory that a non-compliance/system vulnerability exists, with a request for corrective act...
Security Certification and Accreditation. § 1. The Department of Defense (DOD), is a primary stakeholder. Therefore, the DOD portion of the System is subject to formal Information Assurance (IA) security certification and accreditation under interim guidance concerning the Defense Information Assurance Certification and Accreditation Process (DIACAP) contained in DOD Instructions 8500.1 and 8500. § 2. Certification and accreditation by the DOD Designated Approval Authority (DAA) will be based on examination and risk assessment of those System components that fall within a boundary defined as those components owned, installed and managed by the DOD. However, because this subset of the System is neither physically nor logically isolated from the rest of the System, accreditation by the DAA is contingent upon compliance by the entire System, and all users, with the IA security standards established by DOD and included in the risk assessment performed as part of DIACAP. § 3. An Authority to Operate (ATO) by the DAA certifies that the System complies with the most stringent security requirements of any user, a comprehensive risk assessment has been conducted, risk mitigation measures have been completed, and the DAA accepts the residual risks with regard to system vulnerabilities. § 4. It is incumbent upon all users to be aware of DIACAP-related IA security policies, procedures and plans. The Parties, once informed by the DOD DAA regarding DIACAP-related security policies and any updates to DIACAP-related security polices, must ensure complete, consistent compliance as a condition of continued user participation in the System. In the absence of System-wide compliance, the level of residual risk accepted by the DAA may not be valid and the accreditation of the System could be subject to nullification. § 5. Users who fail to comply with IA security provisions will be subject to sanctions by the Executive Council. These sanctions, depending upon the severity of the compliance deficiency and the responsiveness of the user in addressing required corrective actions, may range from: § 5.1. An advisory that a non-compliance/System vulnerability exists, with a request for corrective action. § 5.2. A formal notification that one or more significant/repeated non-compliance issues exist, with a mandated compliance date and a request for a remediation plan. § 5.3. A formal notification that actions by one or more individuals have resulted in a non-compliance issue/System vulnerability, with a request that the user ...
Security Certification and Accreditation. C.12.1.38

Related to Security Certification and Accreditation

  • Eligibility Certification A state agency may not accept a bid or award a contract that includes proposed financial participation by a person who received compensation from the agency to participate in preparing the Specifications or request for proposals on which the bid or contract is based. The Texas Government Code requires the following statement: “Under Section 2155.004, Texas Government Code, the vendor certifies that the individual or business entity named in this bid or contract is not ineligible to receive the specified contract and acknowledges that this contract may be terminated and payment withheld if this certification is inaccurate.”

  • Licensing and Accreditation (a) Each of the Loan Parties and their Subsidiaries has, except to the extent such failure to do so would not reasonably be expected to result in a Material Adverse Effect, to the extent applicable: (i) obtained (or been duly assigned) all required Governmental Approvals and certificates of need or determinations of need as required by the relevant state Governmental Authority for the acquisition, construction, expansion of, investment in or operation of its businesses and Facilities as currently operated; (ii) obtained and maintains in good standing all Governmental Approvals and Healthcare Permits; (iii) obtained and maintains accreditation from all generally recognized accrediting agencies where required by applicable Law or necessary for reimbursement by any applicable Medical Reimbursement Program; (iv) entered into and maintains in good standing its Medicare Provider Agreements and, to the extent applicable, Medicaid Provider Agreements; and (v) ensured that all such Healthcare Permits are in full force and effect on the date hereof and have not been revoked or suspended or otherwise limited (collectively, “Certificates, Licenses and Accreditation”). No event has occurred or other fact exists with respect to the Certificates, Licenses and Accreditation and Governmental Approvals that allows, or after notice or lapse of time or both, would allow, revocation, suspension, restriction, limitation or termination of any of the Certificates, Licenses and Accreditation and Governmental Approvals, except to the extent such failure to do so would not reasonably be expected to result in a Material Adverse Effect. No written notice from any Governmental Authority in respect to the revocation, suspension, restriction, limitation or termination of any material Certificates, Licenses and Accreditation and Governmental Approvals has been delivered or issued or, to the knowledge of the Loan Parties, threatened in writing, in any such case, that could reasonably be expected to result in a Material Adverse Effect. (b) To the knowledge of the Loan Parties, each Contract Provider is duly licensed by each state, state agency, commission or other Governmental Authority having jurisdiction over the provision of such services by such Person in the locations where the Loan Parties and their Subsidiaries conduct business, to the extent such licensing is required to enable such Person to provide the professional services provided by such Person and otherwise as is necessary to enable the Loan Parties and their Subsidiaries to operate substantially as currently operated and as contemplated to be operated. (c) There is no civil, criminal or administrative action, suit, claim, indictment, proceeding, hearing, charge, complaint, demand, audit inspection or investigation pending or, to the knowledge of the Loan Parties, threatened by any federal, state or local governmental agency against any Loan Party or any Subsidiary or any Responsible Officer thereof, nor is there any basis therefore, in any such case, that would reasonably be expected to result in a Material Adverse Effect.

  • Non-compliance Penalty Certificate If any Non-compliance Penalty arises, the Supplier Development Manager shall issue a Non- compliance Penalty Certificate on the last day of each month during such Non-compliance indicating the Non-compliance Penalties which have accrued during that period.

  • Regulatory Good Standing Certification Does Vendor certify that its entity is in good standing will all government entities and agencies, whether local, state, or federal, that regulate any aspect of Vendor's field of work or business operations? If Vendor selects "No", Vendor must provide explanation on the following attribute question. Yes

  • AS9100 Certification ‌ AS9100 Certification, specifies requirements for a quality management system to demonstrate the Contractor’s ability to consistently meet the customer requirements as well as statutory and regulatory requirements for the aerospace industry. An AS9100 Certification, is not mandatory; however, Contractors who desire to compete for work within the aerospace industry are encouraged to have AS9100 Certification, during the entire term of OASIS. The Contractor shall notify the OASIS CO, in writing, if there are any changes in the status of their AS9100 Certification, and provide the reasons for the change and copies of audits from an AS9100 Certification Body, as applicable. If only part of a Contractor’s organization is AS9100, certified, the Contractor shall make the distinction between which business units or sites and geographic locations have been certified.

  • E-VERIFY CERTIFICATION Pursuant to Executive Order RP-80, Engineer certifies and ensures that for all contracts for services, Engineer shall, to the extent permitted by law, utilize the United States Department of Homeland Security’s E-Verify system during the term of this agreement to determine the eligibility of: 1. All persons employed by Engineer during the term of this agreement to perform duties within the State of Texas; and 2. All persons, including subcontractors, assigned by Engineer to perform work pursuant to this agreement. Violation of this provision constitutes a material breach of this agreement.

  • CLEC Certification 8.1 Notwithstanding any other provision of this Agreement, CenturyLink shall have no obligation to perform under this Agreement until such time as CLEC has obtained such FCC and Commission authorization(s) as may be required by Applicable Law for conducting business in the State as a competitive local exchange carrier. CLEC shall not be permitted to establish its account nor place any orders under this Agreement until it has obtained such authorization and provided proof of such to CenturyLink. For the life of this Agreement, CLEC must represent and warrant to CenturyLink that it remains a certified local provider of Telephone Exchange Service within CenturyLink’s Local Calling Area(s) in the State. At any time during the life of this Agreement, CLEC will provide a copy of its current Certificate of Operating Authority or other evidence of its status to CenturyLink upon request. CLEC’s failure to maintain such authorization(s) as may be required by Applicable Law for conducting business in the State as a CLEC shall be considered a Default of Agreement.

  • Sarbanes-Oxley Certification Xxxx Xxxx 10-K shall include a certification (the "Sarbanes-Oxley Certification") rexxxxxx xx Xxxxs 13a-14(d) and 15d-14(d) under the Exchange Act (pursuant to Section 302 of the Sarbanes-Oxley Act of 2002 and thx xxxxx xxx xxgulations of the Commission promulgated thereunder (including any interpretations thereof by the Commission's staff)). No later than March 15 of each year, beginning in 2007, the Servicer and the Trustee shall (unless such person is the Certifying Person), and the Servicer shall cause each Reporting Subcontractor and the Trustee shall cause each Reporting Subcontractor to, provide to the Person who signs the Sarbanes-Oxley Certification (the "Xxxxxxxxxx Xerson") a certification (each, a "Performance Certification"), in the form attached hereto as Exhibit R on which the Certifying Person, the entity for which the Certifying Person acts as an officer, and such entity's officers, directors and Affiliates (collectively with the Certifying Person, "Certification Parties") can reasonably rely. The senior officer in charge of the servicing function of the Servicer shall serve as the Certifying Person on behalf of the Trust Fund. Neither the Servicer nor the Depositor will request delivery of a certification under this clause unless the Depositor is required under the Exchange Act to file an annual report on Form 10-K with respect to the Trust Fund. In the event that prior to the filing date of the Form 10-K in March of each year, the Trustee or the Depositor has actual knowledge of information material to the Sarbanes-Oxley Certification, the Xxxxxxx xx xxe Depositor, as the case may be, shall promptly notify the Servicer and the Depositor. The respective parties hereto agree to cooperate with all reasonable requests made by any Certifying Person or Certification Party in connection with such Person's attempt to conduct any due diligence that such Person reasonably believes to be appropriate in order to allow it to deliver any Sarbanes-Oxley Certification or pxxxxxx xxxxxxx with respect to the Trust Fund.

  • Secretary’s Certificate; Further Documentation Prior to the date of the first Placement Notice, the Company shall deliver to the Agent a certificate of the Secretary of the Company and attested to by an executive officer of the Company, dated as of such date, certifying as to (i) the Certificate of Incorporation of the Company, (ii) the By-laws of the Company, (iii) the resolutions of the Board of Directors of the Company authorizing the execution, delivery and performance of this Agreement and the issuance of the Placement Shares and (iv) the incumbency of the officers duly authorized to execute this Agreement and the other documents contemplated by this Agreement. Within five (5) Trading Days of each Representation Date, the Company shall have furnished to the Agent such further information, certificates and documents as the Agent may reasonably request.

  • OFAC Certification Company certifies that (i) it is not acting on behalf of any person, group, entity, or nation named by any Executive Order or the United States Treasury Department, through its Office of Foreign Assets Control (“OFAC”) or otherwise, as a terrorist, “Specially Designated Nation”, “Blocked Person”, or other banned or blocked person, entity, nation, or transaction pursuant to any law, order, rule or regulation that is enforced or administered by OFAC or another department of the United States government, and (ii) Company is not engaged in this transaction on behalf of, or instigating or facilitating this transaction on behalf of, any such person, group, entity or nation.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!