Security Certification and Compliance Review Programs Sample Clauses

Security Certification and Compliance Review Programs. (NIST SP 800-18 – System Security Plans and Planning (PL) Family, NIST SP 800-53 rev. 4)
Sample 1Sample 2Sample 3See All (6)
AutoNDA by SimpleDocs
Security Certification and Compliance Review Programs. The primary statutory authority that supports the information contained in this document is the Federal Information Security Management Act (FISMA). FISMA became law as part of the Electronic Government Act of 2002. FISMA is the United States legislation that defines a comprehensive framework to protect government information, operations, and assets against natural or manufactured threats. FISMA assigned the National Institute of Standards and Technology (NIST), a branch of the U.S. Department of Commerce, the responsibility to outline and define compliance with FISMA. Unless otherwise stated, all of SSA’s requirements mirror the NIST- defined management, operational, and technical controls listed in the various NIST Special Publications (SP) libraries of technical guidance documents. To gain electronic access to SSA-provided information, under the auspices of a data exchange agreement, EIEP’s must comply with SSA’s most current Technical System Security Requirements (hereafter referred to as TSSRs) to gain access to SSA-provided information. This document is synonymous with the Electronic Information Exchange Security Requirements and Procedures for State and Local Agencies Exchanging Electronic Information with the Social Security Administration in the agreements. The TSSR specifies minimally acceptable levels of security standards and controls to protect SSA-provided information. SSA maintains the TSSR as a living document—subject to change--that addresses emerging threats, new attack methods and the development of new technology that potentially places SSA-provided information at risk. EIEPs may proactively ensure their ongoing compliance to the TSSR by periodically requesting the most current version from SSA. SSA will work with EIEPs to resolve deficiencies, which result from updates to the TSSRs. SSA refers to this process as Gap Analysis. EIEPs may proactively ensure their ongoing compliance with the TSSRs by periodically requesting the most current TSSR package from their SSA Point of Contact (POC) from the data exchange agreement. SSA’s standard for categorization of information (Moderate) and information systems is to provide appropriate levels of security according to risk level. Additions, deletions, or modification of security controls directly affect the level of security and due diligence SSA requires EIEPs use to mitigate risks. The emergence of new threats, attack methods, and the development of new technology warrants frequent reviews an...
Sample 1Sample 2Sample 3See All (6)

Related to Security Certification and Compliance Review Programs

  • Documentation and compliance (a) The data importer shall promptly and adequately deal with enquiries from the data exporter that relate to the processing under these Clauses. (b) The Parties shall be able to demonstrate compliance with these Clauses. In particular, the data importer shall keep appropriate documentation on the processing activities carried out on behalf of the data exporter. (c) The data importer shall make available to the data exporter all information necessary to demonstrate compliance with the obligations set out in these Clauses and at the data exporter’s request, allow for and contribute to audits of the processing activities covered by these Clauses, at reasonable intervals or if there are indications of non-compliance. In deciding on a review or audit, the data exporter may take into account relevant certifications held by the data importer.

  • Compliance Review During the Term, Developer agrees to permit the GLO, HUD, and/or a designated representative of the GLO or HUD to access the Property for the purpose of performing Compliance-Monitoring Procedures. In accordance with GLO Compliance-Monitoring Procedures, the GLO or HUD will periodically monitor and audit Developer’s compliance with the requirements of this Agreement, the CDBG-DR Regulations, the CDBG Multifamily Rental Housing Guidelines, and any and all other Governmental Requirements during the Term. In conducting any compliance reviews, the GLO or HUD will rely primarily on information obtained from Developer’s records and reports, on-site monitoring, and audit reports. The GLO or HUD may also consider other relevant information gained from other sources, including litigation and citizen complaints. 5.04 HAZARDOUS MATERIALS: INDEMNIFICATION (a) Developer agrees to the following. (i) Developer shall not receive, store, dispose, or release any Hazardous Materials on or to the Property; transport any Hazardous Materials to or from the Property; or permit the existence of any Hazardous Material contamination on the Property. (ii) Developer shall give written notice to the GLO immediately when Developer acquires knowledge of the presence of any Hazardous Material on the Property; the transport of any Hazardous Materials to or from the Property; or the existence of any Hazardous Material contamination on the Property, with a full description thereof. (iii) Developer will promptly, at Developer’s sole cost and expense, comply with any Governmental Requirements regarding the removal, treatment, or disposal of such Hazardous Materials or Hazardous Material contamination and provide the GLO with satisfactory evidence of such compliance. (iv) Developer shall provide the GLO, within thirty (30) days of demand by the GLO, financial assurance evidencing to the GLO that the necessary funds are available to pay for the cost of removing, treating, and disposing of such Hazardous Materials or Hazardous Material contamination and discharging any assessments that may be established on the Property as a result thereof. (v) Developer shall insure that all leases, licenses, and agreements of any kind (whether written or oral) now or hereafter executed that permit any party to occupy, possess, or use in any way the Property or any part thereof include an express prohibition on the disposal or discharge of any Hazardous Materials at the Property and a provision stating that failure to comply with such prohibition shall expressly constitute a default under any such agreement. (vi) Developer shall not cause or suffer any liens (including any so-called state, federal, or local “Superfund” lien relating to such matters) to be recorded against the Property as a consequence of, or in any way related to, the presence, remediation, or disposal of Hazardous Materials in or about the Property. (b) DEVELOPER SHALL, AT ALL TIMES, RETAIN ANY AND ALL LIABILITIES ARISING FROM THE PRESENCE, HANDLING, TREATMENT, STORAGE, TRANSPORTATION, REMOVAL, OR DISPOSAL OF HAZARDOUS MATERIALS ON THE PROPERTY. REGARDLESS OF WHETHER ANY EVENT OF DEFAULT OCCURS OR CONTINUES, WHETHER THE GLO EXERCISES ANY REMEDIES IN RESPECT TO THE PROPERTY, OR SUCH SITUATION RELATED TO HAZARDOUS MATERIALS WAS CAUSED BY OR WITHIN THE CONTROL OF DEVELOPER OR THE GLO, DEVELOPER SHALL DEFEND, INDEMNIFY, AND HOLD HARMLESS THE GLO AND ITS OFFICERS, AGENTS, AND EMPLOYEES FROM AND AGAINST ANY AND ALL LIABILITIES, SUITS, ACTIONS, CLAIMS, DEMANDS, PENALTIES, DAMAGES (INCLUDING, WITHOUT LIMITATION, LOST PROFITS, CONSEQUENTIAL DAMAGES, INTEREST, PENALTIES, FINES, AND MONETARY SANCTIONS), LOSSES, COSTS, AND EXPENSES (INCLUDING, WITHOUT LIMITATION, REASONABLE ATTORNEYS’ FEES AND COSTS) THAT MAY: (i) NOW OR IN THE FUTURE (WHETHER BEFORE OR AFTER THE CULMINATION OF THE TRANSACTIONS CONTEMPLATED BY THIS AGREEMENT) BE INCURRED OR SUFFERED BY THE GLO BY REASON OF, RESULTING FROM, IN CONNECTION WITH, OR ARISING IN ANY MANNER WHATSOEVER FROM THE BREACH OF ANY WARRANTY OR COVENANT IN THIS SECTION OR THE INACCURACY OF ANY REPRESENTATION OF DEVELOPER IN RELATION TO THIS AGREEMENT;

  • Annual Reports on Assessment of Compliance with Servicing Criteria (a) On or before March 1 of each year commencing in March 2018, the Master Servicer, the Special Servicer, the Certificate Administrator, the Custodian, the Operating Advisor and, if it has made (or is required to make) an Advance during the applicable calendar year, the Trustee, each at its own expense, shall furnish (and each of the preceding parties, as applicable, (i) with respect to any Servicing Function Participant of such party that is a Mortgage Loan Seller Sub-Servicer, shall use commercially reasonable efforts to cause such Servicing Function Participant to furnish, and (ii) with respect to any other Servicing Function Participant of such party (other than any party to this Agreement), shall cause such Servicing Function Participant to furnish) (each Master Servicer, the Special Servicer, the Certificate Administrator, the Custodian, the Operating Advisor, any Servicing Function Participant and, if it has made (or is required to make) an Advance during the applicable calendar year, the Trustee, as the case may be, a “Reporting Servicer”) to the Certificate Administrator, the Trustee, the Serviced Companion Loan Holders (or, in the case of a Serviced Companion Loan that is part of an Other Securitization Trust, the applicable Other Depositor and Other Exchange Act Reporting Party), the Operating Advisor (only in the case of a report furnished by the Special Servicer) and the Depositor, a report on an assessment of compliance with the Relevant Servicing Criteria (together with a copy thereof in XXXXX-Compatible Format, or in such other format as otherwise agreed upon by the Depositor, the Certificate Administrator, the applicable Other Depositor, the applicable Other Exchange Act Reporting Party and the applicable Certifying Servicer) that complies in all material respects with the requirements of Item 1122 of Regulation AB and contains (A) a statement by such Reporting Servicer of its responsibility for assessing compliance with the Relevant Servicing Criteria, (B) a statement that such Reporting Servicer used the Servicing Criteria to assess compliance with the Relevant Servicing Criteria, (C) such Reporting Servicer’s assessment of compliance with the Relevant Servicing Criteria as of the end of and for the preceding calendar year, including, if there has been any material instance of noncompliance with the Relevant Servicing Criteria, a discussion of each such failure and the nature and status thereof and (D) a statement that a registered public accounting firm has issued an attestation report on such Reporting Servicer’s assessment of compliance with the Relevant Servicing Criteria as of and for such period. Copies of all compliance reports delivered pursuant to this Section 10.09 shall be provided to any Certificateholder, upon the written request thereof, by the Certificate Administrator. Each such report shall be addressed to the Depositor and each Other Depositor (if addressed) and signed by an authorized officer of the applicable company, and shall address each of the Relevant Servicing Criteria specified on a certification substantially in the form of Exhibit O to this Agreement delivered to the Depositor on the Closing Date. Promptly after receipt of each such report, (i) the Depositor and each Other Depositor may review each such report and, if applicable, consult with the each Reporting Servicer as to the nature of any material instance of noncompliance with the Relevant Servicing Criteria, and (ii) the Certificate Administrator shall confirm that the assessments, taken individually address the Relevant Servicing Criteria for each party as set forth on Exhibit O to this Agreement and notify the Depositor of any exceptions. For the avoidance of doubt, the Trustee shall have no obligation or duty to determine whether any such report (other than any such report furnished by the Trustee or any Servicing Function Participant of the Trustee) is in form and substance in compliance with the requirements of Regulation AB. (b) On the Closing Date, the Master Servicer, the Special Servicer, the Certificate Administrator, the Custodian, the Trustee and the Operating Advisor each acknowledge and agree that Exhibit O to this Agreement sets forth the Relevant Servicing Criteria for such party. (c) No later than the end of each fiscal year for the Trust, the Master Servicer, the Special Servicer, the Certificate Administrator, the Custodian, the Operating Advisor and, if it has made (or is required to make) an Advance during such fiscal year, the Trustee shall notify the Certificate Administrator, the Depositor, each Other Exchange Act Reporting Party and each Other Depositor as to the name of each Servicing Function Participant utilized by it, and the Certificate Administrator shall notify the Depositor and each Other Depositor as to the name of each Servicing Function Participant utilized by it, during such fiscal year, and each such notice will specify what specific Servicing Criteria will be addressed in the report on assessment of compliance prepared by such Servicing Function Participant. When the Master Servicer, the Special Servicer, the Certificate Administrator, the Custodian, the Trustee (if applicable), the Operating Advisor and any Servicing Function Participant submit their assessments pursuant to Section 10.09(a) of this Agreement, such parties will also at such time include the assessment (and related attestation pursuant to Section 10.10 of this Agreement) of each Servicing Function Participant engaged by it. The fiscal year for the Trust shall be January 1 through and including December 31 of each calendar year. (d) In the event the Master Servicer, the Special Servicer, the Certificate Administrator, the Custodian, the Trustee (if it has made, or is required to make, an Advance during the applicable period) or the Operating Advisor is terminated or resigns pursuant to the terms of this Agreement, such party shall provide, and each such party shall cause (or, if the Servicing Function Participant is a Mortgage Loan Seller Sub-Servicer, shall use commercially reasonable efforts to cause) any Servicing Function Participant of such party to provide (and the Master Servicer, the Special Servicer and the Certificate Administrator shall, with respect to any Servicing Function Participant that resigns or is terminated under any applicable servicing agreement, cause such Servicing Function Participant (or, in the case of each Servicing Function Participant that is a Mortgage Loan Seller Sub-Servicer, shall use commercially reasonable efforts to cause such Servicing Function Participant) to provide) an annual assessment of compliance pursuant to this Section 10.09, coupled with an attestation as required in Section 10.10 of this Agreement with respect to the period of time that the Master Servicer, the Special Servicer, the Certificate Administrator, the Custodian, the Trustee (if it has made, or is required to make, an Advance during such period of time) or the Operating Advisor was subject to this Agreement or the period of time that the applicable Servicing Function Participant was subject to such other servicing agreement. With respect to each Outside Serviced Mortgage Loan serviced under the applicable Outside Servicing Agreement, the Certificate Administrator shall use commercially reasonable efforts to obtain, and upon receipt deliver to the Depositor, an annual report on assessment of compliance as described in this Section and an attestation as described in Section 10.10 from the related Outside Servicer, Outside Special Servicer, Outside Custodian, Outside Trustee and Outside Paying Agent or Outside Certificate Administrator and in form and substance similar to the annual report on assessment of compliance described in this Section 10.09 and the attestation described in Section 10.10.

  • Servicer Compliance Statement On or before March 1 of each calendar year, commencing in 2007, the Servicer shall deliver to the Owner and any Depositor a statement of compliance addressed to the Owner and such Depositor and signed by an authorized officer of the Servicer, to the effect that (i) a review of the Servicer’s activities during the immediately preceding calendar year (or applicable portion thereof) and of its performance under this Agreement and any applicable Reconstitution Agreement during such period has been made under such officer’s supervision, and (ii) to the best of such officers’ knowledge, based on such review, the Servicer has fulfilled all of its obligations under this Agreement and any applicable Reconstitution Agreement in all material respects throughout such calendar year (or applicable portion thereof) or, if there has been a failure to fulfill any such obligation in any material respect, specifically identifying each such failure known to such officer and the nature and the status thereof.

  • Monitoring Compliance Upon the request of the Lender, but without incurring any liability beyond the Guaranteed Obligations, from time to time, Guarantor shall promptly provide to the Lender such documents, certificates and other information as may be deemed reasonably necessary to enable the Lender to perform its functions under the Servicing Agreement as the same relates to the Guarantor.

  • FUND COMPLIANCE 3.1 The Fund and the Adviser acknowledge that any failure (whether intentional or in good faith or otherwise) to comply with the requirements of Subchapter M of the Code or the diversification requirements of Section 817(h) of the Code may result in the Contracts not being treated as variable contracts for federal income tax purposes, which would have adverse tax consequences for Contract owners and could also adversely affect the Company's corporate tax liability. The Fund and the Adviser further acknowledge that any such failure may result in costs and expenses being incurred by the Company in obtaining whatever regulatory authorizations are required to substitute shares of another investment company for those of the failed Fund or as well as fees and expenses of legal counsel and other advisors to the Company and any federal income taxes, interest or tax penalties incurred by the Company in connection with any such failure. 3.2 The Fund represents and warrants that it is currently qualified as a Regulated Investment Company under Subchapter M of the Code, and that it will maintain such qualification (under Subchapter M or any successor or similar provision) and that it will notify the Company immediately upon having a reasonable basis for believing that it has ceased to so qualify or that it might not so qualify in the future. 3.3 The Fund represents that it will at all times invest money from the Contracts in such a manner as to ensure that the Contracts will be treated as variable contracts under the Code and the regulations issued thereunder; including, but not limited to, that the Fund will at all times comply with Section 817(h) of the Code and Treasury Regulation 1.817-5, as amended from time to time, relating to the diversification requirements for variable annuity, endowment, or life insurance contracts, and with Section 817(d) of the Code, relating to the definition of a variable contract, and any amendments or other modifications to such Section or Regulation. The Fund will notify the Company immediately upon having a reasonable basis for believing that the Fund or a Portfolio thereunder has ceased to comply with the diversification requirements or that the Fund or Portfolio might not comply with the diversification requirements in the future. In the event of a breach of this representation by the Fund, it will take all reasonable steps to adequately diversify the Fund so as to achieve compliance within the grace period afforded by Treasury Regulation 1.817-5. 3.4 The Adviser agrees to provide the Company with a certificate or statement indicating compliance by each Portfolio of the Fund with Section 817(h) of the Code, such certificate or statement to be sent to the Company no later than thirty (30) days following the end of each calendar quarter.

  • Statement of Compliance Contractor has, unless exempted, complied with the nondiscrimination program requirements. (Gov. Code §12990 (a-f) and CCR, Title 2, Section 11102) (Not applicable to public entities.)

  • Reporting of Compliance Matters (a) The Sub-Adviser shall promptly provide to the Trust’s Chief Compliance Officer (“CCO”) the following documents: (i) copies of all SEC examination correspondences, including correspondences regarding books and records examinations and “sweep” examinations, issued during the term of this Agreement, in which the SEC identified any concerns, issues or matters (such correspondences are commonly referred to as “deficiency letters”) relating to any aspect of the Sub-Adviser’s investment advisory business and the Sub-Adviser’s responses thereto; (ii) a report of any material violations of the Sub-Adviser’s Compliance Program or any “material compliance matters” (as such term is defined in Rule 38a-1 under the 0000 Xxx) that have occurred with respect to the Sub-Adviser’s Compliance Program; (iii) a report of any material changes to the policies and procedures that compose the Sub-Adviser’s Compliance Program; (iv) a copy of the Sub-Adviser’s chief compliance officer’s report (or similar document(s) which serve the same purpose) regarding his or her annual review of the Sub-Adviser’s Compliance Program, as required by Rule 206(4)-7 under the Advisers Act; and (v) an annual (or more frequently as the Trust’s CCO may reasonably request) representation regarding the Sub-Adviser’s compliance with Paragraphs 7 and 8 of this Agreement. (b) The Sub-Adviser shall also provide the Trust’s CCO with: (i) reasonable access to the testing, analyses, reports and other documentation, or summaries thereof, that the Sub-Adviser’s chief compliance officer relies upon to monitor the effectiveness of the implementation of the Sub-Adviser’s Compliance Program; and (ii) reasonable access, during normal business hours, to the Sub-Adviser’s facilities for the purpose of conducting pre-arranged on-site compliance related due diligence meetings with personnel of the Sub-Adviser.

  • Project Monitoring Reporting and Evaluation The Recipient shall furnish to the Association each Project Report not later than forty-five (45) days after the end of each calendar semester, covering the calendar semester.

  • Compliance Reports The Subadvisor at its expense will provide the Advisor with such compliance reports relating to its duties under this Agreement as may be agreed upon by such parties from time to time.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!