Security Incident Notification and Resolution Sample Clauses

Security Incident Notification and Resolution. Outside Entity is responsible for notifying the Authority upon discovery of any security incident that may threaten or compromise the confidentiality, integrity or availability of Authority information or network infrastructure. Outside Entity shall, at a minimum, report the following to the Authority: 1) successful or unusually persistent attempts to gain unauthorized information or system access; 2) presence of malicious code that has a widespread impact throughout Outside Entity’s network infrastructure; 3) a known or suspected denial of service attack; and 4) scans and probes that precede or are related to a security incident listed above. Once it has resolved the security incident, Outside Entity must also report the following to the Authority: 1) attack source details (i.e., IP address, method, vulnerability exploited, etc.); 2) the specific effects (i.e., loss, damage, destruction, modification, disclosure) on systems, accounts or information assets resulting from the threat or compromise; and 3) actions taken to remediate the security incident.