SECURITY PROCESSES. If requested by an Authorized User as part the Request for Quote process, Contractor shall complete a Consensus Assessment Initiative Questionnaire (CAIQ) including on an annual basis thereafter. The form is available at Cloud Security Alliance (xxxxx://xxxxxxxxxxxxxxxxxxxxx.xxx/). The CAIQ may be used to assist the Authorized User in building the necessary assessment processes when engaging with Cloud providers. In addition to a request for a CAIQ, Contractor shall cooperate with all reasonable Authorized User requests for a Written description of Contractor’s physical/virtual security and/or internal control processes. The Authorized User shall have the right to reject any Contractor’s RFQ response or terminate an Authorized User Agreement when such a request has been denied. UPGRADES, SYSTEM CHANGES AND MAINTENANCE/SUPPORT The Contractor shall give a minimum of five (5) business days advance Written notice to the designated Authorized User(s) contact of any upgrades or system changes that will impact services as provided in the Authorized User Agreement. EXPIRATION, TERMINATION OR SUSPENSION OF SERVICES Return of Data The Contractor shall return Data in a format agreed upon within the Authorized User Agreement or as agreed to with the Authorized User. The Contractor must certify all Data has been removed from its system and removed from backups within timeframes established in the Authorized User Agreement or as agreed to with the Authorized User.
Appears in 55 contracts
