Security Review and Audit Sample Clauses

Security Review and Audit. 1. Upon reasonable advance notice to Manager, Walmart’s Information Systems Division (“ISD”) Security Group may conduct a security review of Manager’s Information Security Program to the extent relevant to the Services performed by Manager under the Agreement or the representations made herein, when determined reasonably required by Walmart; provided, however, that such review shall be conducted in a manner that will not materially disrupt Manager’s day-to-day operations. 2. At Walmart’s request, Manager will provide Walmart copies of its data privacy and security policies and procedures that apply to Walmart Information. Subject to reasonable notice, Manager shall provide the Walmart’s ISD Security Group an opportunity to conduct a privacy and security audit of Manager’s Information Security Program and systems and procedures that are applicable to the Services provided by Manager to Walmart. Such audit may be conducted on-site by Walmart personnel or Walmart’s contracted third party assessors or through surveys and interviews, at the option of Walmart; provided, however, that such audit shall be conducted in a manner that will not materially disrupt Manager’s day-to-day operations. 3. In the event Manager has any security audits or reviews of its own systems, performed by Manager or a third party, including vulnerability and penetration assessments, it will give Walmart notice of any non-privileged current findings that are likely to adversely impact Walmart Information, and will keep Walmart timely informed of its remediation efforts.
Sample 1Sample 2Sample 3
AutoNDA by SimpleDocs
Security Review and Audit. 5.1 You will promptly respond to inquiries from NCR related to your information security program and practices and your compliance with any Legal Requirement and NCR’s Supplier Information Security Standards, as may be necessitated by NCR from time to time to ensure the confidentiality, integrity and availability of NCR Data. 5.2 You will, permit NCR, on reasonable notice, to have a qualified independent third party conduct testing of your information security controls during the test window identified by NCR in its notice; such testing may include (1) a SOC 2 type II audit, (2) a network Penetration Test, and (3) an application Penetration Test. NCR will provide to you, at a minimum, an overview of the testing conducted, containing the scope, methodology and summary of findings of third party testing promptly upon your request. “Penetration Test” means a test manually validated by qualified staff to determine whether and how a malicious user can gain unauthorized access to assets that affect the fundamental security of a system or files and must confirm that applicable controls to prevent such unauthorized access are in place. If the testing indicates that your information security controls do not materially comply with the requirements of this Exhibit, all Privacy Laws or the NCR Supplier Information Security Standards, you will pay for the cost of the testing; otherwise NCR will pay for the cost of the testing itself.
Sample 1Sample 2
Security Review and Audit. To ensure the security of maintenance and repair work conducted on air carrier aircraft and compo- nents at foreign repair stations, the Under Sec- retary for Border and Transportation Security of the Department of Homeland Security, in consultation with the Administrator of the Fed- eral Aviation Administration, shall complete a security review and audit of foreign repair sta- tions that are certified by the Administrator under part 145 of title 14, Code of Federal Regu- lations, and that work on air carrier aircraft and components. The review shall be completed not later than 18 months after the date on which the Under Secretary issues regulations under subsection (f).
Sample 1
Security Review and Audit. 4.1 Supplier will promptly respond to inquiries from Customer related to Supplier’s information security program and practices and Supplier’s compliance with any of Customer’s Supplier Information Security Standards, as may be necessitated by Customer from time to time to ensure the confidentiality, integrity and availability of Customer Data. 4.2 Supplier will, at Supplier’s sole expense, have a qualified independent third party conduct testing of Supplier’s information security controls; such testing will include (1) a SOC 2 type II audit, (2) a network Penetration Test, and (3) an application Penetration Test. Supplier will provide, at a minimum, an overview of the testing conducted, containing the scope, methodology and summary of findings of third party testing to Customer promptly upon Customer’s request (including in advance of execution of the Agreement, if requested). “Penetration Test” means a test manually validated by qualified staff to determine whether and how a malicious user can gain unauthorized access to assets that affect the fundamental security of a system or files and must confirm that applicable controls to prevent such unauthorized access are in place. All 45330990v.3 Penetration Tests must meet or exceed applicable industry standards, such as PCI DSS Penetration Testing Guidance, OWASP Application Penetration Testing, or PTES Technical Guidelines.
Sample 1
Security Review and Audit 
Sample 1

Related to Security Review and Audit

  • Right of Review and Audit Upon request by the EA, Contractor shall provide the EA with copies of its policies and related procedures that pertain to the protection of PII. It may be made available in a form that does not violate Contractor’s own information security policies, confidentiality obligations, and applicable laws. In addition, Contractor may be required to undergo an audit of its privacy and security safeguards, measures and controls as it pertains to alignment with the requirements of New York State laws and regulations, the EA’s policies applicable to Contractor, and alignment with the NIST Cybersecurity Framework performed by an independent third party at Contractor’s expense, and provide the audit report to the EA. Contractor may provide the EA with a recent industry standard independent audit report on Contractor’s privacy and security practices as an alternative to undergoing an audit.

  • INSPECTION AND AUDIT The CONTRACTOR shall maintain, and the LEA shall have the right to examine and audit all of the books, records, documents, accounting procedures and practices and other evidence that reflect all costs claimed to have been incurred or fees claimed to have been earned under this Agreement. CONTRACTOR shall provide access to LEA to all records including, but not limited to: student records as defined by California Education Code section 49061(b); registers and roll books of teachers; daily service logs and notes or other documents used to record the provision of related services; Medi-Cal/daily service logs and notes used to record provision of services provided by instructional assistants, behavior intervention aides, bus aides, and supervisors; absence verification records (parent/doctor notes, telephone logs, and related documents); bus rosters; staff lists specifying credentials held, business licenses held, documents evidencing other qualifications, social security numbers, dates of hire, and dates of termination; staff time sheets; non-paid staff and volunteer sign-in sheets; transportation and other related service subcontracts; school calendars; bell/class schedules when applicable; liability and worker’s compensation insurance policies; state NPS/A certifications; by-laws; lists of current board of directors/trustees, if incorporated; other documents evidencing financial expenditures; federal/state payroll quarterly reports Form 941/DE3DP; and bank statements and canceled checks or facsimile thereof. Such access shall include unannounced inspections by XXX. CONTRACTOR shall make available to LEA all budgetary information including operating budgets submitted by CONTRACTOR to LEA for the relevant contract period being audited. CONTRACTOR shall make all records available at the office of LEA or CONTRACTOR’s offices (to be specified by XXX) at all reasonable times and without charge. All records shall be provided to LEA within five (5) working days of a written request from XXX. CONTRACTOR shall, at no cost to LEA, provide assistance for such examination or audit. XXX’s rights under this section shall also include access to CONTRACTOR’s offices for purposes of interviewing CONTRACTOR’s employees. If any document or evidence is stored in an electronic form, a hard copy shall be made available to the LEA, unless the LEA agrees to the use of the electronic format. CONTRACTOR shall obtain from its subcontractors and suppliers written agreements to the requirements of this section and shall provide a copy of such agreements to LEA upon request by XXX. If an inspection, review, or audit by XXX, a state agency, a federal agency, and/or an independent agency/firm determines that CONTRACTOR owes LEA monies as a result of CONTRACTOR’s over billing or failure to perform, in whole or in part, any of its obligations under this Master Contract, LEA shall provide to CONTRACTOR written notice demanding payment from CONTRACTOR and specifying the basis or bases for such demand. Unless CONTRACTOR and XXX otherwise agree in writing, CONTRACTOR shall pay to LEA the full amount owed as result of CONTRACTOR’s over billing and/or failure to perform, in whole or in part, any of its obligations under this Master Contract, as determined by an inspection, review, or audit by XXX, a state agency, a federal agency, and/or an independent agency/firm. CONTRACTOR shall make such payment to LEA within thirty (30) days of receipt of XXX’s written notice demanding payment.

  • Monitoring and Audit Seller shall provide information on available audit logs and reports relating to cyber and physical and security. Company may audit Seller's records to ensure Seller's compliance with the terms of this Section 1(b)(iii)G (Critical Infrastructure Protection) of this Attachment B (Facility Owned by Seller), provided that Company has provided reasonable notice to Seller and any such records of Seller's will be treated by Company as confidential.

  • Certifications and Audits Company shall promptly complete and return to BNYM any certifications which BNYM in its sole discretion may from time to time send to Company, certifying that Company is using the Licensed System in strict compliance with the terms and conditions set forth in this Agreement. BNYM may, at its expense and after giving reasonable advance written notice to Company, enter Company locations during normal business hours and audit Company’s utilization of the Licensed System, the number of copies of the Documentation in Company’s possession, and the scope of use and information pertaining to Company’s compliance with the provisions of this Agreement. The foregoing right may be exercised directly by BNYM or by delegation to an independent auditor acting on its behalf. If BNYM discovers that there is any unauthorized scope of use or that Company is not in compliance with the aforementioned provisions, Company shall reimburse BNYM for the full costs incurred in conducting the audit.

  • INSPECTIONS AND AUDITS 30 A. ADMINISTRATOR, any authorized representative of COUNTY, any authorized representative 31 of the State of California, the Secretary of the United States Department of Health and Human Services, 32 the Comptroller General of the United States, or any other of their authorized representatives, shall have 33 access to any books, documents, and records, including but not limited to, financial statements, general 34 ledgers, relevant accounting systems, medical and client records, of CONTRACTOR that are directly 35 pertinent to this Agreement, for the purpose of responding to a beneficiary complaint or conducting an 36 audit, review, evaluation, or examination, or making transcripts during the periods of retention set forth 37 in the Records Management and Maintenance Paragraph of this Agreement. Such persons may at all 1 reasonable times inspect or otherwise evaluate the services provided pursuant to this Agreement, and the 2 premises in which they are provided. 3 B. CONTRACTOR shall actively participate and cooperate with any person specified in 4 Subparagraph A. above in any evaluation or monitoring of the services provided pursuant to this 5 Agreement, and shall provide the above–mentioned persons adequate office space to conduct such 6 evaluation or monitoring. 7 C. AUDIT RESPONSE 8 1. Following an audit report, in the event of non–compliance with applicable laws and 9 regulations governing funds provided through this Agreement, COUNTY may terminate this Agreement 10 as provided for in the Termination Paragraph or direct CONTRACTOR to immediately implement 11 appropriate corrective action. A plan of corrective action shall be submitted to ADMINISTRATOR in 12 writing within thirty (30) calendar days after receiving notice from ADMINISTRATOR. 13 2. If the audit reveals that money is payable from one party to the other, that is, reimbursement 14 by CONTRACTOR to COUNTY, or payment of sums due from COUNTY to CONTRACTOR, said 15 funds shall be due and payable from one party to the other within sixty (60) calendar days of receipt of 16 the audit results. If reimbursement is due from CONTRACTOR to COUNTY, and such reimbursement 17 is not received within said sixty (60) calendar days, COUNTY may, in addition to any other remedies 18 provided by law, reduce any amount owed CONTRACTOR by an amount not to exceed the 19 reimbursement due COUNTY. 20 D. CONTRACTOR shall retain a licensed certified public accountant, who will prepare an annual 21 Single Audit as required by 31 USC 7501 – 7507, as well as its implementing regulations under 2 CFR 22 Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal 23 Awards. CONTRACTOR shall forward the Single Audit to ADMINISTRATOR within fourteen (14) 24 calendar days of receipt. 25 E. CONTRACTOR shall forward to ADMINISTRATOR a copy of any audit report within 26 fourteen (14) calendar days of receipt. Such audit shall include, but not be limited to, management, 27 financial, programmatic or any other type of audit of CONTRACTOR’s operations, whether or not the 28 cost of such operation or audit is reimbursed in whole or in part through this Agreement. 29

  • Review and Appeal 1. Each Party shall ensure that the importers in its territory have access to administrative review within the customs administration that issued the decision subject to review or, where applicable, the higher authority supervising the administration and/or judicial review of the determination taken at the final level of administrative review, in accordance with the Party's domestic law. 2. The decision on appeal shall be given to the appellant and the reasons for such decision shall be provided in writing. 3. The level of administrative review may include any authority supervising the customs administration of a Party.

  • OIG INSPECTION, AUDIT, AND REVIEW RIGHTS ‌ In addition to any other rights OIG may have by statute, regulation, or contract, OIG or its duly authorized representative(s) may conduct interviews, examine or request copies of Xxxxxx’x books, records, and other documents and supporting materials and/or conduct on-site reviews of any of Xxxxxx’x locations for the purpose of verifying and evaluating: (a) Xxxxxx’x compliance with the terms of this IA and (b) Xxxxxx’x compliance with the requirements of the Federal health care programs. The documentation described above shall be made available by Xxxxxx to OIG or its duly authorized representative(s) at all reasonable times for inspection, audit, and/or reproduction. Furthermore, for purposes of this provision, OIG or its duly authorized representative(s) may interview Xxxxxx and any of Xxxxxx’x employees or contractors who consent to be interviewed at the individual’s place of business during normal business hours or at such other place and time as may be mutually agreed upon between the individual and OIG. Xxxxxx shall assist OIG or its duly authorized representative(s) in contacting and arranging interviews with such individuals upon OIG’s request. Xxxxxx’x employees and contractors may elect to be interviewed with or without a representative of Xxxxxx present.

  • Inspection and Audit Rights The Master Servicer agrees that, on reasonable prior notice, it will permit and will cause each Subservicer to permit any representative of the Depositor or the Trustee during the Master Servicer's normal business hours, to examine all the books of account, records, reports and other papers of the Master Servicer relating to the Mortgage Loans, to make copies and extracts therefrom, to cause such books to be audited by independent certified public accountants selected by the Depositor or the Trustee and to discuss its affairs, finances and accounts relating to the Mortgage Loans with its officers, employees and independent public accountants (and by this provision the Master Servicer hereby authorizes said accountants to discuss with such representative such affairs, finances and accounts), all at such reasonable times and as often as may be reasonably requested. Any out-of-pocket expense incident to the exercise by the Depositor or the Trustee of any right under this Section 10.09 shall be borne by the party requesting such inspection; all other such expenses shall be borne by the Master Servicer or the related Subservicer.

  • Records and Audit/Inspections 6.13.1 A-E shall keep an accurate record of time expended by A-E and/or consultants employed by A-E in the performance of this CONTRACT. 6.13.2 Within ten (10) days of COUNTY's written request, A-E shall allow COUNTY or authorized State or Federal agencies or any duly authorized representative to have the right to access, examine, audit, excerpt, copy or transcribe any pertinent transaction, activity, time cards or other records relating to this CONTRACT. 6.13.3 A-E shall keep such material, including all pertinent cost accounting, financial records and proprietary data for a period of three (3) years after termination or completion of the CONTRACT or until resolution of any claim or dispute between the PARTIES, whichever is later. 6.13.4 Should A-E cease to exist as a legal entity, records pertaining to this CONTRACT shall be forwarded within a reasonable period of time not to exceed sixty (60) days to its successor in interest or surviving entity in a merger or acquisition, or, in the event of liquidation, to COUNTY.

  • Records Administration and Audit 14.1.1 The Contractor shall maintain books, records, documents, and other evidence pertaining to this Master Agreement and Orders placed by Purchasing Entities under it to the extent and in such detail as will adequately reflect performance and administration of payments and fees. Contractor shall permit the Lead State, a Participating Entity, a Purchasing Entity, the federal government (including its grant awarding entities and the U.S. Comptroller General), and any other duly authorized agent of a governmental agency, to audit, inspect, examine, copy and/or transcribe Contractor's books, documents, papers and records directly pertinent to this Master Agreement or orders placed by a Purchasing Entity under it for the purpose of making audits, examinations, excerpts, and transcriptions. This right will survive for a period of six (6) years following termination of this Agreement or final payment for any order placed by a Purchasing Entity against this Master Agreement, whichever is later, or such longer period as is required by the Purchasing Entity’s state statutes, to assure compliance with the terms hereof or to evaluate performance hereunder. 14.1.2 Without limiting any other remedy available to any governmental entity, the Contractor shall reimburse the applicable Lead State, Participating Entity, or Purchasing Entity for any overpayments inconsistent with the terms of the Master Agreement or Orders or underpayment of fees found as a result of the examination of the Contractor’s records. 14.1.3 The rights and obligations herein exist in addition to any quality assurance obligation in the Master Agreement that requires the Contractor to self-audit contract obligations and that permits the Lead State to review compliance with those obligations.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!