Service Integrity and Availability Control. 6.1 Acoustic will: a) ensure security and privacy risk assessments of its SaaS Products are carried out at least annually; b) ensure penetration testing and vulnerability assessments, including automated system and application security scanning and manual ethical hacking, are carried out before production release and annually thereafter; c) ensure a qualified independent third-party performs penetration testing at least annually; d) ensure automated management and routine verification of underlying Components' compliance with security-configuration requirements are carried out; and e) remediate identified vulnerabilities or noncompliance with its security configuration requirements based on associated risk, exploitability, and impact.
Service Integrity and Availability Control. (a) U-Visit (i) performs penetration testing and vulnerability assessments, including automated system and application security scanning and manual ethical hacking, before production release and annually thereafter, (ii) enlists a qualified independent third-party to perform penetration testing at least annually, (iii) performs automated management and routine verification of underlying components’ compliance with security configuration requirements, and (iv) remediates identified vulnerabilities or noncompliance with its security configuration requirements based on associated risk, exploitability, and impact. U-Visit will take reasonable steps to avoid Service disruption when performing its tests, assessments, scans, and execution of remediation activities.
Service Integrity and Availability Control. With respect to Pindrop-Controlled Systems, Pindrop will:
Service Integrity and Availability Control a. The Supplier will: (1) perform security and privacy risk assessments of the Supplier Services at least annually, (2) perform security testing and vulnerability assessments of the Supplier Services before production release and at least annually thereafter, (3) enlist a qualified independent third party, the Supplier X-Force™ or, if specified in the Supplier Services Document, another qualified testing service to perform penetration testing of the Supplier Cloud Services, at least annually, (4) perform automated vulnerability scanning of underlying Components of the Supplier Services against industry security configuration best practices, (5) remediate identified vulnerabilities from security testing and scanning, based on associated risk, exploitability, and impact, and (6) take reasonable steps to avoid disruption to the Supplier Services when performing its tests, assessments, scans, and execution of remediation activities.
Service Integrity and Availability Control a. IBM will: (1) perform security and privacy risk assessments of the IBM Services at least annually, (2) perform security testing and vulnerability assessments of the IBM Services before production release and at least annually thereafter, (3) enlist a qualified independent third party, IBM X-Force™ or, if specified in an IBM Services Document, another qualified testing service to perform penetration testing of the IBM Cloud Services, at least annually, (4) perform automated vulnerability scanning of underlying Components of the IBM Services against industry security configuration best practices, (5) remediate identified vulnerabilities from security testing and scanning, based on associated risk, exploitability, and impact, and (6) take reasonable steps to avoid disruption to the IBM Services when performing its tests, assessments, scans, and execution of remediation activities.
Service Integrity and Availability Control
