System and Organization Controls (SOC) Report Sample Clauses

System and Organization Controls (SOC) Report. Prior to the commencement of any services, at least once annually, and upon request for the duration of the Agreement, Contractor must provide County with a copy of a current unqualified System and Organization Controls (SOC) 2 Type II Report for the Contractor, as well as any third party that provides hosting, SaaS, or data storage services for the Contractor platform, inclusive of all five Trust Service Principles (Security, Availability, Processing Integrity, Confidentiality, and Privacy), unless the County’s Chief Information Officer in his or her sole discretion approves other documentation of appropriate security controls implemented by Contractor. If the audit opinion in the SOC 2, Type II report is qualified in any way, Contractor shall provide sufficient documentation to demonstrate remediation of the issue(s) to the satisfaction of the County’s Chief Information Officer.

System and Organization Controls (SOC) Report. To the extent applicable to the services proposed in this Contract, Vendor agrees to provide annually, for University’s review, a System and Organization Controls Report, or equivalent, to ensure University’s compliance with 30 ILCS 10/3001. Vendor agrees to promptly correct any material deficiencies identified therein.