Common use of System Development and Maintenance Clause in Contracts

System Development and Maintenance. Publicly released third party vulnerabilities are reviewed for applicability in the Provider environment. Based on risk to Provider’s business and customers, there are pre-determined timeframes for remediation. In addition, vulnerability scanning and assessments are performed on new and key applications and the infrastructure based on risk. Code reviews and scanners are used in the development environment prior to production to proactively detect coding vulnerabilities based on risk. These processes enable proactive identification of vulnerabilities as well as compliance.

System Development and Maintenance. Publicly released third party vulnerabilities are reviewed for applicability in the Provider Secureworks environment. Based on risk to Provider’s Secureworks’ business and customers, there are pre-determined timeframes for remediation. In addition, vulnerability scanning and assessments are performed on new and key applications and the infrastructure based on risk. Code reviews and scanners are used in the development environment prior to production to proactively detect coding vulnerabilities based on risk. These processes enable proactive identification of vulnerabilities as well as compliance.