Third Party Security Audit. Lattice is and shall continue to be annually audited against the SOC 2 Type II standard. The audit shall be completed by an independent third-party. Upon Customer’s written request, Lattice will provide a summary copy (on a confidential basis) of the most recent resulting annual audit report, so that Customer can verify Lattice’s compliance with the audit standards against which it has been assessed and this DPA. Although that report provides an independently audited confirmation of Lattice’s security posture annually, the most common points of interest are further detailed below. Lattice shall provide Customer with this initial evidence of compliance within thirty (30) days of written request and annually upon written request.
Third Party Security Audit. Contractor engaged IOActive to evaluate the security threats and risks associated with Contractor’s external web application, and to perform a vulnerability assessment and penetration test. As a result, IOActive consultants performed an extensive security assessment of the identified application. About IOActive: Established in 1998, IOActive is an industry leader that offers comprehensive computer security services with specializations in smart grid technologies, software assurance, and compliance. Boasting a well-rounded and diverse clientele, IOActive works with a majority of Global 500 companies including power and utility, game, hardware, retail, financial, media, travel, aerospace, healthcare, high-tech, social networking, and software development organizations.
Third Party Security Audit. Gainsight shall continue to be annually audited against the SOC 2 Type II standard, at Gainsight’s expense. The audit shall be completed by an independent third-party. Upon Client’s written request, Gainsight will provide a copy of the resulting annual audit report. Although that report provides an independently audited confirmation of Gainsight’s security posture annually, the most common points of interest are further detailed below. Gainsight shall provide Client with this initial evidence of compliance within thirty (30) days of written request and annually upon written request.
