Common use of TRADE ALLY’S SECURITY PATCH MANAGEMENT Clause in Contracts

TRADE ALLY’S SECURITY PATCH MANAGEMENT. 8.1 The Trade Ally will have Security Patch Management procedures that require prompt application of Security Patches to System Software, Applications and Electronic Information Assets in a consistent, standardized and prioritized manner based upon criticality and risk. If a Security Patch cannot be promptly applied due to requirements for testing, then effective risk mitigation controls will be implemented until such time as Security Patches can be applied. 8.2 The Trade Ally will provide a Security Patch or fix as soon as possible, but in no event later than sixty (60) days from the notification of such Vulnerability or risk. 8.3 The Trade Ally will test all Security Patches on systems that accurately represent the configuration of the target Production Systems before deployment of the patch to Production Systems and that the correct operation of the patched system is verified after any patching activity.