Triparound Systems and Security Obligations. Triparound will employ security measures in accordance with applicable industry practice. Triparound’s safeguards for the protection of Customer Data shall include: (a) limiting access of Customer Data to authorized personnel; (b) securing business facilities, data centers, paper files, servers, backup systems, and computing equipment, including, but not limited to, all mobile devices and other equipment with information storage capability; (c) implementing network, application, database, and platform security; (d) securing information transmission, storage, and disposal; (e) implementing authentication and access controls within media, applications, operating systems, and equipment; (f) encrypting sensitive Customer Data stored on any mobile media; (g) encrypting Customer Data transmitted over public or wireless networks; (h) conducting risk assessments, penetration testing, and vulnerability scans and promptly implementing, at Triparound’s sole cost and expense, a corrective action plan to correct any issues that are reported as a result of the testing; (i) implementing appropriate personnel security and integrity procedures and practices, including, but not limited to, conducting background checks consistent with applicable law; and (j) providing appropriate privacy and information security training to Triparound’s employees.
