System Access Controls Clauses Exemplaires

System Access Controls expert shall take reasonable measures to prevent Personal Information from being used without authorization. These controls shall vary based on the nature of the processing undertaken and may include, among other controls, authentication via passwords and/or two-factor authentication, documented authorization processes, documented change management processes, and/or logging of access on several levels. Expert shall implement an access policy under which access to its system environment, to Personal Information, and other data is restricted to authorized personnel only.