Security. The Processor is committed to provide a high level of security in its products and services. The Processor provides its security level through organisational, technical and physical security measures, according to the requirements on information security measures outlined in the GDPR article 32. The Visma-group’s framework for privacy shall ensure the confidentiality, integrity, robustness and accessibility of personal data. The following measures are of particular importance: ● Classification of personal data to assess security measures based on risk assessment. ● Consider encryption and pseudonymization to mitigate risk. ● Restrict access to personal data only to personnel who need such access to fulfill obligations under this Data Protection Agreement or Service Agreement. ● Implementation of systems that detect, correct, prevent and report deviations. ● Use security audits to analyse whether current technical and organisational measures to protect personal data are sufficient, in light of current legislation. The Controller may audit the Processor’s compliance with this Agreement up to once a year. If required by legislation applicable to the Controller, the Controller may request audits more frequently. To request an audit, the Controller must submit a detailed audit plan at least four weeks in advance of the proposed audit date to the Processor, describing the proposed scope, duration, and start date of the audit. If any third party is to conduct the audit, it must as a main rule be mutually agreed between the Parties. However, if the processing environment is a multitenant environment or similar, the Controller gives the Processor authority to decide, due to security reasons, that audits shall be performed by a neutral third party auditor of the Processor’s choosing. If the requested audit scope is addressed in an ISAE, ISO or similar assurance report performed by a qualified third party auditor within the prior twelve months, and the Processor confirms that there are no known material changes in the measures audited, the Controller agrees to accept those findings instead of requesting a new audit of the measures covered by the report. In any case, audits must be conducted during regular business hours at the applicable facility, subject to the Processors policies, and may not unreasonably interfere with the Processors business activities. The Controller shall be responsible for any costs arising from the Controller’s requested audits. Requests for ...
Security. The CONTRACTOR shall follow all protocols and documents regulating access to the sites of AIR LIQUIDE or its customers. Photographing and/or filming parts of installations is prohibited without the explicit permission of AIR LIQUIDE.
Security. Token request and management. • Privacy and compliance certification.
Security. 6.1. Visma is committed to providing secure and reliable services, and will at all times maintain administrative, physical and technical security measures as well as backup solutions as described on xxx.xxxxx.xxx/xx/xxxxxxxxx.
Security. 6.1 During the selection process, each Party shall inform the other of the level of security clearance required, if any, to permit E&S per- sonnel to have access to Classified Information and work areas. Access to Classified Informa- tion shall be consistent with Article II, pa- ragraph 2.2 of this Agreement and shall be kept to the minimum required to accomplish the work assignment, as determined by the Host Party based on the applicable position descrip- tion.
6.2 Each Party shall cause security assuran- ces to be filed, through the Swedish Embassy in Washington, DC, in the case of the Swedish personnel, and through the U.S. Embassy in Sweden, in the case of the United States per- sonnel, stating the security clearances for all E&S personnel selected. The security assuran- ces shall be prepared and forwarded through prescribed channel sin compliance with established Host Party procedures.
6.3 The Host Organization and the Parent Organization shall ensure that assigned E&S personnel are fully cognizant of applicable laws and regulations concerning the protection of Proprietary Information (such as patents, co- pyrights, know-how, and trade secrets), Classi- fied Information and Controlled Information to which access might be gained under this Ex- change Program, both during and after termi- nation of an assignment; shall be required to sign the certification at Annex B.
6.4 E&S personnel shall at all times be re- quired to comply with the security laws, regu- lations and procedures of the government of the Host Party. Any violation of security proce- dures by E&S personnel during their assign- ments shall be reported to the Parent Party for appropriate action. E&S personnel committing willful violations of security procedures during their assignments shall be withdrawn from this Exchange Program with a view toward admi- nistrative or disciplinary action by the Parent Party.
Security. Norges Bank Investment Management supports an information security programme and practice that meets recognized industry standards for information protection and IT security, and expects its Providers to do the same. Providers are expected to manage information and IT security risks, implement reasonable and appropriate security measures, and be able to demonstrate security controls are in place In addition, Providers shall follow any security requirements specified in contractual agreements with Norges Bank Investment Management.