Common use of Awareness Training Clause in Contracts

Awareness Training. 12.1. The Supplier shall ensure that its Supplier Personnel and all sub-contractors are aware of the obligations set out in this Schedule and shall comply with them. 12.2. The Supplier shall ensure that the Supplier Personnel are made aware of the Company Policies, with special regard to the following: – • Information Security Policy • Information Classification Policy • Acceptable Use Policy (Use of Email, Internet Systems & Applications and Telephony) 12.3. The Supplier must ensure that Supplier Personnel do not access the Company’s Systems Environments without having been given the training agreed with the Company on how to use the Company’s Systems Environment and the Company’s Information Security policies, standards and procedures as they relate to the provision of the Service; and the Suppliers own Information Security policies, standards and procedures. The Supplier must keep a formal record of the training carried out and provide evidence of this training to the Company on request. 12.4. The Company will, for the duration of the Agreement, provide ongoing advice to overcome any problems that the Supplier may have in operating the Company’s Systems Environments. As such the Supplier must not attempt to resolve any problems, which, as a result, could jeopardize the Company’s Systems Environments or the hardware on which the Company’s Systems Environments runs. Any problems encountered in the use of the Company’s Systems Environment must be reported immediately to the Company through the agreed channels. 12.5. The Supplier shall ensure that all Supplier Personnel complete an information security awareness training programme which shall include all the requirements of Clause 12.1 above: 12.5.1. at induction into the Supplier’s employment; 12.5.2. before being given access to the Company’s Systems Environment and/ or Company Information; and 12.5.3. at regular intervals thereafter, such intervals to be no more than 12 months. 12.6. The Supplier shall: 12.6.1. ensure that Supplier Personnel shall only have access to those parts of the Company’s Systems Environments for which they have been adequately trained; 12.6.2. ensure that Supplier Personnel shall only be involved in the provision of the Service or parts of the Service for which they have been adequately trained; and 12.6.3. ensure that any training courses which the Supplier provides in fulfilment of these clauses shall have been previously agreed with the Company in writing. 12.7. The Supplier shall permit the Company to audit the training or awareness provided in respect of its obligations under the terms of this Schedule. Should such training or awareness be shown to be inadequate the Supplier shall make good the inadequacy in accordance with the section “Remediation & Deviation”.