Common use of COMPLIANCE WITH FEDERAL, STATE AND LOCAL REGULATIONS Clause in Contracts

COMPLIANCE WITH FEDERAL, STATE AND LOCAL REGULATIONS. If required within the Authorized User Agreement, Contractor will provide verification of compliance with specific Federal, State and local regulations, laws and IT standards that the Authorized User is required to comply with. See Appendix F – Primary Security and Privacy Mandates. AUTHENTICATION TOKENS The Authorized User Agreement may require authentication tokens for all systems. For more details, please see NYS ITS Policy S14-006 Authentication Tokens Standard or successor. MODIFICATION TO CLOUD SERVICE DEPLOYMENT MODEL, SERVICE MODEL, AND/OR INITIAL FUNCTIONALITY WITHIN AN AUTHORIZED USER AGREEMENT As Cloud services can be flexible and dynamic, delivery mechanisms may be subject to change. This may result in changes to the deployment model, service model, functionality, or SKU. The State and Authorized Users require notification of any such changes to ensure security and business needs are met. Any changes to the deployment model, service model, functionality, or SKU (e.g., PaaS to IaaS) must be provided to OGS via Appendix C - Contract Modification Procedure. In addition, notification must be provided to the Authorized User for review and acceptance, prior to implementation. Any changes to the Authorized User Agreement will require the Authorized User to re-assess the risk mitigation methodologies and strategies and revise the Authorized User Agreement as needed. APPLICATION PROGRAM INTERFACE (API) OR SELF-SERVICE ELECTRONIC PORTAL Except as otherwise provided for in this Section 3, Contractor may offer an API or self-service electronic portal for such purposes as allowing the Authorized User to access security logs, reports, and audit information, to import or export Data, and for such other purposes as agreed to in the Authorized User Agreement.