Passwords and Employee Access Provider shall secure usernames, passwords, and any other means of gaining access to the Services or to Student Data, at a level suggested by Article 4.3 of NIST 800-63-3. Provider shall only provide access to Student Data to employees or contractors that are performing the Services. Employees with access to Student Data shall have signed confidentiality agreements regarding said Student Data. All employees with access to Student Records shall pass criminal background checks.
Contractor’s Project Manager and Key Personnel Contractor shall appoint a Project Manager to direct the Contractor’s efforts in fulfilling Contractor’s obligations under this Contract. This Project Manager shall be subject to approval by the County and shall not be changed without the written consent of the County’s Project Manager, which consent shall not be unreasonably withheld. The Contractor’s Project Manager shall be assigned to this project for the duration of the Contract and shall diligently pursue all work and services to meet the project time lines. The County’s Project Manager shall have the right to require the removal and replacement of the Contractor’s Project Manager from providing services to the County under this Contract. The County’s Project manager shall notify the Contractor in writing of such action. The Contractor shall accomplish the removal within five (5) business days after written notice by the County’s Project Manager. The County’s Project Manager shall review and approve the appointment of the replacement for the Contractor’s Project Manager. The County is not required to provide any additional information, reason or rationale in the event it The County is not required to provide any additional information, reason or rationale in the event it requires the removal of Contractor’s Project Manager from providing further services under the Contract.
Security Safeguards Contractor shall maintain a comprehensive security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of District Data. Contractor shall store and process District Data in accordance with industry standards and best practices, including implementing appropriate administrative, physical, and technical safeguards that are no less rigorous than those outlined in CIS Critical Security Controls (CIS Controls), as amended, to secure such data from unauthorized access, disclosure, alteration, and use. Contractor shall ensure that all such safeguards, including the manner in which District Data is collected, accessed, used, stored, processed, disposed of and disclosed, comply with all applicable federal and state data protection and privacy laws, regulations and directives, including without limitation the Act, as well as the terms and conditions of this Addendum. Without limiting the foregoing, and unless expressly agreed to the contrary in writing, Contractor warrants that all electronic District Data will be encrypted in transmission and at rest in accordance with NIST Special Publication 800-57, as amended, or such other standard as the District’s Chief Privacy Officer or designee may agree to in writing. Contractor shall also encrypt any backup, backup media, removable media, tape, or other copies. In addition, Contractor shall fully encrypt disks and storage for all laptops and mobile devices.
Contractor Key Personnel The Contractor shall assign a Corporate OASIS SB Program Manager (COPM) and Corporate OASIS SB Contract Manager (COCM) as Contractor Key Personnel to represent the Contractor as primary points-of-contact to resolve issues, perform administrative duties, and other functions that may arise relating to OASIS SB and task orders solicited and awarded under OASIS SB. Additional Key Personnel requirements may be designated by the OCO at the task order level. There is no minimum qualification requirements established for Contractor Key Personnel. Additionally, Contractor Key Personnel do not have to be full-time positions; however, the Contractor Key Personnel are expected to be fully proficient in the performance of their duties. The Contractor shall ensure that the OASIS SB CO has current point-of-contact information for both the COPM and COCM. In the event of a change to Contractor Key Personnel, the Contractor shall notify the OASIS SB CO and provide all Point of Contact information for the new Key Personnel within 5 calendar days of the change. All costs associated with Contractor Key Personnel duties shall be handled in accordance with the Contractor’s standard accounting practices; however, no costs for Contractor Key Personnel may be billed to the OASIS Program Office. Failure of Contractor Key Personnel to effectively and efficiently perform their duties will be construed as conduct detrimental to contract performance and may result in activation of Dormant Status and/or Off-Ramping (See Sections H.16. and H.17.).
Contractor Parties A Contractor’s members, directors, officers, shareholders, partners, managers, principal officers, representatives, agents, servants, consultants, employees or any one of them or any other person or entity with whom the Contractor is in privity of oral or written contract and the Contractor intends for such other person or entity to Perform under the Contract in any capacity.
Subrecipient’s Project Manager and Key Personnel Subrecipient shall appoint a Project Manager to direct the Subrecipient’s efforts in fulfilling Subrecipient’s obligations under this Contract. This Project Manager shall be subject to approval by the County and shall not be changed without the written consent of the County’s Project Manager, which consent shall not be unreasonably withheld. The Subrecipient’s Project Manager, in consultation and agreement with County, shall be assigned to this project for the duration of the Contract and shall diligently pursue all work and services to meet the project time lines. The County’s Project Manager shall have the right to require the removal and replacement of the Subrecipient’s Project Manager from providing services to the County under this Contract. The County’s Project Manager shall notify the Subrecipient in writing of such action. The Subrecipient shall accomplish the removal within five (5) business days after written notice by the County’s Project Manager. The County’s Project Manager shall review and approve the appointment of the replacement for the Subrecipient’s Project Manager. The County is not required to provide any additional information, reason or rationale in the event it The County is not required to provide any additional information, reason or rationale in the event it requires the removal of Subrecipient’s Project Manager from providing further services under the Contract.
Employees Subcontractors and Agents All employees, Subcontractors, or agents of the Contractor performing work under the Contract must be trained staff or technicians who meet or exceed the professional, technical, and training qualifications set forth in the Contract or the Purchase Order, and must comply with all security and administrative requirements of the Authorized User that are communicated to the Contractor. The Commissioner and the Authorized User reserve the right to conduct a security background check or otherwise approve any employee, Subcontractor, or agent furnished by Contractor and to refuse access to or require replacement of any personnel for cause based on professional, technical or training qualifications, quality of work or change in security status or non-compliance with Authorized User’s security or other requirements. Such approval shall not relieve the Contractor of the obligation to perform all work in compliance with the Contract or the Purchase Order. The Commissioner and the Authorized User reserve the right to reject and/or bar from any facility for cause any employee, Subcontractor, or agent of the Contractor.
Technical Safeguards 1. USAC and DSS will process the data matched and any data created by the match under the immediate supervision and control of authorized personnel to protect the confidentiality of the data, so unauthorized persons cannot retrieve any data by computer, remote terminal, or other means. 2. USAC and DSS will strictly limit authorization to these electronic data areas necessary for the authorized user to perform their official duties. All data in transit will be encrypted using algorithms that meet the requirements of the Federal Information Processing Standard (FIPS) Publication 140-2 or 140-3 (when applicable). 3. Authorized system users will be identified by User ID and password, and individually tracked to safeguard against the unauthorized access and use of the system. System logs of all user actions will be saved, tracked and monitored periodically. 4. USAC will transmit data to DSS via encrypted secure file delivery system. For each request, a response will be sent back to USAC to indicate success or failure of transmission.
Disclosure of Contractor Parties Litigation The Contractor shall require that all Contractor Parties, as appropriate, disclose to the Contractor, to the best of their knowledge, any Claims involving the Contractor Parties that might reasonably be expected to materially adversely affect their businesses, operations, assets, properties, financial stability, business prospects or ability to Perform fully under the Contract, no later than ten (10) Days after becoming aware or after they should have become aware of any such Claims. Disclosure shall be in writing.
Responsibilities and Restrictions Concerning Governing Body, Officers and Employees Grantee and its governing body will: a. bear full responsibility for the integrity of the fiscal and programmatic management of the organization. b. be accountable for all funds and materials received from the System Agency. The responsibility of Grantee’s governing body will also include accountability for compliance with the System Agency Rules, policies, procedures, and applicable federal and state laws and regulations; and correction of fiscal and program deficiencies identified through self-evaluation and the System Agency’s monitoring processes. c. ensure separation of powers, duties, and functions of governing body members and staff. No member of Xxxxxxx’s governing body, or officer or employee of Grantee will vote for, confirm or act to influence the employment, compensation or change in status of any person related within the second degree of affinity or the third degree of consanguinity (as defined in Texas Government Code Chapter 573) to the member of the governing body or the officer or any employee authorized to employ or supervise such person. This prohibition does not prohibit the continued employment of a person who has been continuously employed for a period of two years prior to the election, appointment or employment of the officer, employee, or governing body member related to such person in the prohibited degree. These restrictions also apply to the governing body, officers, and employees of Xxxxxxx’s subcontractors.