Control Objectives. Company may establish compliance and control objectives applicable to the Services by delivering such objectives in writing to Provider (“Control Objectives”). Company may update the Control Objectives at any time during the Term (or the Termination Assistance Period) provided that, subject to the Change Control Process, Company shall be responsible for any additional costs incurred by Provider in complying with the updated Control Objectives to the extent that such updated Control Objectives apply only to Company and not to any other customer of Provider. To the extent that such updated Control Objectives apply to other customers of Provider, then the costs associated with compliance with such updated Control Objectives shall be, subject to the Change Control Process, equitably allocated among Company and such customers.
Control Objectives. Nielsen will define the control objectives to be reviewed in each SSAE 18 Report, including (i) security, (ii) availability, (iii) integrity, (iv) confidentiality, and (v) privacy. Such objectives will address IT application hosting outsourcing, including: (i) application security, (ii) business continuity planning (including backup and recovery procedures), (iii) application change management, (iv) physical security of Hardware and facilities, and (v) problem & incident management. Regarding BPO, such Reports may include: (i) completeness, accuracy and validity of payroll, contracts, orders, billing, credit notes, (ii) appropriate revenue recognition, (iii) completeness, accuracy and validity of fixed assets, accounts receivable, accounts payable, accounting estimates, other assets & liabilities, and (iv) appropriate segregation of duties.
Control Objectives. Nielsen will define the control objectives to be reviewed in each Report. Such objectives will address IT application hosting outsourcing, including: (i) application security, (ii) business continuity planning (including backup and recovery procedures), (iii) application change management, (iv) physical security of Hardware and facilities, and (v) problem & incident management. Regarding BPO, such Reports may include: (i) completeness, accuracy and validity of payroll, contracts, orders, billing, credit notes, (ii) appropriate revenue recognition, (iii) completeness, accuracy and validity of fixed assets, accounts receivable, accounts payable, accounting estimates, other assets & liabilities, and (iv) appropriate segregation of duties.
