CUSTOMER SECURITY AUDIT Clause Samples

CUSTOMER SECURITY AUDIT. 8.1 At Customer's written request to Reveal, Customer can conduct a security audit of Reveal's facilities, systems, policies, controls and practices, at Customer's expense, by Customer or representatives of Customer, including without limitation an independent third-party auditor. 8.2 Customer Audit shall (i) occur at a mutually agreeable time not more than once a calendar year, starting at the Effective Date, and once following each Data Breach; (ii) not unreasonably interfere with Reveal's operations. Any third party performing such Customer Audit on behalf of Customer shall execute a standard nondisclosure agreement with Reveal with respect to the confidential processing and restricted use of information gathered in conducting the audit; and access to Reveal's facilities shall be subject to Reveal's reasonable access requirements and security policies. Notwithstanding the foregoing, Reveal's access requirements, security policies and the nondisclosure agreement, if applicable, shall in no way materially impede Customer, or a third party auditor selected by Customer, from conducting a Customer Audit. 8.3 The audit report shall be provided to Reveal by the auditors before it is finalised, so that Reveal can make any comments it may have, and the final report should take account of and respond to these comments. The audit report will then be sent to Reveal and discussed in a meeting between the Parties. 8.4 In the event that the final audit report reveals breaches of the commitments made in the performance of this DPA, Reveal shall propose a corrective action plan within a maximum of twenty
View SourceView Similar (6)

Related to CUSTOMER SECURITY AUDIT

  • Security Audit Customer agrees that PROS’ Audit Report will be used to satisfy any audit or inspection requests by or on behalf of Customer, and PROS will make Audit Reports available to Customer upon request. PROS will promptly remediate any material weaknesses or significant control deficiencies identified in any Audit Reports. In the event that an audit opinion is qualified and the qualification has not been remediated by the date of the Audit Report, PROS shall (i) provide Customer with PROS remediation plan; and (ii) execute such plan in accordance with its terms.

  • Security Audits Each Contract Year, County may perform or have performed security reviews and testing based on an IT infrastructure review plan. Such testing shall ensure all pertinent County security standards as well as any customer agency requirements, such as federal tax requirements or HIPPA.

  • Security Assessment If Accenture reasonably determines, or in good faith believes, that Supplier’s security practices or procedures do not meet Supplier’s obligations under the Agreement, then Accenture will notify Supplier of the deficiencies. Supplier will without unreasonable delay: (i) correct such deficiencies at its own expense; (ii) permit Accenture, or its duly authorized representatives, to assess Supplier’s security-related activities that are relevant to the Agreement; and (iii) timely complete a security questionnaire from Accenture on a periodic basis upon Accenture’s request. Security issues identified by Accenture will be assigned risk ratings and an agreed-to timeframe to remediate. Supplier will remediate all the security issues identified within the agreed to timeframes. Upon Supplier’s failure to remediate any high or medium rated security issues within the stated timeframes, Accenture may terminate the Agreement in accordance with Section 8 above.

  • Contractor Security Clearance Customers may designate certain duties and/or positions as positions of “special trust” because they involve special trust responsibilities, are located in sensitive locations, or have key capabilities with access to sensitive or confidential information. The designation of a special trust position or duties is at the sole discretion of the Customer. Contractor or Contractor’s employees and Staff who, in the performance of this Contract, will be assigned to work in positions determined by the Customer to be positions of special trust, may be required to submit to background screening and be approved by the Customer to work on this Contract.

  • Auditor Report; Right to Audit (a) Within the time period permitted for the examination audit pursuant to 12 CFR Section 363 after the end of each fiscal year during which the Receiver makes any payment to the Assuming Institution under this Single Family Shared-Loss Agreement, the Assuming Institution shall deliver to the Receiver a report signed by its independent public accountants stating that they have reviewed the terms of this Single Family Shared-Loss Agreement and that, in the course of their annual audit of the Assuming Institution’s books and records, nothing has come to their attention suggesting that any computations required to be made by the Assuming Institution during such fiscal year pursuant to this Article II were not made by the Assuming Institution in accordance herewith. In the event that the Assuming Institution cannot comply with the preceding sentence, it shall promptly submit to the Receiver corrected computations together with a report signed by its independent public accountants stating that, after giving effect to such corrected computations, nothing has come to their attention suggesting that any computations required to be made by the Assuming Institution during such year pursuant to this Article II were not made by the Assuming Institution in accordance herewith. In such event, the Assuming Institution and the Receiver shall make all such accounting adjustments and payments as may be necessary to give effect to each correction reflected in such corrected computations, retroactive to the date on which the corresponding incorrect computation was made. (b) The Assuming Institution shall perform on an annual basis an internal audit of its compliance with the provisions of this Article II and shall provide the Receiver and the Corporation with copies of the internal audit reports and access to internal audit workpapers related to such internal audit. (c) The Receiver or the FDIC in its corporate capacity (“Corporation”), its contractors and their employees, and its agents may perform an audit or audits to determine the Assuming Institution’s compliance with the provisions of this Single Family Shared-Loss Agreement, including this Article II, by providing not less than ten (10) Business Days’ prior written notice. Assuming Institution shall provide access to pertinent records and proximate working space in Assuming Institution’s facilities. The scope and duration of any such audit shall be within the reasonable discretion of the Receiver or the Corporation, but shall in no event be administered in a manner that unreasonably interferes with the operation of the Assuming Institution’s business. The Receiver or the Corporation, as the case may be, shall bear the expense of any such audit. In the event that any corrections are necessary as a result of such an audit or audits, the Assuming Institution and the Receiver shall make such accounting adjustments and payments as may be necessary to give retroactive effect to such corrections.