Cyber Security Precautions Clause Samples

Cyber Security Precautions. Seller shall implement reasonable administrative, technical, and physical safeguards, including any specific safeguards specified herein and from time to time by SCE, to protect the security and integrity of SCE’s systems. Without limitation, Seller shall comply with all provisions of the Cyber Requirements and shall immediately notify SCE via email to ▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇.▇▇▇ and to SCE Contract Administration if it knows or reasonably believes that it is not in compliance with any of the Cyber Requirements. Any reasonably suspected or confirmed Cyber Incident must be reported to SCE via email to the Cybersecurity email listed in Exhibit E, as soon as possible but in no event more than one Business Day after Seller’s awareness of the event. Notification shall include the nature of the event, date and time of the event, suspected amount and type of information exposed and steps being taken to investigate the circumstances of the exposure. Seller shall cooperate and assist SCE in the investigation, analysis and resolution of Cyber Incidents affecting SCE’s systems. Seller shall provide SCE with details of the investigation and final disposition of the Cyber Incident relevant to the services provided to SCE or which may impact the confidentiality, integrity or availability of those services or of SCE information. In addition to the above, Seller shall: (x) regularly scan systems for vulnerabilities, (y) rank all vulnerabilities and promptly remediate detected vulnerabilities ranked as critical, high or moderate, and (z) use commercially reasonable efforts to identify any critical, high or moderate vulnerabilities, risks or threats that could potentially impact SCE, and shall notify SCE in writing within one (1) Business Day after such identification. If Seller determines that it cannot remediate any such potential or detected vulnerabilities, risk or threats within 30 days after identifying any such potential or detected vulnerabilities, risks, or threats, it shall promptly notify SCE in writing. Seller’s notification shall provide detailed information describing the controls used to mitigate these vulnerabilities, risks or threats. Seller shall also perform any additional obligations listed in Section 5.05 of Attachment 1.