DEFAULT STANDARDS. a. To the extent that Supplier Processes Special Categories of Data, the security measures re- ferred to in this DPE shall also include, at a minimum (i) routine risk assessments of Supplier’s information security program, (ii) regular testing and monitoring to measure and confirm the effectiveness of the information security program’s key controls, systems, and procedures, and
Appears in 2 contracts
DEFAULT STANDARDS. a. To the extent that Supplier Processes Special Categories of Data, the security measures re- ferred referred to in this DPE shall also include, at a minimum (i) routine risk assessments of Supplier’s information security program, (ii) regular testing and monitoring to measure and confirm the effectiveness of the information security program’s key controls, systems, and procedures, and
Appears in 1 contract
Sources: Data Protection Agreement