Early Access Subtenant and Subtenant’s representatives shall have the right to enter the Subleased Premises from and after the date of mutual execution and delivery of this Sublease (the date upon which Subtenant first has such access to the Subleased Premises being referred to herein as the “Early Access Date”) for the sole purposes of installation of Subtenant’s personal property and equipment, furniture, fixtures and voice and data cabling, all subject to the terms, conditions and requirements of the Master Sublease; in no event will Subtenant perform work which requires the procurement of a construction permit prior to the Effective Date. All of the rights and obligations of the parties under this Sublease (other than Subtenant’s obligation to pay Base Rent and the cost of utilities under Section 3.3, but expressly including without limitation, Subtenant’s obligation to carry (and provide evidence of) insurance pursuant to the Master Sublease, and Subtenant’s indemnification obligations) shall commence upon the Early Access Date. Subtenant shall coordinate such entry with Sublandlord. Notwithstanding the foregoing to the contrary, if either (i) Landlord or Master Sublandlord require that Subtenant vacate the Subleased Premises or (ii) cease its installations until the Effective Date has occurred, Subtenant shall promptly comply with any such requirement. Additionally, if either party hereto terminates this Sublease pursuant to the provisions of Section 2.1 above, Subtenant shall promptly remove from the Subleased Premises any personal property, equipment, furniture, fixtures and/or voice or date cabling previously installed by Subtenant in the Subleased Premises and repair any portion of the Subleased Premises damaged or otherwise altered as a result of such installation, all at Subtenant’s sole cost and expense.
Data Access Control Persons entitled to use data processing systems gain access only to the Personal Data that they have a right to access, and Personal Data must not be read, copied, modified or removed without authorization in the course of processing, use and storage. Measures: • As part of the SAP Security Policy, Personal Data requires at least the same protection level as “confidential” information according to the SAP Information Classification standard. • Access to Personal Data is granted on a need-to-know basis. Personnel have access to the information that they require in order to fulfill their duty. SAP uses authorization concepts that document grant processes and assigned roles per account (user ID). All Customer Data is protected in accordance with the SAP Security Policy. • All production servers are operated in the Data Centers or in secure server rooms. Security measures that protect applications processing Personal Data are regularly checked. To this end, SAP conducts internal and external security checks and penetration tests on its IT systems. • SAP does not allow the installation of software that has not been approved by SAP. • An SAP security standard governs how data and data carriers are deleted or destroyed once they are no longer required.
System Access Control Data processing systems used to provide the Cloud Service must be prevented from being used without authorization. Measures: • Multiple authorization levels are used when granting access to sensitive systems, including those storing and processing Personal Data. Authorizations are managed via defined processes according to the SAP Security Policy • All personnel access SAP’s systems with a unique identifier (user ID). • SAP has procedures in place so that requested authorization changes are implemented only in accordance with the SAP Security Policy (for example, no rights are granted without authorization). In case personnel leaves the company, their access rights are revoked. • SAP has established a password policy that prohibits the sharing of passwords, governs responses to password disclosure, and requires passwords to be changed on a regular basis and default passwords to be altered. Personalized user IDs are assigned for authentication. All passwords must fulfill defined minimum requirements and are stored in encrypted form. In the case of domain passwords, the system forces a password change every six months in compliance with the requirements for complex passwords. Each computer has a password-protected screensaver. • The company network is protected from the public network by firewalls. • SAP uses up–to-date antivirus software at access points to the company network (for e-mail accounts), as well as on all file servers and all workstations. • Security patch management is implemented to provide regular and periodic deployment of relevant security updates. Full remote access to SAP’s corporate network and critical infrastructure is protected by strong authentication.
Completion Date The Work under this Contract shall be completed by midnight of the date required in the Contract as the Material Completion and Occupancy Date unless extended by approved requests for extension of time.
Network Access Control The VISION Web Site and the Distribution Support Services Web Site (the “DST Web Sites”) are protected through multiple levels of network controls. The first defense is a border router which exists at the boundary between the DST Web Sites and the Internet Service Provider. The border router provides basic protections including anti-spoofing controls. Next is a highly available pair of stateful firewalls that allow only HTTPS traffic destined to the DST Web Sites. The third network control is a highly available pair of load balancers that terminate the HTTPS connections and then forward the traffic on to one of several available web servers. In addition, a second highly available pair of stateful firewalls enforce network controls between the web servers and any back-end application servers. No Internet traffic is allowed directly to the back-end application servers. The DST Web Sites equipment is located and administered at DST’s Winchester data center. Changes to the systems residing on this computer are submitted through the DST change control process. All services and functions within the DST Web Sites are deactivated with the exception of services and functions which support the transfer of files. All ports on the DST Web Sites are disabled, except those ports required to transfer files. All “listeners,” other than listeners required for inbound connections from the load balancers, are deactivated. Directory structures are “hidden” from the user. Services which provide directory information are also deactivated.
COMMENCEMENT/EXPIRATION DATE This instrument is executed as of the date of last signature and is effective for five years from that date, at which time it will expire unless extended.
Commencement Date The Subcontractor shall be permitted to begin the Services on ______________________, 20____ (“Commencement Date”).
Final Completion Date Final Completion for the Work as defined in Article 6.1.3 of the General Conditions to the Continuing Contract for Construction Management shall be achieved by September 30, 2022.
Completion Dates The Recipient agrees to complete each Project within the time periods specified in the Underlying Agreement and all activities must be completed by the Award’s end date, unless FTA agrees in writing to extend the end date. Unless FTA determines otherwise in writing, interim milestone dates and other completion dates applicable to the Award are good faith estimates and are not intended to be firm contractual requirements. However, FTA and the Recipient agree that milestone dates and other completion dates for Full Funding Grant Agreements, Small Starts Grant Agreements or other specific agreements in which FTA expressly states that the milestone dates or other completion dates for the Underlying Agreement are firm dates that may be enforced.
Physical Access Control Unauthorized persons are prevented from gaining physical access to premises, buildings or rooms where data processing systems that process and/or use Personal Data are located.
