Common use of ENTITY Responsibilities Clause in Contracts

ENTITY Responsibilities. Entity must: a. Protect all Personal Identifying Information in accordance with Texas Business and Commerce Code § 521.001(1) and 1 Texas Administrative Code § 202.1 et seq. b. Provide proof of compliance with security documents when requested to do so by DPS. c. Ensure appropriate protection of all security documents. d. Maintain copies of signed Rules of Behavior for every authorized user. e. Have complete responsibility for all cyber security controls. f. Have complete responsibility for encryption of all system components in accordance with Federal Information Processing Standard (FIPS) Publication 140-2. g. Maintain all logical access controls and password management. h. Maintain all system software, anti-virus protection, encryption, and operating systems, to include all upgrades, updates, patches, plugins, etc. i. Only grant users access to data they need to perform their official functions. j. Not share DPS’s data outside Entity unless otherwise authorized under this Agreement. k. Ensure that it, and any entity that it shares DPS’s data with, complies with the requirements in this data agreement if Entity shares or sells DPS’ data. l. Report any security breaches involving Entity (or shared entity or users) to the DPS CISO. m. Implement the necessary procedures to ensure that Entity is secure from any unauthorized use. n. Ensure that any individual requesting access to DPS data is authorized to receive it. Unauthorized request or receipt of data could result in criminal proceedings brought against the Entity and the individuals or entities involved. o. Ensure all users complete the required security awareness training prior to access, and annually thereafter. p. Disseminate user manuals and other related publications as required. q. Conduct investigations relating to possible fraud, waste, and abuse.