System Security Review All systems processing and/or storing County PHI or PI must have at least an annual system risk assessment/security review which provides assurance that administrative, physical, and technical controls are functioning effectively and providing adequate levels of protection. Reviews should include vulnerability scanning tools.
Technology Research Analyst Job# 1810 General Characteristics
Data Security Requirements Without limiting Contractor’s obligation of confidentiality as further described in this Contract, Contractor must establish, maintain, and enforce a data privacy program and an information and cyber security program, including safety, physical, and technical security and resiliency policies and procedures, that comply with the requirements set forth in this Contract and, to the extent such programs are consistent with and not less protective than the requirements set forth in this Contract and are at least equal to applicable best industry practices and standards (NIST 800-53).
Student Data Property of LEA All Student Data transmitted to the Provider pursuant to the Service Agreement is and will continue to be the property of and under the control of the LEA. The Provider further acknowledges and agrees that all copies of such Student Data transmitted to the Provider, including any modifications or additions or any portion thereof from any source, are subject to the provisions of this DPA in the same manner as the original Student Data. The Parties agree that as between them, all rights, including all intellectual property rights in and to Student Data contemplated per the Service Agreement, shall remain the exclusive property of the LEA. For the purposes of FERPA, the Provider shall be considered a School Official, under the control and direction of the LEA as it pertains to the use of Student Data, notwithstanding the above.
Research Funding (a) During each Collaboration Term and in connection with any wind-down activities contemplated by Section 13.4. Gilead shall reimburse Hookipa for all Out-of-Pocket Costs actually incurred (with no markup) by Hookipa in connection with the applicable Program, to the extent specifically contemplated in the applicable Research Plan and in accordance with the applicable Research Budget. Gilead shall reimburse the undisputed amount of such Out-of-Pocket Costs incurred in a [***] within [***] days after receipt from Hookipa of an invoice therefor issued within [***] days after the end of such [***]. (b) During each Collaboration Term for a Program, Gilead shall reimburse Hookipa at the FTE Rate for the costs of any FTEs (not to exceed the number of FTEs specified in the applicable Research Plan for such Program for any period without first obtaining, in each case, Gilead’s prior written consent) actually performing activities allocated to Hookipa under such Research Plan. Hookipa shall provide to Gilead, within [***] days after the end of each [***] during each Collaboration Term, a report indicating the number of FTEs actually provided by Hookipa with respect to each Program during such [***], Hookipa shall use standard industry systems and processes to record the number of hours and FTEs actually applied to each Program, which systems and processes shall be consistently and equitably applied to all Hookipa research programs with Third Parties. Gilead shall reimburse Hookipa the undisputed amount for such FTE costs incurred in a [***] within [***] days after receipt from Hookipa of an invoice therefor issued within [***] days after the end of each [***]. (c) For clarity, Gilead shall not be obligated to reimburse Hookipa for any costs or expenses incurred by Hookipa in the course of its activities under the Programs, other than: (i) those costs and expenses expressly identified in this Section 9.6 or elsewhere in this Agreement; (ii) reimbursement for the supply of Licensed Products to Gilead in accordance with the terms of any supply agreement entered into by the Parties pursuant to Section 7.2; or (iii) any other costs and expenses approved by Gilead in writing in advance.