Common use of Incident Response and Breach Notification Clause in Contracts

Incident Response and Breach Notification. Contractor agrees that any breach or any other security incident, internal or external that has the potential to compromise multiple data sources must be reported to the Sempra Energy Security Operations Center (XXX@xxxxxx.xxx (000) 000-0000) within 24 hours of knowledge of the breach. A plan for remediation must be submitted within 72 hours of the breach. A final report of successful remediation must be submitted within 2 business weeks from the initial notification for completion of the investigation.

Incident Response and Breach Notification. Contractor agrees that any breach or any other security incident, internal or external that has the potential to compromise multiple data sources must be reported to the Sempra Energy Security Operations Center (XXX@xxxxxx.xxx (000) 000-0000) within 24 hours of knowledge of the breach. A plan for breach followed by a 72 hour remediation must be submitted within 72 hours of the breach. A final report of successful remediation must be submitted within time frame, and 2 business weeks from the initial notification for completion of the investigation.