Information Security Framework Sample Clauses

Information Security Framework. The Operator must define, document, and assign ownership to oversee development, adoption, enforcement and compliance with Information Security requirements, policies, standards, and procedures. The Operator must ensure that the assigned role is of a sufficiently high-level classification in the organization that can be allowed to execute the responsibilities in an effective and independent manner.

Information Security Framework. Buyer strongly encourages and highly recommends Vendor (a) obtain within 2 years from the Effective Date, and maintain thereafter, a Health Information Trust Alliance (“HITRUST”) certification; or, (b) promptly adopt and follow an alternative leading, industry recognized cyber security framework, e.g., National Institute of Standards and Technology (NIST), or International Organization for Standardization (ISO) 27001. Each year, Supplier shall either provide a HITRUST certification that covers the scope of services being provided to Buyer or complete Buyer’s vendor security assessment questionnaire. If Vendor fails to obtain or maintain a HITRUST certification or is unable to satisfy Buyer’s vendor security assessment in Buyer’s sole opinion, Buyer may terminate any PA or SOW by giving Vendor fifteen (15) days’ prior written notice.

Information Security Framework. Buyer highly recommends Supplier shall adopt and follow an industry recognized cybersecurity framework such as Health Information Trust Alliance (“HITRUST”) framework; or, National Institute of Standards and Technology (NIST), or International Organization for Standardization (ISO) 27001. Each year, Supplier shall complete Buyer’s vendor security assessment questionnaire and provide supporting documentary evidence. In the event, that there are security findings identified because of the Buyer’s security assessment, Supplier shall agree to remediate the security findings within the Buyer’s defined remediation timeframes. If Supplier fails to complete ▇▇▇▇▇’s vendor security assessment questionnaire and/or vendor security assessment remediation efforts in ▇▇▇▇▇’s sole opinion, Buyer may terminate any PA or SOW by giving Supplier fifteen (15) days’ prior written notice.

Information Security Framework a) Security Accountability. Jamf will assign one or more security officers who will be responsible for coordinating and monitoring all information security functions, policies and procedures.

Information Security Framework