Common use of Information Security Management System Clause in Contracts

Information Security Management System. 2.1 The Supplier shall, within 30 Working Days of the Commencement Date, submit to the Authority a proposed ISMS which: 2.1.1 has been tested; and 2.1.2 complies with the requirements of paragraphs 2.2 and 2.3. 2.2 The Supplier shall at all times ensure that the level of security, include cyber security, provided by the ISMS is sufficient to protect the confidentiality, integrity and availability of Information Assets and Authority Data used in the provision of the Services and to provide robust risk management.