Common use of Information Security Program Overview Clause in Contracts

Information Security Program Overview. A. During the term of the Agreement, BNY Mellon will implement and maintain an information security program (“ISP”) with written policies and procedures reasonably designed to protect the confidentiality and integrity of the Funds’ Confidential Information provided to BNY Mellon in accordance with the Agreement and when in BNY Mellon’s possession or under BNY Mellon’s control (“Customer Data”). The ISP will include administrative, technical and physical safeguards, appropriate to the type of Customer Data concerned, reasonably designed to: (i) maintain the integrity, confidentiality and availability of Customer Data; (ii) protect against anticipated threats or hazards to the security or integrity of Customer Data; (iii) protect against unauthorized access to or use of Customer Data that could result in substantial harm or inconvenience to the Funds, (iv) provide for secure disposal of Customer Data, and (v) comply with other privacy and cybersecurity laws applicable to BNY Mellon in connection with the services provided under this Agreement. B. BNY Mellon’s program is dynamic and may be modified to address technological changes or changes in the threat landscape, BNY Mellon’s business activities or other factors. BNY Mellon reserves the right to modify the ISP at any time, provided that BNY Mellon shall not diminish the overall level of protection this Appendix II is intended to provide.