Service Level Expectations Without limiting any other requirements of the Agreement, the Service Provider shall meet or exceed the following standards, policies, and guidelines:
Infrastructure Vulnerability Scanning Supplier will scan its internal environments (e.g., servers, network devices, etc.) related to Deliverables monthly and external environments related to Deliverables weekly. Supplier will have a defined process to address any findings but will ensure that any high-risk vulnerabilities are addressed within 30 days.
Tie Breaker The parties agree to utilize the following procedure if two or more members of the bargaining unit hold the same position within the same department and have the identical seniority dates:
1. If two or more bargaining unit members have the same amount of time in a particular classification, the first tiebreaker is the date of continuous University service. Continuous service is that service unbroken by a resignation or termination from the University.
2. In the event that a tie is not broken by the foregoing procedure, the second tiebreaker shall be the uninterrupted service of an employee with a state agency, a county office, or a state-supported college or university where no break in service occurs.
3. In the event a tie is not broken by either of the foregoing procedures, we will use the last four (4) digits of the Social Security Number, in ascending order with the lowest number prevailing (i.e. 0001, 0002, 0003, 0004 – 0001 Prevails).
Vulnerability Management BNY Mellon will maintain a documented process to identify and remediate security vulnerabilities affecting its systems used to provide the services. BNY Mellon will classify security vulnerabilities using industry recognized standards and conduct continuous monitoring and testing of its networks, hardware and software including regular penetration testing and ethical hack assessments. BNY Mellon will remediate identified security vulnerabilities in accordance with its process.
Minimum Break between Shifts (a) Where it is necessary to work extended overtime, it is agreed that no Employee shall resume or continue to work without having had ten consecutive hours off duty between the termination of the overtime and the commencement of the Employee’s ordinary work on the next day or shift.
(b) In the event that an Employee agrees to a request from site management to resume or continue to work without having had ten consecutive hours off duty, the Employee shall be paid at double ordinary time rates until the Employee is released from duty for such period.
