Common use of Monitoring and Continuous Improvement Clause in Contracts

Monitoring and Continuous Improvement. The Contractor shall review its Information Security Program (including its Risk Assessment, Physical Security Measures and Technical Security Measures) (i) at least quarterly, or (ii) whenever there is a change in its business practices or the design, build, deployment, operation, or maintenance of the NEPP System that implicates the security or integrity of Sensitive Assets embodied in or related to the NEPP System. The Contractor shall update its Information Security Program (including its Risk Assessment, Physical Security Measures and Technical Security Measures) regularly to ensure that the Information Security Program is operating in a manner calculated to prevent unauthorized access to or unauthorized use of Sensitive Assets.