Common use of Security Incident Response Clause in Contracts