Common use of Security Management Plan Clause in Contracts

Security Management Plan. 2.1. The Contractor shall ensure that an up to date maintenance of a Security Management Plan relating to the operation of its own organisation and the systems, and on request shall supply this document as soon as practicable to DCC. 2.2. On the earlier of the Services commencing or within twenty (20) Working Days of the signature of this Agreement, the Contractor shall prepare and submit to DCC for approval a fully developed, complete and up-to-date Security Management Plan, in Appendix 1 to this Schedule 2.5. 2.3. If the Security Management Plan submitted to DCC is approved by DCC, it shall be adopted by the Contractor immediately and thereafter operated and maintained in accordance with this section. If the Security Management Plan is not approved by DCC, the Contractor shall amend it within 10 Working Days of a notice of non-approval from DCC and re-submit it for approval. 2.4. Approval by DCC of the Security Management Plan or of any change or amendment to the Security Management Plan shall not relieve the Contractor of its obligations under this Schedule 2.5 (Security). 2.5. Once approved, the Security Management Plan shall be fully reviewed and updated by the Contractor annually to reflect: 2.5.1. emerging changes in Good Industry Practice; 2.5.2. any change or proposed change to the Services and/or associated processes and the Contractor System; 2.5.3. any new perceived or changed security threats; and 2.5.4. any reasonable changes to the Security Management Plan contents requested by DCC. 2.6. The Contractor shall provide DCC with the results of such reviews and updates as soon as practicable after their completion and amend the Security Management Plan at no additional cost to DCC.

Appears in 2 contracts

Sources: Supplier Relationship Management Agreement, Employee Value Proposition

Security Management Plan. 2.1. The Contractor shall ensure that an up to date maintenance of a Security Management Plan relating to the operation of its own organisation and the systems, and on written request shall supply this document as soon as practicable to DCCDCC . 2.2. On the earlier of the Services commencing or within twenty (20) Working Days of the signature of this Agreement, the Contractor shall prepare and submit to DCC for approval provide a fully developed, complete and up-to-date Security Management Plan, in Appendix 1 to this Schedule 2.5. 2.3. If the Security Management Plan submitted to DCC is approved by DCC, it shall be adopted by the Contractor immediately and thereafter operated and maintained in accordance with this section. If the Security Management Plan is not approved by DCC, the Contractor shall amend it within 10 Working Days of a notice of non-approval from DCC and re-submit it for approval. 2.4. Approval by DCC of the Security Management Plan or of any change or amendment to the Security Management Plan shall not relieve the Contractor of its obligations under this Schedule 2.5 (Security). 2.5. Once approved, the Security Management Plan shall be fully reviewed and updated by the Contractor annually to reflect: 2.5.1. emerging changes in Good Industry Practice; 2.5.2. any change or proposed change to the Services and/or associated processes and the Contractor System; 2.5.3. any new perceived or changed security threats; and 2.5.4. any reasonable changes to the Security Management Plan contents requested by DCC. 2.6. The Contractor shall provide DCC with the results of such reviews and updates as soon as practicable after their completion and amend the Security Management Plan at no additional cost to DCC.

Appears in 1 contract

Sources: Governance, Risk and Compliance Solution