Common use of Security of Shared Information Clause in Contracts

Security of Shared Information. The Data Recipient agrees to process all the shared information in accordance with the following. Security requirements: • access to the shared information, any copies made of the shared information and the information contained in them is limited solely to the persons specified in the contract. • access to the shared information is minimised to the smallest pool of accessible records possible. • the confidentiality of the shared information will be preserved in outputs and publications. • shared Information will only be accessed by devices or services that are themselves subject to restricted access. • access to cloud-hosted or on-premises devices or services that can access the shared information will only be through mechanisms that comply with HMG Security Policy Framework such as suitability strong passwords and multi-factor authentication. • the means of access to the shared information (such as passwords or passphrases) will be kept secure and not disclosed to any person or service, under any circumstances other than those specified in the contract. • hard copies and backups of shared information will be stored in a secure, access restricted filing cabinet or shared folder. • shared information will not be accessed at a location outside the UK. • shared information should be held and accessed on paper or ICT systems on secure premises. • whenever possible, the shared shall be encrypted when at rest and not being used. • the data is backed up in case of corruption. • technical and organisational controls and processes for system, network and security capabilities and components are tested regularly to maintain and demonstrate the continuing correctness of their operation and correct functioning. • The use of Turnitin is prohibited. MoJ reserves the right to conduct an on-site audit of the Data Recipient's confidentiality and security procedures and practices, or to require a report of such an audit by an independent assessor.