{"component": "clause", "props": {"groups": [{"samples": [{"hash": "1ffy47hiiEK", "uri": "/contracts/1ffy47hiiEK#security-processes", "label": "Contract for the Acquisition of Information Technology Commodities and/or Services", "score": 25.4846000671, "published": true}, {"hash": "hOfFtS9A1So", "uri": "/contracts/hOfFtS9A1So#security-processes", "label": "Contract for the Acquisition of Information Technology Commodities and/or Services", "score": 25.470911026, "published": true}, {"hash": "czrDYLrUS8J", "uri": "/contracts/czrDYLrUS8J#security-processes", "label": "Contract for the Acquisition of Information Technology Commodities and/or Services", "score": 25.421628952, "published": true}], "size": 95, "snippet": "If requested by an Authorized User as part the Request for Quote process, Contractor shall complete a Consensus Assessment Initiative Questionnaire (CAIQ) including on an annual basis thereafter, if requested by the Authorized User. The CAIQ is available at Cloud Security Alliance (\u2587\u2587\u2587\u2587\u2587://\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587.\u2587\u2587\u2587/). The CAIQ may be used to assist the Authorized User in building the necessary assessment processes when engaging with Contractors. In addition to a request for a CAIQ, Contractor shall cooperate with all reasonable Authorized User requests for a Written description of Contractor\u2019s physical/virtual security and/or internal control processes. The Authorized User shall have the right to reject any Contractor\u2019s RFQ response or terminate an Authorized User Agreement when such a request has been denied. For example, Federal, State and local regulations and/or laws may require that Contractors operate within the Authorized User\u2019s regulatory environment. In order to ensure that security is adequate and free of gaps in control coverage, the Authorized User may require information from the Contractor\u2019s Service Organization Controls (SOC) audit report.", "snippet_links": [{"key": "requested-by-an", "type": "definition", "offset": [3, 18]}, {"key": "request-for-quote-process", "type": "definition", "offset": [47, 72]}, {"key": "contractor-shall", "type": "clause", "offset": [74, 90]}, {"key": "annual-basis", "type": "clause", "offset": [171, 183]}, {"key": "available-at", "type": "definition", "offset": [245, 257]}, {"key": "cloud-security", "type": "clause", "offset": [258, 272]}, {"key": "assist-the", "type": "clause", "offset": [344, 354]}, {"key": "in-addition-to", "type": "clause", "offset": [450, 464]}, {"key": "cooperate-with", "type": "clause", "offset": [504, 518]}, {"key": "requests-for", "type": "clause", "offset": [550, 562]}, {"key": "of-contractor", "type": "clause", "offset": [585, 598]}, {"key": "virtual-security", "type": "clause", "offset": [610, 626]}, {"key": "internal-control", "type": "definition", "offset": [634, 650]}, {"key": "user-shall", "type": "definition", "offset": [677, 687]}, {"key": "right-to-reject", "type": "clause", "offset": [697, 712]}, {"key": "rfq-response", "type": "definition", "offset": [730, 742]}, {"key": "authorized-user-agreement", "type": "definition", "offset": [759, 784]}, {"key": "for-example", "type": "definition", "offset": [822, 833]}, {"key": "local-regulations", "type": "definition", "offset": [854, 871]}, {"key": "regulatory-environment", "type": "clause", "offset": [950, 972]}, {"key": "in-order-to-ensure", "type": "clause", "offset": [974, 992]}, {"key": "in-control", "type": "definition", "offset": [1036, 1046]}, {"key": "information-from", "type": "clause", "offset": [1089, 1105]}, {"key": "the-contractor", "type": "clause", "offset": [1106, 1120]}, {"key": "service-organization", "type": "clause", "offset": [1123, 1143]}, {"key": "audit-report", "type": "clause", "offset": [1159, 1171]}], "hash": "a429a703cb333d4912e07c6be22da4cb", "id": 1}, {"samples": [{"hash": "b9JdDF9yK7g", "uri": "/contracts/b9JdDF9yK7g#security-processes", "label": "Contract for the Acquisition of Information Technology Commodities and/or Services", "score": 26.1704311371, "published": true}, {"hash": "7g4ullBZZBr", "uri": "/contracts/7g4ullBZZBr#security-processes", "label": "Contract for the Acquisition of Information Technology Commodities and/or Services", "score": 26.1704311371, "published": true}, {"hash": "1zZ4q5y1vJ0", "uri": "/contracts/1zZ4q5y1vJ0#security-processes", "label": "Contract for the Acquisition of Information Technology Commodities and/or Services", "score": 25.262834549, "published": true}], "size": 55, "snippet": "If requested by an Authorized User as part the Request for Quote process, Contractor shall complete a Consensus Assessment Initiative Questionnaire (CAIQ) including on an annual basis thereafter. The form is available at Cloud Security Alliance (\u2587\u2587\u2587\u2587\u2587://\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587.\u2587\u2587\u2587/). The CAIQ may be used to assist the Authorized User in building the necessary assessment processes when engaging with Cloud providers. In addition to a request for a CAIQ, Contractor shall cooperate with all reasonable Authorized User requests for a Written description of Contractor\u2019s physical/virtual security and/or internal control processes. The Authorized User shall have the right to reject any Contractor\u2019s RFQ response or terminate an Authorized User Agreement when such a request has been denied. The Contractor shall give a minimum of five (5) business days advance Written notice to the designated Authorized User(s) contact of any upgrades or system changes that will impact services as provided in the Authorized User Agreement. The Contractor shall return Data in a format agreed upon within the Authorized User Agreement or as agreed to with the Authorized User. The Contractor must certify all Data has been removed from its system and removed from backups within timeframes established in the Authorized User Agreement or as agreed to with the Authorized User.", "snippet_links": [{"key": "requested-by-an", "type": "definition", "offset": [3, 18]}, {"key": "request-for-quote-process", "type": "definition", "offset": [47, 72]}, {"key": "annual-basis", "type": "clause", "offset": [171, 183]}, {"key": "available-at", "type": "definition", "offset": [208, 220]}, {"key": "cloud-security", "type": "clause", "offset": [221, 235]}, {"key": "assist-the", "type": "clause", "offset": [307, 317]}, {"key": "cloud-providers", "type": "clause", "offset": [400, 415]}, {"key": "in-addition-to", "type": "clause", "offset": [417, 431]}, {"key": "cooperate-with", "type": "clause", "offset": [471, 485]}, {"key": "requests-for", "type": "clause", "offset": [517, 529]}, {"key": "of-contractor", "type": "clause", "offset": [552, 565]}, {"key": "virtual-security", "type": "clause", "offset": [577, 593]}, {"key": "internal-control", "type": "definition", "offset": [601, 617]}, {"key": "user-shall", "type": "definition", "offset": [644, 654]}, {"key": "right-to-reject", "type": "clause", "offset": [664, 679]}, {"key": "rfq-response", "type": "definition", "offset": [697, 709]}, {"key": "authorized-user-agreement", "type": "definition", "offset": [726, 751]}, {"key": "the-contractor-shall", "type": "clause", "offset": [789, 809]}, {"key": "business-days", "type": "definition", "offset": [837, 850]}, {"key": "the-designated", "type": "clause", "offset": [877, 891]}, {"key": "system-changes", "type": "clause", "offset": [938, 952]}, {"key": "agreement-or", "type": "definition", "offset": [1109, 1121]}, {"key": "agreed-to", "type": "clause", "offset": [1125, 1134]}, {"key": "the-contractor-must", "type": "clause", "offset": [1161, 1180]}], "hash": "14e48c1a1f2f9c583e9c6c6346cbcfe6", "id": 2}, {"samples": [{"hash": "ikEloLSAB4Q", "uri": "/contracts/ikEloLSAB4Q#security-processes", "label": "Integrated Systems Solutions Agreement", "score": 32.9184989929, "published": true}, {"hash": "cAxScP20ce1", "uri": "/contracts/cAxScP20ce1#security-processes", "label": "Contract for Inform Cad and Inform Mobile System", "score": 30.7121810913, "published": true}], "size": 7, "snippet": "The Contractor shall disclose its non-proprietary security processes and technical limitations to the County such that adequate protection and flexibility can be attained between the County and the Contractor. The County and the Contractor shall share responsibilities, as set forth in Attachment A, Scope of Work.", "snippet_links": [{"key": "the-contractor-shall", "type": "clause", "offset": [0, 20]}, {"key": "technical-limitations", "type": "clause", "offset": [73, 94]}, {"key": "to-the-county", "type": "definition", "offset": [95, 108]}, {"key": "adequate-protection", "type": "definition", "offset": [119, 138]}, {"key": "and-the-contractor", "type": "clause", "offset": [190, 208]}, {"key": "attachment-a", "type": "definition", "offset": [286, 298]}, {"key": "scope-of-work", "type": "clause", "offset": [300, 313]}], "hash": "dc2daa1999e383103fc5d75497afc92c", "id": 3}, {"samples": [{"hash": "43uUZCnVCAU", "uri": "/contracts/43uUZCnVCAU#security-processes", "label": "It Contract Terms", "score": 34.0779392807, "published": true}, {"hash": "imrPAZky7Qu", "uri": "/contracts/imrPAZky7Qu#security-processes", "label": "It Contract Terms", "score": 33.6846829226, "published": true}, {"hash": "QA56sNVYqc", "uri": "/contracts/QA56sNVYqc#security-processes", "label": "It Contract Terms", "score": 33.120262146, "published": true}], "size": 5, "snippet": "The Vendor will disclose its non-proprietary security processes and technical limitations to the State such that adequate protection and flexibility can be attained between the State and the Vendor. For example: virus checking and port sniffing.", "snippet_links": [{"key": "vendor-will", "type": "clause", "offset": [4, 15]}, {"key": "technical-limitations", "type": "clause", "offset": [68, 89]}, {"key": "the-state", "type": "clause", "offset": [93, 102]}, {"key": "adequate-protection", "type": "definition", "offset": [113, 132]}, {"key": "for-example", "type": "definition", "offset": [199, 210]}, {"key": "virus-checking", "type": "clause", "offset": [212, 226]}], "hash": "4b96aca7a6bb542b946a64b748c6f9c9", "id": 4}, {"samples": [{"hash": "gCvjXSQ1hD2", "uri": "/contracts/gCvjXSQ1hD2#security-processes", "label": "Consulting Agreement", "score": 32.3390922546, "published": true}, {"hash": "5ph8CCDt2ur", "uri": "/contracts/5ph8CCDt2ur#security-processes", "label": "Consulting Agreement", "score": 31.8016529083, "published": true}, {"hash": "j2j0bah994a", "uri": "/contracts/j2j0bah994a#security-processes", "label": "Consulting Agreement", "score": 31.0334682465, "published": true}], "size": 3, "snippet": "9.1 Consultant shall cooperate with all reasonable NYSDOT requests for a written description of Consultant's physical/virtual security and/or internal control processes. NYSDOT shall have the right to terminate this Agreement when such a request has been denied.", "snippet_links": [{"key": "consultant-shall", "type": "clause", "offset": [4, 20]}, {"key": "cooperate-with", "type": "clause", "offset": [21, 35]}, {"key": "requests-for", "type": "clause", "offset": [58, 70]}, {"key": "description-of", "type": "definition", "offset": [81, 95]}, {"key": "virtual-security", "type": "clause", "offset": [118, 134]}, {"key": "internal-control", "type": "definition", "offset": [142, 158]}, {"key": "right-to-terminate-this-agreement", "type": "clause", "offset": [192, 225]}], "hash": "0d191d15f71e642e5a2b247512d863a8", "id": 5}, {"samples": [{"hash": "8kUQy1s886B", "uri": "/contracts/8kUQy1s886B#security-processes", "label": "Service Agreement", "score": 25.188911438, "published": true}, {"hash": "8OnwZXnj89", "uri": "/contracts/8OnwZXnj89#security-processes", "label": "Cloud Services Agreement", "score": 25.188911438, "published": true}], "size": 3, "snippet": "The Service Provider shall disclose its non-proprietary security processes to the State such that adequate protection and flexibility can be attained between the State and the Service Provider. The State and the Service Provider shall understand each other\u2019s roles and responsibilities, which shall be set forth in the SOW and/or SLA.", "snippet_links": [{"key": "the-service-provider-shall", "type": "clause", "offset": [0, 26]}, {"key": "the-state", "type": "clause", "offset": [78, 87]}, {"key": "adequate-protection", "type": "definition", "offset": [98, 117]}, {"key": "roles-and-responsibilities", "type": "definition", "offset": [259, 285]}], "hash": "26836b90b93e03d949f33ce4cfed6c00", "id": 6}, {"samples": [{"hash": "d4I5aNfGD1x", "uri": "/contracts/d4I5aNfGD1x#security-processes", "label": "Piggyback Contract", "score": 35.0243988037, "published": true}, {"hash": "7odVGQakcOU", "uri": "/contracts/7odVGQakcOU#security-processes", "label": "Piggyback Contract", "score": 29.8444347382, "published": true}], "size": 2, "snippet": "If requested by an Authorized User, Contractor shall complete a Consensus Assessment Initiative Questionnaire (CAIQ). The CAIQ is available at Cloud Security Alliance (\u2587\u2587\u2587\u2587\u2587://\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587\u2587.\u2587\u2587\u2587/). The CAIQ may be used to assist the Authorized User in building the necessary assessment processes when engaging with Contractors. In addition to a request for a CAIQ, Contractor shall cooperate with all reasonable Authorized User requests for a Written description of Contractor\u2019s physical/virtual security and/or internal control processes. The Authorized User shall have the right to terminate an Authorized User Agreement when such a request has been denied. For example, Federal, State and local regulations and/or laws may require that Contractors operate within the Authorized User\u2019s regulatory environment. In order to ensure that security is adequate and free of gaps in control coverage, the Authorized User may require information from the Contractor\u2019s Service Organization Controls (SOC) audit report.", "snippet_links": [{"key": "requested-by-an", "type": "definition", "offset": [3, 18]}, {"key": "contractor-shall", "type": "clause", "offset": [36, 52]}, {"key": "available-at", "type": "definition", "offset": [130, 142]}, {"key": "cloud-security", "type": "clause", "offset": [143, 157]}, {"key": "assist-the", "type": "clause", "offset": [229, 239]}, {"key": "in-addition-to", "type": "clause", "offset": [335, 349]}, {"key": "request-for", "type": "clause", "offset": [352, 363]}, {"key": "cooperate-with", "type": "clause", "offset": [389, 403]}, {"key": "requests-for", "type": "clause", "offset": [435, 447]}, {"key": "of-contractor", "type": "clause", "offset": [470, 483]}, {"key": "virtual-security", "type": "clause", "offset": [495, 511]}, {"key": "internal-control", "type": "definition", "offset": [519, 535]}, {"key": "user-shall", "type": "definition", "offset": [562, 572]}, {"key": "right-to-terminate", "type": "clause", "offset": [582, 600]}, {"key": "authorized-user-agreement", "type": "definition", "offset": [604, 629]}, {"key": "for-example", "type": "definition", "offset": [667, 678]}, {"key": "local-regulations", "type": "definition", "offset": [699, 716]}, {"key": "regulatory-environment", "type": "clause", "offset": [795, 817]}, {"key": "in-order-to-ensure", "type": "clause", "offset": [819, 837]}, {"key": "in-control", "type": "definition", "offset": [881, 891]}, {"key": "information-from", "type": "clause", "offset": [934, 950]}, {"key": "the-contractor", "type": "clause", "offset": [951, 965]}, {"key": "service-organization", "type": "clause", "offset": [968, 988]}, {"key": "audit-report", "type": "clause", "offset": [1004, 1016]}], "hash": "b3389eb7d6a2af414da938b432d6c4a9", "id": 7}, {"samples": [{"hash": "49wo4LD2JN7", "uri": "/contracts/49wo4LD2JN7#security-processes", "label": "Membership and Personal Deposit Account Agreement", "score": 20.9137573242, "published": true}], "size": 1, "snippet": "We make commercially reasonable efforts to safeguard your Personal Information from loss or theft, unauthorized access, disclosure, duplication, use or modification through security measures appropriate to the sensitivity of the information. These measures include internal reviews of our data collection, storage and processing practices and security measures which include appropriate encryption and physical security measures to guard against unauthorized access to systems where we store Personal Information.", "snippet_links": [{"key": "commercially-reasonable-efforts", "type": "definition", "offset": [8, 39]}, {"key": "information-from", "type": "clause", "offset": [67, 83]}, {"key": "loss-or-theft", "type": "clause", "offset": [84, 97]}, {"key": "unauthorized-access", "type": "definition", "offset": [99, 118]}, {"key": "the-information", "type": "clause", "offset": [225, 240]}, {"key": "data-collection", "type": "clause", "offset": [289, 304]}, {"key": "processing-practices", "type": "definition", "offset": [318, 338]}, {"key": "and-security", "type": "clause", "offset": [339, 351]}, {"key": "measures-to", "type": "clause", "offset": [420, 431]}, {"key": "access-to-systems", "type": "clause", "offset": [459, 476]}], "hash": "8c1364e2b3da17e5e7986b554816869b", "id": 8}, {"samples": [{"hash": "f7btofAvTEO", "uri": "/contracts/f7btofAvTEO#security-processes", "label": "Contract Amendment", "score": 33.2151412964, "published": true}], "size": 1, "snippet": "Contractor shall disclose its non-proprietary security processes and technical limitations to the State such that adequate protection and flexibility can be attained between the State and Contractor.", "snippet_links": [{"key": "contractor-shall", "type": "clause", "offset": [0, 16]}, {"key": "technical-limitations", "type": "clause", "offset": [69, 90]}, {"key": "the-state", "type": "clause", "offset": [94, 103]}, {"key": "adequate-protection", "type": "definition", "offset": [114, 133]}], "hash": "e42cdbe6662aa9a9869dd546440defbd", "id": 9}, {"samples": [{"hash": "gD6LnbOw1IC", "uri": "/contracts/gD6LnbOw1IC#security-processes", "label": "Master Services Agreement (Alarm.com Holdings, Inc.)", "score": 27.8692684174, "published": true}], "size": 1, "snippet": "In general, \u2587\u2587\u2587\u2587\u2587.\u2587\u2587\u2587 will implement and maintain information security processes designed to protect access and maintenance of information related to the \u2587\u2587\u2587\u2587\u2587.\u2587\u2587\u2587 Services and ADT Data that are (a) at least equal to applicable industry standards for such types of locations, (b) in accordance with ADT security requirements specified in Exhibit B, and (c) which provide appropriate technical and organizational safeguards against accidental or unlawful destruction, loss, alteration or unauthorized disclosure or access of ADT Data.", "snippet_links": [{"key": "in-general", "type": "definition", "offset": [0, 10]}, {"key": "information-security", "type": "definition", "offset": [50, 70]}, {"key": "maintenance-of-information", "type": "clause", "offset": [112, 138]}, {"key": "related-to", "type": "clause", "offset": [139, 149]}, {"key": "the-\u2587", "type": "clause", "offset": [150, 155]}, {"key": "services-and", "type": "clause", "offset": [164, 176]}, {"key": "at-least-equal-to", "type": "definition", "offset": [199, 216]}, {"key": "industry-standards", "type": "definition", "offset": [228, 246]}, {"key": "types-of", "type": "clause", "offset": [256, 264]}, {"key": "in-accordance-with", "type": "definition", "offset": [280, 298]}, {"key": "security-requirements", "type": "clause", "offset": [303, 324]}, {"key": "exhibit-b", "type": "clause", "offset": [338, 347]}, {"key": "technical-and-organizational-safeguards", "type": "clause", "offset": [383, 422]}, {"key": "unauthorized-disclosure", "type": "definition", "offset": [487, 510]}], "hash": "81cf4fa402596490bf60d5f65572119f", "id": 10}], "next_curs": "ClsSVWoVc35sYXdpbnNpZGVyY29udHJhY3RzcjcLEhZDbGF1c2VTbmlwcGV0R3JvdXBfdjU2IhtzZWN1cml0eS1wcm9jZXNzZXMjMDAwMDAwMGEMogECZW4YACAA", "clause": {"parents": [["admissibility-of-reproduction-of-contract", "ADMISSIBILITY OF REPRODUCTION OF CONTRACT"], ["incorporation-of-provisions", "Incorporation of Provisions"], ["liquidated-damages-mwbe-participation", "Liquidated Damages \u2013 MWBE Participation"], ["security", "Security"], ["attachments", "ATTACHMENTS"]], "size": 175, "title": "SECURITY PROCESSES", "children": [], "id": "security-processes", "related": [["security-protocols", "Security Protocols", "Security Protocols"], ["security-procedures", "Security Procedures", "Security Procedures"], ["security-procedure", "Security Procedure", "Security Procedure"], ["security-program", "Security Program", "Security Program"], ["information-security-program", "Information Security Program", "Information Security Program"]], "related_snippets": [], "updated": "2025-07-10T05:58:13+00:00", "also_ask": [], "drafting_tip": "", "explanation": "The SECURITY PROCESSES clause defines the standards and procedures that a party must follow to protect sensitive information and systems from unauthorized access, breaches, or other security threats. Typically, this clause outlines requirements such as implementing encryption, conducting regular security audits, and maintaining up-to-date security protocols. Its core practical function is to ensure that both parties understand and adhere to agreed-upon security measures, thereby reducing the risk of data breaches and safeguarding confidential or proprietary information."}, "json": true, "cursor": ""}}