Common use of Security Review Clause in Contracts

Security Review. The Vendor shall: give to (or procure the giving to) TSP (or any person authorised by TSP) such access at all reasonable times to the Vendor’s and any Subcontractor’s records and premises related to this Agreement as TSP may require from time to time to assess the Vendor’s compliance of these policies in this Agreement; and such assessments may include assessments of all elements of physical and logical audits, penetration testing of the Vendor’s Systems. The Vendor shall facilitate this assessment by permitting TSP to collect, retain and analyse information to identify potential security risks including trace files, statistics, network addresses and the actual information or screens accessed or transferred; and provide such reports to TSP and attend such meetings as may be reasonably required by TSP.