Common use of Survive Termination Clause in Contracts

Survive Termination. Information Security The Provider shall comply, and be responsible for ensuring subcontractors’ compliance as if they were the Provider, with the following information security requirements whenever the Provider or its subcontractors have access to the Department’s information systems or maintains any client or other confidential information in electronic form. The Provider shall designate an Information Security Officer competent to liaise with the Department on security matters and maintain an appropriate level of information security for the Department’s information systems, or any client or other confidential information the Provider is collecting or using in the performance of this Contract. An appropriate level of security includes approving and tracking all who request or have access, through the Provider’s access, to the Department’s information systems or any client or other confidential information. The Information Security Officer will ensure any access to the Department’s information systems or any client or other confidential information is removed immediately upon such access no longer being required for the Provider’s performance under this Contract. The Provider shall provide the Department’s latest security awareness training to all persons prior to granting access to the Department’s information systems or any client or other confidential information. The Provider shall require all persons granted access to comply with, and be provided a copy of CFOP 50-2, and will sign the Department’s Security Agreement (Form CF 0112) annually. The Provider shall prevent unauthorized disclosure or access, from or to the Department’s information systems or client or other confidential information. Client or other confidential information on systems and network capable devices will be encrypted per CFOP 50-2. The Provider shall notify the Contract Manager within 120 hours, following the determination of any potential or actual unauthorized disclosure or access to the Department’s information systems or to any client or other confidential information. The Provider shall, at its own cost, comply with §501.171, F.S. The Provider shall also, at its own cost, implement measures deemed appropriate by the Department to avoid or mitigate potential injury to any person due to potential or actual unauthorized disclosure or access to the Department’s information systems or to any client or other confidential information. The Provider’s confidentiality procedures shall be at least as protective as the most recent version of the Department’s security policies and comply with any applicable professional confidentiality standards.