Sustainability (12 /18) Pursuant to the City’s Sustainable City Principles, which direct City Bureaus to pursue long-term social equity, environmental quality, and economic vitality through innovative and traditional mechanisms, Contractor is encouraged to incorporate these Principles into its scope of work with the City wherever possible. Therefore, in accordance with the Principles and the City's Sustainable Procurement Policy, it is the policy of the City of Portland to encourage the use of Products or Services that help to minimize the human health and environmental impacts of City operations. Contractor is encouraged to incorporate environmentally preferable Products or Services into its work performance wherever possible. "Environmentally preferable" means Products or Services that have a lesser or reduced effect on human health and the environment when compared with competing products or services that serve the same purpose. This comparison may consider raw materials acquisition, production, manufacturing, packaging, distribution, reuse, operation, maintenance, or disposal of the Product or Service.
Construction Phase Services 3.1.1 – Basic Construction Services
Infrastructure Vulnerability Scanning Supplier will scan its internal environments (e.g., servers, network devices, etc.) related to Deliverables monthly and external environments related to Deliverables weekly. Supplier will have a defined process to address any findings but will ensure that any high-risk vulnerabilities are addressed within 30 days.
Vulnerability Management BNY Mellon will maintain a documented process to identify and remediate security vulnerabilities affecting its systems used to provide the services. BNY Mellon will classify security vulnerabilities using industry recognized standards and conduct continuous monitoring and testing of its networks, hardware and software including regular penetration testing and ethical hack assessments. BNY Mellon will remediate identified security vulnerabilities in accordance with its process.
Supplier Development lf the Buyer identifies problems in supplier performance based on supplier monitoring, he shall initiate improvement measures at the Supplier. The Buyer shall pursue the possibilities of continuous improvement of the Supplier. The supplier audit is a form of supplier development; the exchange of information and experience between the Buyer and the Supplier also serves this purpose.