Common use of Vendor will Clause in Contracts

Vendor will. (1) perform periodic security reviews to validate compliance (for example, validating access authorization per ACI’s instruction, the correct use of logical control features) based on ACI’s security framework; and (2) identify and manage security risks and exposures within Vendor’s control as part of the Services based on ACI’s security framework; (3) in the course of their day-to-day support of the ACI security services, advise ACI in the event that a process appears to be non-compliant with Vendor’s understanding of industry-wide conventions;and (4) as a part of its annual technology review and its 18 month security review, provide industry perspective on security compliance trends and regulatory changes and provide an industry update on security and regulatory changes. Confidential Exhibit A-8 — Enterprise Security Management Services