Common use of Vulnerability Management Clause in Contracts

Vulnerability Management. The Contractor agrees to continuously acquire, assess, and take action to identify and remediate vulnerabilities within the Systems and Hardware covered under this Contract. If such vulnerabilities cannot be addressed, The Contractor must provide a Risk assessment to the Department Information Security Officer (DISO) who will consult with the County’s Chief Information Security Officer (CISO). The County’s CISO must approve the Risk acceptance and the Contractor accepts liability for Risks that result to the County for exploitation of any un-remediated vulnerabilities.

Vulnerability Management. The Contractor agrees to continuously acquire, assess, and take action to identify and remediate vulnerabilities within the Systems and Hardware covered under this Contract. If such vulnerabilities cannot be addressed, The the Contractor must provide a Risk assessment to the Department Information Security Officer (DISO) who will consult with the County’s Chief Information Security Officer (CISO). The County’s CISO must approve the Risk acceptance and the Contractor accepts liability for Risks that result to the County for exploitation of any un-remediated vulnerabilities.