Vulnerability Testing. The Contractor shall run quarterly vulnerability assessments and promptly report results to the State. Contractor shall remediate all critical issues within 90 days, all medium issues within 120 days and low issues within 180 days. Contractor shall obtain written State approval for any exceptions. Once remediation is complete, Contractor shall re-perform the test.
Appears in 16 contracts
Samples: Contract for Services, Business Associate Agreement, Vermont Contract
Vulnerability Testing. The Contractor shall run quarterly vulnerability assessments and promptly report results to t o the State. Contractor shall remediate all critical issues within 90 days, all medium issues within 120 days and low issues within 180 days. Contractor shall obtain written State approval for any exceptions. Once remediation is complete, Contractor shall re-perform the test.
Appears in 5 contracts
Samples: Standard Contract for Technology Services, Standard Contract for Services, Business Associate Agreement
Vulnerability Testing. The Upon request and no more than once annually, the Contractor shall run quarterly vulnerability assessments and promptly report summary results to t o the State’s Chief Information Security Officer: Xxxxx.Xxxxxx@xxxxxxx.xxx. Contractor shall remediate all critical issues within 90 days, all medium issues within 120 days and applicable low issues within 180 days. Contractor shall obtain written State approval for any exceptions. Once remediation is complete, Contractor shall re-re- perform the test.
Appears in 1 contract
Samples: Contract for Services
Vulnerability Testing. The Contractor shall run quarterly vulnerability assessments and promptly report results to the StatePurchasing Entity. Contractor shall remediate all critical and high issues within 90 days, all medium issues within 120 days and low issues within 180 days. Contractor shall obtain written State Purchasing Entity approval for any critical and high exceptions. Once remediation is complete, Contractor shall re-perform the test.
Appears in 1 contract
Samples: Gsa Piggyback Agreement
Vulnerability Testing. The Contractor shall run quarterly vulnerability assessments and promptly report results to the StatePurchasing Entity. Contractor shall remediate all critical issues within 90 days, all medium issues within 120 days and low issues within 180 days. Contractor shall obtain written State Purchasing Entity approval for any exceptions. Once remediation is complete, Contractor shall re-perform the test.
Appears in 1 contract
Samples: Information Technology Contract