Acquisition, Development and Maintenance Vzorová ustanovení

Acquisition, Development and Maintenance. 1. The Provider will actively participate, according to the terms and conditions of the contract, in observing, operating a developing security measures. The Provider is, at a minimum, bound to: a) Ensure secure implementation, innovation, update and testing of technologies that are part of the terms and conditions of the contract. b) Transfer the documentation of the terms and conditions of the contract to the Consumer including at least: 2. In case the terms and conditions of the contract include software development, the Provider is bound to: a) Adhere to and implement the best practices for safe software development defined in the contract relationship. b) Allow the Consumer to carry out an audit on the fulfillment of the contract and, on written request, present the Consumer with developed sources code of software, if the audit activities and showing the source code are mentioned in the contract. The consumer will be allowed to execute code review (automated through security tools, and manual), especially in order to verify that the Provider is proceeding or proceeded in fulfilling the contract according to the terms and conditions of the contract and the Security requirements. c) Provide the Consumer, in the terms stated by the Consumer, respectively, without unnecessary delay, the requested co-operation on execution of security testing during the development of the software or anytime after the delivery of the software. d) Ensure that the fulfillment will include only the elements that are objectively necessary for proper operation of the software and/or that are explicitly specified in the contract (especially that the software will not include any unnecessary components, any program samples etc.). e) In case the installation of the operating system or other third-party software is a part of the fulfillment of the contract, ensure, during its installation, that the specified versions of these products installed are compatible and functional within the Consumer’s environment. f) Ensure the security of the Provider’s testing environment and security of the testing data provided by the Consumer. g) Ensure that only an executable code, specified by the terms and conditions of the contract will be supplied within the production environment, and the necessary data for operation of the contract fulfillment will be compiled. h) Ensure that, according to the terms and conditions of the contract, the provided software will be i) Install software only based o...