Common use of COMPLIANCE WITH FEDERAL, STATE AND LOCAL REGULATIONS Clause in Contracts

COMPLIANCE WITH FEDERAL, STATE AND LOCAL REGULATIONS. If required within the Authorized User Agreement, Contractor will provide verification of compliance with specific Federal, State and local regulations, laws and IT standards that the Authorized User is required to comply with. See Appendix F – Primary Security and Privacy Mandates. AUTHENTICATION TOKENS The Authorized User Agreement may require authentication tokens for all systems. For more details, please see NYS ITS Policy S14-006 Authentication Tokens Standard or successor. MODIFICATION TO CLOUD SERVICE DELIVERY TYPE AND DESCRIPTION WITHIN AN AUTHORIZED USER AGREEMENT As Cloud services can be flexible and dynamic, delivery mechanisms may be subject to change. This may result in changes to the service type, description, or SKU. The State and Authorized Users require notification of any such changes to ensure security and business needs are met. Any changes to the description, type of service(s), or SKU (e.g., PaaS to IaaS) must be provided to OGS via Appendix C - Contract Modification Procedure. In addition, notification must be provided to the Authorized User for review and acceptance, prior to implementation. Any changes to the Authorized User Agreement will require the Authorized User to re-assess the risk mitigation methodologies and strategies and revise the Authorized User Agreement as needed.

COMPLIANCE WITH FEDERAL, STATE AND LOCAL REGULATIONS. If required within the Authorized User Agreement, Contractor will provide verification of compliance with specific Federal, State and local regulations, laws and IT standards that the Authorized User is required to comply with. See Appendix F – Primary Security and Privacy Mandates. AUTHENTICATION TOKENS The Authorized User Agreement may require authentication tokens for all systems. For more details, please see NYS ITS Policy S14-006 Authentication Tokens Standard or successor. MODIFICATION TO CLOUD SERVICE DELIVERY TYPE AND DESCRIPTION DEPLOYMENT MODEL, SERVICE MODEL, AND/OR INITIAL FUNCTIONALITY WITHIN AN AUTHORIZED USER AGREEMENT As Cloud services can be flexible and dynamic, delivery mechanisms may be subject to change. This may result in changes to the deployment model, service typemodel, descriptionfunctionality, or SKU. The State and Authorized Users require notification of any such changes to ensure security and business needs are met. Any changes to the descriptiondeployment model, type of service(s)service model, functionality, or SKU (e.g., PaaS to IaaS) must be provided to OGS via Appendix C - Contract Modification Procedure. In addition, notification must be provided to the Authorized User for review and acceptance, prior to implementation. Any changes to the Authorized User Agreement will require the Authorized User to re-assess the risk mitigation methodologies and strategies and revise the Authorized User Agreement as needed.

COMPLIANCE WITH FEDERAL, STATE AND LOCAL REGULATIONS. ‌ If required within the Authorized User Agreement, Contractor will provide verification of compliance with specific Federal, State and local regulations, laws and IT standards that the Authorized User is required to comply with. See Appendix F – Primary Security and Privacy Mandates. AUTHENTICATION TOKENS TOKENS‌ The Authorized User Agreement may require authentication tokens for all systems. For more details, please see NYS ITS Policy S14-006 Authentication Tokens Standard or successor. MODIFICATION TO CLOUD SERVICE DELIVERY TYPE AND DESCRIPTION DEPLOYMENT MODEL, SERVICE MODEL, AND/OR INITIAL FUNCTIONALITY WITHIN AN AUTHORIZED USER AGREEMENT AGREEMENT‌ As Cloud services can be flexible and dynamic, delivery mechanisms may be subject to change. This may result in changes to the deployment model, service typemodel, descriptionfunctionality, or SKU. The State and Authorized Users require notification of any such changes to ensure security and business needs are met. Any changes to the descriptiondeployment model, type of service(s)service model, functionality, or SKU (e.g., PaaS to IaaS) must be provided to OGS via Appendix C - Contract Modification Procedure. In addition, notification must be provided to the Authorized User for review and acceptance, prior to implementation. Any changes to the Authorized User Agreement will require the Authorized User to re-assess the risk mitigation methodologies and strategies and revise the Authorized User Agreement as needed.

COMPLIANCE WITH FEDERAL, STATE AND LOCAL REGULATIONS. ‌ If required within the Authorized User Agreement, Contractor will provide verification of compliance with specific Federal, State and local regulations, laws and IT standards that the Authorized User is required to comply with. See Appendix F – Primary Security and Privacy Mandates. AUTHENTICATION TOKENS TOKENS‌ The Authorized User Agreement may require authentication tokens for all systems. For more details, please see NYS ITS Policy S14-006 Authentication Tokens Standard or successor. MODIFICATION TO CLOUD SERVICE DELIVERY TYPE AND DESCRIPTION WITHIN AN AUTHORIZED USER AGREEMENT AGREEMENT‌ As Cloud services can be flexible and dynamic, delivery mechanisms may be subject to change. This may result in changes to the service type, description, or SKU. The State and Authorized Users require notification of any such changes to ensure security and business needs are met. Any changes to the description, type of service(s), or SKU (e.g., PaaS to IaaS) must be provided to OGS via Appendix C - Contract Modification Procedure. In addition, notification must be provided to the Authorized User for review and acceptance, prior to implementation. Any changes to the Authorized User Agreement will require the Authorized User to re-assess the risk mitigation methodologies and strategies and revise the Authorized User Agreement as needed.