Common use of Supplier will Clause in Contracts

Supplier will. a. Establish an operational incident handling capability for information systems that includes reasonable preparation, detection, analysis, containment, recovery, and user response activities. b. Periodically, but no less than annually, test the incident handling capability. c. Track, document, and report incidents to appropriate Supplier personnel. d. Notify Verizon of any incident materially affecting systems supporting Verizon services or data, including, but not limited to, any loss, acquisition or use of Verizon Confidential Information without authorization, as follows: i. Supplier will provide notification via electronic mail to: xxxxxxx@xxx.xxxxxxx.xxx as soon as practical, but no later than forty-eight (48) hours, following awareness of the security incident. ii. Upon Verizon request, Supplier will provide status updates of the incident mitigation to a point of contact designated by Verizon. iii. Supplier will cooperate with Verizon in its efforts to investigate any security incidents. iv. Upon Verizon request, Supplier will provide a written report which describes the incident, the actions taken by Supplier during the incident response and future actions to prevent reoccurrence or similar incident.