Audit and Assessment Sample Clauses
The Audit and Assessment clause grants one party the right to review and evaluate the other party’s records, processes, or systems to ensure compliance with contractual obligations. Typically, this clause outlines the scope of audits, the notice period required before an audit, and any limitations on frequency or access, such as restricting audits to business hours or protecting confidential information. Its core practical function is to provide transparency and accountability, helping to verify that both parties are meeting their responsibilities and to identify or prevent potential breaches or inefficiencies.
POPULAR SAMPLE Copied 4 times
Audit and Assessment. The Company reserves the right to perform an onsite audit for the purpose of completing the Company’s due diligence in security matters upon reasonable request. The Contractor shall permit the Company or a third party authorised by it to carry out such audit, upon reasonable written notice and during normal business hours. The Contractor may require the Company and/or such third party auditor to enter into a confidentiality agreement before permitting it to carry out an audit. Unless such audit or inspection has been necessitated by a material security breach by the Contractor, such audit shall be carried out at the Company’s expense.
Audit and Assessment. Assessments, audits and other reviews connected with this appendix may be made public.
Audit and Assessment. 7.1. The Supplier will allow its implementation and compliance with its obligations under this Data Processing Agreement to be audited by the Customer or an external auditor approved by the Customer at least annually. If and insofar as the audit indicates that the Supplier’s compliance falls short on one or more aspects, the Supplier will make concrete proposals for improvements in this respect, if possible in the context of its continuous improvement program.
7.2. If the audit/assessment referred to in paragraph 7.1 identifies any gaps in the Suppliers processing activities which are not compliant with this Data Processing Agreement or the relevant Privacy Laws the Customer has the right to ask the Supplier to update the technical and organizational security measures taken so that they are in line with the relevant requirements. The Supplier will provide all reasonable cooperation and as soon as reasonably practicable implement the necessary modifications indicated by the Customer. Processing carried out by Supplier: Basic user information will be processed in order to setup access rights and individual user accounts within the platform and provide the services to the users. This information can further be used for basic reporting and progress tracking.
Audit and Assessment. 8.1. The Data Processor will allow its implementation and compliance with its obligations under this Data Processing Agreement to be audited by the Data Controller or an external auditor approved by the Data Controller at least annually. If and insofar as the audit indicates that the Data Processor’s compliance falls short on one or more aspects, the Data Processor will make concrete proposals for improvements in this respect, if possible, in the context of its continuous improvement program.
8.2. The Data Processor will enable the Data Controller, at its first request, to assess the Data Processor’s compliance with its obligations. Prior to the assessment, Data Controller will inform the Data Processor in writing about the reason for the assessment and manner in which it will be conducted.
8.3. If the audit/assessment referred to in paragraph 8.2 identifies any gaps in the Data Processors processing activities which are not compliant with this Agreement or the relevant Privacy Laws the Data Controller has the right to ask the Data Processor to update the technical and organizational security measures taken so that they are in line with the relevant requirements. The Data Processor will provide all reasonable cooperation and as soon as reasonably practicable implement the necessary modifications indicated by the Data Controller.
Audit and Assessment. Auditing of the bank’s contracted independent auditor Auditing of the first independent auditing company’s report by a second independent auditor for compliance with the announced principles and procedures of independent auditing BRSA’s assessments of all these inputs using on-site and off-site supervision results
Audit and Assessment. The Company shall have the right to take reasonable and appropriate steps to ensure Gilion uses Personal Information that it collected pursuant to this Service Provider Agreement in a manner consistent with the Company’s obligations under applicable U.S. Data Privacy and Security Laws. Such steps may include ongoing manual reviews and automated scans of Gilion’s system. It may also include regular internal or third-party assessments, audits, or other technical and operational testing at least once every 12 months. Gilion will cooperate with such reasonable assessments by the Company. With respect to requirements under the VCDPA, ▇▇▇▇▇▇ may arrange for a qualified and independent assessor to conduct an assessment of ▇▇▇▇▇▇ ’s policies and technical and organizational measures in support of its obligations under the VCDPA using an appropriate and accepted control standard or framework and assessment procedure. Gilion shall provide a report of such assessment to the Company upon request.
Audit and Assessment. 2.12.1. Company management must regularly review the compliance of information processing within their area of responsibility with the appropriate security policies, standards, and any other security requirements.
2.12.2. On an annual basis, Company shall conduct an internal audit or assessment of all security controls, including, but not limited, to the controls required by this Standard.
2.12.3. Company must have an external Information Security audit performed at least annually by an independent, reputable third party which must be provided to SoundBite upon request. This requirement shall be considered satisfied by having an independent audit firm perform procedures under applicable auditing standards such as ▇▇▇▇▇, ▇▇▇▇▇▇, SOC audits (SysTrust), ISO, or other commonly accepted IT governance frameworks. SoundBite may audit solely at their own expense Company to monitor compliance with this Information Security Standard. Such audits will occur during normal business hours and will not occur more than once in any calendar year, unless required by applicable laws and regulations or unless Company experiences a Security Incident, in which case additional audits may be performed.
2.12.3.1. SoundBite’s right to audit/inspect Company extends to SoundBite’s authorized representatives or any applicable regulator.
2.12.3.2. On-site inspections of Company’s facilities may be conducted by SoundBite or SoundBite’s authorized representatives.
2.12.3.3. Company will promptly correct any violation of this Standard found by SoundBite or its agents and will certify in writing that the correction has been made.
Audit and Assessment. 10.1. Supplier will allow its implementation and compliance with its obligations under this DPA and the DP Laws to be audited by the Client, or an external auditor approved by the Client, at least annually.
10.2. If, and insofar as, the audit indicates that Supplier’s, compliance falls short on one or more aspects, Supplier shall be required to make the required changes as soon as is reasonably practicable and in any event within thirty (30) days.
10.3. If the audit/assessment identifies any compliance gaps the Client has the right to require Supplier to remedy such non-compliance and to update Supplier TOMs (if required) so that they are in line with the relevant requirements. Supplier will provide all reasonable cooperation and, as soon as reasonably practicable, implement the necessary modifications indicated by the Client.
10.4. The relevant laws and jurisdiction specified in the Agreement shall apply to this DPA.
ANNEX 1 DATA RECORD
Audit and Assessment. 7.01 Within 15 working days of receiving a written request from the WCB, a Physician will give the WCB full access to the File identified in the request for the purpose of allowing the WCB to conduct an audit of the ▇▇▇▇▇▇▇▇ to the WCB and the Services provided to Workers.
7.02 The WCB may audit selected or random reports against specific criteria for completeness and quality in conjunction with the relevant section of the AMA. The results of the audit will be confidential except where disclosure is authorized or permitted by law, and will be communicated to the Physician and the AMA where the Physician is an AMA member and such disclosure is authorized by the Physician.
Audit and Assessment. 7.1. The Licensor will allow its implementation and compliance with its obligations under this Data Processing Agreement to be audited an external auditor at least annually. If and insofar as the audit indicates that the Licensor’s compliance falls short on one or more aspects, the Licensor will make concrete proposals for improvements in this respect, if possible, in the context of its continuous improvement program.
7.2. If the audit/assessment referred to in paragraph 7.1 identifies any gaps in the Licensors processing activities which are not compliant with this Data Processing Agreement, or the relevant Privacy Laws the Licensor may update the technical and organizational security measures taken so that they are in line with the relevant requirements.
ANNEX 1 DATA RECORD