Common use of Data Security Measures Clause in Contracts

Data Security Measures. Without prejudice to Data Controller’s security risk assessment obligations under Section 3.2 (Security Risk Assessment) above, Data Processor shall maintain the Security Policy Framework. Data Processor regularly tests, assess and evaluates the effectiveness of its Security Policy Framework and may periodically review and update the Security Policy Framework to address new and evolving security technologies, changes to industry standard practices, and changing security threats.