Common use of Device and Media Controls Clause in Contracts

Device and Media Controls. Vendor will ensure that all media containing SPE Data sent outside its facilities is encrypted, logged, authorized by management, and sent via secured courier or other delivery method that can be tracked. Vendor will encrypt all back-up/archive media containing SPE Data, and restrict access to all off-site backup/archive media to appropriate authorized personnel. Vendor will encrypt any devices including, without limitation, laptops and mobile devices containing SPE Data that may be taken outside its facilities. System, Storage and Transmission Security – Vendor will implement and maintain physical and technical controls: designed to guard against unauthorized access to or disruption of Vendor Systems, SPE Systems, and (SPE Data including, without limitation, when SPE Data is transmitted over an electronic communications network), designed to ensure that no SPE Data is physically co-mingled with any of Vendor’s (or any third party’s) other data, or virtually co-mingled with other data where such SPE Data shares the same media, device or system, unless the data is logically separated, or compensating controls, approved by SPE, are implemented, and

Device and Media Controls. Vendor will ensure that all media containing SPE Data sent outside its facilities is encrypted, logged, authorized by management, and sent via secured courier or other delivery method that can be tracked. Vendor will encrypt all back-up/archive media containing SPE Data, and restrict access to all off-site backup/archive media to appropriate authorized personnel. Vendor will encrypt any devices including, without limitation, laptops and mobile devices containing SPE Data that may be taken outside its facilities. System, Storage and Transmission Security – - Vendor will implement and maintain physical and technical controls: designed to guard against unauthorized access to or disruption of Vendor Systems, SPE Systems, and (SPE Data including, without limitation, when SPE Data is transmitted over an electronic communications network), designed to ensure that no SPE Data is physically co-mingled with any of Vendor’s (or any third party’s) other data, or virtually co-mingled with other data where such SPE Data shares the same media, device or system, unless the data is logically separated, or compensating controls, approved by SPE, are implemented, and