Firewalls and Access Controls Clause Samples

The 'Firewalls and Access Controls' clause establishes requirements for implementing technical measures to protect a network or system from unauthorized access. Typically, this involves mandating the use of firewalls to filter incoming and outgoing traffic and specifying access control mechanisms such as user authentication, role-based permissions, or multi-factor authentication. By setting these standards, the clause helps ensure that only authorized individuals can access sensitive data or systems, thereby reducing the risk of data breaches and enhancing overall security.
Firewalls and Access Controls. A. Access Precautions Contractor shall use precautions, including, but not limited to, physical software and network security measures, employee screening, training and supervision, and appropriate agreements with employees to: 1) Prevent anyone other than City, Contractor, and authorized City or Contractor personnel from monitoring, using, gaining access to, or learning the import of City Data; 2) Protect appropriate copies of City Data from loss, corruption, or unauthorized alteration; and 3) Prevent the disclosure of City and Contractor passwords and other access control information to anyone other than authorized City personnel. B. Security Best Practices Contractor shall implement the following security best practices with respect to any service provided:
View SourceView Similar (5)
Firewalls and Access Controls 
View Source

Related to Firewalls and Access Controls

  • Access Controls a. Authorized Access - DST shall have controls that are designed to maintain the logical separation such that access to systems hosting Fund Data and/or being used to provide services to Fund will uniquely identify each individual requiring access, grant access only to authorized personnel based on the principle of least privileges, and prevent unauthorized access to Fund Data. b. User Access - DST shall have a process to promptly disable access to Fund Data by any DST personnel who no longer requires such access. DST will also promptly remove access of Fund personnel upon receipt of notification from Fund.

  • CERTIFICATIONS; DISCLOSURE CONTROLS AND PROCEDURES The Adviser acknowledges that, in compliance with the ▇▇▇▇▇▇▇▇-▇▇▇▇▇ Act of 2002 (the “▇▇▇▇▇▇▇▇-▇▇▇▇▇ Act”), and the implementing regulations promulgated thereunder, the Trust and the Fund are required to make certain certifications and have adopted disclosure controls and procedures. To the extent reasonably requested by the Trust, the Adviser agrees to use its best efforts to assist the Trust and the Fund in complying with the ▇▇▇▇▇▇▇▇-▇▇▇▇▇ Act and implementing the Trust’s disclosure controls and procedures. The Adviser agrees to inform the Trust of any material development related to the Fund that the Adviser reasonably believes is relevant to the Fund’s certification obligations under the ▇▇▇▇▇▇▇▇-▇▇▇▇▇ Act.

  • User IDs and Password Controls All users must be issued a unique user name for accessing DHCS PHI or PI. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee with knowledge of the password, at maximum within 24 hours. Passwords are not to be shared. Passwords must be at least eight characters and must be a non-dictionary word. Passwords must not be stored in readable format on the computer. Passwords must be changed every 90 days, preferably every 60 days. Passwords must be changed if revealed or compromised. Passwords must be composed of characters from at least three of the following four groups from the standard keyboard: • Upper case letters (A-Z) • Lower case letters (a-z) • Arabic numerals (0-9) • Non-alphanumeric characters (punctuation symbols)

  • Controls and Procedures 11.1. The Company has implemented controls and procedures that are reasonably designed to ensure compliance with applicable laws and regulations, as well as the terms of this Agreement. Without limiting the foregoing, these controls and procedures are reasonably designed to ensure, and MFD or a Trust may request certifications on an annual basis with respect to, each of the following: (a) Orders for Shares received by the Company for each Portfolio comply with the Portfolio’s restrictions with respect to purchases, transfers, redemptions and exchanges as set forth in each Portfolio’s prospectus and statement of additional information; (b) Orders for Shares received by the Company prior to the Portfolio’s pricing time set forth in its prospectus (e.g., the close of the New York Stock Exchange – normally 4:00 p.m. Eastern time) are segregated from those received by the Company at or after such time, and are properly transmitted to the Portfolios (or their agents) for execution at the current day’s net asset value (“NAV”); and orders received by the Company at or after such time are properly transmitted to the Portfolios (or their agents) for execution at the next day’s NAV; (c) Late trading in Shares by Policy holders is identified and prevented and market timing is appropriately addressed; (d) Compliance with applicable state securities laws, including without limitation “blue sky” laws and related rules and regulations; (e) Compliance with all applicable federal, state and foreign laws, rules and regulations regarding the detection and prevention of money laundering activity; and (f) Effective business continuity and disaster recovery systems with respect to the services contemplated by the Agreement.

  • Disclosure Controls and Procedures The Company maintains effective “disclosure controls and procedures” (as defined under Rule 13a-15(e) under the Exchange Act to the extent required by such rule).