Incident Response Process Clause Samples

Incident Response Process a. Acuity maintains a record of security breaches with a description of the breach, the time period, the consequences of the breach, the name of the reporter, and to whom the breach was reported, and the procedure for recovering data.

Incident Response Process. Microsoft maintains a record of security breaches with a description of the breach, the time period, the consequences of the breach, the name of the reporter, and to whom the breach was reported, and the procedure for recovering data. - Microsoft tracks, or enables Eligible Public Entity to track, disclosures of Customer Data, including what data has been disclosed, to whom, and at what time. - Service Monitoring: Microsoft security personnel verify logs at least every six months to propose remediation efforts if necessary.

Incident Response Process. Spotify’s response to an Information Security Incidents consists of three phases, as follows:

Incident Response Process. IBM maintains a record of security breaches with a description of the breach, the time period, the consequences of the breach, the name of the reporter, and to whom the breach was reported, and the procedure for recovering data.

Incident Response Process i. Provider shall maintain a record of Security Incidents noting the description of the Security Incident, the applicable time periods, the impact, the person reporting and to whom the Security Incident was reported, and the procedures to remediate the incident. ii. In the event of a Security Incident identified by Provider, Accenture, or other third party, Provider will: (a) promptly investigate the Security Incident; (b) promptly provide Accenture with all relevant detailed information as reasonably requested by Accenture about the Security Incident; and (c) take reasonable steps to mitigate the effects and to minimize any damage resulting from the Security Incident. iii. The Provider shall track disclosures of Accenture Data, including what type of data was disclosed, to whom, and the time of the disclosure.

Incident Response Process. PartnerTap maintains a record of security breaches which includes a description of the breach, the time period, the consequences of the breach, the context surrounding the report of the breach, and the mitigation measures taken as a result of the breach. For each security breach that is a Security Incident, notification by PartnerTap according to federal, state, local legislation and contractual obligations.

Incident Response Process. Supplier must have a documented incident response (IR) process and dedicated team in place to assess, respond to, contain and remediate, as appropriate, identified cybersecurity issues. Supplier will review and update the IR process and associated playbooks annually to reflect emerging risks and lessons learned from incidents. Supplier shall promptly notify VWGoA without undue delay and no later than 24 hours upon Supplier becoming aware of an actual or potential Security Breach. Supplier should notify VWGoA by telephone to Supplier’s primary business contact and via email at ▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇.▇▇▇ if it has knowledge that there is, or reasonably believes that there has been, an actual or potential Security Breach. Notice must include the following: • the nature of the Security Breach, • the categories and numbers of data subjects concerned, and the categories and numbers of records concerned; • the name and contact details of the Supplier contact from whom more information may be obtained; • describe the likely consequences of the Security Breach; and • describe the measures taken or proposed to be taken to address the Security Breach. • Other information as VWGoA may reasonably request Supplier shall (i) cooperate with VWGoA in the manner reasonably requested by VWGoA and in accordance with law to investigate and resolve the Security Breach, and mitigate any harmful effects of the Security Breach; (ii) promptly implement any necessary remedial measures to ensure the protection of VWGoA Data and/or VWGoA Systems; and

Incident Response Process. Information security incident management policy and procedures are documented. The incident management policy and/or procedures include the following attributes: • Organizational structure is defined • Response team is identified • Response team availability is documented • Timelines for incident detection and disclosure are documented • Incident process lifecycle is defined including the following discrete steps: • Identification • Assignment of severity to each incident • Communication • Resolution • Training • Testing • Reporting • Incidents must be classified and prioritized • Incident response procedures must include Company notification to the relationship (delivery) manager or another contact listed in the contract Incident response process is executed as soon as ASCI is aware of the incident (irrespective of time of day).

Incident Response Process. The Data Importer maintains an incident response process to appropriately identify potential privacy and information security incidents, engage appropriate stakeholders, and conduct the necessary remediation, including notification to Data Exporters and/or regulators where required.