Common use of Information Security Policies and Practices Clause in Contracts

Information Security Policies and Practices. The SI shall implement, and throughout the Term maintain and follow, a comprehensive information security program (the "Information Security Program") with respect to (a) SI employees, consultants, Subcontractors and others engaged or relied upon by the SI for purposes of the Project, and (b) those elements of the SI's systems (including hardware, software and data) that interact or exchange information with the NFPS (collectively, the "NFPS Security-Sensitive SI Resources"). The SI's Information Security Program shall comply with: (i) this Section 23.4 (Information Security Policies and Practices); (ii) Good Industry Practices; and (iii) the Technical Specifications (where applicable). The Information Security Program at a minimum shall include the following: