Common use of OPERATIONAL ENVIRONMENT Clause in Contracts

OPERATIONAL ENVIRONMENT. GlobalLogic’s security protections depends on the operational security controls associated with GlobalLogic’s pertinent processes and procedures. Pertinent means having a business impact on Client under this Agreement and having a strong bearing on (a) the confidentiality, integrity, and availability of Client and its customers’ data as well as (b) the availability and integrity of Client’s Service. GlobalLogic will meet the following security requirements: i) Include in GlobalLogic’s Security Program, documented Configuration and Change Management, Vulnerability Management, Security Monitoring, Incident Response, Data Handling, Access Management, Virus Management, Key Management, Patch Management processes and Physical security. The aforementioned security assessment should include each of these areas. GlobalLogic shall provide reasonable details of the measures it is taking in each of these areas, including, but not limited to, a detailed security policy; an overview of the supporting operational processes; attesting to the use of current documented methods and compliance to internal policy. ii) GlobalLogic will provide a liaison who will work with Client on matters of security compliance and risk management. iii) Establish and maintain a documented escalation process for security incident response, including procedures for engaging Client in the event of a security incident related to the system or the applications resident on it. iv) GlobalLogic may be asked to comply with some or all of the standards defined in the Client ISO A.5 Information Security Policy document and to participate in internal security processes such as security awareness training, application development, and vulnerability management. The standards and processes specific to the engagement will be provided by Client. v) Back-up of Code, documentation, and Client Work Product: ***