Common use of Penetration Tests Clause in Contracts

Penetration Tests. Customer may request to perform, at its own expenses, an application penetration test of the Subscription Service, which shall be no more than once per year. Customer must notify DXC and ServiceNow in advance of any tests by submitting a request using ServiceNow’s online support portal and completing a penetration testing agreement. DXC, ServiceNow, and Customer will agree upon a mutually acceptable time for the test, which shall typically be within thirty (30) days of such request. The test shall be of reasonable duration, conducted during reasonable times and shall not unreasonably interfere with DXC’s or ServiceNow’s day-to-day operations. Customer shall notify DXC and ServiceNow should Customer detect any vulnerability. Upon such notice, DXC and/or ServiceNow shall use all commercially reasonable efforts to promptly make any necessary changes to the Subscription Service.