Safety and Security Procedures. Contractor shall maintain and enforce, at the Contractor Work Locations, industry-standard safety and physical security policies and procedures. While at each JBE Work Location, Contractor shall comply with the safety and security policies and procedures in effect at such JBE Work Location. Data Security. Contractor shall comply with the Data Safeguards. Contractor shall implement and maintain a comprehensive information security program (“Contractor’s Information Security Program”) in accordance with the Data Safeguards. Contractor shall comply with all applicable privacy and data security laws, and other laws (including the California Rules of Court) and regulations relating to the protection, collection, use, and distribution of JBE Data, as well as privacy and data security requirements and standards set forth in the JBE’s policies or procedures. To the extent that California Rule of Court 2.505 applies to this Agreement, Contractor shall provide access and protect confidentiality of court records as set forth in that rule and in accordance with this Agreement. In addition to the foregoing, Contractor represents and warrants that Contractor complies with, and throughout the term of this Agreement, Contractor and its performance of its obligations under this Agreement shall be in compliance with, the current NIST (National Institute of Standards and Technology) Special Publication 800-53, including without limitation any NIST 800-53 standards, guidelines, or requirements for security controls or data security protocols. Unauthorized access to, or use or disclosure of JBE Data (including data mining, or any commercial use) by Contractor or third parties, is prohibited. Contractor shall not, without the prior written consent of an authorized representative of JBE, use or access the JBE Data for any purpose other than to provide the Work under this Agreement. In no event shall Contractor transfer the JBE Data to third parties, or provide third parties access to the JBE Data, except as may be expressly authorized by JBE. Contractor is responsible for the security and confidentiality of the JBE Data. JBE owns and retains all right and title to the JBE Data, and has the exclusive right to control its use. No Work shall be provided from outside the continental United States. Remote access to JBE Data from outside the continental United States is prohibited unless approved in writing in advance by the JBE. The physical location of Contractor’s data center, systems, and equipment where the JBE Data is stored shall be within the continental United States. Contractor shall ensure that access to the JBE Data will be provided to the JBE (and its authorized users) 24 hours per day, 365 days per year (excluding agreed-upon maintenance downtime). Upon the JBE’s request, all JBE Data in the possession of Contractor shall be provided to JBE in a manner reasonably requested by JBE and all copies shall be permanently removed from Contractor’s system, records, and backups, and all subsequent use of such information by Contractor shall cease. Confidential, sensitive, or personally identifiable information shall be encrypted in accordance with the highest industry standards, applicable laws, this Agreement, and JBE policies and procedures.
Appears in 2 contracts
Sources: Standard Agreement, Standard Agreement
Safety and Security Procedures. Contractor shall maintain and enforce, at the Contractor Work Locations, industry-standard safety and physical security policies and procedures. While at each JBE Work Location, Contractor shall comply with the safety and security policies and procedures in effect at such JBE Work Location. Data Security. Contractor shall comply with the Data Safeguards. Contractor shall implement and maintain a comprehensive information security program (“Contractor’s Information Security Program”) in accordance with the Data Safeguards. Contractor shall comply with all applicable privacy and data security laws, and other laws (including the California Rules of Court) and regulations relating to the protection, collection, use, and distribution of JBE Data, as well as privacy and data security requirements and standards set forth in the JBE’s policies or procedures. To the extent that California Rule of Court 2.505 applies to this Agreement, Contractor shall provide access and protect confidentiality of court records as set forth in that rule and in accordance with this Agreement. In addition to the foregoing, Contractor represents and warrants that Contractor complies with, and throughout the term of this Agreement, Contractor and its performance of its obligations under this Agreement shall be in compliance with, the current NIST (National Institute of Standards and Technology) Special Publication 800-53, including without limitation any NIST 800-53 standards, guidelines, or requirements for security controls or data security protocols. Unauthorized access to, to or use or disclosure of JBE Data (including data mining, or any commercial use) by Contractor or third partiesThird Parties, is prohibited. Contractor shall not, without the prior written consent of an authorized representative of JBE, use or access the JBE Data for any purpose other than to provide the Work under this Agreement. In no event shall Contractor transfer the JBE Data to third parties, parties or provide third parties Third Parties access to the JBE Data, except as may be expressly authorized by JBE. Contractor is responsible for the security and confidentiality of the JBE Data. JBE owns and retains all right and title to the JBE Data, Data and has the exclusive right to control its use. No Work shall be provided from outside the continental United States. Remote access to JBE Data from outside the continental United States is prohibited unless approved in writing in advance by the JBE. The physical location of Contractor’s data center, systems, and equipment where the JBE Data is stored shall be within the continental United States. Contractor shall ensure that access to the JBE Data will be provided to the JBE (and its authorized users) 24 hours per day, 365 days per year (excluding agreed-upon maintenance downtime). Upon the JBE’s request, all JBE Data in the possession of Contractor shall be provided to JBE in a manner reasonably requested by JBE and all copies shall be permanently removed from Contractor’s system, records, and backups, and all subsequent use of such information by Contractor shall cease. Confidential, sensitive, or personally identifiable information shall be encrypted in accordance with the highest industry standards, applicable laws, this Agreement, and JBE policies and procedures.
Appears in 1 contract
Sources: Leveraged Procurement Agreement
Safety and Security Procedures. Contractor shall maintain and enforce, at the Contractor Work Locations, industry-standard safety and physical security policies and procedures. While at each JBE Work Location, Contractor shall comply with the safety and security policies and procedures in effect at such JBE Work Location. Data Security. Contractor shall comply with the Data Safeguards. Contractor shall implement and maintain a comprehensive information security program (“Contractor’s Information Security Program”) in accordance with the Data Safeguards. Contractor shall comply with all applicable privacy and data security laws, and other laws (including the California Rules of Court) and regulations relating to the protection, collection, use, and distribution of JBE Data, as well as privacy and data security requirements and standards set forth in the JBE’s policies or procedures. To the extent that California Rule of Court 2.505 applies to this Agreement, Contractor shall provide access and protect confidentiality of court records as set forth in that rule and in accordance with this Agreement. In addition to the foregoing, Contractor represents and warrants that Contractor complies with, and throughout the term of this Agreement, Contractor and its performance of its obligations under this Agreement shall be in compliance with, the current NIST (National Institute of Standards and Technology) Special Publication 800-53, including without limitation any NIST 800-53 standards, guidelines, or requirements for security controls or data security protocols. Unauthorized access to, to or use or disclosure of JBE Data (including data mining, or any commercial use) by Contractor or third parties, is prohibited. Contractor shall not, without the prior written consent of an authorized representative of JBE, use or access the JBE Data for any purpose other than to provide the Work under this Agreement. In no event shall Contractor transfer the JBE Data to third parties, or provide third parties access to the JBE Data, except as may be expressly authorized by JBE. Contractor is responsible for the security and confidentiality of the JBE Data. JBE owns and retains all right and title to the JBE Data, Data and has the exclusive right to control its use. No Work shall be provided from outside the continental United States. Remote access to JBE Data from outside the continental United States is prohibited unless approved in writing in advance by the JBE. The physical location of Contractor’s data center, systems, and equipment where the JBE Data is stored shall be within the continental United States. Contractor shall ensure that access to the JBE Data will be provided to the JBE (and its authorized users) 24 hours per day, 365 days per year (excluding agreed-upon maintenance downtime). Upon the JBE’s request, all JBE Data in the possession of Contractor shall be provided to JBE in a manner reasonably requested by JBE and all copies shall be permanently removed from Contractor’s system, records, and backups, and all subsequent use of such information by Contractor shall cease. Confidential, sensitive, or personally identifiable information shall be encrypted in accordance with the highest industry standards, applicable laws, this Agreement, and JBE policies and procedures.
Appears in 1 contract
Sources: Master Agreement