Common use of Security Controls Clause in Contracts

Security Controls. Upon Client’s reasonable request, no more frequently than annually, State Street will provide Client’s Chief Information Security Officer or his or her designee with a copy of its Corporate Information Security Controls manual, a completed Standardized Information Gathering (SIG) questionnaire, State Street’s Global Information Security (GIS) SOC 2 (Type II) report, and an opportunity to discuss State Street’s Information Security measures with a qualified member of State Street’s Information Technology management team. In no event will any such discussions require State Street to reveal any details or information that could reasonably be expected to jeopardize the security or integrity of any State Street system or the confidentiality or security of any other client’s data. State Street reviews its Information Security Policy approximately annually and reserves the right to change the frequency to meet regulatory requirements (which in no event will be less frequent than every eighteen (18) months).

Security Controls. Upon Client’s reasonable request, no more frequently than annually, State Street will provide Client’s Chief Information Security Officer or his or her designee with a copy an executive summary of its Corporate Information Security Controls manualsecurity controls, a completed Standardized Information Gathering (SIG) questionnaire, State Street’s Global Information Security (GIS) SOC 2 (Type II) report, and an opportunity to discuss State Street’s Information Security measures with a qualified member of State Street’s Information Technology management team. In no event will any such discussions require State Street to reveal any details or information that could reasonably be expected to jeopardize the security or integrity of any State Street system or the confidentiality or security of any other client’s data. State Street reviews its Information Security Policy approximately annually and reserves the right to change the frequency to meet regulatory requirements (which in no event will be less frequent than every eighteen (18) months).

Security Controls. Upon Client’s reasonable request, no more frequently than annually, State Street will provide Client’s Chief Information Security Officer or his or her designee with a copy of its Corporate Information Security Controls manual, a completed Standardized Information Gathering (SIG) questionnaire, State Street’s Street Global Information Security (GIS) SOC 2 (Type II) report, and an opportunity to discuss State Street’s Information Security measures with a qualified member of State Street’s Information Technology management team. In no event will any such discussions require State Street to reveal any details or information that could reasonably be expected to jeopardize the security or integrity of any State Street system or the confidentiality or security of any other client’s data. State Street reviews its Information Security Policy approximately annually and reserves the right to change the frequency to meet regulatory requirements (which in no event will be less frequent than every eighteen (18) months).

Security Controls. Upon Client’s reasonable request, no more frequently than annually, State Street will provide Client’s Chief Information Security Officer or his or her designee with a copy of its Corporate Information Security Controls manual, a completed Standardized Information Gathering (SIG) questionnaire, State Street’s Global Information Security (GIS) SOC 2 (Type II) report, and an opportunity to discuss State Street’s Information Security measures with a qualified member of State Street’s Information Technology management team. In no event will any such discussions require State Street to reveal any details or information that could reasonably be expected to jeopardize the security or integrity of any State Street system or the confidentiality or security of any other client’s data. State Street reviews its Information Security Policy approximately annually and reserves the right to change the frequency to meet regulatory requirements (which in no event will be less frequent than every eighteen (18) months).