Common use of Security – General Clause in Contracts

Security – General. The main task of Security Management is to assure that access to Customer Data and systems are granted to authorize Customer Employees and Contractors and HP-OMS Personnel only. HP-OMS will comply and mutually enforce with the Customer, the Security Policy that had been defined by the Customer prior to Commencement Date. Changes to the Security Policy will be done by Change Management Process only. HP-OMS MAINTAINS THE FOLLOWING SERVER SECURITY CLASSIFICATIONS FOR SERVER MANAGEMENT: INTERNET: Server directly connected to the public Internet, hosting Internet applications such as a Web Server or a Mail Server. By definition, this server is also considered as Stringent. STRINGENT: The confidentiality of the data is "highly sensitive", or access to the server includes "limited" or "public" access. BASELINE: All non-stringent servers managed by HP-OMS are considered to require baseline security. All servers are classified into one of these server security classifications and the security rules and guidelines are applied accordingly. Additional security rules defined by the Customer are optional and must not contradict those provided by HP-OMS.