Common use of Security Incident Reporting Requirements Clause in Contracts

Security Incident Reporting Requirements. Once Provider reasonably determines that a Security Incident occurred, the Provider shall report a Security Incident to the appropriate State identified contact within 24 hours by the agreed upon method as defined in the contract. Provider will provide the State regular updates and all available relevant information including a description of the incident and those measures taken by Provider in response to the Security Incident.