Common use of SECURITY POLICIES AND STANDARDS Clause in Contracts

SECURITY POLICIES AND STANDARDS. 7.1 The Contractor shall, and shall procure that any Sub-contractor (as applicable) shall, comply with the Security Policies and Standards set out Annex A. 7.2 Notwithstanding the foregoing, the Authority’s Security Requirements applicable to the Services may be subject to change following certain events including, but not limited to, any relevant change in the delivery of the Services. Where any such change constitutes a Contract Change, any change in the Authority’s Security Requirements resulting from such Contract Change (if any) shall be agreed by the Parties in accordance with the Contract Change Procedure. Where any such change constitutes an Operational Change, any change in the Authority’s Security Requirements resulting from such Operational Change (if any) shall be agreed by the Parties and documented in the relevant Operational Change Confirmation. 7.3 The Contractor shall, and shall procure that any Sub-contractor (as applicable) shall, maintain appropriate records and is otherwise able to demonstrate compliance with the Security Policies and Standards. The Security Policies are published on: ▇▇▇▇▇://▇▇▇.▇▇▇.▇▇/government/publications/dwp-procurement-security- policies-and-standards unless specified otherwise: a) Acceptable Use Policy b) Information Security Policy c) Physical Security Policy d) Information Management Policy

SECURITY POLICIES AND STANDARDS. 7.1 The Contractor shall, and shall procure that any Sub-contractor (as applicable) shall, comply with the Security Policies and Standards set out Annex A. 7.2 Notwithstanding the foregoing, the Authority’s Security Requirements applicable to the Services may be subject to change following certain events including, but not limited to, any relevant change in the delivery of the Services. Where any such change constitutes con- stitutes a Contract Change, any change in the Authority’s Security Requirements resulting re- sulting from such Contract Change (if any) shall be agreed by the Parties in accordance accord- ance with the Contract Change Procedure. Where any such change constitutes an Operational Change, any change in the Authority’s Security Requirements resulting from such Operational Change (if any) shall be agreed by the Parties and documented docu- mented in the relevant Operational Change Confirmation. 7.3 The Contractor shall, and shall procure that any Sub-contractor (as applicable) shall, maintain appropriate records and is otherwise able to demonstrate compliance with the Security Policies and Standards. The Security Policies are published on: ▇▇▇▇▇://▇▇▇.▇▇▇.▇▇/government/publications/dwp-procurement-security- security-policies-and-standards stand- ards unless specified otherwise: a) a. Acceptable Use Policy b) b. Information Security Policy c) c. Physical Security Policy d) d. Information Management Policy