Common use of Security Program Clause in Contracts

Security Program. Coinbase’s information security program is centrally managed by its Global Security & Privacy departments, which is responsible for managing security across all global locations, all Coinbase products and services, and engagement of Coinbase sub processors. The framework for Coinbase’s information security program includes operational, administrative, technical, and physical safeguards reasonably designed to protect the confidentiality, integrity, and availability of sensitive data, including customer data, and is aligned to the NIST Cybersecurity Framework. Coinbase employs numerous defense-in-depth strategies to secure information assets, utilizing industry guidelines from NIST. Coinbase’s Chief Security Officer (CSO) meets on a regular basis with executive management and the Board of Directors to discuss security risks, issues, and company-wide security initiatives. Internal information security policies and standards are reviewed, assessed, and updated on at least an annual basis, and are made available to all Coinbase employees.