Common use of Technical Controls Clause in Contracts

Technical Controls. 4.1 The Applicant shall implement appropriate firewall, anti-virus, anti-spyware and other anti-malware software and technologies on all networks and systems it uses to process the Materials. 4.2 The Applicant shall update its firewall, anti-virus, anti-spyware and other anti-malware software and technologies on a regular basis to ensure that they protect against then-current virus, spyware and other malware threats. 4.3 The Applicant shall ensure that updates and patches of critical software and firmware are applied within a reasonable time period. 4.4 The Applicant shall mitigate external attacks by a number of methods, including the use of Intrusion Prevention and Detection Systems (IPS/IDS) in addition to firewall and anti-virus measures, with appropriate monitoring in place. 4.5 Where remote access is provisioned controls must be implemented to ensure only authorised devices access IT systems. 4.6 The Applicant shall take reasonable measures to ensure that vulnerabilities are discovered and addressed within a reasonable time frame. These measures could include internal vulnerability scanning and use of independent external auditors (penetration testing).