Common use of Threat and Vulnerability Notice and Remediation Clause in Contracts

Threat and Vulnerability Notice and Remediation. During the Goods life (i.e., until the formal end-of-life of any Goods) in commercial use, Seller shall monitor and address all Software and Firmware material threats and vulnerabilities by: (a) issuing necessary patches or updates; (b) providing prompt notice to Buyer of said threats and vulnerabilities, prior to any public disclosure, except where such notice would be impossible or impracticable; and (c) developing fixes, workarounds, and/or compensating security controls and documentation (“Compensating Controls”) to address any unmitigated material threats and vulnerabilities while Seller undertakes the process of issuing patches or updates, and providing Buyer notice of said Compensating Controls as soon as reasonably practicable.