Common use of Vulnerability Assessments Clause in Contracts

Vulnerability Assessments. Administrator will conduct quarterly vulnerability assessments that meet the following criteria: (a) all production servers and network devices must be scanned at least monthly; (b) all findings must be risk rated; (c) all findings must be tracked to closure based on risk; and (d) tools used for scanning must have signatures updated at least monthly with the latest vulnerability. Administrator will implement and maintain a formal process for tracking and resolving issues in a timely fashion. Administrator will provide the results of Administrator’s most recent vulnerability assessment. Administrator will maintain current/current-1 patch levels.