Technical Security Controls definition

Technical Security Controls. With respect to information technology infrastructure, servers, databases, or networks that Process Data, Supplier shall remain in alignment with industry security standards and shall use the following technical security controls where applicable (keeping them current by incorporating and using all updates commercially available): V. 技术安全控制对于处理数据的信息技术基础设施、服务器、数据库或网络，供应商应保持与行业安全标准一致，并在适用的情况下使用以下技术安全控制（通过整合和使用所有商业可用的更新来保持其最新状态）： A. Information Security Governance 1. Assign roles and responsibilities for security within Supplier’ organization (e.g., Chief Information Security Officer) 2. Publish and maintain an Information Security Policy and related standards, guidelines and procedures for employees and external parties (e.g., temporary employees, consultants, contractors, vendors, etc.)