Vendor Controls definition
Examples of Vendor Controls in a sentence
Vendor shall, at its cost and expense (except as otherwise provided in this Section), maintain Vendor Controls in each Vendor Service Location and USAC Service Location in accordance with industry standards for services of the type provided to USAC, including without limitation those set forth in the Privacy and Security Addendum.
Vendor shall, at its cost and expense (except as otherwise provided in this Section), maintain Vendor Controls in each Vendor Service Location and USAC Service Location in accordance with industry standards for services of the type provided to USAC, including without limitation those set forth in Articles 15 and 16.
Service Provider represents that the information provided by or on behalf of Service Provider in response to Customer’s Vendor Controls Assessment Questionnaire, Software Security Assessment and any other information provided with respect to the Service Provider Systems and Security is complete, truthful, and accurate.
Vendor represents and warrants that as of the effective date of this Addendum and throughout the term, the Vendor Controls described in Attachment 1 to this Addendum shall be in effect with respect to GS Data at all times.
Vendor will ensure senior management have oversight of information security working practices, and are accountable for managing risks and maintaining effective operation of Vendor Controls including, without limitation, monitoring compliance with the Vendor Policies.
Vendor will operate a third party risk management process to assess and manage third party related technology risks, and will ensure third party service providers have in place security controls equivalent to the Vendor Controls.
Vendor will maintain appropriate and sufficient personnel, tools and procedures to effectively operate Vendor Controls in line with the Vendor Policies.
Vendor Controls are to be part of Vendor's general standards and practices and need not be exclusively created for GS.
Vendor shall maintain, and provide upon request, a comprehensive written information security plan and incident response plan that memorializes these Vendor Controls.
As part of these assessments, Vendor will provide relevant documentary evidence of its compliance with this Attachment 1, including, without limitation, effective operation of Vendor Controls via mutually agreed communication channels.