https://docs.google.com/document/d/16sOU7D3oZrc2QFHcr4Fm6ygQH5HDpjE7/edit#heading=h.3znysh7
| DEFINED TERM |
ASCRIBED MEANING |
| Additional Security Standards |
means the additional security provisions specific to this Agreement, as set out in Annex B (Additional Security Standards). |
| Baseline Security Standards” |
means du’s standard security provisions applicable to all procurement scenarios as set out at Annex A (Baseline Security Standards). |
| du Network |
means the telecommunications network and associated systems operated by du in connection with its business as a licensed telecommunications operator in the United Arab Emirates. |
| du Security Requirements |
means the Baseline Security Standards and the Additional Security Standards and any other Security requirements communicated by du from time to time. |
PURPOSE
- The Parties acknowledge and agree that:
- the du Network comprises a complex technical environment that is continually evolving;
- the security of the du Network is of fundamental and paramount importance to the operation of du’s business;
- the consequences of a security breach to the du Network could be catastrophic for du’s business including major financial loss and loss of operating licence;
- du must maintain the highest security protocol to govern any interaction vendors have in connection with the du Network; and
- the Supplier will have access to the du Network and/or otherwise may be providing services that will impact the du Network.
- The Parties agree and acknowledge that the purpose of this Schedule 10 (Security) is to:
- clearly set out the du Security Requirements which the Supplier must comply with whilst performing its obligations under this Agreement;
- provide the framework so that Supplier can perform its obligations so as to not compromise the security of the du Network; and
- provide du with remedy in the event of a breach of the du Security Requirements.
DU SECURITY REQUIREMENTS :
The Supplier acknowledges and agrees that it must strictly comply with the du Security Requirements at all times during the term of this Agreement.
SUPPLIER’S OBLIGATIONS:
- As at the Agreement Date, the Supplier warrants and represents that the performance of its obligations under this Agreement shall not breach the du Security Requirements.
- The Supplier acknowledges and agrees that:
- it has read and understood the du Security Requirements;
- it has raised and clarified with du any questions it has about the du Security Requirements and how they might impact performance of its obligations under this Agreement;
- it shall fully comply with the du Security Requirement at all times during the term of this Agreement.
SUPPLIER’S CONTINUING OBLIGATIONS:
- du may, from time to time, notify the Supplier of updates to the du Security Requirements.
- The Supplier acknowledges and agrees that it shall be diligent in ensuring that it remains familiar with the then current version of the du Security Requirements throughout the term of this Agreement.
- If at any time, the Supplier reasonably believes that revisions to the du Security Requirements are adversely inconsistent with its obligations under this Agreement, it shall promptly notify du of:
- the nature of the obligation that is adversely impacted;
- the consequences of the revised du Security Requirements on the relevant obligations; and
- the Supplier’s proposed plan to ensure continued performance of the Agreement.
BREACH OF SECURITY:
- The Supplier acknowledges and agrees that it shall not do anything that will or is reasonable likely to breach the du Security Requirements.
- in the event that a Supplier breaches, or in its opinion is reasonably likely to breach, the du Security Requirements it will;
- immediately cease whatever action is breaching, or likely to breach, the du Security Requirements; and
- immediately notify du of the breach.
- du shall be entitled to terminate this Agreement with immediate effect in the event of a breach or likely breach of the du Security Requirements, which is:
- material;
- repeated;
- or unresolved for [∙] [90] days.]
<aside>
<img src="/icons/hand_gray.svg" alt="/icons/hand_gray.svg" width="40px" />
Appendix (A) - Specific Security Requirements:
TSRM_specific_Requirements_SASF.xls
Schedule 10 | TSRM Specific Requirements SASF
</aside>
<aside>
<img src="/icons/hand_gray.svg" alt="/icons/hand_gray.svg" width="40px" />
Appendix (B) - Third Party Risk Management Requirements & Policy & Framework
https://docs.google.com/spreadsheets/d/1jT2Jzuk7VNH8cXOzMHo5JtWkLzpUajHC/edit?gid=901782694#gid=901782694
https://docs.google.com/spreadsheets/d/1lflHQ3Jiw9ihGcqeI0Cuzk_VPhB1pW6w/edit?gid=114208966#gid=114208966
https://docs.google.com/document/d/1tFNzefsI0OwXAcBfMz8gRjlWuExkO-ri/edit
</aside>