2024-125 - Laserfiche WebLink

Home Browse Search

A TRUE COPY CERTIFICATION ON LAST PAGE RYAN L. BUTLER, CLERK e. CyberBox®(es) must be returned to OTM CYBER within 14 days of the end of service term. End of service may be the end of the service term, end of a trial period, or other reason for termination. CyberBox®(es) can be mailed to OTM CYBER offices. f. Customer Security Program. Customer acknowledges that it will provide the following controls, tools, and processes to directly support the OTM CYBER Services, and that failure to do so may impact OTM CYBER's ability to perform the Services effectively: i. - A written governance, risk and compliance (GRC) policy or policies, approved by a Senior Officer or equivalent, setting forth customer's policies and procedures for the protection of its information systems and nonpublic information stored on those information systems (aka "Cybersecurity Policy"); ii. -A written Incident Response Action Plan (I RAP) that is exercised and/or practiced with key scenario driven evaluations (i.e., tabletop exercises) on at least an annual basis; iii. - Designate two or more employees, executives, or agents who will respond to any security alerts and take recommended actions to mitigate harm to customer's network; and, iv. - Although not required, it is recommended that each customer conducts a periodic risk and vulnerability assessment (RVA) to address changes to information systems, nonpublic information, and/or business operations. The risk and vulnerability assessment should allow for revision of controls to respond to technological developments and evolving threats. g. Customer Incident Response and Remediation. Customer will be responsible for determining and undertaking or arranging for the undertaking of any action(s) in response to a security alert or report. h. Customer Contacts. Customer will appoint in writing a primary and alternate technical - level employee or agent to act as the primary contact person for all technical communication between the customer and OTM CYBER related to the Services. Customer will also designate a managerial -level contact person. i. Network Change Notification. Customer will immediately inform OTM CYBER of any physical change to the customer network. j. Other Customer Obligations. Customer will be solely responsible for ensuring that it is not subject to contractual obligations materially affecting the implementation or use of the OTM CYBER Services. 12. Service Limitations. The following Services limitations and disclaimers apply: a. Services provide information to customer to enable customer to better assess security threats and take appropriate action. Although some OTM CYBER Optimized Threat