Master Service Agreement - Barada Associates Inc - Employee Background Checks

Home Browse Search

use commercially reasonable efforts to assure data security when disposing of any consumer information or record obtained from the EVS Employment Information. Such efforts must include the use of those procedures issued by the federal regulatory agency charged with oversight of Client's activities (e.g. the Consumer Financial Protection Bureau, the applicable banking or credit union regulator) applicable to the disposal of consumer report information or records. use commercially reasonable efforts to secure EVS Employment Information when stored on servers, subject to the following requirements: (i) servers storing EVS Employment Information must be separated from the internet or other public networks by firewalls which are managed and configured to meet industry accepted best practices, (H) protect EVS Employment Information through multiple layers of network security, including but not limited to, industry - recognized firewalls, routers, and intrusion detection/prevention devices (IDS/IPS), (iii) secure access (both physical and network) to systems storing EVS Employment Information, which must include authentication and passwords that are changed at least every ninety (90) days; and (iv) all servers must be kept current and patched on a timely basis with appropriate security specific system patches, as they are available, not allow EVS Employment Information to be displayed via the internet unless utilizing, at a minimum, a three-tier architecture configured in accordance with industry best practices, and use commercially reasonable efforts to establish procedures and logging mechanisms for systems and networks that will allow tracking and analysis in the event there is a compromise, and maintain an audit trail history for at least three (3) months for review by EVS. b) If EVS reasonably believes that has violated this Section 6, EVS may, in addition to 6ny other remedy authorized by this Agreement, with reasonable advance written notice to Client and at EVS's sole expense, conduct, or have a third party conduct on its behalf, an audit of Client's network security systems, facilities, practices and procedures to the extent EVS reasonably deems necessary, including an on -site inspection, to evaluate Client's compliance with the data security requirements of this Section 6. 7. Client certifies that it has received and read the "Notice to Users of Consumer Reports, Obligations of Users" which explains Client's obligations under the FCRA as a user of consumer information. Barada Master Service Agreement Confidential and Copyright 2017 Barada Associates Inc. Page 12