2021/01/06 Council Agenda Packet

DocuSign Envelope ID: 35E2E030-AE55-4B92-80F9-06AD173830C7 Everett WA PD NDA #243 10/21/2020 Page 4 SCHEDULE A AHJ INFORMATION SECURITY REQUIREMENTS Data Privacy and Security (a) Definitions. "AHJ" means Authority Having Jurisdiction and incorporates any AHJ-Authorized Third -Party Administrators "Customer Data' means all ADT Confidential Information entered into documentation software or equipment by or on behalf of ADT; (a) that is data supporting or derived from the provision of Services to ADT End Users or (b) relative to ADT's customers, and information derived from such information, including as stored in or processed through AHJ's equipment or software, or that of its Authorized Third Party Administrator(s). (b) Security. AHJ, and its Authorized Third Party Administrator(s) (`AHJ"), will maintain and enforce safety and physical security procedures with respect to its access to and maintenance of Customer Data that are (i) at least equal to industry standards for such types of service providers, (ii) in accordance with reasonable ADT security requirements, and (iii) which provide reasonably appropriate technical and organizational safeguards against accidental or unlawful destruction, Toss, alteration or unauthorized disclosure or access of Customer Data and all other data owned by ADT and accessible by AHJ under this NDA. Without limiting the generality of the foregoing, AHJ will take all reasonable measures to secure and defend its location and equipment against `hackers' and others who may seek, without authorization, to modify or access AHJ systems or the information found therein without the consent of ADT AHJ will periodically test its systems for potential areas where security could be breached AHJ will report to ADT immediately any breaches of security or unauthorized access to AHJ systems that AHJ detects or becomes aware of. AHJ will use diligent efforts to remedy such breach of security or unauthorized access in a timely manner and deliver to ADT a root cause assessment and future incident mitigation plan with regard to any breach of security or unauthorized access affecting Customer Data. (c) Storage of Customer Data. All Customer Data must be stored in a physically and logically secure environment that protects it from unauthorized access, modification, theft, misuse and destruction. Further, AHJ will maintain an adequate level of data security controls, including, but not limited to logical access controls including user sign -on identification and authentication, data access controls (e g. password protection of AHJ applications data files and libraries), accountability tracking, anti -virus software, secured printers, restricted download to disk capability and a provision for system backup