Security Policy Acknowledgement Agreement

SECURITY POLICY ACKNOWLEDGEMENT AGREEMENT

This Security Policy Acknowledgement Agreement (the "Agreement") is entered into as of by and between Company Name: with principal place of business at ("Company"), and Recipient Name: , Title: , located at ("Recipient"). Company and Recipient are each a "Party" and collectively the "Parties."

Recitals

WHEREAS, Company maintains written security policies, procedures and standards concerning the protection of information, systems, facilities and physical access (the "Security Policy");

WHEREAS, Recipient will have access to Company systems, facilities, information, or other resources subject to the Security Policy in connection with Recipient's duties or relationship with Company; and

WHEREAS, the Parties wish to set forth Recipient's acknowledgement of and agreement to comply with the Security Policy and related security obligations.

NOW, THEREFORE, in consideration of the mutual covenants contained herein and other good and valuable consideration, the receipt and sufficiency of which are acknowledged, the Parties agree as follows:

1. Definitions

1.1 "Confidential Information" means all non-public information disclosed or made available by Company to Recipient, whether oral, written, electronic or other format, including without limitation business information, technical information, personal data, system credentials, network architecture, security procedures, and any information marked or identified as confidential.

1.2 "Security Incident" means any actual or suspected breach of security, unauthorized access, loss or disclosure of Confidential Information, or other event that could adversely affect the confidentiality, integrity or availability of Company information or systems.

2. Acknowledgement of Receipt

Recipient acknowledges receipt of the Security Policy, including any related standards and procedures, and certifies that Recipient has read and understands the Security Policy in full. Recipient agrees to abide by and perform all obligations and restrictions set forth in the Security Policy.

Received copy:   Completed initial review:

3. Compliance Obligations

Recipient shall: (a) comply with access control requirements, password and authentication policies (including multi-factor authentication where required), and least-privilege principles; (b) not access, use, copy, disclose or transmit Confidential Information except as expressly authorized by Company and only to the extent necessary to perform Recipient's duties; (c) immediately report any known or suspected Security Incident in accordance with Section 6; and (d) cooperate fully with Company investigations and remediation efforts.

4. Access, Credentials and Device Security

Recipient shall not share or transfer access credentials, tokens, keys, or authentication devices. Recipient shall maintain physical and logical controls to protect devices and credentials issued by Company. Company may suspend or revoke access at any time for security or business reasons.

5. Data Handling and Protection

Recipient shall handle Confidential Information using reasonable and industry-standard administrative, technical and physical safeguards. Where applicable, Recipient shall encrypt Confidential Information in transit and at rest using Company-approved methods. Recipient shall process personal data only in accordance with Company's documented instructions.

6. Incident Reporting and Response

Recipient shall report any actual or suspected Security Incident to Company's security contact without undue delay and in no event later than hours after discovery. The report shall include sufficient detail to permit Company to evaluate and respond to the Incident.

7. Training and Certification

Recipient shall complete all Company-required security training within days of the Effective Date and thereafter as required. Completion of training must be certified in writing.

Training completed:    Completion date:

8. Monitoring, Audit and Access to Records

Company reserves the right to monitor, audit and inspect systems, devices and records related to Recipient's access to Company resources, subject to applicable law. Recipient shall provide reasonable assistance and access in connection with such monitoring or audit.

9. Return or Destruction of Materials

Upon termination of Recipient's relationship with Company or upon Company's request, Recipient shall promptly return or securely destroy all Confidential Information and Company property in Recipient's possession or control, and certify in writing that such return or destruction has occurred.

10. Remedies, Indemnification and Disciplinary Action

Breach of this Agreement or the Security Policy may result in disciplinary action up to and including termination, civil liability, and injunctive relief. Recipient shall indemnify and hold Company harmless from and against any losses, damages, liabilities, costs and expenses arising from Recipient's breach of this Agreement or negligent acts or omissions.

11. Representations and Warranties

Recipient represents and warrants that Recipient has the authority to enter into this Agreement and that the performance of Recipient's obligations hereunder will not violate any other agreement or applicable law.

12. Notices

All notices required or permitted under this Agreement shall be in writing and delivered to the addresses set forth below (or such other address as a Party may designate in writing).

13. Governing Law; Venue

This Agreement shall be governed by and construed in accordance with the laws of the State of , without regard to conflict of laws principles. Venue for any dispute shall be the state or federal courts located in the county designated by Company.

14. Amendments; Waiver; Counterparts

No amendment to this Agreement shall be effective unless in writing and signed by authorized representatives of both Parties. Failure or delay in exercising any right shall not constitute waiver. This Agreement may be executed in counterparts, each of which shall be deemed an original and all of which together shall constitute one instrument.

15. Entire Agreement; Severability

This Agreement, together with the Security Policy referenced herein, constitutes the entire agreement between the Parties with respect to its subject matter and supersedes all prior and contemporaneous agreements. If any provision of this Agreement is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.

16. Additional Acknowledgements

I will not remove Confidential Information from Company premises or systems except as expressly authorized:    I will report Security Incidents within required timeframe:

Sign Now