<|begin_of_text|><|start_header_id|>system<|end_header_id|>Autocomplete the given text which is the part of a Non disclosure agreement.<|eot_id|>
        <|start_header_id|>user<|end_header_id|>ct of Personal Information resides. During the term of the Non-Disclosure Agreement and for a period of seven (7) years thereafter, Contractor shall maintain, and provide for National Grid’s review, at National Grid’s request, (a) Contractor’s WISP; and (b) other applicable security program documents, including summaries of its incident response policies, encryption standards and/or other computer security protection policies or procedures, that constitute compliance with applicable Laws. Contractor shall provide National Grid with notice of any amendments to its WISP and such policies or programs, and any new policies or programs related to information privacy and security as may be adopted by Contractor from time to time, within thirty (30) days after the adoption of any such amendment, policy or program or changes in applicable Law. 2.8 Contractor agrees to notify National Grid promptly, but in no event later than 24 hours, after discovery of a security vulnerability, including, but not limited to, an<|eot_id|>
        <|start_header_id|>assistant<|end_header_id|> exploitation of security vulnerabilities by third parties that have resulted in corruption, unauthorized modification, sale, rental, and/or otherwise damages to or materially alters the integrity of National Grid’s Information, and shall work with National Grid to mitigate such vulnerabilities. 2.9 Contractor shall have a process for managing both minor and major security incidents. Contractor shall notify National Grid promptly, and in no event later than five (5) days after discovery, in writing, of any unauthorized access, possession, use, destruction or disclosure of Personal Information (a “Security Breach”). Contractor shall promptly and in writing provide National Grid with full details of the Security Breach, and shall use reasonable efforts to mitigate such Security Breach and prevent a recurrence thereof. Security Breaches include, but are not limited to, a virus or worm outbreak, cyber security intrusions into systems directly responsible for supporting National Grid data and services, physical security breaches into facilities directly responsible for supporting National Grid data and services, and other directed attacks on systems directly responsible for supporting National Grid data and services. Contractor shall not be required to provide a written report of attempted security incidents. “Attempted Security Incidents” means, without limitation, pings and other broadcast attacks on firewall, port scans, unsuccessful log-on attempts, common denial of service attacks, and any combination of the above, so long as no such incident results in unauthorized access, use or disclosure of Personal Information or other serious vulnerability to National Grid’s data. In the event of a Security Breach, the parties shall cooperate to (a) mitigate and resolve any data privacy or security issues involving Personal Information, and (b) make any notifications to individuals affected by the Security Breach, and/or governmental/administrative entities as required by Law. Contractor’s failure to comply with this Article 2.9 shall be considered a material breach of the Non-Disclosure Agreement, for which no cure period shall apply. 2.10 Following a Security Breach, National Grid, or its designated agent, shall have the right, upon reasonable notice to Contractor, to complete a review of Contractor’s security measures and ensure that unauthorized access to Personal Information has been eliminated. 2.11 Contractor agrees to ensure that any subcontractor or vendor to which it provides National Grid’s Information, including Personal Information received from National Grid, or to which it provides National Grid’s Information and/or Personal Information created or received by Contractor on behalf of National Grid, agrees to the sa<|eot_id|>