is Approved it will be adopted immediately and will replace the previous version of the Security Management Plan and thereafter operated and maintained in accordance with this Call Off Schedule 7. If the Security Management Plan is not Approved, the Supplier shall amend it within ten (10) Working Days or such other period as the Parties may agree in writing of a notice of non-approval from the Customer and re-submit to the Customer for Approval. The parties will use all reasonable endeavours to ensure that the approval process takes as little time as possible and in any event no longer than fifteen (15) Working Days (or such other period as the parties may agree in writing) from the date of its first submission to the Customer. If the Customer does not approve the Security Management Plan following its resubmission, the matter will be resolved in accordance with the Dispute Resolution Procedure. The Customer shall not unreasonably withhold or delay its decision to Approve or not the Security Management Plan pursuant to paragraph 4.3.2. However a refusal by the Customer to Approve the Security Management Plan on the grounds that it does not comply with the requirements set out in paragraph 4.2 shall be deemed to be reasonable. Approval by the Customer of the Security Management Plan pursuant to paragraph 4.3.2 of this Call Off Schedule 7 or of any change to the Security Management Plan in accordance with paragraph 4.4 shall not relieve the Supplier of its obligations under this Call Off Schedule 7. Amendment and Revision of the Security Management Plan The Security Management Plan be fully reviewed and updated by the Supplier at least annually to reflect: emerging changes in Good Industry Practice; any change or proposed change to the Services and/or associated processes; any change to the Security Policy; any new perceived or changed security threats; and any reasonable change in requirements requested by the Customer. The Supplier shall provide the Customer with the results of such reviews as soon as reasonably practicable after their completion and amendment of the Security Management Plan at no additional cost to the Customer. The results of the review shall include, without limitation: suggested improvements to the effectiveness of the Security Management Plan; updates to the risk assessments; and suggested improvements in measuring the effectiveness of controls. Subject to paragraph 4.4.4, any change or amendment which the Supplier proposes to make to the Security Management Plan (as a result of a review carried out in accordance with paragraph 4.4.1, a request by the Customer or
is Approved it will be adopted immediately and will replace the previous version of the Security Management Plan and thereafter operated and maintained in accordance with this Call Off Schedule 7. If the Security Management Plan is not Approved, the Supplier shall amend it within ten (10) Working Days or such other period as the Parties may agree in writing of a notice of non-approval from the Customer and re-submit to the Customer for Approval. The parties will use all reasonable endeavours to ensure that the approval process takes as little time as possible and in any event no longer than fifteen (15) Working Days (or such other period as the parties may agree in writing) from the date of its first submission to the Customer. If the Customer does not approve the Security Management Plan following its resubmission, the matter will be resolved in accordance with the Dispute Resolution Procedure. The Customer shall not unreasonably withhold or delay its decision to Approve or not the Security Management Plan pursuant to paragraph 4.3.2. However a refusal by the Customer to Approve the Security Management Plan on the grounds that it does not comply with the requirements set out in paragraph 4.2 shall be deemed to be reasonable. Approval by the Customer of the Security Management Plan pursuant to paragraph 4.3.2 of this Call Off Schedule 7 or of any change to the Security Management Plan in accordance with paragraph 4.4 shall not relieve the Supplier of its obligations under this Call Off Schedule 7. Amendment and Revision of the Security Management Plan The Security Management Plan be fully reviewed and updated by the Supplier at least annually to reflect: emerging changes in Good Industry Practice; any change or proposed change to the Services and/or associated processes; any change to the Security Policy; any new perceived or changed security threats; and any reasonable change in requirements requested by the Customer. The Supplier shall provide the Customer with the results of such reviews as soon as reasonably practicable after their completion and amendment of the Security Management Plan at no additional cost to the Customer. The results of the review shall include, without limitation: suggested improvements to the effectiveness of the Security Management Plan; updates to the risk assessments; and suggested improvements in measuring the effectiveness of controls. Subject to paragraph 4.4.4, any change or amendment which the Supplier proposes to make to the Security Management Plan (as a result of a review carried out in accordance with paragraph 4.4.1, a request by the Customer or
Call%20Off%20Agreement%20LOT%201.docx