Integrity of Information 10. The Contractor must: (a) create, maintain and follow a documented process for maintaining the integrity of Information while possessed or accessed by the Contractor; and (b) comply with the information integrity requirements set out in Appendix G4, if attached. 11. For the purposes of section 10, maintaining the integrity of Information means that, except to the extent expressly authorized by the Agreement or approved in writing by the Province, the Information has: (a) remained as complete as when it was acquired or accessed by the Contractor; and (b) not been altered in any material respect. Documentation of changes to processes 12. The Contractor must create and maintain detailed Records logging any changes it makes to the processes described in sections 7, 9 and 10. Notice of security breaches 13. If Contractor becomes aware that: (a) unauthorized access, collection, use, disclosure, alteration or disposal of Information or Records containing Information; or (b) unauthorized access to Facilities or Equipment has occurred or is likely to occur (whether or not related to a failure by the Contractor to comply with this Schedule or the Agreement), the Contractor must immediately notify the Province of the particulars of that occurrence or likely occurrence. If the Contractor provides a notification under this section other than in writing, that notification must be confirmed in writing to the Province as soon as it is reasonably practicable for the Contractor to do so. Review of security breaches 14. If the Province decides to conduct a review of a matter described in section 13 (whether or not the matter came to the attention of the Province as a result of a notification under section 13), the Contractor must, on the request of the Province, participate in the review to the extent that it is reasonably practicable for the Contractor to do so. Retention of Records 15. Unless the Agreement otherwise specifies, the Contractor must retain all Records in the Contractor’s possession that contain Information until directed by the Province in writing to dispose of them or deliver them as specified in the direction.
Integrity of Information 10. The Contractor must: (a) create, maintain and follow a documented process for maintaining the integrity of Information while possessed or accessed by the Contractor; and (b) comply with the information integrity requirements set out in Appendix G4, if attached. 11. For the purposes of section 10, maintaining the integrity of Information means that, except to the extent expressly authorized by the Agreement or approved in writing by the Province, the Information has: (a) remained as complete as when it was acquired or accessed by the Contractor; and (b) not been altered in any material respect. Documentation of changes to processes 12. The Contractor must create and maintain detailed Records logging any changes it makes to the processes described in sections 7, 9 and 10. Notice of security breaches 13. If Contractor becomes aware that: (a) unauthorized access, collection, use, disclosure, alteration or disposal of Information or Records containing Information; or (b) unauthorized access to Facilities or Equipment has occurred or is likely to occur (whether or not related to a failure by the Contractor to comply with this Schedule or the Agreement), the Contractor must immediately notify the Province of the particulars of that occurrence or likely occurrence. If the Contractor provides a notification under this section other than in writing, that notification must be confirmed in writing to the Province as soon as it is reasonably practicable for the Contractor to do so. Review of security breaches 14. If the Province decides to conduct a review of a matter described in section 13 (whether or not the matter came to the attention of the Province as a result of a notification under section 13), the Contractor must, on the request of the Province, participate in the review to the extent that it is reasonably practicable for the Contractor to do so. Retention of Records 15. Unless the Agreement otherwise specifies, the Contractor must retain all Records in the Contractor’s possession that contain Information until directed by the Province in writing to dispose of them or deliver them as specified in the direction.
armoured_car_csa.docx