a calendar year without Bank of America's consent. Bank of America may implement these releases when appropriate and convenient for Bank of America. However, The TMS will support the current and previous release of OPS. If Bank of America does not upgrade to the current or previous release of OPS, some or all of TMS functionality may be impacted. Proprietary to Bank of America D-6 vTIP2010 Source: CARDLYTICS, INC., S-1, 1/12/2018 SCHEDULE E Information Security INFORMATION SECURITY PROGRAM Bank of America shall have the opportunity to evaluate the Supplier's Information Security Program and Supplier Security Controls to ensure Supplier's Compliance with the Section entitled "Confidentiality and Information Protection." The Supplier's Information Security Program (the "Program") shall address the Bank Security Requirements described below. This Program shall, at a minimum, prescribe the architecture of Supplier's system, Confidential Information placement within the system, the security controls in place (e.g. firewalls, web page security, intrusion detection, incident response process, etc.) and contain the information called for in the Subsection entitled "Security Program Features" below. The Program shall also describe physical security measures in place to protect Confidential Information received or processed by Supplier, including those that will protect Confidential Information that has been printed or otherwise displayed in forms perceptible with or without the aid of equipment. Bank of America shall provide Supplier with the Service Provider Security Requirements document outlining such Bank Security Requirements and Supplier Security Controls which shall be deemed a part of Bank of America's Confidential Information under this Agreement Supplier acknowledges that upon request in order to be allowed continued access to Confidential Information, it will make modifications to its Information Security Program to add additional measures necessary to retain Information Security standards consistent with the Bank Security Requirements. PRIVACY POLICY With respect to Confidential Information and the