{"id":231,"date":"2019-04-22T09:22:43","date_gmt":"2019-04-22T15:22:43","guid":{"rendered":"https:\/\/www.jcolvinlaw.com\/?p=231"},"modified":"2019-07-22T12:28:35","modified_gmt":"2019-07-22T18:28:35","slug":"vendor-contract-checklist","status":"publish","type":"post","link":"https:\/\/www.jcolvinlaw.com\/?p=231","title":{"rendered":"Vendor Contract Checklist"},"content":{"rendered":"\n<p>Don\u2019t forget to include a review of your contracts with vendors when reviewing your own security compliance. Here is the short version of my checklist for vendor contracts:<\/p>\n\n\n\n<!--more-->\n\n\n\n<ul><li>Confidential Information &#8211; How can the vendor use confidential information?<\/li><li>Safeguarding Information &#8211; Do you require the vendor to meet specific standards, have specific controls, keep data within the borders of the U.S.?<\/li><li>Oversight &#8211; When and who does the audit of the vendor?<\/li><li>Data Breach Procedures<\/li><li>Compelled Disclosures &#8211; Are they required to tell you in time for a legal response to subpoenas?<\/li><li>Termination Procedures &#8211; What do they do with information when the contract ends?<\/li><li>Subcontractors &#8211; Are subcontractors of the vendor required to meet the same standards?<\/li><li>Employee training<\/li><li>Insurance and Indemnity requirements<\/li><li>Definitions &#8211; Do you have definitions that match your requirements? For example, does your insurance definition of breach match your contract definition?<\/li><\/ul>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Don\u2019t forget to include a review of your contracts with vendors when reviewing your own security compliance. Here is the short version of my checklist for vendor contracts:<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[],"_links":{"self":[{"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=\/wp\/v2\/posts\/231"}],"collection":[{"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=231"}],"version-history":[{"count":2,"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=\/wp\/v2\/posts\/231\/revisions"}],"predecessor-version":[{"id":259,"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=\/wp\/v2\/posts\/231\/revisions\/259"}],"wp:attachment":[{"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jcolvinlaw.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}