Laserfiche WebLink
13.6.1 Incident Response. Vendor may need to communicate with outside <br />parties regarding a Security Incident, which may include contacting law <br />enforcement, fielding media inquiries, and seeking external expertise as <br />mutually agreed upon, defined by law, or contained in this Agreement. <br />Discussing Security Incidents with the City should be handled on an <br />urgent as -needed basis, as part of communication and mitigation <br />processes as mutually agreed upon, defined by law, or contained in this <br />Agreement. <br />13.6.2 Security Incident Reporting Requirements. Vendor shall report a <br />Security Incident to the appropriate City staff immediately. <br />13.6.3 Breach Reporting Requirements. If Vendor has actual knowledge <br />of a confirmed Data Breach that affects the security of any City content <br />that is subject to applicable Data Breach notification law, Vendor shall: (1) <br />promptly notify the appropriate City staff within 24 hours or sooner, unless <br />shorter time is required by applicab;e law, and (2) take commercially <br />reasonable measures to address the Data Breach in a timely manner. <br />13.6.4 Breach Responsibilities. If any forensic analysis or report <br />determines Vendor to be the sole source of any security incidents, the City <br />will not be responsible for any data compromise losses or damages and <br />Vendor will hold harmless the City, its officers, officials, employees, and <br />volunteers from and against all liability, loss, damage, expense, and cost <br />of every nature arising out of or in connection with said security incident. <br />14. Indemnification. Vendor will defend, indemnify and hold harmless City and its <br />officers, agents, employees and volunteers from and against all claims, damages, <br />losses and expenses including attorney fees ("Claims") arising out of the performance of <br />the Services, caused in whole or in part by the willful misconduct or any negligent act or <br />omission of the Vendor, any subcontractor, anyone directly or indirectly employed by <br />any of them or anyone for whose acts any of them may be liable, including but not <br />limited to Claims for (i) any alleged or actual infringement or misappropriation of any <br />patent, copyright, trademark, or other intellectual property right, (ii) personal injury, <br />including death, and (iii) breach of confidentiality or property damage, except where <br />caused by the sole negligence or willful misconduct of City. <br />The Parties expressly agree that any reasonable payment, attorney's fee, cost or <br />expense City incurs or makes to or on behalf of an injured employee under the City's <br />self-administered workers' compensation is included as a loss, expense or cost for the <br />purposes of this section. <br />The Parties expressly agree that the City will not be liable for any damage, loss, or <br />destruction of Vendor's Lockers or Equipment. <br />The Parties expressly agree that this section shall survive the expiration or early <br />termination of the Agreement. <br />REV: 09-13-19 DZ <br />ATTY/AGR.2019.245/Equipped Systems Inc. (Page 6 of 12) <br />