INFORMATION SECURITY AND PRIVACY REQUIREMENTS EXHIBIT.pdf

This is an Information Security and Privacy Requirements Exhibit for a Teledyne/FLIR accessories, parts, and software contract in California. The exhibit establishes mandatory security and privacy standards that contractors must implement and maintain throughout the contract term. Key requirements include compliance with applicable federal and state information security laws, regulations, and standards; implementation of administrative, technical, and physical safeguards to protect sensitive data; regular security assessments and vulnerability testing; incident response and breach notification procedures; and employee training on security and privacy protocols. Contractors are required to maintain audit logs, implement access controls, encrypt sensitive information both in transit and at rest, and establish business continuity and disaster recovery plans. The exhibit mandates that all subcontractors and third-party vendors adhere to the same security and privacy requirements as the prime contractor.

The exhibit specifies that contractors must comply with standards including NIST Cybersecurity Framework, NIST Special Publications, CIS Controls, and applicable California privacy laws such as the California Consumer Privacy Act (CCPA). Contractors must provide documentation of their security compliance, permit government audits and inspections, and report any security incidents or data breaches within specified timeframes. The requirements apply to all data, systems, and facilities used in performance of the contract, and contractors remain liable for security breaches resulting from their failure to implement required safeguards. No specific pricing, incumbency status, or funding information is detailed in the exhibit, as it functions as a standalone requirements document establishing the security and privacy baseline for contract performance.