BarbriSFCourseDetails
  1. keyboard_arrow_leftBack

Course Details

Course Information
  • smart_display Format

    On-Demand

  • signal_cellular_alt Difficulty Level

  • work Practice Area

    Commercial Law

Date & Time
  • event Date

    Tuesday, May 25, 2021

  • schedule Time

    1:00 p.m. ET./10:00 a.m. PT

  • timer Program Length

    90 minutes

Credit Information

  • This 90-minute webinar is eligible in most states for 1.5 CLE credits.

$297.00
CLE
ALL

This CLE course will guide business and technology counsel for incorporating information security protocols into supplier contracts. The program will discuss due diligence strategies, specific clauses to include in agreements, and effective tactics for monitoring supplier performance and compliance with contractual terms and relevant privacy and security laws.

Faculty

Michael R. Overly
Partner
Foley & Lardner LLP

Mr. Overly focuses his practice on drafting and negotiating technology related agreements, software licenses, hardware acquisition, development, disaster recovery, outsourcing agreements, information security agreements, e-commerce agreements, and technology use policies. He counsels clients in the areas of technology acquisition, information security, electronic commerce, and on-line law. He is the co-author of A Guide to IT Contracting: Checklists, Tools and Techniques (CRC Press, 2012).

expand_circle_down Expand to View Full Bio expand_circle_up Collapse Bio

Description

Designing an information security protocol requires a unified approach that includes robust security policies, ongoing employee education, and effective technology systems (firewalls, encryption, etc.). Company counsel must ensure continuous security audits and well-drafted contracts with business partners and other suppliers that specifically address information security. Any agreement that permits third-party access to a company's network, facilities, data, or confidential information should include ironclad information security protocols.

Incorporating information security into technology contracts involves three critical components: 1. internal and supplier due diligence; 2. contractual protections; and 3. information handling and security procedures and requirements, generally in the form of contract exhibits. Counsel should notify suppliers at the outset that the information they provide during information security due diligence will be relied upon during vendor selection and become part of the contract.

When drafting supplier contracts, business and technology counsel should broadly define confidentiality to include all potentially private information. Agreements should limit the use of subcontractors, address personnel due diligence, and use warranties and indemnity provisions to limit risk. Where appropriate, counsel should attach specific information handling requirements as an exhibit to the contract.

Listen as our authoritative panel explains best practices for integrating information security protections in the supplier contracting process. The panel will discuss key provisions to include in supplier agreements and considerations for customers and vendors during due diligence, contract negotiations, and post-execution.

Outline

  1. Overview
  2. Internal and vendor due diligence
  3. Contractual protections
  4. Information handling and security procedures and requirements

Benefits

The panel will review these and other key issues:

  • What types of business information require security protection and why are contractual protections important?
  • What mistakes do businesses make when designing a comprehensive security protocol?
  • What issues should business counsel address during initial internal due diligence? What should counsel address in supplier due diligence?
  • What are the contractual protections to include in supplier agreements?
  • What issues should business counsel anticipate when negotiating with suppliers?