---
type: Compliance Obligation
title: Security And Data Handling Obligations
description: Cybersecurity and data handling requirements.
resource: smart-city-maintenance-2026
tags: [security, compliance, cybersecurity, data]
timestamp: 2026-07-02
---

# Security And Data Handling Obligations

The supplier must maintain documented access control procedures, incident reporting within four hours for high-severity incidents, and monthly cybersecurity compliance reporting.

Tender documents warn that operational dashboard data and incident logs must not be shared outside the authorized project team without buyer approval.

Related concepts: [Eligibility Requirements](eligibility.md), [Evaluation Criteria](evaluation.md).

# Citations

- Synthetic tender section 7.1 Access control.
- Synthetic tender section 7.2 Incident reporting.
- Synthetic tender section 7.3 Data handling.
