Extract to table

1 Capitalized terms used but not otherwise defined in this Amendment 3 shall have the meanings ascribed to such terms in the MSA

For the avoidance of doubt, a vulnerability designated as Critical or High by the applicable vendor shall be treated as a Critical Vulnerability regardless of its CVSS score

The initial Independent Security Assessor shall be selected within sixty (60) days of the Amendment 3 Effective Date, subject to Client's prior written approval, which approval shall not be unreasonably withheld, conditioned, or delayed

(g) "Security Incident" shall have the meaning set forth in the Recitals of this Amendment 3, and for purposes of Section 3 and Exhibit D as amended hereby, shall also mean any event constituting a "Security Incident" as defined in the amended and restated Exhibit D attached as Appendix 1 hereto

In the event of any conflict or inconsistency between the prior version of Exhibit D (including as amended by Amendment 2) and Appendix 1 attached hereto, Appendix 1 shall control and supersede the prior version in all respects

All references in the MSA or any Statement of Work to "Exhibit D" shall, from and after the Amendment 3 Effective Date, be deemed to refer to Appendix 1 to this Amendment 3