2021/05/03 CyberwareSoftwareDistributors, LLC Risk Assessment and Penetration TestDocosign Envelope lDr CF481587-64D9-45E0-9854-419FF0347878
lssuc Datc: May 3,2021
Statement of Work
Risk Assessmcnt
and
Penetrati()n Test
For
City of Menifec, California
0rrltci):5
CD
DocuSign Envelope lD: CF481587-64D9-45E0-9854-B.t9FFO347B7B
CD
l. Exccutivc Summary
cybcrSoftwarcDistributors. LLC shall providc an .rganization rvitlc risk asscssmcnt and
penetration tesls with a delined scope.'l-hese services are an evalualion ol'lhe currenl. security
posturc on the dcfincd targcts in thc sco;rc in ordcr to gathcr a hasclinc for thc currcnt sccuriry at
thc city of Mcnifcc. ln thc ca:;c ofa pcnctration tcst bcing rcquircd allcr a risk asscssmcnt.
cybe rSo I'twareDistributon. LI-c will evaluate the rarEet l'rum an "attacker's." penipective. and
will cvaluatc findings by exploiting any vulncrabilitics found.
The objeclive of these assessnrenls and tesls are to provicle knowleilge ol' rernediation for the
customer with respcct to its ability to prescrvc the confidcntiality, inrcgrity and availabitity ofrhe
infonnation maintuincd by and used by its origination. cybcrSotfuarcDistributors, LLC will
assess and test the use ofsecurity controls to sccure sen-sitive dala.
2. Services Overview
This project shall includc 2 consultants for the time period of 6 rvccks remotcly to pro'ide the
organization wide risk assessmcnt and pcnctration tests with thc riefined scope-
cybcrSoliwarcDistribulors. LLC will providc tools, knowledge. and cxpcrlisc ro cxccutc thc
asscssmcnts and tcsls on thc customcr dcsignatcd targcts. cybcrsoltwarcDistributors, LLC can
operate with as little or as much knowledge ofthe targets as desired by the customcr contact,
with lhe exceptions of required knowledge as delined by the scope.
CyberSoftwareDistributors. LLC will assess the targets and artempt to comprornise any
dcsignatcd targcls known vulncrabilitics with thc conscnr ollhc city ol'Mcnilcc. An additional
scrvice ofsocial cnginccring will hc pcrfbrmcd on contacts dcfincd by thc city of Mcnifcc. Thc
risk assessments and penetration tests will be perftrrmed using the tbllowing methodology:
l. Enumeration - Once CyberSoftwarcl)istnbutors, LLC begins thc project with The City
of Mcnifeel CyberSoftwarcDistributors, LLC will connect to the netu'ork using the
! irtual private network prol idcd by the customer. Once connccted,
CyberSoftrvareDistributors, LLC wilt run a variety of inlbrmation gathering tools in ordcr
to enumerate computen and devices connected to the networks in question.
2. Vulnerebility Mapping end Penetration Te;ting - Any targets designated will be
scanned for vulnerahilitics using a widc !.aricty oftools and tcchniqucs. Thc toots and
tcchniqucs uscd will be consistcnr wirh cument industry trcnds rcgarding exploitation of
vulnerabiliries. (iybersoftrvareDistributors, LL(. will attempt to lind the wcakest links
that can bc cxploitcd and attcmpt to gain funhcr acccss with conscnt from thc City of
Menifee. CyberSoftwareDistributors. Ll,C will ancmpt to penetrate thes€ targcts up to an
including the point where sensitive data can bc accessed.
3. Report of Risk Assessment and Penetration 'l'est -'fhroughout thc risk asscssmcnts
and or pcnctration tcsts. CybcrsoftwarcDistributors. LLC will do('umcnt and rccord cach
stBp o[Lhe process. CyberSo{lwareDistributors, I-l-C will provide a repo of the risk
asscssmcnts and dcfincd pcnctration rcsrs which will includc data ohtaincd from thc
'czrulldo 'tuourcldrxr 'uSrscp 'puelslcpun 'cz,(lpuu ol scrSolopoqlcr[ 8ur1;nsuor ucao:d Surzrpln
aJr^las luarussoss-e lsrJ Jpr,r\ uort8zlueSro uE lJnpuoJ ll!/\{ J'l-l'srolnqulsr(JJlE,rl.losrJq,(J
srafeuzred pue 3u;r;r4 g
'luauluo.lrAUa rno{ 1oa-ge ot s)rUed pJzr.rolllnp
.ro pozuoqlnerm ,{q slsu ;1e ctuururlc:ou .{.11ucpt -tcqlrcu ueo scJl^rJs csaql 'crntsod ,Qunocs
Jno,{ J.{oJdrur fuur 'lusodord slrlt ql!,n cJuBpJo])B ur pcpr^oJd sB 'seJr^Jcs oscql Jo cJuprruoJJcd
aqt reql ee.rie pue puetsl)pun ealru:61 9o &t3 aqt puu J-l-l 'srotnqu1slqrlpmgog:cqf 3 I
'I1alu.rtdos paJro^ur puu palorrb oq llerls lBsodord srql rapun salruas Euruorsr.ro;d
qtllr'r uorlJarruoJ ul JnJur lauuosJed Jll 'srotnql4slcJare,r,rgoSraq,(3 (sasuadxa ry 1alr.r1
' 3 c) 'sasuadxc ssamsng pJuprmls 'JJets rauolsnr qlr,n Suqaeu e puepe lo '3lts Jrruolsnc u lrsll
ro uo lro,r uuol.rad ot lc^BJ1 ot lauuosJad .;11 'srolnqr:lslCeE^\toSJaq^J pa.trnba: as3rua613o
&tJ aqlJl uodn paalSe u..g aneq slueua?ueue r:qto ssalun J-l l 'slotnqqslgalemuosrag{J le
pcllrf,Jxa cq lp^\ Iro^\ ll? puu sllec ocualc.luocclol Sulsn pclcnpuoJ cq 1l^\ s8unJotu ruotua8e8uc
aql lBql mrEE c{ruc1411o i(I.] aqt pue -)'l'l 'srotnqulsr0crp^1go5.lcq{3 - scsucdxE g
'ccJrucnlJo ,{1r3 cql ,(q cpr,rord cq ;pm sccrruc5
Jo
^Ja^rlcp
ctcldruor ol aoJrucl^.lo {1r-l oqt ,,(q porrnbor sa;ucdxa SuruleJ,| puu ,{lr,trlcouuoc
'erp^\uos 'rr9/r\preq ;euorlrppu .{uy 'Jl'I 's.tolnqLuslca.remrjoSraq,(3 ,{q pa1:r.n1as sloot Sursn
yo,tr Jtll tu:o3rcd ;pm Jl'l r$olnqulsrqcremljog:cq,(3 - scsuxlxq Su4quuq luculccrfly I
'uttl:q paqLrlsap srrlAl:s pur? lzsodo-rd srql
ul pcqrjrscp s1se13r,r suorlcldu:oc Suunp cdocs cql utqtr,^/\ scJr?\los to slo8ru; ,{uujo suogdnr.rclur
.ro.; clqrsuodscr lou st -.ll.l 'srolnqutsrCJ-rEA\lloslcq{J .pclqestp SurqoJd c^ttf,rulsop
{tr,r ual) alqrsp:J sr uorlduslp J3rlles lsuouualulun 'pauuoy:d fureq s1sal puc lueurssessp
cqlJo arntuu ol anp leqt puBlsrJpun ccJrur6Jo {lr3 Jrll pue J'Il 'solnqusl(Je&^iuosrsq^l .l
suopdurnssy .9
'e^oq8 peqrJJssp
se uodo: paltslJp e st rlgpro^rtrp rql':Jqeu8rs lreluol go s,(eJr g1 urqlr,n luoru:?e8ua:q1
roJ elep UEls eql oururrclcp XFuro[ JJrm aa3rueyl jo ,qtJ crll pue J'Il 'slolnqutsroarsm{osraq^J
'a1ep uorla;duro: arllJo laa,tr 1 urtpr,tr papr,ro:d Eutaq poda.r l?utl p qlr^{ .alagduror o1 slee,tr
9 ,{laruurrxordde rlsr llr,rr p:luUf,p sgs:r1 uorlu:;:ruld pus lulussissp Isl-r Jpl^r uoqezrueiro :rq1_
JlnpJqJs tuJuJSsSuS '€
'sBurpuq csct11
.go ,{ue o1 pal?lel sE 'J3Jruey{.lo ,{1r3 aqt :o.y peluaulnJop aq ItA1 uotlprpeua..r patsaiBns
,{uc ',(lleuoqrppy godor pouoqu:rurJro3e l{l ,{rollll olllsts oi-}luJ}i\l Jqt qtl,rl tJJu osle
lll,rr gSJ'ts:t uollelrucd cqt loJ tuJsuof, uc,r13 sctro scrlrlrquJouln^ f,suJl Jo uorlelroldxc
aql pue'serllrq"Jaugn,l flurpreiar uotlprlJo-lur (un pue.ado:rs aql ur slafl.ru1 paur;ap
o3
A/A/reolj6 t g-rgg6-0f9,-6O19-1.99 !Btl3 :Ol edota^uf u6rSn.oO
Docusign Envelope lD: CF481587-64D9-45E0-9854-B19FFO347B7B
CD
and/ or recollrmend renrediation to secure targels. The scale ol'the service lbr lhe custonrer is
dclincd by thc following paramctcrs.
Tablc l: Scrvcr Paramctcrs
Virnral Privare Nenvork Testin
cybersoliwareDistriburors. LLC will conduct thc asscssrnent and/ or penetration tests whEn
nceded rcmotcly. CybcrSn{lwareDisrribuk)rs, LLC u,ill provide all rcquircd material and supply
all labor required to gathcr rcquircd data to product rhc rcport output. wc will requirc rninirual
assistancc to cstablish conrmunicati,n rvith you network aside from the required credcntials.
Duc to thc naturc ofrisk asscssmcnts and pcrctration tcsring, wc anlicipatc thc work will takc
approxirnately 6 u,eeks to cornplete.
Table 2: Pricing
Approximately every week, during the enlagenrenr, cybe rSoft*.areDistriburors, LLC persunnel
shall meet with the city of Mcuifcc pcrsorurcl to give a prcscntation to rcvicrv any findings.
answcr qucstions. and discuss next steps for the ftrllorving wcok, As these pertain to thc dcfined
"pruject checkpoints." Additionallv. success criteria shall be tlehned tluring these meelings
which will he the actions CybcrSoftwarcDistriburors. LLC will necd to take to be
comprchcnsivc. At thc conclusion of this project. cybcrSotlwareDistributors, LLC shall givc a
prcsentation to rhe city of Menilbe personnel to reviEw the deliverablcs. answer questions. and
plovidc dirccrion firr ncxt step action itcms and suggcstcd rcmediation.
6. Cuslomcr Assistancc Rcquircd
lll ordcr to optimizc thc clTcctivcncss of CybcrSoftwarcl)istrihutors, 1-l-C rcd tcanr nrcrnbcrs, rhc
customer needs to provide access to systcrns- services, contraclors and crnployccs. lb pcrlbnn
the work specified in this statenrenr ofwork. CyberSoftwarcDistribu(onr w.illrequire the
folbwing from thc customcr:
Corn oncrr1s Amount
Scrvcrs ll
Swirchus xlln tcl 20 or morc
I ircwalls 5
Public IP Addrcsscs 5
Social lt)ccnll
End int Softwarc Anal SIS int rvith software solutionsI
I Virtual Privare Nerwork
Price
Risk Asscssmcnt and Dcfincd pcnctration Tcsts $ I 0.950
Approximatcly 50 contacts
Work ltem
DocuSrgn Envelope lDr CF481587-64D9,45E0-9854-B19FFO347B7B
Acccss to rclcvant pcrconncI
Rclevanl rccords and documcntalion
A primary poinl of contact
Coordination of cvcnts with customcr tcam mcmtrcrs
Non-l)isclosurc Agrccmcnl and othcr agrccmcnts as nccdcd
7. Dclivcrablcs
cybcrSoftwarcDistributors, LLC will conduct thc organization widc risk asscssmcnt and
pcnch-ation tests as described in this proposal. Upon completion. CybersoftwareDistributors
shall provide a report containing deliverables as indicated in table j below.
Trble 3: Engagement Deliverables
The report \'\'illcontain docurnen(ed and detaileil linrJings as a resuh olperlornring lhese services
and willconvcy CybcrSofnrarcDistrihutors. L[-C's opinion ofhow bcst to rcnrcdv
vulncrabi litics liorn a vcndor-ncutral pcrspcetivc.
Thc architccturc and vulncrability maps will contain rhc mapping oftargcts and nctworks as
defincd in the scope and as a resull of performing these services. -Ihis will convey
CyberSoRwareDistriburors. LLC's findings in a visual [orrn.
8. Payment Tcrms
custorncr agrecs to pay 507n ofthe overall price upon cxccution ofthis sow; the rernaining
50% shall be due and payablc wirhin rhirlv (30)days after receipr ofa final invoice ll.orn
Cybersoftu'areDisrributors, issued upon completion of the project.
9. Penetration Testlng Service Agreement
All scnioes dcscribcd within this statctncnt of work arc subjcct ro tcmrs and conditions of the
CyberSoft wareDistributors" LLC's consulting agreemenr and specilically.
CybcrSoftwarcDistriburors, tiability is limitcd as dcscribcd in Attachmcnt A.
10. Fi,xccution
I0.1. Exccution of Strtemcnt of Work
Plcasc sign and providc any additional intbnnation listcd bclow and rctum to
CyberSoftwarcDistributor s. LLC along with signed relared dtrcuments and infonnation as
dcscribcd in scction 6 within fi ftccn ( l5) days liom reccipt in ordcr to cxcculc this statcmcnt ol'
work.
CD
Evcnt Deliverables
Rc Elcctronic Findi DocumcntArchirccturc and Vulncrabilit Elcctronicall Gcncrated Visualizations
Docusrgn Envelope lD: CF481587,64D9-45E0 9854-B19FFO34787B
CybcrSoftu'a rcDis LLC
CD
Citv of Mcnifcc, California
(*Customcr")
Signalu re
Altied Ortiz
alure
.\rnrando Villa
Printcd Namc Printcd Namc
g/oslutr
Date
Address:
545 Third Strcet, #267
Monumcnt, CO 80132
Date
Address:
29E44 Haun Drivc
Menifcc, CA 92586
10.2. Penetration Testing Service Agreement
This Statement of Work incorpxrrates by ret'erence the CyberSoftwareDistribut,rs, LLC
Penetration Testing Sen'iccs Agreement (the "Agrccment") (scc Attachrncnt A).
10.3. Expiration of Statement of Work
This estirnate deemed null and void ilrrot signed by the Customer and received by
CybcrSoftwarcDistributors, LLC rvithin thirty (10) days of thc datc sct firrth on thc covcr pagc.
Mav 1.2021
DocuSign Envelope lD: CF481587-64D9-45E0-9854-B't9FFO347B7B
CD
Attachmcnl A: CybcrSoftwrrcDistributors, LLC pcnctration Tcsting Scrvicc Agrccmcnt
ro sseutsnq aqt ol .losse.lJns Jo aletluJE.(uu ol Jo .csJ.Io slolJo.tltroJqns puB .loqul lJujlrroJ'sea,{oldrua ol ,{1uo rnup laruo}s.J ol si^:JJE .ltrIrJ llt,rr QSJ .u.11o s..lr.l() plpp Jpltrrrs- qlr,,rr ,stJ.tcxJ
plnom,{uBdutoJ In_l:!lr?J put?:rtqeuos?Jl r? lpql JJpaJo i:)JBJp.rtups Jr.ll Bursrr::rx:r ,.r,ssrr..,clslItIlg|PPJJttlo1snJ|l?lElltlJpqtlo,Ploqolscc.r3c653.@Z.t-
. ,(.rtro:c.r puu rrorrr:.1o.rd ntnp pua {1r1tqnle.rn uc1s,(s jo lcao; q.- q r:
-rJnsui ()l suotlnp.):.td ll)lu.rutUOllAUi! pun,(1un:ras alq?uos?cl luauopdur Il!,r1 CS] .stspq..stlOJJa
.lquuospol (;;urcrCururoc-, u uo rourolsl.lJ ot .f,r^lcs cql cprno.rd lll/\1 CSJ fiFn rS""If I.,
srlll[q!suodsau (sJ .t
'ptpd lrlun etpp anp aql txo.u .ssa[ st la^f,qJtq.r .,$sl
.r;qerrJdde ,(q p-rgruu:rd olet ullullxpru iqt lo qluou lad (yi,S.Z) lrrirrid.lls.{ , pu, n^t lu iarr"l,,,arucru [lr^\ cnp (req,r pled tou sr leqt soal aqlJo uoruod fuv .s'xet rlJnsJo luo.u{udJrp.mro 1uaur,{ed-uou .luaulIpd aql o};urlpler surrBlc Jo sere1 qJns ,(ue uo.r3 "-saluuuq OSI ploqpuu,tJluurepur llt^\ laulotsnJ.pred ualq r^eq saxul qons tsqr qsrlqelsa ol .tsanbel f,lqeuosear
r(eru 6193 s? c,rrapr^, Jeqlo qf,ns to ,,quoqlne 3urxel cler:do.rdde aqt ,{q panssl *nt,rr", lr,rggoqll^{ cs;) rpt'rord 11r^.lctuorsnJ socc cqtjo tuour,{zd cgr tuo:1 Eursr:e 'lscJalur pue sarrieu",:plDloJ ,{uE pue .safi.leqr pue srnnp ,s.r_t .(:utotur S_.OSJ uo pe)Tq saxq uEql teql)) sexpl
;1e;o 1uiur,(cd .ro1 :rlqrsurxls:rr Jq llt^r lrurotsnJ pur2 ,slrxet larllo pur, Burploqqlr,{r ,l!sn .s;1l.s
clq8 ldd? llB Jpnltxs pue JlqspunJtJ-uou Jr? s33-J stll .JcJsuEll arr,r Fq to ,;q.1y43"rp lrrq'IleqJa 'Iraql 'pLJ ltparr (q s-tu;1op .S.n rr apEut,q tsnur osJ o1 .^1uaur(ed f f V l.rr-r,nirca-- Z Z
.csJ
PUP r xolsnJucc,nlcq pcSUu::e Jsr^uCql0 sE to .cf,t^lcs cq1 o1 Eururegad g53 tiq r"uror*3 ol pJlJ^rJrp
c-'rrorur ,(uu ur pcll:cds strlo llo1\Jo tucurllelq ut quoJ tJS Jouueu 3ql ur pup tunor1rp cql urCS.) ot (,.sJJl., aql) aJt^JaS rql rot s:a-f laqlo puu sae-1 ,{1qtuour.(ed ;1r,|\.r:uotsn3 .lpJ-aEEO I.Z
luaru,te6 puo .Bug11;g .saoX .3
.1..suodcX
arl^rrs..) lr-Jl uorlprleued pue lueutssasse {su aqlJo uod:.1 c opnlour ARtu aJt.uas aqf:1:o11.1o
t(taurele1s aqlJo su.rJ:tl ,l{t o1 IrJlqnS .1u:rur:u,3y snp jo uu:r1 :q1 Surrnp 1..alr,r:a5., io, "r*-ra5Surlsol uorte.llcurd.. Jr{l} lJrrolsn.) iq pcre:atlo.lo,pup pcu/no (,,srua1sl(5 1cff.re1.,j-sccr,rop:c1.rurr.r:d l3tt.tclur ro/pue s-urc1s.(s .rclnduoc uolu Jo Juo uo stoLta uorletnftlLro:l c:e,*rjor ro)pra,sartt lrqEreu[r,,r ,(1un:ras X3rlucpr {1a1oura: ot ldrualle lll,r lsql si]rruas qI.r.r:ruo1sn3 :pr,rO:d
llutls OS.f 'llo^ lo luctucl'ls otp puu lttcutcu8v sltll.fo suoulpuoJ pup suucl Jql ol lJcfqn\^
a:;,tra5- Sugtsal uolfuJlJued .I
'(..etoo a^rlraJ.lJ,.) 1.ro7t\ .1o luarualnls aql uo arnleuirs 1se; .rq11oc13p cql uo c^llriJjo sctuoJcq puB '(..rcutolst]J., ) IroAA.lo lucuteBls Jql uo pclltluJpl rrulotsnrcqr Puu (-.CS,1.,),(ueduror,{tll!qr!l pctltu!l opEJoloJ 12.Jll .srolnqtJlsrqc.lu,ry*1jog:aq,{J) uccmgaqpLre,(q olur pJrelua pu? aprrru \-! '(..l.f,ruaar8y,. srqt) tuaruaa.liy ::r,n:ag H*tre1 uo,ri.rirrr6 .,.,q1
luauraalSy arr.r.ras Buqsal uo!lBJleuad
)"1.1 .srornqJltslOrrB.rUJoSJrqi)
8181te0lJ6 t B-ts86-039r-6or9-18g l Brjc ot adoto^u3 uorsn.oo
I
I
lrlulolsnJ 'Jrr^ros iqlJo scrlJsordde /r\ou AIclllui ro 'stueuri^oldur lo slululJtucr{ui i]rnl?i}.l
'scxg 8nq'suodr: leuorlrppe 'spodrX Jar.^JJS Jpnlaur ,tetu sr;epdn f,sf,ql srf,.\Jos ro s:ctnduoc
ro s:f,r^ep rrurolsllJ 'rlurolsnJ ol porr^rlap (11nrrunur.ro (11e:rlaurolne aq (ou qrlq,r g53
ruo.rl su()rls:Urlou.ro srlcpdn cAlrrar aurrt ol eull ulol,l ,(nur :aurotsn3 ':rr,r.-r:5 aql jo pnd sy
'{tlltqtsuodsc.r s.lJtxolsnJ
srJLurt ol Jurq uroJ-l c8ueqr,{uu: qJrLlA\'sluJr.ucrnbc.r cscql Surlccur leql sccrSe:cuolsn.l
'uorlsauuoo lcuJrlul leurolsnJ qll,r palprsossP slsot uolll?tlunururoc fue t<4 alqrsuodsar
sr liuolstlJ 'ararAlaS JqlJo :)sn iql lo.l s:))rAJ:)s uollr?slunurtUoJ I U;tlul ulplutpru pue:o-1 rfluc.ue
Jlrm lauolsn.) csn roJ pcpulxruooc.r .{13uo:1s sl ssoJce lJuJclul paads-q8rg slolJBJ ascqlJo
aJupur-ro.rrad eql .{q FlJe.rJ" aq,{uru pue:salnpdn crpor.rad arrnbar,{eur :eJE.A llos- alqrledruor puu
'ssar.o lautelul 'saor,rap tlqrlrduroJ urctursur nurolsnJ teql saJrnhal eJtitr6S cql-Io uorstAotd
'aJr^las rql ,{q pslee:c iQr,rrlce qcns
.lo solll.rotllnu ctltlnd.ro 1u8a1 ,{-; r;ou ol lou saa:fle:auo1sn3'r{11euorlrppV uorte:tauad
^lt.tnf,aslDar r?Jo lusl: Jrll ur ltrlo plno^t srl rra'stua1s,,(5 lafiJpJ aql fi'uuolluoru sruels,(s pa1e.(uu
lo stuils^S lafllcf )ql-lo s.lol ,(up ul .rr^r.ls iql ulo4
^lr^uJB.io
serpJl trrlJp rauolsnJ uiq^l
lo Jr uortlss.I lelulou p ur puodsr: IJt,y\ t--rrxotsn ) 'cJr^JcS crll Jo stlnscl 3tlt uotsrp ol lou .tcpJo ul
'surals,(s 1afi:c.1" aqt uo sansst uorlelnffquoc.ro X1l:nras
ursuci .rc^oisrp ol sIp,J J3l^r.s 0r{l Jl rlqtsuodsil clsJ ploq }ou llt/rd liulolsnJ puB clqlsuodssl
plJq cq louu?J 6S.) IBLJI sc8pcl,troulJe rrruolsn:) 'sutcls^S lc8.tef Jo 1a,rc1 ,{1r:nccs lucxnJ JqlJo
,tcr,r clelnc:r (lqouosBJl e cpr,r,ord g;r.,rr cJt \lJS crll.,o sllnsJl cql iltq,tr leql sluE!a,r\ lcutolsn.)
'atr^res rql uo.rj flur;;nsel slgo.rd tsol .ro s,{e1:rp 1.ro.tr'1nd1no al?-lla.1r?ur 'erurl uru-:r
'Btup rsol Jo.l C53 tsute8u ulrBla,{u3 rleut }ou lltA\ lsulolsnJ lpql sluE!"^\ lcurolsnJ .sutcls.(s
pJtJ+JV 11e tln pclcutl pue pc;:c;ord seq JJurolsn.; lurll pue (-.srucls,{S pstJaJJV,, Jql) sutcls,(S
1e3:e1 oqt 01 uoniorruot ,{oe fur,req.ro ql,,r uorlJouuoJ ur pssn tuorudrnba Jo,,pup elep.lo
dnloeq pue uorlcalo:d c]rnbepr ;;c.ro1 drrlrqrsuodsel alos seq Jeulolsn-.t ]eql slu?re,4l laulotstu
'sutc1si5 1aire1 aq1.;o :au,tr,o lz8c; oqr tuo4
lqSu qJns paurulqo ss(lJaulolsnJ teql suratsX5 ta3.re1 :rl.lJo rau,$o eql lou sr JaurotsnJJr lpql
pue aJr^res aql ol suralsxs tefileJ l:ralqns ol lqFrj leficl srq leuolsnJ leqt sluuxe,,r l.utolsrlJ
.:^luctuitlInbJ)l I.f
sa;lrllqrsuodsaX rtluolsnJ .t
',{lr.roqgne 1u.;urur:r,ro3 iq uorsprduroo lo nueodqns 3o aJuJsqp Jql ur ua,ra ,saryed
po,,ror:8;r-e ,{1pc8c11e.lo s:l;uoqtne;e8c1 Aq p:rtsrnbl: :li^l.trlollto tq r(eru su suo4cr ro srtpcrrrcJ
rf,rl)o tl)ns .{rrp .ro 'scct,ucs puu si^arf,f,u.Jo Lrorsucdsns .lo Ieruip .J)nou lnoql,tt ElEp Burlglor^
-+o lploutar 'sartrrroqlne 1n8a1 qtr,r uorlotu.rolut ,Ql,..llrn pue elpp ot s:,^a11Je Burprno.rd .seuuoqlnp
1c3:J oteudo-rdde qlrm cy:p Srrr_reqs pue Bur,{dor Burpnlrur .:r1r:udo.rddu Jq ol uourltsrp
clos slt ur sru:lop qJE:' s'B solnsEcrr.l ll?rpJtusJ pue a,lue8usorttr rJJns.r{El ot uorlcillqo ou
rapun sr lnq'a1rl ,{uu CSJ'luaura BV resu pue,{uc:o srql ro.uortuln8ar,{ur .,v,.e1 z(uu -|o stu.rol
aqlJo uortelol^ lpuualod EJo ale,\l?.peul sr csJ lpr{t lur^a:qt ur tnqr pepr,to:d :csJJo st:ssE
A1S.ate0jl6 r g-1986-019,-6O19-189 ! BllC Ot edota^uf u6rSnroO
DocuSign Envelope lD CF481587-64D9-45E0-9854,819FF0347878
agrccs that CSD may deliver such updates or notifications to Customer as part ofthe Service and
Custorner shall receive and install thern rs required.
4.2 Rcstrictions.
Custorner agrecs that Cuslomer shall not place anv data on lhc Target Systems crr Allected
Systems that: (a) inliinges on the intellectual propcrly rights ol'any third partv or any rights ol'
puhlicity or privacy; (b) violatcs any law, statuc. ordinancc or rcgulation (including rvithout
limitation thc laws and rcgulations govcming cxpoll control, unlair conlpcririon.
antidiscriminal ion or talsc advertising): (c) is defarnatory. trade libelous. unlawlirlly thrcatening
or unlawlully harassing; (d) is obsccnc. child pornographic or indcccnt; (c) crcatcs or causcs an),
viruscs, Trojan horscs. worms. tintc homhs. cancclbot\ or orhcr conlputcr programnring rrrutincs
that arc intcndcd to darnagc, dctrinrentally intcrl'crc with- surrcptitiously intcrccpt or cxpl'opliatc
any systeln. dirta or personal inlbrmation: (t') creates or causes siluations or environrnents where
any failurc or timc dclays of. or crrors or inaccuracics in. the contcnt. data or infornration on the
Target Systerns or Atlecled Systems or any systems ofany third party could lead ro dcath,
personal injury. or scvele physical or environmenral damage: (g) crcates or causcs any damages.
corruption, loss. interl'erences, security intnrsions or any failulc oIany systcnts irr f'ustor:rer's
control, possession. or business operations. or any systems ofany drird-parr_v.
Custotncr acknowlcdgcs that CSD is not rcsponsible or liablc in any way tbr any data prr,rvidcd
by ('ustomer and has no duty to pre-scrcen such data. However, CSD reserves the right at all
timcs to dctcnrlinc whcthcr data is appropriatc and in compliancc witlr this Agrccmcnt, and may
prc-scrccn, nrovc, rcli.rsc, modily and/or rcmovc data at any timc, without prior noticc and in its
solc discrction, il'sr.rch datu is lound to be in violation of this Agreenrent o[ any kno',r,n laws- or
is othcrwisc ohjcctionablc.
.1.3 Confidcntialitv. Customcr agrecs to hold conlldcntial all CSD Confidcntial Intbmration in its
possession or to which it has access under this Agrcenrcnt or as a rcsull ofthc provision ofthe
Services, exercising the sanre degree of ciue that 0 reasonable and carel'ul conrpany would
exercise with similar data of its own. Customer will limit access to CSD Confidcntial
Inlbmratiol only to employees and contractors rvirlr a need to know such CSD Contidcutial
Intbrmation. provided that any such pcrsons arc bound by thc same confidentiality plovisions as
undeI this Agrccmcn[. "('SD Conlidcntial Infbrrlation" mcans CSD's computer systcms,
mcthodologies. and any othcr aspect ofthe Scrvicc that a rcasonablc pcrson would dccrr
contidcntial. Thc panics acknowlcdgc Cuslorncr is a public cntity and thcrctbrc is sub.icct to thc
Calilirrnia Public Recolds Act. Any disclosure ol'inlbrnration pursuant to that Act will not be
brcach of Customcr's rcsponsibilitics undcr tlris Scction.
5. Securitl' and Data Encryption
In the event the Service includes Sen ice Reports or dala delivered to Custotner, the delivery may
involvc cncryptcd tcchnologics and/or a uscrnirrnc and passworr.l lirr acccss ol'such Scr" icc
Repons or data- CSD is undcr no otrligation to maintain rccords of Customcr passwordls) giving
access to the Scrvice and/or Custorner encryption key(s), and it is Custorncr's sole responsibiliry
lo choose Custorner's encryptiolr rnerlrods and to mairttain records of Custorrrer's passu'ord(s)
1
t
OSJ.(q cruou (:o1eir1qo,(ue rnoqttar 'sucts{s s.693 tuo{ pclclcp (;tuoueuucd cq ,{eut suodc;
Jf,l\raq pup qep JJnrolsn.) 11c'lrrerrro:r.riy srqt.;o uoritltdxa Jo uorlaurturJt uodn'Ag;uuotltppy
'uorlBurJoJul lr?rluep[uo] sureurJJ uo[PulloJur qJns se fruo1 stl:o1 sUod:1 :rt,'i.ra5 pcuteti!
,tLrr: ur prpn;lur uorl?uuo.lul lErluJprluoJ ,(uu o1 ,{;dde ol cnullLlo. lleqs [ , uoll3cs.lcPun
.{ylurtuepguo:.;o uortDHrlqo oq.1 {:r;od uottuJlrr }ua}unlop slr (q po:tnbrr 1u:rtx: :ltll ol suodc1
atr^ras ulelar o1 p:lruuad aq llpqs rru.rolsnJ lerll pJpr^ord isluau:c:tnbe: asJqt qlr/( parlduro:
,{11n1 snq raLuotsnJ tr?rll CSJ ot Surlur'r ur ,(1ruae puu sutals.{s -r:utotsnJ uo.U suodJu aJr,l..lrs
,{ur 1o scrdor llc cserc 'cJlAJcS ctll.lo Jsn lle cnuuuorsrp ,{ltdurord lsnu DuolsnJ pue 'lsrxJ
o1 csrcr ,(1:rrerpcu:rur 11r t lurucc:8y snlt Jrprrn .rotuolsn.) ol pnlucJe flqir.r posucrrl 11e 'c1qu(rd
pue anp i(1:lnrparurur :q IIr,r1 uoltu.rrdx::o uonpur.r.rJ qins eJolaq luaurae:8y s!ql rJpun
OSJ ol pal\o slunourr ,{uu 'uosca: {ur: ro1 luJuririJ8v srql;o uoqe:rdxo:o uorlcuruuol uodq
.ImlIEnlIni.IFl5*I i r
':np lsud sr ;uour,{ed lr:rll CISJ uro{ af,rtou uallri,\.l
8ur,rr:r:r:u regu s^np (01) uirt urrllr,tl Jnp uiiq^\ slil Jql,Io uorpod,{uu ,{rd o1 slruj.tJulolsnJ
(q) ro :(suourulsJu )sn) Z ti uoDois ul uorsr,ro:d ,(ue scqrcc:q :curolsnJ (s) :Jr'rJruotsnJ
ol oJrtou ucltt,t ttodn xlclstpctur,ur c,\rlf,cJ.l--r'1ucr.ulcl3y slr{t rttsurLutcl osle xeru OSJ locrcrll
elrlou uettr-r,,\\ fiur.tr::ral re1;e s,(ep (0f) iprql urqtr,tr qlt)orq Jql ,tnJ lou srop pue luatu:aJffV
srql.lo rrolsl^old luulluu,{uu sJqlpJrq ,{pud rcqlo crll.ll tucrul tV srr{l cllrulr.rllJl ,{eur ,{1rud y
-IiollEnlmq[ Z r
'(..uua1 1e,rrruaX,. e) s:rped qloq-lo luisuoJ u:lllJ^\ eql surnbl lu,nauar ,(ue 'ra13aa::q1
'(..nu.I lEurrrl.,) sqtuoru (g) xrs-lo pou:rd e ro; JnurluoJ prn? JlBq J^uar_U? :lql uo ur8:rq
lleqs lualue3jtv srqlJo tlust l?nltrr crlt'IroA\Jo lu.ru.,tBts cqt ur prgrr:rds .sl^ucqlo ssoJun
-utlql I /
uoJfBulruJrI pu8 urJel 'L
'r,rtle1uasudc: eql ol paJ.1^rIap
aq 11r,r aruld rrelpt sr;rl uonalap qJns lsqt uollt?ru-rrluol r?'pelalap ale suoday aor\res qrns eluo
pus 'IloAA.Io luotxJlcts cql ul prlBuStsip su ;r,rr1e1u:rs:r:dor pJzuoqtne uB uto{ uorlBz oqlnB
cpr,rord lsnu::ctuolsnJ cJt^lcs Jtll ruo{ pf,lclcp cg s}rodc; cJl,ucs lcrll tscnbc: ,{eur rcurolsn3
stsanbau uolfala( Bt?(I .g
'lettlolsn.),{q p:zrroqtnn ]ou sptl:st.t qrnsJt u:.\a,suorlne:ra:d,(1urt:as
llqsuos-e3l JSn ol alnlle-l s.lcurolsn]Jo lJns3j P Se scf,l^lf,S 3ql Jo elpp lf,tuolsn3 ol ssccce sure8
oq,r,r uos::rd ,(uu puu 'so:l,r.lre [l ot sscJle rr:r,ll3 suq:cutolsn ) uoq,r ol uos:cd ,(ue .JJulolsn )
.;o aa,(oldura ,(un ,{q sarrruag aql.to asn aqt .ro1 alqrsuodsr.l sl laurolsll.) 'ruauaa.lfiy aql ut palrls
suoqeir 1qo ,Qr:rrras slr IJIU ol ,Jnlrp.J s.CS) ruoll slJns.lJ:lsn lo ssoJrs pJzuoqtnput.l :trlt ssJlun
soJr^ras aqlJo asn pJzuoqlnuun aql Jo slDp s.laulolsn.) ol ssaJJc pczrJor.llnBun Jo-J l uolsn.)
ol Jlql!^uodsar aq lou llr,l\ (lS.) '(s).{a)t uotldfurua ro/pun (s)sp.lo.t\sspd s,JeulolsnJJo ssol aql
uo4 fursr.ru,trlrqetl (ur?.lurut tou lll$ puc rlqrsuods.l rq lou llr,tr CSJ .(s)r(cl uortd,ft:rue pue
s1g1r00lJ6 t a-r986-0j9'-6org-18g t BljO :ol adola^uf ubrsnooo
Docusign Envelope lO: CF481587-64O9-45E0-9854 B19FF034787B
to custorner. CSD shall have no liabiliry with respecr ro any Service Reporr rerained hy
Customer after the expiration or tenrination of this Agreement.
8. Software and Data Rcports
8.1 License.
As pan of llrc provision ol'thc Scrvicc. ccrtain solirvare- such as a rvcb brorvscr and PI)l'rcadcr
or othcr officc applications nray nccd t., bc installcd on custonrcr's systcnr. and custonlcr nray
bc rcquirud tc, halc a uscfiraolc and passworcl trr a wchsirc ro acccss scrvisc R(ports. Subjcct to
lhe lernrs and condittttns ol'this Agreernenl, CSD grants to Custorlet'a lirlited. non-exclusive,
non-translcmblc liccnsc undcr CSD's copyrights [o usc thc Scrvicc Rcporrs dclivcry systcm as
spccilically allowcd by CSI) solcly in conncctions with cSD's provision of thc Scn,icc. All
rights not specifically grantcd to Customer herein are expressly reserved by CSD.
8.2 1.1sc Restrictions
customcr agrees not to: (a) modiff, arLapt. alter, translate, or create derivative works fionr the
Service. the Serrlice Reports. or the Service Reports <Ielivery system; (b) rnerge thc Serwice
Reports with other infonnellion in a rnanner that lails to attribute the content of tlre Service
Rcport to CSD or that may othcnvise creatc confusion with rcspect to thc soul.cc of thc
infonnation conlaincd in thc Scn,icc Rcport; (c) subliccnsc, lcasc, rcnt, loan, or othcrwisc
transl'er thc Scrv'icc or scn'ise Rcporls to any third pafiy; (d) rclerse engineer. decornpile.
disasscnrblc, or othcrtr.isc attcmpt to dcri\c or cop) or sharc thc sourcc coclq or copyrightctl
information containcd in thc Scr'icc Rcpon.. 1c1 usc thc scrvicc or scrvicc Rcports to proccss
data or provido any scrvicc burcau activity for any third parly: or (t) othcrwisc usc thc scrvicc. or.
use or copy the Service Reporls, except as expressly allowed under this Seclion 8.
9. Warranty and Disclaimer
CSD's sole and exclusivc wananty is that the Servicc provided undcr this Agrccnlcnt shall bc
pertbrnred ln contbrrnity with the standard practices ill the industry and applicable law.
Notu'ithstanding the forcgoing, thc security mechanisnrs implemented by ('SD have inherent
limitations and Customer is solely responsible for determining that this mechanism sutlciently
lDccts Customcr's security and opcrational needs. It is Customer's responsibility to rnaintain
appropriate altenlate backup ol'Customel content. inlbn]lation, data. bLrsiness operations, anrj
Targct SystcrDs, as wcll as p()tcct anv associatcd systcms lhat nray be aflcctcd by thc Scrvicc.
CUSTOMER UNDERSTANDS AND ACREES I'HAT. EXCEPT FOR THE EXPRESS
WARRANTY PROVIDED ABOVE. THIl SI]RVICI: IS PROVIDI]D ON AN "AS IS'' AND
'AS AVAILABLE- BASIS. CSD AND ITS AFt ILIATES. SUBSIDI;\RIES, OFFICERS,
DIRECTORS, EMPLOYEF]S, AGF]NTS, PARTNI]RS AND LICLNSORS [XPRLSSLY
DISCLN IM ALL WARRANTIES OF ANY KIND. WHETHER EXPRESS OR IMPI-IED.
INCLUDING BUT NOT LlMlTllD TO THI lMPl ll]D WAIIRAN-l ll:S Ol'
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE. AND NON-
INFRINCEMENT. IN PARTICUL,{R. CSD AND ITS AFFILIATES, SUBSIDIARIES,
OFFICERS, DIRECTORS. IIMPLOYLtTS, ACENTS, PARTNIRS AND LICENSORS MAKE
l
Docusign Envelope lD: CF481587-64D9-45E0-9854-819FF0347878
NO WARRANTY TTLAT (I) THE SERVICE WILL MEET CUSTOMER'S REQUIREMENTS:
(II) ('USTOMER'S USI OF l'HE SERVIC'E WILL BE TIMIIL\'. LTNINTIRRUPTID,
SECURE OR ERRoR-FREE; (UI) ANY INF()RMATI()N oBTAINED BY CUST()MER AS A
RESULT OF Tl IE SERVI('E WILL tsE ACCURATE OR RELIABLEi AND (lv) ANY
DIFICTS OR ERRORS THNT MAY OCCUR AS A RESULT OF TIII SERVIC]E WILL BE
(.oRRE('TED,
10. Limitation ol' Liability
CT]S'I'OMI]R I,XPRLSSt-Y IJNDI]RSTANDS AND AGRII]S THNT IN NO EVINT WILL
CSD AND ITS AFFILIATES, SUBSIDIARIES, oFFJ(:F]RS, I)IRI.]CI'oRS. I--MPI-OYIiI,S,
AGENTS, PARTNERS AND LICENSORS BL, LIABLL, I.OR ANY DIRECT, INDIRECT,
INCIDENTAL. SPECtAL. CONSEQUENTIAL OR EXEMpI,ARy DAMAGES. INCLT.'DtNG.
BUT NOT LIMITE[, TO, DAMACIIS FOR LOSS OF PROFITS. GOODWILL, USI:, I)ATA.
COST ()F PROCI,IREMENT ()F SUBSTITUTE (;(X)DS 0R SERVICES. OR oTHER
INTANGIBLE LOSSES (EVEN IF CSD IIAS I]EEN AD\-ISEI] OT TIIE POSSIBILITY OF
SUC]H DAMAGES). RESULTING FROM ANY CLAIM OR CAUSE OF ACTION UNDER
THtS ACREEMENT OR ANY SOW. (]SD AND ITS AFFILIATES. SUBSIDIARII]S.
OFfICBRS. DIRECTORS. EMPLOYL,ES. AGENTS. PARTNtsRS AND LICBNSORS ALSO
SIIALL NOT I IAVE ANY LIABILITY FOR ANY PROCRAMS OR DATA USED WITI I
TIII] SERVICE. INCLUDING WITHOUT LIMITNTION AN}'LOSS OF PROCRAMS OR
DATA OF ANY KIND ()R'THE CoSTS OF RECOVERING SUCH DATA. CSD'S T0TAL
CUMULATIVb LlAtslLll Y IN CONNECTIO\ wlTl I l lllS AGREbM1INT AND TllL
StrRVICtl AND SERVICT: RIPOR IS. WHETHF.R lN CONTRACT OR TOI{1- OR
OTHllRWISll, Wll-l- NOl- IXCtillD $200,000.00. This lirniLdtion ol-liabiliLy does not apply to
cxtcr)l alry damagcs arc covcrcd by tl]c insurancc policics rcquircd by this Agrccmcnt. In ordcr
tbr the lirnitarion ol liability s!'1 lbrth in this Scction l0 to apply. CSD shall providc Custorncr
u,ilh a signed, written statement fiorn an authorized representative of the relevant insuruncc
carricr(s) that insurance covcragc is dcnicd or unavailablc lbr any clainr or cause olaclion in
conncction with this Agreement, the Sen icc, and/or the Servicc Rcponls).
I l. Indemnilication
Customcr agrccs to dcf'cnd, indcmnity and hold ('SD. its al'tiliatcs, subsidiaries, directors.
officcrs. cmployccs. aScrts. partncrs. c()ntractors. and liccnsors (thc "CSD lnderrrnitccs")
lrannlcss fiorn anv clainr or dcrnand, including rcasonablc altomcys' fccs. tnadc by a third party.
relating to or arising lionr: (a) any data Custouror stores, subnlits, Posts, transrnils, ol'otherwise
nrakcs availahlc that may bc affcctcd lry lhc Sclvicc: (l)) f'ustorncr's usc ofthc Scrvicc; (c) atly
violation hy Customcr olthis Agrccnrcnt; (d) any action takcn by CSD as part of its invcstigation
of a suspcctcd violation ol this Agrecrncnt r.rr as u rcsu lt of its find ing e'r- dt'cision tlrat a violation
of this Agreement has occurred; (e) Custonrer's violal,ion ol'any lights ol'arrother; (l) Custontcr's
actual or allcgcd gross ncgligcncc, willlul nrisconduct, violatiotl of law, failurc to l'nccl thc
security obligatiuus rcquircd by thc Agrccrncnt, r'iolation ofthc CSD Acceptablc Usagc Policy'
or violation of Scction 12.8 (Export Control) of this Agreement; or (g) any usage olCustomer's
6
L
tlu :)q plno^l sJiPttlsp fuelJllotu tlalq/$ lo.l qsl ol urpq alqpfidiurr ':rtnlp:rnrrur rlnlrJsrro.
Ilt^r (suo[Julscu xsn) Z'g uollc.s-lo q]siJg piuclErJtlt Jo l?rUJB Fue tcql ,OSJJo UotlBulloJut
X.[lar.rdo.rd puu slerJas rpert alqpnlt:^ ultuo: slrodag aJtruaq puc eJr ]aS aql leql saipal,noulre
rru.rotsllJ a^llElnuJnJ ale luaur:c.riy stql lapun s.tpaurel pue s1qfir.r .saryed aq-1. .S5ipiuiIIJ t.t I
'r;qurrlddu
sR'eru.ro.lrleJ',{tuno;):rprs-ro.,'1 ur :!-ltnoJ lB.lJpJ-l -lo cl8ls Jrlt ur tqfino.rq Cq llEqS lUOtuCOJflv
stql ol poltrlJJ uou:ru ,(uy .s:ldtrurrd .\\nl.l0 slllUuol slt ol :lusJaleJ lnoqlur\ truloltlru
lo ilrls :rqlJo s^\n1 oL;t ,(q p:rru:r,roi aq 11tru ltriruiil8v slqJ -nn5[FjE-mpTExlrEaI6D .t.t
I
',4uud :aqro cqt ol ssorppc
\1au aql-lo arnou usllrJ,'' fiur,,r3 ,t'q }^s..rppr? srr atuuqc (eur Kped.raqrrl .Jauoos sJnJJo .ra^aqJrq.h
'enoqu purnb.:rr sc lrpur Jql ul p:rllsodap iurlq rcgc s^ep sseursnq (C) e:ql .Jr"ur Jo .sE.
arll nr'ro ldracar uodn c/\rlraJla aq 1r^\ pue.OSJ,{q pauruuclap sE ssatppr Brnpuodsaxo; laqx)
ro ljoiA..lo tueu.ralEls aql ut polBltput s? .lo a:nlerr8rs s..{uBd qJns qtpxueq quo] Irs (sr)ssatppE
aql lD fuBd reqlo aql o! (ldteJ:l.Io tuau:8pc1,trou1te s:leJrpul luql luardrra: uo:.1 asuodse.r
lrpurJ qIA\ lo pJlrrlunsop pue pruuguoo tdtosil pl_,:u) ;reur:r .{q :o .(p:rtserrh.-r.r ldrom: urnlr: pue
predcld tSulsod)'lr,rx piJclslEcJ Jo pcgrpce ;(q '( xsJ ) -llrursJuJ JluoJlrclc,(q ,:cunor ,(q gulir:r,r
ur pe.re^tlap 3q tsnu lurutoaJiv stql tepun slp^o.tddp puc sluesuoJ .ssJtlou Ilv T55il6N z.! |
.1uotu.-rc-t3y
sttp Ltt pcptao.td sB i-tucru3itnhoJ ,ttllelrucplluoc ctues cr;t ol lcclqns ane
^Jgl
lcrlrl popr,rord
'crr^.tJS Jtll.lo l.red Xuu.ro 11e ur:o1.rcd o1 vcpr,rold aot.r:cs,{ued pltql o:!-n (eu OSJ pto^ pue
llnu 3q lll.\t 3uro3:ro-1 arll-Io uounlot^ ut trJsupll .ro luaruufirsse prtdural;e _raqqo ,{,ry -u,r,1.r..,er1
tlrns ,{rm,;o yed se uorlnuuo-.1ul luuuJprluoJ s.r lotsnJ lo.lsur,,{ ,{etu gg3 pup ,ssaulsnq
Jo clBs e Jo uorlezrueEJocJ ,reJodJoJ e Jo ued se uzd ur Jo iloq/ ur l.aulcc:8y iqt uSrssu iluo,{sur Cs,) 'pro^ pull ;1nu rq ;1r.m luloia.ro.l f,r.ll.lo uollplor^ ut JJ-lsupJt .ro luauruFrsse peldur:11u{uy 'lursuoo ur11rr,u rorrd s.OSJ tnoqlrA\ {Ied p:rqt {ue ot (suod.U e.rAlas lo aJl^_.ri!S
oqt ot lrxlscr rJlr.* )-Jsua,l s.JauolsnJ BulpnJJur) luoruaetEy srql:apun slqfu s.raruolsnJ
Jo ,{ue 'ast,ruor{lo Jo
^\tslJo uorlgJodo (q laJsugrt .to u8rss[ lou {?ru Jaruolsn) ttrarm;mv I ;l
snoauBllors!l{l .fI
Vlq-lqtA ur rtuo.t lrssluctuc:rnbcr Jr[srrsur Jrrl lcJrx lur.rs os.)'lucrucc:sv srql rJprrn c]r^Jis .{ue SuruurScq c:t5og
JJUBJnSU I .zl
'plJrlqll/t\
^lqeuosrslun
cq lou (utu qrrq,^l .lucstroJ
s.Jcru()lsn.) lnoqlt,tl utrEIJ orl.t Jlltas lou
^Errr csJ .r.uru lJ IIJO csucJop cql ul uorlEJCd0OJput a--ru pls tssp .lo.J s-lsanbrl ,lq"uosuc.l s.csJ rllt.$ ,{;druor 1"^nUl lauol:\^tlJ ..rautolsnJ
ol p:rlerrunuuoo iltdurord aq lsnur put? Jlqpuosp:u:rq lsnu uorslrip qrns tpql p;rpt,ro:d .ture1:t
,qt puJ.rJp ol ;csrrno: 1e3:r1 JSoor{J llt,rr csJ .J^oqs pJpr,rotd su uorlucgnrulcprrr Jo luc^J crll rrl
'JsruolsllJ ,{q pozr.roqlne,(;ssatdxa sr a30sn qJls lou lo taqleq,r ,saot.rao la8lu s.lauotsnJ
-IO uouPrrsluturpp.ro.+ lultoJJE s.taulotsnJ lo suoded ea!.ues )ql n-ulss:3le to-J lutloitJg
8,18/reol16Lg t9B6-039r-6Or9-1B9rgtlC :Ot odota^uj u6rsn.oo
'tuc^o8 lleqs IIoAA Jo ltlilrlclels
.]ql 'luaruialiiv srql pu? )tJo/t\ Jo luaual€ls oql Jo surrol oql ucJ t1lcq lsruuof, /{uB Jo l(t.Ac aql
ul 'u?Jo.lo urltU,tl raqlaq,$. 'uollP:)runululol PuE 'sfiulpuPlsrtpun 'sluau,JJSe snoeuPJodualuo3
ro rolJd lle srp:sredns pup Joar:q trolqns :!tll SulpJl?B.rr saued eql uaa,trloq luattcar,Sc
atllJo surJal eqrjo lucLuerers enrsnlJxa pu" "lJlduroc'1eug Jql salntttsuo, 'oluaql parlregu
slrqrqxa (rrn pue UoAl\-lo luauolels aqt qtl,lr :l'uo1e 'tueulru8v slql iiEtuae.tfi-nffi 6'91
,SNOIfVJI-IddV CNV'SI-JVU.TNOJ .S3I]I']Od'NOI.tV-'I'I3]NVJ
rlO SSJII-ON DNIO0IINI '3JIAU3S SII lJ- NO OINI U3lN:l Ulll'.{OtSnJ
sN()r.r lvsNVuJ. 'l'tv or r)Nr.tvl:lu scu().)gu l-lv oJ- sal'lJdv sNolsslWSns
.)lNOlllJS-M .\U CNnOg :lg OI JNil.l-NI CNV IN:lr J:1IUCV S'U!]i\lo.l.Sn.l
'sNotrJVSNvuJ. cNY S.l-NilN:I3U9V I I)nS UO,'l AVd OI. ONV An CINnon :1fl O-L
lNaINl CNv l-l,i3r lagXI)V S.U:lhlOISn.) :lIllIll:^NO.) SNOISSII\BrlS JINodIJglS
s.u',tl oJsnJ lvHI silt)0:tt,,hoN)Jv u:ll loJ-snJ 'Etrll5Er-lnojt luon.al:l l{ t-l
-llnl u! CSJ ol rilurolsnJ ,{g pred luun Surpuulslno ureur lI,\1.
693 ot rlc1efed soJ-I lle pue'pcldof,]E aq lou llt^\ o:ncleur ea:o; -;o tutelc ,{ue utorl suotle8tlqo
lelJupur] laaur o1 (lr1rqeur s.lJtrolsn.) teqt se8pcl,$ou{3u r3r.uo1sn11 qgj ,(q pauttx-tclJp
ast:$J}I}o sn ro'sesnns ro 's:JuJrn:rJo 'slu:A: p:uoltust[aJoJs q]ns.(q pasne:r st:ln1tr.-;.to r(elrp
q:rns;r trrauraa:Ey ;rrp .yo ged iue .ro 11u uuo.;t:rd ot :rn1re; .ro Xe;ep ,(ua ttto:-; f,utllns:r: :rf;rurep
ro ssol ,{ue;o lunoJJc aqt uo.t1t1tt1ell Xrre:nltl lou JII/( q53 '{;leuotttppy suoda1 af,l^Jcs
ro ef,r^ies Jr{tlo uorsrAoJd i'-,OSJ sJlBdull qclq,tl sstroJPulq alqrssod.raqo ,{un -to 's.tapttojd
,(1rp1n1o slJB'sl.relle 1st-lorta1 'suotsoldx:'s5.lu'sJ.lsestp le.truBu'poCJo sll[ 'uottrlltxll
lnoqtrm Surprrlcul 'CSJ
^q
pcuruuctJp se'OSf .to lo{uot Jqt puo,{Jq sJstlst lo's5atlarn3f,o
'sluc,rr (q pcsnef, srrnlreJ.ro s,{e1ap.{ue r<5 r;cltsuods.i rq lou ll!,r^ (lS.)'5lndt6 mxf.l / tl
'lre.LrJ puc:r:uo., lln-l ur anurluor 1pm suorst,ro.rd flurutuutai aql pue .rlsl alqeJrldde rapun alqrssod
1u:rrxo rsolnorS oq1 o1 uorsr,rord qlnslo sJ^rla:\lqo lql qstldtltorl0 ol ptltldlslul pue p:rEupqr
c<1 ;1r,,n uorsr,ro:tl qons clqEorreJuiun st luotucc:8y srql jo uotst,,,o:d {ue JI -Fij]lq?l5Ls 9 t- |
'uors^Ef, lo Jeqlo,(ue uo ur'trsr,to-rd
q)ns.lo .ro uorsr,ro.rd r:rqlo .(us .ro :r,rrelt P pruli:lp iq lou lpm uorserao ,luo uo luauroorSy srql
go uorsr,rord
^us
JJlo.fuc ol emlle-l Jo lJ,\tem (uy '3uqum ul )q lsnu sJJ^re,r llV rc,riEfr'E g1
'puoq c lsod oy poou aqt tnoqlr^ Jarle.r qJns- ol pallrlua sr
CSJ pue qis:rq qrns lo.l fperuc.r alrrrdoldde ue sr 3erla: Jlu.)unfur tul1l puB ',(pruro] :lunbapuur
A1g1re0lJ6 t S-t986,0f9,-6019-109 tgtl3 :Ot edola^uf u6rSncoO
ll
OocuSign Envelope lD: CF481587-64D9-45E0-9854-B19FFO34787B
Erhibit A
Insurance Requirenrents
l3elbrc bcginning any Scrvioc under this Agrccment, CSD, at its own cost and cxpcnsc.shall procure tnaintain the types and arnounts ol'insurance listed below anil prov i<Je C'ertilicatesof Insurancc' indicating that CSI) has obtaincd or cutrcntly nraintains insurancc that lnccts thcrequircnrents of this Section and which is satistactor.v, in all respects. to cusronrer. CSD shall
maintain thc insurancc policics rcqurred hv this scction rhroughout thc tcrm of this AgrccmcntcSD shall not allow any subcontractor, consultant, or othcr agcnt to cornmcncc Scrvicc on anysubcolrLract trrrtil CiSD has obtained all insurarce required herein lbr the srbcon t ractor( s) anriprovidcd cvidcncc thcrcof to Custolncr. Vcrification of thc rcquircd insurancc shall bc subrlittc4
and made part ol'this Agrcement prior to execution. c SD acknowredges the insurance poricy
must cover inter-insured suits hctwecn Customer rnd other insurcds.
l.l Workers' Compensation. CSD shall. at its sole cost and cxpense, mainlainStatutory worke.s' Compensation rnsurancc and Enrployer's Liability rnsurancc tor any antlall persons employed directry o' indircctly by CSD pursuant to lho pro\isions ol'thecalifomia [abor codc Stanrtory workcrs' compcnsation r*surance a.d Enrproycr.sLiability Insurancc shall be pr.vided rvith li,rits .f oor lcss rhan oNE MILLIONDOLLARS (S I _00(.).000.00) pcr accidcnt, ONE MILLION DOLLARS (S t.000,0(X).(X))discasc pcr cmploycc, and oNE MlLLroN DoLt-.^RS (s 1.000.000.00) tliscasc pcr.policy.
In thc altcnrati'c, csD rnay rcly on a scl'-insurancc program r.o rncct thosc rcquircmcnrs, buronlv il thc prograln ol'scll--insurancc cornplics lirliy rtith thc provisions ot rhc Calilorrria
Labor Code. Detertnination of rvhr-thcr a sel t'-insrrra nce prograrn rneets the standanls ol'theCalifonria Labor Codc shall bc solcly in thc discrction of rhc Contract Admilistrator. Thc
insurcr. if insurancc is p'ovidcd, or cSD" if a prograrn of scll'-insurancc is providud, shall
w'aive all righLs ol'subro-tation against ( ustonrcr arrd its ol-ficr,.rs, oflicials, e'rnployccs. andauthorizcd voluntccrs tbr loss arising ttonr thc Scrvicc pertbnncd undcr this Agrccmcnt.
L2 Commc ial Gcncral and A tornobilc Liabilitv lnsLrrancc.
a. General requiremcnts. CSD, at its own cost and expense, shall
tDaintain cornmercial general an<J automobilc liability insurance tbr the tenli ot this
Agrccmcnr in an amounr nor lcss than ONE MILLION DOLLARS 1$ 1,0()0,000.00) pcr
occurcnse. combinsd single linrit coverage. fbr risks ass.ciated with the sc.vicc
contcmplatcd by this Agrccmcnt. TWO MILLION DOLLARS (52,000.000.00) gcucr.al
aggrcgatc. and TWO MIt.LION DOLLARS (S2,000,000.0O) prducts./r;o,rplctcrJ opcrari.rrs
aggregate, II'a Conrnrercial General t.iabiliry lnsumnceoran Auronrobile Liability lnsurtnce
fornr or othcr form rvith a gcncral aggrcgatc linrit is uscd, cithcr thc gcncral aggrcgatc linrit
shall apply separately to the Servicc ro be perlbrnrcd under thrs Agrecrncnt oi the gcneral
aggrcgatc limit shall lrc at lcast twicc thc rcquircd occurrcucc limit. Such covcragc shall
includc btrt shall not r-L lirnilcd to, protcction agairrst clainrs arisirrg tiorn bodily and pcrsorral
injury. including tleath resulting thereliorn. and darnage to propertv resulting lionr the
Scrvicc contcmplatcd under this Agrcenrcnt. including thc usc of hircd. orvncd. and non-
olvned automobiles.
I
Docusign Envelope lD CF481587-64D9-45E0-9854-419FF0347878
c. Additional rcquircnrcnts. Lach ofthc tirllowing shall bc includcd in
the insurancc covcragc or added as a ccltillcd cndorscrnent to thc policy:
i. The insurance shall cover on an occurrence or an accident
hasis. and not on a claims-madc basis.
ii. Any failurc of CSD to comply with rcporring provisions of
thc policy shall not atl'cct covcragc providcd to Custonrcr and its ofticcrs, cmployccs. agcnts.
and voluntecrs.
a. (jcncral requircrncrrts. CSD. at its own cost and cxpcnsc- shall
nraintain for thc pcriod covcrcd by this Agrccmcnt prot'cssional liability insurance lbr
licensed prol'essionals pellbrnring the Scrvice pursuant lo this Agreenrent in an anrount no[
lcss than ONE MILLION DOLLARS ($1,(XX).000) covcring thc liccnscd profcssionals'
enors and ornissions. Any deductible or sell--insured rctention shall be shown on thc
Ccrtilicatc. II' thc dcductiblc or scll-insurcd rctcntiolr cxcccds TWIINTY-FIVll
Tl IOUSANI) l)Ot,LARS ($25.000). it rlust bc approvcd by Cuslonrcr.
b. Claims-rnadc limitations. Thc tbllowi ng provisions shall apply il'
(he prolessional liability coverage is written on a claims-rnade lbrnl
i. The retroactive dale of the policy must be slrou'n and tuust
bc uo later than thc comnrcnccmcnt olthc Scrvicc.
ii. lnsurancc must be maintained and evidence of insurance
mnst be provided for at least tive (5) years aficr the exp.ilation or tcnnination of this
Agreement or completion of the Servicc. so lollg as commercially availablc at rcasonablc
r.rtcs.
iii. [t covcragc is cancelcd or not rsnuwcd and it is not tcplacccl
with another claints-ntade policv lbnn with a retroaclive date that Precedes the Fl'l'ective
Datc of this Agrcclncnl, CSD nrust pro\ idc cxlcndcd rcPofiing covcra8c for a nlinimum ol'
five (5) years altcr the expilation or termination of lhis Agreemcnt ol thc conrpletitrn of the
Scrvice. Such conlinuation covcragc may bc providcd by orrc trfthc tirllowing: (l)rcncrval
of thL' cxisting policy: (2) an cxtcndcd lrporting pcriod cndorscmcnt: or (l) lcplaccrncnt
insurance with a retroactive date no later than the conrrnencentcnt ol'the Sen ice r.rnder this
Agrccmcnt. Custonrcr shall havc thc right to cxcrcisc, at CSD's solc cost and cxpcllsc. any
cxtended reporting provisions ofthe policy, ifCSD cancels or does not rcnew lhe covetage.
l0
b. Il'linirnunr scopc of coverage. Conrrrrereial genclal covcragc shall
bc at loast as broad as Irtsuraucc Scrviccs Offlce Commcrcial (icncral Liability occun'crlcc
tbmr CG 0001 . Autonrobilc covcragc shall be at least as broad as lnsurancc Scrvices Olllcc
Autornobile Liability lbrnr ('A 0001 C'ode 2, E. and 9. No endoruernent shall be attachetJ
lirniting thc covcragc.
l.l Protessiorrirl[.iabilitylnsurance.
II
llDqeq uo Jo ,{q p3ttrio}lJd acr^JcS sqlJo lno Sursl]e ,(lrllqurl :8ur^\olloJ erp-Io qsuo ol l:]cdsf,J
tllr^1 sp!.Insnl lPUOllIppt? sP p:Ja^Or aq llPtls sleelunlo^ PeTlJOqlnP puo ':-lu:8n ':.-eei(oldrua
'sJirrt+-ro slr p[r? ]i(uolslrJ t:)Ul?.rlsur
^rprur-rd
:pirnsur ir,irorlrPpv
'pisEi.r)r.Il sr uor]llilJj pcrnsur-,flis ro :)lqrl]npop oqt (t)
ro:pc)npcJ JJe scJrlod pcrnbiJ cq)J(} ,(ue10 s1rur1 crlt (Z):pcl8uruJcl sr scrcrlod cJuBjnsur
pa:rnbe-r aql jo iue ( I ) :Jr s,{cp iurl:o,tr (01 ) u:l urqlrm .raulolsnJ ol alrlou ua11r:..n epr,ro.rd
llEqs (JS.) c.J?lJ^oJ lo uou?llJauBJ lo ui lorlcnpcu lo JJ[oN
I
f
o\^.1Jo llcqcq u0 ro
^q
suorlBJsdo
palalduror pue fiuroffuo .;o 1no Sursrru ,{p1rqrr1 .ro.; parnsur lr?uorlrppp ur sE pasJOpuc
iq lsnru.riurotsuJ 9tiSa6 VJ ';rr.lttrirhl 'pcod ullnl I t?lJ6a 'i.r,+rui!\.Jo AItJ .sr uotrpllJJul?J
.lo ctrrloN pue scuarnsul Jo scleJuruc.) 'stuaurJsJopuc pojnsul Isuortlppv loJ ssolppr]
PUU aurPu eql CIN .tYuISNld:uactNSl\l -{:rou)1.'Iir
::-urrr,roJ1o3 rql apnlcur lsnuj cf,uLlnsul Jo 3lctulual aqt JIDqrq slr uo 5i8Jo^oJ purq
ol ieJnsur leql
^q
paTrJoqlne uos.rad eJo arnl8tr8rs oql ,{oqs lleqs slueu.rasJopue peuruet puD
sarirlod-lo sardoi IIV sluauesropua llu -Io satdoo pel]tUar .toldnrof, irtpnl:)ur ,sat.rlod llB-Io
s.irdoi parlrLreJ elelduroJ snlBls parnsur leuorlrppe 3ur1uel8 affunfue; (tr1od.ro tueuaslopua
P:rnsul luuourPpB 'eruelnsol Jo s:lPrljrutJ qlr..rr r:ulolsuJ qsrultu sqs cs] 'luauraet3v
srttt lcptrr 3Jt^JcS Jtll futrtrtt8-rq <.r1 .ror:4 5Ee:c,rr.>c 3rr uoptcgr..rd (l
'ErrxoJllsJ
ur pallrupr? pup lln:V usrll ss:l ou.lo Autlt?l .s^ls-rg I rlltAt sJJtns^ut qll^ pa:c1d aq ot
sf uoUJrS srql ,{q prlnbJl cJuernsul IIV 'arrfsurTo-fil'qoibtrv- 'u
slucttrcrrlDcx scrJrlod liY g l
'luculcsrSv
\^I"ll ol luBnsJnd scr 4urcs Jo iJueuJo-uad cql Jo Jnut^ ,{q ,{ edold io s^uos-trd lo uos.tJd
,{un ,(q plululsns s:lf,putsp Jo sJ nlut ulot-l flutllnstl '.l.r^;toslsqA\ .txttplpqt .(ue jo s.r,Srzurnp
Jo 'surrBJJ 'slrns IIE puE KUB 'Elep Jo JolluoJ ro 'uorsstrusueJl .Surlsoq os,) uro.r.; iurstje
rl)l2"rq rrI?P c-lo luno:rre uo 'sasuadxa pue s-lsoii fiurpnltur 'ptn1 Jo nlvu ,{uo-10 ,ftrpqell uor-;
sac,(o1dua puE 'stua3u 'sJcJlllo slr 'Ja{uotsllJ 'ssJluuurl ploq prc J^es.,&ruruapul .puaJcp
llsqs (]Sl 'rucurc:8y srql jo uorsrrord laqlo (uo 3u tpuolsqlt.,r\toN .q
'.rr:,{ auo.;o poued urnurrrrrur r? lo-, lenpt^tpur pJlaa.llp {up.ro.l
Sur.rolruotu llpJ.rJ Jil-l alqelrB^p Jlsru osle ggcqs,{:rr1od.1:tuBllsur ;rt1t 'uorleuuo.;ur leuos.rod
s-3^Jo^ul qf,uclq uluP stJl ltlc^c Jtlt uI PUe rJruolsnl plre CSJ -ro suotlu8rlqo uorlu3urlol.l lJc
fruqaetu flurpnlrul 'qJualq etup u-lo luana :ql ur rsuodsa: alerpeurul uB'.rJruolsnJ lo qSJ
Jql ol lsor tnoqll,^ 'cpl^ojd lll.{\ tBql'3re3Jr33e 000'000'ts pue rlucJnf,ro tcd 000.000.1$
uary ssal lou.lo slrurrl (1rlqel1 u lrututur qlt,rt '(sllnpoid atunlnsut luele,rrlrba lo e:lunJt.ts^Ul
,ftr-rne:r5 pue Arlqprl rJq^J urplull7ur puP :)-lll]:rs llpqs CSJ .,{ltlui .{u[d-pllqt e qffnorql
ulcpjo a'urlsoq oqt:o; opr,ro:d lo lzlep tsorl lll^\ CS.).luJ^. cqt ul .p
oaUt.tnslrI ^lrjn.ros puf, AltlrquTrcqlj v I
'luaurcl:3y srql J3pun e)r^lrs aqlJo luauaJucrutuoJ Jqt o; .lor:d .rctuolsn.l ol pirllrtuqns:q tsnu sluauarrnlra: 8u1uod:.r ullzl:'! :ql 3o ,{do:l V .^t
A1A1r€0ll6LA-1986-019',6O19-lBgLgrlC :Ot adota^uf uOrSncoO
DocuSiqn Envelope lD: CF481587,64D9-45E0-9854,819FF0347878
uctihles
of csD. including the insured's gencral supcrvision of cSD: protlucts and cr.rmplcterJopcralions of ('SD, as applicablc; prcrnises ownctl, o,ccupied, or uscd by CSD antlautonrobilcs owned, leascd, ,r used by cSD in thc course of providing the Scrvioc purcuantto this Agreenrert. The coverage shall contain no special linritarions on the icope ol-protcction alfordcd to Custonrcr or its officcrs, cmployccs, agcnts, ,r authorizcd voluntccrs_
Thc insurance provided to Clustolncr as an ailditional insurcd ntust apply on a prinrary an.l
n()r]-colltributory basis rvith rcspcct t() any insurancc ()r sclf-insurancc pnrgraflr maintaincd
by (iustomcr. Additional insurcd sratus shall continuc lor onc ( l) ycar aftcr thc cxpirarion or
termination ol'this Agreernent or conrpletron ol the Service. A cc(iljcd endorsenrent rrrus(
bc attachcd to all policics statillg that covcragc is prinrary insurarrcc with rcspcct to custonrcr
and its ofJrcers, officials. emplovees, and voluntcers- and that no insurancc ol selt'-insurance
maintaincd by customcr shall bc called upon to contributc ro a loss undcr thc covcragc.
c Lrrcd a CSD shail obtain thc'
rvlittcn appro'" al ofCustotner lbr the self-insuled rctentions and tlcductibles bcltrrc beginning
tnv oI the Service. Durins the term ol- this Agreernent. only upon tl.re pr.ior express r,",ritterr
authorizatiou of Customer, cSD rnay incrcasc such deductiblcs or scltrinsurcd rctentionswith respect (o Customcr, its ofticers. employces. agents. and voluntccls. customcr may
condition approval of atr incrcasc in rlcductiblc or sclt'-insr.rr ccl rctentiotr lcvcls with a
tcrluircrncnt that CSD prucurc a bontl guarantccing paynlcnt of losscs and rclatcd
in\ csligations. clairn adrninislrat ion, antl dcl'cnsc cxpcnscs that is siltisl-actory in all rcspccts
to cach ol thcrn.
Sultontractors tlSll shall includc all subconrractors as insLrrcds
undl-r its policies or shall f'urnish s.parate eertilicatcs antl certitled endorsemenrs tbr each
suhcontractor. All covcragcs for subcontractors shall hc subjcct to all of thc rcquircnrcnts
statcd hcrcin.
g. Variarion. Custorner lnay, but is nol lequited to, approve in writing
a varialion in thc lbrc-qoing insurancc rcquirements. upon a determinalion that thc coYcragc.
scopc, limits. and tbms of such insurancc are either not conurcrcially available, or that
Customer's interests are othe$,ise tully protected.
1.6 Rernedies. In addition to any other rernedies at larv or equily Custorner nray
have if CSD fails to provide or maitrtain any insurancc policies or policy cndorsements to
the extcnt and within the tirne herein rcquired. custorner may- al its sole option. exercise anv
ol'thc lbllorvirrg .crrrcdiss, whiclr ar!'altctrrativcs (u othsr rsmcdics ('uslomcr may havc and
arc not thc sxclusivs rcrnctly litrr CSD's brsach:
a. Obtairr such insurancc and dcduct and rcrain thc amount ol thc
premiums lbr such insurance liotn any sums due under this Agreentent;
b. Order CSD to srop work under this Agrcetnent or withhold any
paymcnt that bccomcs duc to CSD hcrcundcr, or both stop work and withhold any payment.
until CSD demonstrates compliance witlr rhe requirements hcreofi and/or
c. Tcrnrinate tlris Agr-cerncnt.
il
Docusign Envelope lD CF481 587-64D9-45E0 9854 819FF0347878
r3