Managed Firewall Security Services (MFSS) SOW - ESecurity Solutions

Managed Endpoint Protection (MEP) SOWEXHIBIT A2Managed Endpoint Protection (MEP) SOW1.0 MANAGED ENDPOINT PLANSMEP plans are listed below. These plans may be amended at any time to add, change or remove services andprovide updated plans. Core service functionality for plan components is described herein. Please refer towww.eSecuritySolutions.com for the latest plan services components. These plans apply to Company MASofferings such as Trend Micro WFBS and other products.2.0 DETAILED SCOPE OF SERVICES (All Plans)2.12.2Licenses of Cloud Hosted (Vendor Hosted) products are issued usually within one to four hours after avalidated order is received by customer. All other licenses are issued usually with one to two daysafter a validated order is received by customer.License Management: The following is managed related to customer licenses.

Managed Endpoint Protection (MEP) SOW2.2.12.2.22.2.32.2.42.2.52.32.4New licensesAdditional and removal of licensesCurrent number of licenseLicenses start datesLicense end datesFlex Billing: Flex Billing allows customers to pay monthly, quarterly or annually to match their cashand expense requirements. Payment, plan terms and adjustments are described in the Base Servicesagreement.Technical Support: Tier 1 Support provided by Company trained staff. Company staff is backed up bypriority vendor technical support staffs.2.4.1 Tasks include2.4.1.1 Responding to customer:2.4.1.1.1Installation questions2.4.1.1.2Operational questions2.4.1.1.3Threat or infection questions2.4.1.1.4Installation change questions2.4.1.1.5Product questions2.4.2Scope / SLA: Issues will create alerts to Company escalation contacts based on the priority of the incidents. Alerts will be first analyzed by the Company response team and actionable alerts will be converted totickets and responded to within the contracted response agreement timeframe. Actionable alerts are responded to within four (4) hours during Business Hours (see definition). Online reports will reflect system status and any system recorded alerts (See Reporting) For any incidents that require on-site presence or actions, Customer will be contacted for resolution. Customer support related to the contracted services will be provided during for following times andavailability. Support is provided either by email, online ticketing system or by phone. Custom Services Requests will be billed at 250 per hour or quoted on a project basis upon request.Below are the terminologies used for support services.DefinitionDaysService TimingsAvailabilityBusiness HoursMonday through Friday8:00 am PST to 6:00 pm PSTYes, email and phoneOff Business HoursMonday through Friday6:00 pm PST to 8:00 am PSTWeekend HoursSaturday and SundayEmergency Service available atCustom Services Hourly Rate 250 per hour6:00 pm PST Friday to 8:00 amPST MondayNote: All hours mentioned are client local U.S. hours.2.52.6Security Notifications: Informative communications with customers notifying them of potentialsecurity risks, threats or issues they should be aware of that will help mitigate future or current risks.These notifications will come in the form of emails to the authorized contact for the customer.Installation, Deployment, Setup, Configuration, Maintain and Adjust2.6.1Tasks include2.6.1.1 Customer survey re: information related to IT infrastructure for install2.6.1.2 Coordination with customer personnel (IT professional) re: any issues that facilitate installation2.6.1.3 Installation and setup of AV management server and console2.6.1.4 Guidance deploying licenses/contracted AV product(s) into customer environment per sales order2.6.1.5 Setup and configuration of server and clients settings per best security practices2.6.1.6 Adjustments to security policy per security threats, customer requests or circumstances.

Managed Endpoint Protection (MEP) SOW2.6.2Scope / SLA: Issues will create alerts to Company and Customer with escalation and management per Support SLA.2.6.3Customer ResponsibilityCustomer should make sure that the following things are provided to make sure that this service isinstalled and delivered uninterrupted Customer must complete the Customer survey providing accurate information related to the necessaryenvironment and requirements so that service may be configured properly. Customer to provide a single point of contact for installation configuration requirements. Customer must provide a server computer suitable for installation of the management server (ifrequired) in the Customer environment with the remote guidance of Company’ managed services staff.Not required for hosted management solutions. Customer is responsible for deploying the endpoint security agent on all systems (servers, workstations,laptops, mobile devices, etc ) with the remote guidance of Company’ managed services staff. Customer is responsible for damage cleanup and virus removal on systems. Company’ managed servicestaff does not provide these services. Customer is responsible for the overall health of systems. Company does not guarantee endpointsecurity agents compatibility with systems and software. Compatibility issues with systems and softwareand endpoint security agents must be handled with the vendors directly. Company provides optionalNOC and Helpdesk support using 3rd party security vendors.2.7Monitor and AlertThe goal of managed services it to provide security services without the need for customer involvement on a dailybasis, However, alerts to Customers is provided whenever it is necessary or deemed important as described below.2.7.1Tasks include monitoring customer installation to ensure: Installed clients are online Installed clients are at current software levels Installed clients have current detection pattern updates installed Client licenses are current and functioning Security events are managed and remediation has occurred (log report inspection) Security Threats are mitigated User Policy Violations are managed and alerted if necessary2.7.2Event Log Monitoring Scope / SLA: Monitoring is 10 x 5 and responded to automatically based upon the incident priority. Optional Monitoring Available - 24 x 7 and responded to automatically based upon the incident priority. Issues will create alerts to Company with escalation and management per Support SLA.2.7.3Deliverable Actionable alerts will be prioritized and worked to resolution. Alerts will be delivered as soon as ispracticable to Customers to notify customer of potential issues and action responses required whenrequired.2.8Reporting and Reporting AssistanceAV Reporting is primarily done via an online report portal accessible to customers and reflects historic threats,mitigation and system status. Since the AV service will manage these issues, customers will not normally need toview this information on a regular basis. For Compliance purposes, this information is available as required.2.8.1Tasks include: Online access to current Antimalware and Endpoint system reports Assistance with custom report generation (see Services Plan) Report log access as required. Customers with specific requirements should notify Company in advanceof the need.2.8.2Event Log Monitoring Scope / SLA: Online reports are available 24 x 7 Support is provided per the Support SLA.2.8.3Deliverable Online reports. Reporting and log support as defined in this section and per the support SLA.

Managed Data/System BDR Services (MBDR) SOWEXHIBIT A3Managed Data/System BDR Services (MBDR) SOW1.0 MANAGED SYSTEM / DATA BACKUP PLANMDBAK plan is listed below. The plan may be amended at any time to add, change or remove services and provide updatedplan. Core service functionality for plan components is described herein. Please refer to www.eSecuritySolutions.com forthe latest plan services components.SERVICES PROVIDEDRapid Account ProvisioningPolicy DefinitionRemote Installation & Configuration Remote Deployment Setup/Configuration per PoliciesCreate Backups as required by PolicyVerify Validity of BackupsTest Restore functionLicense Management (& Adjustments)SupportMaintain/Adjust Configuration as necessary Tier 1 Company Data Restore / Disaster Recovery WhenRequiredMonitor & Alert Provide Standard Reports, Assist withCompliance or other Reporting 2.0 DETAILED SCOPE OF SERVICES (All Plans)2.9Rapid Account Provisioning: The following is managed related to customer licenses.2.9.12.9.22.9.32.9.42.9.5New data backup accountsAdditional and removal of storageLicenses start datesLicense end datesAdditional features to be licensed2.10 Flex Billing: Flex Billing allows customers to pay monthly, quarterly or annually to match their cashand expense requirements. Payment, plan terms and adjustments are described in the Base Servicesagreement.

Managed Data/System BDR Services (MBDR) SOW2.11 Support: Tier 1 Support provided by Company trained staff.2.11.1 Tasks include2.11.1.1 Responding to customer:2.11.1.1.1Installation questions2.11.1.1.2Operational questions2.11.1.1.3Installation change questions2.11.1.1.4Product questions2.11.2 Scope / SLA: Issues will create alerts to Company escalation contacts based on the priority of the incidents. Alerts will be first analyzed by the Company response team and actionable alerts will be converted totickets and responded to within the contracted response agreement timeframe. Actionable alerts are responded to within four (4) hours during Business Hours (see definition). Online reports will reflect system status and any system recorded alerts (See Reporting) For any incidents that require on-site presence or actions, Customer will be contacted for resolution. Customer support related to the contracted services will be provided during for following times andavailability. Support is provided either by email, online ticketing system or by phone. Custom Services Requests will be billed at 250 per hour or quoted on a project basis upon request.Below are the terminologies used for support services.DefinitionDaysService TimingsAvailabilityBusiness HoursMonday through Friday8:00 am PST to 6:00 pm PSTYes, email and phoneOff Business HoursMonday through Friday6:00 pm PST to 8:00 am PSTWeekend HoursSaturday and SundayEmergency Service available atCustom Services Hourly Rate 250 per hour6:00 pm PST Friday to 8:00 amPST MondayNote: All hours mentioned are client local U.S. hours.2.12 Installation, Deployment, Setup, Configuration, Maintain and Adjust2.12.1 Tasks include2.12.1.1 Customer survey re: necessary data to backup.2.12.1.2 Installation and setup of backup software, management and agents2.12.1.3 Back job creation & Scheduling2.12.1.4 Coordination with customer personnel re: any issues that facilitate installation2.12.1.5 Remote deployment of software agents per backup strategy2.12.1.6 Setup and configuration of management, alerts and client agents per best security practices2.12.1.7 Adjustments to security policy per customer driven requests or circumstance changes.2.12.1.8 Install software agent updates as required to provide appropriate functionality2.12.2 Scope / SLA: Issues will create alerts to Company with escalation and management per Support SLA.2.12.3 Customer ResponsibilityCustomer should make sure that the following things are provided to make sure that this service isinstalled and delivered uninterrupted Customer must complete the Customer survey providing accurate information related to thenecessary environment and requirements so that service may be configured properly. Customer to provide a single point of contact for installation configuration requirements. Customer must provide a server computer suitable for installation of the management server (ifrequired) in the Customer environment with the remote guidance of Company’ managed servicesstaff. Not required for hosted management solutions.

Managed Data/System BDR Services (MBDR) SOW2.13 Data Restore / Disaster Recovery2.13.1 Tasks Include Assist customer in defining necessary data to restore Restore customer data from previously backed up data2.1Monitor and AlertThe goal of managed services it to provide security services without the need for customer involvement on a dailybasis, However, alerts to Customers is provided whenever it is necessary or deemed important as described below.2.13.2 Tasks include monitoring customer installation to ensure: Installed clients are online Installed clients are at current software levels Installed clients have current detection pattern updates installed Client licenses are current and functioning Security events are managed and remediation has occured (log report inspection) Security Threats are mitigated User Policy Violations are managed and alerted if necessary2.13.3 Event Log Monitoring Scope / SLA: Monitoring is 24 x 7 and responded to automatically based upon the incident priority. Issues will create alerts to Company with escalation and management per Support SLA.2.13.4 DeliverableActionable alerts will be prioritized and worked to resolution. Alerts will be delivered as soon as ispracticable to Customers to notify customer of potential issues and action responses required whenrequired.2.14 Reporting and Reporting AssistanceReporting is done via online report portal & local management software accessible to customers and reflectsbackup jobs, available storage and backup status. Since the AV service will manage these issues, customers will notnormally need to view this information on a regular basis. For Compliance purposes, this information is available asrequired.2.14.1 Tasks include: Online access to current AV system reports Assistance with custom report generation (see Services Plan) Report log access as required. Customers with specific requirements should notify Company in advanceof the need.2.14.2 Event Log Monitoring Scope / SLA: Online reports are available 24 x 7 Support is provided per the Support SLA.2.14.3 DeliverableOnline reports. Reporting and log support as defined in this section and per the support SLA.

Managed Alert Logic Services SOWSTATEMENT OF WORK - EXHIBIT A4Article 1 - General1) Alert Logic Managed Compliance Services provide any or all of the following compliance aiding services as provided byAlert Logic as contracted by Customer in the Services Order.a) Alert Logic Threat manager – Intrusion detection and vulnerability assessmentb) Alert Logic Active Watch – 24 x 7 monitoring and expert guidance servicesc) Alert Logic Log Manager – Collect, search, analyze and report on consolidated log datad) Log Review – PCI DSS compliant log analysis, alerting, audit trail and reportinge) Other Alert Logic Managed ServicesAdditional details about Alert Logic managed services are provided in the Alert Logic Detailed Services Descriptionsdocument available from Alert Logic. Services terms and conditions for these services are defined in this Exhibit andthe MSA.Article 2 – Service Level AgreementService Warranties.(a) Service Level Warranty. Subject to the exceptions set forth herein, Alert Logic warrants that it will provide eachService at or above the service levels defined below (the “Service Level Warranty”):(i) Alert Logic will provide 99.9% reliability for its hosted services. The 99.9% reliability is calculated bydetermining the total time in minutes for a month, subtracting all planned maintenance time, and then dividing all unplanneddowntime of the hosted services by the remaining time. Alert Logic’s obligations under this MSA are in effect during all hoursof operation, except during planned maintenance windows and any approved additional maintenance windows scheduled byAlert Logic.(ii) Alert Logic will notify Customer at least 3 days in advance of any additional planned maintenance occurringoutside of the standard maintenance window and make efforts to accommodate Customer’s needs regarding the additionalmaintenance requirement. Alert Logic will provide Customer as much notice as possible when unplanned (“Emergency”)maintenance occurs.(iii) For Customers purchasing ActiveWatch, for all environments for which ActiveWatch services are deployedand properly configured (“Protected Environments”), Alert Logic will escalate detected security incidents for ProtectedEnvironments within 15 minutes of their occurrence. Alert Logic 15 minute incident SLA is measured from when Alert Logicidentifies an incident to the time of initial escalation to the primary customer contact via automated system log, email, orphone call.(iv) For Customers purchasing review services (e.g., LogReview), Alert Logic will (a) Review data for the priorday within 24 hours, (b) escalate potential security incidents to Customer upon detection and (c) maintain an audit trail ofreview activity on a daily basis that is accessible online.(v) Alert Logic will respond to properly submitted service requests within 2 hours of receipt and either resolve orescalate properly submitted service requests within 24 hours of receipt. Service requests must be submitted via web portal, email or telephone.(vi) Initial response time for support requests related to Inline Devices will be within 15 minutes. The InlineDevices must be online and accessible to Alert Logic for support to be provided. For support requests related to potential blockevents, Customer must provide Alert Logic with the Incident ID found on the blocking page of the Web Security Managerproduct.(vii) Customer must provide up-to-date SSL certificates and keys in order for Alert Logic to tune or configure theWeb Security Manager and Threat Manager products for monitoring and protection of HTTPS traffic.(viii) For Web Security Manager, Log Manager or Threat Manager instances deployed on Customer hardware,Alert Logic will not be responsible for any hardware-related issues and if not deployed on minimum recommended hardwarespecifications, Alert Logic will not be responsible for supporting degradation of performance.If Alert Logic Cloud Defender is fully provisioned to utilize Threat Manager, Log Manager and out-of-band Web SecurityManager, Alert Logic warrants that it will provide Service at or above the service levels (i), (ii), (iii), (v), (vii) and (viii),defined above.

Other Managed Security ServicesReliability for Hosted ServicesMonthly Uptime PercentageService Credit Percentage 99.9%10% 95%25%ActiveWatch 15-Minute Escalation CommitmentMonthly FailuresS

Deliverable: Firewall installed per customer's requirements, according to Supported Firewall Configurations and Service Order. 2.1.2 FIREWALL MAINTENANCE Tasks include: Updates to firewall firmware as deemed necessary by Company to keep firewall operating efficiently, securely and with latest usable features and management capabilities.