2019-182-E IT - SecureWorks Emergency Incident Response Services

Browse Search

DocuSign Envelope ID:OADE138B-093C-4937-85B5-78AC72BBFDD6 SOW-09122018 The term of the Services for Emergency Incident Response shall commence on the SOW Effective Date and terminate on the earlier to occur of(i)the SOW Term, or(ii) upon exhaustion of the original Committed Hours and completion of any outstanding time and materials billing (the "Services Term"). To the extent that Customer authorizes work effort for an Engagement, and such work effort extends beyond the SOW Term or Services Term, the SOW Term and Services Term shall be extended to the completion of such continued work effort through the date of the Completed Final Report (the"Extended Term"). During such Extended Term, the terms and conditions of this SOW and the MSA shall be in full force and effect. 7 Disclaimers 7.1 Onsite Services Notwithstanding Secureworks' employees' placement at the Customer location, Secureworks retains the right to control the work of such employees. For international travel, onsite Services may require additional documentation, such as visas, visitor invitations, etc. which may affect timing of the Services and reimbursable expenses. 7.2 Security Services Should this SOW include security scanning, testing, assessment, forensics, or remediation Services ("Security Services"), Customer understands that Secureworks may use various methods and software tools to probe network resources for security-related information and to detect actual or potential security flaws and vulnerabilities. Customer hereby authorizes Secureworks to perform such Security Services (and all such tasks and tests reasonably contemplated by or reasonably necessary to perform the Security Services or otherwise approved by Customer from time to time)on network resources with the internet protocol ("IP")Addresses identified by Customer. Customer represents that, if Customer does not own such network resources, it will have obtained consent and authorization from the applicable third party, in form and substance satisfactory to Secureworks, to permit Secureworks to provide the Security Services. Secureworks shall perform the Security Services during a timeframe mutually agreed upon with Customer. The Security Services, such as penetration testing or vulnerability assessments, may also entail buffer overflows, fat pings, operating system specific exploits, and attacks specific to custom coded applications but will exclude intentional and deliberate denial of service ("DoS")attacks. Furthermore, Customer acknowledges that the Security Services described herein could possibly result in service interruptions or degradation regarding the Customer systems and accepts those risks and consequences. Customer hereby consents and authorizes Secureworks to provide any or all the Security Services with respect to the Customer systems. Customer further acknowledges it is Customer responsibility to restore network computer systems to a secure configuration after Secureworks' testing. 7.3 Record Retention Secureworks will retain a copy of the Customer Reports and supporting Customer Data in accordance with Secureworks' record retention policy, which provides such retention for a period commensurate with such Customer Reports and supporting Customer Data usefulness and Secureworks' legal and regulatory requirements and Secureworks' directives. Unless Customer gives Secureworks written notice to the contrary prior thereto, then thirty(30) days after delivery of its final report, Secureworks shall have the right, in its sole discretion, to dispose of all acquired hard drive images and other report backup information acquired in connection with its performance of its obligations under this SOW. Classification://Secureworks/Confidential -Limited External Distribution: //Secureworks/Confidential- Limited External Distribution