Orange County NC Website
25 <br /> Orange County,NC August 8,2024 <br /> ASTRO®25 Advanced Services Statement of Work <br /> Motorola Responsibilities <br /> • Upon the identification of an IoC, notify the Customer's documented contact and initiate the <br /> escalation plan. <br /> • Take documented, Customer approved actions in an attempt to contain an IoC to the extent <br /> enabled via Motorola managed technology. Communicate to the Customer any additional <br /> potential containment actions and incident response resources that can be taken across the <br /> Customer's managed IT infrastructure. <br /> • Perform investigation using the ActiveEye MDR integrated and enabled data sources in an initial <br /> attempt to determine the extent of an IoC. <br /> • Document and share IoC and artifacts discovered during investigation. Motorola services <br /> exclude performing on-site data collection or official forensic capture activities on physical <br /> devices. <br /> Customer Responsibilities <br /> • Maintain one named PoC to coordinate regular team discussions and organize data collection <br /> and capture across the Customer and Motorola teams. <br /> • If determined to be required by Customer, contract an Incident Response service provider to <br /> perform procedures beyond the scope of this Agreement such as forensic data capture, <br /> additional malware removal, system recovery, ransomware payment negotiation, law <br /> enforcement engagement, insurance provider communications, identify patient zero, etc. <br /> 4.1.1.5.5 Event Response and Notification <br /> Motorola will analyze events created and/or aggregated by the Service, assess their type, and notify the <br /> Customer in accordance with the following table. <br /> Table 4-1: Event Handling <br /> Notification <br /> False Positive or Any event(s) determined by Motorola to not None <br /> Benign likely have a negative security impact on <br /> the organization. <br /> Event of Interest Any event(s) determined by Motorola to Escalate to Customer in accordance with <br /> (EOI) likely have a negative security impact on routine notification procedure. <br /> the organization. Escalate in accordance with urgent <br /> notification procedure when required by <br /> agreed-upon thresholds and SOC <br /> analysis. <br /> Notification procedures are included in <br /> Table 4-2: Notification Procedures. <br /> Notification <br /> Motorola will establish notification procedures with the Customer, generally categorized in accordance <br /> with the following table. <br /> ®MOTOROLA SOLUTIONS <br /> Advanced Services Detailed Description <br /> Use or disclosure of this proposal is subject to the restrictions on the cover page. <br /> Motorola Solutions <br /> Page 14 <br />