Laserfiche WebLink
Exhibit A: Description of Services <br />Statement of Work <br />Information Security Services and Products <br />Provided by <br />Digital Defense, Inc. <br />This Statement of Work (SOW) defines the services and products offered to you by Digital Defense, Inc. The <br />following pages detail each individual service/product. <br />The Prerace sections below define certain aspects common to the various available service options, in the interest <br />of keeping the detailed statements of work that follow as brief and non -repetitious as possible. <br />Preface: <br />Applicable to Frontline Basic Frontline Advanced., frontline Pro Frontline PC[ Pro, Frontline WAS <br />Frontline Pen Assessment and Frontline Pen Test Subscriptions <br />Responsibilities <br />At contract execution, the contracting organization will complete a Pre -Assessment Questionnaire (PAQ) that <br />provides the IP addresses that contain the devices for which the client would like for Digital Defense to test. Upon <br />receipt of the completed PAQ, Digital Defense will begin a three-phase process to turn up service(s) ordered. These <br />three phases are Design, Build, and Operate. <br />0 Design Phase <br />Based on PAQ information, Digital Defense will provision a Frontline account for the client. Digital Defense <br />will also assign a Client Advocate and/or a Personal Security Analyst (Frontline Pro) to the project during this <br />phase. The Advocate and/or Analyst will contact the client to scope the engagement and capture any specific <br />requests (e.g. desired hours of execution, key system test requirements, etc.) from the client. <br />0 Build Phase <br />Once the optimum design has been determined, Digital Defense will begin programming the system for initial <br />use by the client. Digital Defense will also configure the Frontline.Cloud suite accounts for the client's users. <br />In addition, Digital Defense will configure and ship the Reconnaissance Network Appliance (RNA) device(s) <br />assuming that the client orders internal testing services. The RNA uses the address ranges entered into the <br />Frontline.Cloud suite to determine the scanning boundaries in carrying out the services on client networks. The <br />RNA will interrogate each IP address to determine the presence of a device, and to identify any known <br />vulnerabilities resident on the system. <br />Following RNA device configuration, Digital Defense will ship the RNA to the client for installation on the <br />client network. RNA devices are typically self -installed by clients, but Digital Defense will provide installation <br />services (at additional cost) if the client so desires. <br />• Operate Phase <br />Following the Build Phase, the Frontline.Cloud suite is ready for client use. Digital Defense will train clients <br />on how to utilize the Frontline.Cloud platform, and will provide ongoing support to the client,as required. <br />d,tl Dc'd n e Wnc' 9000 8Osc::m Sifltc 100 ,; w Ai Oimi n I °I," 88871 � iN���i�' <br />