Loading...
HomeMy WebLinkAboutCenter for Internet Security Inc; 2023-09-11;CIS Contract#: CIS-SBS-9576 PURCHASE AGREEMENT FOR ALBERT MONITORING & MANAGEMENT SERVICES This PURCHASE AGREEMENT (Agreement) by and between the Center for Internet Security, Inc. (“CIS”), located at 31 Tech Valley Drive, East Greenbush, NY 12061- 4134, and City of Carlsbad (“Customer”) with its principal place of business at: 1635 Faraday Ave, Carlsbad, California 92008 for Albert Monitoring & Management Services, as defined herein below (CIS and Customer each a “Party” and collectively referred to as the “Parties”). NOW, THEREFORE, in consideration of the mutual covenants contained herein, the Parties do hereby agree as follows: I. Definitions A. Albert Monitoring & Management Services. Albert network monitoring uses intrusion detection system technology in conjunction with expert analysis of related data; event notification; delivery and management of associated devices, including all software necessary for service delivery. Also referred to as “Services.” B. Security Operation Center (SOC). 24 X 7 X 365 watch and warning center that provides Albert event analysis and threat notification for Services, dissemination of cyber threat alerts, vendor patch notifications, cybersecurity advisories with threat intelligence, vulnerability identification and mitigation recommendations. II. Selection of Albert Monitoring & Management Services CIS hereby agrees to supply Customer with the Albert Monitoring & Management Services including hardware if so requested by Customer and set forth in an Order, which is attached as Appendix A hereto. Appendix A shall be incorporated and made a part of this Agreement. Additional Albert Monitoring & Management Services may be ordered by Customer during the Term of this Agreement by submitting a written request to CIS; such purchases are also subject to the terms and conditions contained in section IV described below, to the extent applicable. The Service Start Date of subsequent orders for Albert Monitoring & Management Services will be dependent upon CIS receiving sufficient information to begin services, but shall terminate as of the end of the applicable Term, as specified in Section V below. III. Consideration, Payment Terms A. Consideration; Payment for Initial Term. As consideration for the Albert Monitoring & Management Services requested by Customer, Customer hereby agrees to pay to CIS the costs for the Albert Monitoring & Management Services as specified in Appendix A, which shall be incorporated and made a part of this Agreement. CIS shall invoice Customer for the Albert Monitoring & Management Services. Unless otherwise agreed DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 to by the Parties in writing, Customer shall pay CIS in full within 30 days of receipt of invoice. B. Pricing for Subsequent Terms. At least thirty (30) days prior to the end of any Term of this Agreement, CIS shall provide Customer with updated pricing for Albert Monitoring & Management Services to apply for the subsequent Term. If the parties agree to extend the original term of this Agreement through a written amendment, the amendment will incorporate the updated pricing for the subsequent Term. Any such price increase shall not exceed 3%. The parties agree to update Appendix A to incorporate the updated pricing for the subsequent Term. This fee shall be due to CIS no later than the last day of the then-current Term. C. Review of Network Utilization. The Parties recognize that the pricing set forth in Appendix A is based on good faith estimates of network utilization provided to CIS by Customer. During the Term of this Agreement and any subsequent Renewal Terms, CIS shall have the right, but not the obligation, to review Customer’s daily average network utilization to determine whether such actual utilization meets or exceeds the utilization parameters agreed to in Appendix A. CIS shall have the right to increase the pricing set forth in Appendix A if Customer’s daily average network utilization exceeds the utilization limit of the pricing category on which Customer’s then-current pricing is based. Such price increase shall be effective upon renewal, subject to the terms set forth in section III(B) above, and shall reflect the then-current price for the appropriate network utilization. IV. Responsibilities of the Parties The following terms set forth the respective responsibilities of CIS and Customer in establishing and maintaining Albert Monitoring & Management Services. A. CIS Responsibilities. CIS will provide the following as part of the Albert Monitoring & Management Services, as specified below: 1. Monitoring and Event Related Services. CIS will provide the following monitoring and event related services: a. Specifications for the sensor(s)/server(s) to be purchased by Customer for provision of the Albert Monitoring & Management Services. b. Analysis of events from monitored devices for attacks and malicious traffic. c. Analysis of security events. d. Correlation of security data/logs/events with information from other sources. e. Notification of security events per the Escalation Procedures provided by Customer. f. 24/7 telephone (1-866-787-4722) availability for assistance with resolution of security events detected by the Albert Monitoring & Management Services. DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 2. Device Management. For hardware provided by CIS, CIS will be responsible for the correct functioning of devices used as part of Albert Monitoring & Management Services, including ensuring that all upgrades, patches, configuration changes and signature upgrades are applied to such devices. 3. Batch Queries. CIS will process batch queries of Netflow data upon Customer request, with a limit of 10 queries per month per device. CIS maintains flow records for a period of three (3) months. B. Customer Responsibilities 1. Customer acknowledges and agrees that CIS’s ability to perform the Albert Monitoring & Management Services is subject to Customer fulfilling certain responsibilities listed below. Customer acknowledges and agrees that CIS shall not have any responsibility whatsoever to perform or to continue to perform Albert Monitoring & Management Services in the event Customer fails to meet its responsibilities described below. 2. For purposes of this Agreement, Customer acknowledges and agrees that only those security devices supported by CIS fall within the scope of this Agreement. 3. Customer shall provide the sensor(s)/server(s) to be used for Albert Monitoring & Management Services, using the specifications provided by CIS, and in type and numbers as agreed to in this Agreement. Customer shall also provide logistic support in the form of rack space, electricity, Internet connectivity, and any other infrastructure necessary to support communications at Customer’s expense. 4. Customer shall provide the following to CIS prior to the commencement of Albert Monitoring & Management Services and at any time during the Term of the Agreement if the information changes: a. Current network diagrams to facilitate analysis of security events on the portion(s) of Customer’s network being monitored. Network diagrams will need to be revised whenever there is a substantial network change. b. Reasonable assistance to CIS, including, but not limited to, providing all technical information related to the Albert Monitoring Service reasonably requested by CIS, to enable CIS to perform the Albert Monitoring Service for the benefit of Customer. c. Public and Private IP address ranges including a list of servers being monitored including the type, operating system and configuration information, as well as a list of IP ranges and addresses that are not in use by Customer (DarkNet space). d. Completed Pre-Installation Questionnaires (PIQ) in the form provided by CIS. The PIQ will need to be revised whenever there is a change that would affect CIS’s ability to provide the Cyber Device Monitoring Services. e. A completed Escalation Procedure Form including the name, e- mail address, and 24/7 contact information for all designated Points of Contact (POC). DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 f. The name, email address, and telephone numbers for all shipping, installation and security points of contact. 5. During the Term of this Agreement, Customer shall provide the following with respect to any Device Monitoring Services: a. Written notification to CIS SOC (SOC@cisecurity.org) at least thirty (30) days in advance of changes in hardware or network configuration affecting CIS’s ability to provide Albert Monitoring & Management Services. b. Written notification to CIS SOC (SOC@cisecurity.org) at least twelve (12) hours in advance of any scheduled downtime or other network and system administration scheduled tasks that would affect CIS’s ability to provide Albert Monitoring Service. c. A revised Escalation Procedure Form must be submitted when there is a change in status for any POC. d. Sole responsibility for maintaining current maintenance and technical support contracts with Customer’s hardware vendors for any device affected by Albert Monitoring & Management Services. e. Active involvement with CIS SOC to resolve any tickets requiring Customer input or action. f. Reasonable assistance in remotely installing and troubleshooting devices including hardware and communications. 6. If Customer performs recurring vulnerability scans on the Albert sensor(s), Customer shall be required to share any actionable findings from such scans with the CIS Device Engineering team. In addition, any Plans of Actions and Milestones (POA&M) or similarly-titled document or plan of action to resolve or remediate those actionable items must be jointly agreed upon in writing between Customer and CIS. V. Term of this Agreement; Termination A. Term. This Agreement will commence on the last date upon which it is signed by both Parties (the “Effective Date”), and Albert Monitoring & Management Services will start as of the date that all pre-service requirements as set forth in Section IV are met and Monitoring and Management Services are available (the “Service Start Date”). This Agreement shall continue in full force and effect for the period of time set forth in Appendix A, unless otherwise earlier terminated pursuant to the terms of this Section V. This Agreement shall not automatically renew and may renew only upon written agreement between both Parties. B. Termination. Unless otherwise specified in the additional terms and conditions related to the particular Albert Monitoring Service, either Party may terminate this Agreement and any Albert Monitoring Service being provided under this Agreement by providing written notice to the other Party ninety (90) days prior to such termination. DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 VI. Title, Limitation of Warranties and Liability A. Title. CIS will at all times retain title to hardware and software provided to Customer during the Term of this Agreement. Customer shall retain title to all hardware and/or software purchased by Customer to provide Services under this Agreement. If CIS provides hardware to Customer during the Term of this Agreement, upon termination of the Agreement or experience of a hardware failure necessitating replacement, Customer shall be responsible for returning hardware to CIS at CIS’ expense within thirty (30) days of either the termination date or hardware failure. If Customer provides hardware for utilization in the provision of the Services in lieu of provision of hardware from CIS, within 30 days of the termination of Services or upon a hardware failure necessitating replacement, Customer agrees to provide commercially reasonable assistance to CIS to offboard any sensors and to permit CIS to wipe or destroy proprietary information from that hardware. “Proprietary information” shall include, but not be limited to, custom signatures and any configurations made by CIS. During this Agreement, Customer agrees to comply with any request from CIS to identify the physical location of any hardware, whether such hardware is provided by CIS or by Customer. Customer further agrees to notify CIS within thirty (30) calendar days if such hardware moves to a different physical location. The Customer shall own all right, title and interest in its data that is provided to CIS pursuant to this Agreement. Customer hereby grants CIS a non-exclusive, non-transferable license to access and use such data to the extent necessary to provide Albert Monitoring & Management Services under this Agreement. B. LIMITATION OF LIABILITY. CIS DOES NOT ASSUME ANY RESPONSIBILITY OR LIABILITY FOR ANY ACT OR OMISSION OR OTHER PERFORMANCE RELATED TO THE PROVISION OF ALBERT MONITORING & MANAGEMENT SERVICES OR FOR THE ACCURACY OF THE INFORMATION PROVIDED AS PART OF THE SERVICES. THE SERVICES ARE PROVIDED ON AN “AS-IS” BASIS, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED. C. Right to Subcontract. In order to facilitate its performance of the Agreement, CIS may utilize a third-party subcontractor ("Subcontractor") to provide any or all of the services required of it under this Agreement. Prior to any such subcontracting, CIS shall enter into a written agreement with Subcontractor in which Subcontractor accepts responsibility for all obligations that would otherwise be performed by CIS in accordance with the terms of this Agreement. Any written agreement between CIS and Subcontractor shall ensure for the provision of confidential information to require that Subcontractor abides by the same Confidentiality Terms contained herein. Customer may be directed to interact and communicate DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 with Subcontractor at CIS’ direction. VII. Confidentiality Obligation CIS acknowledges that certain confidential or proprietary information may either be provided by Customer to CIS or generated in the performance of the Albert Monitoring & Management Services, including without limitation: information regarding the infrastructure and security of Customer’s information systems; assessments and plans that relate specifically and uniquely to the vulnerability of Customer’s information systems; the results of tests of the security of Customer’s information systems insofar as those results may reveal specific vulnerabilities; or information otherwise marked as confidential by Customer (“Confidential Information”). The Customer acknowledges that it may receive from CIS trade secrets and confidential and proprietary information (“Confidential Information”). Both Parties agree to hold each other’s Confidential Information in confidence to the same extent and the same manner as each Party protects its own confidential information, but in no event will less than reasonable care be provided and a Party’s information will not be released in any identifiable form without the express written permission of such Party or as required pursuant to lawfully authorized subpoena or similar compulsive directive or is required to be disclosed by law, provided that the Customer shall be required to make reasonable efforts, consistent with applicable law, to limit the scope and nature of such required disclosure. CIS shall, however, be permitted to disclose relevant aspects of such Confidential Information to its officers, employees and CIS’s federal partners provided that they agree to protect the Confidential Information to the same extent as required under this Agreement. The Parties agree to use all reasonable steps to ensure that Confidential Information received under this Agreement is not disclosed in violation of this Section VII. The obligations of the Parties pursuant to this paragraph shall survive the termination of this Agreement. Nothing in this Agreement shall prohibit CIS from using aggregated data of its customers in any format for any purpose, provided that such data cannot be identified to or associated with Customer. VIII. Force Majeure Neither Party shall be liable for performance delays or for non-performance due to causes beyond its reasonable control. IX. No Third-Party Rights Except as otherwise expressly stated herein, nothing in this Agreement shall create or give to third parties any claim or right of action of any nature against Customer or CIS. DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 X. Assignment Neither Party may assign their rights and obligations under this Agreement without the prior written approval of the other Party, which approval shall not be unreasonably withheld, conditioned or delayed. This Agreement shall be binding upon and inure to the benefits of each Party and their respective successors and assigns. XI. Notices A. All notices permitted or required hereunder shall be in writing and shall be transmitted either: via certified or registered United States mail, return receipt requested; by facsimile transmission; by personal delivery; by expedited delivery service; or by e-mail with acknowledgement of receipt of the notice. Such notices shall be addressed as follows or to such different addresses as the Parties may from time-to-time designate: CIS Name: CIS Services Address: Center for Internet Security, Inc. 31 Tech Valley Drive East Greenbush, NY 12061-4134 Phone: (518) 880-0766 E-Mail: CIS_Services@cisecurity.org With a copy to legalnotices@cisecurity.org Customer Name: Hendra Gunawan Title: IT Security Manager Address: 1635 Faraday Ave. Carlsbad, California 92008 Phone: 760-602-7549 E-Mail: hendra.gunawan@carlsbadca.gov B. Any such notice shall be deemed to have been given either at the time of personal delivery or, in the case of expedited delivery service or certified or registered United States mail, as of the date of first attempted delivery at the address and in the manner provided herein, or in the case of facsimile transmission or email, upon receipt. C. The Parties may, from time to time, specify any new or different contact information as their address for purpose of receiving notice under this Agreement by giving fifteen (15) days written notice to the other Party sent in accordance herewith. The Parties agree to mutually designate individuals as their respective representatives for the purposes of receiving notices under this Agreement. Additional individuals may be designated in writing by the Parties for purposes of implementation and DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 administration, resolving issues and problems and/or for dispute resolution. XII. Governing Law and Jurisdiction Unless otherwise specifically prohibited by the laws of Customer’s jurisdiction, any disputes arising in connection with this Agreement shall be governed and interpreted by the laws of the State of California without regard to its conflict of law provisions. In the event that the laws of Customer’s jurisdiction require that the laws of that jurisdiction apply to all contracts entered into by Customer, then the laws of that jurisdiction shall apply. XIII. Non-Waiver None of the provisions of this Agreement shall be considered waived by either Party unless such waiver is given in writing by the other Party. No such waiver shall be a waiver or any past or future default, breach or modification of any of the terms, provision, conditions or covenants of the Agreement unless expressly set forth in such waiver. XIV. Entire Agreement; Counterparts; Amendments This Agreement and the appendices attached hereto constitute the entire understanding and agreement between the Parties with respect to the subject matter hereof and replace and supersede all prior understandings, communications, agreements or arrangements between the parties with respect to this subject matter, whether oral or written. This Agreement may be executed in separate counterparts each signed by a Party and such counterparts deemed an executed whole with the full force and effect. Signatures may be exchanged by email or electronic signature and such signatures will be deemed original. This Agreement may only be amended as agreed to in writing by both Parties. Unless otherwise specifically prohibited by the laws of Customer’s jurisdiction, for the avoidance of doubt, and whether or not CIS is deemed under applicable law to have accepted an offer by Customer, CIS objects to and rejects all additional and/or inconsistent terms contained in a Purchase Order (PO) or other similar document submitted by Customer to CIS, incidental to the purchase described herein. Any such terms which are not specifically addressed or referenced in this Agreement are hereby rejected and not agreed to nor consented to by CIS, absent express written acceptance. XV. Partial Invalidity If any provision of this Agreement be adjudged by a court of competent jurisdiction to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that this Agreement shall otherwise remain in full force and effect and enforceable. DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 XVI. Order of Precedence Unless otherwise specifically prohibited by the laws of Customer’s jurisdiction or as otherwise agreed to between the Parties, in the event of a conflict between the terms of this Agreement and any other document executed between the Parties, the following order of precedence shall apply: (1) The terms contained in this Agreement; (2) Appendix A or Invoice provided by CIS to Customer; and (3) Any other document executed and/or agreed to in writing between the Parties. XVII. Supplemental Contract Provisions A. Subcontracting. If CIS subcontracts any of the Services, CIS will be fully responsible to Customer for the acts and omissions of CIS's subcontractor and of the persons either directly or indirectly employed by the subcontractor, as CIS is for the acts and omissions of persons directly employed by CIS. Nothing contained in this Agreement will create any contractual relationship between any subcontractor of CIS and Customer. CIS will be responsible for payment of subcontractors. CIS will bind every subcontractor and every subcontractor of a subcontractor by the terms of this Agreement applicable to CIS's work unless specifically noted to the contrary in the subcontract and approved in writing by Customer. B. Indemnification. CIS agrees to indemnify and hold harmless the Customer and its officers, officials, employees and volunteers from and against all claims, damages, losses and expenses, including attorneys’ fees attributable to the negligence, recklessness, or willful misconduct of CIS, its subcontractor, and their respective employees in the execution of CIS’ obligations under this Agreement. The parties expressly agree that any payment, attorney’s fee, costs or expense Customer incurs or makes to or on behalf of an injured employee under the Customer’s self-administered workers’ compensation is included as a loss, expense or cost for the purposes of this section, and that this section will survive the expiration or early termination of this Agreement. C. Insurance. CIS will obtain and maintain for the duration of the Agreement and any and all amendments, insurance against claims for injuries to persons or damage to property which may arise out of or in connection with performance of the services by CIS or CIS’s agents, representatives, employees or subcontractors. The insurance will be obtained from an insurance carrier admitted and authorized to do business in the State of California. The insurance carrier is required to have a current Best's Key Rating of not less than "A-:VII"; OR with a surplus line insurer on the State of California’s List of Approved Surplus Line Insurers (LASLI) with a rating in the latest Best’s Key Rating Guide of at least “A:X”; OR an alien non- admitted insurer listed by the National Association of Insurance Commissioners (NAIC) latest quarterly listings report. DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 1. Coverage and Limits. CIS will maintain the types of coverage and minimum limits indicated below, unless the Risk Manager or City Manager approves a lower amount. These minimum amounts of coverage will not constitute any limitations or cap on CIS's indemnification obligations under this Agreement. Customer, its officers, agents and employees make no representation that the limits of the insurance specified to be carried by CIS pursuant to this Agreement are adequate to protect CIS. If CIS believes that any required insurance coverage is inadequate, CIS will obtain such additional insurance coverage, as CIS deems adequate, at CIS's sole expense. The full limits available to the named insured shall also be available and applicable to the Customer as an additional insured. a. Commercial General Liability (CGL) Insurance. Insurance written on an “occurrence” basis, including personal & advertising injury, with limits no less than $1,000,000 per occurrence, $2,000,000 aggregate. If a general aggregate limit applies, either the general aggregate limit shall apply separately to this project/location or the general aggregate limit shall be twice the required occurrence limit. b. Workers' Compensation and Employer's Liability. Workers' Compensation limits as required by the relevant jurisdiction. c. Customer will be named as an additional insured on Commercial General Liability which shall provide primary coverage to the Customer. d. CIS will obtain occurrence coverage, excluding Professional Liability, which will be written as claims-made coverage. c. This insurance will be in force during the life of the Agreement and any extensions of it and will not be canceled by CIS without thirty (30) days prior written notice to Customer sent by certified mail pursuant to the Notice provisions of this Agreement. 2. Providing Certificates of Insurance and Endorsements. Upon Customer’s written request, CIS will furnish certificates of insurance and endorsements. 3. Submission of Insurance Policies. Upon written request by Customer, CIS will provide a copy of the insurance policies and endorsements described herein. D. Business License. CIS will obtain and maintain a City of Carlsbad Business License for the term of the Agreement, as may be amended from time-to-time. E. Accounting Records. CIS will maintain complete and accurate records with respect to costs incurred under this Agreement. All records will be clearly identifiable. If and to the extent required under applicable law, CIS DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 will make available such business records relating uniquely to this Agreement for inspection by the appropriate person so designated by law to complete the review. F. General Compliance with Laws. CIS will keep fully informed of federal, state and local laws and ordinances and regulations which in any manner affect those employed by CIS, or in any way affect the performance of the Services by CIS. CIS will at all times observe and comply with any applicable laws, ordinances, and regulations and will be responsible for the compliance of CIS's services with all applicable laws, ordinances and regulations. G. Discrimination and Harassment Prohibited. CIS will comply with all applicable local, state and federal laws and regulations prohibiting discrimination and harassment. H. Dispute Resolution. If a dispute should arise regarding the performance of the Services, the following procedure will be used to resolve any questions of fact or interpretation not otherwise settled by agreement between the parties. Representatives of CIS or Customer will reduce such questions, and their respective views, to writing. A copy of such documented dispute will be forwarded to both parties involved along with recommended methods of resolution, which would be of benefit to both parties. The representative receiving the letter will reply to the letter along with a recommended method of resolution within ten (10) business days. If the resolution thus obtained is unsatisfactory to the aggrieved party, a letter outlining the disputes will be forwarded to the City Manager. The City Manager will consider the facts and solutions recommended by each party and may then opt to direct a solution to the problem. In such cases, the action of the City Manager will be binding upon the parties involved, although nothing in this procedure will prohibit the parties from seeking remedies available to them at law. I. Covenant Against Contingent Fees. CIS warrants that CIS has not employed or retained any company or person, other than a bona fide employee working for CIS, to solicit or secure this Agreement, and that CIS has not paid or agreed to pay any company or person, other than a bona fide employee, any fee, commission, percentage, brokerage fee, gift, or any other consideration contingent upon, or resulting from, the award or making of this Agreement. For breach or violation of this warranty, Customer will have the right to annul this Agreement without liability, or, in its discretion, to deduct from the Agreement price or consideration, or otherwise recover, the full amount of the fee, commission, percentage, brokerage fees, gift, or contingent fee. J. False Claims Act. CIS acknowledges that if a false claim is submitted to Customer, it may be considered fraud and CIS may be subject to criminal prosecution. CIS acknowledges that California Government Code sections 12650 et seq., the False Claims Act applies to this Agreement and, provides for civil penalties where a person knowingly submits a false claim to a public entity. These provisions include false claims made with deliberate ignorance of the false information or in reckless disregard of the truth or falsity of DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 information. If Customer seeks to recover penalties pursuant to the False Claims Act, it is entitled to recover its litigation costs, including attorney's fees. CIS acknowledges that the filing of a false claim may subject CIS to an administrative debarment proceeding as the result of which CIS may be prevented to act as a CIS on any public work or improvement for a period of up to five (5) years. CIS acknowledges debarment by another jurisdiction is grounds for Customer to terminate this Agreement. /// /// /// /// /// /// /// /// /// /// /// /// /// /// /// DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B CIS Contract#: CIS-SBS-9576 K. Authority. The individuals executing this Agreement and the instruments referenced in it on behalf of CIS each represent and warrant that they have the legal power, right and actual authority to bind CIS to the terms and conditions of this Agreement. The foregoing has been agreed to and accepted by the authorized representatives of each Party whose signatures appear below: City of Carlsbad Center for Internet Security, Inc. By: By: /fullname1/ /fullname2/ Printed Name Printed Name /sign1/ /sign2/ Signature Signature \signeddate1\ \signeddate2\ Date Signed Date Signed ATTEST: SHERRY FREISINGER City Clerk APPROVED AS TO FORM: CINDIE K. McMAHON, City Attorney BY: _____________________________ Deputy City Attorney Contract Version Date: 8/14/2023 DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B 9/7/2023 Mel WalkerJoe Stephenson 9/11/2023 for Page 1 of 2 List Price Total: $73,440.00 Sales Price Total: $73,440.00 Net Amount: $73,440.00 Balance Due Amount: $73,440.00 Center for Internet Security, Inc. 31 Tech Valley Drive East Greenbush, New York 12061 United States ORDER for City of Carlsbad Order: SO-230727-0043205 Created Date: 7/27/2023 Valid Through: 11/24/2023 Prepared by: Ryan Lower Phone: (518) 640-3613 Order Address Information Bill To: City of Carlsbad 1635 Faraday Ave Carlsbad, California 92008 United States Ship To: City of Carlsbad 1635 Faraday Ave Carlsbad, California 92008 United States Hendra GunawanBuying Contact: hendra.gunawan@carlsbadca.govBuying Email: Hendra GunawanShipping Contact: hendra.gunawan@carlsbadca.govShipping Email: Related Information USDCurrency: AnnuallyBilling Frequency: Service Lines Product/Service Product Code Description Date Qty Term List Price Sales Price NET CIS Albert SM Monitoring Primary Sensor CIS-ALB-SM-MON-PR-M-A Sensor 1 - 11/9/2023 11/8/2026 1 36 Mon $890.00 $890.00 $32,040.00 CIS Albert MD Monitoring Primary Sensor CIS-ALB-MD-MON-PR-M-A Sensor 2 - 11/9/2023 11/8/2026 1 36 Mon $1,150.00 $1,150.00 $41,400.00 Standard Terms Please note that if the purchase(s) listed above are related to a new product/service, the Date(s) are determined based upon both the order being approved and all pre service requirements met. If the purchase(s) listed above are for a renewing product/service, the Date(s) reflect the actual term. The fees are listed in USD and do not include any taxes (including but not limited to VAT or withholding taxes) or fees to be collected by a taxing jurisdiction, financial institution or payment processor incidental to the payment of the Balance Due Amount. If Customer is located in a country with applicable VAT/Withholding taxes, Customer is required to declare and make the VAT/Withholding payment. Once Customer makes the required VAT/Withholding payment, a copy of the receipt will be provided to CIS for our records. Your acceptance of this Order shall constitute your intent to proceed with the purchase of the product or service listed above. Customer: City of Carlsbad Signature Name Title Date Appendix A Annual Payments: $24,480.00 DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B ~-, c nt rforlnw~ t Page 2 of 2 All rights reserved. Copyright Center for Internet Security, Inc. DocuSign Envelope ID: 88F32298-D617-4698-8370-2EBDF01AD61B