15 - Agreement with SpearTip's Shadow Spear Platform

Home Browse Search

Statement of Risk During the course of the engagement, there may be several procedural points that the City of Paris Texas must be aware of, including: 1. During the course of the engagement, there may be findings and recommendations documented and relayed to City of Paris Texas. Due to the pervasiveness of zero -day malware and the inability to create a guaranteed and impenetrable protective barrier, SpearTip, L.L.C. cannot be held liable for an intrusion or breach within City of Paris Texas's environment. The nature of all SpearTip, L.L.C. findings and recommendations may or may not have a direct or immediate impact on City of Paris Texas; therefore, SpearTip, L.L.C. cannot be held liable for any action related to findings or recommendations identified during the course of this engagement. 2. SpearTip, L.L.C. follows industry best practice and, based on significant experience, makes every effort to reduce the chance of service disruption while conducting security activity. As a result of the security activity and depending on several factors, including the age of the equipment or outdated software, the possibility exists that service disruptions could occur. If detectable and the activity appears or is reported to be causing a real or suspected disruption to City of Paris Texas's activities, operations, or production systems, SpearTip, L.L.C. will immediately halt the activity and notify City of Paris Texas. Due to the critical nature of this scope of work, it is imperative that City of Paris Texas understands and accepts the associated risks. 3. SpearTip's ability to monitor City of Paris Texas's environment depends in large part on software sensors. During this engagement, City of Paris Texas will be responsible for installing software sensors and resolving sensor health issues. SpearTip will report any detectable sensor health issues to City of Paris Texas within the Monthly Report. Further, SpearTip has low visibility on devices that do not have a sensor installed. No City of Paris Texas node, host, or endpoint should be left out of the deployment. Doing so could create a "blind spot" within City of Paris Texas's network and prevent SpearTip from effectively detecting and responding to malicious activity. SpearTip is not responsible for devices or software not monitored by a software sensor deployed within the environment. Affirmation of Understanding City of Paris Texas understands that SpearTip has agreed not to divulge any information regarding the details of the engagement or evidence collected to any third party not covered by a Partner Non -Disclosure Agreement without the explicit written authorization of the designated primary contact and authorizing agent or chief officer of the Partner's organization. SpearTip agrees to provide full and complete disclosure of all information gathered during the course of the engagement, including copies of raw data, and will keep the organization informed of all activities, operations, and proceedings of the engagement. City of Paris Texas agrees to provide open avenues for communication and timely response to communications during the engagement. City of Paris Texas grants SpearTip permission to perform research, make recommendations, follow the course of action within the scope of work. City of Paris Texas understands and agrees to the Statement of Risk and Project Terms as contained in this document. The below parties have reviewed the attached document (including the incorporated terms and conditions) and agree to the stated scope and price of work and associated terms and assumptions. Name: Initials: