Loading...
The URL can be used to link to this page
Your browser does not support the video tag.
Home
My WebLink
About
2020-083-E IT - Crisis Focus LLC after action reporting
Revised 11/19 1 [Departmental Use Only] TITLE Crisis Focus, LLC FY 20 NORTH CAROLINA SERVICES AGREEMENT NO RFP/RFQ ORANGE COUNTY This Services Agreement (hereinafter “Agreement”), made and entered into this 20th day of January, 2020, (“Effective Date”) by and between Orange County, North Carolina a political subdivision of the State of North Carolina (hereinafter, the "County") and Crisis Focus, LLC, (hereinafter, the "Provider"). WITNESSETH: That the County and Provider, for the consideration herein named, do hereby agree as follows: 1. Services a. Scope of Work. i) This Agreement is for services to be rendered by Provider to County with respect to (insert type of project): Proposal to provide an After Action Reporting (AAR) process and documents for the response phase of the Orange County Cyber Security Incident from 2019 ii) By executing this Agreement, the Provider represents and agrees that Provider is qualified to perform and fully capable of performing and providing the services required or necessary under this Agreement in a fully competent, professional and timely manner. iii) Time is of the essence with respect to this Agreement. iv) The services to be performed under this Agreement consist of Basic Services, as described and designated in Section 3 hereof. Compensation to the Provider for Basic Services under this Agreement shall be as set forth herein. 2. Responsibilities of the Provider a. Services to be provided. The Provider shall provide the County with all services required in Section 3 to satisfactorily complete the Project within the time limitations set forth herein and in accordance with the highest professional standards. b. Standard of Care. i) The Provider shall exercise reasonable care and diligence in performing services under this Agreement in accordance with the highest generally accepted standards of this type of Provider practice throughout the United States and in accordance with applicable federal, state and local laws and regulations applicable to the DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F Revised 11/19 2 performance of these services. Provider is solely responsible for the professional quality, accuracy and timely completion and/or submission of all work related to the Basic Services. ii) Provider shall be responsible for all errors or omissions of its agents, contractors, employees, or assigns in the performance of the Agreement. Provider shall correct any and all errors, omissions, discrepancies, ambiguities, mistakes or conflicts at no additional cost to the County. iii) The Provider shall not, except as otherwise provided for in this Agreement, subcontract the performance of any work under this Agreement without prior written permission of the County. No permission for subcontracting shall create, between the County and the subcontractor, any contract or any other relationship. iv) Provider is an independent contractor of County. Any and all employees of the Provider engaged by the Provider in the performance of any work or services required of the Provider under this Agreement, shall be considered employees or agents of the Provider only and not of the County, and any and all claims that may or might arise under any workers compensation or other law or contract on behalf of said employees while so engaged shall be the sole obligation and responsibility of the Provider. v) If activities related to the performance of this Agreement require specific licenses, certifications, or related credentials Provider represents that it and/or its employees, agents and subcontractors engaged in such activities possess such licenses, certifications, or credentials and that such licenses certifications, or credentials are current, active, and not in a state of suspension or revocation. vi) In determining the Basic Services to be provided, should any documents be referenced in this Agreement, the terms of this Agreement shall have priority in any conflict between the terms of referenced documents and the terms of this Agreement. vii) Should this Agreement involve project designs, the construction or creation of which is to be bid out and/or fulfilled by other contractors, and bidding or negotiation with contractors produce prices which, when added to the other elements of the approved total project cost, produce a cost that is in excess of the approved total project cost, the Provider shall participate with the County in negotiation and design adjustments to the extent such are necessary to obtain prices within the approved total project cost. All activity of the Provider with respect to these matters shall constitute Basic Services and shall be performed by the Provider without additional compensation. If negotiation and design adjustments fail to bring costs within the total project cost the County may reject all bids and Provider will redesign and/or reduce portions of the project in an effort to reduce the bid prices to within the total project cost and rebid the project. One such redesign is included within Basic Services. If this second letting for bids does not produce bids that are within the approved total project cost initially or after negotiations with the contractor the cost is not reduced to an amount DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F Revised 11/19 3 within the total project cost, the Provider is not obligated to engage in further redesign. 3. Basic Services a. Basic Services. The Services to be rendered pursuant to this Agreement are as follows (fully describe services to be provided): In the spring of 2019, a targeted cyber-attack significantly impacted the operations of Orange County’s computer networks. Orange County worked with numerous partners during the following months to respond to and recover from the complex incident. The stakeholders involved with incident support the concept of continual improvement in all systems impacting life safety issues in the community. Therefore, an After Action Reporting process has been requested to ensure that the community continues to improve its response, coordination and collaboration efforts for future events. (See Attachment A) 4. Duration of Services a. Term. The term of this Agreement shall be from February 1, 2020 to August 31, 2020. b. Scheduling of Services. i) The Provider shall schedule and perform its activities in a timely manner. ii) Should the County determine that the Provider is behind schedule, it may require the Provider to expedite and accelerate its efforts, including providing additional resources and working overtime, as necessary, to perform its services in accordance with the approved project schedule at no additional cost to the County. iii) The Commencement Date for the Provider's Basic Services shall be February 1, 2020. 5. Compensation a. Compensation for Basic Services. Compensation for Basic Services shall include all compensation due the Provider from the County for all services satisfactorily (as determined by the County) performed pursuant to this Agreement. The maximum amount payable for Basic Services shall not exceed eleven-thousand-two-hundred-fifty and no/100 Dollars ($11,250.00). Payment for satisfactorily performed Basic Services shall become due and payable within thirty (30) days of Provider properly invoicing County. Payment shall be subject to provisions of Section 5(b). b. Disputes. In the event the amount stated on an invoice is disputed by the County, the County may withhold payment of all or a portion of the amount stated on an invoice until the parties resolve the dispute. Should Provider fail to perform its duties under the terms of this Agreement, County may, without fault or penalty, withhold any payment associated with the work to be performed until such time as said work is completed. c. Additional Services. County shall not be responsible for costs related to any services in addition to the Basic Services performed by Provider unless County requests such DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F Revised 11/19 4 additional services in writing and such additional services are evidenced by a written amendment to this Agreement. 6. Responsibilities of the County a. Cooperation and Coordination. The County has designated (Jim Northrup) to act as the County's representative with respect to the Project and shall have the authority to render decisions within guidelines established by the County Manager and/or the County Board of Commissioners and shall be available during working hours as often as may be reasonably required to render decisions and to furnish information. 7. Insurance a. General Requirements. Provider shall obtain, at its sole expense, Commercial General Liability Insurance, Automobile Insurance, Workers’ Compensation Insurance, and any additional insurance as may be required by County’s Risk Manager as such insurance requirements are described in the Orange County Risk Transfer Policy and Orange County Minimum Insurance Coverage Requirements (each document is incorporated herein by reference and may be viewed at http://www.orangecountync.gov/departments/purchasing_division/contracts.php). If County’s Risk Manager determines additional insurance coverage is required such additional insurance shall consist of N/A (see Attachment B) (if no additional insurance required mark N/A as being not applicable). Provider shall not commence work until such insurance is in effect and certification thereof has been received by the County's Risk Manager. 8. Indemnity a. Indemnity. To the extent authorized by North Carolina law the Provider agrees, without limitation, to defend, indemnify and hold harmless the County from all loss, liability, claims or expense, including attorney's fees, arising out of or related to the Project and arising from property damage or bodily injury including death to any person or persons caused in whole or in part by the negligence or misconduct of the Provider except to the extent same are caused by the negligence or willful misconduct of the County. It is the intent of this provision to require the Provider to indemnify the County to the fullest extent permitted under North Carolina law. 9. Amendments to the Agreement a. Changes in Basic Services. Changes in the Basic Services and entitlement to additional compensation or a change in duration of this Agreement shall be made by a written Amendment to this Agreement executed by the County and the Provider. The Provider shall proceed to perform the Services required by the Amendment only after receiving a fully executed Amendment from the County. 10. Termination DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F Revised 11/19 5 a. Termination for Convenience of the County. This Agreement may be terminated without cause by the County and for its convenience upon seven (7) days’ prior written notice to the Provider. b. Other Termination. The Provider may terminate this Agreement based upon the County's material breach of this Agreement; provided, the County has not taken all reasonable actions to remedy the breach. The Provider shall give the County seven (7) days' prior written notice of its intent to terminate this Agreement for cause. c. Compensation After Termination. i) In the event of termination, the Provider shall be paid that portion of the fees and expenses that it has earned to the date of termination, less any costs or expenses incurred or anticipated to be incurred by the County due to errors or omissions of the Provider. ii) Should this Agreement be terminated, the Provider shall deliver to the County within seven (7) days, at no additional cost, all deliverables including any electronic data or files relating to the Project. d. Waiver. The payment of any sums by the County under this Agreement or the failure of the County to require compliance by the Provider with any provisions of this Agreement or the waiver by the County of any breach of this Agreement shall not constitute a waiver of any claim for damages by the County for any breach of this Agreement or a waiver of any other required compliance with this Agreement. e. Suspension. County may suspend the Basic Services and this Agreement at any time for County’s convenience and without penalty to County upon three (3) days’ notice to Provider. Upon any suspension by County, Provider shall discontinue work on the Basic Services and shall not resume the Basic Services until notified to proceed by County. 11. Additional Provisions a. Limitation and Assignment. The County and the Provider each bind themselves, their successors, assigns and legal representatives to the terms of this Agreement. Neither the County nor the Provider shall assign or transfer its interest in this Agreement without the written consent of the other. b. Governing Law. This Agreement and the duties, responsibilities, obligations and rights of respective parties hereunder shall be governed by the laws of the State of North Carolina. By executing this Agreement Provider affirms that Provider and any subcontractors of Provider are and shall remain in compliance with Article 2 of Chapter 64 of the North Carolina General Statutes. By executing this Agreement Provider certifies that Provider has not been identified, and has not utilized the services of any agent or subcontractor identified, on the list created by the State Treasurer pursuant to G.S. 147-86.58. By executing this Agreement Provider certifies that Provider has not been identified, and has not utilized the services of any agent or subcontractor identified, on the list created by the State Treasurer pursuant to G.S. 147-86.81. DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F Revised 11/19 6 c. Non-Discrimination. Provider shall at all times remain in compliance with all applicable local, state, and federal laws, rules, and regulations including but not limited to all state and federal non-discrimination laws, policies, rules, and regulations and the Orange County Non-Discrimination Policy and Orange County Living Wage Policy (each policy is incorporated herein by reference and may be viewed at http://www.orangecountync.gov/departments/purchasing_division/contracts.php.) Any violation of the Orange County Non-Discrimination Policy is a breach of this Agreement and County may immediately terminate this Agreement without further obligation on the part of the County. This paragraph is not intended to limit and does not limit the definition of breach to discrimination. d. Dispute Resolution. Any and all suits or actions to enforce, interpret or seek damages with respect to any provision of, or the performance or non-performance of, this Agreement shall be brought in the General Court of Justice of North Carolina sitting in Orange County, North Carolina. It is agreed by the parties that no other court shall have jurisdiction or venue with respect to such suits or actions. Binding arbitration may not be initiated by either Party, however, the Parties may agree to nonbinding mediation of any dispute prior to the bringing of such suit or action. e. Entire Agreement. This Agreement represents the entire and integrated agreement between the County and the Provider and supersedes all prior negotiations, representations or agreements, either written or oral. This Agreement may be amended only by written instrument signed by both parties. Modifications may be evidenced by facsimile signatures. f. Severability. If any provision of this Agreement is held as a matter of law to be unenforceable, the remainder of this Agreement shall be valid and binding upon the Parties. g. Ownership of Work Product. Should Provider’s performance of this Agreement generate documents, items or things that are specific to this Project such documents, items or things shall become the property of the County and may be used on any other project without additional compensation to the Provider. The use of the documents, items or things by the County or by any person or entity for any purpose other than the Project as set forth in this Agreement shall be at the full risk of the County. h. Non-Appropriation. Provider acknowledges that County is a governmental entity, and the validity of this Agreement is based upon the availability of public funding under the authority of its statutory mandate. In the event that public funds are unavailable and not appropriated for the performance of County’s obligations under this Agreement, then this Agreement shall automatically expire without penalty to County immediately upon written notice to Provider of the unavailability and non-appropriation of public funds. It is expressly agreed that County shall not activate this non-appropriation provision for its convenience or to circumvent the requirements of this Agreement, but only as an emergency fiscal measure during a substantial fiscal crisis. In the event of a change in the County’s statutory authority, mandate and/or mandated DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F Revised 11/19 7 functions, by state and/or federal legislative or regulatory action, which adversely affects County’s authority to continue its obligations under this Agreement, then this Agreement shall automatically terminate without penalty to County upon written notice to Provider of such limitation or change in County’s legal authority. i. Signatures. This Agreement together with any amendments or modifications may be executed electronically. All electronic signatures affixed hereto evidence the consent of the Parties to utilize electronic signatures and the intent of the Parties to comply with Article 11A and Article 40 of North Carolina General Statute Chapter 66. j. Notices. Any notice required by this Agreement shall be in writing and delivered by certified or registered mail, return receipt requested to the following: Orange County Provider’s Name Attention:Jim Northrup Joseph Moore, Principal P.O. Box 8181 Crisis Focus, LLC Hillsborough, NC 27278 3125 Kathleen Ave, #160 Greensboro, NC 27408 [SIGNATURE PAGE TO FOLLOW] DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F Revised 11/19 8 IN WITNESS WHEREOF, the Parties, by and through their authorized agents, have hereunder set their hands and seal, all as of the day and year first above written. ORANGE COUNTY: PROVIDER: By: _________________________________ Bonnie Hammersley By: __________________________________ Joseph Moore, Principal Printed Name and Title DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F Crisis Focus, LLC 3125 Kathleen Ave #160 Greensboro, NC 27408 Phone: 336-265-5292 E-Mail: sales@crisisfocus.com Web: www.crisisfocus.com January 2020 Orange County 2019 Cyber Incident Response After Action Report Proposal $WWDFKPHQW$ DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F A CRISIS FOCUS page 2 Proposal Overview Request: At the request of Jim Northrup, CIO for Orange County, North Carolina, Crisis Focus, LLC respectfully submits the following proposal to provide an After Action Reporting (AAR) process and documents for the response phase of the Orange County Cyber Security Incident from 2019 Impetus: In the spring of 2019, a targeted cyber-attack significantly impacted the operations of Orange County’s computer networks. Orange County worked with numerous partners during the following months to respond to and recover from the complex incident. The stakeholders involved with incident support the concept of continual improvement in all systems impacting life safety issues in the community. Therefore, an After Action Reporting process has been requested to ensure that the community continues to improve its response, coordination and collaboration efforts for future events. Project Components The sections below describe each key milestones and event proposed by Crisis Focus, LLC to meet the stated goals of the project. Project Planning Meeting Upon project initiation, a meeting with key leadership will take place to finalize project timelines and project deliverables. During this meeting, the key stakeholders will work with Crisis Focus staff to develop the survey instrument(s) for distribution to the larger stakeholder groups. Additionally, key dates and logistics will be set for future project elements. This is anticipated to be a 1-2 hour virtual meeting. Survey Design and Implementation Based on feedback received through the Project Planning Meeting, Crisis Focus will develop the draft survey instrument(s) and distribute them electronically to the Key Stakeholder Group. The stakeholders will have a predetermined time to make any recommended changes or edits to questions before survey finalization. DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F A CRISIS FOCUS page 3 Crisis Focus recommends the development of a single survey with two distinct collector groups. The survey will focus on lessons learned during the cyber incident from a number of perspectives (Operational impacts, internal and external communications, customer service, etc). Using separate collectors, the data will be segregated by two main audiences: 1) Orange County Employees and 2) Agency Stakeholders and Participants in the Response/Recovery. After Action Debrief After the survey have been distributed, closed, and analyzed, Crisis Focus will develop an agenda for a face to face after action debriefing session with key stakeholders. This debriefing session will be based on the themes identified through the two survey instruments. Crisis Focus will facilitate the incident debriefing session onsite in Orange County and the event is estimated to take between 2 – 4 hours. The data collected during the after action debriefing session will be utilized to compile the draft After Action Report. After Action Report Crisis Focus will deliver a draft After Action Report to the project leadership team for internal review. Once the leadership team provides feedback on the report content, the document will be modified and sent through a formatting and technical review process. The document will follow Department of Homeland Security recommendations for after action reports. After Action Conference (Optional) Using the final version of the After Action Report, Crisis Focus can facilitate a collaborative after action conference where stakeholders will discuss areas for improvement for each capability discussed in the After Action Report. Stakeholders will then identify lead agencies in each of the areas for improvement and discuss target timelines for improvement implementation. Crisis Focus will take the discussions from the After Action Conference and build them into a Correction Action Plan / Improvement Plan as an annex to the After Action Report. Project Assumptions Orange County will provide an individual that will act as the project manager and facilitate communications with stakeholders, locate meeting spaces and act as the internal champion for the project. All quotes and estimations do not include printing, food for participants, and/or facility rental for instruction. Those fees would need to be addressed separately. DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F A CRISIS FOCUS page 4 Projected Project Timelines Event Timeline Project Award TBD Kickoff Meeting – Key Stakeholders and Crisis Focus Within 2 Weeks Survey Drafting – Crisis Focus Within 2 Weeks Survey Draft Review – Key Stakeholders Within 1 Weeks Survey Finalized – Crisis Focus Within 1 Week Survey Active (2 Weeks) 2 Weeks Survey Analysis and Debriefing Preparation Within 2 Weeks After Action Debrief 1 Day After Action Report Drafting Within 2 Weeks After Action Draft Review Within 2 Weeks Document Finalization and Delivery Within 1 Week After Action Conference Within 3 Weeks Final Improvement Plan Within 3 Weeks *TIMELINES MAY BE SPED UP BASED ON THE INITIAL PROJECT PLANNING MEETING AND SETTING EVENT DATES EARLY IN THE PLANNING PROCESS. DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F A CRISIS FOCUS page 5 About Crisis Focus, LLC Crisis Focus, LLC is a niche consultancy firm focusing on crisis management and emergency management in the health care, higher education and government settings. Based in Central North Carolina, Crisis Focus supports clients throughout the United States and abroad in all phases of emergency and crisis management. Our consultants bring a range of experience to bear in both the private and public sectors with incident specific experience ranging from a focused local incident response to a complex Type 1 incident coordination. Crisis Focus team members excel in tailoring specific solutions and products to meet their clients’ needs. Creating an experience that exceeds a client’s expectation is the first goal of every Crisis Focus endeavor. Every member of team has committed to placing the client first at all times. We create this superior customer climate through a number of key initiatives. x Create a relationship that a client can depend on during a time of crisis. x Begin with a no cost, in depth assessment of the client’s need, delivering a clearly defined scope of work document along with our pricing estimate. x The Crisis Focus team will continuously work with the client to first define the conditions of satisfaction for the project and routinely evaluate the progress towards completion. x Tailor our services not only to deliver what was requested, but to meet the need and tone of the client organization’s culture as it relates to organizational health and level of preparedness. x Provide products and services that add value to the client’s organization. x Provide the client with opportunities for continuous feedback and a post-completion review of performance. DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F A CRISIS FOCUS page 6 QUOTE Crisis Focus, LLC 3125 Kathleen Ave #160 Greensboro, North Carolina 27408 United States (336) 265-5292 www.crisisfocus.com Orange County Cyber Incident After Action Report After Action Report Process to include x Project Management x Survey Design and Analysis x After Action Debriefing Session x After Action Report writing. $8,500 OPTIONAL – Improvement Plan based on an After Action Conference $2,750 TOTAL $11,250 Quote Terms: x This quote is confidential. x Payment terms for the project: o 50% due after delivery of Draft After Action Report o 50% due after delivery of all final documents DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F WLTR005 THE HARTFORD BUSINESS SERVICE CENTER 3600 WISEMAN BLVD SAN ANTONIO TX 78251 January 17, 2020 Orange County Attn: Risk Management PO Box 8181 Hillsborough NC 27278 Account Information: Policy Holder Details :CRISIS FOCUS, LLC Contact Us Business Service Center Business Hours: Monday - Friday (7AM - 7PM Central Standard Time) Phone:(800) 417-6635 Fax:(888) 443-6112 Email:agency.services@thehartford.com Website:https://business.thehartford.com Enclosed please find a Certificate Of Insurance for the above referenced Policyholder. Please contact us if you have any questions or concerns. Sincerely, Your Hartford Service Team $WWDFKPHQW%DocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F DATE (MM/DD/YYYY) 01/17/2020 THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER. IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must be endorsed. If SUBROGATIONIS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s). PRODUCER MARSH & MCLENNAN AGENCY LLC/PHS 22270718 The Hartford Business Service Center 3600 Wiseman Blvd San Antonio, TX 78251 CONTACT NAME: PHONE (A/C, No, Ext): (800) 417-6635 FAX (A/C, No): (888) 443-6112 E-MAIL ADDRESS: INSURER(S) AFFORDING COVERAGE NAIC# INSURED CRISIS FOCUS, LLC 1103 FOXHAVEN DR GREENSBORO NC 27455-8342 INSURER A :Sentinel Insurance Company Ltd. 11000 INSURER B : INSURER C : INSURER D : INSURER E : INSURER F : COVERAGES CERTIFICATE NUMBER: REVISION NUMBER: THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED.NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. INSR LTR TYPE OF INSURANCE ADDL INSR SUBR WVD POLICY NUMBER POLICY EFF (MM/DD/YYYY) POLICY EXP (MM/DD/Y YYY)LIMITS A COMMERCIAL GENERAL LIABILITY 22 SBM UP3974 12/31/2019 12/31/2020 EACH OCCURRENCE $2,000,000 CLAIMS-MADE X OCCUR DAMAGE TO RENTED PREMISES (Ea occurrence)$1,000,000 X General Liability MED EXP (Any one person)$10,000 PERSONAL & ADV INJURY $2,000,000 GEN'L AGGREGATE LIMIT APPLIES PER:GENERAL AGGREGATE $4,000,000 POLICY PRO- JECT X LOC PRODUCTS - COMP/OP AGG $4,000,000 OTHER: A AUTOMOBILE LIABILITY 22 SBM UP3974 12/31/2019 12/31/2020 COMBINED SINGLE LIMIT (Ea accident)$2,000,000 ANY AUTO BODILY INJURY (Per person) ALL OWNED AUTOS SCHEDULED AUTOS BODILY INJURY (Per accident) X HIRED AUTOS X NON-OWNED AUTOS PROPERTY DAMAGE (Per accident) UMBRELLA LIAB EXCESS LIAB OCCUR CLAIMS- MADE EACH OCCURRENCE AGGREGATE DED RETENTION $ WORKERS COMPENSATION AND EMPLOYERS' LIABILITY ANY PROPRIETOR/PARTNER/EXECUTIVE OFFICER/MEMBER EXCLUDED? (Mandatory in NH) If yes, describe under DESCRIPTION OF OPERATIONS below N/ A PER STATUTE OTH- ER Y/N E.L. EACH ACCIDENT E.L. DISEASE -EA EMPLOYEE E.L. DISEASE - POLICY LIMIT A EMPLOYMENT PRACTICES LIABILITY 22 SBM UP3974 12/31/2019 12/31/2020 Each Claim Limit Aggregate Limit $10,000 $10,000 DESCRIPTION OF OPERATIONS / LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, may be attached if more space is required) Those usual to the Insured's Operations. CERTIFICATE HOLDER CANCELLATION Orange County Attn: Risk Management PO Box 8181 Hillsborough NC 27278 SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS. AUTHORIZED REPRESENTATIVE © 1988-2015 ACORD CORPORATION. All rights reserved. ACORD 25 (2016/03) The ACORD name and logo are registered marks of ACORD CERTIFICATE OF LIABILITY INSURANCEDocuSign Envelope ID: 4870BACA-87ED-4464-8D5A-5C271BB2DB6F