Loading...
HomeMy WebLinkAbout2023-174-E-IT Dept-NWN Corporation-Server patch managementRevised 06/21 1 [Departmental Use Only] TITLE NWN Srv Patch Mgmt FY 23 NORTH CAROLINA SERVICES AGREEMENT NO RFP/RFQ ORANGE COUNTY This Services Agreement (hereinafter “Agreement”), made and entered into this 14th day of April, 2023, (“Effective Date”) by and between Orange County, North Carolina a political subdivision of the State of North Carolina (hereinafter, the "County") and NWN Corporation, (hereinafter, the "Provider"). WITNESSETH: That the County and Provider, for the consideration herein named, do hereby agree as follows: 1. Services a. Scope of Work. i) This Agreement is for services to be rendered by Provider to County with respect to (insert type of project): Server patch management as described in Attachment A ii) By executing this Agreement, the Provider represents and agrees that Provider is qualified to perform and fully capable of performing and providing the services required or necessary under this Agreement in a fully competent, professional and timely manner. iii) Time is of the essence with respect to this Agreement. iv) The services to be performed under this Agreement consist of Basic Services, as described and designated in Section 3 hereof. Compensation to the Provider for Basic Services under this Agreement shall be as set forth herein. 2. Responsibilities of the Provider a. Services to be provided. The Provider shall provide the County with all services required in Section 3 to satisfactorily complete the Project within the time limitations set forth herein and in accordance with the highest professional standards. b. Standard of Care. i) The Provider shall exercise reasonable care and diligence in performing services under this Agreement in accordance with the highest generally accepted standards of this type of Provider practice throughout the United States and in accordance with applicable federal, state and local laws and regulations applicable to the performance of these services. Provider is solely responsible for the professional DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Revised 06/21 2 quality, accuracy and timely completion and submission of all work related to the Basic Services. ii) Provider shall be responsible for all errors or omissions of its agents, contractors, employees, or assigns in the performance of the Agreement. Provider shall correct any and all errors, omissions, discrepancies, ambiguities, mistakes or conflicts at no additional cost to the County. iii) The Provider shall not, except as otherwise provided for in this Agreement, subcontract the performance of any work under this Agreement without prior written permission of the County. No permission for subcontracting shall create, between the County and the subcontractor, any contract or any other relationship. iv) Provider is an independent contractor of County. Any and all employees of the Provider engaged by the Provider in the performance of any work or services required of the Provider under this Agreement, shall be considered employees or agents of the Provider only and not of the County, and any and all claims that may or might arise under any workers compensation or other law or contract on behalf of said employees while so engaged shall be the sole obligation and responsibility of the Provider. v) If activities related to the performance of this Agreement require specific licenses, certifications, or related credentials Provider represents that it or its employees, agents and subcontractors engaged in such activities possess such licenses, certifications, or credentials and that such licenses certifications, or credentials are current, active, and not in a state of suspension or revocation. vi) In determining the Basic Services to be provided, should any documents be referenced in this Agreement, the terms of this Agreement shall have priority in any conflict between the terms of referenced documents and the terms of this Agreement. vii) Should this Agreement involve project designs, the construction or creation of which is to be bid out or fulfilled by other contractors, and bidding or negotiation with contractors produce prices which, when added to the other elements of the approved total project cost, produce a cost that is in excess of the approved total project cost, the Provider shall participate with the County in negotiation and design adjustments to the extent such are necessary to obtain prices within the approved total project cost. All activity of the Provider with respect to these matters shall constitute Basic Services and shall be performed by the Provider without additional compensation. If negotiation and design adjustments fail to bring costs within the total project cost the County may reject all bids and Provider will redesign or reduce portions of the project in an effort to reduce the bid prices to within the total project cost and rebid the project. One such redesign is included within Basic Services. If this second letting for bids does not produce bids that are within the approved total project cost initially or after negotiations with the contractor the cost is not reduced to an amount within the total project cost, the Provider is not obligated to engage in further redesign. DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Revised 06/21 3 3. Basic Services a. Basic Services. The Services to be rendered pursuant to this Agreement are as follows (fully describe services to be provided): Provide consistent, vetted patches to the servers and end points on a monthly basis with a structured process including rollbacks and omission processes. 4. Duration of Services a. Term. The term of this Agreement shall be from April 15, 2023 to April 14, 2024. b. Scheduling of Services. i) The Provider shall schedule and perform its activities in a timely manner. ii) Should the County determine that the Provider is behind schedule, it may require the Provider to expedite and accelerate its efforts, including providing additional resources and working overtime, as necessary, to perform its services in accordance with the approved project schedule at no additional cost to the County. iii) The Commencement Date for the Provider's Basic Services shall be April 15, 2023. 5. Compensation a. Compensation for Basic Services. Compensation for Basic Services shall include all compensation due the Provider from the County for all services satisfactorily (as determined by the County) performed pursuant to this Agreement. The maximum amount payable for Basic Services shall not exceed thirteen-thousand-two-hundred- eighty-two and 20/100 Dollars ($13,282.20) (See Attachment A). Payment for satisfactorily performed Basic Services shall become due and payable within thirty (30) days of Provider properly invoicing County. Payment shall be subject to provisions of Section 5(b). b. Disputes. In the event the amount stated on an invoice is disputed by the County, the County may withhold payment of all or a portion of the amount stated on an invoice until the parties resolve the dispute. Should Provider fail to perform its duties under the terms of this Agreement, County may, without fault or penalty, withhold any payment associated with the work to be performed until such time as said work is completed. c. Additional Services. County shall not be responsible for costs related to any services in addition to the Basic Services performed by Provider unless County requests such additional services in writing and such additional services are evidenced by a written amendment to this Agreement. 6. Responsibilities of the County a. Cooperation and Coordination. The County has designated (Jim Northrup) to act as the County's representative with respect to the Project who shall have the authority to render DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Revised 06/21 4 decisions within guidelines established by the County Manager or the County Board of Commissioners and who shall be available during working hours as often as may be reasonably required to render decisions and to furnish information. 7. Insurance a. General Requirements. Provider shall obtain, at its sole expense, Commercial General Liability Insurance, Automobile Insurance, Workers’ Compensation Insurance, and any additional insurance as may be required by County’s Risk Manager as such insurance requirements are described in the Orange County Risk Transfer Policy and Orange County Minimum Insurance Coverage Requirements (each document is incorporated herein by reference and may be viewed at http://www.orangecountync.gov/departments/purchasing_division/contracts.php). If County’s Risk Manager determines additional insurance coverage is required such additional insurance shall consist of N/A (if no additional insurance required mark N/A as being not applicable). Provider shall not commence work until such insurance is in effect and certification thereof has been received by the County's Risk Manager. 8. Indemnity a. Indemnity. To the extent authorized by North Carolina law the Provider agrees, without limitation, to defend, indemnify and hold harmless the County from all loss, liability, claims or expense, including attorney's fees, arising out of or related to the Project and arising from property damage or bodily injury including death to any person or persons caused in whole or in part by the negligence or misconduct of the Provider except to the extent same are caused by the negligence or willful misconduct of the County. It is the intent of this provision to require the Provider to indemnify the County to the fullest extent permitted under North Carolina law. 9. Amendments to the Agreement a. Changes in Basic Services. Changes in the Basic Services and entitlement to additional compensation or a change in duration of this Agreement shall be made by a written Amendment to this Agreement executed by the County and the Provider. The Provider shall proceed to perform the Services required by the Amendment only after receiving a fully executed Amendment from the County. 10. Termination a. Termination for Convenience of the County. This Agreement may be terminated without cause by the County and for its convenience upon seven (7) days’ prior written notice to the Provider. b. Other Termination. The Provider may terminate this Agreement based upon the County's material breach of this Agreement; provided, the County has not taken all reasonable actions to remedy the breach. The Provider shall give the County seven (7) days' prior written notice of its intent to terminate this Agreement for cause. Either party may terminate this Agreement upon notice to the other party that obligations pursuant to this Agreement are made impractical due to declarations of emergency by Orange County or DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Revised 06/21 5 by North Carolina due to events directly impacting Orange County. Both parties shall remain responsible for all payment and performance due up to the receipt of such notice, but shall have no further obligation or responsibility beyond that date provided the terminating party has taken all reasonable steps to complete the performance of its obligations. c. Compensation After Termination. i) In the event of termination, the Provider shall be paid that portion of the fees and expenses that it has earned to the date of termination, less any costs or expenses incurred or anticipated to be incurred by the County due to errors or omissions of the Provider. Upon request of the County, the Provider shall submit to County all relevant documentation, including but not limited to, job cost records, to support its claims for final compensation. ii) Should this Agreement be terminated, the Provider shall deliver to the County within seven (7) days, at no additional cost, all deliverables including any electronic data or files relating to the Project. d. Waiver. The payment of any sums by the County under this Agreement or the failure of the County to require compliance by the Provider with any provisions of this Agreement or the waiver by the County of any breach of this Agreement shall not constitute a waiver of any claim for damages by the County for any breach of this Agreement or a waiver of any other required compliance with this Agreement. e. Suspension. County may suspend the Basic Services and this Agreement at any time for County’s convenience and without penalty to County upon three (3) days’ notice to Provider. Upon any suspension by County, Provider shall discontinue work on the Basic Services and shall not resume the Basic Services until notified to proceed by County. 11. Additional Provisions a. Limitation and Assignment. The County and the Provider each bind themselves, their successors, assigns and legal representatives to the terms of this Agreement. Neither the County nor the Provider shall assign or transfer its interest in this Agreement without the written consent of the other. b. Governing Law. This Agreement and the duties, responsibilities, obligations and rights of respective parties hereunder shall be governed by the laws of the State of North Carolina. By executing this Agreement Provider affirms that Provider and any subcontractors of Provider are and shall remain in compliance with Article 2 of Chapter 64 of the North Carolina General Statutes. By executing this Agreement Provider certifies that Provider has not been identified, and has not utilized the services of any agent or subcontractor identified, on the list created by the State Treasurer pursuant to G.S. 147-86.58. By executing this Agreement Provider certifies that Provider has not been identified, and has not utilized the services of any agent or subcontractor identified, on the list created by the State Treasurer pursuant to G.S. 147-86.81. DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Revised 06/21 6 c. Non-Discrimination. Provider shall at all times remain in compliance with all applicable local, state, and federal laws, rules, and regulations including but not limited to all state and federal non-discrimination laws, policies, rules, and regulations and the Orange County Non-Discrimination Policy and Orange County Living Wage Policy (each policy is incorporated herein by reference and may be viewed at http://www.orangecountync.gov/departments/purchasing_division/contracts.php.) Any violation of the Orange County Non-Discrimination Policy is a breach of this Agreement and County may immediately terminate this Agreement without further obligation on the part of the County. This paragraph is not intended to limit and does not limit the definition of breach to discrimination. d. Dispute Resolution. Any and all suits or actions to enforce, interpret or seek damages with respect to any provision of, or the performance or non-performance of, this Agreement shall be brought in the General Court of Justice of North Carolina sitting in Orange County, North Carolina. It is agreed by the parties that no other court shall have jurisdiction or venue with respect to such suits or actions. Binding arbitration may not be initiated by either Party, however, the Parties may agree to nonbinding mediation of any dispute prior to the bringing of such suit or action. e. Entire Agreement. This Agreement represents the entire and integrated agreement between the County and the Provider and supersedes all prior negotiations, representations or agreements, either written or oral. This Agreement may be amended only by written instrument signed by both parties. Modifications may be evidenced by facsimile signatures. f. Severability. If any provision of this Agreement is held as a matter of law to be unenforceable, the remainder of this Agreement shall be valid and binding upon the Parties. g. Ownership of Work Product. Should Provider’s performance of this Agreement generate documents, items or things that are specific to this Project such documents, items or things shall become the property of the County and may be used on any other project without additional compensation to the Provider. The use of the documents, items or things by the County or by any person or entity for any purpose other than the Project as set forth in this Agreement shall be at the full risk of the County. h. Non-Appropriation. Provider acknowledges that County is a governmental entity, and the validity of this Agreement is based upon the availability of public funding under the authority of its statutory mandate. In the event that public funds are unavailable or not appropriated for the performance of County’s obligations under this Agreement, then this Agreement shall automatically expire without penalty to County immediately upon written notice to Provider of the unavailability or non-appropriation of public funds. It is expressly agreed that County shall not activate this non-appropriation provision for its convenience or to circumvent the requirements of this Agreement. In the event of a change in the County’s statutory authority, mandate or mandated functions, by state or federal legislative or regulatory action, which adversely affects DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Revised 06/21 7 County’s authority to continue its obligations under this Agreement, then this Agreement shall automatically terminate without penalty to County upon written notice to Provider of such limitation or change in County’s legal authority. i. Signatures. This Agreement together with any amendments or modifications may be executed electronically. All electronic signatures affixed hereto evidence the consent of the Parties to utilize electronic signatures and the intent of the Parties to comply with Article 11A and Article 40 of North Carolina General Statute Chapter 66. j. Notices. Any notice required by this Agreement shall be in writing and delivered by certified or registered mail, return receipt requested to the following: Orange County Provider’s Name Attention:Jim Northrup NWN Corporation P.O. Box 8181 271 Waverley Oaks Rd Hillsborough, NC 27278 Waltham, MA 02452 [SIGNATURE PAGE TO FOLLOW] DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Revised 06/21 8 IN WITNESS WHEREOF, the Parties, by and through their authorized agents, have hereunder set their hands and seal, all as of the day and year first above written. ORANGE COUNTY: PROVIDER: By: _________________________________ Bonnie Hammersley, County Manager By: __________________________________ Michael Hansil, VP of Engineering Printed Name and Title DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A 4/14/20234/22/2023 Revised 06/21 9 ORANGE COUNTY—DEPARTMENT USE ONLY ______________________________________________________________________________ Party/Vendor Name: NWN Corporation Party/Vendor Contact Person: Michael Hansil Contact Phone: 704-451- 1606 Party/Vendor Address: 7025 Albert Pick Rd City Greensboro State: NC Zip: 27409 Department: IT Amount: $13,282.20 Purpose: Server patch management Budget Code(s): 10315020-630000 Vendor # 40081 (N/A if new vendor) Vendor is a BOCC consultant? Yes No Contract Type: (Check one) New Renewal Amendment Effective Date 14 April 2023 Approved by Board Yes No Agenda Date: --- For Section XIV. c. contracts only, Approved by Board in Current FY Budget Yes No This agreement is approved as to technical form and content and I as Department Director affirmatively state work on this project has not been initiated prior to execution of the agreement: Department Director’s Signature ________________________________________ Date: ________ Agreements for emergency services or repair are not subject to the above affirmation. If services related to this agreement have already begun or been completed please briefly describe the nature of the emergency condition that was addressed: N/A Information Technologies (Applicable only to hardware/software purchases or related services) This agreement has been reviewed and is approved as to information technology content and specifications: Office of the Chief Information Officer___________________________________ Date: ________ Risk Management This agreement is approved for sufficiency of insurance standards, specifications, and requirements: Office of the Risk Management Officer___________________________________ Date: _________ Financial Services This instrument has been pre-audited in the manner required by the Local Government Budget and Fiscal Control Act: Office of the Chief Financial Officer ____________________________________ Date: _________ Legal Services This agreement is approved as to legal form and sufficiency: Office of the County Attorney __________________________________________Date: ________ Clerk to the Board Received for record retention: All Docusign contracts must be copied to the Clerk upon completion: occlerkdocs@orangecountync.gov The following signature block is for hard copies only and is not required for Docusign contracts: Office of the Clerk to the Board __________________________________________Date:_________ DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A 4/20/2023 4/20/2023 4/20/2023 4/22/2023 PROPOSAL FOR SERVER PATCH MANAGEMENT 4/11/2023 OP-50345 / Q-98330 Prepared by: Brad Garst & Ben Smith 7025 Albert Pick Rd, Suite 302 Greensboro, NC 27410 Attachment ADocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A ` Contents EXECUTIVE SUMMARY ........................................................................................................................................... 3 PATCH MANAGEMENT ........................................................................................................................................... 4 SERVICE ELEMENTS ................................................................................................................................................ 5 Support Engineering ................................................................................................................................................ 5 Customer Experience Manager Assigned to Account ............................................................................................... 5 SERVICE LEVEL AGREEMENTS ................................................................................................................................. 6 SERVICE TERMS ...................................................................................................................................................... 7 PATCH MANAGEMENT TERMS ............................................................................................................................... 7 PATCH MANAGEMENT PRICING ............................................................................................................................. 8 APPROVALS ........................................................................................................................................................... 8 Statement of Confidentiality The contents of this document have been developed by NWN Corporation (NWN). NWN considers the contents of this document to be proprietary and business confidential information. This information is to be used only in the performance of its intended use. This document may not be released to another vendor, business partner or contractor without prior written consent from NWN. Additionally, no portion of this document may be communicated, reproduced, copied or distributed without the prior consent of both the Customer and NWN. Page 2 of 8 DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Page 3 of 8 Executive Summary Overview NWN is pleased to present this proposal for Server Patch Management. NWN provides this service to augment our customers IT organization by providing consistent, measurable patching for servers and desktops (workstations/laptops) providing additional security to the environment being patched. We recognize that providing this service to your internal customers can take a great deal of time and cost. Further the tasks are often performed by experienced engineers that could be allocated to higher value tasks and projects. NWN will provide you with a cost effective, efficient patch management service. Service Objective Provide consistent, vetted patches to the servers and end points on a monthly basis with a structured process including roll backs, and omission processes. Scope of Proposal 24 x 7 x 365 Ticket creation & status Monthly patch deployment Server patch management for 90 Servers (Note patches for the 16 WIN 2003 Servers are not supported by MSFT or this service) Assigned Customer Experience Manager (CEM) Service Level Agreements Monthly service review (MSR) Adjunct Services NWN is a service provider with capabilities in the collaboration, converged infrastructure, staff augmentation and workplace services space. Several core capabilities of NWN’s offerings are viewed as adjunct services to the proposed patch management services in this proposal. Please let us know if you would like more detail on these services. Device as a Service (DaaS) Service Desk Endpoint monitoring and management Enterprise & endpoint security Monitoring and Management of infrastructure DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Page 4 of 8 • Adobe Flash Player • Adobe Acrobat • Adobe Reader • Adobe Shockwave Player • Apple iTunes • Apple QuickTime • Mozilla Firefox • RealPlayer • Skype • Sun Java Runtime Environment • Winamp • WinZip The monthly patching process works as follows: Patch Management NWN’s patch management services ensure that Servers are patched on a monthly basis. Additionally, NWN will generate a monthly compliance report for servers and desktops that can used to report on the status of the patching in the client environment. The patching cycle is monthly however NWN will deploy emergency 0-day patches should it be deemed necessary by the client on an as-needed basis. Patches are tested by NWN’s patch management system vendor before they are published and available for deployment. NWN will push supported hot-fixes for Microsoft, Linux and Apple OS X operating systems. Service packs as well as the following list of supported software are also supported: 1. NWN will create a monthly patching ticket to track activities. 2. NWN will push patches to a client-designated set of servers on a schedule pre-determined by the client and NWN each month. Once a quarter NWN will push patches to a client-designated set of servers on a schedule pre-determined by the client and NWN. 3. The client will test the servers over a designated timeframe and approve the patch deployment onto the remaining production systems. 4. NWN will generate a compliance report and deliver this to the customer. 5. The client and NWN will meet to determine any necessary actions required to increase compliance. Emergency patching event(s), which is defined as any patching request out of the “normal” patching schedule, can be requested by either NWN or the customer. The customer must approve an event outside of normal cycle patch release. NWN will deploy these patches into test and production environments within 48 hours following the submission of an emergency patching request by the client. These requests can be made via the ticketing system however NWN strongly encourages the client to call the command center or ASE/CEM team to make these requests. DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Page 5 of 8 Service Elements Support Engineering The support engineering team consists of professionally trained and industry certified resources. Support is provided 24x7 by NWN support engineering team. The engineers are assigned to support activities based on technical fit to the client. Cases are worked based on priority and SLA agreements. Level 3+ escalation resources are available to assist the team 24x7. NWN support also leverages manufactures support to drive resolution. Customer Experience Manager Assigned to Account NWN will assign a Customer Experience Manager (CEM) to take ownership for all activities associated with the client account. The key metric of their success is the customer satisfaction ratings provided by the client as part of the annual operations assessment. Their role will be to manage the functional change request process, customer communications and be the customers advocate. DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Page 6 of 8 Service level agreements Service Levels will be calculated and reported monthly, and measured quarterly. Service Levels apply to support tasks based on priority and applicable service. Priorities are defined as follows: Priority Level Definition for Monitoring & Management Support Services Priority 1  A critical system or service is unavailable, causing a severe impact on operations. There is no alternative, redundant or back-up to this system or service. Priority 2  A critical system or service is slowed or interrupted, however a work-around is in place so that operations can continue.  A service interruption is occurring on a non-critical system or service. Priority 3  The functionality of a non-critical system or service has been degraded.  An error has been detected that is not affecting service performance or availability. Service Service Level Agreement All Services Support Staff NWN’s NOC Operations Center will be staffed 7 X 24 X 365 Speed of Answer 90% of phone calls to the NOC will be answered within 60 seconds.1 Abandonment Less than 3% of phone calls to the NOC will abandon after 60 seconds.2 Email Cases will be created in NWN’s Case management system within 15 minutes of email arriving 95% of the time3 Patch Management Patched Deployed 95% of all supported patches available for deployment will be deployed to the customer’s devices within 2 business days. Emergency Patching 95% of all Microsoft emergency 0 Day patch requests will be deployed to the customer’s devices within 48 hours of the patch release date from the vendor pending ASE and/or Customer approval. 1 Measured Monthly across all clients 2 Measured Monthly across all clients 3 Measure across all customers DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Page 7 of 8 Service Terms • The contract term is for one year beginning on April 15, 2023 and ending on April 14, 2024. All pricing is based on this term. After the term of the contract is complete, rates will increase by 20% unless a contract extension or renewal contract is executed. Contract extension are written for no less than 4 months. • Annual services fees will be invoiced annually thirty (30) days prior to the start of each year. • Incremental additions, changes and deletions to device counts can be executed via a written change order to this contract and billing changes will affected at the next billing cycle. • This contract may be cancelled before the end of the contract term with 3 months written notice. After the three month notice, NWN will assess a 25% cancellation fee for the remaining months of the contract year. (Example: Contract termination at 7 months into the contract year would result in a 25% on the remaining 5 months.) This fee will be waived if cancellation is due to dissatisfaction that NWN cannot address Patch Management Terms • The initial patch management device count will be set as stated in the Scope of Services sections of this document. On a quarterly basis there will be a review of the previous quarter’s server count, average servers per month. • Server counts above the initial contracted value will be and additional charge per server per month. • NWN will provide unlimited patch rollback as part of the contract fees however patches that cannot be rolled back in an automated fashion via the patch management system are not included. • NWN is not responsible for lack of vendor integration testing, poor coding and unique situations in the client environment that are not found during the patch testing. • NWN will need to maintain an agent on all servers being patched. NWN is responsible for the initial installation of this agent. All additional machines are at the responsibility of the customer. NWN will provide tools and recommendations if the customer requests. • NWN will support patch deployment issues as it relates specifically to the NWN Patch Management system. Individual devices which are not accepting patches due to operating system or application issues are the responsibility of the customer to resolve. • Manual checks for the health of devices, applications and processes (including system log review) after patching events that are required by the customer and performed by NWN may require additional fees. NWN will notify the client of any such issues in writing before any for fee work is performed and before any fees are assessed. • Customer agrees to set up point to point VPN tunnel with NWN DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A Page 8 of 8 Patch Management Pricing QUOTE # Q-98330 Solution Annual Cost Managed Services – Patch Management for Server 90 $13,282.20 Approvals To accept this proposal please provide sign below. The undersigned certifies that he/she is duly authorized to commit the customer to pay for the above products and/or services upon satisfactory delivery and/or performance: Orange County NWN By (authorized signature) By (authorized signature) Ben Smith Name (Print or Type) Name (Print or Type) Ben Smith Title (Print or Type) Date: Title (Print or Type) Account Manager Date: April 13, 2023 DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A 06/29/2022 RSC Insurance Brokerage, Inc. 750 Third Ave 15th Floor New York NY 10017 April Ruiz aruiz@krautergroup.com NWN Corporation 271 Waverley Oaks Road Ste. 100 Waltham MA 02452 Hartford Fire Ins Co 19682 Hartford Casualty Insurance Co 29424 Hartford Ins Co of the Midwest 37478 Indian Harbor Insurance Company 36940 CL225571217 A 08 UUN BB6213 05/07/2022 05/07/2023 1,000,000 300,000 10,000 1,000,000 2,000,000 2,000,000 B Comp$1000 Coll $1000 08UENBB6262 05/07/2022 05/07/2023 1,000,000 B 10,000 08XHUBB5564 05/07/2022 05/07/2023 13,000,000 13,000,000 C N 08WBAS3SJK 05/07/2022 05/07/2023 1,000,000 1,000,000 1,000,000 D Primary Tech E&O/Cyber Liability MTP9043167 01 05/07/2022 05/07/2023 Aggregate Limit:$5,000,000 This certificate is issued as evidence of insurance coverage only. Orange County NC 131 West Margaret Lane Hillsborough NC 27278 SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS. INSURER(S) AFFORDING COVERAGE INSURER F : INSURER E : INSURER D : INSURER C : INSURER B : INSURER A : NAIC # NAME:CONTACT (A/C, No):FAX E-MAILADDRESS: PRODUCER (A/C, No, Ext):PHONE INSURED REVISION NUMBER:CERTIFICATE NUMBER:COVERAGES IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed. If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s). THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER. OTHER: (Per accident) (Ea accident) $ $ N / A SUBR WVD ADDL INSD THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED. NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. $ $ $ $PROPERTY DAMAGE BODILY INJURY (Per accident) BODILY INJURY (Per person) COMBINED SINGLE LIMIT AUTOS ONLY AUTOSAUTOS ONLY NON-OWNED SCHEDULEDOWNED ANY AUTO AUTOMOBILE LIABILITY Y / N WORKERS COMPENSATION AND EMPLOYERS' LIABILITY OFFICER/MEMBER EXCLUDED? (Mandatory in NH) DESCRIPTION OF OPERATIONS below If yes, describe under ANY PROPRIETOR/PARTNER/EXECUTIVE $ $ $ E.L. DISEASE - POLICY LIMIT E.L. DISEASE - EA EMPLOYEE E.L. EACH ACCIDENT EROTH-STATUTEPER LIMITS(MM/DD/YYYY)POLICY EXP(MM/DD/YYYY)POLICY EFFPOLICY NUMBERTYPE OF INSURANCELTRINSR DESCRIPTION OF OPERATIONS / LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, may be attached if more space is required) EXCESS LIAB UMBRELLA LIAB $EACH OCCURRENCE $AGGREGATE $ OCCUR CLAIMS-MADE DED RETENTION $ $PRODUCTS - COMP/OP AGG $GENERAL AGGREGATE $PERSONAL & ADV INJURY $MED EXP (Any one person) $EACH OCCURRENCE DAMAGE TO RENTED $PREMISES (Ea occurrence) COMMERCIAL GENERAL LIABILITY CLAIMS-MADE OCCUR GEN'L AGGREGATE LIMIT APPLIES PER: POLICY PRO-JECT LOC CERTIFICATE OF LIABILITY INSURANCE DATE (MM/DD/YYYY) CANCELLATION AUTHORIZED REPRESENTATIVE ACORD 25 (2016/03) © 1988-2015 ACORD CORPORATION. All rights reserved. CERTIFICATE HOLDER The ACORD name and logo are registered marks of ACORD HIRED AUTOS ONLY DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A NWN CorporationRSC Insurance Brokerage, Inc. 25 Certificate of Liability Insurance: Notes Coverage: Business Auto (MA Only) Policy #08UENBB6381 Term: 5/7/2022-5/7/2023 Carrier: Hartford Casualty CSL: $1,000,000 Coverage: Excess Tech E&O/Cyber Liability Policy #652336994 Term: 5/7/2022-5/7/2023 Carrier: C N A– Continental Casualty Company Limit: $5,000,000 Aggregate Coverage: Excess Tech E&O/Cyber Liability Policy #EOL-237954 Term: 5/7/2022-5/7/2023 Carrier: Crum & Forster Specialty Insurance Company Limit: $5,000,000 Aggregate ACORD 101 (2008/01) The ACORD name and logo are registered marks of ACORD © 2008 ACORD CORPORATION. All rights reserved. THIS ADDITIONAL REMARKS FORM IS A SCHEDULE TO ACORD FORM, FORM NUMBER:FORM TITLE: ADDITIONAL REMARKS ADDITIONAL REMARKS SCHEDULE Page of AGENCY CUSTOMER ID: LOC #: AGENCY CARRIER NAIC CODE POLICY NUMBER NAMED INSURED EFFECTIVE DATE: DocuSign Envelope ID: F187B572-34B4-412A-9415-7CF07131CC9A