Agilant Solutions, Inc. Scope of Work Security Assessment Services Agilant Solutions, Inc. Page 5 of 13 1. One (1) senior level CISSP / CEH / CISM / Penetration Testing Specialist to oversee the engagement 2. One (1) senior level security practitioner 6 ASSUMPTIONS The project time frame and associated fees quoted within this Statement of Work are based on the following assumptions. Should any element(s) of these assumptions be lacking during execution of services, additional time and associated fees and expenses may be required to complete this Statement of Work. 1. Chicago Flooring Company Inc will provide a technical point of contact for the duration of this project. 2. All parties agree that personnel shall not be asked to perform, nor volunteer to perform, engineering and/or consulting tasks that lie outside of the skill sets and experience of personnel. Personnel have the right to decline on a service request if the request falls outside the scope of his experience and expertise. 3. Chicago Flooring Company Inc will provide the necessary network access/authorization to provide the above services. Further, Chicago Flooring Company Inc will obtain proper approval from any third-party vendors which shall be scanned as part of this engagement. Agilant shall assume that authorization provided by Chicago Flooring Company Inc to scan outsourced system has been cleared with the appropriate parties at any third-party facility, network, or provider. 4. Chicago Flooring Company Inc agrees to whitelist source IP addresses provided by Agilant in any WAFS, IPS, Firewalls and other devices so that the types of attacks which would normally take months to accomplish can be condensed into the short timeframe allocated to the test. 5. Denial of Service Attacks are not part of this Statement of Work unless explicitly requested by the client in writing. 6. Chicago Flooring Company Inc acknowledges that during vulnerability scanning or penetration testing that some systems may become un-responsive and may require a reboot in order for normal functionality to resume. Agilant will attempt to schedule and notify all parties of any test on penetration that may cause this behavior prior to conducting that scan or test. Chicago Flooring Company Inc will provide contact information for someone that will be able to reboot the equipment as needed during the process of the scans. 7. Agilant will execute all tests according to the best practice in the industry and all measures will be taken to avoid damaging the network, the systems, and the data contained within such network and systems. However, if downtime or loss caused by the Agilant testing were not due to any negligence, were unforeseeable or unavoidable, Agilant will not be held responsible for damages or any consequences.