Technology Agreement CompuNet, Inc.

. -, - C o rn p u N et, Inc. City of Everett Application Security Assessment discuss the assessment's scope, including the specific scanning details to be performed. The CIS (Center for Internet Security) Control 18 - Application Security around scanning types, software development implications, 3rd Party application considerations, knowledge and training, and industry standards for hardening databases. Architectural conversations take place to understand application delivery, best practices, firewall details, and the application-hosting environment (Cloud, On-Prem, Both). Business Requirement conversations then take place to get an understanding of critical applications, business impact potential, and risk mitigation recommendations CompuNet will then perform discovery and authenticated scans of the Web Site Base URL via a remote web application. The scans will focus on the websites and applications identified during the Discovery Workshop. The Scans will then be analyzed and compiled for inclusion into CompuNet's Assessment document, including detailed results, recommendations, and actionable next steps. Location All work will be completed remotely. Engagement Timeline Project duration is expected to take 4 weeks. Project start date will be agreed upon in advance by both Customer and CompuNet. Work schedule will be driven by the schedules and availability of critical personnel. SERVICE & DELIVERABLES Phase 1: Discovery Phase • Kickoff • Logistical Discovery • Schedules • Communication • Stakeholders • Site Details - Prerequisites - Interviews • Planned Sites and Scans • Architecture review Business Requirements • Application Prioritization • Interview of CIS Control 18 SOW# 102295 - Revision #1 Seattle, WA I (206) 456-9133 www.compunet,biz Th,s document is PROPRIETARY and SENSITIVE and may not be duplicated redistributed or displayed to any other party without the expressed written permission of CompuNet, Inc. An automatic exception is granted to public entities.