Caliber Security Partners LLC 3/18/2022

EXHIBIT A SCOPE OF WORK See Exhibit A - Scope of Work at the end of this PSA. Statement of Work Project Name:Security Services Objectives: Provide network security services to help augment the work performed by the City's technology and security team.The scope of this SOW covers the following services: Description&Scope:The engagement includes the services as outlined.The following table includes specific details regarding the scope of services proposed: • Network Penetration Test—This assessment will target the city's public facing network infrastructure. Caliber Security Partners will scan and identify vulnerabilities and attempt to exploit them.The city will receive a penetration test report that describes the security flaws discovered and exploited along with recommendations that will reduce risk. • Web Based Penetration Test—This assessment will target the City's Microsoft Azure services. Caliber Security Partners will scan and identify vulnerabilities and attempt to exploit them. • Social Engineering Test—This assessment will target the City of Everett downtown building. Caliber Security Partners will design and execute a campaign that attempts to gain unauthorized access and access to sensitive information, with limitations to such activities as described herein. • Spear Phishing and Pretexting-This assessment will target ten (10) individuals with a spear phishing and pretexting exercise of the City of Everett. Caliber Security Partners will design and execute a campaign that attempts to gain unauthorized access and access to sensitive information. If authorization is provided to pursue exploitation for gaining unauthorized access, at no time shall Caliber Security Partners exfiltrate sensitive information. • Cyber Security Training- Caliber will provide up to four hours of technical security training to the City of Everett's IT Department delivered via an online platform.The City will receive a recording for future use. x Description. Pricing Project kickoff meeting via phone call and/or web conference to discuss and finalize the following: • Service delivery schedule Project Kickoff • Emergency escalation contacts • Rules of engagement • Communication preferences Page 14 (Form Approved by City Attorney's Office January 7, 2010, updated November 4, 2020)