Washington State Department of Retirement Systems and UHY LLC CPAs 2/12/2026

DRS DSA # 2026-07 CITY OF EVERETT_UHY Page 4 of 10 information cannot be queried in City of Everett’s detailed payroll file, City of Everett may wait to provide it during the next phase of DRS’ testing. If any of the payroll fields do not apply or are not available within one comprehensive report, City of Everett will provide equivalent information as available. iv. Information for a sample of approximately 25 employees, as identified by UHY following receipt and review of items (i), (ii), and (iii) listed above. The information may include but is not limited to: requests for eligibility documentation, additional detail and years of payroll data, documentation of employee hire and/or termination, contract information, and identification of employees who participate in another retirement system. Additional employee selections may be necessary in certain circumstances (i.e., identification of pervasive errors in sample) but UHY will work to limit such requests in an effort to minimize follow up items. City of Everett and UHY may request additional information or clarification from each other as needed. Data will be provided in an electronic format: Excel and CSV files are preferred; Word, PDF, or text files can be accepted if necessary; all other formats require approval. UHY contact for questions about the secure file transfer process or required data: Steve Maranto, SMaranto@uhy-us.com b. UHY may provide DRS with data received under subsection (4)(a) of this Agreement, as needed, so that DRS may provide training or address questions or data discrepancies with City of Everett. 5. DATA TRANSMISSION To ensure Data is encrypted during Data Transmission, all Data will be transmitted using a managed file transfer (MFT) platform that is security compliant with Washington State Office of Cybersecurity data encryption standards, Encryption Standard, SEC 08-02-S as amended or superseded. UHY will provide City of Everett with access to its MFT platform to facilitate the Data transfer. City of Everett will provide the Data outlined in subsection (4)(a) of this Agreement within fifteen (15) business days of either DRS’ or UHY’s request, unless otherwise agreed to. 6. DATA SECURITY a. Safeguards Against Unauthorized Access and Redisclosure. UHY must protect and maintain all Data against unauthorized use, access, disclosure, modification, or loss. This requires UHY to employ reasonable security measures, which include restricting access to the Data by: i. Allowing access only to staff, officials, and agents of UHY that have an authorized business requirement to view the Data who need it to perform their official duties in Docusign Envelope ID: 261FB988-1AC6-42C0-A96C-9E29D7AE0699