2024-08-14 CC Packet - Laserfiche WebLink

Home Browse Search

EXHIBITA STATEMENTOFWORK This Statement of Work (ÐSOWÑ), dated July 25, 2024,is entered into pursuant to the Master Services Agreement (ÐAgreementÑ), dated July 25, 2024,and among Arete Advisors, LLC, a Florida limited liability company having a place of business at 4800 T-Rex Avenue, Suite 350, Boca Raton, FL 33431(ÐAreteÑ), McDonald Hopkins LLC, a law firm having a place of business at 39533 Woodward Avenue, Suite 318, Bloomfield Hills, MI 48304(ÐCounselÑ), as counsel for and on behalf of CIty Of Centerville, having a place of business at 1880 Main Street, Centerville, MN 55038 (ÐClientÑ) (Arete, Counsel, and Client are each a ÐParty,Ñ and collectively the ÐPartiesÑ). All capitalized terms not otherwise defined in this SOW shall be defined as set forth in the Agreement. 1.Services. Overview: Arete Advisors will perform forensics investigative services including: Conduct a forensics analysis to determine scope of attack, whether there was exfiltration of data, and assure a clean bill of health. I.Incident Response Support Arete will provide support for the overall Investigation effort including recommendations, validation of measures taken, review of architecture andsecurity controls and malware specific mitigation measures. Provide client updates and coordination. II.Forensics Analysis Artifacts and Malware -Logs Arete will perform analysis on the available email logs consisting of message trace logs, unified audit logs, and exchange logs looking for malicious behavioral patterns, evidence of compromise, indications of financial or wire fraud, rule creation, and evidence of access to and/or exfiltration of sensitive data. Arete will analyze one (1) email instance forevidence of threat actor behavior.This analysis is limited to one (1) M365 Email Tenant (ÐTenant EnvironmentÑ) orone (1) MS Exchange Server (ÐExchange EnvironmentÑ) only. Additional hours are required for analysis of any environment other than Tenant Environment or Exchange Environment. Arete will examine the mailboxes of up to three (3) identified compromised accounts within the Tenant Environment or Exchange Environment for phishing emails and external outbound email transfers. Additional hours arerequired for examination of activity beyond three (3) instances/transfers/ or accounts, including multiple frauds, multiple accounts, or wire transfers. III.OPTIONAL -Report of Findings AreteÓs analysis will include the production of a forensic update presentation and technical appendix to Client and Counsel, if requested by Counsel, containing the findings of the forensics investigation and security validation. Arete will produce a written report for an additional fee, if requested by Counsel. /ƚƓŅźķĻƓƷźğƌLƓŅƚƩƒğƷźƚƓ tğŭĻ΋Њ www.areteir.com