HomeMy Public PortalAbout148-2021 - IT - Insight Public Sector, Inc - Security Affiliation Agreement .uI.
InsightT1'
PUBLIC SECTOR
October 21, 2021
Statement of Work # 39407
CDCT Veeam funded DP Assess DRLawson 10 2021
1. PARTIES
"Insight" "Client"
Insight Public Sector, Inc. City of Richmond
13755 Sunrise Valley Drive, Suite 750 50 N. 5th Street, Suite XX
Herndon, VA 20171 Richmond, IN 47374
Attn: John Meyer Attn: Christopher Taylor
2. ENTIRE AGREEMENT
This Statement of Work ("SOW") is effective as of the date last signed below ("SOW Effective Date").
Client purchase and use of the Services described herein are subject to the separate written
agreement Client has with Insight for the Services (herein after, the"Agreement"). If no written
Agreement exists, Insight's online Terms of Sale located at
https://www.insight.com/en US/help/terms-of-sale-services-ips.html, will govern. Any additional or
different terms or conditions contained in any purchase order or other documents provided by Client
are considered material alterations to this Statement of Work, expressly rejected and will not be
binding upon Insight.
This SOW, including the Agreement and all documents either attached or incorporated by reference,
forms the entire agreement with respect to the subject matter in this SOW. If there is a conflict
between this SOW and the Agreement, the Agreement will control with respect to the subject matter
thereof, unless expressly amended in this SOW. Electronic signatures on this SOW (or copies of
signatures sent via electronic means) are the equivalent of handwritten signatures.
Terms not defined in this SOW have the meaning attributed to them in the Agreement unless
otherwise specified in this SOW. "Affiliate"means, with respect to a party, an entity that controls, is
controlled by, or is under common control with such party. Any general description of the services or
results thereof contained in any summary or related information accompanying this SOW, is for
informational purposes only and does not constitute part of the agreement between the parties or,
modify any agreement or SOW between the parties.
3. SCOPE OF SERVICES
Insight is pleased to perform the following services ("Services") under the terms and conditions of this
SOW.
3.1. Service Description
The following is a high-level description of the Services Insight will provide:
Insight will work as an extension of the Client's team to provide this complimentary data protection
assessment. This engagement involves assessing the Veeam data protection environment at Client
location with a focus on architecting a new modern data protection platform and ensuring the solution
is secure and protected from ransomware threats.
3.1.1. Scope and Approach
Insight will perform the following Services:
Project Initiation
• Conduct a conference call project kick-off with Client's staff to discuss project scope,
objectives, timeframes, and establish expectations
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 1 of 9
Contract No. 148-2021
s ,
✓ CDCT Veeam_funded_DP_Assess_DRLawson_10_2021 Statement of Work# 39407 v 1.0
City of Richmond October 21, 2021
• Review current data protection environment
• Determine current challenges, SLAs, and strategic objectives
• Confirm dates
• Review proposed Deliverable contents
Analyze Data Protection Environment
• Work with Client contacts to provide binaries and instructions to run data collection against
selected environments:
o Client to run data collection tools to gather necessary data
• Process collected data and review for completeness
• Interview backup administrator(s) to collect architectural information on the current backup
environment
• Analyze the data collected and produce report documenting current state and data protection
risks
Documentation
• Define and document current source backup and restore environments based on assessment
• Provide recommendations and roadmap for future state data protection solution'based on
overall requirements
3.1.2. Location
Performance of the Services will be remote.
3.2. Project Management
Insight will provide the following project management and technical direction:
Project Coordinator
• Serve as the primary point of contact on all project issues, needs, and concerns
• Facilitate introduction kickoff call to review scope and project expectations
• Schedule and coordinate the necessary resources to support the project
• Complete Change Request (CR) documentation as required; and obtain signed CRs for
mutually agreed upon changes
• Facilitate closeout meeting, as needed
3.3. Deliverables
Insight will provide the following Deliverables:
Overall Project
• Data protection assessment presentation and modernization roadmap
Project Management
Project Coordinator
• Communications/escalation contact list
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 2 of 9
CDCT_Veeam_funded_DP_Assess_DRLawson_10_2021 Statement of Work# 39407 v 1.0
City of Richmond October 21, 2021
3.4. Insight Responsibilities
Insight is responsible for the following:
1. Insight will provide the applicable and necessary labor, supervision, maintenance,
consultation, and/or materials to perform the Services and provide the Deliverables described
in this SOW. For purposes of this SOW, "Deliverables" means any materials produced in the
course of performing Services listed or specifically required to be delivered to Client under this
SOW.
3.5. Client Responsibilities
The estimated duration and associated fees presented in this SOW are based on the following Client
Responsibilities. Should any element(s) of these be lacking during execution of Services, additional
time, associated fees, and expenses may be required.
Client is responsible for the following:
1. Client will provide a resource to run the Insight provided assessment data collection toolkits.
2. Client will provide HTTPS connectivity with the Insight portal to upload collected information.
3. Client will be available for a short interview after initial analysis for any clarifications needed.
4. Client will provide a project contact with decision-making authority to support the scope of
services described in this SOW and ensure the proper personnel are scheduled to review each
completed Service or Deliverable upon notification of completion by Insight.
5. If applicable, Client will provide site contacts for each Client location. Each such contact will
provide Insight with sufficient detail regarding his/her site, and will coordinate or perform
required onsite work, as reasonably requested by Insight and Client IT, for the duration of the
project.
6. Client will provide Insight the necessary access to internal experts, location(s), critical
systems, applications, workspace, and equipment (telephones, LAN connectivity, printer
access, passwords, keys, etc., as applicable) required at each field location to complete the
project. Access to Client systems will be provided to Insight via either onsite direct access or
remote/VPN access. If Client does not allow remote/VPN access to Client systems and remote
work is necessary, then Client will make local resources available to be utilized by Insight to
accommodate for this lack of access. If Client cannot provide access or local resources, then
additional project duration, labor hours, travel expenses, and other costs may be incurred and
due to Insight by Client.
7. Client will provide the necessary hardware, software, tools, and permits required for the
successful completion of the project prior to Insight's arrival. Further, Client is responsible for
all licensing requirements to be compliant per their own agreements.
8. Client is responsible for all product and material, including distribution and transport of Client-
owned product and material, unless otherwise specified in writing. Product and material are
defined as any items purchased, owned and/or provided by Client (or others) that Insight is
required to use for fulfillment of any Services described herein.
9. Client is responsible for providing adequate and secure onsite storage for all Client-owned
product and material unless otherwise specified in writing.
10. If applicable, Client will be responsible for: (a) back-up and/or data migration of existing data
unless otherwise agreed to by Insight; (b) computer system and network designs; and (c)
component selection as it relates to the performance of the computer system and/or the
network.
11. Client is responsible for maintaining physical, electronic, and procedural controls to ensure the
confidentiality, integrity, and availability of Client's information on all applicable Client
computing systems used to store or transmit Client's information, in accordance with current
applicable industry standards and best practices.
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 3 of 9
CDCT Veeam_funded_DP Assess_DRLawson_10_2021
City of Richmond Statement of Work# 39407 v 1.0
October 21, 2021
12. Client is responsible for managing and maintaining: (a) reasonable firewalls and, if
appropriate, encryption; (b) regular back-ups of Client's information; and (c) least-privileged-
based access controls (including provisioning, de-provisioning, authentication, authorization;
and accountability controls).
13. Client and its employees, contractors, and agents will: (a) cooperate with any reasonable
request of Insight, (b) provide input throughout the project and will review progress at review
meetings requested by Insight; and (c) provide Insight with access to all of Client's in-
formation, documentation and technology, necessary for Insight to perform the Services,
including a list of all Client and third-party contacts necessary for Insight to do so. Such
cooperation, input, access, and license are critical to this project, and Client's representation
at all review meetings is essential. If applicable, Insight is hereby granted and shall have a
nonexclusive, royalty-free license, during the term of the Services, to access and use the
Client Technology solely for the purposes of delivering the Services to Client. "Client
Technology"shall mean any intellectual property owned by Client that will be used by Insight
in performing the Services under this SOW.
3.6. Project-Specific Assumptions
The estimated duration and associated fees presented in this SOW are based on the following
assumptions. Should any element(s) of these be lacking during execution of the Services, additional
time, associated fees, and expenses may be required.
•
1. If applicable, any onsite skills transfer that takes place during this project will not replace the
manufacturer's formal system implementation and administration classes.
2. Each party agrees that personnel will not be asked to perform, nor volunteer to perform,
engineering and/or consulting tasks that lie outside the skill sets and experience of personnel.
Personnel have the right to decline a service request if the request falls outside their scope of
experience and expertise.
3. The following are considered out-of-scope and are not part of the Services:
a. Veeam remediation, implementation, or upgrade services
b. Formal user training
3.7. Change Request Procedure
If either party identifies alterations to the scope of work in this SOW, including Deliverables, hours
needed to complete work, milestones and related pricing, it shall be brought to the attention of the
other party's management by completing and submitting a Change Request Form. A Change Request
Sample is included as an attachment.
Change Request Forms are proper in the following examples as well as other situations identified by
the Parties:
• Changes to environment, scope, management, performance of projects (regular and special),
milestones, tasks, systems, service levels
• Additional resources, scope, projects, new services, tasks
• Changes to management and control of hardware and software
• Adjustments to baselines, assets, volumes, or other areas where change over time results in
the need to adjust pricing
• Additions, deletions, and/or changes to sites where services are provided or the nature of
services provided at a site
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 4 of 9
•
CDCT Veeam_funded_DP_Assess_DRLawson_10_2021 Statement of Work# 39407 v 1.0
City of Richmond October 21, 2021
Each parry's respective management will review the Change Request Form to determine whether a
modification to the scope is necessary and what effect the implementation of such a change may have
on the project. If any such change causes an increase or decrease in the cost or time required for
performance of the work, the price and/or delivery schedule shall be equitably adjusted and identified
within the Change Request Form. Estimated turnaround time for such determination is 5 days. If both
parties mutually agree to implement the change in scope, the Change Request Form will be
incorporated into this SOW as an addendum when signed by authorized representatives of both
parties.
If Insight believes an operational change is required and Client does not agree to the change (or the
applicable change request), Insight will be relieved of any affected service levels. Any additional
resources or costs expended or incurred to address the failure to make the change will be treated as
an additional service. Notwithstanding the foregoing, Insight may make changes to the Services, the
standards, operation procedures, allocation and quantity of system resources used, and administrative
processes that do not have a material adverse effect on the service levels or cause an increase to the
fees without the consent of Client.
4. SCHEDULE
4.1. Start Date
The project start date will be mutually determined upon receipt of this signed SOW and, if applicable,
a valid Purchase Order(PO). A minimum lead time of 20 business days from receipt of both
documents may be required for scheduling purposes.
If Client causes any delays to the delivery start date, which was agreed upon by both parties in writing
(email is acceptable), Client will incur additional fees based upon such delay, including but not limited
to, travel expenses already incurred, if any, and/or other equitable relief as a remedy for such delay.
The delays and charges will be defined and communicated through the Change Request process
described in this SOW.
Services will be performed over a consecutive timeframe unless otherwise provided herein. If Client
requests or causes a change in the schedule that prohibits Services from being delivered in a
consecutive timeline, an additional lead time of 20 business days (from written confirmation to resume
Services) may be required, new resources may be assigned, and there may be additional fees.
4.2. Estimated Duration
The Services'duration will be approximately 2 weeks.
5. PRICING/INVOICING
5.1. Fixed Fee
The value of the Services provided is $7,200.00, and the Services will be provided to the Client at no
charge. Services are funded by Veeam Data Protection Assessment funding.
The fixed fee is based on the following:
Project Description Price
Data Protection Assessment $7,200.00
Less Data Protection Assessment Funding ($7,200.00)
Total ated Cato
;., .. .. y
0
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 5 of 9
CDCT Veeam_funded_DP Assess_DRLawson_10_2021
City of Richmond Statement of Work# 39407 v 1.0
October 21, 2021
5.1.1. invoicing
As of October 21, 2021, Veeam Data Protection Assessment funding in the amount of$7,200.00 is
available to the Client. Insight shall apply the Veeam Data Protection Assessment funds to all invoiced
fees for the Services described in this SOW. Insight will invoice the Client for any taxes incurred (if
applicable).
5.2. Pricing Notes
1. If the project is executed under the premise of a partner-based funding supplement, Insight
will prepare and coordinate all activities and documentation related to the funding supplement.
If Insight complies with all terms, conditions, and processes required by the partner funding
program, the partner will reimburse Insight for the Services outlined in this SOW, at the
amount listed in the Pricing/Invoicing section of this SOW.
2. Pricing is valid for 30 days from the date of this SOW.
3. Pricing and estimated time to complete this engagement are based upon Client providing
necessary access to internal experts, location(s), all critical systems, applications, and
hardware required to complete the project.
4. Insight is not responsible for delays or repeated tasks caused by factors outside Insight's
control. These factors include, but are not limited to, availability of Client personnel,
equipment, and facilities. Client will compensate Insight for any out-of-scope work requested
by Client on an hourly basis at Insight's standard hourly rates (unless otherwise agreed to in
writing by the parties).
6. SPECIAL TERMS AND CONDITIONS
6.1. Project Kickoff
A project kickoff meeting will be held to review project expectations, discuss IT infrastructure design,
discover any possible problems/risks, and formulate an appropriate plan (including a firm engagement
schedule and downtimes).
6.2. Business Hours
Work will be performed during normal business hours unless otherwise mutually agreed upon. Normal
business hours are defined as an 8-hour day, Monday through Friday, excluding designated Insight
Holidays.
6.3. Travel Expenses
Travel expenses, if applicable, are not reimbursable.
6.4. Constraints
Work that is not included in the Scope section is considered to be out of scope. Any out-of-scope work
must be verified and pre-authorized by Insight prior to commencement through the Change Request
process.
6.5. Acceptance
After Insight delivers a Service or Deliverable to Client, if such Service or Deliverable does not
substantially conform to the requirements in the applicable SOW, then Client must provide Insight
with written notice adequately detailing such non-conformance no later than 5 days following the date
such Service or Deliverable was provided to Client. If Client fails to provide notice within this 5-day
period, the Service and Deliverable will be deemed accepted.
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 6 of 9
CDCT Veeam_funded_DP Assess_DRLawson_10_2021 Statement of Work# 39407 v 1.0
City of Richmond
October 21, 2021
6.6. Reference
Insight may use the Services as a reference for external purposes. This may include verbal
endorsements, printed advertisements, and other marketing references to prospective customers and
third parties. Any reference activity will be mutually agreed upon in writing by Insight and Client.
6.7. Case Study
Insight may ask Client to serve as an account case study for Insight. If Client agrees, Insight will
prepare a marketing release for publication of non-confidential aspects of the Services (to be reviewed
in advance by Client), in conjunction with Client's name.
6.8. Intellectual Property
Insight retains all right, title and interest in, without limitation, any works of authorship, know-how, or
any invention, device, process, method, development, design, specifications, technique, apparatus,
reports, schematic or technical information (whether patentable or not), documentation, software or
enhancements, improvements, alterations, interfaces, workflows, and best practices developed,
invented, created or reduced to practice by Insight ("Insight IP") which may be used in carrying out
the Services, including any modifications or improvements made to Insight IP during or as a result of
the Services to be performed under this Agreement. Upon payment in full of all amounts due Insight,
all works of authorship developed, invented or created by Insight specifically for Client in accordance
with the details specified in the applicable SOW as part of the Services performed by Insight and as
more particularly described in a SOW to this Agreement ("Work Product"), except for any Insight IP
contained within such Work Product, shall be owned by Client. Insight hereby grants Client a
worldwide, non-exclusive, royalty-free, perpetual, without the right of sublicense, license to use
Insight IP in the course of Client's internal, business operations.
7. DOCUMENT MANAGEMENT
Title Party Name
Project Sponsor City Of Richmond Christopher Taylor
Account Executive Insight David Lawson
Technical Approver Insight Simon Dampier
Service Leaders Insight Jeremy Parsons and Lee Whitaker
Scope and Price Insight John Meyer
Contract Specialist Insight Sam Nelson
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 7 of 9
CDCT Veeam_funded_OP Assess_DRLawson_10_2021 Statement of Work# 39407 v 1.0
City of Richmond
October 21, 2021
8. SIGNATURE BLOCK
By signing below, the undersigned agree they are bound by the terms of this SOW and the
Agreement.
Insight Client
By:
By:
Authorized Representative Authorized Representative
Print Print
Name:
Name:
Title: Title:
Date: Date:
The following section must be completed before this SOW can be processed:
Invoicing Procedures:
1. Method (Client to select one option below):
❑ Mail Invoice - Hard copy invoice will be mailed to:
Company Full Name:
Address:
Attention: Accounts Payable or:
Accounts Payable Contact:
Phone:
❑ Email Invoice - Invoice copy will be sent electronically via email to:
2. PO Process (Client to select one option below):
❑ Client issues system-generated POs or internal reference numbers for service
engagements.
Please fill in the PO Number below and attach a hard copy of the PO to this signed
SOW. Note: Services cannot be performed until a hard copy of the PO is received, or
Billing Reference is provided.
PO Number:
PO Release Number (if applicable):
Internal Billing Reference Number/Name:
❑ Client does NOT issue system-generated PO for service engagements.
Accordingly, performance of and payment for any Services under this SOW do not
require, and are not contingent upon, the issuance of any PO or other similar
document.
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 8 of 9
CDCT Veeam_funded_DP_Assess_DRLawson_10_2021 Statement of Work# 39407 v 1.0
City of Richmond October 21, 2021
9. ATTACHMENT - CHANGE REQUEST SAMPLE
Change Request Form
Change Request#
Client Client Contact Name Insight Contact Name
Original SOW Number Request Date Purchase Order to Apply to
Changes (if applicable).
PO #
State/Federal Contract Reference (if applicable)
CHANGE REQUEST SUMMARY
Original Project Scope
Change Request Description
Project Schedule
Project Pricing
Deliverables
SIGNATURES
•
This is a sample CR - not for execution.
Rev. 09/20Q INSIGHT PROPRIETARY AND CONFIDENTIAL Page 9 of 9