HP ValuPack Consulting Description Security Vulnerability Solution ValuPack

Transcription

1 HP ValuPack Cnsulting Descriptin Security Vulnerability Slutin ValuPack HP ValuPacks are standardized cnsulting services, prvided by HP Cntact Center Service Prfessinals, with pre-defined custm deliverables that fcus n administering yur HP cmputing envirnment. ValuPacks are specifically designed t give yu a selectin f rapid, affrdable, highquality services that cmplement yur HP supprt agreement and expand yur inhuse technical resurce capabilities. ValuPacks ffer the fastest qutatin and delivery pssible, with flexible billing ptins and streamlined rdering.

2 Cpyright services prvided, infrmatin is prtected under cpyright by Hewlett-Packard Cmpany Unpublished Wrk -- ALL RIGHTS RESERVED Hewlett-Packard Cmpany cnducts its business in a manner that cnserves the envirnment and prtects the safety and health f it emplyees, custmers and the cmmunity. Hewlett-Packard Cmpany believes the infrmatin in this dcument is accurate as f its publicatin. The infrmatin cntained herein is subject t change withut ntice. The nly warranties fr HP prducts and services are set frth in the express warranty statements accmpanying such prducts and services. Nthing herein shuld be cnstrued as cnstituting an additinal warranty. HP shall nt be liable fr technical r editrial errrs cntained herein r inadvertent missins. HP Supprt Services are gverned by Exhibit SS5 and the HP Terms and Cnditins f Sale and Service (E16) r HP Care Pack Supprt Service Agreement Terms and Cnditins. Prprietary Ntice Restrictin n Use and Disclsure f Prpsal and Qutatin Infrmatin Data - The infrmatin cntained in this HP ValuPack Cnsulting Descriptin has been furnished n a cnfidential and restricted basis. It is t be used fr the sle purpse f evaluating Hewlett-Packard Cmpany as a prvider f the gds and/r services described herein and shall be returned upn request. It is furnished in cnfidence with the understanding that it will nt, withut the prir written permissin f Hewlett-Packard, be used r disclsed fr ther than evaluatin purpses; prvided, hwever that in the event a cntract is awarded n the basis f this ValuPack Cnsulting Descriptin, the custmer shall have the right t use and disclse this Infrmatin t the extent prvided in the cntract. Hewlett-Packard represents nly the HP prducts and services as set frth herein, and makes n representatins, warranties, guarantees, r cmmitments fr any third-party prducts r services. Return f this prpsal t Hewlett-Packard Cmpany using r FAX transmissin will cnstitute legal acceptance f the deliverables and terms r the prpsal, prvided the HP ValuPack Order Frm has been cmpleted by the Custmer. Please see ur web site fr a cmplete menu f available per event services at VP Cnsulting Descriptin Page 2 f 11

3 1.0 Overview: 1.1 Request: The custmer r purchaser as identified in the HP ValuPack Order Frm t this ValuPack Cnsulting Descriptin, hereinafter the Custmer, has requested that the HP Services Cntact Center, hereinafter HP, prvide the Security Vulnerability Slutin ValuPacks. 1.2 ValuPack Optins: The Security Vulnerability Slutin ValuPack ffers the Custmer nine (9) ptinal cnsultative services: Optinal Cnsultative Service VP ID. SMB Security Implementatin Review 401 SMB Patch Device / Applicatin Assistance 402 SMB Cnfiguratin Change Assistance 403 SMB Plicy & Prcess Change Recmmendatins 404 SMB Validate Explit(s) 405 SMB Architecture Change Recmmendatins 406 SMB Remte Access Review 407 SMB Rapid Respnse 408 SMB T&M Security Cnsultative Services Methd f Delivery: XX Remte On-Site (at the Custmer s lcatin) 2.0 Agreement: 2.1 General: This HP ValuPack Cnsulting Descriptin, tgether with the Hewlett-Packard Cmpany Terms and Cnditins f Sale and Service, HP Services Per Event Supprt, HP ValuPack Cnsulting & Shrt-Term Cnsulting Warranty cnstitute the entire agreement ( Agreement ) between the parties with respect t its subject matter. The Custmer s additinal r different terms and cnditins will nt apply. VP Cnsulting Descriptin Page 3 f 11

4 HP ValuPack Cnsulting services will be prvided r arranged by HP. The Custmer must have an active Sftware supprt cntract with HP r have a valid supprt cntract with a third-party and accept all respnsibility fr supprt services required during the delivery f this HP ValuPack. Any prduct(s) updated thrugh this cnsulting are limited t HP licensed prducts fund n the custmer s HP Sftware Supprt agreement. 2.2 Gegraphic Availability: This HP ValuPack Cnsulting service is currently available in the United States and Canada. 2.3 Eligibility: All Hewlett-Packard Cmpany sftware prperly licensed by Hewlett-Packard Cmpany r the riginal manufacturer and supprted by HP Services may be eligible fr HP ValuPack cnsulting. Unless therwise specified within this dcument, the sftware and the system(s) n which it is installed must be prperly maintained at the latest majr revisin level, including Engineering Change Orders (patches & updates) and must cntain at least the minimum hardware and prerequisite sftware as specified in the applicable Sftware Prduct Descriptin (SPD) r prduct dcumentatin in the absence f an SPD. 2.4 Prerequisites: Custmers purchasing the Security Vulnerability Slutin ValuPack must satisfy all f the fllwing requirements: Purchased an HP PrLiant and the HP PrLiant SystemMinder Care Pack between 22-March-2004 and 31-Octber-2004 Prperly register the HP PrLiant SystemMinder Care Pack befre 15-Nvember-2004 Taken advantage f the free ffer fr Remte Vulnerability Assessment Scan prir t 31-January Custmer Respnsibilities: As part f this agreement the Custmer will be respnsible fr the fllwing: Assigned a designated Custmer Prject Manager, wh n behalf f the Custmer, will grant all apprvals, prvide infrmatin, and therwise be available t assist HP in facilitating the delivery f this HP ValuPack. The Custmer Prject Manager must be available fr the duratin f the HP ValuPack via direct telephne access, pager access, r telephne messaging with a guaranteed respnse time f nt mre than thirty minutes. The Custmer will prvide HP with details n the current cnfiguratin and tplgy infrmatin including hardware platfrm(s), perating system(s) and applicatin(s). VP Cnsulting Descriptin Page 4 f 11

5 The Custmer will maintain a current backup cpy f the perating system, netwrk system, develpment prgrams, and all ther applicable sftware prgrams, data and files. Assure HP that all prducts serviced by this HP ValuPack are prperly licensed t the Custmer. Prvide fully privileged access t the system(s) n which this ValuPack cnsulting service will take place via dial-in facilities r ther remte access methd, acceptable t HP, as required t supprt remte cmmunicatins fr the Custmer s system(s) and / r envirnment. Prvide infrmatin and data as requested by the assigned HP Service Prfessinal, Technical Supprt Engineer, r Cnsultant. Prvide the Security Vulnerability Assessment Reprt Assure HP that the security infrastructure and systems envirnment n which the ValuPack services are targeted are cmmercially available and are industry standard prducts. Immediately ntify HP in the event f changes t equipment cnfiguratin and/r changes t sftware prducts installed n the system(s) t be services by this ValuPack. Prvide full and uncnditinal access t any surce cde assciated with the delivery f this ValuPack Fr remte service which requires HP t access the Custmer s system(s), btain, install and demnstrate as peratinal, and at n cst t HP, any mdems r ther necessary Custmer r third-party wned and/r maintained equipment and r sftware t assure HP a secure electrnic cnnectin t the Custmer s envirnment, which culd affect the ability f HP t fulfill its bligatin(s) f this HP ValuPack cnsulting service. 4.0 HP Respnsibilities: As part f this agreement, HP will be respnsible fr the fllwing: HP will review the Custmer s purchase f the HP ValuPack, in accrdance with infrmatin the Custmer prvides n the attached HP ValuPack Order Frm. HP will schedule delivery f the ValuPack fllwing receipt f cmpleted HP ValuPack Order Frm and fllwing HP s acceptance f the rder, in accrdance with standard business practices and at the earliest pssible data accrding t staffing levels f the HP Service Prfessinal, Technical Supprt Engineer r Cnsultant prviding the cnsulting service. Prviding all services between the hurs f 8:00 AM and 5:00 PM lcal time, Mnday thrugh Friday, excluding HP published hlidays. After hurs delivery may be available pending resurce availability. ALL services under this ValuPack will be delivered remtely using telecmmunicatins and ptinally ther cnnecting tls. Prvide the ValuPack cnsulting services f an HP Service Prfessinal, Technical Supprt Engineer, r Cnsultant prficient in the service and prducts assciated VP Cnsulting Descriptin Page 5 f 11

6 with the ValuPack. Request fr ValuPack services ccur directly with the end-user custmer. The Security Vulnerability Slutin ValuPack includes the fllwing ptinal cnsultative services frm which the Custmer may select as apprpriate. Each f the ptinal cnsultative services is limited t ne-hur (1 hur) f the HP Service Prfessinal s, Technical Supprt Engineer s r Cnsultant s cnsulting time; unless therwise specified. SMB Security Implementatin Review [VP401]: Prvide up t ne-hur f cnsulting, remtely review with the Custmer representative the Security Vulnerability Assessment Reprt, suggesting prcesses and additinal actins fr a mre secure envirnment. HP will prvide the Custmer with fllw-n dcumentatin f the review. This service is specifically designed t cmpliment and extend the services available in the Remte Vulnerability Assessment Scan. SMB Patch Device / Applicatin Assistance [VP402]: Remtely prvide the Custmer with additinal recmmendatins fr the apprpriate testing and deplyment f patches. HP will prvide the Custmer with fllw-n dcumentatin f the recmmendatins. SMB Cnfiguratin Change Assistance [VP403]: Remtely review with the Custmer, a single security system vulnerability, prviding recmmendatins fr cnfiguratin changes twards a mre secure envirnment. HP will prvide the Custmer dcumentatin f the assistance prvided. SMB Plicy & Prcess Change Recmmendatins [VP404]: Remtely review with the Custmer current security plicies and/r prcedural dcumentatin assciated with the identified vulnerability. Review includes recmmended changes t the plicy r prcedure cnsistent with rganizatinal gals and bjectives. HP will als prvide dcumentatin f the recmmended changes in accrdance with standard plicy cntent and industry standards r best practices. SMB Validate Explit(s) [VP405]: In cperatin with the Custmer manually validate that identified vulnerability is explitable and culd result in a security breach. Prvide dcumentatin f penetratin testing activities and results. SMB Architecture Change Recmmendatins [VP406]: Review with the Custmer the current security architecture with respect t identified vulnerabilities. Prvide the Custmer with recmmended changes t the security architecture and prvide dcumentatin f the recmmended changes with related design verview. SMB Remte Access Review [VP407]: Review with the Custmer current remte access infrastructure with respect t identified vulnerabilities. Prvide the Custmer with recmmended changes t the remte access infrastructure. Prvide the Custmer with dcumentatin f the recmmended changes with related design verview. SMB Rapid Respnse [VP408]: Prvide the Custmer with up t ne-hur f emergency assistance with a certified incident handler t cntain, eradicate and recver frm security breach/incident, with dcumentatin f industry standard incident handling prcedures. SMB T&M Security Cnsultative Services [VP409]: Prvide the Custmer with up t tw hurs f remte cnsultative services f a security vulnerability VP Cnsulting Descriptin Page 6 f 11

7 cnsultant. Additinal security cnsultative services requiring extensive services may be available and may require a frmal Statement Of Wrk. 5.0 HP ValuPack Cnsideratins, Restrictins, and Cnstraints: The fllwing cnsideratins, restrictins, and cnstraints are applicable t the delivery f this HP ValuPack: The Security Vulnerability Slutin ValuPack is available fr purchase thrugh 31-January All services will be prvided accrding t the hurs stated under HP Respnsibilities and Cst f ValuPack herein. All sftware, hardware, and firmware encuntered in the delivery f this HP ValuPack must adhere t the minimum hardware and sftware requirements as specified in the applicable Sftware Prduct Descriptin (SPD) and its addenda and/r requirements r recmmendatins f the manufacturer(s). If security restrictins apply t any r all Custmer systems t be supprted by this ValuPack, the Custmer may be required t assume additinal respnsibilities fr maintaining the system and/r sftware. HP will nt perfrm any mdificatins t prductin systems withut explicit written authrizatin frm the Custmer. Any installatin service being prvided as part f this ValuPack is limited t the mst current versin f sftware and/r firmware. If HP is unable t cmplete the deliverables specified in this HP ValuPack Cnsulting Descriptin within thirty (30) days fllwing cmmencement f this ValuPack service, due t the Custmer s failure t meet its bligatins, the ValuPack will be cnsidered cmpleted and will be inviced. Delays caused by any failure f the Custmer t meet the Custmer Respnsibilities will be charged at the prevailing HP US Cntact Center cnsulting rate fr time and materials. The fllwing services are nt included under this agreement, unless specifically included elsewhere in this dcument: Services n prprietary and/r custm-develped systems. Use f any tls prviding electrnic access t Hewlett-Packard Cmpany. Electrnic prblem submittal and access t electrnic databases may be available thrugh a supprt cntract. The Custmer may already have such a cntract in place. Custmer mdificatins t the HP supprted sftware r hardware Sftware prduct media, dcumentatin, licenses, and license updates Services utside f the cntracted hurs f cverage Services required due t imprper treatment r use f the equipment r sftware by ther(s) then HP. VP Cnsulting Descriptin Page 7 f 11

8 Services required due t unauthrized attempts by ther than HP persnnel t repair, maintain, r mdify the equipment and/r sftware Services required due t causes external t the Hewlett-Packard Cmpany maintained equipment and/r sftware Individual hardware prducts that cannt, in the pinin f HP, be prperly repaired due t excessive wear r deteriratin. These prducts may be withdrawn frm service upn applicable prir ntice Individual sftware prducts that have been discntinued r reclassified as Custmer Supprted. These prducts may be withdrawn frm service upn applicable prir ntice Cde, cde examples, cmmands, sample cmmands r mdificatins t cde r cmmands Service r cnsulting delivered at the Custmer s lcatin. 6.0 Acceptance f HP ValuPack Deliverables: As this HP ValuPack cnsists f prfessinal advice, technical supprt services, and/r packaged cnsulting, there is n Acceptance Test Plan, acceptance test, r frmal acceptance included. The HP ValuPack will be cnsidered cmpleted by HP and accepted by the Custmer when ne r mre f the fllwing criteria have been satisfied: HP has cmpleted its bligatins and deliverables f the HP ValuPack as detailed under HP Respnsibilities herein Frty-five (45) days fllwing acceptance f the ValuPack Order by HP Twenty-ne (21) days fllwing cmmencement f the delivery f the ValuPack. VP Cnsulting Descriptin Page 8 f 11

9 7.0 Cst f HP ValuPack: HP Services Custmer Services, US Cntact Center and Custm Prjects Prgram are pleased t ffer this HP ValuPack at the fllwing csts (quted in US currency): Please check ( ) thse ValuPacks that yu wish t purchase and Ttal csts: Optinal Cnsultative Service VP ID. Cst SMB Security Implementatin Review 401 $ 250 SMB Patch Device / Applicatin Assistance 402 $250 SMB Cnfiguratin Change Assistance 403 $250 SMB Plicy & Prcess Change Recmmendatins 404 $250 SMB Validate Explit(s) 405 $250 SMB Architecture Change Recmmendatins 406 $250 SMB Remte Access Review 407 $250 SMB Rapid Respnse 408 $250 SMB T&M Security Cnsultative Services 409 $500 TOTALS $ NOTES: Hurs based n custmer s lcal time fr nsite and delivery site time fr remte effrt. Service is subject t applicable Federal, State and Lcal Taxes. Nn-fixed price csts are estimates nly. In the event f a ptential cst verrun, the Service Prfessinal, Technical Supprt Engineer, Cnsultant r third-party vendr will cntact the Custmer as sn as such ptential is detected, and the change management prcess will be invked. VP Cnsulting Descriptin Page 9 f 11

10 8.0 HP ValuPack Cnsulting Warranty: Per Event Supprt, HP ValuPack Cnsulting & Shrt-Term Cnsulting Warranty Hewlett-Packard Cmpany Terms & Cnditins f Sale & Service [E16] and HP Supprt Services [SS5], tgether with this HP ValuPack Cnsulting Descriptin, defines Hewlett- Packard Cmpany s service delivery bligatin fr Per HP ValuPack Cnsulting prvided by the HP Services U.S. Cntact Center (HP). HP shall determine the categry f labr required, based n the technical cmplexity f the service r cnsulting requested, as described in this HP ValuPack Cnsulting Descriptin, and assign HP Service Prfessinal(s), Technical Supprt Engineer(s), Cnsultant(s) r a third-party vendr accrdingly. The HP ValuPack Cnsulting prvided is in the nature f prfessinal assistance and advice. HP warrants that the service will be perfrmed in a gd wrkman-like manner. Hwever, HP des nt warrant r guarantee in any frm r manner the results and/r achievements f the service prvided. The service des nt include advice r cnclusins abut the ultimate state f peratin r security f the Custmer s system(s). HP is nt respnsible fr the wrk r activity f any nn-hewlett-packard Cmpany persnnel. Except fr the express warranties stated herein, Hewlett-Packard Cmpany disclaims all warranties, including all implied warranties f merchantability and fitness fr a particular purpse, and the stated express warranties are in lieu f all bligatins r liabilities n the part f Hewlett-Packard Cmpany arising ut f r in cnnectin with the perfrmance f the service r cnsulting. 9.0 Signature Acceptance: The Custmer s signature indicates the custmer s acceptance f this HP ValuPack Cnsulting Descriptin and its gverning Terms and Cnditins. Receipt f a valid frm f payment, as indicated n the attached rder frm, cnstitutes authrizatin fr Hewlett-Packard t schedule and deliver the wrk as specified herein and t issue invice(s) in accrdance with Sectin 6.0, Acceptance f HP ValuPack Deliverables. Please cmplete the HP ValuPack Order frm and return the cmplete HP ValuPack Cnsulting Descriptin t Hewlett-Packard at the address, FAX, r address belw. Upn ur acceptance f this engagement, Hewlett-Packard will sign and return a cpy t yur attentin, indicating HP s acceptance f yur rder. services_engineering@hp.cm Hewlett-Packard Cmpany 20 Perimeter Summit Blvd., M/S 914 FAX: Atlanta, GA 3031 VP Cnsulting Descriptin Page 10 f 11

11 hp services valupack rder frm t custmer: please cmplete the fllwing infrmatin and fax this frm back t: name Kim Fney fax # (888) delivery lcatin custmer cntact cntact phne n. cmpany name custmer infrmatin invice/billing lcatin cmpany name invice address delivery address custmer custmer fax n. tax infrmatin: Taxable system handle tax exemptin # (attach cpy f certificate) system infrmatin case number prduct infrmatin System mdel valupack number U3650AA VP current s revisin desired s revisin charge amunt quantity rdered Remte supprt mdem enabled? yes n start date end date payment infrmatin payment methd: d nt enclse payment. please select ne f the fllwing: [ ] please send invice (fr use with purchase rder) NOTE: a purchase rder will nly be accepted fr amunts ver $ [ ] custmer signature authrizatin purchase rder n. purchase rder amunt is required fr payment - hard cpy attached. nt required fr payment [ ] please charge t my credit card: visa mastercard am. express discver card number exp. date authrized signature cardhlder name (type r print) service authrizatin and terms and cnditins: services are subject t hp terms and cnditins f sale and service, exhibit e16. payment is due 30 days frm hp's invice date. custmer's signature n this frm cnstitutes authrizatin fr hp t invice custmer fr the abve referenced services. authrized custmer signature printed name date authrizing hp signature (fr acceptance) printed name date