Cyber Security: Simulation Platform

Transcription

1 Service Overview The Symantec Cyber Security: Simulatin Platfrm is a Web hsted Service with immersive and hands-n access t cyber exercises fr ffensive (red team) events, inspired by real-life security scenaris. These events are designed t supprt security training, threat mdeling, and skills assessment. This, with any attachments included by reference, is part f any agreement which incrprates this Service Descriptin by reference (cllectively, the Agreement ), fr thse Services which are described in this and are prvided by Symantec. Table f Cntents Technical/Business Functinality and Capabilities Service Features Custmer Respnsibilities Assistance and Technical Supprt Service-Specific Terms Service Cnditins Service Level Agreement Definitins SYMANTEC PROPRIETARY PERMITTED USE ONLY 1

2 TECHNICAL/BUSINESS FUNCTIONALITY AND CAPABILITIES Service Features The Service is accessible thrugh a secure Web brwser r remte virtual private netwrk (VPN). The Service is delivered thrugh a virtualized IT architecture, including netwrks (DMZs, cre, tec.), systems, applicatins and data. Mulitiple infrmatin security attack scenaris are available in a simulated envirnment. A Mdule is ne f several exercises available that demnstrate the imprtance f cyber security thrugh a cmpetitive simulated envirnment. Each scenari varies in length. The Prtal allws fr user management, scheduling f events, and per-event scring and reprting. Custmer Respnsibilities Symantec can nly perfrm the Service if Custmer prvides required infrmatin r perfrms required actins. If Custmer des nt prvide/perfrm per the fllwing respnsibilities, Symantec s perfrmance f the Service may be delayed, impaired r prevented, and/r eligibility fr Service Level Agreement benefits may be vided, as nted belw. Setup Enablement: Custmer must prvide infrmatin required fr Symantec t begin prviding the Service. Adequate Custmer Persnnel: Custmer must prvide adequate persnnel t assist Symantec in delivery f the Service, upn reasnable request by Symantec. Renewal Credentials: If applicable, Custmer must apply renewal credential(s) prvided in the Subscriptin Instrument within its accunt administratin, t cntinue t receive the Service, r t maintain accunt infrmatin and Custmer data which is available during the Service Term. Custmer Cnfiguratins vs. Default Settings: Custmer must cnfigure the features f the Service thrugh the management cnsle, if applicable, r default settings will apply. In sme cases, default settings d nt exist and n Service will be prvided until Custmer chses a setting. Cnfiguratin and use f the Service(s) are entirely in Custmer s cntrl. Assistance and Technical Supprt Custmer Assistance. Fr questins regarding rder status, billing and invicing, and updating Service ptins, please cntact Custmer Supprt Assistance fr yur regin. Lcal cntact infrmatin is available at: Technical Supprt. The fllwing technical supprt ( Supprt ) is included with the Service. Supprt via telephne r , frm 9:00 AM 9:00 PM Eastern Standard Time. Additinally, Symantec will use best effrts t prvide 24x7 Supprt fr critical, Service impacting issues. Supprt cntact infrmatin will be prvided t Custmer. Fr Supprt via , please cntact cyber-ssp-supprt@symantec.cm. Maintenance. Symantec must perfrm maintenance frm time t time. The fllwing applies t such maintenance: Planned Maintenance. Fr Planned Maintenance, Symantec will use cmmercially reasnable effrts t give Custmer seven (7) calendar days ntificatin, via , SMS, r as psted n the management cnsle. Symantec will use cmmercially reasnable effrts t perfrm Planned Maintenance at times when cllective custmer activity is lw, in the time zne in which the affected Infrastructure is lcated, and nly n part, nt all, f the netwrk. If pssible, Planned Maintenance will be carried ut withut affecting the Service. During Planned Maintenance, Service may be diverted t SYMANTEC PROPRIETARY PERMITTED USE ONLY 2

3 sectins f the Infrastructure nt underging maintenance in rder t minimize disruptin f the Service. Planned Maintenance means scheduled maintenance perids during which Service may be disrupted r prevented due t nnavailability f the Service Infrastructure. Emergency Maintenance. Where Emergency Maintenance is necessary and is likely t affect the Service, Symantec will endeavr t infrm the affected parties in advance by psting an alert n the applicable management cnsle n less than ne (1) hur prir t the start f the Emergency Maintenance. Emergency Maintenance means unscheduled maintenance perids which during which Service may be disrupted r prevented due t nn-availability f the Service Infrastructure r any maintenance fr which Symantec culd nt have reasnably prepared fr the need fr such maintenance, and failure t perfrm the maintenance wuld adversely impact Custmer. SERVICE-SPECIFIC TERMS N Aut-Renewal Ntwithstanding anything t the cntrary in the Agreement, there is n autmatic renewal f the Service. Befre the Service expires, Custmer must cntact Symantec r its channel reseller partner t renew. Service Cnditins Custmer shall have a nn-exclusive, nn-transferable license t use the Symantec Trademarks (as defined belw) slely t refer t the Training Curses and slely in cnnectin with Custmer s advertising and prmtin f the Training Curses as authrized under this Agreement. The marks Symantec, either the wrd marks r the Symantec lgs, and any ther trademarks and service marks adpted by Symantec t identify its prducts and services (the Symantec Trademarks r the Trademarks ) belng t Symantec. Custmer will have n rights in such marks except as expressly set frth herein and as specified by Symantec in writing frm time-t-time. Custmer agrees nt t use the Trademarks r any ther mark likely t cause cnfusin with the Trademarks as any prtin f the Custmer s trade name r trademark fr its business, services r ther prducts. Custmer shall cmply with any marketing and trademark guidelines prvided by Symantec frm time-ttime. Custmer agrees nt t remve and t include all applicable cpyright and Trademarks, and Trademark ntices f Symantec as they appear n advertisements and marketing materials prvided r apprved by Symantec. Any gdwill in the Trademarks resulting frm the Custmer s use shall inure slely t the benefit f Symantec. Custmer shall immediately cease r suspend use f the Trademarks in any marketing material if Symantec ntifies the Custmer in writing that the use f the Trademarks des nt cmply with Symantec marketing and trademark guidelines as are lcated at the fllwing website: Custmer may nt disclse the results f any benchmark tests r ther tests cnnected with the Service t any third party withut Symantec s prir written cnsent. The use f any Service Cmpnent in the frm f sftware shall be gverned by the license agreement accmpanying the sftware. If n EULA accmpanies the Service Cmpnent, it shall be gverned by the terms and cnditins lcated at ( Any additinal rights and bligatins with respect t the use f such Service Cmpnent shall be as set frth in this. Except as therwise specified in the, the Service (including any Hsted Service Sftware Cmpnent prvided therewith) may use pen surce and ther third party materials that are subject t a separate license. Please see the applicable Third Party Ntice, if applicable, at SYMANTEC PROPRIETARY PERMITTED USE ONLY 3

4 Symantec may update the Service at any time in rder t maintain the effectiveness f the Service. SERVICE LEVEL AGREEMENT. General If Custmer believes it is entitled t a remedy in accrdance with this Service Level Agreement, Custmer must submit a Credit Request within ten (10) business days f the end f the calendar mnth in which the suspected service level nncmpliance ccurred. Custmer recgnizes that lgs are nly kept fr a limited number f calendar days and therefre any Credit Request submitted utside f the prvided timeframe will be deemed invalid. All Credit Requests will be subject t verificatin by Symantec in accrdance with the applicable prvisins f this Service Level Agreement. Credit Requests shuld be submitted t cyber-ssp-supprt@symantec.cm. This Service Level Agreement will nt perate: (i) during perids f Planned Maintenance r Emergency maintenance, perids f nn-availability due t frce majeure r acts r missins f either Custmer r a third party; (ii) during any perid f suspensin f service by Symantec in accrdance with the terms f the Agreement r (iii) where Custmer is in breach f the Agreement (including withut limitatin if Custmer has any verdue invices); r (iv) Custmer has nt cnfigured the Service in accrdance with the Agreement. The remedies set ut in this Service Level Agreement shall be Custmer s sle and exclusive remedy in cntract, trt (including withut limitatin negligence) r therwise, with respect t this Service Level Agreement. The maximum accumulative liability f Symantec under this Service Level Agreement in any calendar mnth shall be n mre than ne hundred percent (100%) f the Mnthly Charge payable by Custmer fr the affected Service(s). 99% Service Availability If in any calendar mnth Service Availability is belw ninety-nine percent (99%), Custmer may submit a Credit Request and may receive a Service Credit fr the fllwing percentage credit: Percentage Service Availability Per Calendar Mnth Percentage credit f Mnthly Charge < 100% but >= 99% 25 < 99% but >= 98.0% 50 < 98.0% 100 and terminatin f affected Service at Custmer s discretin In the event Service Availability falls belw ninety eight percent (98%) in any calendar mnth, Custmer shall be entitled t terminate the affected Service and receive a pr rata refund f charges paid in advance fr the affected Service fr the perid after terminatin. DEFINITIONS Capitalized terms used in this, and nt therwise defined in the Agreement r this Services Descriptin, have the meaning given belw: SYMANTEC PROPRIETARY PERMITTED USE ONLY 4

5 Administratr means the individual authrized by Custmer t perfrm the trusted administrative functins within the Service. End User License Agreement (EULA) means the terms and cnditins accmpanying Sftware (defined belw). Infrastructure means any Symantec r licensr technlgy and intellectual prperty used t prvide the Services. Mnthly Charge means the mnthly charge fr the affected Service(s) as defined in the Agreement. Service Cmpnent means certain enabling sftware, hardware peripherals and assciated dcumentatin which may be separately prvided by Symantec as an incidental part f a Service. Service Credit means the amunt f mney that will be credited t Custmer s next invice after submissin f a Credit Request and validatin by Symantec that a credit is due t Custmer. Service Sftware means Sftware (defined belw), as may be required by a Service, which must be installed n each Custmer cmputer, in rder t receive the Service. Service Sftware includes the Sftware and assciated dcumentatin that may be separately prvided by Symantec as part f the Service. Sftware means each Symantec r licensr sftware prgram, in bject cde frmat, licensed t Custmer by Symantec and gverned by the terms f the accmpanying EULA, r this, as applicable, including withut limitatin new releases r updates as prvided hereunder. Subscriptin Instrument means ne r mre f the fllwing applicable dcuments which further defines Custmer s rights and bligatin related t the Service: a Symantec certificate r a similar dcument issued by Symantec, r a written agreement between Custmer and Symantec, that accmpanies, precedes r fllws the Service. END OF SERVICE DESCRIPTION SYMANTEC PROPRIETARY PERMITTED USE ONLY 5