Visory Secure Endpoint Schedule

Addendum to Customer’s Master Services Agreement

This Visory Secure Endpoint Schedule is an addendum to the Customer’s Master Services Agreement with Visory. In the event of any conflict between the terms of this Schedule and the terms of the Customer’s Master Services Agreement, the terms of this Schedule shall prevail.

1.     Service Description

Visory’s endpoint solutions offer comprehensive protection against advanced cyber threats by continuously monitoring endpoints for suspicious activities, detecting potential security breaches in real-time, and enabling rapid response and remediation actions. Through its robust features and capabilities, Visory’s endpoint solutions enhance threat visibility, strengthen incident response capabilities, and fortify the overall cybersecurity defenses of customers.

2.     Service Offers

2.1 Managed Detect and Response (MDR) is a cybersecurity service that combines technology with human expertise to rapidly identify and limit the impact of threats by performing threat hunting, monitoring, and response.  MDR services include software installed on the Customer’s end-user devices (laptops and desktops) combined with human expertise to perform cyberthreat hunting, monitoring, and response.  MDR also includes critical Microsoft Operating System (OS) patching. This service is only available to users with company-owned devices.

Microsoft OS patching includes the installation of critical security updates, bug fixes, and patches released by Microsoft to mitigate vulnerabilities and enhance system stability as determined by Visory’s security team.

2.2 Managed Detect and Response Plus (MDR+) includes all the services of MDR with the addition of critical software patching and cyber security awareness training for Customer’s employees.  This service is only available to users with Microsoft O365 licenses with Intune and company-owned devices.

Software patching includes the installation of critical security updates, bug fixes, and patches released by the software vendor to mitigate vulnerabilities and enhance system stability.  Visory will generally perform software patching monthly or at such other times as determined by Visory’s security team.  The frequency of patching may be adjusted based on factors such as the criticality of systems, severity of vulnerabilities, and business requirements of the Customer.  Customer acknowledges that certain systems or applications may require specialized patching procedures or testing before deployment. In such cases, Visory will communicate any delays or additional requirements or costs to Customer in a timely manner.  This service does not extend to the installation of new software releases, upgrades, or patches aimed at enabling new software features.

Cyber security awareness training is powered by the KnowBe4 platform. Their training program offers a comprehensive approach that integrates baseline testing using mock attacks, engaging interactive web-based training, and continuous assessment through simulated phishing attacks to build a more resilient and secure organization. The value of KnowBe4 cybersecurity awareness training lies in its ability to educate employees on how to identify and prevent cyber threats, thereby reducing the risk of successful attacks and improving the overall security of the organization.

2.3 Extended Detect and Response (XDR) includes all the services of MDR+ with the addition of a state-of-the-art Security Information and Event Management (SIEM) platform hosted and managed by experienced security professionals that monitor and analyze security events across the Customer’s IT infrastructure.  A virtual appliance is required for each deployment which is used as a central collection machine.

3.     Rates and Fees

If not specified in Customer’s Service Order, the below standard rates for the Services shall apply.

The Monthly Fee Per User is billed in advance and Customer agrees to pay at the beginning of each calendar month for Service that month.  One Time Install Fees are billed upon completion. New devices added by customer will be added to the service automatically with prorated billing beginning on the date the device is added.

If a ransomware attack or breach occurs that requires remediation and recovery which is significant in Visory’s sole discretion, a separate Statement of Work for the restoration and remediation will be created for the Customer as an additional chargeable engagement with cost proportional to the amount of work to be done.