UC Davis Agreement it UCD13-00233 PROFESSIONAL SERVICES AGREEMENT (Quest Media and Supplies, Inc.) THIS AGREEMENT is made and entered into by and between THE REGENTS OF THE UNIVERSITY OF CALIFORNIA on behalf of its University of California, Davis Medical Center (University) and QUEST MEDIA AND SUPPLIES, INC. (Contractor). - The parties agree as follows: 1. Services. For University?s California Cancer Registry project, Contractor shall provide data storage, monitoring, and management as detailed in Section 14 of ?Exhibit A, Scope of Wor (Exhibit A), attached hereto and made a part hereof and also in Contractor?s ?Service Level Agreement" dated June 12, 2012 (SLA), attached hereto and made a part hereof. To the extent that any provision of Exhibit A is inconsistent with the SLA, Exhibit A shall take precedence. ?""tn'ivenay of careers Additional Terms and Conditions of Data Security (Appendix DS) is incorporated herein. Terms and conditions of Appendix DS can be viewed at obafoba attl?pdf. To the extent of con?ict between this agreement or any attached or incorporated document, the order of precedence is as follows: this agreement, Appendix DS, Exhibit A, SLA. Term. Services shall be provided from April 24, 2012 through June 30, 2013. Compensationt?Pament. Contractor shall be paid pursuant to the rates and fees set forth in Proposal, to a contract maximum not to exceed $400,000.00. Except as set forth in this section, such compensation shall be payable in arrears and upon invoice. Final payment shall be withheld pending completion of Services. Each invoice shall include this agreement?s identifying number and a summary description of Services provided thereunder, and shall be submitted to the UC Davis Medical Center, Dean?s Finance Of?ce, Attn: Kristine Sleuter, 2921 Stockton Boulevard, CTSC Annex, Sacramento, CA 9581?, telephone: (916) 7034,9134, e-mail: Expenses. Contractor shall provide all equipment, materials, and related services necessary for it to complete its obligations pursuant to this agreement. Indemni?cation. The parties agree to defend, indemnify and hold one another harmless item and against any and all liability, loss, expense, attorneys? fees, or claims for injury or damages arising from the performance of this agreement, but only in proportion to and to the extent such liability, loss, expense, attorneys? fees, or claims for injury or damages are caused by or result from the negligent or intentional acts or omissions of the indenmifying party, its of?cers, agents, or employees. THE REMAINDER OF THIS PAGE HAS BEEN LEFT BLANK INTENTIONALLY. 7. 8. Insurance. Contractor warrants that he shall maintain policies of insurance containing the coverages and minimum limits described in the following subsections during the term hereof. The coverages described in subsections 6.1. and 6.2. must name The Regents of the University of California as an additional insured and shall apply in proportion to and to the extent of the negligent acts or omissions of the non-University party or any person or persons under the non-University party?s direct supervision and control. Contractor shall provide University with certi?cates of insurance evidencing Contractor?s insurance policy coverages, except that no certi?cate for workers? compensation insurance shall be required. If any insurance described in this section is written on a claims made form, it shall continue for three years following termination of the agreement. General Liability. Comprehensive or commercial form general liability insurance. The insurance shall provide for a retroactive date of placement prior to or coinciding with the effective date of the agreement. 1 ,000,000 General aggregate $1,000,000 6.2 Business Automobile Liabilitv. Business automobile liability insurance. For owned, scheduled, non-owned or hired automobiles with a combined single limit of not less than $1,000,000. 6.3 Workers? Compensation. Workers? compensation insurance as required by California law. Each occurrence Contractor?s Records. The following apply to records created or maintained by Contractor pursuant to this agreement: Personal Information. Maintenance and dissemination of personal information is governed by the Information Practices Act of 197'? (Civil Code 1793, et seq.) and by University policy. Contractor shall collect personal or confidential information directly from the individual. Contractor shall inform the individual that a record is being made, the purpose of the record, and shall mark it ?Con?dential Information?. 7.2 University Ovmershio of Records. Records containing personal information about individuals, including the sources of the information, are the property of University and subject to University policy and applicable federal and state laws. Contractor agrees to deliver all such records and cepies thereof to University upon termination of this agreement. 7.3 Recording Devices. Contractor shall not use recording devices without notifying all parties to the discussion that the discussion is being recorded. 7.4 University?s Right to Examine Contractor?s Records. University, and upon University?s approval, the contracting or grantor agency under government contracts or grants, and their authorized representatives, shall have the right to examine Contractor records related to this agreement for a period of ?ve years after the ?nal payment hereunder. Con?ict of Interest. Contractor shall comply with the following requirements: UCD13-00233 Page 2 of 5 9. 10. ll. 12. 8.1 Prohibited Emplo?nent. Contractor shall not hire any of?cer or employee of University or of any federal or state governmental entity related to this agreement. 8.2 No Con?ict of Interest. Contractor af?rms that no actual, apparent, or potential con?ict of interest exists, nor will there exist such a con?ict of interest between Contractor?s business or ?nancial interest and Services provided under this agreement. 8.3 Prohibited Relationships. Contractor shall not be a reporting relationship to a University employee who is a near relative, nor shall a near relative be in a decision? making position with respect to Contractor?s obligations under this agreement. Con?dentiality. 9.1 Unauthorized Disclosure. The work product produced under this agreement, shall remain private and con?dential as between the parties. Contractor shall not disclose any work product to anyone not a party to this agreement. 9.2 Con?dential Information De?ned. Contractor shall keep con?dential any information provided by University and marked ?Con?dential Information,? or any information conveyed orally to Contractor by University with noti?cation of its con?dentiality, and followed by a written communication within ?ve days af?rming that information as Con?dential Information. This paragraph shall not apply to any of the following: i. lnfonnation which Contractor can demonstrate by written records was known to Contractor prior to the effective date of this agreement; ii. Information that is currently in, or in the future enters, the public domain other than through a breach of this agreement or through other act or omission of Contractor; or Information that is obtained law?illy from a third party. Site Inspection. University, through any authorized representative(s), has the right at all reasonable times to inspect or otherwise evaluate the work performed or being perfOrmed hereunder and the premises in which it is being performed. If any inspection or evaluation is made of the premises of Contractor, Contractor shall provide all reasonable facilities and assistance for the safety and convenience of the authorized representative(s) in the performance of their duties. All inspections and evaluations shall be performed in such a manner as will not unduly delay the work. Federal Contract Compliance. If this agreement is funded wholly or in part with by a grant or contract from an agency of the federal government, Contractor shall comply with all terms and conditions applicable to recipients of such funds and their contractors. Use of University?s Name. Contractor shall not use the name or mark of University in any form or manner in advertisements, reports, or other information released to the public without the prior written approval of University. 13. Force Majeure. Neither party shall be liable for damages suffered by the other party because of University?s or Contractor's failure to perform if failure is due to any cause beyond that party?s control. it UCD13-00233 Page 3 of 5 14. 15. 16. 17. 18. 19. 20. Termination. This agreement may be terminated by either party upon ten days notice to the other; however, if Services are net performed to the sole satisfaction of University, University may terminate this agreement immediately upon written noti?cation to Contractor. If this agreement is terminated at any time during the agreement period, Contractor shall be compensated for all completed services rendered up to and including the last day of service. University reserves the right to determine what shall be deemed completed services. Notice. Any notice required or permitted hereunder shall be sent to the parties via U.S. mail, e-mail, facsimile, or personal service at the addresses shown below. Either party may change its address by written notice to the other timing the term. UNIVERSITY CONTRACTOR Business Contracts Analysis Mark Schachtebeck University of California, Davis Quest Media and Supplies, Inc. One Shields Avenue 5822 Roseville Road Davis, CA 95616 Sacramento, CA 95 842 Federal Exclusion Warranty. Contractor warrants that it is not excluded from participation in any governmental sponsored program, including, without limitation, the Medicare, Medicaid, or Champus programs and the Federal Procurement and Nonprocurement Programs This agreement shall be subject to immediate termination in the event that Contractor is excluded from participation in any federal healthcare or procurement program. Independent Contractor Status. The parties are independent contractors. In the performance of this agreement Contractor will not be an agent or employee of University, will not be covered by University?s workers? compensation insurance or unemployment insurance, is not eligible to participate in University's retirement programs, nor shall he be entitled to any University bene?ts. Assignment. Contractor may not assign or transfer this agreement, or any interest or claim, without the prior written approval of University, and any decision to grant or withhold such approval shall be within University?s sole discretion. The terms and conditions of this agreement shall be binding upon any assignee or transferee. Governing Law. This agreement shall be construed pursuant to California law. Amendment. No change in any term or condition of this agreement shall become effective unless by amendment in writing signed by both parties. THE REMAINDER OF THIS PAGE HAS BEEN LEFT BLANK IN TENTIONALLY. UCD13-00233 Page 4 of 5 21. Entire Agreement. This agreement constitutes the entire understanding of the parties respecting the subject matter hereof and supersedes any prior understanding or agreement between them, unitten or oral, regarding the same subject matter. AGREED: QUEST NIEDIA THE REGENTS OF THE AND SUPPLIES, INC. UNIVERSITY OF CALIFORNIA I By: r952: w" - _By: -, 9411/ UDeborah Fraga-Dqgter Print name: so Le: Associate Director ?r Contracting Services Title: 5- UC Davis Date: Fae/Quit Date: If ?it/"r a 3 Taxpayer Identi?cation Number Social Security Number Pursuant to the Federal Privacy Act of 1974, you are hereby noti?ed that disclosure of your social security number is required pursuant to sections 6011 and 6051 of Subtitle of the Internal Revenue Code and pursuant to Regulation 4, section 404, 1256, Code of Federal Regulations, under section 218, Title II of the Social Security Act, as amended. The social security number is used to verify, your identity. The principal uses of the number shall be to report payments and income taxes withheld to federal and state governments. UCD13-00233 Page 5 of 5 The Regents of the University of California, Davis 1 1-10823 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Manag?-rent information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING - OBJECTIVE PERFORMED STANDARD QUALITY LEVEL SYSTEM system engineering acceptance engineering System Architecture Board approve! 2012 services to upgrade testing to ensure processes performed Architecture documents meeting every June 30. deveioprnent there are no to generally accepted documents checked into month. 201? - environments. problems with the industry standards as checked into system library are development defined by the system library complete, team moving to Software Engineering after being grammatically those Institute's approved by the correct, and environments. Capability Maturity Design Review accurately capture - Model Integration Board. system design. (CMMI) Level 3. 13.7.2 Shall document Enterprise Systems Enterprise Enterprise System Design Review July 1, upgrade engineering System 5 Architecture Board approval 2012 instructions to processes performed Architecture documents meeting every June 30. re?ect current to generally accepted documents i checked into . month. 201? - environment. industry standards as checked into system library are defined by the system library complete, Software Engineering after being grammaticain Institute?s approved by the correct. and Capability Maturity Design Review accurately septum Model Integration Board. system design. Level 3. 14. Ensure Data Center 14.1 Shall provide server 14.1.1 Shall manage Service Level Service Level Eureka system review July 1, services provide roorrv'data center oversight of the Management Plan as Performance . availability of 99.6% of Service Level 2012 99.3% Eureka services in support data center developed in SOW Report of data or greater between Performance June 30. systems of CSRB activities. services to meet work activity 9.4.1. center services. . 6am to 6pm M-F Report of data 201? - availability including system Service ensures TIER 1, I (excluding center services between l6am to availability of a Management Plan 99.6% system holidays). with state Page 209 of 4?5 The Regents of the University of- California, Davis 1 140823 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Ma?gement information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING PERFORMED STANDARD METRIC QUALITY SYSTEM 6pm till?F mission critical obligations for environment management (excluding online application. System availabitity, reliability, holidays). environment and perfonnance. availability. reliability and performance. 14.1.2 Shall provide Statement on Auditing Security Mdit Meet state and Annual Security March 1, oversight of all Standards (8A3) No. Report federai security Audit Report 2013. data center ?to Type II standards. March 1. Security (physicai. certification. 2014. environmental. March 1. and virtual. etc). State and federal 2915- security standards for March 1. con?dential patient 2016. health information. Marci} 1. 201 7. 14.1.3 Shall conduct Service Level Pubiish plan and UPS tested so as to Review of March 1. tests to ensure Management Pian as results of UPS ensure that Disaster 2013. that adequate developed in 30W test adequate backup Recovery Plan March 1. backup power work activity 9.4.1. power (UPS) is and test with 2014. (UPS) is ensures Tier 1. 99.6 functioning and state March 1. functioning and system stable during power management. 2015. stable during environment outages. Mamh 1. power outages. availability, reliability, 2015- and performance. Starch 1. Pa ge 210 of 476 The Regents of the University of California. Davis 11-10828 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE .. PERFORMED STANDARD METRIC commr LEVEL SYSTEM 14.1.4 Shall conduct Disaster Recovery Publish and test Disaster Recovery Review of March 1. disaster Plan developed in Disaster Plan Is tested to Disaster 2013. recoveryibusiness 80W work Recovery Plan ensure it works with Recovery Plan March 1. continuance tests activity14.8 a 100% capability to and test with 2014. of the critical ensures Tier 1 99.6 ?a recover from a state March 1. branch IT system environment disaster. management. 2015. systems. availability, reliability, March 1, applications, and and performance. 2915' network. March 1. . 201?. 14.1.5 Shall purchase Capacity Publish IT IT Capacity Twice a year September necessary Management Plan Capacity Management Plan review of 11' 1. 201 2 so?wareihardwar developed in sow Management is Up to date, Capacity March 1. at work activities 141.1 Plan complete. and Management 2013. storageinetworid 9.4.6 ensures Tier projects a Plan with state September security and 1. 99.6 system replacement plan management 1. 2013 peripherals to environment and budget through March 1. support data availability. reliability. the end of life cycle . 2014. center services. and performance. for all equipment, September storage supplies, 1. 2014 hardware. software. March 1. network. 2015. September 1. 2015 March 1. 2016. September 1. 2016 March 1. Page 211 of 4'36 The Regents of the University of California. Davis 1 1-1 0828 Exhibit A SCOPE OF WORK Goal 2 - Eureka Data Management Information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM - 2017. 14.2 Perform Network 14.2.1 Shall troubleshoot Problem Management Service Level All network review Juizrr 1. Administration netvvorks. Process Plan for Performance problems are of Sonics Level 2012 services. systems. and services developed in Report of data reported and Perfonnance June 30. applications to 80W work activity center services. resolved per the Report of data 201? - identify and 9.4.2 ensures all Problem center services montth correct network ManaQEment with state malfunctions and administration Process Plan management. other operational problems are resolved standards. difficulties. Investigate user problems. identify their source. determine possible solutions. test and implement solutions. Document network problems and resolutions for future reference. to completion. Page 212 of 47'6 The Regents of the University of California, Davis '1 1-1 0323 Exhibit A SCOPE OF WORK Goal 2 - Eureka Data Management information Systems PERFORMANCE - WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM - 14.2.2 Shall plan and Statement on Auditing Security Audit Meet state and Annual Security March 1. implement Standards No. Report federal security Audit Report 2013. network security, rc Type II standards. March 1. including building certi?cation. State and 2014- tirewalis, applying federal standards for March 1, to security of con?dential - 2015. network patient health March 1, applications, information. 2016. managing host March 1, security. file 2017'. permissions. backua and disaster recovery plans, ?le system integrity. and adding and deleting users. - 14.2.3 Shall perform Statement on Auditing Security Audit Meet state and Annual Security March 1, regular security Standards (SAS) No. Report federal security Audit Report 2013. monitoring to Ti} Type II standards. March 1, identify any certi?cation. State and 2014? possible federal standarda for 1. intrusions. security of confidential 2015. patient health March 1. information. 2016. March 1. 2017. Page 213 of ATE The Regents of the University of California, Davis 11-10823 Exhibit A SCOPE OF WORK Eureka Data Management information Systems RMANCE - WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM 14.2.4 Shall maintain Statement on Auditing Security Audit Meet state and Annual Security March 1. patient health Standards (SAS) No. Report federal security Audit Report 2013. information T0 Type II standards. March 1. con?dentiality with certi?cation. State and 20141 regard to the federal standards for Marsh 1. information being security of con?dential 2015- prcoessed, stored patient health March 1. or accessed by information. 2015- the network. March 1. 201?. 14.2.5 Shall maintain IT Capacity Publish iT IT Capacity Twice a year September network related Management Plan Capacity Management Plan review of 2012 software licenses deyeioped in SDW Management is up to date, Capacity March 1. for work activities14.?.1 a Plan comptete. and Management 2013. branchiorganizati 9.4.6 ensures 90.3 it: projects a Plan with state September on. system environment replacement plan management 1. 2013 reliabilityr and budget through March 1. . and performance. the end of life cycle 2014. for all equipment, September storage supplies. 1, 2014 hardware, so?were. March 1, 2015. September 1. 2015 March 1 2015. September 1. 2016 March 1, Page 214 of 476' The Regents of the University of California. Davis 1 1-10328 Exhibit A I SCOPE OF WORK Goal 2 Eureka Data Managmnt information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM 2017. 14.2.0 Shall evaluate IT Capacity Publish lT 1T Capacity Twice a year September andicr Management Ptan Capacity Management Plan review of IT 1. 2012 recommend ensure Tier 1. 99.6 16 Management is up to date. Capacity March 1, purchases of system environment Plan complete, and Management 2013. network availability. reliability, projects a Plan with state September hardware. and performance. replacement plan management 1. 2013 Peripheral and budget through March 1. equipment, and the end of tiie cycle 2014. software. for all equipment. September storage supplies. 1. 2014 hardware. software. March 1. network. 2015. September 1 . 201 5 March 1. 2010. September 1. 2016 March 1. 201?. 14.2.? Shell identify Service Level Service Level Eureka system review July 1. utilization patterns Management Plan as Performance availability of 99.3% of Service Level 2012 and their effect on developed in 30W Report of data or greater between Performance June 30. nehvorkioperation work activity 9.4.1. center services. Barn to 6pm M-F Report of data 201 - ensures 99.3 (excluding center services montth Page 215 aid-1'6 The Regents of the University of California, Davis requirements and effects on system availability. 11-10823 Exhibit A I SCOPE OF WORK 2 - Eureka Data Maria ement information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC ouauw LEVEL SYSTEM availability and system environment holidays). with state performance availability. reliability. management. expectations. and performance. 14.2.3 Shall investigate, ChangeiRequest ChangeiReouest All Weekly July 1, recommend and Management Process Management Change?rRequests ChangeiReques 20'12 install Plan as developed in Report are reported, Report June 30, enhancements 30W 9.4.3 work documented, 201? - and operating activity. tracked and we ekly procedures that implemented per optimize network the standards. availability. 14.2.9 Shall establish ChangeiRequest Changer'Request All Weekly July 1, and perform Management Process Management ChangetRequests ChangeiRequ-es 2012 - maintenance Plan as developed in Report are reported, 1 Report June 30, programs 80W 9.4.3 work documented. 201? - following activity. tracked and weekly company and implemented per vendor standards. the standards. Ensure timely user noti?cation of maintenance Page 216 of 415 The Regents of the University of California, Davis 1 1?10823 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information Systems - PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING - OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL svs'ren - 1 4.2.1 0 Shall install OhangeiReque st ChangeiRequest All Weekly July 1. weekly and Management Process Management ChangetRequests ChangeI?Reoues . 2312 emergency Plan as developed in Report are reported, tReport June 30. software patches. SOW 9.4.3 work documented. 201T - activity. tracked and weekly implemented per the standards. 14.2.11 Shall install, OhangeiRequest ChangelRequest All Weekly July 1. configure. and Management Process Management Change?IRequests ChangefReques 2012 maintain router. Plan as developed in Report are reported, Report June 31]. switches. domain 80W 9.4.3 work documented. 201? - servers. networks. activity. tracked and weekly Workstations. file implemented per servers. the standards. - network cabling. and other related equipment. devioes, and systems; adds or upgrades and con?gures modems, and related I equipment. 14.3 Perform Network 14.3.1 Shall design and State and federal Security Audit Meet state and Annual Security March 1. Engineering install standards for network Report federal security Audit Report 2013. functions. con?guration security of con?dential standards. March 1. changes to patient health 2014. Page 21? of 416 The Regents of the University of Caiifornia, Davis 1 1-1 0323 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information Systems PERFORMANCE WORK TO PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING osJEcnvE PERFORM ED STANDARD METRIC QUALITY LEVEL svsTEM? modernize and information. March 1. harden the 2015. nehvork as March 1. needed to meet or 2016. exceed industry March 1, standards. I 2017. 14.3.2 Shall design and ChangeiReouest ChangerReouest Ail Weekly Juiy1, implement Management Process Management ChangeiReguests ChangeiReques 2012 - hardware and Plan as in 80W 9.4.3. Report are reported. Report June 30, software documentedI 201? - upgrades to meet tracked and weekly capacity implemented per requirements. the standards. 14.3.3 Shall analyze and Problem Management Service Level All network review July 1. rectify faults on Process Pian for Performance problems are of Service Level 2012 - 1 the network to services developed in Report of data reported and Performance June 30. meet de?ned SOW work activity center services. resolved per the Report of data 2017 - service levels. 9.4.2 ensures all Problem center services network Management with state administration Process Plan management. problems are resolved standards. to completion. 14.4 Perionn System 14.4.1 Shall support and Service Level Service Levei Eureka system review July 1. Administration maintain multiple Management Pian Performance availability of 99.6% of Service Level 2012 services. production and ensure Tier 1. 99.6 a; Report of data or greater between Performance June 30. associated server system environment center services. 6am to 6pm Report of data 2017 - and system availability, reliability, (excluding center services montth environments and performance. holidays). with state inciuding but not management. Page 218 of 4?6 The Regents of the University of California, Davis 1 0328 Exhibit A SCOPE OF WORK Goat 2 - Eureka Data M?gement Information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING - osaecnve PERFORMED STANDARD QUALITY SYSTEM limited to: Eureka Production Cancer, Eureka Development, Eureka 0A, Research, Reports. Extracts. and Disaster Recovery. - 14.4.2 Shall install new Statement on Auditing ChangeiRequest All Weekiv Juiy 1. existing Standards (3A3) No. Management Change?rRequests ChangetReques 201-2 ?0 Type II Report are reported, Report June 30, and con?gure certi?cation. documented, 201? - I hardware. tracked and weekly I peripherals, implemented per services, settings. the standards. directories. storage. etc. in accordance with standards and projecttoperationa requirements. 14.4.3 Shall apply 08 Ghangel'Request Changer'Request All Weekly July 1. patches and Management Process Management ChangetRequests ChangetReques 2012 upgrades on a Plan as in 50W 9.4.3. Report are reported, Report June 30, regular basis. and documented, 2017 - Upgrade tracked and weekly administrative implemented per tools and utilities. the standards. Page 219 of 476 The Regents of the University of Callfornia, Davis 1 1-10323 Exhibit A SCOPE OF WORK Goal 2 - Eureka Data Management Information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY SYSTEM Con?gure I add new Services as necessary. 14.4.4 Shall perform Service Levei Service Level Eureka system review July 1. daily system Management Plan Performance availability of 99.6 of Service Level 2012 - monitoring. ensures Tier 1. 99.6 Report of data it: or greater Performance June 30. verifying the as system center services. between dam to Report of data 2017 - integrity and environment 6pm M-F (excluding center services availability of all availability. reliability. holidays). with state hardware, server and performance. management. resources, systems and key processes. reviewing system and application . logs. and verifying compietlon of scheduled jobs such as backups. 14.4.5 Shall perform Disaster Recovery Publish and test Disaster Recovery Annual review March 1. daily backup Plan developed in Disaster Plan is tested to of Disaster 2013. operations. 30W work activity Recovery Plan. ensure it works with Recovery Plan March 1. ensuring all 14.8 3: 9.4.7 ensures 100% capability to and disaster 2014. required file Tier 1. 99.6% system recover from a recovery test March 1. systems and environment disaster. with state 2015. system data are reliability. management March 1. successfully and performance. 2016. backed up to the March 1. Page 2.20 of are The Regents of the University of?OalifornlaI Davis 1 1-1 0828 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING oeaecnve PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM appropriate - 201?. media. recovery tapes or disks are created. and media is recycled and sent off site as necessary. 14.4.6 Shall provide Tier Problem Management Service Level All network review July 1. IV sopport Process Plan for IT Performance problems are of Service Level 2012 per request from services developed in Report of data reported and Performance June 30. various SOW work activity center services. resolved per the Report of date 201? - constituencies. In 9.4.2 ensures all Problem center services vestigate and network Management with state troubleshoot administration Process Plan management. issues. Repair problems are resolved - standards. and recover from to completion. hardware or software iatlures. Escalate problems per standards. 14.4.? Shall perform IT Capacity Publish IT IT Capacity Twice a year September periodic Manage ment Plan Capacity Menageme nt Plan review of FT 1. 2012 perfonnance ensures 99.6 it; Management is up to date, Capacity March 1, reporting to system environment Plan complete. and Management 2013. support capacity availability, reliability. projects a Plan with state September planning. and performance. replacement plan management 1. 2013 and budget through March 1. the end of life cycle 2014: Page 221 of 41'6 The Regents of the University of California, Davis 1 1-10523 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information Systems PERFORMANCE - WORK TO BE. PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED METRIC QUALITY LEVEL s?rs'reu for all equipment. September - storage suppiies. 2014 hardware. software. March 1. network. 2015. September 1. 2915 March 1. 201 6. September 1. 2916 March 1, 2917. 14.4.8 Shall perform Service Level Service Level Eureka system Montth review July 1. ongoing Management Plan. Performance availability of 99.6% of Service Level 2012 performance ensures Tier 1. 99.6 Report of data or greater between Performance June 39. tuning. hardware ?an system center services. 6am to 6pm M-F Report of data 291? upgrades. and environment (excluding center services resource availability. reliability. holidays). with state optimization as and performance. management. required. Configu re CPU. memory. and disk partitions as required. . 14.4.9 Shall research Implementation plans Complete set of IT Cost Reduction Montth Project November and recommend and processes Project Planning Plan documents Status 1, 2012. innovative. and developed using documents per are complete as Meetings. where possible generally accepted industry de?ned by PMI Project status of Montth automated project management standards; Project standards, the lT Cost status approaches for practices as defined Charter. Detailed grammatically Reduction Plan reports Page 222 of no The Regents of the University of California, Davis 1 1-1 0323 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information systems PERFORMANCE - WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED 31-monan METRIC QUALITY svsrem System by the Project Work Breakdown correct. and to be reviewed ongoing to administration Management Institute Structure (WBS), delivered within 120 with state project I tasks. Identity 1 (PMIJ. Within 120 Risk Mitigation days of Contract management on completion approaches that days of contract start Plan. and start date. WBS a montth basis. leverage our data. develop an lT Communication includes all steps resources so I Caz-t Reduction Plan Plan. necessaryto provide that will outline the complete the economies of reduction of ET costs project. including scale. by 25% or more within dependencies. two years. 14.4.10 Shall deploy implementation plans Complete set of Cost Reduction Project November automated and processes Project Planning Plan documents Status 1. 21312. solutions for developed using documents per are complete as Meetings. system generally accepted industry de?ned by PMI Project status of Montth administration. project management standards: Project standards. the lT Cost status practices as de?ned Charter. Detailed grammatically Reduction Plan reports by the Project Work Breakdown correct. and to be reviewed ongoing to Management institute Structure delivered within 120 with state project Within Risk Mitigation days of contract management on completion . days of contract start Plan. and start date. was a basis. date. develop an IT Communication includes all steps Cost Reduction Plan Plan. necessary to that will outline the complete the reduction of IT costs project. including by 25% or more within dependencies. two years. Page 223 of 4?5 The Regents Of the University of California. Davis 1 1-10828 Exhibit A SCOPE OF WORK 6:21;; agoreka Data MMement information Systems - MANCE To as PERFORMANCE PERFORMANCE AOOEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL svsrem 14.4.11 Shall Statement on Auditing Con?gUration' Configuration Review of March 1 . develop and Standards (3A3) No. Documentation Documentation is Configuration 2013. maintain 7'0 Type li up to date. Documentation March 1. instaiiation and - certi?cation. complete, and as part Of 2014. COnfiguretion re?ects the current Disaster March 1. Drag. dures. system Recovery Plan 2015. Corrtsicute to and environment. and test with March 1 . maintain system state 2016. standards. management- March 1. 201?. 14.4.12 Shall Statement on Auditing Publish and test Disaster Recovery Review of March 1. perfonn regular Standards No. Disaster Plan Is tested to Disaster 2013. file archival and 7'0 Type II Recovery Plan ensure it works with Recovery Plan March 1. purge as certi?cation. 100% capability to and test with 2014. necessary. recover from a state March 1. disaster. management. 2015. March 1. 2016. March 1. I 2017'. 14.4.13 Shall Disaster Recovery Publish and test Disaster Recovery Review of March 1. manage data Plan ensures Tier 1. Disaster Plan is tested to Disaster 2013. storage of multiple 99.6 it system Recovery Plan ensure itworks with Recovery Plan March 1. complex server environment 100% capability to and test with 2014. environments and availability. reliability. recover from a state March 1. device types such and performance. disaster. management. 2015. as disk. tape. dvd. March 1. cd rom. mirrored 2016. devicesetc. March 1. Page 224 of 476 The Regents of the University of California, Davis 1 1-1 0323 Exhibit A . SCOPE OF WORK Goal 2 Eureira Data M?gement Information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY SYSTEM 201?. 14.5 Provide 14.5.1? ?hali - Service Level Service Level Telecommunication review July 1. talecommumca??ns arid SUI-trivia i Management Plan as Performance 5 availability of of Service Level 2912 support. telecommunicatio developed in SOW Report of data 99.9% or greater Performance June 30. systems. work activity 9.4.1. center services. between 8am to Report of data 291? - ensures 6pm M-F (excluding center services montth telecommunications holidays). with state availability, reliability, management. and pericnnance. 14.5.2 Shall develop and Telecommunications Teie? Tele- Review of Tele- March 1, implement Operational communication communication communication 2013. telecommunicatio Procedures ensure Operational Operational Operational March 1. ns operational availability of 99.9% Procedures are Procedures are up Procedures as 2014. procedures. or greater between published as part to date. complete. part of Disaster March 1, 3am to 6pm of the Disaster and re?ects the Recovery Plan 2015. (excluding holidays). Recovery Plan current system and test with March 1, environment. state 201 6. management. March 1, 291 7. 14.5.3 Shell create Service Level Service Level Telecommunication review July 1. andior modifies Management Plan as Performance availability of of Service Level 2912 voicemail boxes developed in SOW Report of data 99.9% or greater Performance June 39. and call features; work activity 9.4.1. center services. between Elam to Report of data 201? - installs ensures ?pm M-F (excluding center services telecommunicatio telecommunications holidays} with state ns equipment and availability, reliability. management. Page 225 of #76 The Regents of the University of California. Davis 11-10328 Exhibit A I SCOPE OF WORK Goal2 Eureka Data Management information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM . provides SUppcn and performance. for handsets and. voicemail. 14.5-4 Shall purchase as (Sane-city Publish IT iT Capacity Twice a year September necessary - Management Plan Capacity Management Plan review of 1T 1 . 2012 telecornrnunicatio developed in 30W Management is up to date. Capacity March 1. ns equipment. work activity 14.11 3; Plan complete. and Management 2013. capacity. and 9.4.6 ensures 90.9% projects a Plan with state September software. telecommunications replacement plan management 1. 2013 environment and budget through March 1. availability. the end of life cycle 2014. for all equipment. September storage copplies. 1. 2014 hardware. software. March 1. network. 2015. September 1. 2015 March 1. 2016. September 1. 2016 March 1. I . 2011' 14.6 Provide Personal 14.6.1 Shall perform Service Level Service Level Telecommunication review July 1. Computer (PC) and general Management Plan as Performance 5 availability of of Service Level 2012 other of?ce maintenance of developed in 80W Report of data 99.9% or greater Performance June 30. hardwarer'software desktop work activity 9.4.1. center services. between 8am to Report of data 201? - support tor printers, compoterje-end ensures PO and other .?pm {excluding center services Page 225 of 416 . The Regents of the University of California, Davis 1 1 -1 0828 Exhibit A SCOPE OF WORK 6:2Eiag?r?a Data Managed-lent Information 8" terns - . CE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC euaurv LEVEL SYSTEM coolers. etc- computer office holidays). with state e?ll'rpmenl. hardwaree'sottware management. .. for printers. coolers. etc. 1-1.6.2 Shali set- up and Disaster Recovery Publish and test Disaster Recovery Annual review March 1. maintain backup Plan developed in Disaster Plan is tested to of Disaster 2013. system for in- sow work activity Reoovery Plan ensure it works with Recovery Plan March 1. office desktop 14.8 a ensures 100% capability to and test with 2014. computers and tile maintenanoe of PC recover from a state March 1. servers. back-u ps. disaster. management. 201 5. March 1. 2016. March 1, 201 7. 14.6.3 Shall install and State and federal Security Audit Meet state and Annual Security March 1. ensure that anti- standards for network Report federal security Audit Report 2013. virus so?ware is security of con?dential standards. review with March 1. installed. properly patient health state 2014. con?gured. information. Statement on management. March 1 . regularly updated Auditing Standards 2015. and working (8A3) No. Tr'i} Type March 1. properly on all PC II certi?cation. 2016. and server March 1. stations. 201 7. Page 22? of 476 The Regents of the University of California, Davis 1 1-10828 Exhibit A 800 .Gg?kia Eureka Data Management Information . OF WORK RMANCE WORK TO ea PERFORMANCE PERFORMANCE AOOEPTAELE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM 14. 6.4 Shail install State and federal Security Audit Meet state and Annual Security March 1, software available standards for PC Report federal security Audit Report 2013. to appropriate . security. standards. review with March 1. USGFS- state 2014. management. March 1, 2015. March 1. 2016. March 1, - 2017. Shail set-Up, Statement on Auditing Security Audit Meet state and Annual Security March 1. maintain and Standards (SAS) NO. Report federal security Audit Report 2013. remove user 1'0 Type II standards. review with March 1, network accounts certi?cation. state 2014. as necessary. management. March 1. State and federal 2015. standards for network March 1. security of con?dential 2016. - patient health March 1. - information. 201?. 14.6.6 Shall maintain IT Capacity Publish IT Capacity Twice a year September and update . Management Plan Capacity Management Plan review of IT . 1. 2012 inventory developed in 80W Management is up to date, Capacity March 1. documents. 5 work activity 14.11 a Plan cornpiete, and Management 2013. 9.4.6 ensures projects a Plan with state September inventory control of' - replacement plan management 1 . 2013 PCs and printers. and budget through March 1, the end Of life cycle 2014. for all equipment. September Page 223 of 4?6 The Regents of the University of California, Davis 11-10028 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Wment Information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD cue.an LEVEL SYSTEM storage supplies. 1 . 2014 hardware, software. March 1. network. etc. 2015. - September 1, 2015 March 1. 2010. September 1, 2010 March 1. 201 T. 14.? Perform Capacity 14.11 Shall provide a IT Capacity Publish IT IT Capacity Twice a year Saptember Planning services to Capacity Management Plan Capacity Management Plan review of IT 1. 2012 include a Capacity Management Plan ensures Tier 1. 00.6% Management is up to date. Capacity March 1. Management Plan and Its system environment Plan complete. and Management 2013. that shall include devetopment shall avaiiability, reliability, includes a Plan with state September service and include and performance to replacement ptan management 1. 2013 component capacity information meet Service Level and budget through March 1. management across consistent with Management Plan the end of life cycle 2014. the grant service the Service Level obligations. for all equipment. September Iifecycle and to Management storage supplies. 1. 2014 provide a point of Plan. hardware. server, March 1. focus and software. network. 2015. management for all etc. .. September capacity and 1 . 201 5 performance-rotated March 1, Issues, relating to 2010. both services and September resources, and to 1, 2016 Page 229 of 415 The Regents of the University of California, Davis 1 1-1 0323 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Managgmont Information Systems . .. - PERFORMANCE - WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJ ecnva PERFORMED STANDARD METRIC auaurv LEVEL SYSTEM match the capacity March 1. of IT to the service 201?. levels of the Service Level Management Plan. 141.2 Shall provide a IT Capacity Publish IT IT Capacity Twice a year September Capacity Management Plan Capacity Management Plan review of 1. 2012 Management Plan ensures Tier 1. 99.6% Management is up to date. Capacity March 1. on: system environment Plan complete, and Management 2013. How capacity levels shall availability, reliability, Includes a Plan with state September be determined, and perfonnance to replacement plan management 1. 2013 how capacity meet Service Level and budget through March 1, levels shall be Management Plan the and of life cycle 2014. monitored, and obligations. for all equipment. September how capacity storage supplies, 1. 2014 levels shall be hardware, software. March 1. measured. network, '2015. September 1. 2015 March 201 6. September 1, 2016 March 1. - 2017. 14.7.3 Shall provide a IT Capacity Publish IT IT Capacity Twice a year September Capacity Management Plan Capacity Management Plan revlew of IT 1. 2012 Management Plan ensures Tier 1. 99.6% Management is up to date. Capacity March 1. that reflects future system environment Plan complete. and Management 2013. Page 2311 of 476 The Regents of the University of California, Davis 1 1-10328 Exhibit A Goal 2 Eureka Data Management Information Systems SCOPE OF WORK .. REQUIRED SERVICE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING TIMEUNE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM availability. reliability. includes a Pian with state - September {enuirements to and perionnance to replacement plan management 1. 2013 Include both meet Service Level and budget through March 1. technology and Management Plan the end of life cycle 2014. personnel. obligations. for all equipment, September . - storage supplies, 1. 2014 hardware, software. March 1. network. 201 5. September 1. 2015 March 1. 2016. September 1. 2016 March 1. 201?. 14.14 Shall provide a IT capacity Publish IT IT Capacity TWibe 'a year September Capacity Management Plan Capacity Management Plan reviewof ET 1. 2012 Management Plan ensUres Tier 1. 99.6% Management is up to date. Capacity March 1, I that is projects system environment Plan complete. and Management 2013. Infrastructure availability. reliability. includes a Plan with state September growth over multi? and performance to replacement plan managenient 2013 year horizon and meet Service Level and budget through March 1. to end of Management Plan the end of life cycle 2014. inventory life obligations. for all equipment. September cycle. storage supplies. 1. 2014 hardware. software. March 1. network. 2915. September - Page 231 of 416 The Regents of the University of California. Davis 1 1-10823 Exhibit A I SCOPE OF WORK Goal 2 Eureka Data Moment information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY Laval. svsTEM 1. 2015 Mamhi. 2018. September 1, 2016 March 1, 201 Y. - 14.2.5 Shall conduct a IT Capacity Publish IT IT Capacity TWICE.- a year September Capacity Management Plan Capacity Management Plan review of IT 1. 2012 Management Plan ensures Tier1. 99.6% Management is up to date, Capacity March 1. prioritization and system environment Plan complete. and Management 2013. process review availability. reliability, includes a Plan with state September with state and perfonnance to replaoement plan management 1. 2013' management. meet Service Level and budget through March 1 . - Management Plan the end of life cycle .2014. obligations. for all equipment, September storage supplies, 1, 2014 hardware. software, March 1. netwo rk. 2015. September 1, 2015 March 1, 2016. September 1 . 201 6 March 1, . 2017. 14.8 Disaster Recovery 14.3.1 Shall design and Statement on Auditing SAS 20 Type II Successful Annual review March 1. Planning to ensure implement Standards (8A5) No. Audit and completion of a of Disaster 2013. The Regents of the University of California, Davis 11-10323 Exhibit A SOOPE OF 1WORK 2 6 Eureka Data Management information Systems ERF RMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL svsrerit the and disaster recovery ro Type ll certification. arts to Type II Recovery Plan March 1, Inteantr 0f data. 30" . certification. Service - audit within the first and test with 2014. data and business Organizations is a Publish Disaster three years of the state March 1, data networks. continuity widely recognized Recovery Plan contract will con?rm management. 2015. 2 entire procedures for re- auditing standard document. that the proposed March 1. establishing developed by the data center has SAS i'U Type ll 201B. servers, American Institute of been through an in- audit. March 1, databases. and Certified Public depth audittc 2017- operating systems Accountants (AICPA). ensure adequate in the event of a The SAS T0 audit controls and disruption. independently veri?es safeguards are in the validity and place to ensure functionality of a data data security and center?s control integrity in the activities and event of a Disaster processes. Recovery work effort. Disaster Recovery Plan is tested to ensure it works with 100% capability to recover from a disaster. 14.8.2 Shall perform and Disaster Recovery Publish and test Disaster Recovery Annual review March 1. analyze annual Plan developed to Disaster Plan is tested to of Disaster 2013. disaster meet 8A3 70 Type ll Recovery Plan ensure It works with Recovery Plan March 1. simulations for the certi?cation. 100% capability to and test with 2014. prompt restoration recover from a state March 1. of services, and disaster. management. 2015. Page 233 of ME The Regents of the University of California, Davis 1 1-10328 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Ma?gement Information Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING ceJEcnvE PERFORMED STANDARD QUALITY LEVEL sverM conduct audits March 1, where required. 2016. March 1, . 2017. 14.8.3 Shail create and Disaster Receivery Publish and test Disaster Recovery Annual review March 1, maintain internal Plan developed to Disaster Plan is tested to of Disaster 2013. Information meet SAS ?0 Type II Recovery Plan ensure it works with Racove'rv Plan March 1, Technology certification. 100% capability to and test with 2014. procedures recover from a state March 1, manual, disaster. management. 201 5. documenting March 1. common 2016. procedures. March 1. 201 7. 14.8.4 Shall create and Disaster Recovery Publish and test Disaster Recovery Annual review March 1. maintain CSRB Plan developed to Disaster Plan is tested to of Disaster 2013. hardware and meet SAS re Type II Recovery Plan ensure it wodts with Recovery Plan March 1. software certi?cation. 100% capability to and test with 2014. certi?cation recover from a state March 1. Procedure to disaster. management. 2015. ensure new March 1, software and 2016. hardware March 1, Connected to the 2017. CSRB network Operates securely and within Page 234 of 476 The Regents of the University of California, Davis 1 1-10823 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information-Systems PERFORMANCE WORK TO PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING osuecnve PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM budgetary - restraints. . 14.9 Provide Information 14.9.1 Shall implement Statement on Auditing Security Audit Meet state and Annual Security March 1, Security Officer and maintain Standards No. Report federal security Audit Report 2013. services to ensure routerts}, T0 Type II standards. reviewr with March 1, data confidentiality firewall{s). certi?cation. The SAS state 2014. meets industry intrusion detection ?0 audit SAS ?0 Type ll management. March 1. standards. systemts}, remote independently veri?es certi?cation. 2015. access systems, the validity and March 1. server, and web- functionality of a data 2016. server event logs center's control March 1 and security activities and 2017. settings. processes. 14.9.2 Shall monitor Statement on Auditing Security Audit Meet state and Annual Security March 1. router, ?rewall, Standards (8A3) No. Report federal security Audit Report 2013. intmsion detection 70 Type II standards. review with March 1, system. remote codi?cation. The SAS state 2014. access systems, it) audit SAS 70 Type II management. March 1. server, and web independently veri?es certi?cation. 2015. server event logs. the validity and March 1. research and act functionality of a data 2016. on ?ndings. center?s control March 1. activities and 201 T. processes. 14.9.3 Shall ensure Statement on Auditing Security Audit Meet state and Annual Security March 1. authentication Standards (SAS) No. Report federal security Audit Report 2013. mechanisms are 70 Type II standards. . review with Marsh 1. correctly certi?cation. The SAS state 2014. implemented in 70 audit SAS 70 Type II management. March 1, Page 235 of 4TB The Regents of the University of California, Davis 1 1-10328 Exhibit A SCOPE OF WORK Great 2 - Eureka Data MarEQeme-nt Information Systems ERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING ceuscnva PERFORMED STANDARD METRIC QUALITY Lever. SYSTEM accordance with independently veri?es codi?cation. - 20t5. Federal. State the validity and March 1. and functionality of a data 2016. statutory and center's control March 1. regulatory activities and 201?. requirements. processes. . 14.9.4 Shall ensure Statement on Auditing Security Audit Meet state and Annual Security March 1. is Standards (3A8) No. Report federal security Audit Report 201 3. being 70 Type II standards. review with March 1. implemented in certi?cation. The SAS state 2014. accordance with 70 audit SAS re Type II management. March 1. Federal. State Independently verl?es certi?cation. 2015. and CDPH the validity and March 1. statutory and functionality of a data 21915. regutatory center's control March 1. requirements. activities and 201?. processes. 14.9.5 Shall audit Statement on Auditing Security Audit Meet-state and Annual Security March 1. Regional Registry Standards (8A3) No. Report federal security Audit Report "2013. systems once a TD Type II standards. review with March 1, year for certi?cation. The SAS state 2G14. compliance with T0 audit SAS TD Type II management. March 1. Federal. State. independently verifies certification. 2015. and GDPH the validity and March 1. security policies. functionality of a data 2013- center's control March 1. activities and 2017. processes. 14.9.6 Shall audit Central Statement on Auditing Security Audit Meet state and Annual Security March 1. Page 236 of 476 The Regents of the University of California, Davis 1 1-10323 Exhibit A SCOPE OF WORK Goal 2 - Eureka Data Management tnfon-nation Systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE . SEWCE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM Registry systems Standards (8A3) No. Report federal security Audit Report 2013. once a year for 70 Type ll standards. review with March 1. compliance with certification. The SAS state 2014. Federal. State. 7'0 audit SAS 20 Type il management. March 1. and CDPH independently? veri?es certi?cation. 2015. security policies the validity and March 1. functionality of a data 2016. center's control March 1. activities and 201?. processes. . 14.9.? Shall provide a Statement on Auditing Security Audit Meet state and Annuai Security March 1. secure Standards (8A3) No. Report federal security Audit Report 2013. environment for 70 Type Ii standards. review with March 1. the physical certi?cation. The SAS state 2014. security and ?0 audit SAS 70 Type it management. March 1. information independently veri?es certification. 2015. systems that the validity and March 1. support the functionality of a data 2015- organization. center?s control March 1, - activities and 201 . . processes. 14.9.8 Shall provide Statement on Auditing Security Audit Meet state and Annual Security March 1. consultation to Standards (8A8) No. Report federal security Audit Report 2013. other 70 Type II standards. review with March 1. organizations to certification. The SAS state 2014. ensure system. ?0 audit SAS T0 Type II management. March 1. networker and independently veri?es codi?cation. 2015. data the validity and March 1. con?dentiality. functionality of a data 2015- Page 23? of 416 The Regents of the University of California, Davis 11-10823 Exhibit A SCOPE OF WORK Goat 2 - Eureka Data Math?Jggment information Systems . . PERFORMANCE WORK BE PERFORMANCE PERFORMANCE ACCEPTABLE PERFORM ED STANDARD QUALITY Lever. SYSTEM center's control March 1. activities and 201?. processes. . 14.9.9 Shall provide State and federal Security Training Annual Security Annual Security March 1. security Security standards. codi?cation form. Training compliant Audit Report 2013. awareness with CDPH review with March 1. training compliant Security Audit requirements. state 2014. with COPH Report management. March 1. requirements. 2015. March 1. 2016. March 1, 201 ii. 14.9.10 Shall State and federal Security Training Annual Security Annual Security March 1. consult with security standards certi?cation form. Training compliant Audit Report 2U13. CDPH CEOIISO. with CDPH review with March 1, or their de slgnee Security Audit requirements. state 2014. to implement and Report management. March 1. monitor security 2015. controls. March 1, - 2016. . March 1, 2017. 14.10 Provide electronic 14.101 Shall provide a State standard for State Complete copy of Documented list copies of alt protecting intellectual documented current Eureka of intellectuai- August 1. Intellectual Property eiectronic copy of Property. con?rmation of source code Property "sent 2012 ?works? to a state a Eureka data receipt of each received each to? and June 1. facility. management copy of month by a state ?received by" 201?. system and Eureka source designated facility state designated Page 233 of 43'6 The Regents of the University of California, Davis 1 1-10628 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information Systems . PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING oeJacnva PERFORMED STANDARD METRIC QUALITY Lever. SYSTEM associated sub- code by a in a recoverable facility.- systems Source designated state format. code to a facility. designated state facility. 14.102 Shall provide a State standard for State Complete copy of Documented list protecting Intellectual documented current Eureka of Intellectual August 1. electronic copy of Property. con?rmation of software Property "sent 2012 - the Eureka receipt of each development tree to" and June 1. software copy of documentation ?received by" 201?. development tree Eureka software received each state designated documentation to development tree month by a state facility. a designated documentation by designated facility state facility. a designated in a recoverable state facility. format. 1410.3 Shell provide a State standard for State Complete copy of Documented list protecting intellectual documented current Eureka Use of Intellectual August 1, electronic copy of Property. con?rmation of Case Property ?sent 2012 Eureka Use receipt of each documentation to? and June .1, Case copy of received each ?received by" 201?. documentation Eureka Use Case month by a state state designated 14.1D.4 to a designated documentation by designated facility facility. state facility. a designated in a recoverable state facility. format. 14.105 Shell provide a State standard for State Complete copy of Documented list protecting Intellectual documented current Eureka of intellectual August 1 electronic copy of Property. con?rmation of Functional Property ?sent 2012 Eureka receipt of each Programming to? and June 1. Functional copy of Speci?cations ?received by" 201?. Page 235' of 4?5 The Regents of the University of California, Davis 1 1-1 0828 Exhibit A SCOPE OF WORK Goal 2 - Eureka Data Management lnfonnation -Sys't'e'ms PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM . Eureka Functional received each state designated Speci?cations Programming month by a state facility. and similar Speci?cations by designated facility documentation a designated in a recoverable used in the state facility. format. development. support. and maintenance of business logic programming to a designated state facility. . 14.10.66 Shall provide a State standard for State Complete copy of Documented list protecting Intellectual documented current Eureka of intellectual August 1. electronic copy of Property. ccniinnation of Graphical User Property ?sent 2012 Eureka Graphical receipt of each Interface Wireframe to? and June 1. User interface. copy of documents ?received by? 201?. Wirefiame, and Eureka Graphical received each state designated similar User interface month by a state facility. documentation Wireframe designated facility used in the documents by a in recoverable development, designated state format. support. and facility. maintenance of User Interfaces to a designated state facility. 14.10.? Shall provide a State standard for State Complete copy of Documented list Montth protecting intellectual documented current Eureka of intellectual August it. Page 240 of M6 The Regents of the University of California, Davis - 1 1-1 0328 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management information Systems PERFORMANCE TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC ouALmr LEVEL SYSTEM copy of Property. confirmation of database Entity Property "sent 2012 Eureka database receipt of each diagrams. database to? and June 1. Entity diagrams, copy of scheme diagrams. ?received by" 2017. database Eureka database database table state designated schema Entity diagrams. documentation, and facility. diagrams. database schema ail other associated database table diagrams. database documentation. database table documentation and all other documentation. received each associated and all other month by a state database associated designated facility documentation database in a recoverable used in the documentation by format. developrnent. a designated support. and state facility. maintenance of the database environments to a designated state facility. . 14.1118 Shallprovide a State standard for State Complete copy of Documented list Montth protecting Intellectua! documented current Eureka of Intellectual August 1. electronic copy of Property. con?rmation of User Manual and Property ?Sent 2012 Eureka User receipt of each all similar to? and June 1. Manual and all montth copy of documentation "received by" 201?. simifar Eureka User received each' state designated documentation 'Manual and alt month by a state facility. used by the user similar designated faci'iity community on documentation by in a recoverable Page 2:11 of HE The Regents of the Uniyersity of California, Davis 11-10828 Exhibit A SCOPE OF WORK Goai2 Eureka Data Management Information Systems .. PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM "mum how to perform a designated fonnat. basic work state facility. activities within the system to a designated state facility. 14:10.9 Shall provide a State standard for State Compiete copy of Documented list Montth protecting intellectual documented current Edits of intellectual August 1. electronic copy of Property. confirmation of metaiile "tool sets". Property ?sent 2012 - Edlts metafile receipt of each received each to? and June 1. ?tool sets?. copy of month by a state "received by" 201 documentation. Edits metafile state designated passwords and ?tool sets?, by a in a recoverable facility. anything else designated state format. required to facility. support and manage the Edits meta?ie and associated technologies 1 4.10.10 to a designated State facility. 14.10.11 Shall State standard for State Complete copy of Documented provide a protecting Intellectual documented current Business of Intellectual August 1. Property. confirmation of Rules Management Property ?sent 2012 electronic copy of receipt of each System Use Cases to? and June 1. the Business copy of received each ?received by" 201?. Rules Business Rules month by a state state designated Page 242 of 4'16 The Regents of the University of California. Davis 1 1-10828 Exhibit A SCOPE OF WORK Goal 2 - Eureka Data Management information systems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING oeqacnva PERFORMED STANDARD METRIC QUALITY LEVEL svsrarvr Management Management designated facility facility. System Use System Use in a recoverable Cases work Cases by a format. product and designated state technologies to a facility. designated state facility. . . 14.10.12 Shell State standard for State Complete copy of Documented list provide a protecting intellectuai documented current data extract of Intellectual August 1, montth Property. con?rmation of programs and data Property "sent 2012 - electronic copy of receipt of each submission to? and June data extract copy of programs received "received by" 2017. Programs. data data extract each month by a state designated submission programs and state designated facility. programs. and data submission facility in a other related programs by a recoverable format. work product to a designated state designated state facility. facility. . 14.11 Shall provide 14.11 .1 Shall develop a Within 120 days of Publish lT Cost iT Cost Reduction Project November planning services to plan together with contract start date. Reduction Plan. Plan is Status 1. 2012- create an tT Cost state develop an IT Cost grammatically Meetings. Reduction Plan to management to Reduction Plan with correct, and meet component reduce data state management to delivered within 120 Project status of status Goals and center and local IT meet objective of days of contract the lT Cost reports Objectives to support costs by reducing IT costs by start date. Reduction Plan ongoing to reduce lT costs by at least 25 percent at least 25 percent in it) be reviewed Project at least 25 percent for hardware, the first two years of with'state completion in the first two years software. network. the grant management on Page 243 of 416 The Regents of the University of California, Davis 1 1-19823 Exhibit A SCOPE OF WORK Goal 2 Eureka Data Management Information SyStems PERFORMANCE WORK TO BE PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING OBJECTIVE PERFORMED STANDARD METRIC QUALITY LEVEL SYSTEM of the grant. storage. a basis. peripherals and associated services in the first two years of the grant. 14.12 Shall provide data 14.111 Shall develop a Plan developed using Complete set of Data Center Project To start as center migration plan together with generaliy accepted Project Pianning Migration Project Status directed by and transition state staff to move project management documents per Plan documents state services to meet data center practices as de?ned industry PM are compiete as manage- State directive as services to a state by the Project standards; Project de?ned by PMI ment. outlined in data center as Management Institute Charter. Detailed standards. Assembly Bill 2408 directed. Work Breakdown grammatically and IT Policy Letter (WES), correct, and 10-14. Risk Mitigation deiitrered within 90 Plan, and days of start date. Communication WBS includes all Plan. steps necessary to complete the project. including dependencies. 14.122 Shall implement Plan developed using Complete set of Data Center Project To start as the plan and generally accepted Project Planning Migration Project Status directed by complete work project management documents per Plan documents state activities as practices as de?ned industry Plvii are complete as manage- necessary to by the Project standards; Project defined by ment. ensure minimal Management Institute Charter. Detailed standards, negative impact to Work Breakdown grammatically Page 244 of 4'16 The Regents'of the University of California. Davis 1 1-1 0828 Exhibit A SCOPE OF WORK Goal 2 Eureka Data management information Systems PERFORMANCE WORK TO BE 2 PERFORMANCE PERFORMANCE ACCEPTABLE MONITORING osJEcnvE PERFORMED srnnoaeo METRIC QUALITY LEVEL production system Structure (WES). correct; and availability. Risk Mitigation delivered within 90 Plan. and days of start date. Communication WES includes all Plan. steps necessary to complete the project, including dependencies. 15. Cancer Reporting 15.1 Shall perform 15.1.1 Shall develop and Develop a plan to Achieve a 35% or Develop and The July 1. Data Standards software engineering document convert Cancer more "per unit Execute on a development of 2012 - Conversion to services in support processes and Reporting Data cost" of cancer Programmed a Central June 30, Programmed of goals and implementation Standards to case collection Business Rule set Cancer Registry 201? Business Rule Sets objectives to use plans in support of Programmed and increase which addresses Programmed Eureka Data meeting the Business Rule sets case incremental Business Rule Management Program Goals based on documented completeness by improvements in set will be System (OMS) as a and Objectives to processes and the "per unit cost" evaluated per platform and Use the Eureka implementation plans of cancer case the milestones foundation to define Data in order to reduce the collection and identified in the and program the Management "per-unit cost? of increase case Project Plan and compiete set of OCR System as a cancer case completeness by reevaluated by Data Standards and platform and processing and implementing the the Central other cancer registry foundation to improve case ~i'500 potential Management "mic-sets? directly define and completeness by business rule team on a into the system and program the 2.5% by the end of requirements In quarterly basis. associated eXpert complete set of the RFA period. CCR's data systems in support COR Data standards as well of program Standards and as those objectives to reduce other cancer maintained by ?per-unit cost? of registry "rule-sets" SEER, NAACCR Page 245 of are TECH HWEENEIT FIJI HISIN ESS ?1 TECHNOLOGY MANAGEMENT FOR BUSINESS UC Davis Health System Service Level Agreement Quest Managed Services SERVICE LEVEL AGREEMENT Quest Managed Services Presented to: UCDAVIS HEALTH SYSTEM June 12, 2012 MEHEIT FOE UC Davie Health System Service Levef Agreement Quest Managed Services TABLE OF CONTENTS IN It'll! Illa-I Iii-Illotiton bout OIICII to. uni".- nil-IliI'I-II pup-n.- I 3 3 6 Pull?I 6 3' I'll-ill 7 9m till It" .0000 0 DUI-.- nu IlrillAia-il ?an 7 8 DittlItII-Ilu uni-I I'll-I lililolItIOIitiil nautto-nanc non: sun's. ICICII yam "ll lotto-II-cuc-lo-u-c to" .. run-n linttQI ?up. smut- tatintiocuu u-I- APPENDIX A - INITIAL 60-DAY 18 APPENDIX SLA STANDARDS 19 APPENDIX - NEW ADDITIONAL PRICING 20 WI EDDIE - Quest is a registered trademark of Quest Media and Supplies, Inc. Page 2 e: Copyright 2012, Quest. All Rights Reserved. WW Wild Fill UC Davis Health System Service Level Agreement Quest Managed Services INTRODUCTION This Service Level Agreement effective as of July 1, 2012 (?Effective Date?), is made and entered into by and between Quest Media and Supplies, a California corporation (?Quest?), and University of California Davis (?Client?). Quest and Client are sometimes hereinafter referred to each as a arty? and collectively as the ?Parties.? 1. SERVICE SUMMARY Quest will provide Services (as de?ned in Article 2 below) to Client. The components relating to the Services are associated with Client?s requirements for Quest Cloud Services: 1.1 Quest Provided Cloud Services (McClellan Park) - Six (6) Dedicated Servers (Cisco UCS-B Series VMware 5.1) I 64GB RAM - 4 Processor - vSphere - vCentcr 1- Twenty (20} TB SATA Storage (thApp 2240) at Five (5) TB AVAMAR Backup (EMC Avamar) i Three (3) Cisco ASASS 0 Firewall 0 Firewall and TPS event monitoring, alerting and management (SIEM) - RSA Secure ID ApplianeetTwo factor authentication 4' RSA Secure so? tokens - 200 soft tokens with support 1* Barracuda Web Application Firewall 660 Twenty (20) Internet connectivity 1* Anti-Virus VM Guests) a 24x7x3 65 infrastructure performance monitoring, management and support *Quesr cloud is supported by a redundant Cisco? Nexus Yk, 5k,_ 2k architecture along with?u?iy redundant Circe UCS (Uni?ed Computing system) insects Quest is a registered trademark Media and Supplies, tne. Pass 3 Copyright 2012, Quest. All Rights Reserved. momma MWEITWE BUSINESS UC Davis Health System Service Level Agreement Quest Managed Services 1.2 Quest Active Directory, Server and SQL Database Monitoring and Management? TKISQOIE 24x7x3 65 Server Monitoring 24x7x365 monitoring! alerting (performance errors, stability, utilization) 2437x365 support (Probiem isolation and remdiation) Incident noti?cation and remediation Daily review of incidents with client noti?cation as Real-time web portal for client to view monitoring and altering (performance, errors, stability and utilization) Server OS Patch Management Review Patches as they are made available buy the AV provider Coordinate the Patch installs in a test mode initially Coordinate Patch install into production Server Security Log Management 24x7x365 log aggregation and monitor;r alert Server OS Anti-Virus 24x7x365 monitoring alerting (performance errors, stability, utilization) Verify SQL Backups are being performed 2437x365 monitoring alerting (performance errors, stability, utilization} 24x7x365 remote support Incident notification and remediation Verify Server Health by checking service status 24x7x365 monitor of the ?Services? availability Check SQL Server cit Windows System Logs for Errors 24x7x365 log aggregation and monitor! alert Server Disk space report 24x7x365 monitoring alerting using pre-detennined threshold SQL Version analysis Details what updatesr?patchesfservice packs are necessary at current patch level Quest is a registered trademark of Quest Media and Supplies, Inc. Page 4 Copyright 2012, Quest. All Rights Rosewod. TEEHIDLIIGT Will UC Davis Health System Service Level Agreeme_nt Quest Managed Services 1' Client will provide all Mierosoft SQL software and licensing 0 Client is responsible for all Data Restorations; Quest can provide service at technical rates, as reported in section Investmenifar Services If on incident requires remediation, Quest will open a ticket, noti?z Ciieni, discuss remediation steps, gain approval and troubleshoot the issue; services are billable on current supper! costs. son]: Quest is a registered trademark of Quest Media and Supplies, Inc. Page 5 . Copyright 2012. Quest. All Rights Reserved. "mu me nuts: UC Davis Health System Service Level Agreement Quest Managed Services 2. SERVICES . Quest and Client have identi?ed the following list of components to be monitOred and managed. Group Components Qty Services owner at i Hardwarei?SoftwarefService 1.1 Hosted Bundle 1 ESX, SAN, Backup Quest Managed Services NeMorkaecurity Firewall 1P8, RSA, SEIM, . Bundle 1 Barracuda, Internet, AV Que? Managw services Server Monitoring, Server Monitoring Security, AV, AD . 1.2 and Management 41 Management and Quest Managed Services Monitoring SQL Monitoring SQL Performance, . 1'2 and Maintenance 3 Maintenance and Tuning Quem managed services 1.3 1 System, SAN, Backup Quest Managed Services esign L4 Nettvork Security 1 Networlr: Firewall 1' user Quest Managed Services Design authenttcation Retention of Reporting Data Quest will make service monitoring logs available online for 3. a period of 90 days. Data beyond 90 days will be archived for one (1) year. All incident reports will be saved for one year and delivered in a secure manner to Client. Quest shall not retain any Client data after account termination. All data is deleted from Quest servers at the time the account is terminated. PROCEDURES, RESPONSE METRICS, AND DISPATCHES The following are the proper communication procedures required between Client and Quest. 3.1 Maintenance. The following process will be utilized for the updating of Services. WIMDIZ Updates. Updates will be implemented during the scheduled maintenance windows defined in the 60-dayr Profile (?60-day Profile?) described in Apmdix A, attached hereto. Prior to implementing any updates, Quest will send an email to Client notifying Client of the update, when it will be implemented and its impact Quest is a registered trademark of Quest Media and Supplies, Inc. Page 6 Copyright 2?12, Quest All Rights Reserved. congressman - WIGEHEII FBI lilile UC Davis Health System Service Level Agreement Quest Managed Services Changes. If con?guration changes to the components are required or requested, Quest will utilize the change management process as de?ned in the 60-day Pro?le. Any changes. requested by Client will be completed within the request resolution time?'ame set in the 60- day Pro?le and implemented during the scheduled maintenance window as de?ned in the 60- day Pro?le. Ifrequested by Client, the change request will need to be sent in a secure manner to 3.2 Incidents and Emergencies. If any incidents or emergencies occur, Quest will utilize the incident management process as de?ned in the 60-day Pro?le. Quest will respond and resolve all incidents within the timeframes and according to'the methods set forth in the 60- day Pro?le. If reported by Client, the incident noti?cation will need to be sent in it seem manner to or (ii) by telephone to 800-443-5605. 4. ACCESSICONTROL The following are the access and control methods for both Client and Quest. Component Access: The hardware speci?c to this service will be Quest provided and therefore Quest will maintain primary access into the infrastructure located at the Quest BRC (McClellan Park). Quest will utilize in-house perfomtancefhealth monitoring and measurement tools to ensure a stable and reliable service to Client. 5. IMPLEMENTATION Quest will need the following to initiate service: 1. A signed 2. Kick-off meeting; 3. Installation and con?guration of Services; 4. Development of the 60-day Pro?le, completed 60 days from the Effective Date. This will he added to AppendteA upon completion; and 5. Commencement of SLA Managed services. ?ill 3.12012 Quest is a registered trademark of Quest Media and Supplies, inc. Page re Copyright 2012. Quest. All Rights Reserved. commoner: H?il?i??l??l??li?l an UC Davis Health System Service Level Agreement Quest Managed Services 6. INVESTMENT FOR SERVICES The following table identi?es the invesnnent for the ?Service Package?. If and when Client requires additional services, pricing will be provided incrementally for Client?s approval. Contract term will begin as of the ?rst month that billing commences for services. Quest Select Service Package: Term I Cost Quest Hosted Cloud Services (Services listed in Section 1.0} 12 Mom? $16,180.00 Server Monitoring, Management and Maintenance 12 Months $6,150 SQL Monitoring and Maintenance 12 Months $3,5 00 Installation Billed as Actual (Estimated at $35,000) Infrastructure Design Architecture $73100 (One-time) Network Securin Architecture -- $9,910 (One-time) Tachnical support: See Technical Support Rates Remote &__Qnsite Support 1'3th below Design I Architecture Services (Network, Security, Infrastructure) I Provide documentation on existing infrastructure and gaps between current implementation and industry best practices. - Provide detailed infrastructure and connectivity diagrams 0 Security Implementation 0 Network Implementation 0 Provide documentation on areas of recommendation that Quest may utilize in a ?Cloud? solution 0 Provide design architecture recommendation for a ?Cloud? implementation '0 Provide documentation on existing systems and databases infrastructure performance 711 82012 Quest is a registered trademark of Quest Media and Supplies, Inc. Page 3 Copyright 2012, Quest. All Rights Reserved. I E?il?l??l?m?i?i?l Fill UC Davis Health System Service Level Agreement Quest Managed Services Document any identi?ed any issues that are currently impacting performance Provide and review system and database performance analysis results. Provide design architecture recommendations for sizing of a hosted ?Cloud? virtual environment at the Quest BRC Installation Services will be billed as actual (Estimated at $35,000). Infrastructure implementation timeline is estimated at 30 business days from date of signed SLA and Purchase Order. At that time, Quest assigns a Project manager and allocates the resources for the ?Cloud? implementation "#1822012 Provisioning! segmentation of the Quest Cloud for UCDI-IS I CCR (dedicated private) Provisioning of the ESX servers 0 Provisioning of the VM Guests (41) 0 Installation of Anti-Virus on the VM Guests (41) Provisioning of the SAN 0 Fiber Channel connectivity Provisioning of the Backup Provisioning of the Internet Implementation I con?guration of the Barracuda Reverse Proxy Implementation con?guration of the RSA two factor authentication Con?guration of the ASA Firewalls (3) Connectivity Integration of above mentioned items Implementation of SEM for ?rewall IPS monitor!F alerting Implementation of performance monitoring tools Review rcportin capabilities with UCDHS 1' CCR Review alerting options with UCDHS CCR Review escalation procedure for Quest and UCDHS CCR Discuss and document change control procedures! policies Implementation testing Implementation Documentation Quest is a registered trademark of Quest Media and Supplies, Inc. Page 9 Copyright 2012, Quest. an Rights Reserved. cameraman Hill Bl?l?i? UC Davis Health System Service Level Agreement Quest Managed Services Understandings: Additional Services that Quest offers, but are not included in this SLA, such as: Services Optional Hosted Exchange I AD 4? Test and DeveloPment Processes 1/ 1/ Microso? Licensing for OS and SQL Technical Support Rates: Que'st NOC Remote Engineering: Quest will have NOC staff available for troubleshooting and project engineering. This is an on demand service and available 24x7. I Remote DesktopiPrinter Support Engineering Services has an hourly rate of STS per hour, and will be billed in 15 minute increments. 0 Remote Network or Server Engineering Services has an hourly rate of $100 per hour, and will be billed in 15 minute increments. Remote SQL, VolP, Security and VMware Engineering Services has an hourly rate of $125 per hour, and will be billed in 15 minute increments. I Scheduled Onsite Dispatch Engineering: Quest will have Engineering staff available for project engineering if scheduled more than 24 hours in advance. This is a scheduled service for time and materials engineering. 0 Scheduled Dispatch Desktop/Printer Support Engineering Services has an hourly rate of $95 per hour, and requires a 4 hour minimum. 0 Scheduled Dispatch Network or Server Engineering Services has an hourly rate of 1 50 per hour, and requires a 4 hour minimum. 711192012 Quest is a registered trademark of Quest Media and Supplies, Inc. Page 10 Copyright 2012, Quest. All Rights Received. White. lifilli?l?li?f an UC Davis Health System Service Level Agreement Quest Managed Services - Scheduled Dispatch Securiy and VMware Engineering Services has an hourly rate of $175 per hour, and requires a 4 hour minimum. Ir Emergency Onsite Dispatch Engineering: Quest will have NOC personnel available for troubleshooting/issue resolution who are ready for emergency dispatch with less than 24 hours notice. This is an on demand service and available 24x7. - Unscheduled Dispatch DesktomErinter Support Engineering Services has an hourly rate of $150 per hour, and requires a 4 hour minimum. I Unscheduled Dispatch Network or Server Engineering ?ervices has an hourly rate of $250 per hour, and requires a 4 hour minimum. I Unscheduled SQL, Securig and VMware Engineering Services has an hourly rate of $275 per hour, and requires a 4 hour minimum. if] 3.0.012 Quest is a registered trademark of Quest Media and Supplies, Inc. Past 11 Copyright 2012, Quest. All Rights Reserved. grammes. TEWIIW Hl?l??lf?'l . UC Davis Health System Service Level Agreement Quest Managed Services 3mm Quest is a registca'ed trademark of Quest Media and Supplies; Inc. - Page 12 Copyright 2012, Quest. All Rights Reserved. SW HIHEHIEII l?il?E? UC Davis Health System Service Level Agreem?? Quest Managed Services Ti 153012 Quest is a registered trademark of Quest Media and Supplies, Inc. Page 13 ?r Copyright 20'12, Quest. All Rights Rammed. 99mm UC Davis Health System Service Level Agreement Quest Managed Services 7H 3.0012 Quest is a registered trademark of Quest Media and Supplies, Inc. . Page 14 Copyright 2012, Quest. All Rights Reserved. em est? TEIIHNBIDEYHWEHEHT FOR Bllil?E? WIMGIZ UC Davis Health System Service Level Agreement Quest Managed Services Quest is a registered trademark of Quest Media and Supplies, Inc.- Copyright 2012, Quest. All Rights Reserved. Page l5 POI MSIIESS UC Davis Health System Service Level Agreement Quest Managed Services 1 812012 Quest is a registered trademark of Quest Media and Supplies, Inc. Copyright 2012, Quest. All Rights Reserved. mm; Page 16 UC Davis Health System Service Level Agreement Quest Managed Services Print Heme: PrineNmne' 559.3: Title: WISHDIZ Quest is a registered tadcmark of Quest Media and Supplies, Inc. Page 1? Copyright 2012, Quest. All Rights Reserved. Hl?l?El'l?l FDR UC Davis Health System Service Level Agreement Quest Managed Services APPENDIX A - INITIAL PROFILE Quest and Client will develop an initial 60?day profile to reference the following: Incident Handling Procedures II Escalation List - Noti?cation ListI'Contact List - Secure Document Deliver Til M012 Quest is a registered trademark of Quest Media and Supplies, Inc. Page 13 Cop?ight 2012, Quest. All Rights Reserved. Wm WEBER Fill UC Davis Health System Service Level Agreement Quest Managed Services APPENDIX SLA STANDARDS ?Planned Service Interruption? means any Service Interruption caused by planned work such as I scheduled maintenance or planned enhancements or upgrades. ?Service Interruption? means a complete loss of signal that renders the Services unusable. Quest guarantees that the Services will be available 99.9% of the time per month and (ii) that when the Services are available, with the exception of services impacted by Internet performance or availability. Quest?s liability for any Service Interruption (individually or collectively, ?Liability?), shall be limited to the amounts set forth in Table 1 below. For the purposes of calculating credit for any such Liability, the Liability period begins when Client reports an interruption in any portion of the Service to Quest, provided that the Liability shall be deemed resolved upon closing of the same trouble ticket or the termination of the interruption, if sooner, less any time Quest is awaiting additional information or premises testing item Client. In no event shall the total amount of credit issued to Client?s account on a per-month basis exceed 50% of the total Cost. Service Interruptions will not be aggregated for purposes of determining credit allowances. To qualify, Client must request the credit ?om Quest within 30 days of the interruption. Client will not be entitled to any additional credits for Service Interruptions. Quest shall not be liable for any Liability caused by force majeure events, Planned Service Interruptions or Client actions, omission or equipment. Table 1 Length of Service Inteiruption Amount of Credit <1 4 minutes None 4 minutes - 4 hours 5% of total Cost 4 hours - 8 hours 10% of total Cost 8 hours 12 hours 20% of total Cost 12 hours 16 hours 30% of total Cost 16 hours 24 hours 40% of total Cost 24 hours or greater 50% of total Cost THE TOTAL CREDIT ALLOWANCES PER. MONTH 15 CAPPED AT 50% of THAT COST FORTHE INTERRUPTED SERVICE. SERVICE INTERRUPTIONS ARE NOT AGGREGATED FOR THE PURPOSES OF DETERMINING CREDIT ALLOWANCES. Til ?02012 Quest is a registered trademant of Quest Media and Supplies, Inc. Page 19 Copyright 2012, Quest. All Rights Reserved. UC Daria Heatth System 5911133 WW Cummings-13mm HAHAEEHEHT BUSINESS SERVICE LEVEL AGREEMENT Quest Managed Services Presented to: UCDAVIS HEALTH SYSTEM June 121 2012 mest' tau?nu 5ystz_m 5m Laval $531131! Elmagad SHADES TABLE DF I. mam-mmSun-am .. .Hm. . J. mun-madman Din-unlu? . 1. 5. mum E. Wm?tnm .. I T. Hm AWMW . --.. In a. Curran-r Inmamn II.--.- 13 11. BMW .. 1.1. NmmAnuH . . . . 11'. {mannme .. . . mm Al.- . .IB .. mama: Emma!? Ant-mum}. mum: -. mum M1 a mu Hanan! Hull?Hm amtqu IHTHJEIJEHDH mm unfhlij 1.1m LII I I 645133.!? I 4PM -I ?ling-l: I ?nl? - I - ?Immutzimashmurtnun - Pimp-11m I I I II- I mvmiilm?m} I '?mucfmm'i'm?n It. ll: mam m'm-g wamymw Elma- wsm?cmgaww wlmu mhuwmiw run I: whim 3.3mm amine ?rearm? Wham-alum 1.: Que: 3.2mm mm. Bun-run! m1. my: Hun-?aring uni ?ll-'10] I 24:1ij Eur-m: Hm'rlarhg 1mm: min-lug lb!th Wm ma, whim)?. Inilhutlm} Edn?hJ?E awn-IN? [whim Ind I'mdl?lmJ lucid-ml mlifniiunmld mum. Hall?tin: 'Iili'lh helm Ell vim Maud-hi" [paint-mum. Eran, may and milk-Hm] 5:11-3:- DE Punch mm limit-w mm ?they!? mad-I: Myth-u pmirh: Claudia-a: linth haul}: in In: Punt in?ll h?h pmduc?m Emu: 3m Lug Mammal 2mm: In; Ind mam aim Emu-{H hurl-Vim: HiT??i Mia-1m?; {whim mu, stability. mili?tEcI-rr] EQL Bump: In: Mupn?um Ill?'??i manic-ling (mm m. may, ulili?ti?n} 14:?1365 mm amp-art lucid-mt nuli?mtlun and madlulm Samar by dunking lulu-Vina mel?j min-rafting ?En-vim" wu?ah?lty Clad: Ewan-4t lime lap hrErrms Emu- Dia'k spa-m rap-m1 2411:3155 mining lin?tg 1min: Mimi ?rcaimdd SQL ?mini Hula-3i: D?l?l that plains an Hm patch lw-al Pal Imurlm. MI mini. - UG ?avqueaim System . cum will prayidtl? Himmna 5:1 mm ?aming I Chiamh?lmm??mm?bmu mmrmumhmim?r?m was: mum Wm MIL-11111 nmqu-un Mimi-nu Wu magnum UGDavisHea?i'ISys?aem Emineme 2. SERVICES Gram-p tin-[Inna Qty Sinh- Ell ms" I l-luhd?undh I Mum-gum may HLI Hui?: I mm?v Quail-Wm Bmurhhi LI mm at Mania-in; 1.2 Ind? hm. ?Tuning Quail-illuin 5mm I ~Quthmum3minu I MES-unman- LI- Itchin?ln arm ?lh? Quail will ml: min: ruminating [ais?lillhh anlJ'nc for Ipuinduf??dqm. Minnidcnl In Incummamurm?hnl. Quintin? not 3. mm mica. mu Th: following In: IE1: pmpur mmimtlm [Imam rmE-nd bum-m Eliarll and Dunn: 3.1 Hal-lumen mmqm?hmmrunp?mqurm Uphill. will b: impluumlnd d11ng than Mind Mill-am window mam Wmmn?wwu?u. :3?an mar-Id] Him All-mm mm System mammal-m [bl Elm til-1mm 3.1 lldl?IIndEnH-pndn anme?la. 4. Wm Emma-gm: will ?him-1:1 Erin-yucca? imn Ill! lot-Had II: EEC DUEL Ile ?lilin: ill-hula: tool! mm: Ind Hlilhl: un?t: In 1'3th 5. IIPLEIEHTAWH than will nun-d ?u ?aunt-Hug In annular. 1. A lignnd E- 3. We: mm?yuiinn urfEm-Iim'. 4-. MWHM Pra?k. mm ch31 Emu EH-m?w Dunc. Thill'i" h: adult-d lam mu! .5. Wmd?mmugad?mm Tau-m: Pun Alain-1m. Elem? animal?I __L{CDavisHad1h5rstem E. Th: nl'lh ?rs-I mm hil?lgm nan-mm. (Juan-:1 5m Tam mum . Quart Haul-d Cloud 5min. H: La] 12m: muslin-u -- Sam: Magnum lid - - mm :1 Hum 56,150 EQL mum i Mar-m sum m? Bum I: new lem minim} C: We 1 AIL-hitch.? $711.9" [mt-mm} 14er mm Hyman-um I - . Twin] Supp-m1: mi- maz quire Sum-1 II I I: c: Humminan I mum - - mum mud?HMHQ?Humm run tiny-nu:qu nail-unnuan mu East UK: Davis Haa?h swam Swine Lwal?g?eqmit mmumm Ducuum?ny indmti?ad my mm: In: ml}- humming. rim-3 mimmui?mw??c hi??um?i?m?uMIIwm? hurl-mm! thaluhu?mu? Unlu- him Wu Wufh??xm n- W?m?h? I: Maren-mama" Inf Ilia mm imricwaludlgu?mwi?UCMI-IEICCR Pupil um ?awn-mud mm west Win-lulu! LIE Davis Heallh Sysiam ??ush-dip: Addi?nml 3m .r v" um u" v? Tuhliul Flinn-I Run: II minim-mm 141:1 - Muhammafilm pillar.? ?ill ., [ruminant-um has an haul]? m: cuff-I25 L. El" .1 hum. will hehillnd in 15 mime inm - mlmpuu Dim-H awn: 1:11th Enan ?nr :inuudrumri-hmgimedug. -. -- Whammrmof ?iplmku?mqn?m?hurmhimm. - mm? n.qu cum-mm; a?wa Davis Health 33mm aunt umde I Whiz an 1mm i min. 1 I) Jill . . . . .--.I. '2 515:: h, mu hum mir?mum. mllwiid?tquI-i?lhm?m? hill 1.113me mm UC Davis Hed?'l ?gstem Mint?: I1 HWELLM main-m . A germs Level Wt Dual Swim 711ml: P-IJ Nl?ll?ll?md mm a; in: - - E??w 532.. 35a U: .. I umm?mn LIE [laws Hea?h System Earl-rice Lav-Es] Amaze-malt Quest Manned San-ha 2&5? arm amt-wmm rm El?n-1331151 Elli. Qua; Rama: WWI. Ftp: r5 Davis Haalm 5y3tam Swine Guam Managuad Bahamas 'I'h?lhli Pu: NI WEI-HAL UC Davi? Haalm Syatem Ermine Lava! ?glean?ranl Quasi Named Eanrlaaea linen I: Immum??m?dul?m. lnI:. Bum-ad. wesf UCiJayis Health Serviue Laval Rama?[119111 Quest Maan SW5 AHEMIA - [HrruL Eli-rm FHDFILE QIHI 1nd II: lnl?ill MW MRI-tum than Winning: I lmidtm Handling I?m-madam: I Lia: I Nu??na?m Lisu??m?act List I Sena-u Batman: Deli-my 'I'I'lm? P:le amzumm 92mm; . UE Davis Hearth Eylet'? Sendai Let-re! Went ?ll-Ht him Sw?ms - SLA Ermnm ?Phnu? Simian: Imrmp?uu" manna any Simian: Intm-u?im watt! :pimnud vm?t such as mama: ?rpll?n?l ?Eur-?u mailman-?plat: hail animal 111a Eur-rim unusable- Quastgumm ii]: Ih?t the Err-rims w?l beavailnbte?l?miafdae urns p? mm and that wit-:11 1h: Stu-I'm: m-awilnhh, with ?at: mam mm In:- Internn p?'f??'?ll'ttl Il?lr'?dhb?il'jl'. W's liability far my Sen-Eu: [um-rupthn [Mhbd?ll?'m ?Linb?itf?t, shall b: limitud to at": ammn'ls 5:1 furth in Tubal: I hula-x. Fur tha: puma-at: ut?unluttai?hlg cut-Exit [bratty- [I'm Lint-?lthy parind htgim intmuplinn in my partim uf'll'h: 5:11an In Un?t. prm'idad that 111: Link-?int shall ht- dmund rewind upun alas-in; ?fth: matte-um: llukntur?te mlnmim at the: if manta-u, less any Lina: (Juan is awaiting addition-l infant-ambit: cur prmnima mm; frum Client. In no meat shaitthn mud mounlnf?adil issued tn Climt?: mmunt on a put-month bash: mind 5% uf?tu: Iml Mm?'rljl' 53115:. Sum Intmfupdnn?: net but! Wad far puma-5:5 afdutciminingm'adit Tn qualify, Client ll'tUSH'?qu?t Ian-?ll ftan within an days ofthc mm. Client wili nut be mum tn my maths Fw?tnin: Quantum" nut bl:- Iinhl: farm Liability wand by ?re: mqiraura watts. Hanna! 31min: lntemp?uns?l Eli-ant ?rims. Minster" m- nquipmtm?. Tabla Lsng?t nfEEr'rj? Ammt nFCru-tl'il -: mimic: Ham.- 1 5H ut'tnull Mm?blir Ilhbm~lhwr?- I Fuh- albums minnow: Mm?th' L?mt Emma?16m mum?24m E411n-ur: a: Emma: 50% arm: Hmuhty cw, mam-M. mun PER T5 5cm Inf mar Ham's mm mm mama SERVICE 52ach Immnnus ARE wammam FOIL THE. warm cn?mmowmms. wit-Em: quart l-urqitm? af?uent and mum. Hg: t9 In Mimi-Elli. Ilium Alt night: Run-uni Fm U1: ?IriI Airmail IF AGREEMENT [Quit Nadia and Empli?. hm} THIS 11wpIni?lng-aufo?n-w3: 3. Wm?m??mqm?udm??in?mu Luci Ilium-[Eth Tu- mm: mm. llnimlly nl' i :nlil?nmna Midi'rinrml I'm-n15 and Cumming 4:1 I'Jaln i?hmpur?adhcmin. Tu thc?hlufmnm?thmm WI. D5, Exhibit A. 5141. In. E?nq?umtfm?ial?a F?ulpaymmt Euhimminc?n?imlu?e?iis Aim: K?stinc Sleuth, 2921 Slam Baum Anna. Saunmmta. CA. 9531?. Manhunt: 193*9134. e-mtil: MainlaJndralamd mr?n?m ?mnmdaguinsl: party, in: n?inma. agents, a: were. THE REMIHIJEH THIS PAGE HAS- BEEH LEFT BLANK ii. Elms. shall maintain Elicia-,5 af?rm-11mm: mmaining'rh: palty": dim in?ll: Uni-Emily with uni-?lingsufhmc: evidmcing mummy fnr?wacmfn?nu?i?miu?mu?htw 6.1 Wmm??fmw liabi?ur mm. Each mam-rm Guam-11.1 6.1 Businm automobile Iiahilily- imm. For [nu-mud. nan-uwned at hind: numnnhilu with a mmhimd singh: J'nnit :3me line. than 6.3 MW Wurtm" luau-Ina: as mini-ad by Cali?xnin law. gamut In this Wilt: II Wmucmddimnmufmm?m L4 End: ??nd try Univmaity paling. Em skull milieu: plumml Dr Gun?de htfurnulinn Wy?um?t: Emmet-arm} is :hnilmu-k Infarml?m?- Rum-d: whining pmunal Ihnul indi'lridmis. ?ndudhu Iii: ?fth: infurm?m, an: the pupa-t} cf [Miran-5513 and whim! ta Unimily policy and mpiicah-le Edam and slain Im. Cm delta-trail such mam-d: mdmpiu Win Ulli?i't?ll'tj' upon minim ufthis Barnum. 'L'i Wm. Cm rim?mtuaamrding denim in.er mini-i=Humanity, and 11pm: mgrm?md?wirauthu??dmwu?vu, pammhummdn. 3. W. Emu-mm:- ahnll My with 1h: [quininanlt ill P151.- 2 DE 5 Unim??, I2. Ed Em?u?r??mwn?n?mamplmuuf 3.2 MM. mm El WMMW - . . riding Em Ill-ll keep mn?dm?? Wan lhminfunul?mu?m?d?ul?mfamu?nn. War Hmyinspm?unarmralm?nu uf?wJ-duriu. FW- Ht??win?m??dm?rmmp?fv??lwlw?t Heidm p?'tf shall bu: liable for dammu sulfa-cad by m: gum paw hum nt? Univmity?a Mime ta platfan if failun: is dun: u: any mm: swan-00:31 rag-3an I4. 15- IE- was; knew, if Elm-rim an: nut p?ihrm?t in 111: ml: n?sfantiun {If Univmiqr, Univnu-silynuy Ma?awmlyupmw?mm??m?mm H??smhmu?umy?medmh?thwm ll?ldly?f??'i?h. Ewing. am Cant-m: a: Analysis Hark Wit nf Fali?lrru'i. Davis Quail MIL-din and SW. In; Du: Shields am?; 5322 Ram-will: Run-d Davis. CA. 951516 Mum. CA 95342 W. Cumm?t?iilisml??l??d?mw?cip??m in my sawmill mm pram, including. willmut 1h: Medium, Prom and Empire-cum? Plug-m Th1: Wan shin be Timplniumindnpu?entmm. IE. 19-. El]. Why?nivmity'a with-m 11mph? ?Wald such app-mm] dull h: wi?in Marsh)": ruler disclaim. Thu: 1mm and mnditinns of This W. may. WEE DF THIS FAG-H BEEN MEFT Em W??m Y- M41315 mammal - I AGREE: QUESTMEDLH AND INC. 0F 1:l fl. .21? {we} 9/ [mm-hm Fri-um: Mam .E WMM Till?_l_ mm mm - Wilma-fawn.th lm?udaanudH-Il Them-sill Manhunde?rj-nmidm?ry. 1r mun-D1113: Fly: 5 at"! 44444 nu min?diu- lli 233.52.}. uni-53533 - ?Hum .53: manna?Hg i??mumll an . - 33E. .u uni..?m II is? in? II slug-.11. Ems-Bali 3E: .. I: Haitian-dial. . FEE E51355w?1q? fill: .111; 9311.31: misting? [Inlay-u rim-E: Eu. a Irina, in: ?153.13 Es. Etna-EH HEP . winning ?313.151 ringing mii. Inn-Eli: all: um .35! all?! Eu. Elna!- Eau?g .521. 3.123.: ?1.11! HF FEE..- ?l?ci?r?E?m En:? li gala .3 9% :29 Big-hie in! H15. $335.1 Halli. 11.3453.? min-HIE _iu_.l_nni Elli! ti 1?511: 5i 3? i i i 5 .3-.. in. "Elam?H.115.? lamina 333 .inuun . JE Hag Ind??n ?mg?humr . 1h? Han-magpi? g?w? kiln-H3. midla- In. :55 ill; Jim u. Egg EH .ME. in; unwind. .35. 3.333.. lung?l E15. ?33.34. gig..an Eli quit! I .. atlas?.3. 3.5.5 Ham. quit-d! Hlilnr nights-El? . 4 . . null . .lni??u?ilil. . .Eg . Han. . I . Ir .. i E: EH $31.22 in.? f% 55! $33.53 E: I a a ?g .m?lil ?33 nun?.3. ring? ii "ll. fru?m in. ritual? i ii: 1! Bait-.5. Elwin Eu. . a; Banana. Ef?u- tiaii :lnsi; Sign: El: no; 5:13.199 . ?ling Eli-9313. r154. .Him. .33 .733 E4. HEP iw runs?ning-1i rig??Tana 113:3 angina: Egg Haul manila-E El 3.3.1! IE LEE grant! gala-cl. mi: 13.1" Iii?inl- HS - 3. I - Bill?! 7E1 in?nite.- I 5.5! i ?g HEM- Hill: ?Eu: .EIE .54. FIE bi.qu 53.. is: . ?r .2: . 135?. I an; I a. airs: . ii?? Emmi??u it?; 151% 15?1; Inna??.435 Ballad-FIE" 3.5.5. 3.. .5: .. gain-nail. 4.3: .. HE. run; Ila?1. u?u. Hit-1. I i ?lial: ?la?lri i413: it! it! . E3133 Rio-Fail! .Eu?un. i. Eula; .5. i ii?igi?gg . 1.3.5 I'll Il'ul Eli}. ?an? mEqu-E: Sauna153% Emma; .mnaait?u .anmam? i?lm uEmnq?l . Malayan E3 ?u?m . Enamcai Enum?ini 3 593% gig EFF. in 1 gin. Erna Fag main ?nish Bali . m. Innmii? FIRE: ?13: in}. E: Ea Egg-tn in: Etna?.913 . $5.55; if. ll?li. a. in, {rpm 5 5 "age 3 33% i 4% inlaid. mining?E. mini." Elli?9.3a 33.3: Elna. alt-9.1% Egan-En. ginseng if; Iguana-?lls .EE . .33; Emil; Tad-vain Jail: in. magi! gran?II Erin-watt: True?. nun-3. 5.3.. ii ?.Il Ilia-1 ?Eu. Ina?hil- a-E-nun ?at?ill. Eli?ii Eli! :rHEu Erin?it! r154. wanna?53? . l- - . mg Emi??nlii?inh?i: Eli ail?ulna .l gait-?an um 3:33:39". 153% 3% EEG ?lm?him Panza- n. 3. . 1.. . Illa-aim: {1.531}! i Ed. . $5113.31: Ha. . u. jig?II mania: Sign. Ell. 4.3.5 sing?.11 BEE-IE Ila?1. FEE: flinging will? El?n?um. Elm-Fania! EA. "Em. win??lial. 4.3.5. main. . - I .- alts: Eli]! 'nlu-EE .gn?a ESJ E: A. FEE Elfin: FEE ?rn? J. Er}; HE: .353 HEEL. 11.25 ?rnilfi?i??ii?gi frag :Lu?n- Egg: 1i %i .. .1. Eigi?gigi?g? 3' 31:; a; .I. hafnium-w agagag .55.: ESE I FEES it; in ?ing . Emu-"inn: autulnE-lnluE-?ignu?ll Hana .. Eartha magi-23H gun-.5 aEm?zm la?umm?nm aiming 35.5". Inns HERE Haas . Timid 4. mic-2&1 ii . E?ui mini?5.3 gliding! Elli-E is! .5Ii?slinl. 5155.. 35%. ii IE3: nix-.53..? Ill-.5: Equal?.333 ti E. - l? Eli?.35?: wiring mil 9:11:53:- Ua??lalni 2.5?i- vigil-Bi 395:5 nil-El lacing 1332. gar-?51 agar! Tau-3:! ?zul .333; 3.3.531 Eli Eula-i mining. Etta-3.. I-Eil?lin Ill Erin-n- aive?.53 33.5 plaid! Elisa?3.: .1-i?ln?t gar Ell-I. Iii. ails-.1 Elli?55 Ellis! lira-1.3.. . ?minis: Elisha? ml. Gain-q EEMEI East?Sal huh-3E 5% Burg ?is .52-: .15: .g?i it; IF mg a E53, UCD Amendment?i FERST AMENDMENT TO PROFESSIONAL SERVICES AGREEMENT @3418 FIRST AMENDMENT is made 10 University of Califomia? Davis campus agreement OF CALIFORNIA On behalf of its U?nivchity of California, pave-3? Medicaf Center (University) and QUEST MEDIA SUPPLIES, INC. (Contractor). 717116 ?ames t0, th? agr?ement agree as 'foilows: 1.?A?dditional Servic'e. Contractor shali provide Univ?rsity with Firewall con?guration and impiemenjtatiqn ?assisrtajncejfor the creation on}: LAN, to LAN Virtual Privaterthwork {Additignal Scrvic?), (mm. In consideratipn _?Semi_c?, University shall pay Qomraptora fee of 1.25 per to yjjaxjmum amount payable?yy?nivcfsity {0 pursuant to this agreement-shall not e'xCe'cd All other terms anti agreement shall remain thc?same. IN WITNESS the parties have.,executed this amendmenton? the dares set below. AQREHD: QUEST MEDIA AND Mme Swag-mam: Title: . mac; 3!??13 THE REGENTS-0F THE I UNEVERSITY OF CALIFORNIA Associate; Director Services "Uni-vegity of Caiifomia, Davis Dai?e: 3/04 \3 UCD Amendment #2 SECOND AMENDMENT TO PROFESSIONAL SERVICES AGREEMENT THIS SECOND MNDMENT is made to University of California, Davis campus agreement between THE REGENTS OF THE UNIVERSITY OF CALIFORNIA on behalf of its University of California, Davis? Medical Center (University) and QUEST MEDIA AND SUPPLIES, INC. (Contractor). The parties to the above?referenced agreement agree as follows: 1. Term. The term of the agreement shall be extended from April 24, 2012 through December 31, 2013. 2. Offsite Backups. Effective July I, 2013, Contractor shall provide two offsite backups as further detailed in Exhibit A, attached hereto and made a part hereof. To the extent Exhibit A conflicts with this amendment, this amendment shall govern. 3. Compensatioanament. For the period of July 1, 2013 through December 31, 2013, Contractor shall pay Contractor as follows: University shall pay Contractor $25,830.00 per month for hosted cloud services; server monitoring, management, and maintenance; and SQL monitoring and maintenance. 3.2 University shall pay Contractor $700.00 per month for offsite backups. 3.3 University shall reimburse Contractor for all reasonable installation costs related to the offsite backups. 3.4 University shall pay for Contractor?s technical support services on an as-needed basis and as pro-approved by University. The total amount payable by University to Contractor pursuant to this amendment is $166,180.00. The maximum amount payable by University to Contractor pursuant to this agreement shall not exceed $523,031.25. 4. Other Terms. All other terms and conditions of the agreement shall remain the same. IN WITNESS WHEREOF, the parties have executed this amendment on the dates set forth below. - AGREED: QUEST MEDIA THE REGENTS OF THE AND SUPPLIES, UNIVERSITY OF CALIFORNIA cams .H x/ By: ?4 Deborah Frags-Decker Print name: 6 Associate Director Contracting Services Title: University of California, Davis Date; (Ff-7" Date: E?l 2% 13 Exhtb?; umte? 5 5 tauemo museum UC Davis Health System Addendum 1a 21L AEDEMDUM 1.0 OFFSITE BACKUPS UC Davis Health System has requested an addendum, to Service Level Agreement dated June 12,2012, to re?ect the recent request for additional services. The following service{s) will be added to service: Quest Pro aided 0min Backups In Quest will provide Two (2) ofo?sire within California outside ofthc Quest BRC in ilrch't'eUan CA. - Queer will maintain the back and infrastructure and validate solution connectivity. 0 Quest will monitor backupjobs and rernedz'ate issues orf?tilures urine}; occur. 0 UC Davis Health System will provide fist ofossets to backup. I - Restoration ofa'ata will be billable per the technical support rates noted in the Service Level Agreement data June 1.2, 2:912. INVESTMENT - Quest Provided Offsite Additional Moutth Fee: $700.00 Installation Fee (NRC): Time and Material *These additional services included, in this Addendum 1.0, will conclude in commence with the original agreement and terms listed in Service Level Agreement dated June 12, EDIE. fee is in addition to the current month ly billing. Taxes - UC Davis Health System shall be liable for and shall pay any state 01' local tax, fee, charge, or surcharge payable for services that are subject to such imposition. eases ?Quest is a registered trademark onuest Media and :3 applies, Inc. Page i <9 Copyring 2013, Quest. All Rights Resened. mom UCD13-00233 Amendment #3 THIRD AMENDMENT TO PROFESSIONAL SERVICES AGREEMENT THIS THIRD AMENDMENT is. made to University of California, Daviseampus. agreement. between THE REGENTS OF THE UNIVERSITY OF CALIFORNIA on behalf of its University of California, Davis? Medical Center (University) and QUEST MEDIA AND SUPPLIES, INC. (Contractor). The parties to the dboVe-referencedagreement agree as follows: 1. Term. The term of the agreement-shall be extended from April 24, ?20 I2 through June 20 I7, Camp ensationJPa?xmenL University shall continue to pay Comm..th as peritjhe rates set'fotth-lhi the originai .agreement.rand- prior two amendments. The total "amountipayahl?e by Hniyersity-te Contractor for the perioti of E'anuary I, 2014 through June ?30, 2017 .is The maximum amount payable lay-University to Comractor? pursuant to this agreement shall net exceed $1,543,187.25. 3. Other Terms. Ali?other terms and conditions of-the agreementshall remain the same. IN WITNESS WHEREOF, the parties have executed this amendment on the dates set forth below, AGREED: QUEST MEDIA AND SUPPLIES, INC. Print name: ?ght-?5: 4? ow? Title: <21ng Date: 224'? {7 THE REGENTS OF THE UNIVERSITY OF CALIFORNIA By: Deborah Fraga?Decke Associate Director Contracting Services University of California, Davis Date: I 5333 UCD UCD13-00233IA15565 Amendment #4 FOURTH AMENDMENT TO PROFESSIONAL SERVICES AGREEMENT THIS FOURTH AMENDMENT is made to University of California, Davis campus agreement 3- 00233IA15565 between THE REGENTS OF THE UNIVERSITY OF CALIFORNIA on behalf of its University of California, Davis? Medical Center (University) and QUEST MEDIA AND SUPPLIES, INC. (Contractor). The parties to the above-referenced agreement agree as follows: 1. Services. Contractor shall provide University with two additional public IP addresses (Additional Service), as further described in Exhibit A, attached hereto and made a part hereof. 2. Term. The term of the agreement shall be extended from April 24, 2012 through June 30, 2017. 3. Compensatioanament. In consideration of Additional Service, University shall payr Contractor an amount not to exceed $167,400.00, based on the rates set forth in Exhibit A. The maximum amount payable by University to Contractor pursuant to this agreement shall not exceed $1,710,587.25. 4. Other Terms. All other terms and conditions of the agreement shall remain the same. IN WITNESS WHEREOF, the parties have executed this amendment on the dates set below. AGREED: QUEST MEDIA AND SUPPLIES, INC. By: Print name: gir??t+?6?k? Date: 0/ Ed {[111 THE REGENTS OF THE UNIVERSITY OF CALIFORNIA Associate Director Contracting Services University of California, Davis Date: Exhibit A UCD UC Davis Health System Addendumi? Contract Number 4392 Aoosaous 4t? Additional Public 1P3 UC Davis Health System (?Client?) has requested an addendum, to Service Level Agreement dated June 12. El] l2, to re?ect the recent request for additional sewices. Quest will provide the additional Services (as de?ned below} to Client 1. Additional Service Summary Quest will provide Services (as de?ned in Section_2_ below) to Client. The components relating to the additional Services are as follows: 1.1. Additional Public H?s 0 Quest will provide on additional Mo Public lP addresses for UC Davis Health Symon-1% use. .2. Services Services. Quest and Client have identi?ed the following additional list of components to be installed, con?gured, monitored, endmr managed. . Overage Owner of Front} I jomponants Qt}n Slimm? Iree Hardwarea'So?ware Public 11? . Quest Managed . . i 2 I $12 {ll} Serums - AdditionslPoblic Setop . . ?Time ondMaterfal Additionnl Fee: $24.00 installation Foo Tidal? All fees are in US Dollars. *TheSe additional services included, in this Addendum 4.0, will conclude in concurrence with the original agreement and terms listed in Service Level Agreement dated June 12, 2012. fee is in addition to the current billing; he liable for and shall on;r any state or local tax, fee, charge. or surcharge pnyolilc for set-vines that are subject to such imposition. diln'ild *Quest is a ol?ercst Media and Supplies, Inc. Page i Copy-in!? 20H, (1mm. All Rights ?csmotl. CDNFIDENTML . - ?'th mmcennc UC Davis Health System Addendum it; Contract Number 4392 Accepted and Agreed to By: Ur: DAVIS HEALTH SYSTEM QUEST Signature: Signature: Name: Name: Title: Title: Date: Date: The Primary Ccntacls far Quasi: Stephen Monk Technical Consultant (9 33 8-?0 70 .chm Hall Service {9 6) 3313?1070 Once signed, fax me: signed document to Managed Service Contacts at (9115) 3%?5924. Upon receipt by Quest, its au?mrizcd shall execute the Addendum and return a Fully executed Addendum, including all exhibits, to UC Davis Health System for their ?les. I 435!? 'Qucn is El regimen-rd {mdcmark 0! Quest Media and Slipplici, Inc. 2 Copyright 2014, QucsL All Ei?ib COMP I DENTIA MANAGEMENT FOR BUSINESS Customer; Calitornia Cancer Registry Andrew Stitlil'l' Date: Quest Contact: Stephen Monk Phone Number: 916.338.7070 Guest Services Pricing Based on 36 Month Agreement. Pricing is Valid for 30 dove Service Description Unit Quantity Cost Total Comments i Assumptions Service items Quest retains ownership of hardware andior software and support contracts related to the technology provided within the services listed. Quest provided ESX Servers {Disco Series! VMWare Quest pm?de Esx 123 as 4 Physical Processors; vSphere, vCenter [Per esx per ESX Host 1 $1,100.00 $1300.00 Wu? ?mime? Manage? by Sewers Quest. Server] Client will provide Server OS and AV licensing for Guests Quest retains ownership of hardware andfor software and support contracts related to the technology provided within the services listed. Quest Provided SAN . services QUBSI Prawaeu SAN Storage Shared? 1 TE Of Space per TB 5 $350130 $135000 Virtual Piatform Monitored and Managed by Quest. Quest retains ownership of hardware andfor Quest Puma? software and support contracts related to the Intemet Quest Provided Internet: per per 40 $20.00 $800.00 technology provided within the services listed. Customer can use consulting dollars to engage Quest resources on an ad hoc basis. Consuiting Quest Provided . . time must be scheduled at least 24 hours in Cumming Hams Quest Provided Ad Hoc Consulting Funds per month 1 31.00000 01.00000 advance, Hour? rates will be billed in quarter hour increments and at the technical support rates listed below. Extended Extended instalt Total $4,650.00 Time and Materials . Hourly:r Service Description Unit Qty Total Montth Comments iAssurnptions Rate TECHNOLOGY MANAGEMENT FOR BUSINESS Network or Server 0 NOB Engineering per hour option $125.00 ueet wi ave eta available for server Tech rt Quest N00 remote . . . . . . {ram 3) mm ?mm Engineering engineering if desired. Vow Security (33:23:! on-demand troubleshooting This is an on-demend service and available 2410'. Apblica?ons [billed in 15 minute increments) Engineering per hour when $15000 {remote} Network or Server Engineering Stine option $150.00 . scheduled 0mm Quest will have Engineering staff available for project engineering if per hour [dispatch scheamed} . Tashmca' 8?an . D'sp?mh En ham" scheduled more than 40 hours in advance. VolP. security who" on .on'demand . 9 This is a scheduled service for time and materials engineering. Applications . demand Reqmres 43. hours advancied SFhEdulm Engineering Sues per hour Option $1?5.00 [4 hour minimum for onsrte drepatch} Idispatoh, scheduled) Network or Server Engineean per hour option $250.00 . Ema it Quest will have HOG staff available for server troubleshooting?eeue [disgarch unscheduIed) . Tecm'cal SUPPDH . rgency n5 resolution if desired. Vow Security option on on-demand troubleshooting Dispatch Engineering This is an oMemm service and available Apblica?ons demand Emergency dispatch, less than 48 hours notice Engineering SW5 per hour option $35.00 {4 hour minimum for onsite dispatch} idiegatchI unscheduled) Signature Date Term for Services Signature on this document will add this as an adde ndum to the service agreement and adhere to the terms and conditions therein