Fort Walton Beach Resolution — 2026-09 Accepting Funding FL Department of Managed Services-Cybersecurity Software — reading text

Information Technology Resources as permitted by Grantee. Any specific limitations on such Access shall be documented. Upon termination of each instance of incident response support, regardless of the reason for such termination, Grantee shall assist FL[ DS] with any close- out or post -incident documentation upon request. B. Covered Data and Personally Identifiable Information. FL[ DS] will not disclose Covered Data or other data made Accessible during incident response support to any third party unless required by law or as authorized by Grantee. In the event such data is required by law to be disclosed, FL[ DS] shall make best efforts to notify Grantee prior to such disclosure. IV. FL[ DS] Role and Responsibilities FL[ DS] shall provide Grantee with the option to utilize the Software Entitlements to enhance the Grantee' s cybersecurity and protect the Grantee' s infrastructure from threats. FL[ DS] will Access a View of the Telemetry Data and Solution Data. FL[ DS] will only use Telemetry and Solutions Data for the purpose of developing and implementing the Program; identifying and responding to risks and incidents; and in furtherance of meeting FL[ DS]' and Grantee' s statutory and regulatory obligations. FL[ DS] will not disclose the Telemetry Data and Solutions Data to any third party unless required by law or as otherwise authorized by Grantee. FL[ DS] will provide incident response services and resources as allowed and agreed to by FL[ DS] and Grantee in responding to risks and incident. V. Grantee Roles and Responsibilities Grantee shall cooperate with and provide all assistance necessary to FL[ DS]' incident response support. VI. Indemnification For the avoidance of doubt, the Grantee agrees to indemnify FL[ DS] and the Department for any claims related to this rider pursuant to the terms provided in Section Q., Unauthorized Use, of the Grant Agreement. Page 34 of 37  Exhibit A Cvbersecurity Incident Response Rider Conflict In the event of a conflict between this IR Rider, the DSA, and any other rider, the terms of this IR Rider shall control. II. Liability and Termination of Incident Response Support Except as described in the DSA or other riders, incident response services and resources of FL[ DS] or Grantee -authorized third parties shall be provided by FL[ DS] without warranty by, and without liability to, FL[ DS] or such Grantee -authorized third parties. Upon request, FL[ DS] or Grantee -authorized third parties shall provide reasonable assistance to return Grantee Information Technology Resources to the operational status prior to the involvement of FL[ DS] incident response support. REMAINDER OF PAGE INTENTIONALLY LEFT BLANK Page 35 of 37  Exhibit B Solution Rider Definitions In addition to the defined terms in the DSA, capitalized terms used herein have the meanings provided below: A. Protected Grantee Data — Data, not including Telemetry Data, maintained, and generated by Grantee, which shall not be Accessed or Accessible by, or sent to, the Licensed Software Solution. B. Customer Account —The Licensed Software Solution account directly utilized by Grantee. C. Local Government Cybersecurity Grant Program (" the Program") —The Program established by the 2025- 2026 General Appropriations Act to provide nonrecurring assistance to local governments for the development and enhancement of cybersecurity risk management programs. D. Licensed Software Solutions — Proprietary software provided to the Grantee under the Agreement to satisfy provision of the solution( s) awarded to the Grantee, as identified in Attachment A of the Grant Agreement. E. Managing Organization — The entity managing the use of the Licensed Software Solution and its implementation. As used in this Rider, the Managing Organization is FL[ DS]. F. Protected Grantee Data — Data, not including Telemetry Data, maintained, and generated by Grantee, which shall not be Accessed or Accessible by, or sent to, the Licensed Software Solution. G. Solution Console — The global administrative account(s) directly managed and licensed by FL[ DS] to provide the Grantee with the Software Entitlement. H. Solution Data — Data, reports, or other information generated by the Licensed Software Solution. May be derived from but shall not include Telemetry Data. I. Telemetry Data — The data generated by Grantee through automated communication processes from multiple data sources and processed by the Licensed Software Solution. J. View —The permissions granted for FL[ DS] to see Telemetry Data provided to the Managing Organization' s Solution Console by the Customer Account. A View does not permit FL[ DS] Access to Protected Grantee Data. II. Statement of Work A. Purpose/ Scope: FL[ DS] and Grantee enter into this Rider to establish the terms and conditions for Grantee Access to the Licensed Software Solution provided by FL[ DS]; to establish the maintenance, use, and disclosure of the Telemetry Data generated by Grantee and uploaded to the Solution Console; and to provide terms and conditions for the use of the Licensed Software Solution. B. FADS] Role and Responsibilities: FL[ DS] is responsible for providing Grantee with the option to utilize the Licensed Software Solution. Page 36 of 37  Exhibit B Solution Rider FL[ DS] shall be permitted to Access a View of the Telemetry Data provided within the Solution Console via permissions to the Customer Account. FL[ DS] will only use Telemetry Data for the express purpose of developing and implementing the Program and in furtherance of FL[ DS]' and Grantee' s statutory and regulatory obligations. FL[ DS] will not disclose the Telemetry Data to any third party unless required by law or as otherwise authorized by Grantee. A. Grantee' s Role and Responsibilities: Grantee is responsible for: a. Grantee Access to and use of the Licensed Software Solution in compliance with all terms and conditions related thereto, including the Agreement terms and the vendor terms and conditions to be provided to the Grantee by FL[ DS] without need for an amendment hereto by the Parties and which, after provision thereof, will be deemed incorporated herein and a material component hereof; b. Activating and deactivating the Access, credentials, and privileges of its authorized users; c. Ensuring no Protected Grantee Data is submitted to the Licensed Software Solution; d. Entering into any additional agreement with FL[ DS], the Licensed Software Solution provider, or other third -parties as may be required by law regarding Protected Grantee Data, as applicable; and e. Managing access controls to allow View by FL[ DS] and Access by the Licensed Software Solution. f. Telemetry Data, even as it may be housed, maintained, or processed by the Licensed Software Solution, is and shall remain the property of Grantee. B. Indemnification: For the avoidance of doubt, the Grantee agrees to indemnify FL[ DS] and the Department for any costs related to Grantee's use of the Licensed Software Solution pursuant to the terms provided in Section Q., Unauthorized Use, of the Grant Agreement. C. Conflict: In the event of a conflict between this Rider and the DSA, the terms of this Rider shall control. REMAINDER OF PAGE INTENTIONALLY LEFT BLANK Page 37 of 37