Sr Security Consultant

Under this project IBM will provide:

ISDC Services
IBMs estimated charges and schedule are based on the performance of the activities listed in the

IBMs performance is dependent upon Clients fulfillment of Clients responsibilities at no charge to IBM. Any delay in the performance of Clients responsibilities may result in additional charges and/or delay of the completion of the Services and will be handled in accordance with the Project Change Control Procedure.
1.4.1 Clients Project Manager Prior to the start of this project the Client will designate a person called Clients Project Manager

who will be the focal point for IBM communications relative to this project and will have the authority to act on behalf of the Client in all matters regarding this project.

The clients Project Managers responsibilities include the following:

a. manage Clients personnel and responsibilities for this project;
b. serve as the interface between IBM and all Client departments participating in the project.
c. administer the Project Change Control Procedure with the IBM Project Manager;
d. participate in project status meetings;
e. obtain and provide information data and decisions within three business days of IBMs request unless Client and IBM agree in writing to a different response time;
f. resolve deviations from the estimated schedule which may be caused by Client;
g. help resolve project issues and escalate issues within the Clients organization as necessary;
h. review with the IBM Project Manager any of the Clients invoice or billing requirements. Such requirements that deviate from IBM's standard invoice format or billing procedures may have an effect on price and will be managed through the Project Change Control Procedure in Appendix A1; and
i. Create with IBMs assistance the project plan for the performance of this SOW which will include the activities tasks assignments milestones and estimates.

1.4.2 Client Other Responsibilities
Client will:
a. make appropriate personnel available to assist IBM in the performance of its responsibilities;
b. provide safe access suitable office space supplies furniture high speed connectivity to the Internet and other facilities needed by IBM personnel while working at Clients location.
c. supply all prerequisite hardware and software to be used during the performance of this SOW. This does not include any hardware or software normally used by IBM consultants in the performance of their daytoday responsibilities with IBM;
d. provide information and materials IBM requires to provide the Services. IBM will not be
responsible for any loss damage delay or deficiencies in the Services arising from inaccurate
incomplete or otherwise deficient information or materials supplied by Client or on behalf of Client;
e. if making available any facilities software hardware or other resources in connection with IBMs performance of Services obtain at no cost to IBM any licenses or approvals related to these resources that may be necessary for IBM to perform the Services. IBM will be relieved of its obligations that are adversely affected by the Clients failure to promptly obtain such licenses or approvals. Client agrees to reimburse IBM for any reasonable expenses that IBM may incur from Clients failure to obtain these licenses or approvals.
f. ensure that current maintenance license and other applicable agreements are in place with third parties whose work may affect IBMs ability to provide the Services. Unless specifically agreed to otherwise in writing the Client is responsible for the management and performance of the third parties and for any thirdparty hardware software or communications equipment used in connection with the Services;
g. be responsible for the identification of interpretation of and compliance with any applicable laws regulations and statutes that affect Clients existing systems applications programs or data to which IBM will have access during the Services including applicable data privacy export import laws and regulations and product safety and regulatory compliance for nonIBM products including those recommended by IBM. The client is solely responsible for obtaining the advice from legal counsel as to compliance with such laws and regulations
h. to the extent such permission is required by law Northwestern Mutual and IBM each agree to allow the other to store and use the others business contact information (employee names and their business addresses business phone numbers and business email addresses) anywhere the other does business when such business contact information is provided in a way that would lead a reasonable person to conclude that the person providing the business contact information understood that such business contact information would be used to contact them in the future. Such business contact information will be processed and used by each of us solely in connection with our business relationship and may be provided to (a) third parties who may

i. obtain any necessary consents and take any other actions required by applicable laws
including but not limited to data privacy laws prior to disclosing any of its employee information or other personal information or data to IBM. Client also agrees that with respect to data that is transferred or hosted Client is responsible for ensuring that all such data adheres to the laws and regulations governing such data;
be responsible for any data and the content of any database the selection and
implementation of procedures and controls regarding its access and use backup and recovery and security of the stored data. This security will also include any procedures necessary to safeguard the integrity and security of software and data used in the Services from access by unauthorized personnel;