Attachments.pdf

Assumptions Description

Two effective environment tiers Every service is modelled across a lower-cost "Development & Test" tier and a higher-performance "Acceptance & Production" tier, each with its own representative configuration (size, redundancy, throughput, etc.).

Environment sub-split (25/20/15/40)

Within the two tiers, the notional split across four environments is Dev 25%, Test 20%, Acceptance 15%, Productio 40% of total instance count.

Volume rounding Based on existing application footprint on incumbant CSP ( 21 applications ) and projected target number of applications (120), a volume multiplication factor of 5.71 has been taken into consideration. This is notional and actual volume would depend on actual discovery, target design patterns etc.

Catalog coverage Current list of service names are not exhaustive list of IaaS and PaaS services - will adapt depending upon use cases, design patterns, technology modernization, application refactoring etc.

Professional services and Enterprise support

Consulting effort is assumed to scale proportionally with overall environment footprint and an enterprise support plan (24/7, Sev-1, named TAM) is a single, indivisible, organization-wide commitment

Service name Category IaaS/PaaS Unit of Measure Configuration Spec Summary (Attribute: Economic/Standard | Perf/HiRes) Development & Test environment Resource Count

Acceptance and Production

Resource Count Overall Count (DTAP)

Cloud Object, Block & File Storage Storage IaaS Storage Accounts (count) DevTest Tier (Economic/Standard) (n=11000):

- Capacity per account (GB): Eco: 100 / Std: 500

- Redundancy copies: Eco: 1 / Std: 3

- Access tier: Eco: Cool / Std: Hot

Acc/Prod Tier (Perf/HiRes) (n=13000):

- Capacity per account (GB): Perf: 2000 / HiRes: 2000

- Redundancy copies: Perf: 3 / HiRes: 6

- Access tier: Perf: Hot (Premium SSD) / HiRes: Hot (Geo-Zone-Redundant)

11.000 13.000 24.000

Infrastructure-as-a-Service (IaaS) Compute Compute IaaS VM Instances (count) DevTest Tier (Economic/Standard) (n=1000):

- vCPU count: Eco: 2 / Std: 4

- RAM (GB): Eco: 4 / Std: 16

- Disk size (GB): Eco: 64 / Std: 128

Acc/Prod Tier (Perf/HiRes) (n=1200):

- vCPU count: Perf: 8 / HiRes: 16

- RAM (GB): Perf: 32 / HiRes: 64

- Disk size (GB): Perf: 256 / HiRes: 512

1.000 1.200 2.200

Data Transfer & Network Egress Networking IaaS Data Transfer Allocations (count) DevTest Tier (Economic/Standard) (n=600):

- Egress volume (GB/mo): Eco: 100 / Std: 500

- Destination scope: Eco: Intra-region / Std: Inter-region

Acc/Prod Tier (Perf/HiRes) (n=700):

- Egress volume (GB/mo): Perf: 2000 / HiRes: 5000

- Destination scope: Perf: Internet (multi-region) / HiRes: Global multi-region

600 700 1.300

Managed Relational Database (SQL) Database PaaS Database Instances (count) DevTest Tier (Economic/Standard) (n=200):

- vCores: Eco: 1 / Std: 4

- Storage (GB): Eco: 32 / Std: 128

- Backup retention (days): Eco: 7 / Std: 35

Acc/Prod Tier (Perf/HiRes) (n=200):

- vCores: Perf: 8 / HiRes: 16

- Storage (GB): Perf: 512 / HiRes: 1024

- Backup retention (days): Perf: 35 / HiRes: 35

200 200 400

Layer 4 Network Load Balancer Networking IaaS Load Balancer Instances (count) DevTest Tier (Economic/Standard) (n=150):

- Rules configured: Eco: 2 / Std: 8

- Backend pool size: Eco: 2 / Std: 10

Acc/Prod Tier (Perf/HiRes) (n=200):

- Rules configured: Perf: 20 / HiRes: 20

- Backend pool size: Perf: 30 / HiRes: 50

150 200 350

Layer 7 Load Balancer Networking PaaS Gateway Instances (count) DevTest Tier (Economic/Standard) (n=150):

- Listeners configured: Eco: 1 / Std: 4

- Backend pool size: Eco: 2 / Std: 10

- WAF enabled: Eco: No / Std: No

Acc/Prod Tier (Perf/HiRes) (n=150):

- Listeners configured: Perf: 10 / HiRes: 10

- Backend pool size: Perf: 25 / HiRes: 50

- WAF enabled: Perf: Yes / HiRes: Yes

150 150 300

Function-as-a-Service (FaaS) / Serverless Compute PaaS Function Apps (count) DevTest Tier (Economic/Standard) (n=60):

- Memory allocation (GB): Eco: 0.5 / Std: 1.5

- Max concurrent executions: Eco: 50 / Std: 200

Acc/Prod Tier (Perf/HiRes) (n=70):

- Memory allocation (GB): Perf: 3.5 / HiRes: 3.5

- Max concurrent executions: Perf: 500 / HiRes: 1000

60 70 130

Managed NoSQL Database Database PaaS Database Accounts (count) DevTest Tier (Economic/Standard) (n=50):

- Throughput (RU/s, provisioned): Eco: 400 / Std: 4000

- Storage (GB): Eco: 10 / Std: 100

- Regions: Eco: 1 / Std: 1

Acc/Prod Tier (Perf/HiRes) (n=60):

- Throughput (RU/s, provisioned): Perf: 20000 / HiRes: 20000

- Storage (GB): Perf: 500 / HiRes: 500

- Regions: Perf: 2 / HiRes: 4

50 60 110

Enterprise Fully Managed SQL Server Database PaaS Managed Instances (count) DevTest Tier (Economic/Standard) (n=40):

- vCores: Eco: 4 / Std: 8

- Storage (GB): Eco: 256 / Std: 512

Acc/Prod Tier (Perf/HiRes) (n=50):

- vCores: Perf: 16 / HiRes: 32

- Storage (GB): Perf: 2048 / HiRes: 4096

40 50 90

Managed Kubernetes Service (K8s) Compute PaaS Cluster Instances (count) DevTest Tier (Economic/Standard) (n=25):

- Node count: Eco: 2 / Std: 5

- vCPU per node: Eco: 2 / Std: 4

- RAM per node (GB): Eco: 8 / Std: 16

Acc/Prod Tier (Perf/HiRes) (n=30):

- Node count: Perf: 10 / HiRes: 20

- vCPU per node: Perf: 8 / HiRes: 16

- RAM per node (GB): Perf: 32 / HiRes: 64

25 30 55

Managed PostgreSQL Database Database PaaS Server Instances (count) DevTest Tier (Economic/Standard) (n=15):

- vCores: Eco: 1 / Std: 4

- Storage (GB): Eco: 32 / Std: 128

Acc/Prod Tier (Perf/HiRes) (n=20):

- vCores: Perf: 8 / HiRes: 16

- Storage (GB): Perf: 512 / HiRes: 1024

15 20 35

Managed Cloud Network Firewall Security PaaS Firewall Instances (count) DevTest Tier (Economic/Standard) (n=8):

- Throughput (Gbps): Eco: 1 / Std: 5

- Rule collections: Eco: 10 / Std: 50

Acc/Prod Tier (Perf/HiRes) (n=9):

- Throughput (Gbps): Perf: 30 / HiRes: 30

- Rule collections: Perf: 200 / HiRes: 200

8 9 17

Memory-Optimised Compute Compute IaaS VM Instances (count) Memory-Optimised Tier: 20 VM instances, 8 vCPU / 64 GB RAM equivalent each (large-memory ratio ~8:1), always-on production workload. For data/analytics workloads. Equivalent to 1,440,000 vCPU-hours/yr.

9 11 20

Dedicated HSM / Key Management (FIPS 140-

2 L3, BYOK/HYOK)

Security IaaS HSM Instances (count) 2 dedicated, single-tenant FIPS 140-2 Level 3 HSM devices, always-on (17,520 device-hours/yr), plus 120M key operations/yr folded into the per-instance rate. Supports BYOK/HYOK (Bring/Hold Your Own Key).

1 1 2

Enterprise Support Plan (24/7, Sev-1, TAM) Management Support Support Plans (count) 1 top-tier enterprise support plan: 24/7 coverage, Severity-1 response SLA, named Technical Account Manager (TAM). Flat minimum-commitment estimate; actual pricing is typically the greater of this minimum or ~3-10% of total contracted infrastructure spend (tier decreasing with spend).

0 1 1

Professional Services Allowance (Consulting Days)

Management Services Consulting Days (count/year) 200 consulting days/year allowance against standard CSP professional-services rate card (architecture, migration, optimisation engagements).

90 110 200

Onboarding / Transition-In Professional Services

Management Services Consulting Days (one-time, non-recurring)

One-time transition-in bucket covering landing-zone setup, D32 compliance enablement, and governance/automation baselining – supports outcomes P8.05, O11.03, C10.01. Distinct from the recurring annual Professional Services Allowance; exercised once at contract start.

15 25 40

Offboarding / Transition-Out Support Management Services Consulting Days (one-time, exercisable at exit)

One-time transition-out bucket, exercisable at contract exit or termination, covering execution support for the Contract Exit Plan (O11.03) and validation of data/workload extraction. Distinct from the annual exit-plan testing already required under O11.03/AQL-32 . This is the actual exit-execution effort, not the rehearsal. Exit-time activity is production-only, hence no dev/test allocation.

0 20 20

TOTAL 13.413 15.857 29.270

ENCLOSURE B

Consolidated cloud resource volume - NSF and NPCL usage presenting a high level view at IaaS/PaaS level. The data of volume commit has been derived out of existing consumption of Azure cloud platform for IaaS and PaaS. NSF represents Dev and Test ( DT ) based volume including platform engineering resources as well consumed by NSF central squad. NPCL represents Acceptance and Production ( AP ) based volume.

Note - The volume commit data can be considered as an AS- IS state of resource volume based on incumbent cloud consumption today ( Azure )

IaaS/PaaS resources DT - NSF AP - NPCL Cloud Object, Block & File Storage 7668 844 IaaS Compute 3048 294 Data Transfer & Network Egress 14 3 Managed Relational Database (SQL) 73 3 Layer 4 Network Load Balancer 64 18 Layer 7 Load Balancer 41 39 Function-as-a-Service (FaaS) / Serverless 75 31 Managed NoSQL Database 2 0 Enterprise Fully Managed SQL Server 191 114 Managed Kubernetes Service (K8s) 54 5 Managed PostgreSQL Database 9 2

Total 11239 1353

NPO-CO-424312-CCSP

NCIA Contract General and Special Terms and Conditions Full text at NCIA website (click here)

Introduction

1. The list of terms and conditions below are taken from the NCIA Contract General Terms and Conditions, and NCIA Contract Special Terms and Conditions.

The full text is available at the link above.

2. Terms and conditions that are not applicable to this procurement are marked as "N/A" in the "Applicable" column

3. For all terms and conditions that are appliable, they are further noted as either "Essential" or "Subject to Industry Dialogue".

4. At the NPO stage, nominated bidders are invited to provide feedback on the terms and conditions listed below.

5. The Request for Proposal will invite bidders to include their standard commercial terms to supplement these terms and conditions.

Clause Title Applicable?

(Standard terms per nature of cloud contract)

Essential?

(Per NATO's duties and rights as International Organisation for cloud contract)

Subject to Industry Dialogue?

(Per cloud contract, NCIA reserve the right to modify it if required)

ONLY if YES at column E, Accepted As Is by Bidder?

Bidder's Proposed wording/changes per Column F Rationale for Column G

GTC A CORE GENERAL TERMS AND CONDITIONS

GTC A.1 GENERAL CONTRACTING TERMS AND CONDITIONS

GTC A.1.1 APPLICATION OF TERMS AND CONDITIONS Yes Yes N/A Select one GTC A.1.2 ORDER OF PRECEDENCE AND INTERPRETATION Yes Yes N/A Select one GTC A.1.3 DEFINITIONS OF TERMS AND ACRONYMS Yes Yes N/A Select one GTC A.1.4 NCIA E-PROCUREMENT PLATFORM Yes Yes N/A Select one GTC A.1.5 CONTRACTUAL AUTHORITY Yes Yes N/A Select one GTC A.1.6 CONTRACT SIGNATURE DATE VS. EFFECTIVE START DATE OF CONTRACT Yes Yes N/A Select one GTC A.1.7 TYPE OF CONTRACT Yes Yes N/A Select one GTC A.1.8 SUBCONTRACTS Yes Yes N/A Select one

GTC A.1.9 PURCHASER FURNISHED PROPERTY N/A

GTC A.1.10 CONTRACT ADMINISTRATION Yes Yes N/A Select one GTC A.1.11 PROJECT AND TECHNICAL DIRECTION Yes Yes N/A Select one

GTC A.1.12 WARRANTY N/A

GTC A.1.13 DELIVERY DATES AND MILESTONE DATES Yes Yes N/A Select one GTC A.1.14 PURCHASER'S USE OF THIRD PARTIES Yes Yes N/A Select one GTC A.1.15 CONFLICT OF INTEREST Yes Yes N/A Select one GTC A.1.16 COMMUNICATION AND LANGUAGE Yes Yes N/A Select one GTC A.1.17 INSURANCE Yes Yes N/A Select one GTC A.1.18 SEVERABILITY Yes Yes N/A Select one GTC A.1.19 SURVIVAL Yes Yes N/A Select one GTC A.1.20 INDEPENDENT CONTRACTORS Yes Yes N/A Select one GTC A.1.21 WAIVER Yes Yes N/A Select one GTC A.1.22 CONTRACT CLOSEOUT Yes Yes N/A Select one GTC A.1.23 BANKRUPTCY Yes Yes N/A Select one

GTC A.2 ACCEPTANCE AND PAYMENT TERMS AND CONDITIONS

GTC A.2.1 ACCEPTANCE OF CONTRACT TERMS AND CONDITIONS Yes Yes N/A Select one

GTC A.2.2 OWNERSHIP AND TITLE N/A

GTC A.2.3 INSPECTION AND ACCEPTANCE Yes Yes N/A Select one GTC A.2.4 INVOICE AND PAYMENT Yes Yes N/A Select one

GTC A.3 REGULATORY TERMS AND CONDITIONS

GTC A.3.1 APPLICABLE LAW Yes Yes N/A Select one GTC A.3.2 GENERAL REPRESENTATIONS AND WARRANTIES - CONFORMANCE TO NATIONAL LAWS AND REGULATIONS Yes Yes N/A Select one GTC A.3.3 NCIA SUPPLIER CODE OF BUSINESS ETHICS AND CONDUCT Yes Yes N/A Select one GTC A.3.4 TAXES AND DUTIES Yes Yes N/A Select one GTC A.3.5 PARTICIPATING NATION Yes Yes N/A Select one GTC A.3.6 SECURITY OF UNCLASSIFIED AND NATO UNCLASSIFIED MATERIALS AND INFORMATION Yes Yes N/A Select one GTC A.3.7 CONFIDENTIALITY AND NON-DISCLOSURE Yes Yes N/A Select one GTC A.3.8 AUDIT AND ACCESS TO RECORDS Yes Yes N/A Select one GTC A.3.9 EXPORT CONTROL COMPLIANCE Yes Yes N/A Select one

GTC A.3.10 PRIVILEGES AND IMMUNITIES Yes Yes N/A Select one

GTC A.4 CHANGE AND BREACH OF CONTRACT TERMS AND CONDITIONS

GTC A.4.1 OPTIONS N/A

GTC A.4.2 PRICING OF CHANGES, MODIFICATION, AND CLAIMS N/A

GTC A.4.3 CHANGES Yes N/A Yes Select one GTC A.4.4 CLAIMS Yes N/A Yes Select one GTC A.4.5 RELEASE OF CLAIMS Yes N/A Yes Select one GTC A.4.6 MODIFICATION OF THESE GENERAL TERMS AND CONDITIONS Yes Yes N/A Select one GTC A.4.7 PURCHASER DELAY OF CONTRACTOR PERFORMANCE Yes Yes N/A Select one GTC A.4.8 CONTRACTOR NOTICE OF DELAY Yes N/A Yes Select one GTC A.4.9 DELAY AND LIQUIDATED DAMAGES Yes N/A Yes Select one

GTC A.4.10 INDEMNITY Yes N/A Yes Select one GTC A.4.11 CUMULATIVE REMEDIES Yes N/A Yes Select one GTC A.4.12 FORCE MAJEURE Yes Yes N/A Select one

GTC A.4.13 STOP WORK ORDER N/A

GTC A.4.14 TERMINATION FOR CAUSE - FOR DEFAULT Yes N/A Yes Select one GTC A.4.15 TERMINATION FOR THE CONVENIENCE OF THE PURCHASER Yes N/A Yes Select one GTC A.4.16 TERMINATION BY MUTUAL AGREEMENT OR CONSENT Yes N/A Yes Select one GTC A.4.17 CONSEQUENCES OF TERMINATION Yes N/A Yes Select one GTC A.4.18 STEP-IN RIGHT Yes Yes N/A Select one GTC A.4.19 ASSIGNMENT OF CONTRACT Yes Yes N/A Select one GTC A.4.20 TRANSFER AND SUBLETTING Yes Yes N/A Select one GTC A.4.21 DISPUTES Yes Yes N/A Select one GTC A.4.22 ARBITRATION Yes Yes N/A Select one GTC A.4.23 MERGER, ACQUISITION, NOVATION, OR CHANGE OF NAME AGREEMENT Yes Yes N/A Select one

GTC A.5 DATA RIGHTS AND SECURITY TERMS AND CONDITIONS

GTC A.5.1 HARMFUL SOFTWARE AND TAMPERING RISK Yes Yes N/A Select one GTC A.5.2 TECHNOLOGY REFRESH AND EVOLUTION Yes Yes N/A Select one GTC A.5.3 INTELLECTUAL PROPERTY RIGHTS Yes N/A Yes Select one GTC A.5.4 PATENT AND COPYRIGHT INDEMNITY Yes N/A Yes Select one GTC A.5.5 BASIC SAFEGUARDING OF CONTRACTOR COMMUNICATION AND INFORMATION SYSTEMS Yes Yes N/A Select one GTC A.5.6 CYBER INCIDENT REPORTING Yes Yes N/A Select one

GTC A.6 NATO AND NCIA PERSONAL DATA PROTECTION TERMS AND CONDITIONS

GTC A.6.1 PERSONAL DATA PROTECTION Yes Yes N/A Select one GTC A.6.2 PURCHASER DATA Yes Yes N/A Select one GTC A.6.3 TERMINATION OF PURCHASER DATA EXCHANGE Yes Yes N/A Select one GTC A.6.4 SECURITY OF INFORMATION TECHNOLOGY Yes Yes N/A Select one

ENCLOSURE C

https://www.ncia.nato.int/business/procurement/documents-resources/terms-conditions.aspx

GTC A.6.5 CYBER INCIDENT Yes Yes N/A Select one GTC A.6.6 DISASTER RECOVERY AND BUSINESS CONTINUITY Yes Yes N/A Select one GTC A.6.7 DATA IMMUNITY AND DISCLOSURE REQUESTS Yes Yes N/A Select one GTC A.6.8 RESPONSIBILITY FOR THE HOSTING ACTIVITY Yes Yes N/A Select one

GTC B GENERAL TERMS AND CONDITIONS ON SERVICE (NON-SOFTWARE) Select one GTC B.1 GENERAL Yes N/A Yes Select one GTC B.2 DOCUMENTATION AND REPORTS Yes N/A Yes Select one GTC B.3 CONTRACTOR’S PERSONNEL Yes N/A Yes Select one GTC B.4 CONTRACTOR'S PERSONNEL WORKING PURCHASER'S FACILITIES Yes N/A Yes Select one

GTC B.5 CONTRACTOR-OWNED ASSETS N/A

GTC B.6 INSPECTION, TESTING AND ACCEPTANCE OF SERVICES AND DELIVERABLES Yes N/A Yes Select one GTC B.7 INSPECTION AND ACCEPTANCE OF DOCUMENTATION Yes N/A Yes Select one

GTC B.8 WARRANTY N/A

GTC B.9 OWNERSHIP AND TITLE N/A

GTC B.10 SERVICE LEVELS N/A

GTC C.1 to C.8 GENERAL TERMS AND CONDITIONS ON EQUIPMENT N/A

GTC D.1 to D.12 GENERAL TERMS AND CONDITIONS FOR COMMERCIAL-OFF-THE-SHELF (COTS) SOFTWARE OR LICENSES N/A GTC E.1 to E.12 GENERAL TERMS AND CONDITIONS FOR SOFTWARE DEVELOPED FOR NATO PURPOSES N/A

GTC F GENERAL TERMS AND CONDITIONS ON CLOUD SERVICES

GTC F.1 GENERAL Yes Yes N/A Select one GTC F.2 RIGHT TO ACCESS AND USE THE CLOUD SERVICE Yes N/A Yes Select one GTC F.3 CHANGES Yes Yes N/A Select one GTC F.4 IMPLEMENTATION, SUPPORT AND SERVICE LEVELS Yes Yes N/A Select one GTC F.5 LOCATION OF THE HOSTING FACILITY Yes Yes N/A Select one GTC F.6 DURATION Yes Yes N/A Select one GTC F.7 SUSPENSION OF THE CLOUD SERVICES Yes Yes N/A Select one GTC F.8 WARRANTY Yes Yes N/A Select one GTC F.9 TERMINATION ASSISTANCE Yes Yes N/A Select one

GTC F.10 DISCONTINUATION OF CLOUD SERVICES Yes Yes N/A Select one GTC G GENERAL TERMS AND CONDITIONS ON PROCUREMENT OF ARTIFICIAL INTELLIGENCE (AI) SYSTEMS AND AI-ENABLED SERVICES

GTC G.1 GENERAL Yes Yes N/A Select one GTC G.2 RISK MANAGEMENT OF ARTIFICIAL INTELLIGENCE Yes Yes N/A Select one GTC G.3 USE OF DATA SETS AND BIAS MITIGATION Yes Yes N/A Select one GTC G.4 RECORD-KEEPING AND LOGGING Yes Yes N/A Select one GTC G.5 TRANSPARENCY OF THE AI SYSTEM OR AI-ENABLED SERVICE Yes Yes N/A Select one GTC G.6 GOVERNABILITY AND HUMAN OVERSIGHT Yes Yes N/A Select one GTC G.7 INTEROPERABILITY Yes Yes N/A Select one GTC G.8 TRAINING OF USERS Yes Yes N/A Select one GTC G.9 WARRANTIES Yes Yes N/A Select one

GTC G.10 INTELLECTUAL PROPERTY AND USE OF DATA SETS Yes Yes N/A Select one GTC G.11 AUDIT Yes Yes N/A Select one

S l t STC.A GENERAL STC CLAUSES

STC.A.1 Contract Administration and Project and Technical Direction Yes Yes N/A Select one STC.A.2 Incorporation of Core Subsets Yes Yes N/A Select one STC.A.3 Contract Term Yes Yes N/A Select one STC.A.4 Eligible Purchaser Yes Yes N/A Select one STC.A.5 List of Supplemented, Modified, or Replaced NCIA Contract General Terms and Conditions Yes Yes N/A Select one STC.A.6 Interpretation, Definition, and Acronyms Yes Yes N/A Select one STC.A.7 Scope of Work Yes Yes N/A Select one

STC.B TYPE OF CONTRACT

STC.B.6 Type of Contract: Indefinite Delivery Indefinite Quantity (IDIQ) Yes N/A N/A Select one

STC.C ACCEPTANCE AND PAYMENT N/A

STC.D SUPPLIER REQUIREMENTS

STC.D.1 Performance Guarantee N/A STC.D.2 Key Personnel Yes N/A Yes Select one

STC E CHANGES OR BREACH OF CONTRACT

STC E.1 Limited Liability (Limitation of Liability) Yes N/A Yes Select one

STC F CONTRACTOR’S GENERAL TERMS AND CONDITIONS

STC F.1 Exclusion of Contractor’s General Terms and Conditions Yes N/A Yes Select one

STC G IDIQ CLAUSES

STC G.1 Scope of Work Yes Yes N/A Select one STC G.2 Task or Delivery Orders Yes Yes N/A Select one STC G.3 Ordering Procedures Yes Yes N/A Select one STC G.4 Ordering Limitations Yes Yes N/A Select one STC G.5 Place and Terms of Delivery N/A STC G.6 Disposal, Sales and Gainshare Mechanism N/A

STC H CYBERSECURITY TERMS AND CONDITIONS

STC H.1 Cyber Incident Reporting-Alternate 1 Yes Yes N/A Select one STC H.2 Limitation on the Use or Disclosure of Purchaser Furnished Information (PFI) Yes Yes N/A Select one STC H.3 Limitation on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information Yes Yes N/A Select one STC H.4 REACH Capability N/A STC H.5 Service Level Agreement (SLA) for the Provision of REACH Laptops in accordance with Clause STC H.4 N/A

STC I SUBCONTRACTORS

STC I.1 Subcontracting to Non-NATO Entities Outside the Local Area Yes Yes N/A Select one STC I.2 Integration of Work Yes N/A Yes Select one

STC J CONTRACT CLASSIFICATION

STC J.3 Security Requirements for NATO RΞstricted (NR) Projects with Escorted Access Yes N/A N/A Select one STC J.4 Security Requirement for NATO RΞstricted (NR) Projects with Un Escorted Access Yes N/A N/A Select one STC J.5 Security Requirement for NATO SΞcret (NS) Projects (Classified Projects) Yes N/A Yes Select one STC J.6 SOURCE CODE ESCROW Yes N/A Yes Select one

STC L DATA PROCESSING AND TRANSFER AGREEMENT

STC L.1 Data Processing and Transfer Agreement Yes Yes N/A Select one STC L.2 Personal Data Processing and Transfer Agreement Details Yes Yes N/A Select one STC L.3 Technical and Organizational Measures Yes Yes N/A Select one STC L.4 List of Sub-Processors Yes Yes N/A Select one STC L.5 Glossary Yes Yes N/A Select one