STATE OF OHIO

DEPARTMENT OF ADMINISTRATIVE SERVICES

GENERAL SERVICES DIVISION

OFFICE OF PROCUREMENT SERVICES

4200 SURFACE ROAD, COLUMBUS, OH 43228-1395

OPTIONAL USE CONTRACT FOR: CYBERSECURITY & INFORMATION SECURITY SERVICES:

NOTIFICATION AND CREDIT MONITORING SERVICES

CONTRACT No.: CSP035518

CONTRACT ID: CTR035518

EFFECTIVE DATES: 02/24/2026 to 10/31/2026

SUPPLIER: 22ND CENTURY TECHNOLOGIES INC

The State of Ohio Department of Administrative Services (DAS) has agreed to participate in a consortium contract. The State of Idaho is the lead entity for Cybersecurity & Information Security Services and their Master Price Agreement number is MA2025001 “Price Agreement.” This contract is administered by the State of Idaho, on behalf of NASPO ValuePoint. The State of Ohio has accepted prices as a result of Bid Number 928, which opened on June 26, 2025. The State of Idaho completed the evaluation of the proposal response(s).The respective Proposal, including the incorporated contract terms and conditions, standard contract terms and conditions, special contract terms & conditions, any bid addenda, specifications, pricing schedules and any attachments incorporated by reference and accepted by DAS, and the State of Ohio, Standard Terms and Conditions become a part of this Optional Use Contract.

The Contract is effective beginning and ending on the dates noted above unless, prior to the expiration date, the Contract is renewed, terminated or cancelled in accordance with the Contract Terms and Conditions.

CONTRACT RENEWAL. This Contract may be renewed after the ending date of the Contract solely at the discretion of the Contracting Agency for a period of one month. Any further renewals will be by mutual agreement between the Contractor and the Contracting Agency for any number of times and for any period of time. The cumulative time of all mutual renewals may not exceed 60 months unless the Contracting Agency determines that additional renewal is necessary.

This Contract is available to all state agencies, as applicable.

Agencies are eligible to make purchases of the listed supplies and/or services in any amount and at any time as determined by the agency. The State makes no representation or guarantee that agencies will purchase any volume of supplies and/or services.

This Contract and any Amendments thereto are available from the OhioBuys public portal at the following address:

https://ohiobuys.ohio.gov/page.aspx/en/ctr/contract_browse_public

IN WITNESS WHEREOF, the parties have executed this Contract as of the dates below;

For 22ND CENTURY TECHNOLOGIES INC:

Signed: _____________________________________________________________________

Isha Sharma, Contracts Manager

For the OHIO DEPARTMENT OF ADMINISTRATIVE SERVICES:

Signed: _____________________________________________________________________

Kathleen C. Madden, Director

1 - STATE OF OHIO PARTICIPATING ADDENDUM

STATE OF OHIO

PARTICIPATING ADDENDUM

FOR CYBERSECURITY & INFORMATION SECURITY SERVICES: NOTIFICATION AND CREDIT

MONITORING SERVICES

AS ISSUED BY THE STATE OF IDAHO CAN BE FOUND BY CLICKING THE LINK BELOW

CYBERSECURITY & INFORMATION SECURITY SERVICES: NOTIFICATION AND CREDIT

MONITORING SERVICES

2 - MASTER AGREEMENT

Master Agreement #: MA2025001

Consortium: NASPO ValuePoint

Contractor: 22nd Century Technologies Inc

Participating Entity: State of Ohio

The following products or services are included in this contract portfolio:

Category 4 - Notification and Credit Monitoring Services

3 - PARTICIPATING ADDENDUM TERMS AND CONDITIONS

3.1 - SCOPE

This addendum covers the Cybersecurity & Information Security Services: Notification and Credit Monitoring Services led by the State of Idaho.

3.2 - PARTICIPATION

This Master Agreement may be used by all state agencies. Issues of interpretation and eligibility for participation are solely within the authority of the State Chief Procurement Official.

3.3 - PARTICIPATING ENTITY MODIFICATIONS OR ADDITIONS TO THE MASTER AGREEMENT

The following modifications or additions apply only to actions and relationships within the Participating Entity. The following changes are modifying or supplementing the Master Agreement terms and conditions.

3.3.1 - ORDER OF PRECEDENCE

1. Ohio's Participating Addendum; Ohio's Participating Addendum shall not diminish, change, or impact the rights of the Lead State with regard to the Lead State's contractual relationship with the Contractor under the Terms of the Lead State's Master Agreement.

2. Lead State's Master Agreement (includes negotiated Terms and Conditions and applicable exhibits to the Master Agreement)

3. Contractor's response to the Lead State's solicitations;

4. The Lead State's Solicitation including all Addendums.

https://naspovaluepoint.org/portfolio/cybersecurity-information-security-services-2025-2031/22nd-century-technologies-inc/ https://naspovaluepoint.org/portfolio/cybersecurity-information-security-services-2025-2031/22nd-century-technologies-inc/

3.3.2 - SERVICE PROVIDER APPROVED BY CYBER LIABILITY INSURANCE CARRIERS

The Contractor agrees to make a good faith effort to have its services and rates approved by the State’s cyber liability insurance carrier (“Carrier”). Upon execution of this Contract, and whenever the State changes Carriers, the State will contact the Carrier and provide them with any required information regarding the Contractor and the Contractor’s services in order to obtain the Carrier’s approval of the Contractor. If necessary, the Contractor will, within five days of notice by the State, provide the State with any additional information required by the Carrier for the approval process. The State will notify the Contractor of the Carrier’s approval. If the Carrier does not approve of the State engaging the Contractor’s services, the State may still utilize all or part of the Contractor’s services as provided in this Contract. The State may also elect to terminate the Contract for convenience.

4 - STANDARD TERMS AND CONDITIONS

The State of Ohio Standard Terms and Conditions (revised 03/31/25) govern this Contract and are incorporated as if fully rewritten herein.

5 - SUBCONTRACTORS

Subcontractor Name Subcontractor ID EOD Status

IDIQ 1

https://dam.assets.ohio.gov/image/upload/procure.ohio.gov/TCond/Standard_T_C_3-31-25.pdf