MCSA023288_SA_1_AM_1_-_Signed.pdf

BitSight Technologies, Inc. MCSA023288, Service Attachment 1, Amendment 1 Page 1 of 3

Version 7/23

BITSIGHT TEHNOLOGIES, INC.

MASTER CLOUD SERVICES AGREEMENT (#MCSA023288)

SERVICE ATTACHMENT 1

AMENDMENT 1

This Amendment 1 to Service Attachment 1 of contract #MCSA023288 (the “Amendment”) is between the State of Ohio, Department of Administrative Services (the “State”) and BitSight Technologies, Inc. (the “Contractor”). This Amendment changes the terms of Master Cloud Services Agreement #MCSA023288 (the “Contract”).

WHEREAS, the State and Contractor entered into the Contract and Service Attachment 1 on October 10, 2024; and

WHEREAS, the State and Contractor determined that an amendment is necessary to address certain revisions to the Contract.

NOW, THEREFORE, the Contract is amended as follows:

1. In Service Attachment 1, delete Section 2.2, Standard Service Features, in its entirety and replace it with the following:

2.2 Standard Service Features.

2.2.1 Total Risk Monitoring. An annual subscription to Total Risk Monitoring includes a daily updated rating, visibility into all associated risk vectors, and access to 12 months of historical data for chosen vendors or other business partners. The Total Risk Monitoring Services offer a customizable and extendable capability based on open standards APIs that enable integration with third party applications. Subscribers may also choose to set up alerts to monitor vendors.

2.2.2 Total Risk Monitoring For Enterprise. Measure, monitor, and manage risk across the third-party ecosystem with this subscription providing unlimited use of Total Risk Monitoring for chosen rated organizations. Ratings and associated data are updated daily for monitored companies, providing access to historical data for the past 12 months.

2. In Service Attachment 1, Pricing Addendum 1, add the following pricing:

Total Risk Monitoring For Enterprise (BT-10021) – Unit List Price per subscription is $300,000.00.

This Amendment shall become effective as of the date of the State’s signature and shall remain in full force and effect for the term of the Contract. Except as modified by this Amendment, all other terms, conditions and pricing of the Contract shall remain the same and in full force and effect.

(signatures on next page)

Docusign Envelope ID: FC2D3848-A021-461A-8417-06A1AFA8E239

BitSight Technologies, Inc. MCSA023288, Service Attachment 1, Amendment 1 Page 2 of 3

IN WITNESS WHEREOF, the parties have executed this Amendment as of the dates appearing below.

BITSIGHT TECHNOLOGIES, INC. STATE OF OHIO

DEPARTMENT OF ADMINISTRATIVE SERVICES

By: By:

Name: Name: Kathleen C. Madden

Title: Title: Director

Date: Date:

James Hillier

1/16/2025 | 9:07 AM PST

Chief Financial Officer

BitSight Technologies, Inc. MCSA023288, Service Attachment 1, Amendment 1 Page 3 of 3

SUMMARY OF AMENDMENTS

Amendment Number

Effective Date Description

SA1-1 Pending Updates Services and pricing addendum.

SUMMARY OF AMENDMENTS