This is a sample statement of work for a Telecommunications Sweep Assessment:

Fred Cohen & Associates (FCA) will perform a Telecommunications Sweep Assessment for Your Company (CLIENT) consisting of the following:

1) CLIENT will provide specific IP addresses, telephone number ranges, company telephone lists, and other necessary information to identify what information assets (heretofore ASSETS) are to be covered in the telecommunications sweep. CLIENT will also provide details of when these sweeps are to take place and will coordinate all sweeps with CLIENT and vendor personnel to assure that these activities are carried out in an efficient, safe, and non-interfering manner.

2) FCA will use automated tools to check the identified ASSETS for presence or absence, function, connected equipment, and available services. These checks will be done over a period of time specified by the client and in cooperation with CLIENT personnel.

3) Within 14 days of the completion of the sweeps, FCA will provide a detailed review of the results of these sweeps to CLIENT for review by CLIENT in the form of a draft report consisting of:

• a one-page executive summary of the assessment
• a detailed review of anomalies found in the sweeps and the implications of these anomalies.
• actions that CLIENT should contemplate to better protect ASSETS.

4) At the completion of the draft report, an invoice will be provided to CLIENT for services rendered. If minor report revisions are required, they will be provided over a period of three months at no added cost. If an in-person executive briefing is desired, one will be provided at an additional cost of $2500 plus expenses.

This proposal is valid for a period of 45 days from the date provided. All payments are due within 15 days of invoice.

The level of effort specified for this study will be $30,000 plus reasonable and usual expenses, long distance charges, and costs of the in-person executive briefing if so desired. Total costs of this study are not to exceed $40,000.