Service brief: Archer optimization assessment by Karta

INTEGRATED RISK MANAGEMENT

SERVICE BRIEF

Archer optimization assessment

Service overview Are you getting the most out of Archer? This service provides you with an analysis of how Archer is currently being used and how it could be improved, including expected results.

We bring together stakeholders and technical staff to identify how you can get the most out of Archer, including making it more sustainable and easier to manage. We also ensure that your risk management program is up to date.

kartacorp.com

Scope of work Karta's team of Archer IRM experts will collaborate with your stakeholders to review the production implementation of your Archer solution(s). No changes will be made to any of your software.

The Archer optimization assessment service involves some or all of the following:

CONDUCT A KICKOFF CALL, SCHEDULE LOGISTICS, WORKSHOPS & INTERVIEWS Review Archer core and/or on-demand applications and/or questionnaires.

Provide working sessions with the end-users and your support personnel to review the current design and supporting design decisions.

Review and document the capabilities being exercised and those not in use.

Perform a deep-dive investigation into the following configuration areas and determine if best practices have been exercised: Content placement Data feeds Field use Sections on application layouts Mail merge Data-driven events Fields descriptions Roles and groups Custom objects Documentation Define and document assessment findings and provide recommendations on the goforward actions you should take to maximize the benefits of the Archer solution(s). This will include benefits and challenges to be experienced by upgrading to a more current version of Archer use-case.

Facilitate final review with your key stakeholders.

An assigned Karta project manager will provide overall engagement management of this project. During the project, together we'll have status meetings to review current progress, direction, documentation, findings, issues and recommendations.

kartacorp.com

Deliverables Optimization assessment that includes: Gap analysis of configured functionality against available core functionality On-demand application utilization assessment Assessment recommendations to maximize Archer’s capabilities following bestpractices Assessment recommendations to maximize manageability of configured applications following best practices Complexity rating by application, indicating go-forward consideration for maintenance, requests for new functionality, upgradability, etc.

Customer responsibilities You will provide the following deliverables for this engagement: At least one technical contact with system administration responsibilities and appropriate system/information access privileges Identify an executive sponsor to facilitate staff cooperation and provide an executive liaison to Karta A review and approval of the engagement objectives Ensure that all environmental and operational requirements are met prior to the commencement of the services.

Verify that the work site is prepared to perform the engagement services Respond in a timely fashion to questions posed by Karta regarding the project Provide documents/diagrams detailing the existing specifications and architecture in a timely manner Complete all planning and scheduling activities in the scope of work Provide remote access capability (e.g., VPN access) into your environment to facilitate efficient off-site support by Karta consultants and/or remote work

Schedule of services The anticipated service start date is within thirty (30) days or a mutually-agreed-upon start date after receipt and approval by Karta of your purchase order for this service.

Subject to the customer satisfying the “customer responsibilities” specified above, Karta estimates that it will complete the services within forty-five (45) days after the actual

kartacorp.com

service start date.

Unless otherwise specified or agreed by Karta, the services are performed on consecutive days.

Project scope changes Any additions or changes to the project scope must be mutually agreed upon by Karta and the customer in a separate Karta statement of work detailing the proposed changes, the impact of the proposed change on pricing and schedule, and other relevant terms. Such changes include, but are not limited to: Any additional activities not listed in this data sheet Modification of application software Development of custom solutions including, without limitation, scripting Any additional hardware configuration not listed in this data sheet Any change to the hardware configuration listed in this data sheet Multiple basic installation services requiring project management services Prolonged service duration

Fixed bid service fee and invoicing schedule The services described in this data sheet are delivered during Karta’s normal business hours (M–F, excluding Karta/local holidays).

Invoices are issued upon receipt by Karta and approval of your purchase order.

The customer will provide a new or amended purchase order and shall pay additional amounts related to (i) the performance of services outside Karta’s normal business hours or consecutive days, and (ii) reimbursement of travel-related expenses required to complete the service.

The customer shall have twelve (12) months from the date of Karta’s invoice to use the services described herein (“service period”). The services shall automatically expire on the last day of the service period. Under no circumstances shall the client be entitled to a credit or refund of any unused portion of the services.

kartacorp.com

Expertise Count on getting an efficient and reliable solution! Every Karta solution is designed and delivered by a talented team of Archer experts with combined decades of configuration and project management experience.

Jonathan Kitchin

Julia Haggerty

Angelo Capone

Frances Bierman

Vice President of Solutions and Service Delivery

GRC/IRM/NERC Solution Sales

Sr. Service Delivery Manager IRM Consultant

Project Manager

Alexandre Cormier

Ryan Kartavicius

Patrik Miller

Stacy Bresler

IRM Consultant

IRM Consultant

CEO, Ampere Industrial Security

Managing Partner Archer Energy Solutions

I wanted to pass along my compliments and a huge appreciation shout-out for your team's effort to get our [compliance program] over the finish line.

Establishing Archer was a goal for my team and you were available to address all of our concerns ... You’ve also been very helpful with validating our access matrix and ensuring our employees are set up correctly in the Archer user groups. Thanks again for the support!

Compliance Manager Enterprise-level electrical power generation utility

kartacorp.com

Karta Ascend: helping you traverse risk You deal with enough risk in a day—let’s take your IRM program off that list. Here’s how we deliver great IRM solutions on time and on budget, every time. This experiencedbased formula is called Karta Ascend. Take a look:

PROVEN PROCESS Our rigorous, time-tested service delivery model ensures your business requirements are understood, your team is involved in the process at every step, and your project is completed on time and on budget.

CURATED IRM SOLUTIONS Weeding through dozens of IRM solutions can take hundreds of hours.

We have cut through the noise and chosen the best for you: Onspring. A core part of our process is guiding your team to select a platform that will serve you well today and in the future.

GOOD PEOPLE We're a team of down to earth people who genuinely care about the success of your solution. But don't take our word for it—read our case studies and the unsolicited testimonials shared on our website.

CLARITY We work hard to ensure you have complete clarity from start to finish.

From clear deliverables to frequent reporting, you'll always know what's happened and what's coming next.

DEEP TECHNOLOGY EXPERTISE There’s no substitute for knowledge and experience. Honed over 20+ years and countless projects, our approach is highly collaborative and efficient.

We only assign seasoned consultants to your projects and maintain expertlevel product knowledge through ongoing training and certifications.

Get started Contact us about Archer consulting services EMAIL US

USA (770) 631-5988 CAN (416) 342-0813

kartacorp.com

V 231124