Extract to table

This engagement shall be effective as of May 5, 2023 (the "Effective Date")

Graystone shall not undertake work outside the scope described herein, or as subsequently modified, without C&H's prior written authorization

1 Technical Forensic Investigation Graystone shall conduct a comprehensive technical forensic investigation of the Incident, including, without limitation, the following: (a) Initial Entry Vector Analysis

This analysis shall include, to the extent feasible, a determination of the specific data fields and record types affected and the volume of data involved

At a minimum, the following categories shall be identified: (i) individuals whose PII only (e

3 Threat Actor Assessment Graystone shall assess the threat actor responsible for the Incident, including, without limitation, the following: (a) Tactics, Techniques, and Procedures (TTPs)