EnsureInspect+™
EnsureInspect+™ is Digital Boardwalk’s third-party level-3 penetration testing solution. EnsureInspect+™ is designed to identify vulnerabilities and potential attack vectors at Customer’s network perimeter as well on the technology at Customer’s office location(s).
1. Application of Services, Inclusions, and Exclusions
The application of Services, Inclusions, and Exclusions as detailed below is determined by the level of service for Computers and Servers as well as the type of service delivered. See Application of Services for details.
2. Platform Limitations
Due to limitations and restrictions within the Apple macOS operating system, some Services may not be available to macOS devices. To indicate which platforms a Service is applicable to, the following identifying icons will appear next to the Service:
Service is available for Microsoft Windows devices.
Service is available for Apple macOS devices.
3. License
Service Provider delivers a vulnerability assessment software license to Customer. Due to the resale structure of the license between the licensing vendor, Service Provider, and Customer, Customer may not have access to all administrative functions of the licensed product. Unless otherwise listed as an included service under 4. Services (Included), all other Services, including technical support for administrative functions to which Customer does not have access, are excluded from this Agreement and excluded from the cost of this Agreement.
4. Services (Included)
Service Provider delivers Services to Customer for Computers and Servers listed as part of this Agreement. To be included as part of this Agreement, Computers and Servers must (i) have Service Provider’s remote monitoring and management (“RMM”) agent installed; and (ii) Computers and Servers must be covered by an active support agreement (e.g. SupportPro™, SupportPlus™, etc.). The following Services are listed as inclusions to this Agreement and are included in the cost of this Agreement
4.1 External Vulnerability Assessments
Service Provider will perform an external vulnerability assessment of Customer’s office location(s) once per quarter. The external vulnerability assessment will scan the public IP Address(es) of Customer’s office location(s), identify any known vulnerabilities, and generate a report with the results of the assessment. External vulnerability assessments are limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
4.2 Internal Vulnerability Assessments
Service Provider will perform an internal vulnerability assessment of Customer’s office location(s) once per quarter. The internal vulnerability assessment will scan the local network(s) of Customer’s office location(s), identify any known vulnerabilities, and generate a report with the results of the assessment. Internal vulnerability assessments are limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
4.3 Penetration Testing
Service Provider will perform a penetration test of Customer’s office location(s) once per quarter. During the penetration test, Service Provider will refer to the External and Internal Vulnerability Assessments and attempt to exploit any identified vulnerabilities using ethical hacking techniques. Service Provider will deliver to Customer a report detailing the success or failure of the penetration test as well as recommended remediation actions. Penetration tests are limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
4.4 Assessment Reports
Upon request by Customer to Service Provider, Service Provider will deliver to Customer reports detailing the results of External and Internal Vulnerability Assessments. Report request fulfillment is limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
4.5 Policy Templates
Upon request by Customer to Service Provider, Service Provider will deliver to Customer sample cybersecurity and compliance policy templates that Customer can edit and incorporate into Customer’s organization for regulatory compliance purposes. Policy template request fulfillment is limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
5. Out of Plan Services (Excluded)
Unless otherwise listed as an included service under 4. Services (Included), all other Services are excluded from this Agreement and excluded from the cost of this Agreement. Service Provider may deliver Out of Plan Services to Customer at rates set forth in Standard Labor Rates. The following is a list of common services excluded, without limitation, from this Agreement, regardless of any statement that the Service is included in the cost of the Agreement:
5.1 Vulnerability Remediation
Service Provider will refer to the most recent External Vulnerability Assessment, Internal Vulnerability Assessment, and Penetration Test and design and implement a remediation plan for identified vulnerabilities. Vulnerability remediation is limited to remote delivery during Service Provider’s operating hours and does not include field support or travel to Customer’s business location. See Service Availability for operating hours information.
6. Third Party Products
- Galactic Advisors: https://www.galacticadvisors.com/; Confidentiality and Non-Disclosure
Changelog
| Date | Previous Language | New Language |
|---|---|---|
|
01/30/2024 |
– |
[Original Publishing] |
|
12/23/2024 |
Galactic Advisors: https://www.galacticadvisors.com/ |
Galactic Advisors: https://www.galacticadvisors.com/; Confidentiality and Non-Disclosure |
|
08/25/2025 |
– |
Corrected the Standard Labor Rates hyperlink under 5. Out of Plan Services (Excluded) |