ReadyNine | [email protected] | 500 W. Madison Street, Suite 1000, Chicago, IL 60661 8. Have you ever made a claim against your cyber liability or breach coverage? If yes, please explain. 9. Is your firm, or has your firm or any organization it relies upon for client services, ever filed for bankruptcy or receivership? 10. Is your firm currently subject to any civil or criminal investigation? If yes, please explain. 11. Do you subcontract your infrastructure or the services you provide to clients? If yes: a. For what areas? b. How are these subcontractors vetted? c. How are they monitored while working within or at your client’s environment? d. Do you require subcontractors to have similar terms and conditions in your mutual agreements as those signed with your clients? e. What kinds of agreements are contractors required to sign when providing services for you or your clients? f. Are employees and contractors limited to minimum access necessary to systems and information?

A CEO's Guide to Choosing an IT Service Provider - Page 5 A CEO's Guide to Choosing an IT Service Provider Page 4 Page 6