ReadyNine | [email protected] | 500 W. Madison Street, Suite 1000, Chicago, IL 60661 Policies These questions are designed to ensure that your IT provider has documented processes and appropriate policies. 1. Please describe your change management process. 2. What is your documentation policy about ensuring that we have all of the documentation we need to operate without your involvement? 3. Please list and describe (by name only) what policies you have in around use, privacy, and data retention, etc. 4. Do you have a well-defined employee and vendor sanction policy that guides your response to policy violations? 5. Do you have a privacy policy that relates specifically to the creation, use and destruction of client data?

A CEO's Guide to Choosing an IT Service Provider - Page 8 A CEO's Guide to Choosing an IT Service Provider Page 7 Page 9