This is a sample statement of work for a Web-based Intelligence Assessment:

Fred Cohen & Associates (FCA) will perform a Web-based Intelligence Assessment for Your Company (CLIENT) consisting of the following:

1) FCA will use the World Wide Web to research CLIENT information. This includes but is not limited to:

• Web sites owner or operated by CLIENT.
• Information about the CLIENT found at other web sites.
• Information about CLIENT personnel found on the web.
• Historical postings of employees and related to the company.
• News stories related to the CLIENT and their employees.

2) Within 45 days of start of contract FCA will provide one or more CD-ROMs which include full details of all data collected, a review of potential exploitations that could be facilitated with the collected data with samples of how such exploits would be facilitated, and a report overviewing what was found and its implications. This report will include:

• a one-page executive summary of the assessment
• a review of what was found and its implications.
• an assessment of CLIENT information determinable from web-based intelligence efforts.
• actions that CLIENT should contemplate to improve its web-based counter-intelligence program.
• web-based pointers to detailed content found and analyzed.

3) At the completion of this report, an invoice will be provided to CLIENT for services rendered. If minor report revisions are required, they will be provided over a period of three months at no added cost. If an in-person executive briefing is desired, one will be provided at an additional cost of $2500 plus expenses.

This proposal is valid for a period of 45 days from the date provided. All payments are due within 15 days of invoice.

The cost of this study will be $50,000 plus reasonable and usual expenses and costs of the in-person executive briefing if so desired. Total costs of this study are not to exceed $55,000.