Non-Disclosure Agreement

1. Definition of Confidential Information

"Confidential Information" means any non-public information disclosed by either party to the other, either directly or indirectly, in writing, orally, or by inspection of tangible objects, that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure. This includes, but is not limited to:

• Security vulnerabilities, weaknesses, and assessment findings
• Floor plans, site layouts, and access control configurations
• Security system specifications and monitoring protocols
• Personnel information and security procedures
• Business operations, financial information, and strategic plans
• Proprietary methodologies, tools, and assessment frameworks

2. Obligations of Receiving Party

Each party agrees to: (a) hold the other party's Confidential Information in strict confidence; (b) not disclose Confidential Information to any third party without prior written consent; (c) use Confidential Information solely for the purpose of the security consulting engagement; (d) protect Confidential Information using at least the same degree of care used to protect its own confidential information, but no less than reasonable care.

3. Exclusions

Confidentiality obligations do not apply to information that: (a) is or becomes publicly known through no breach of this Agreement; (b) was rightfully known before disclosure; (c) is independently developed without use of Confidential Information; (d) is required to be disclosed by law or court order, provided the receiving party gives prompt written notice to allow the disclosing party to seek a protective order.

4. Security of Information

Given the sensitive nature of security-related information, both parties agree to implement appropriate technical and organizational measures to protect Confidential Information from unauthorized access, disclosure, or use. Security assessment reports shall be stored securely and access limited to those with a legitimate need to know.

5. Term

This Agreement shall remain in effect for a period of five (5) years from the date of the last disclosure of Confidential Information, or for the duration required by applicable law, whichever is longer. Obligations regarding security vulnerability information shall survive indefinitely.

6. Return of Information

Upon request or termination of the engagement, each party shall promptly return or destroy all Confidential Information of the other party, including all copies, notes, and summaries, and certify in writing that such destruction has occurred.

7. Remedies

The parties acknowledge that breach of this Agreement may cause irreparable harm for which monetary damages would be inadequate. Either party may seek injunctive or other equitable relief in addition to any other remedies available at law or in equity.

8. Governing Law

This Agreement shall be governed by the laws of the State of Tennessee. Disputes shall be resolved in Hamilton County, Tennessee.