Root Cause Report Clause Samples

Root Cause Report. Report issued up to the 5th business day after the incident has been closed with analysis, actions taken and possible factors causing it, in addition to presenting recommendations in order to avoid recurrence; • A Heat Map indicating the countries that have accessed the block of IP addresses or accessed the main Website indicated by PAGSEGURO INTERNET LTDA. The access distribution will be presented in addition to the graph referenced here distributed as a percentage for each listed country; • An act intended to paralyze the service or an attempt to paralyze an element of the infrastructure that serves PAGSEGURO INTERNET LTDA’s business with the attacker exclusively positioned on the internet and making use of the internet access supplied by UOLDIVEO will be defined as a digital attack. Thus: • Failure to receive malicious packets for a period between thirty and sixty minutes will be considered as the end of an attack; • If the flow of malicious packets is resumed in thirty minutes or less it will be considered the continuation of the same attack; • If the flow of malicious packets is resumed after a period of sixty minutes it will be considered a new attack; • UOLDIVEO considers as a reference the time (hour:minute:second) when the digital attack stopped sending malicious packages was noticed; • UOLDIVEO will register the evidence of each attack, using for its internal analysis the IP address used by the attacker, the attack volume, its start time and its stop time. These elements are joined with the other measurements that UOLDIVEO deems necessary. • All transmissions with the NTP, ICMP, TCP, UDP protocol, or any other protocol containing the signature of a DDoS attack is defined as a “malicious packet”. Such signature has a volumetric behavior superior to the behavioral baseline identified by the UOLDIVEO MSS team for internet access monitored by the DDoS Protection product. The time of this anomalous volumetric analysis will also be taken into account to characterize the existence or not of an attack, and it is UOLDIVEO’s responsibility to interpret it and to define if the environment defense procedure will be started; TECHNICAL PROPOSAL UOLDIVEO – OPT-17/21631-A • Activities performed by UOLDIVEO MSS in conjunction with the other Data Center teams belonging to UOLDIVEO to prevent the client’s environment from being unavailable due to a digital attack are defined as a defense procedure; • If the contracted attack limit is reached, UOLDIVEO will configur...