American Home Shield 2010 Annual Report Download - page 304

Subject to a request for confidential treatment, certain portions of this agreement have been intentionally omitted. The omitted
portions subject to the confidential treatment request are designated by three asterisks ([***]). A complete version of this
agreement has been separately filed with the Securities and Exchange Commission.
Exhibit 9
Customer Security Requirements
This is Exhibit 9, Customer Security Requirements, to that certain First Amended and Restated Master Services Agreement, dated as
of November 1, 2010, between ServiceMaster Consumer Services, L.P. and International Business Machines Corporation. Unless
defined in this Exhibit, capitalized terms have the meanings set forth in the Master Agreement or the "Definitions" Exhibit to the
Master Agreement.
1. Generally. This Exhibit 9 and its attachments and the "Additional Customer Security Requirements" Schedule to each
Transaction Document (if any) set forth the Security Requirements. The Security Requirements are part of the Services and Service
Provider must comply with the Security Requirements in accordance with Section 3.2(d) of the Master Agreement. In the event of a
conflict among the various documents setting forth the Security Requirements and the "PCI and SOX Requirements" Attachment, the
"PCI and SOX Requirements" Attachment controls. In the event of a conflict between the "PCI and SOX Requirements" Attachment
and the "Services Description" Schedule, the "Services Description" Schedule controls. Service Provider shall compile the obligations
contained in the attachments below into the ISEC document in accordance with the Transition and Transformation Plan. Customer
shall approve the ISEC. In the event of a conflict between the Customer approved ISEC document and the "Services Description"
Schedule, the "Services Description" Schedule controls.
2. Attachments. The following attachments are incorporated by reference in this Exhibit:
(a) Attachment 9-1, ServiceMaster Information Security Policy revision 2.21; [portions omitted]
(b) RESERVED;
(c) RESERVED;
(d) RESERVED;
(e) the privacy polices and background screening requirements set forth in the "Policies" Exhibit; and [portions
omitted]
(f) Attachment 9-5, Customer Group's "PCI and SOX Requirements." [portions omitted]
3. Malware. Service Provider will not intentionally code Malware into the Services, the Customer Systems interfacing with the
Services, the Service Provider Information Systems and
1