Document:

EX-4.b.3

 Exhibit 4.b.3 
  

			
	 Confidential Materials omitted and filed separately with the

Securities and Exchange Commission. Double asterisks denote omissions.
	 	Agreement Number 02026713.A.034

 Amendment 

No. 02026713.A.034 
 Between

 Amdocs, Inc. 
 And 

AT&T Services, Inc. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written agreement by the contracting Parties. 
  

 1
 

 Agreement Number 02026713.A.034 

 

 AMENDMENT NO. 34 

AGREEMENT NO. 02026713 
 This Amendment
No. 34, effective on the date when signed by the last Party (“Effective Date”), and amending Agreement No. 02026713, is by and between Amdocs, Inc., a Delaware corporation (“Supplier” or “Amdocs”), and
AT&T Services, Inc., a Delaware corporation (“AT&T”), each of which may be referred to in the singular as a “Party” or in the plural as the “Parties”. 

WITNESSETH 
 WHEREAS, AT&T and
Amdocs are parties to that certain Agreement No. 02026713 for Software and Professional Services, dated as of August 7, 2003, (as previously amended, the “Agreement”) and 

WHEREAS, AT&T and Supplier now desire to further amend the Agreement; 

NOW, THEREFORE, in consideration of the premises and the covenants hereinafter contained, the Parties hereto agree to changes to the Agreement as
follows: 
  

	1.	Section 3, “AT&T Supplier Information Security Requirements”, of Appendix 8, “AT&T Rules, Supplier Information Security Requirements and Limited Offshore Remote Access”, is
deleted in its entirety and replaced with the following: 

 3. AT&T Supplier Information Security Requirements 

AT&T Supplier Information Security Requirements (SISR) – v5.2, December 1, 2013 

The following AT&T Supplier Information Security Requirements (“Security Requirements”) apply to Amdocs, its affiliates, its
Subcontractors, and each of their employees and/or temporary workers, contractors, vendors and/or agents who perform any Services for, on behalf of, and/or through AT&T and/or any other obligations (for the purpose of this Appendix, each or all
“Supplier”) that include any of the following:  
  

	 	1.	Supplier’s performance of Services that involve the collection, storage, handling, or disposal of AT&T’s Information; 

  

	 	2.	Supplier-offered or -supported AT&T branded services using non-AT&T Information Resources (as defined below); 

  

	 	3.	Connectivity to AT&T’s Nonpublic Information Resources (as defined below); 

  

	 	4.	Custom Software development pursuant to Section 3.33 to the Master Services Agreement No. 02026713 to the extent produced or developed by or on behalf of Supplier, or forming part of any software pursuant to
the Agreement to which these Security Requirements are attached (including under any statement of work, exhibit, order or other document under, subordinate to, or referencing this Agreement) for the development of which AT&T has been charged
monies; or 

  

	 	5.	Website hosting and development for AT&T and/or AT&T’s customers. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 2
 

 Agreement Number 02026713.A.034 

 

 Supplier represents and warrants that during the term of this Agreement and thereafter (as
applicable with respect to Supplier’s obligations under the Survival of Obligations clause) Supplier is, and shall continue to be, in compliance with its obligations as set forth herein. In addition to all other remedies specified in the
Agreement, Supplier agrees that AT&T shall be entitled to seek an injunction, specific performance or other equitable relief and be reimbursed the costs (including reasonable attorney’s fees) by Supplier to enforce the obligations in these
Security Requirements, including those that survive Termination, Cancellation or expiration of this Agreement. The provisions of this Appendix shall not be deemed to, and shall not, limit any more stringent security or other obligations of the
Agreement. Section and paragraph headings contained in parentheses following paragraphs in the table, below, in this Appendix are for reference purposes only and are not to affect the meaning or interpretation of this Agreement. 

AT&T reserves the right to update or modify its Security Requirements from time to time. Upon notification by AT&T of its need to
modify the Security Requirements, Supplier agrees to promptly negotiate in good faith and expedite execution of an amendment to this Agreement to incorporate any such modification. Supplier acknowledges that AT&T may require modifications to
Security Requirements: 
  

	 	1.	Upon extension or renewal of the Agreement; 

  

	 	2.	Upon any change in work scope or other substantive modification of the Agreement; or 

  

	 	3.	At such time that AT&T deems necessary. 

 3.1 Definitions: 

Unless otherwise set forth or expanded herein, defined terms shall have the same meaning as set forth in the main body of the Agreement. 

“Customer Facing System” means an Information Resource accessible from public networks, intended for use by
AT&T and/or its customers and which resides in a Demilitarized Zone (DMZ), as defined below, and where that DMZ: 
  

	 	A.	Is protected by firewalls located between the Internet and the DMZ, between that DMZ and all other DMZs, and between the DMZ and the AT&T intranet, 

 

	 	B.	Prohibits incoming TELNET connections from public networks, and 

  

	 	C.	Prohibits incoming File Transfer Protocol (FTP) connections from public networks except to specific systems known as “FTP drop boxes”. 

Note: A Customer Facing System which also is used by AT&T employees, contractors, vendors or suppliers to perform work on behalf of
AT&T is not considered a Customer Facing System when performing such work. 
 “CPNI” (Customer
Proprietary Network Information) as that term is defined in the Telecommunications Act of 1996, 47 U.S.C. §222 (h)(1). 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 3
 

 Agreement Number 02026713.A.034 

 

 “Demilitarized Zone” or “DMZ” is a network
or sub-network that sits between a trusted internal network, such as a corporate private Local Area Network (LAN), and an untrusted external network, such as the public Internet. A DMZ helps prevent outside users from gaining direct access to
internal Information Resources. Inbound packets from the untrusted external network must terminate within the DMZ and must not be allowed to flow directly through to the trusted internal network. All inbound packets which flow to the trusted
internal network must only originate within the DMZ. 
 The DMZ must be separated from the untrusted external network by use of a Security
Gateway and must be separated from the trusted internal network by use of either: 
  

	 	a.	another Security Gateway, or 

  

	 	b.	the same Security Gateway used to separate the DMZ from the untrusted external network, in which case the Security Gateway must ensure that packets received from the untrusted external network are either immediately
deleted or if not deleted are routed only to the DMZ with no other processing of such inbound packets performed other than possibly writing the packets to a log. 

The following must only be located within the trusted internal network: 

 

	 	a.	Any of AT&T’s Sensitive Personal Information (SPI) stored without the use of Strong Encryption, 

  

	 	b.	The official record copy of information to be accessed from requests originating from the untrusted external network, 

  

	 	c.	The official record copy of information to be modified as the result of requests originating from the untrusted external network, 

  

	 	d.	Database servers, 

  

	 	e.	All exported logs, and 

  

	 	f.	Development environments and source code. 

 The following must not be located within the DMZ:

  

	 	a.	Authentication credentials not protected by the use of Strong Encryption. 

“Incident Management Process” is a Supplier-developed documented procedure to be followed in the event of an
actual or suspected attack upon, intrusion upon, unauthorized access to, loss of, or other breach involving AT&T’s Information Resources. 

“Information Resources” means systems, applications, networks, network elements and other computing and
information storage devices, including smart phones, tablets, and USB memory sticks, and AT&T’s Information stored, transmitted, or processed with these resources in conjunction with supporting AT&T and/or used by Supplier in
fulfillment of its obligations under this Agreement. 
 “Location Based Information” or
“LBI” means information that identifies the current or past location of a specific individual’s mobile device. LBI contains two factors both of which must 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 4
 

 Agreement Number 02026713.A.034 

 

 
be present and able to be associated with each other. These two factors are: (1) a mobile device’s physical location (e.g. a map address, or latitude and longitude together with
altitude where known) derived from the mobile device through activities such as GPS (Global Positioning System ) or network connectivity rather than as a result of user action (e.g. revealing location in the content of an email or SMS text message),
and (2) an individual’s identity derived from a unique identifier assigned to that mobile device such as customer name, MSISDN (Mobile Subscriber Integrated Services Digital Network-Number), IMSI (International Mobile Subscriber Identity),
IMEI (International Mobile Station Equipment Identity) or ICCID (Integrated Circuit Card Identifier). 
 “Mobile and
Portable Devices” means mobile and/or portable computers, devices, media and systems capable of being easily carried, moved, transported or conveyed that are used in connection with the Agreement. Examples of such devices include laptop
computers, tablets, USB hard drives, USB memory sticks, Personal Digital Assistants (PDAs), and wireless phones, such as smartphones. 

“Nonpublic Information Resources” means those Information Resources used under the Agreement to which access
is restricted and cannot be gained without proper authorization and identification. 
 “Sensitive Personal
Information” or “SPI” means any information that: (a) requires a high degree of protection by law and where loss or unauthorized disclosure would require notification by AT&T to government agencies, individuals or
law enforcement, and (b) any information that, if made public, could expose individuals to a risk of physical harm, fraud, or identity theft. Examples of SPI include, but are not limited to, social security numbers, national government, such as
passport and visa numbers, state- or province-issued identification numbers, driver’s license numbers, dates of birth, bank account numbers, credit card numbers, customer authentication credentials, Protected Health Information (PHI) as defined
by the Health Insurance Portability and Accountability Act (HIPAA) and Location Based Information (LBI) (as defined above). Note: Authentication credentials, encryption keys, and encryption passwords used to protect Sensitive Personal Information
are themselves classified as Sensitive Personal Information. 
 “Security Gateway” means a set of control
mechanisms between two or more networks having different trust levels which filter and log traffic passing, or attempting to pass, between networks, and the associated administrative and management servers. Examples of Security Gateways include
firewalls, firewall management servers, hop boxes, session border controllers, proxy servers, and intrusion prevention devices. 

“Strong Authentication” means the use of authentication mechanisms and authentication methodologies stronger
than the passwords required by Security Requirement 34 herein. Examples of Strong Authentication mechanisms and methodologies include digital certificates, two-factor authentication, and one-time passwords. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 5
 

 Agreement Number 02026713.A.034 

 

 “Strong Encryption” means the use of encryption
technologies with minimum key lengths of 128-bits for symmetric encryption and 1024-bits for asymmetric encryption whose strength provides reasonable assurance that it will protect the encrypted information from unauthorized access, and is adequate
to protect the confidentiality and privacy of the encrypted information, and which incorporates a documented procedure approved by the Supplier’s appropriate management level, for the management of the encryption keys and associated processes
adequate to protect the confidentiality and privacy of the keys and passwords used as inputs to the encryption algorithm. 
 3.2 Security
Requirements 
 In accordance with the foregoing, Supplier shall: 

System Security 
  

	1.	Actively monitor industry resources (e.g., www.cert.org, pertinent software vendor mailing lists & websites) for timely notification of all applicable security alerts pertaining to Supplier’s
Information Resources. (Security Alerts) 

  

	2.	If commercially available and to the extent practicable, [**], and in addition immediately following all significant changes and upgrades, scan externally-facing Information Resources, including, but not limited to,
networks, servers, & applications, with applicable industry-standard security vulnerability scanning software to uncover security vulnerabilities. (Externally-facing System Scanning) 

 

	3.	If commercially available and to the extent practicable, [**], and in addition immediately following all significant changes and upgrades, scan internal Information Resources, including, but not limited to, networks,
servers, applications & databases, with applicable industry-standard security vulnerability scanning software to uncover security vulnerabilities, ensure that such Information Resources are properly hardened as documented in Security
Requirement 9 below, and identify any unauthorized wireless networks, unless documented policies and processes are in place to proactively prevent the creation of unauthorized wireless networks. (Internal System Scanning) 

 

	4.	RESERVED 

  

	5.	In environments where such technology is commercially available and to the extent practicable, deploy one or more Intrusion Detection Systems (IDS) , Intrusion Prevention Systems (IPS), or Intrusion Detection and
Prevention Systems (IDP) in an active mode of operation that monitors all traffic entering and leaving Information Resources in conjunction with the Agreement. (Intrusion Detection Systems) 

 

	6.	Have and use a documented process to remediate security vulnerabilities in the Information Resources, including, but not limited to, those discovered through industry publications, vulnerability scanning, virus
scanning, and the review of security logs, and apply appropriate security patches promptly with respect to the probability that such vulnerability can be or is in the process of being exploited. (Remediating/Patching Service Vulnerabilities)

  

	7.	Assign security administration responsibilities for configuring host operating systems to specific individuals. (Security Administration Responsibilities) 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 6
 

 Agreement Number 02026713.A.034 

 

	8.	Ensure that its information security staff has reasonable and necessary experience in information and network security. (Necessary Staff Experience) 

 

	9.	If commercially available and to the extent practicable, ensure that all of Supplier’s Information Resources are and remain ‘hardened’ including, but not limited to, removing or disabling unused network
services (e.g., finger, rlogin, ftp, and simple Transmission Control Protocol/Internet Protocol (TCP/IP) services) and installing a system firewall, Transmission Control Protocol (TCP) wrappers or similar technology. (Hardened Systems)

  

	10.	Change all default account names and/or default passwords. (Changing Default Account Names and Passwords) 

  

	11.	Limit system administrator (also known as root, privileged, or super user) access to operating systems intended for use by multiple users only to individuals requiring such high-level access in the performance of their
jobs. (Limit Super User Privileges) 

  

	12.	Require application, database, network and system administrators to restrict access by users to only the commands, data and Information Resources necessary for them to perform authorized functions. (Administrators to
Restrict User Access) 

 Physical Security 

 

	13.	Ensure that all of Supplier’s Information Resources intended for use by multiple users are located in secure physical facilities with access limited and restricted to authorized individuals only. (Information
Resources in Secure Facilities) 

  

	14.	Monitor and record, for audit purposes, access to the physical facilities containing Information Resources intended for use by multiple users used in connection with Supplier’s performance of its obligations under
the Agreement. (Monitoring and Recording Access) 

 Network Security 

 

	15.	When providing Internet-based services to AT&T, protect AT&T’s Information by the implementation of a network DMZ. Web servers providing service to AT&T shall reside in the DMZ. Information Resources
storing AT&T’s Information (such as application and database servers) shall reside in a trusted internal network. (Internet Services Must Use DMZ) 

  

	16.	Upon AT&T’s request, provide to AT&T a logical network diagram documenting the Information Resources (including, but not limited to, Security Gateways, servers, etc.) that will support AT&T. (Provision
of Logical Network Diagram) 

  

	17.	Have a documented process and controls in place to detect and handle unauthorized attempts to access AT&T’s Information. (Detection and Handling of Unauthorized Access). 

 

					
	18.	  	a.	  	Use Strong Encryption for the transfer of AT&T’s Information outside of AT&T-controlled or Supplier-controlled networks or when transmitting AT&T’s Information over any untrusted network.
			
		  	b.	  	Additionally, [**], always use Strong Encryption to protect AT&T’s SPI when transmitted over any AT&T-controlled or Supplier-controlled network.
		
		  	(Note: This also applies to AT&T’s Information contained in email, or the attachments embedded within the email, as the case may be. For greater clarity, if, for example, the text in an email does not contain
AT&T’s Information, but the embedded attachments within that email do contain AT&T’s Information, then the embedded attachments, but not the email, need to be encrypted.) (Encryption of Information in Transit)

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 7
 

 Agreement Number 02026713.A.034 

 

	19.	Require strong authentication for any remote access use of Nonpublic Information Resources. (Remote Access Authentication) 

Information Security 
  

	20.	Isolate AT&T’s applications and AT&T’s Information from any other customer’s or Supplier’s own applications and information either by using physically separate servers or alternatively by
using logical access controls where physical separation of servers is not implemented. (Separate AT&T’s Information from non-AT&T Information) 

  

	21.	Have documented procedures for the secure backup and recovery of AT&T’s Information which shall include, at a minimum, procedures for the transport, storage, and disposal of the backup copies of AT&T’s
Information and, upon AT&T’s request, provide such documented procedures to AT&T. (Secure Backup, Transport, Storage and Disposal of AT&T’s Information) 

 

	22.	Maintain and, upon AT&T’s request, furnish to AT&T a documented business continuity plan that ensures that Supplier can meet its contractual obligations under the Agreement, including the requirements of
any applicable Statement of Work or Service Level Agreement. Such plan shall include the requirement that the included procedures be regularly tested in accordance with Supplier’s documented risk management plan. Supplier shall promptly review
its business continuity plan to address additional threat scenarios. (Business Continuity Plan) 

  

	23.	Use Strong Encryption to protect AT&T’s SPI when stored. (Encryption of SPI at Rest/Storage) 

  

	24.	Limit access to AT&T’s Information, including, but not limited to, paper hard copies, only to authorized persons or systems. (Limit Access to AT&T’s Information Regardless of Form) 

 

	25.	Be compliant with government- and generally known industry-mandated information security standards to the extent applicable to the Services provided by Supplier. (Examples of such standards include, but are not limited
to, the Payment Card Industry-Data Security Standards (PCI-DSS), National Automated Clearing House Associates (NACHA) Rules, and Electronic Data Interchange (EDI) standards, and the information security requirements documented within laws, such as
HIPAA.) (Compliance with Industry and Government Requirements) 

 In the event any such government- or industry-mandated
information security standards cause Amdocs to incur additional costs to be compliant, [**]. 
  

	26.	At no additional charge to AT&T: 

  

	 	a.	Upon AT&T’s request, provide copies of any of AT&T’s Information to AT&T [**]. 

  

	 	b.	Return, or, at AT&T’s option, destroy all of AT&T’s Information, including electronic and hard copies, [**] after the sooner of: 

 

	 	i.	expiration or Termination of the Agreement; 

  

	 	ii.	AT&T’s request for the return of AT&T’s Information; or 

  

	 	iii.	the date when Supplier no longer needs AT&T’s Information to perform Services under the Agreement. 

  

	 	c.	In the event that AT&T approves destruction as an alternative to returning AT&T’s Information, then certify in writing the destruction (e.g., degaussing, overwriting, performing a secure erase, performing a
chip erase, shredding, cutting, punching holes, breaking, etc.) as rendering the AT&T’s Information non-retrievable. 

  

	 	d.	In the event that Supplier needs to retain copies of AT&T’s Information [**] either the expiration or Termination of the Agreement, or AT&T’s request for the return or destruction of AT&T’s
Information, Supplier shall be allowed to retain such copies when elsewhere agreed to in writing with AT&T. Exception: Copies of AT&T’s Information retained as part of a backup-and-recovery, business continuity or disaster
recovery process may be retained for [**] the expiration or Termination of the Agreement without obtaining agreement in writing from AT&T allowing such retention provided that all such copies are destroyed within [**] of creation. (Return of
AT&T’s Information) 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 8
 

 Agreement Number 02026713.A.034 

 

	27.	Unless otherwise instructed by AT&T in writing, when collecting, generating or creating Information for, through or on behalf of AT&T or under the AT&T brand, ensure that such Information shall be
AT&T’s Information and, whenever practicable, label such Information of AT&T as “AT&T Proprietary Information” or, at a minimum, label AT&T’s Information as “Confidential” or “Proprietary”.
Supplier acknowledges that AT&T’s Information shall remain AT&T-owned Information irrespective of labeling or absence thereof. (Confidential or Proprietary Markings) 

 

	28.	Assign unique UserIDs to individual users. (Unique User IDs) 

  

	29.	Have and use a documented UserID Lifecycle Management process including, but not limited to, procedures for approved account creation, timely account removal, and account modification (e.g., changes to privileges, span
of access, functions/roles) for all Information Resources and across all environments (e.g., production, test, development, etc.). Such process shall include review of access privileges and account validity to be performed [**]. (UserID Life Cycle
Management) 

  

	30.	Enforce the rule of least privilege (i.e., limiting access to only the commands and Information Resources necessary to perform authorized functions according to one’s job function). (Rule of Least Privilege)

  

	31.	Limit failed login attempts to no more than [**] successive attempts and lock the user account upon reaching that limit. Access to the user account can be reactivated subsequently through a manual process requiring
verification of the user’s identity or, where such capability exists, can be automatically reactivated after [**] from the last failed login attempt. Exception: Where elsewhere authorized in writing by AT&T, AT&T customer usage
of Customer Facing Systems may be exempted from this requirement. (Limit Failed Logins) 

  

	32.	Terminate interactive sessions, or activate a secure, locking screensaver requiring authentication, after a period of inactivity [**]. Exception: Where elsewhere authorized in writing by AT&T, AT&T
customer usage of Customer Facing Systems may be exempted from this requirement. (Terminate Inactive Interactive Sessions) 

  

	33.	Require password expiration at regular intervals not to exceed [**]. Exception: Where elsewhere authorized in writing by AT&T, AT&T customer usage of Customer Facing Systems may be exempted from this
requirement. (Expire Passwords) 

  

	34.	     

  

	 	a.	Use an authentication method based on the sensitivity of AT&T’s Information. Whenever authentication credentials are stored, Supplier shall protect them using Strong Encryption. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 9
 

 Agreement Number 02026713.A.034 

 

	 	b.	When passwords are used, they shall be complex and shall at least meet the following password construction requirements: 

  

	 	•	 	Be a minimum of six (6) characters in length. 

  

	 	•	 	Contain characters from at least two (2) of these groupings: alphabetic, numeric, and special characters. 

  

	 	•	 	Not be the same as the UserID with which they are associated. 

  

	 	•	 	Passwords must not contain repeating or sequential characters or numbers. 

 Exception:
Where elsewhere authorized in writing by AT&T, AT&T customer usage of Customer Facing Systems may be exempted from the password construction requirements. 
  

	 	c.	Applications housing more sensitive copies of AT&T’s Information, as identified in writing by AT&T, may require an authentication mechanism stronger than passwords. In such case the authentication mechanism
shall be mutually agreed to in advance in writing. Examples of stronger authentication methods include Strong Authentication, passphrases, and biometrics. (Passwords and Construction Rules) 

 

	35.	Use a secure method for the conveyance of authentication credentials (e.g., passwords) and authentication mechanisms (e.g., tokens or smart cards). (Use Secure Method to Convey UserIDs and Passwords) 

Warning Banner 
  

	36.	For AT&T branded products or services or for software developed for AT&T, the Supplier shall display a warning banner on login screens or pages provided by AT&T. (Display Warning Banners) 

Software and Data Integrity 
  

	37.	In environments where antivirus software is commercially available and to the extent practicable, have current antivirus software installed and running to scan for and promptly remove or quarantine viruses and other
malware. (Note: For the avoidance of doubt, this requirement also applies to Mobile and Portable Devices where antivirus software is commercially available.) (Scan and Remove Viruses) 

 

	38.	Separate non-production Information Resources from production Information Resources. (Separate Production and Non-Production Information Resources) 

 

	39.	Have a documented change control process including back out procedures for all production environments. (Software Change Control Process) 

 

	40.	For applications which utilize a database that allows modifications to AT&T’s Information, have database transaction logging features enabled and retain database transaction logs [**]. (Utilize Database
Transaction Logging) 

  

	41.	

  

	 	a.	For all software developed under this Agreement, review such software to find and remediate security vulnerabilities during initial implementation and upon any modifications and updates. 

 

	 	b.	Where technically feasible, for all software used, furnished and/or supported under the Agreement, review such software to find and remediate security vulnerabilities during initial implementation and upon any
modifications and updates. (Review Code for Vulnerabilities) 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 10
 

 Agreement Number 02026713.A.034 

 

	42.	Perform quality assurance testing for the security components (e.g., testing of identification, authentication, and authorization functions), as well as any other activity designed to validate the security architecture,
during initial implementation and upon any modifications and updates. (Quality Assurance Test Security Components) 

Privacy Issues 
  

	43.	Restrict access to any of AT&T’s CPNI and AT&T’s SPI to authorized individuals. (Restrict Access to AT&T CPNI and SPI) 

 

	44.	Not store AT&T’s CPNI and AT&T’s SPI on removable media (e.g., USB flash drives, thumb drives, memory sticks, tapes, CDs, or external hard drives) except: (a) for backup, business continuity,
disaster recovery, and data interchange purposes as allowed and required under contract, and (b) using Strong Encryption. Exception: Where elsewhere authorized in writing by AT&T, AT&T’s CPNI stored for distribution to
AT&T’s customers may be exempted from this requirement. (Control AT&T CPNI and SPI on Removable Media) 

Monitoring and Auditing Controls 
  

	45.	Restrict access to security logs to authorized individuals, and protect security logs from unauthorized modification. (Restrict Access to Security Logs) 

 

	46.	Review, on [**], all security and security-related logs for anomalies and document and resolve all logged security problems in a timely manner. (Review Security Logs and Resolve Security Problems) 

 

	47.	Retain complete and accurate records relating to its performance of its obligations arising out of these Security Requirements and Supplier’s compliance herewith in a format that will permit assessment or audit for
a period of [**], or longer as may be required pursuant to a court order or civil or regulatory proceeding. Notwithstanding the foregoing, Supplier shall only be required to maintain security logs for a [**]. (Retain Records) 

 

	48.	Permit AT&T to conduct an assessment or audit to verify Supplier’s compliance with the contractual obligations in connection with these AT&T Supplier Information Security Requirements. Upon AT&T’s
request for audit, Supplier shall schedule a security audit to commence [**] days from such request. In the event that AT&T, in its sole discretion, deems that a security breach has occurred, which has not been promptly reported to AT&T in
compliance with the Supplier’s Incident Management Process, Supplier shall schedule the audit to commence within [**] of AT&T’s notice requiring an audit. This provision shall not be deemed to, and shall not, limit any more
stringent audit obligations permitting the examination of Supplier’s records contained in the Agreement. (Audit Rights) 

  

	49.	[**] of receipt of the assessment or audit report, provide AT&T a written report outlining the corrective actions that Supplier has implemented or proposes to implement with the schedule and current status of each
corrective action. Supplier shall update this report to AT&T [**] reporting the status of all corrective actions through the date of implementation. Supplier shall implement all corrective actions [**] of Supplier’s receipt of the audit
report. (Remediate Audit Findings) 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 11
 

 Agreement Number 02026713.A.034 

 

 Reporting Violations 

 

	50.	Have and use an Incident Management Process and promptly notify AT&T whenever there is an attack upon, intrusion upon, unauthorized access to, loss of, or other breach of AT&T’s Information Resources at:

  

	 	a.	Asset Protection by telephone at 800-807-4205 from within the US and at 1-908-658-0380 from elsewhere, and 

  

	 	b.	Supplier’s contact within AT&T for Service-related issues. 

 (Maintain and Use Incident
Response Procedures) 
  

	51.	After notifying AT&T whenever there is an attack upon, intrusion upon, unauthorized access to, loss of, or other breach of AT&T’s Information Resources, provide AT&T with regular status updates,
including, but not limited to, actions taken to resolve such incident, at mutually agreed intervals or times for the duration of the incident and, [**] of the closure of the incident, provide AT&T with a written report describing the incident,
actions taken by the Supplier during its response and the Supplier’s plans for future actions to prevent a similar incident from occurring. (Provide AT&T Incident Response Status and Final Resolution) 

Software Development 
  

	52.	RESERVED 

 Security Policies and Procedures 

 

	53.	Ensure that all personnel, subcontractors or representatives performing work under this Agreement are in compliance with these Security Requirements. (All Work to Be In Compliance with SISR) 

 

	54.	RESERVED 

  

	55.	Deactivate or Return all AT&T-owned or -provided access devices (including, but not limited to, SecurID® tokens and/or software) as soon as practicable, but
in no event [**] after the sooner of: (a) expiration or Termination of the Agreement; (b) AT&T’s request for the return of such property; or (c) the date when Supplier no longer need such devices. (Return all AT&T Owned
or Provided Access Devices) 

 Mobile and Portable Devices 

 

					
	56.	 	  a.	  	 Supplier shall not store any of AT&T’s SPI on Mobile and Portable Devices unless AT&T’s SPI stored on such devices is protected by the use
of Strong Encryption.

  

	 	b.	At execution of Amendment 34, Supplier shall use Strong Encryption to protect all of AT&T’s Information stored on Mobile and Portable Devices that are laptop computers. 

 

	 	c.	By [**], for AT&T’s Information that is not SPI, Supplier shall use Strong Encryption to protect all of AT&T’s Information stored on Mobile and Portable Devices that are not laptop computers.

 Supplier reserves the right to discuss with AT&T if issues are encountered during the implementation of Strong
Encryption. 
  

					
	57.	 	  a.	  	 Supplier shall not use Mobile and Portable Devices to receive, transmit or remotely access AT&T’s SPI unless the SPI so transmitted is protected by
the use of Strong Encryption.

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 12
 

 Agreement Number 02026713.A.034 

 

	 	b.	At execution of Amendment 34, Supplier shall use Strong Encryption to protect all of AT&T’s Information received by, transmitted using or remotely accessed by: 

 

	 	i.	Network-aware Mobile and Portable Devices that are laptop computers; and 

  

	 	ii.	All other types of network-aware Mobile and Portable Devices whenever such transmissions take place over any network that is not part of the Supplier’s trusted, Supplier-controlled network. 

 

	 	c.	By [**], for AT&T’s Information that is not SPI, Supplier shall use Strong Encryption to protect all of AT&T’s Information when received by, transmitted using or remotely accessed by Mobile and
Portable Devices that are not laptop computers. 

 Supplier reserves the right to discuss with AT&T if issues are
encountered during the implementation of Strong Encryption. 
  

	58.	     

  

	 	a.	When using network-aware Mobile and Portable Devices that are not laptop computers to access and/or store AT&T’s Information, such devices must be capable of deleting all stored copies of AT&T’s
Information upon receipt over the network of a properly authenticated command. (Note: Such capability is often referred to as a “remote wipe” capability.) 

 

	 	b.	Have documented policies, procedures and standards in place to ensure that the authorized individual who should be in physical control of a network-aware Mobile and Portable Device that is not a laptop computer and that
is storing AT&T’s Information promptly initiates deletion of all AT&T’s Information when the device becomes lost or stolen. 

  

	 	c.	Have documented policies, procedures and standards in place to ensure that Mobile and Portable Devices that are not laptop computers and are not network aware, will automatically delete all stored copies of
AT&T’s Information after no more than three times the number of consecutive failed login attempts documented within Security Requirement 31. 

  

	59.	Have documented policies, procedures and standards in place which ensure that any Mobile and Portable Devices used to access and/or store AT&T’s Information: 

 

	 	a.	Are in the physical possession of authorized individuals; 

  

	 	b.	Are physically secured when not in the physical possession of authorized individuals; or 

  

	 	c.	Have their data storage promptly and securely deleted when not in the physical possession of authorized individuals nor physically secured. 

 

	60.	Prior to allowing access to AT&T’s Information stored on or through the use of Mobile and Portable Devices, Supplier shall have and use a process to ensure that: 

 

	 	a.	The user is authorized for such access; and 

  

	 	b.	The identity of the user has been authenticated. 

  

	61.	Implement a policy that prohibits the use of any Mobile and Portable Devices that are not administered and/or managed by Supplier or AT&T to access and/or store AT&T’s Information. 

 

	62.	Review, [**], the use of, and controls for, all Supplier-administered or -managed Mobile and Portable Devices to ensure that the Mobile and Portable Devices can meet the applicable Security Requirements.

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 13
 

 Agreement Number 02026713.A.034 

 

 Security Gateways 

 

	63.	Require Strong Authentication for administrative and/or management access to Security Gateways, including, but not limited to, any access for the purpose of reviewing log files. 

 

	64.	Have and use documented controls, policies, processes and procedures to ensure that unauthorized users do not have administrative and/or management access to Security Gateways, and that user authorization levels to
administer and manage Security Gateways are appropriate. 

  

	65.	At least [**], ensure that Security Gateway configurations are hardened by selecting a sample of Security Gateways and verifying that each default rule set and set of configuration parameters ensures the following:

  

	 	a.	Internet Protocol (IP) source routing is disabled, 

  

	 	b.	The loopback address is prohibited from entering the internal network, 

  

	 	c.	Anti-spoofing filters are implemented, 

  

	 	d.	Broadcast packets are disallowed from entering the network, 

  

	 	e.	Internet Control Message Protocol (ICMP) redirects are disabled, 

  

	 	f.	All rule sets end with a “DENY ALL” statement, and 

  

	 	g.	Each rule is traceable to a specific business request. 

  

	66.	Ensure that monitoring tools are used to validate that all aspects of Security Gateways (e.g., hardware, firmware, and software) are continuously operational. 

 

	67.	Ensure that all Security Gateways are configured and implemented such that all non-operational Security Gateways shall deny all access. 

Wireless Networking 
  

	68.	When using radio frequency (RF) based wireless networking technologies to perform or support Services for AT&T, ensure that all of AT&T’s Information transmitted is protected by the use of appropriate
encryption technologies sufficient to protect the confidentiality of AT&T’s Information; provided, however, that in any event such encryption shall use no less than key lengths of 256-bits for symmetric encryption and 256-bits for
asymmetric encryption. Exception: The use of RF-based wireless headsets, keyboards, microphones, and pointing devices, such as mice, touch pads, and digital drawing tablets, is excluded from this requirement. 

Connectivity Requirements 
  

	69.	 In the event that a data connection agreement, such as a “Master Data Connection Agreement,” “Data Connection Agreement,” and/or
“Connection Supplement” (“DCA”) exists between the Parties, and incorporates the Agreement by reference, or is otherwise integrated with, or used to govern the Parties’ connectivity obligations under, this
Agreement, agree that any information security requirements incorporated within such DCA are hereby superseded by the terms of these Security Requirements, effective as of the date these Security Requirements become effective under

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 14
 

 Agreement Number 02026713.A.034 

 

	 	
the Agreement, and the terms of such DCA are amended to require that the Security Requirements and not the information security requirements incorporated within the DCA are controlling in the
Agreement (as well as any agreements subordinate to the Agreement). Notwithstanding the foregoing, the DCA remains in full force and effect for all other agreements between the Parties to which it applies. 

 

	70.	In the event that Supplier has, or will be provided, connectivity to AT&T’s or AT&T’s customers’ Nonpublic Information Resources in conjunction with this Agreement, then in addition to the
foregoing: 

  

	 	a.	Use only the mutually agreed upon facilities and connection methodologies to interconnect AT&T’s and AT&T’s customers’ Nonpublic Information Resources with Supplier’s Information Resources.

  

	 	b.	NOT establish interconnection to AT&T’s and AT&T’s customers’ Nonpublic Information Resources without the prior consent of AT&T. 

 

	 	c.	Provide AT&T access to any applicable Supplier facilities during normal business hours for the maintenance and support of any equipment (e.g., router) provided by AT&T under the Agreement for connectivity to
AT&T’s and AT&T’s customers’ Nonpublic Information Resources. 

  

	 	d.	Use any equipment provided by AT&T under this Agreement for connectivity to AT&T’s and AT&T’s customers’ Nonpublic Information Resources only for the furnishing of those Services or functions
explicitly defined in the Agreement. 

  

	 	e.	If the agreed upon connectivity methodology requires that Supplier implement a Security Gateway, maintain logs of all sessions using such Security Gateway. These session logs must include sufficiently detailed
information to identify the end user or application, origination IP address, destination IP address, ports/service protocols used and duration of access. These session logs must be retained for a [**]. 

 

	71.	In the event that Supplier has, or will be provided, connectivity to AT&T’s or AT&T’s customers’ Nonpublic Information Resources in conjunction with this Agreement, in addition to other rights set
forth herein, permit AT&T to: 

  

	 	a.	Gather information relating to access, including Supplier’s access to, AT&T’s and AT&T’s customers’ Nonpublic Information Resources. This information may be collected, retained and analyzed
by AT&T to identify potential security risks without further notice. This information may include trace files, statistics, network addresses, and the actual data or screens accessed or transferred. 

 

	 	b.	Immediately suspend or terminate any interconnection to AT&T’s and AT&T’s customers’ Nonpublic Information Resources if AT&T, in its sole discretion, believes there has been a breach of
security or unauthorized access to or misuse of AT&T data facilities or Information. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 15
 

 Agreement Number 02026713.A.034 

 

	2.	Section 6.5, “Background Check/Drug Screening”, is deleted in its entirety and replaced with, Section 6.5, “Background Check/Drug Screening” as follows: 

Background Check/Drug Screening [**] With respect to any Amdocs Personnel providing Services Amdocs shall comply with the requirements
of Appendix 6.5 (Background Checks/Drug Screening). 
 The terms and conditions of Agreement No. 02026713 as previously amended in all other respects
remain unmodified and in full force and effect. 
 IN WITNESS WHEREOF, the Parties have caused this Amendment to Agreement No. 02026713 to be
executed, which may be in duplicate counterparts, each of which will be deemed to be an original but all of which together shall constitute only one instrument, as of the date the last Party signs. 

 

									
	Amdocs, Inc.	 		 	AT&T Services, Inc.
					
	By:	 	 /s/ Steve Pennington
	 		 	By:	 	 /s/ Deidre D. Byer

	Name:	 	 Steve Pennington
	 		 	Name:	 	 Deidre D. Byer

	Title	 	 Director of Operations
	 		 	Title	 	 Sr. Contract Manager –

Global Supply Chain

	Date:	 	 12-29-2014
	 		 	Date:	 	 12/29/2014

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
  

 16
 

 Agreement Number 02026713.A.034 

 

 Appendix 6.5 

Background Check/Drug Screening 

Confidential materials omitted and filed separately with the Securities and Exchange Commission. A total of two pages were omitted. [**]. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 17 

 Amendment 

No. 02026713.A.035 
 Between

 Amdocs, Inc. 
 And 

AT&T Services, Inc. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written agreement by the contracting Parties. 
 1 

 Agreement Number 02026713.A.035 

 

 AMENDMENT NO. 35 

AGREEMENT NO. 02026713 
 This Amendment
No. 35, effective on the date when signed by the last Party (“Effective Date”), and amending Agreement No. 02026713, is by and between Amdocs, Inc., a Delaware corporation (“Supplier” or “Amdocs”), and
AT&T Services, Inc., a Delaware corporation (“AT&T”), each of which may be referred to in the singular as a “Party” or in the plural as the “Parties”. 

WITNESSETH 
 WHEREAS, AT&T and
Amdocs are parties to that certain Agreement No. 02026713 for Software and Professional Services, dated as of August 7, 2003, (as previously amended, the “Agreement”) and 

WHEREAS, AT&T and Supplier now desire to further amend the Agreement; 

NOW, THEREFORE, in consideration of the premises and the covenants hereinafter contained, the Parties hereto agree to changes to the Agreement as
follows: 
  

	1.	For purposes of extending the term of the Agreement, Section 3.32, “Term of Agreement”, is deleted in its entirety and replaced with the following: 

3.32 Term of Agreement 

This Agreement with an Effective Date of August 7, 2003, shall remain in effect for a term ending on June 30, 2015, unless earlier
Terminated or Canceled as provided in this Agreement. The Parties may extend the term of this Agreement by agreement in writing. 
 The terms and conditions
of Agreement No. 02026713 as previously amended in all other respects remain unmodified and in full force and effect. 
 IN WITNESS WHEREOF, the
Parties have caused this Amendment to Agreement No. 02026713 to be executed, which may be in duplicate counterparts, each of which will be deemed to be an original but all of which together shall constitute only one instrument, as of the date
the last Party signs. 
  

									
	Amdocs, Inc.	 		 	AT&T Services, Inc.
					
	By:	 	 /s/ Steven Pennington
	 		 	By:	 	 /s/ Deirdre D. Byer

	Name:	 	 Steven Pennington
	 		 	Name:	 	 Deidre D. Byer

	Title	 	 Director of Operations
	 		 	Title	 	 Sr. Contract Manager –

Global Supply Chain

	Date:	 	 3/31/2015
	 		 	Date:	 	 3/31/2015

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 2 

 Amendment 

No. 02026713.A.036 
 Between

 Amdocs, Inc. 
 And 

AT&T Services, Inc. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written agreement by the contracting Parties. 
 1 

 Agreement Number 02026713.A.036 

AMENDMENT NO. 36 

AGREEMENT NO. 02026713 
 This Amendment
No. 36, effective on the date when signed by the last Party (“Effective Date”), and amending Agreement No. 02026713, is by and between Amdocs, Inc., a Delaware corporation (“Supplier” or “Amdocs”), and
AT&T Services, Inc., a Delaware corporation (“AT&T”), each of which may be referred to in the singular as a “Party” or in the plural as the “Parties”. 

WITNESSETH 
 WHEREAS, AT&T and
Amdocs are parties to that certain Agreement No. 02026713 for Software and Professional Services, dated as of August 7, 2003, (as previously amended, the “Agreement”) and 

WHEREAS, AT&T and Supplier now desire to further amend the Agreement; 

NOW, THEREFORE, in consideration of the premises and the covenants hereinafter contained, the Parties hereto agree to changes to the Agreement as
follows: 
  

	1.	For purposes of extending the term of the Agreement, Section 3.32, “Term of Agreement”, is deleted in its entirety and replaced with the following: 

3.32 Term of Agreement 

This Agreement with an Effective Date of August 7, 2003, shall remain in effect for a term ending on July 31, 2015, unless earlier
Terminated or Canceled as provided in this Agreement. The Parties may extend the term of this Agreement by agreement in writing. 
  

	2.	Appendix 1.2(2), “IT Professional Service Price(s)”, is hereby deleted and replaced with Appendix 1.2(2), “IT Professional Service Price(s)”, as attached. 

The terms and conditions of Agreement No. 02026713 as previously amended in all other respects remain unmodified and in full force and effect. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 2 

 Agreement Number 02026713.A.036 

 

 IN WITNESS WHEREOF, the Parties have caused this Amendment to Agreement No. 02026713 to be
executed, which may be in duplicate counterparts, each of which will be deemed to be an original but all of which together shall constitute only one instrument, as of the date the last Party signs. 

 

									
	Amdocs, Inc.	 		 	AT&T Services, Inc.
					
	By:	 	 /s/ Ioannis Tinis
	 		 	By:	 	 /s/ Deidre D. Byer

	Name:	 	 Ioannis Tinis
	 		 	Name:	 	 Deidre D. Byer

	Title	 	 Director of Operations
	 		 	Title	 	 Sr. Contract Manager –

Global Supply Chain

	Date:	 	 6/30/2015
	 		 	Date:	 	 6/30/2015

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 3 

 Agreement Number 02026713.A.036 

 

 Appendix 1.2(2) 

IT Professional Service Price(s) 
  

	A.	Job Classification Descriptions 

 Senior Project Manager/Senior Team Lead:
[**] or more years’ experience in information technology with at least [**] years in a Project Manager or Team Lead role. Proven ability to manage and lead projects of a large scale. Project Management Certification or Degree. Leadership and
communication skills. 
 Project Manager/Team Leader: [**] or more years’ experience in information technology with at
least [**] years in a Project Manager or Team Lead role. Supplier Certified as a specialist in at least two applications or systems areas relevant to the project. Demonstrated leadership experience, and solid communication skills; able to work
independently and manage other employees. 
 Senior Programmer /Analyst: [**] or more years’ programming or equivalent
technical experience; good communication skills; application design experience. Supplier Certified as a specialist in at least one application or system relevant to the project. Ability to create clear, concise and detailed design documents. 

Programmer Analyst: [**] or more years’ experience, program design and development experience; knowledge of applications or
systems relevant to the project; ability to write documentation and conduct unit and system level tests. 
 Entry Level
Programmer: Entry Level, typically with a university degree or equivalent qualifications, with one year or less programming experience, knowledgeable of structured programming and computer science principles require to meet the needs of
AT&T. 
 Senior System Architect: The Senior System Architect is responsible for the same activities as the Technical
Architect but has a broader scope of responsibilities and more in-depth business and technical knowledge. Responsible for multiple projects or large complex projects with cross-functional teams and business processes. Demonstrate expert knowledge in
multiple technical and business functional areas as well as performing a larger leadership role in the organization. Apply broad in-depth business and technical knowledge to establish technical direction and priorities. Resolve and work on issues
across multiple functional areas. Effectively monitor and take action to ensure coordination and effectiveness of all components and activities and decide on issues requiring escalation. Incumbents understand the system flow for a project throughout
an entire functional area (e.g., Billing, Customer Care) not just a subsystem area. They have medium to long range planning responsibilities. 

System Architect: Responsible for providing technical system solutions and determining overall design direction. Provide
technical leadership and are responsible for the technical integrity within a subsystem or application. Also provide technical expertise to generate 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 4 

 Agreement Number 02026713.A.036 

 

 
maintainable, quality solutions. Includes documenting system requirements, creating application designs, validating high level designs to ensure accuracy and completeness against the business
requirements and programming the solutions. Attend project meetings when technical advice is needed and communicate the project design to other architects. May resolve design issues and develop strategies to make ongoing improvements that support
system flexibility and performance. Assess the technical feasibility of new technologies to enable integration into existing processes. 

Senior Data Base Administrator: Responsible for high level database administration and related tasks on multiple DMBS platforms.
Participates in the evaluation, selection and implementation of appropriate DBMS based on client requirements. May create logical model and transform logical design into efficient physical databases, performing data normalization/denormalization,
and considering volume, capacity and requirements for performance, data conversion, purge/archive and operation viability. Responsible for implementing database architecture strategies. Manage database administration projects that may span across
parts of the enterprise and ensure that deliverables are completed on time. Strives to drive overall costs lower for database performance, data conversion, and administration services. Acts as consultant to clients and other IT organizations on
database-related issues. Leads efforts to implement standards across the enterprise for ease of support and recovery in relation to database administration (database security, disaster recovery, scripts, and database documentation). Evaluates and
deploys new technology to improve database efficiency and recoverability. Performs advanced problem determination and recoveries. Mentors Database Administrators and Associate Analysts. 

Database Administrator: Responsible for database administration and related tasks on one or more DMBS platforms. Under the
guidance of the Sr. DBA, may create logical model and transform logical design into efficient physical databases, performing data normalization/denormalization, and considering volume, capacity and requirements for performance, data conversion,
purge/archive and operation viability. Responsible for meeting assigned deliverables. Responsible for assisting in driving overall costs lower for database performance, data conversion, and administration services. Works with clients and other IT
organizations to ensure positive impact. May consult with clients on database admin-related issues and design considerations. Implements standards across the enterprise for ease of support and recovery in relation to database administration
(database security, disaster recovery, scripts, and database documentation standards). 
  

	B.	Rates before July 1, 2015 

  

	 	i.	The fixed price for Software Development work [**] 

  

	 	ii.	Mobility Software Development 

 The [**] with the following exception: 

 

	 	•	 	[**]. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 5 

 Agreement Number 02026713.A.036 

 

	 	iii.	Production Support 

 [**]. 

 

	 	iv.	Requirements/Consulting 

 [**]. 

 

	 	v.	Testing 

 [**]. This rate is conditional upon maintaining the current level or volume of
testing services provided to AT&T upon signature of this Amendment. [**]. 
  

	C.	Rates on and after July 1, 2015 

  

	 	i.	All rates defined below are based on a fixed price monthly amount of [**] and are applicable to new Work Orders, additions of scope to existing Work Orders, and extensions of existing Work Orders executed between
the Parties against this Master Services Agreement after the Effective Date of the Letter of Agreement No. 20150505.066.C. 

  

	 	ii.	Consulting Services 

 The fixed price for Consulting Services is a blended rate of [**].

  

	 	iii.	Non-Consulting and Requirements Services 

 The fixed price for Non-Consulting and
Requirements Services is a blended rate of [**]. 
  

	 	iv.	Production Support Services 

 The fixed price for Production Support Services is a
blended rate of [**]. 
  

	 	v.	Development Services 

 The fixed price for Development Services is a blended rate of
[**]. 
  

	 	vi.	Testing Services 

 The fixed price for Testing Services is a blended rate of [**]. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 6 

 Amendment 

No. 02026713.A.037 
 Between

 Amdocs, Inc. 
 And 

AT&T Services, Inc. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written agreement by the contracting Parties. 
 1 

 Agreement Number 02026713.A.037 

AMENDMENT NO. 37 

AGREEMENT NO. 02026713 
 This Amendment
No. 37, effective on the date when signed by the last Party (“Effective Date”), and amending Agreement No. 02026713, is by and between Amdocs, Inc., a Delaware corporation (“Supplier” or “Amdocs”), and
AT&T Services, Inc., a Delaware corporation (“AT&T”), each of which may be referred to in the singular as a “Party” or in the plural as the “Parties”. 

WITNESSETH 
 WHEREAS, AT&T and
Amdocs are parties to that certain Agreement No. 02026713 for Software and Professional Services, dated as of August 7, 2003, (as previously amended, the “Agreement”) and 

WHEREAS, AT&T and Supplier now desire to further amend the Agreement; 

NOW, THEREFORE, in consideration of the premises and the covenants hereinafter contained, the Parties hereto agree to changes to the Agreement as
follows: 
  

	1.	For purposes of extending the term of the Agreement, Section 3.32, “Term of Agreement”, is deleted in its entirety and replaced with the following: 

3.32 Term of Agreement 

This Agreement with an Effective Date of August 7, 2003, shall remain in effect for a term ending on September 30, 2015, unless
earlier Terminated or Canceled as provided in this Agreement. The Parties may extend the term of this Agreement by agreement in writing. 
 The terms and
conditions of Agreement No. 02026713 as previously amended in all other respects remain unmodified and in full force and effect. 
 IN WITNESS
WHEREOF, the Parties have caused this Amendment to Agreement No. 02026713 to be executed, which may be in duplicate counterparts, each of which will be deemed to be an original but all of which together shall constitute only one instrument,
as of the date the last Party signs. 
  

									
	Amdocs, Inc.	 		 	AT&T Services, Inc.
					
	By:	 	 /s/ Thomas C. Drury
	 		 	By:	 	 /s/ Deidre D. Byer

	Name:	 	 Thomas C. Drury
	 		 	Name:	 	 Deidre D. Byer

	Title	 	 President
	 		 	Title	 	 Sr. Contract Manager –

Global Supply Chain

	Date:	 	 7/29/2015
	 		 	Date:	 	 7/29/2015

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 2 

 Amendment 

No. 02026713.A.038 
 Between

 Amdocs, Inc. 
 And 

AT&T Services, Inc. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written agreement by the contracting Parties. 
 1 

 Agreement Number 02026713.A.038 

AMENDMENT NO. 38 

AGREEMENT NO. 02026713 
 This Amendment
No. 38, effective on the date when signed by the last Party (“Effective Date”), and amending Agreement No. 02026713, is by and between Amdocs, Inc., a Delaware corporation (“Supplier” or “Amdocs”), and
AT&T Services, Inc., a Delaware corporation (“AT&T”), each of which may be referred to in the singular as a “Party” or in the plural as the “Parties”. 

WITNESSETH 
 WHEREAS, AT&T and
Amdocs are parties to that certain Agreement No. 02026713 for Software and Professional Services, dated as of August 7, 2003, (as previously amended, the “Agreement”) and 

WHEREAS, AT&T and Supplier now desire to further amend the Agreement; 

NOW, THEREFORE, in consideration of the premises and the covenants hereinafter contained, the Parties hereto agree to changes to the Agreement as
follows: 
  

	1.	For purposes of extending the term of the Agreement, Section 3.32, “Term of Agreement”, is deleted in its entirety and replaced with the following: 

3.32 Term of Agreement 

This Agreement with an Effective Date of August 7, 2003, shall remain in effect for a term ending on November 30, 2015, unless
earlier Terminated or Canceled as provided in this Agreement. The Parties may extend the term of this Agreement by agreement in writing. 
 The terms and
conditions of Agreement No. 02026713 as previously amended in all other respects remain unmodified and in full force and effect. 
 IN WITNESS
WHEREOF, the Parties have caused this Amendment to Agreement No. 02026713 to be executed, which may be in duplicate counterparts, each of which will be deemed to be an original but all of which together shall constitute only one instrument,
as of the date the last Party signs. 
  

									
	Amdocs, Inc.	 		 	AT&T Services, Inc.
					
	By:	 	 /s/ Ioannis Tinis
	 		 	By:	 	 /s/ Steve Wehde

	Name:	 	 Ioannis Tinis
	 		 	Name:	 	 Steve Wehde

	Title	 	 Director of Operations
	 		 	Title	 	 Sr. Contract Manager –

Global Supply Chain

	Date:	 	 9/29/2015
	 		 	Date:	 	 September 29, 2015

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written Agreement by the contracting Parties. 
 2 

 Amendment 

No. 02026713.A.039 
 Between

 Amdocs, Inc. 
 And 

AT&T Services, Inc. 

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written agreement by the contracting Parties. 
 1 

 AMENDMENT NO. 39 

AGREEMENT NO. 02026713 
 This Amendment
No. 39, effective on the date when signed by the last Party (“Effective Date”), and amending Agreement No. 02026713, is by and between Amdocs, Inc., a Delaware corporation (“Supplier” or “Amdocs”), and
AT&T Services, Inc., a Delaware corporation (“AT&T”), each of which may be referred to in the singular as a “Party” or in the plural as the “Parties”. 

WITNESSETH 
 WHEREAS, AT&T and
Amdocs are parties to that certain Agreement No. 02026713 for Software and Professional Services, dated as of August 7, 2003, (as previously amended, the “Agreement”) and 

WHEREAS, AT&T and Supplier now desire to further amend the Agreement; 

NOW, THEREFORE, in consideration of the premises and the covenants hereinafter contained, the Parties hereto agree to changes to the Agreement as
follows: 
  

	1.	For purposes of extending the term of the Agreement, Section 3.32, “Term of Agreement”, is deleted in its entirety and replaced with the following: 

3.32 Term of Agreement 

This Agreement with an Effective Date of August 7, 2003, shall remain in effect for a term ending on January 31, 2016, unless earlier
Terminated or Canceled as provided in this Agreement. The Parties may extend the term of this Agreement by agreement in writing. 
 The terms and conditions
of Agreement No. 02026713 as previously amended in all other respects remain unmodified and in full force and effect. 
 IN WITNESS WHEREOF, the
Parties have caused this Amendment to Agreement No. 02026713 to be executed, which may be in duplicate counterparts, each of which will be deemed to be an original but all of which together shall constitute only one instrument, as of the date
the last Party signs. 
  

									
	Amdocs, Inc.	 		 	AT&T Services, Inc.
					
	By:	 	 /s/ Todd Cohen
	 		 	By:	 	 /s/ Steve Wehde

	Name:	 	 Todd Cohen
	 		 	Name:	 	 Steve Wehde

	Title	 	 Treasurer
	 		 	Title	 	 Sr. Contract Manager –

Global Supply Chain

	Date:	 	 11-30-2015
	 		 	Date:	 	 November 30, 2015

  
 Proprietary
Information 
 The information contained in this Agreement is not for use or disclosure outside AT&T, Supplier, their Affiliates and
their third party representatives, except under written agreement by the contracting Parties. 
 2exhibit_4-6.htm

EXHIBIT 4.6

 

 

THIS WARRANT AND THE COMMON SHARES ISSUABLE UPON EXERCISE OF THIS WARRANT HAVE BEEN ACQUIRED FOR INVESTMENT PURPOSES ONLY AND MAY NOT BE TRANSFERRED UNTIL (i) A REGISTRATION STATEMENT UNDER THE SECURITIES ACT OF 1933, AS AMENDED (THE “1933 ACT”) SHALL HAVE BECOME EFFECTIVE WITH RESPECT THERETO OR (ii) AN EXEMPTION FROM SUCH REGISTRATION IS AVAILABLE.  THIS LEGEND SHALL BE ENDORSED UPON ANY WARRANT ISSUED IN EXCHANGE FOR THIS WARRANT OR ANY COMMON SHARES ISSUABLE UPON EXERCISE OF THIS WARRANT.

 

WARRANT TO PURCHASE COMMON SHARES

 

OF

 

TORCHLIGHT ENERGY RESOURCES INC.

 

SEPTEMBER 28, 2015

 

W-____________

 

This is to Certify That, FOR VALUE RECEIVED, ______________, or his assigns (“Holder”), is entitled to purchase, subject to the provisions of this Warrant, from Torchlight Energy Resources Inc., a Nevada corporation (the “Company”), ________ shares of fully paid, validly issued and nonassessable shares of common stock of the Company (“Common Shares”) at a price of $2.23 per share. The number of Common Shares to be received upon the exercise of this Warrant and the price to be paid for each share of Common Shares may be adjusted from time to time as hereinafter set forth.  The Common Shares deliverable upon such exercise, and as adjusted from time to time, are hereinafter sometimes referred to as “Warrant Shares” and the exercise price of a share of Common Shares in effect at any time and as adjusted from time to time is hereinafter sometimes referred to as the “Exercise Price.”

 

(a)           EXERCISE OF WARRANT.  This Warrant may be exercised in whole or in part at any time or from time to time from the date hereof up to 5:00 p.m., Central Standard Time on  September 28, 2020 (the “Exercise Period”); provided, however, that if such day is a day on which banking institutions in the State of Texas are authorized by law to close, then on the next succeeding day which shall not be such a day.

 

(1)            This Warrant may be exercised by presentation and surrender hereof to the Company at its principal office with the Purchase Form annexed hereto (the “Purchase Form”) duly executed and accompanied by payment by wire transfer or certified funds of the Exercise Price for the number of Warrant Shares specified in such Purchase Form.

 

(2)           The Holder shall pay the Exercise Price in immediately available funds.

 

(3)           As soon as practicable after each such exercise of this Warrant, the Company shall issue and deliver to the Holder a certificate or certificates for the Warrant Shares issuable upon such exercise, registered in the name of the Holder or its designee.  If this Warrant should be exercised in part only, the Company shall, upon surrender of this Warrant for cancellation, execute and deliver a new Warrant evidencing the rights of the Holder thereof to purchase the balance of the Warrant Shares purchasable hereunder.  As of the end of business on the date of receipt by the Company of this Warrant at its office in proper form for exercise, the Holder (or its designee) shall be deemed to be the holder of record of Common Shares issuable upon such exercise, notwithstanding that the stock transfer books of the Company shall then be closed or that certificates representing such shares shall not then be physically delivered to the Holder.

 

 

  

1

  

 

(b)           EFFECTIVE TIME OF EXERCISE.  Each exercise of this Warrant shall be deemed to have been effected immediately prior to the close of business on the day on which the Purchase Form has been delivered to the Company (the “Exercise Date”) as provided in Section (a), accompanied by payment by wire transfer or certified funds of the Exercise Price for the number of Warrant Shares specified in such Purchase Form.  At such time, the person or persons in whose name or names any certificates for Warrant Shares shall be issuable upon such exercise as provided in Section (c) below shall be deemed to have become the holder or holders of record of the Warrant Shares represented by such certificates.

(c)           DELIVERY TO HOLDER.

 

(1)           As soon as practicable after the exercise of this Warrant in whole or in part, the Company will cause to be issued in the name of, and delivered to, the Holder, or as such Holder (upon payment by such Holder of any applicable transfer taxes) may direct:

(i)           a certificate or certificates for the number of shares of Warrant Shares to which such Holder shall be entitled, and

 

(ii)           in case such exercise is in part only, a new warrant or warrants (dated the date hereof) of like tenor, calling in the aggregate on the face or faces thereof for the number of shares of Warrant Shares equal (giving effect to any adjustment therein) to the number of such shares called for on the face of this Warrant minus the number of such shares purchased by the Holder upon such exercise.

 

(2)           To the extent permitted by law, the Company’s obligations to issue and deliver Warrant Shares in accordance with the terms hereof are absolute and unconditional, irrespective of any action or inaction by the Holder to enforce the same, any waiver or consent with respect to any provision hereof, the recovery of any judgment against any person or entity or any action to enforce the same, or any setoff, counterclaim, recoupment, limitation or termination, or any breach or alleged breach by the Holder or any other person or entity of any obligation to the Company or any violation or alleged violation of law by the Holder or any other person or entity, and irrespective of any other circumstance that might otherwise limit such obligation of the Company to the Holder in connection with the issuance of Warrant Shares. Nothing herein shall limit the Holder’s right to pursue any other remedies available to it hereunder, at law or in equity including, without limitation, a decree of specific performance and/or injunctive relief with respect to the Company’s failure to timely deliver certificates representing Warrant Shares upon exercise of the Warrant as required pursuant to the terms hereof.

  

2

  

(d)           RESERVATION OF SHARES.  The Company shall at all times reserve for issuance and/or delivery upon exercise of this Warrant such number of Common Shares (as adjusted pursuant to the terms hereof) as shall be required for issuance and delivery upon exercise of this Warrant. The Company covenants that all Warrant Shares so issuable and deliverable shall, upon issuance and the payment of the applicable Exercise Price in accordance with the terms hereof, be duly and validly authorized, issued and fully paid and nonassessable. The Company will take all such action as may be reasonably necessary to assure that such Warrant Shares may be issued as provided herein without violation of any applicable law or regulation, or of any requirements of any securities exchange or automated quotation system upon which Common Shares of the Company may be listed.

 

(e)           FRACTIONAL SHARES.  No fractional shares or scrips representing fractional shares shall be issued upon the exercise of this Warrant.  With respect to any fraction of a share called for upon any exercise hereof, the Company shall pay to the Holder an amount in cash equal to such fraction multiplied by the fair market value of a Common Share, based on the closing sale price on the Exercise Date.

 

(f)           LOSS OR DESTRUCTION OF WARRANT.  Upon receipt by the Company of evidence satisfactory to it of the loss, theft, destruction or mutilation of this Warrant, and (in the case of loss, theft or destruction) of reasonably satisfactory indemnification, and upon surrender and cancellation of this Warrant, if mutilated, the Company will execute and deliver a new Warrant of like tenor and date.

 

(g)             RIGHTS OF THE HOLDER.  The Holder shall not, by virtue hereof, be entitled to any rights of a shareholder in the Company, either at law or equity, and the rights of the Holder are limited to those expressed in this Warrant and are not enforceable against the Company except to the extent set forth herein.

 

(h)             CERTAIN ADJUSTMENTS.  The Exercise Price and number of Warrant Shares issuable upon exercise of this Warrant are subject to adjustment from time to time as set forth in this Section h.

 

(1)           Stock Dividends and Splits. If the Company, at any time while this Warrant is outstanding, (i) pays a stock dividend on its Common Shares or otherwise makes a distribution on any class of capital stock that is payable in shares of Common Shares, (ii) subdivides its outstanding Common Shares into a larger number of shares, or (iii) combines its outstanding Common Shares into a smaller number of shares, then in each such case the Exercise Price shall be multiplied by a fraction, the numerator of which shall be the number of shares of Common Shares outstanding immediately before such event and the denominator of which shall be the number of shares of Common Shares outstanding immediately after such event. Any adjustment made pursuant to this subparagraph (1) shall become effective immediately after the record date for the determination of stockholders entitled to receive such dividend or distribution, and any adjustment pursuant to clause (ii) or (iii) of this subparagraph (1) shall become effective immediately after the effective date of such subdivision or combination.

 

 

  

3

  

 

(2)           Pro Rata Distributions. If the Company, at any time while this Warrant is outstanding, distributes to all holders of Common Shares for no consideration (i) any security (other than a distribution of Common Shares covered by the preceding paragraph) or (ii) rights or warrants to subscribe for or purchase any security, or (iii) any other asset (in each case, “Distributed Property”), then, upon any exercise of this Warrant that occurs after the record date fixed for determination of stockholders entitled to receive such distribution, the Holder shall be entitled to receive, in addition to the Warrant Shares otherwise issuable upon such exercise (if applicable), the Distributed Property that such Holder would have been entitled to receive in respect of such number of Warrant Shares had the Holder been the record holder of such Warrant Shares immediately prior to such record date without regard to any limitation on exercise contained therein.

 

(3)           Fundamental Transactions. If, at any time while this Warrant is outstanding (i) the Company effects any merger or consolidation of the Company with or into another entity, in which the Company is not the survivor or the stockholders of the Company immediately prior to such merger or consolidation do not own, directly or indirectly, at least 50% of the voting securities of the surviving entity, (ii) the Company effects any sale of all or substantially all of its assets or a majority of its Common Shares is acquired by a third party, in each case, in one or a series of related transactions, (iii) any tender offer or exchange offer (whether by the Company or another entity or person) is completed pursuant to which all or substantially all of the holders of Common Shares are permitted to tender or exchange their shares for other securities, cash or property, or (iv) the Company effects any reorganization or reclassification of Common Shares or any compulsory share exchange pursuant to which Common Shares are effectively converted into or exchanged for other securities, cash or property (other than as a result of a subdivision or combination of shares of Common Shares covered by Section h(1) above) (in any such case, a “Fundamental Transaction”), then the Holder shall have the right thereafter to receive, upon exercise of this Warrant, the same amount and kind of securities, cash or property as it would have been entitled to receive upon the occurrence of such Fundamental Transaction if it had been, immediately prior to such Fundamental Transaction, the holder of the number of Warrant Shares then issuable upon exercise in full of this Warrant without regard to any limitations on exercise contained herein (the “Alternate Consideration”). The Company shall not effect any such Fundamental Transaction unless prior to or simultaneously with the consummation thereof, any successor to the Company, surviving entity or the corporation purchasing or otherwise acquiring such assets shall assume the obligation to deliver to the Holder such Alternate Consideration as, in accordance with the foregoing provisions, the Holder may be entitled to receive, and the other obligations under this Warrant. The provisions of this subparagraph (3) shall similarly apply to subsequent transactions analogous of a Fundamental Transaction type.

 

(4)           Number of Warrant Shares. Simultaneously with any adjustment to the Exercise Price pursuant to Section h(1), the number of Warrant Shares that may be purchased upon exercise of this Warrant shall be increased or decreased proportionately, so that after such adjustment the aggregate Exercise Price payable hereunder for the increased or decreased number of Warrant Shares shall be the same as the aggregate Exercise Price in effect immediately prior to such adjustment.

 

(5)           Notice of Adjustments. Upon the occurrence of each adjustment pursuant to this Section h, the Company at its expense will, at the written request of the Holder, promptly compute such adjustment, in good faith, in accordance with the terms of this Warrant and prepare a certificate setting forth such adjustment, including a statement of the adjusted Exercise Price and adjusted number or type of Warrant Shares or other securities issuable upon exercise of this Warrant (as applicable), describing the transactions giving rise to such adjustments and showing in detail the facts upon which such adjustment is based. Upon written request, the Company will promptly deliver a copy of each such certificate to the Holder and to the Company’s transfer agent.

 

 

  

4

  

 

(6)           Notices to Warrant Holders.  So long as this Warrant shall be outstanding, (i) if the Company shall pay any dividend or make any distribution of cash, securities or other property in respect of its  Common Shares, (ii) if the Company shall offer to the holders of Common Shares for subscription or purchase by them any share of any class or any other rights or (iii) if any capital reorganization of the Company, reclassification of the capital stock of the Company, consolidation or merger of the Company with or into another corporation, sale, lease or transfer of all or substantially all of the property and assets of the Company to another corporation, or if the Company authorizes or approves, enters into any agreement contemplating or solicits stockholder approval for any Fundamental Transaction, or voluntary or involuntary dissolution, liquidation or winding up of the Company shall be effected, then in any such case, the Company shall cause to be mailed to the Holder, at least ten (10) days prior the date specified in (x) or (y) below, as the case may be, a notice containing a brief description of the proposed action and stating the date on which (x) a record is to be taken for the purpose of such dividend, distribution or rights, or (y) such reclassification, reorganization, consolidation, merger, conveyance, lease, Fundamental Transaction, sales or issuances dissolution, liquidation or winding up is to take place and the date, if any is to be fixed, as of which the holders of Common Shares or other securities shall receive cash or other property deliverable upon such reclassification, reorganization, consolidation, merger, conveyance, lease, Fundamental Transaction, dissolution, liquidation or winding up.

 

(i)             TRANSFER RESTRICTIONS.

 

(1)           Neither the Warrant nor the Warrant Shares have been registered under the 1933 Act.  The Holder, by acceptance hereof, represents that it is acquiring this Warrant to be issued to it for its own account and not with a view to the distribution thereof, and agrees not to sell, transfer, pledge or hypothecate this Warrant, any purchase rights evidenced hereby or any Warrant Shares unless a registration statement is effective for this Warrant or the Warrant Shares under the 1933 Act, or in the opinion of such Holder’s counsel reasonably satisfactory to the Company, a copy of which opinion shall be delivered to the Company, such registration is not required as some other exemption from the registration requirement of the 1933 Act and applicable laws is available.

 

(2)           Subject to the provisions of this Section, each certificate for Warrant Shares shall be stamped or otherwise imprinted with a legend in substantially the following form:

THE SECURITIES REPRESENTED BY THIS CERTIFICATE HAVE NOT BEEN REGISTERED UNDER THE SECURITIES ACT OF 1933, AS AMENDED (THE “SECURITIES ACT”), OR APPLICABLE STATE SECURITIES LAWS.  THE SECURITIES MAY NOT BE OFFERED FOR SALE, SOLD, TRANSFERRED OR ASSIGNED (I) IN THE ABSENCE OF (A) AN EFFECTIVE REGISTRATION STATEMENT FOR THE SECURITIES UNDER THE SECURITIES ACT OR (B) AN AVAILABLE EXEMPTION FROM, OR IN A TRANSACTION NOT SUBJECT TO, THE REGISTRATION REQUIREMENTS OF THE SECURITIES ACT AND IN ACCORDANCE WITH APPLICABLE STATE SECURITIES LAWS OR BLUE SKY LAWS AS EVIDENCED BY A LEGAL OPINION OF COUNSEL REASONABLY SATISFACTORY TO THE COMPANY AND ITS TRANSFER AGENT OR (II) UNLESS SOLD PURSUANT TO RULE 144 UNDER SAID ACT.

 

 

  

5

  

 

The legend set forth in Section i(2) shall be removed and the Company shall issue a certificate (or issue in an uncertificated form) without such legend or any other legend to the holder of the applicable Warrants or Warrant Shares or, with respect to Warrant Shares only, to such holder’s broker or agent by electronic delivery at the applicable balance account at the Depository Trust Company, if (i) such Warrants or Warrant Shares are sold pursuant to an effective registration statement under the Securities Act (provided that the relevant holder agrees to only sell such Warrant or Warrant Shares during such time that the registration statement is effective and not withdrawn or suspended, and only as permitted by the registration statement) or (ii) such Warrants or Warrant Shares are sold or transferred pursuant to, and in accordance with all requirements of, Rule 144 (including, if applicable, the volume, manner-of-sale and notice filing provisions of Rule 144).  The Company shall bear all costs incurred by it or a Holder (other than legal fees and expenses incurred by such Holder) directly relating to the removal of the legend in accordance with this Section, provided that the Company shall not be liable for any transfer taxes relating to the issuance of a new certificate or statement in the name of any Person other than the relevant Holder and its affiliates.

 

(3)           The restrictions and requirements set forth in the foregoing paragraph shall apply with respect to Warrant Shares unless and until such Warrant Shares are sold or otherwise transferred pursuant to an effective registration statement under the 1933 Act or are otherwise no longer subject to the restrictions of the 1933 Act.

 

(j)             NOTICES.  Any notice or request hereunder shall be in writing and may be given only by, and shall be deemed to have been received upon: (a) delivered in person on the date of delivery; (b) registered or certified mail, return receipt requested, on the date on which such notice or request is received as indicated in such return receipt; or (c) delivery by a nationally recognized overnight courier, one business day after deposit with such courier.  In the case of the Holder, such notices and communications shall be addressed to its address as set forth in the signature page hereto, unless the Holder shall notify the Company that notices and communications should be sent to a different address, in which case such notices and communications shall be sent to the address specified by the Holder.

 

(k)             NO NET-CASH SETTLEMENT.  Except as otherwise provided herein, in no event will the Holder be entitled to receive a net-cash settlement or other consideration in lieu of physical settlement in securities.

 

(l)             MODIFICATION OF AGREEMENT.  The provisions of this Warrant may from time to time be amended, modified or waived, by the Company and the Holder of this Warrant by written agreement, executed by the Company and the Holder.

 

(m)             CHARGES, TAXES AND EXPENSES.  Issuance and delivery of certificates for Common Shares upon exercise of this Warrant shall be made without charge to the Holder for any issue or transfer tax, transfer agent fee or other incidental tax or expense in respect of the issuance of such certificates, all of which taxes and expenses shall be paid by the Company; provided, however, that the Company shall not be required to pay any tax that may be payable in respect of any transfer involved in the registration of any certificates for Warrant Shares or the Warrants in a name other than that of the Holder or an affiliate thereof. The Holder shall be responsible for all other tax liability that may arise as a result of holding or transferring this Warrant or receiving Warrant Shares upon exercise hereof.

 

 

  

6

  

 

(n)           SUCCESSORS AND ASSIGNS. Subject to the restrictions on transfer set forth in this Warrant, and compliance with applicable securities laws, this Warrant may be assigned, in whole or in part, at any time by the Holder.  Upon the assignment of this Warrant regarding all or any portion of the Warrant Shares, the Company shall execute and deliver a warrant (in form substantially identical to this Warrant) to the new Holder for the number of Warrant Shares now held by such Holder, and the Company shall execute and deliver a replacement warrant to the assigning Holder for the number of Warrant Shares retained by such Holder, if any. This Warrant may not be assigned by the Company without the written consent of the Holder except to a successor in the event of a Fundamental Transaction. This Warrant shall be binding on and inure to the benefit of the parties hereto and their respective successors and assigns. Subject to the preceding sentence, nothing in this Warrant shall be construed to give to any person or entity other than the Company and the Holder any legal or equitable right, remedy or cause of action under this Warrant. This Warrant may be amended only in writing executed by the Company and the Holder, or their successors and assigns.

 

(o)           GOVERNING LAW.

This Warrant shall be governed by, and construed in accordance with, the laws of the State of Texas.

 

Each party agrees that all proceedings concerning the interpretations, enforcement and defense of the transactions contemplated by this Warrant shall be commenced exclusively in court located in Dallas county, whether state or federal (the "Dallas Courts"). Each party hereto hereby irrevocably submits to the exclusive jurisdiction of the Dallas Courts for the adjudication of any dispute hereunder or in connection herewith or with any transaction contemplated hereby or discussed herein, and hereby irrevocably waives, and agrees not to assert in any proceeding, any claim that it is not personally subject to the jurisdiction of any such Dallas Court, or that such proceeding has been commenced in an improper or inconvenient forum. Each party hereto hereby irrevocably waives personal service of process and consents to process being served in any such proceeding by mailing a copy thereof via registered or certified mail or overnight delivery (with evidence of delivery) to such party at the address in effect for notices to it under this Agreement and agrees that such service shall constitute good and sufficient service of process and notice thereof. Nothing contained herein shall be deemed to limit in any way any right to serve process in any manner permitted by law. 

 

 

 

  

7

  

 

(p)           LIMITATION ON EXERCISE.  The Company shall not effect the exercise of this Warrant, and the Holder shall not have the right to exercise this Warrant, to the extent that after giving effect to such exercise, such Person (together with such Person’s affiliates) would beneficially own in excess of 4.99% (the “Maximum Percentage”) of the shares of Common Stock outstanding immediately after giving effect to such exercise unless the Holder provides the Company with 61 days’ prior notice of his desire to exercise this Warrant notwithstanding the fact that after giving effect to such exercise the Holder (together with his affiliates) would beneficially own in excess of the Maximum Percentage immediately after giving effect to such exercise.  For purposes of the foregoing sentence, the aggregate number of shares of Common Stock beneficially owned by such Person and its affiliates shall include the number of shares of Common Stock issuable upon exercise of this Warrant with respect to which the determination of such sentence is being made, but shall exclude shares of Common Stock which would be issuable upon (i) exercise of the remaining, unexercised portion of this Warrant beneficially owned by such Person and its affiliates and (ii) exercise or conversion of the unexercised or unconverted portion of any other securities of the Company beneficially owned by such Person and its affiliates (including, without limitation, any convertible notes or convertible preferred stock or warrants) subject to a limitation on conversion or exercise analogous to the limitation contained herein.  Except as set forth in the preceding sentence, for purposes of this paragraph, beneficial ownership shall be calculated in accordance with Section 13(d) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”).  For purposes of this Warrant, in determining the number of outstanding shares of Common Stock, the Holder may rely on the number of outstanding shares of Common Stock as reflected in the most recent of (1) the Company’s most recent Form 10-K, Form 10-Q, Current Report on Form 8-K or other public filing with the Securities and Exchange Commission, as the case may be, (2) a more recent public announcement by the Company or (3) any other notice by the Company or the Transfer Agent setting forth the number of shares of Common Stock outstanding.  For any reason at any time, upon the written or oral request of the Holder, the Company shall within two (2) Business Days confirm to the Holder the number of shares of Common Stock then outstanding.  In any case, the number of outstanding shares of Common Stock shall be determined after giving effect to the conversion or exercise of securities of the Company, including this Warrant, by the Holder and its affiliates since the date as of which such number of outstanding shares of Common Stock was reported.  By written notice to the Company, the Holder may from time to time increase or decrease the Maximum Percentage to any other percentage not in excess of 4.99% specified in such notice; provided that (i) any such increase will not be effective until the sixty-first (61st) day after such notice is delivered to the Company, and (ii) any such increase or decrease will apply only to the Holder.  The provisions of this paragraph shall be construed and implemented in a manner otherwise than in strict conformity with the terms of this Section to correct this paragraph (or any portion hereof) which may be defective or inconsistent with the intended beneficial ownership limitation herein contained or to make changes or supplements necessary or desirable to properly give effect to such limitation.

(q)           REGISTRATION RIGHTS OF HOLDER.  If at any time when there is not an effective registration statement covering the resale of the Warrant Shares, the Company shall determine to prepare and file with the Securities and Exchange Commission a registration statement (other than any registration statement filed prior to the date of issuance of the Warrant) relating to an offering for its own account or the account of others under the Securities Act of any of its equity securities, other than on Form S-4 or Form S-8 (each as promulgated under the Securities Act) or their then equivalents relating to equity securities to be issued solely in connection with any acquisition of any entity or business or equity securities issuable in connection with stock option or other employee benefit plans, the Company shall send to the holder of the Warrants written notice of such determination and, if within seven (7) days after receipt of such notice, or within such shorter period of time as may be specified by the Company in such written notice as may be necessary for the Company to comply with its obligations with respect to the timing of the filing of such registration statement, any such holder will so request in writing (which request will specify which Warrant Shares are intended to be disposed of by the holder), the Company will cause the registration under the Securities Act of such Warrant Shares which the Company has been so requested to register by the holders, to the extent requisite to permit the disposition of such shares to be registered, provided that if at any time after giving written notice of its intention to register any securities and prior to the effective date of the registration statement filed in connection with such registration, the Company shall determine for any reason not to register or to delay registration of such securities, the Company may, at its election, and, thereupon, (i) in the case of a determination not to register, shall be relieved of its obligation to register any securities in connection with such registration, and (ii) in the case of a determination to delay registering, shall be permitted to delay registering any securities being registered. The Company shall include in such registration statement all such Warrant Shares that such holder requests to be registered; provided, however, that the Company will not be required to register any securities that are eligible for sale pursuant to Rule 144 of the Securities Act.

 

  

8

  

 

IN WITNESS WHEREOF, the Company has caused this Warrant to be duly executed as of the date of this Warrant.

 

	 	TORCHLIGHT ENERGY RESOURCES INC.	 
	 	 	 
	 	 	 	 
	
 

	
By: 

	 	 
	 	 	Name:	 
	 	 	Title:	 
	 	 	 	 

 

 

	Holder:	 
	 	 
	 	 
	 	 
	[Name]	 
	 	 
	Address for Notice:	 
	 	 
	 	 
	 	 
	 	 
	 	 
	 	 
	 	 

 

  

9

  

 

PURCHASE FORM

 

 

	 	Dated ____________________

 

(1)   The undersigned hereby irrevocably elects to exercise the within Warrant to the extent of purchasing Common Shares of Torchlight Energy Resources Inc.  (or such number of Common Shares or other securities or property to which the undersigned is entitled in lieu thereof or in addition thereto under the provisions of the Warrant).

 

(2)  The undersigned hereby elects to make payment with the enclosed certified check or wire transfer payable to the Company in payment of the exercise price determined under, and on the terms specified in, the Warrant

 

(3)  The undersigned hereby irrevocably directs that the said shares be issued and delivered as follows:

	

 

Name(s) in Full

	 	

 

Address(es)

	 	

 

Number of Shares

	 	

 

S.S. or IRS #

	  	 	  	 	  	 	  

 

 

 

 

 

(4)  If the Warrant was not exercised in full, please check the following: ___

 

The undersigned hereby irrevocably directs that any remaining portion of the warrant be issued and delivered as follows:

	

 

Name(s) in Full

	 	

 

Address(es)

	 	

 

Number of Shares

	 	

 

S.S. or IRS #

	  	 	  	 	  	 	  

 

 

 

 

	 	 
	 	 
	Signature of Holder	 
	 	 
	 	 
	 	 
	Print Name	 

 

 

 

 

10

Source: [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00252-of-00352.parquet"}, [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00252-of-00352.parquet"}]]