SUPPLEMENTAL INVESTIGATION REPORT · SUPPLEMENTAL INVESTIGATION REPORT ... affidavit supporting the...

1

SUPPLEMENTAL INVESTIGATION REPORT

At the direction of the Professional Services Committee (“PSC”), on February 9, 2018, the Greater Orlando Aviation Authority (“GOAA”) continued its investigation to determine whether there was an existence, or at a minimum the appearance, of a conflict of interest and other possible irregularities stemming from PMA Consultants, Inc.’s (“PMA’s”) role as GOAA’s Owner’s Authorized Representative (“OAR”) for several critical baggage handling system (“BHS”) projects in the North Terminal, and PMA’s teaming with Jervis B. Webb Company (“Jervis”) on the South Terminal C Baggage Handling System (“STC BHS”) procurement.

The bulk of this continued investigation was performed by an independent computer forensic analyst, Data Analyzers LLC (“Data Analyzers”), who reviewed the metadata and system files of PMA and Jervis B. Webb Company (“Jervis”) employees involved with the STC BHS procurement. In consideration of time constraints and privacy considerations, GOAA, with cooperation from Jervis and PMA, created an interactive process to bolster the forensic data investigation such that a more comprehensive analysis could be provided in the allotted time. This Supplemental Investigation Report complements the initial Investigation Report dated February 6, 2018 (“Initial Report”), and is not intended to supersede it. This Report also supplements the independent forensic audit report of Data Analyzers.

A. Scope of Continued Investigation

On February 9, 2018, the PSC established at two-week timeframe to conduct an independent, forensic data investigation. Any findings from the forensic data investigation were to be shared at the PSC Meeting scheduled for February 27, 2018. GOAA’s legal counsel prepared an initial IT Protocol (“Initial Protocol”), which was circulated with legal counsel for all short-listed proposers on February 13, 2018. When it became evident that the scope was too expansive for the allotted amount of time and potentially too invasive, legal counsel negotiated a final revised Protocol1 (“Revised Protocol”), which guides this investigation. The Revised Protocol was circulated on Friday, February 16, 2018.

With respect to the forensic data investigation, Data Analyzers began working with Jervis on February 15, 2018 to perform a remote collection of the data on Jervis’ laptop and desktop computers. By Saturday evening, the metadata from all but one Jervis computer was remotely collected, with the metadata collection for all Jervis computers and laptops completed by Monday morning, February 19, 2018. PMA opted to provide Data Analyzers with the actual laptops. Two PMA laptops—those being used by Mr. Martin Ineichen and Mr. Noel Alvarez—were delivered to Data Analyzers Friday, February 16, 2018, to be processed over the weekend; two other PMA laptops — used by Mr. Richard Johnson and Mr. Robert Sanders — were sent via overnight mail to Data Analyzers on February 20, 2018 and received February 21, 2018.

On Tuesday, February 20, 2018, Data Analyzers informed GOAA’s legal counsel that in the course of examining the PMA laptop used by Mr. Martin Ineichen, Data Analyzers discovered “artifacts” that could be perceived as an anti-forensic measure and metadata tampering. Data Analyzers indicated that the missing metadata extended as far back as September 2017. In light of this news, GOAA felt it appropriate to reexamine the GOAA desktop computers used by Mr. Martin Ineichen and Mr. Noel Alvarez, which were the basis of the initial investigation. That evening, those GOAA desktop computers were delivered to

1 See Attachment A “Revised Protocol for Forensic Information Technology Investigation.”

2

Data Analyzers for further examination. GOAA also requested its IT department run additional reports going back to June 1, 2017, similar to those run in the Initial Investigation.2

Data Analyzers likewise informed GOAA’s legal counsel on Thursday, February 20, 2018, that another anomaly was discovered, as there was evidence of a forensic imaging tool that had been used on Mr. Martin Ineichen’s GOAA computer in December 2017. GOAA’s legal counsel confirmed that the data collection in December 2017 was for an entirely unrelated matter.3

In support of the Revised Protocol, PMA’s legal counsel provided 118 distinct emails in connection with the Revised Protocol’s email request at around 11:00 AM on Thursday, February 22, 2018. An affidavit supporting the collection and review of the emails was provided by a third-party consultant retained by PMA.4 PMA and Jervis have also both retained third-party consultants to create forensic copies of the cell phones of their respective employees who worked on the STC BHS procurement.5 This copy preserves the data on the phones should additional investigation be necessary, but does not subject the employees to a search of the content of their phones without a more compelling reason to do so.

B. Information Considered in Continued Investigation

In the course of this continued investigation, GOAA reviewed the following additional documents:

1. Emails provided by PMA in accordance with the Revised Protocol, Paragraph C.4. At 11:12 AM on February 22, 2018, PMA’s consultant provided a link to cloud-based server that contained the emails requested as part of the Revised Protocol. 118 distinct emails were provided.

2. Mr. Martin Ineichen’s “box.com Log” provided by GOAA’s IT department capturing box.com usage from June 1, 2017 through present.6

3. Copies of Mr. Martin Ineichen’s and Mr. Noel Alvarez’s internet history from their respective GOAA desktop computers provided by GOAA’s IT department for all dates available.7 Based on GOAA’s storage and log-generation practices, the internet history reviewed contains only records from un-encrypted websites. (box.com would be an encrypted website.)

4. Affidavits submitted by Todd Alderman (Jervis), Colin Oatley (Jervis), Andrew Grusnick (Jervis), and Kenneth Hamel (Jervis).8

5. An Affidavit submitted by Shaun R. Vodde of TransPerfect Forensic Technology and Consulting Division affirming to the forensic acquisition of electronically stored data of the mobile devices of select Jervis employees.9

2 See Attachment B–1 “Additional Findings from Martin Ineichen's Box.Com Access - Beginning 6/1/2017”; an excerpt of Attachment B–2 “Martin Ineichen’s Network Usage”; an excerpt of Attachment B – 3 “Noel Alvarez’s Network Usage.” 3 See also Attachment C. “Affidavit of Timothy Kiefer” (stating he performed the data collection with GOAA’s approval). 4 See Attachment D “Affidavit of Oscar Bravo.” 5 See Attachment E “Affidavit of Shaun R. Vodde;” see also Attachment D. 6 See Attachment B–1 (which filters the results to reflect only BHS STC documents not previously captured). 7 See Attachment B–2 and Attachment B–3. 8 See Attachment F “Affidavit of Todd Alderman”; “Affidavit of Colin Oatley”; “Affidavit of Andrew Grusnick”; and “Affidavit of Kenneth Hamel.” 9 See Attachment E.

3

6. An Affidavit submitted by Oscar Bravo of Halock attesting to the searches performed to collect and filter correspondence, and to the imaging of PMA mobile devices.10

C. Observations

As the basis of this investigation was a forensic examination of PMA and Jervis computers and laptops, this Supplemental Investigation Report will not discuss the findings by Data Analyzers. However, to provide additional context to the Data Analyzers Report, and to disclose the findings from GOAA’s independent review of the documents listed above, this section highlights the relevant information learned from the continued investigation.

1. October 25, 2017 Meeting. Correspondence between Robert Sanders (PMA), Noel Alvarez (PMA), Andrew Grusnick (Jervis), and Todd Alderman (Jervis) states that a meeting initially set for September was postponed until October 25, 2017.11

Correspondence coordinating the meeting includes the following individuals: Robert Sanders (PMA), Noel Alvarez (PMA), Laurie Blacker (PMA), Andrew Grusnick (Jervis), Todd Alderman (Jervis), Ken Cunningham (Jervis), and Levi Gealy (Jervis).12

2. PMA Statement of Qualifications. On October 26, 2017, Noel Alvarez emailed only Robert Sanders to determine who could compile a Statement of Qualifications for DAIFUKU.13

Nothing from the email exchanges indicates whether this SOQ would be for DAIFUKU’s consideration for the STC BHS procurement or another procurement.

After several iterations and revisions, on November 27, 2017, Mary Aiello (Marketing Senior Associate, Document Specialist, Technical Writer and Corporate Editor, PMA) responded to Noel Alvarez and Robert Sanders with the third draft of the Statement of Qualifications.14

Nothing from the email exchanges indicates whether this SOQ would be for DAIFUKU’s consideration for the STC BHS procurement or another procurement.

On December 19, 2017, Noel Alvarez shared with Andrew Grusnick what appears to be the fourth version of the same SOQ Mary Aiello prepared (“Daifuku_BHS_PMO_SOQ”).15

10 See Attachment D. 11 See Attachment G (Email from N. Alvarez to R. Sanders, “Re: Meeting with Daifuku – Novi, Michigan” (dated Oct. 24, 2017 3:54 PM)). 12 See Attachment H (Email from N. Alvarez to R. Sanders, “Re: Meeting with Daifuku – Novi, Michigan” (dated Oct. 26, 2017 1:52 PM)). 13 See Attachment H. 14 See Attachment I (Email from M. Aiello to N. Alvarez and R. Sanders, “Re: Meeting with Daifuku – Novi, Michigan” (dated Nov. 27, 2017 9:52 PM) (attachment not included)). 15 See Attachment J (Email from N. Alvarez to A. Grusnick, “RE: MCO South Terminal Project Details” (dated Dec. 19, 2017 6:52 PM) (attachment not included)).

4

3. Jervis Organizational Chart. On January 15, 2018, Alex Wuchte (Jervis) emails Noel Alvarez a copy of the Organizational chart for his review.16

The following day, Noel Alvarez responds to Alex Wuchte with the following comment: “I think that it will be critical to identify the Construction Manager on this Org. Chart. I also think that the Construction Manager needs to be a person with significant ICS experience.”17

4. Jervis’ Executive Summary. Pursuant to earlier conversations, Alex Wuchte provided Noel Alvarez a copy of Jervis’ Executive Summary for Noel Alvarez’s comments on January 15, 2018.18

The following day, prior to Noel Alvarez responding, Alex Wuchte sent Noel Alvarez a slightly revised version.19

Within an hour of receiving the revised Executive Summary, Noel Alvarez responded with minor edits and the two following comments: (1) “Is this for short turnaround bags? Some of the reading audience might not know” and (2) “Which organization has significant ISC O&M Experience[?] I hear that this is what GOAA will be focusing on.”20

5. Other Exchanges of Information between PMA and Jervis.

Alex Wuchte sends Noel Alvarez a schedule on January 3, 2018 so that Noel Alvarez can “start putting a quote together for the management [they] have discussed.”21 The same email thread also references a Teaming Agreement and Non-Disclosure Agreement between PMA and Jervis.

In response to a request from Alex Wuchte, Noel Alvarez sends Alex Wuchte the resumes of Martin Ineichen (PMA), Shaun Steif (PMA), and John Philbrick (PMA) on January 8, 2018.22

That same day, Noel Alvarez sends his own resume to Alex Wuchte.23

On January 16, 2018, Noel Alvarez sends Alex Wuchte a “rough staffing plan.”24

16 See Attachment K (Email from A. Wuchte to N. Alvarez, “RE 14-3436 MCO – Executive Summary Review / ORG Chart” (dated Jan. 15, 2018 3:41 PM) (attachment not included)). 17 See Attachment L (Email from N. Alvarez to A. Wuchte, “Re: 14-3436 MCO – Executive Summary Review / ORG Chart” (dated Jan. 16, 2018 3:30 PM) (attachment not included)). 18 See Attachment M (Email from A. Wuchte to N. Alvarez, “14-3436 MCO – Executive Summary Review” (dated Jan. 15, 2018 3:34 PM) (attachment not included)). 19 See Attachment N (Email from A. Wuchte to N. Alvarez, “RE: 14-3436 MCO – Executive Summary Review” (dated Jan. 16, 2018 3:16 PM) (attachment not included)). 20 See Attachment O (Email from N. Alvarez to A. Wuchte, “Re: 14-3436 MCO – Executive Summary Review” (dated Jan. 16, 2018 3:54 PM) (attachment redacted)). 21 See Attachment P (Email from A. Wuchte to N. Alvarez, “RE: Webb – PMA Exclusive Teaming Agreement – MCO STC” (dated Jan. 3, 2018 4:59 PM) (attachment not included)). 22 See Attachment Q (Email from N. Alvarez to A. Wuchte, “RE: Webb – PMA Exclusive Teaming Agreement – MCO STC” (dated Jan. 8, 2018 9:44 PM) (attachments not included)). 23 See Attachment R (Email from N. Alvarez to A. Wuchte, “RE: Webb – PMA Exclusive Teaming Agreement – MCO STC” (dated Jan. 8, 2018 10:42 PM) (attachment not included)). 24 See Attachment S (Email from N. Alvarez to A. Wuchte, “RE: 14-3436 MCO – Executive Summary Review” (dated Jan. 16, 2018 10:14 PM) (attachment not included)).

5

6. Martin Ineichen’s Box.com User History. Expanded review of Martin Ineichen’s box.com user history25 shows that box.com records were “previewed” at the following dates and times:

10/25/2017 7:17 SOQ 3.0 USGA Form-Page 18_Signed.pdf

10/25/2017 7:17 SOQ 2.0 Executive Brief Cover Letter_Signed.pdf

10/25/2017 7:18 SOQ Complete_PDFA.pdf

10/27/2017 12:11 Siemens Postal, Parcel & Airport Logistics, LLC.pdf

10/27/2017 12:28 Vanderlande Industries, Inc..pdf

10/27/2017 12:48 SOQ 3.0 USGA Form-Page 18_Signed.pdf

10/27/2017 12:48 SOQ Complete_PDFA.pdf

12/7/2017 7:02 15 BP-S00132 DBOM BHS STCP1 3rd Pre-Proposal Technical-Attendee Rpt.pdf

12/7/2017 7:04 14 BP-S00132 - Addendum 5 (2017-12-06).pdf

All documents beginning with “SOQ” are documents submitted by Glidepath, LLC d/b/a Beumer Glidepath (“Glidepath”). The Vanderlande Industries, Inc. Statement of Qualifications and Siemens Postal, Parcel & Airport Logistics, LLC Statement of Qualifications are marked as such. The two final documents beginning with “14” and “15” are Addendum 5 and the Third Pre-Proposal Technical Sign-In Sheet. All STC BHS proposals are confidential and not subject to disclosure during the active procurement. Section 119.071, Florida Statutes.

All documents were previewed from Mr. Martin Ineichen’s GOAA desktop computer. GOAA does not know the duration for which the documents were “previewed.” It does not appear that Mr. Ineichen viewed the Jervis SOQ from box.com.

D. Supplemented Timeline

Based on the additional information reviewed and the observations made above, the following timeline attempts to put the actions and exchanges into context. The italicized portions of the timeline are events that were carried over from the Timeline in the Initial Report. Not all documented events from the Initial Report are re-listed below. The underlined events are “new” events discovered in the course of the continued investigation. The events that are both underlined and italicized indicate events from the Initial Report, which have been affirmed through the additional materials reviewed.

Date Event(s)

June-August 2017 PMA provided input to the STC BHS DCP according to Dan Willems.

July 25, 2017 The Aviation Authority received four Statements of Qualification from Glidepath, LLC d/b/a Beumer Glidepath, Jervis B. Webb Company, Siemens Postal, Parcel & Airport Logistics, LLC, and Vanderlande Industries, Inc. PMA was not at this time identified as a team member to Jervis B. Webb.

25 See Attachment B–1.

6

October 3, 2017 Pre-submittal meeting for BP-S00132 with revised Request for Statements of Qualification meeting held.

October 16, 2017 Noel Alvarez e-mailed John Guirges requesting 30 minutes to discuss PMA providing staffing support for the STC.

October 24, 2017 SOQs received from Glidepath, LLC d/b/a Beumer Glidepath, Jervis B. Webb Company, Siemens Postal, Parcel & Airport Logistics, LLC, and Vanderlande Industries, Inc. in response to the Aviation Authority’s advertisement for BP-S00132. PMA was not identified as a team member to Jervis B. Webb.

October 25, 2017 Correspondences between Robert Sanders (PMA), Noel Alvarez (PMA), Andrew Grusnick (Jervis), and Todd Alderman (Jervis) state that a meeting initially set for September was postponed until this date.

Martin Ineichen previews three sections of Glidepath’s SOQ from box.com.

October 26, 2017 Noel Alvarez emailed Robert Sanders to determine who could compile a Statement of Qualifications for DAIFUKU. Nothing from the email exchanges indicate whether this SOQ would be for DAIFUKU’s consideration for the STC BHS procurement or another procurement.

October 27, 2017 Martin Ineichen previews two sections of Glidepath’s SOQ and the SOQs of Siemens and Vanderlande from box.com.

November 10, 2017 PSC voted to shortlist all proposers.

November 27, 2017 Mary Aiello (PMA) responded to Noel Alvarez and Robert Sanders with the third draft of the Statement of Qualifications. Nothing from the email exchanges indicate whether this SOQ would be for DAIFUKU’s consideration for the STC BHS procurement or another procurement.

December 5, 2017 Technical Pre-Proposal Conference held. All Shortlisted Proposers were in attendance either in person or via Webinar.

December 7, 2017 Martin Ineichen previews the third Technical Pre-Proposal Attendance Sheet and Addendum 5 through box.com.

December 7-12, 2017 Internal e-mails between PMA staff regarding teaming with Jervis B. Webb.

December 13, 2017 Noel Alvarez e-mailed Jervis with PMA billing rates and discussing teaming for the BHS projects. Mr. Alvarez thanked Jervis for hosting discussions in October 2017 regarding the

7

same and stated that PMA had an initial talk with the Aviation Authority to ensure no potential conflicts of interest.

December 15, 2017 Andrew Grusnick with Jervis e-mailed Noel Alvarez, Rick Johnson, Robert Sanders, and Todd Alderman of PMA regarding the anticipated organization chart for the STC BHS projects along with role descriptions and responsibilities ahead of a 1:00 p.m. conference call scheduled for the same day.

December 19, 2017 Noel Alvarez provided Jervis with PMA’s SOQ for the project in preparation for a telephone call on December 20, 2017. Additionally, Mr. Alvarez proposed that Jervis include Martin Ineichen as Project Manager, Shaun Stief as QA/QC Manager, and John Philbrick as Project Scheduler, along with one other PMA employee, for the STC BHS project.

Noel Alvarez provided Mofoluso Murnane and John Guirges (STC OARs) with PMA Staffing Forecast for STC January 2018 – September 30, 2020, showing Martin Ineichen’s availability for the position of “Project Manager (BHS),” Shaun Stief’s availability for the position of “Inspection & Install QAQC (BHS),” and his own availability for the position of “Sr. Project Manager (BHS).”

December 22, 2017 Counsel for PMA confirmed that on or about December 22, 2017, Jervis sent an executed Teaming Agreement to PMA.

Counsel for PMA stated that it appears as though on or about December 22, 2017, PMA signed a Non-Disclosure Agreement.

December 28, 2017 Counsel for PMA confirmed that on December 28, 2017, Noel Alvarez counter-signed the Teaming Agreement and e-mailed it back to Jervis.

January 3, 2018 Counsel for PMA stated that it appears as though Jervis counter-signed the Non-Disclosure Agreement on or about January 3, 2018.

Alex Wuchte sends Noel Alvarez a schedule so that Noel Alvarez can “start putting a quote together for the management [they] have discussed.”

January 8, 2018 At the request of Alex Wuchte, Noel Alvarez sends Alex Wuchte the resumes of Martin Ineichen (PMA), Shaun Steif (PMA), John Philbrick (PMA), and his own.

January 9, 2018 Deadline to submit written inquiries related to BP-S00132

8

January 15, 2018 Alex Wuchte (Jervis) emails Noel Alvarez a copy of the Organizational Chart for his review.

Alex Wuchte provided Noel Alvarez a copy of Jervis’ Executive Summary for Noel Alvarez’s comments

January 16, 2018 Noel Alvarez responds to Alex Wuchte with comments on the Organizational Chart sent the previous day.

Alex Wuchte resends Noel Alvarez a slightly revised version of the Executive Summary before Noel Alvarez had a chance to comment on the version from the previous day. Within an hour of receiving the revised Executive Summary, Noel Alvarez responded edits and comments.

Noel Alvarez sends Alex Wuchte a “rough staffing plan.”

January 17, 2018 Noel Alvarez sent a proposal to Dan Willems for OAR support services for the North Terminal BHS program proposing Martin Ineichen as BHS Project Manager and Shaun Stief as Night APM onsite management staff.

January 18, 2018 STC BHS Technical and Design Proposals due and submitted by Beumer Glidepath, Jervis B. Webb and Vanderlande.

Maintaining the confidentiality of the SOQs, the Aviation Authority stored the SOQs in a secure location and uploaded them to a restricted access box.com file that day.

January 19, 2018 Mr. Ineichen previewed all Technical Proposals and downloaded the Beumer Glidepath Technical proposal at 1:02 p.m. Between 1:01 p.m. and 1:14 p.m. Mr. Ineichen visited box.com, google.com, dropbox.com, Microsoft and MCI.

Noel Alvarez sent a proposal to Dan Willems for OAR support services for the North Terminal BHS program proposing Martin Ineichen as BHS Project Manager and Shaun Stief as Night APM onsite management staff.

Alex Wuchte with Jervis e-mailed Noel Alvarez canceling weekly call to review the status of proposal and team needs. Mr. Wuchte’s e-mail stated that they would “catch back up next week.”

January 22, 2018 Dan Willems, per direction of legal counsel, revoked Martin Ineichen’s access to box.com folder with STC BHS internal documents.

January 25, 2018 The Aviation Authority sent a suspension letter to PMA, removed 26 PMA employees from the Aviation Authority’s

9

property and revoked their badges pending the outcome of the investigation. PMA employees Barry Winstead and Nils Johnson were allowed to remain on site as they are critical subject matter experts to the ongoing BP-S100 Automated People Mover Operating System project at the airport, and their removal could be highly disruptive to operations.

January 26, 2018 Addendum 9 issued to remaining Shortlisted Proposers suspending all remaining due dates for the procurement.

[END OF SUPPLEMENTAL INVESTIGATION REPORT]

REVISED PROTOCOL FORFORENSIC INFORMATION TECHNOLOGY INVESTIGATION

A. Purpose of Investigation

This forensic data investigation is intended to further the transparency and openness of the

procurement process at the Greater Orlando Aviation Authority ("GOAA"), specifically as related

to the procurement process of the South Terminal C Baggage Handling System project (STC BHS

BP-00132) ("Project"). More specifically, this investigation seeks to determine whether any

proposing teams have been materially prejudiced by the actions of PMA Consultants, Inc.

("PMA") and/or Jervis B. Webb Company ("Jervis B. Webb") with respect to the Project

procurement, as outlined in the report presented at the February 9, 2018 Professional Services

Committee ("PSC") meeting.

B. Scope of Third-Party Investigation

The Forensic Data Analyst shall be accorded unrestricted access to the metadata imbedded

in the computer system(s) and network(s) of relevant PMA and Jervis B. Webb custodians, such

that the Forensic Data Analyst can conduct an independent investigation of such metadata to

determine computer network usage associated with the Project procurement. The investigation

shall be for the period of November 1, 2017 through the present. More specifically, the IT forensic

specialist, in support of this investigation, will examine the metadata to determine:

1. Whether PMA staff downloaded onto its computer servers, cloud-based services,

or removable storage devices any of the documents identified on Exhibit A, or whether any of

those documents were deleted;

2. Whether Jervis B. Webb has possession on its network or any cloud-based services,

any of the documents identified on Exhibit A, or whether any of those documents were deleted;

3. Whether any of the searches and computer usage depicted in Exhibit B evidence

the transfer, download, upload, or deletion of any document identified on Exhibit A; and

4. Whether personal email servers evidence the transfer or deletion of any of the

documents identified on Exhibit A.

C. Roles of PMA and Jervis B. Webb

PMA and Jervis B. Webb shall, at a minimum, perform the following duties:

1. PMA and Jervis B. Webb shall both fully cooperate with the Forensic Data Analyst,

as further outlined below in Section D.

A more thorough review of PMA custodians' PMA email accounts will be performed in accordance with Section C,

No. 4.

Attachment A

2. PMA and Jervis B. Webb shall both provide a list of all custodians who wereinvolved with the procurement of the Project, and who had access to a company device(s) or useda personal device(s) in connection with the Project; the custodian's involvement on the project;the type of device(s) used by the custodian; and where the device(s) is/are located. The list shalltake the following form:

Name of Custodian Role on STCBI-IS BP-00132

Type(s) of Device(s)(PC, Mac, Tablet, etc.)

Location of Device(s)

1.2.

3. PMA and Jervis B. Webb shall both create forensic copies of the devices of theirown employees, not examined by the Forensic Data Analyst, that may have been used inconjunction with the Project. PMA and Jervis B. Webb shall have a third party create forensiccopies of the devices, and shall retain them pending the outcome of this forensic IT investigation

and for a period of 6 months thereafter. PMA and Jervis B. Webb shall provide Affidavits,executed by the third-party firm: (1) confirming the copies of devices have been made, (2) statingwhose devices were collected, and (3) affirming that the third-party firm has not altered the datacollected from the devices in any manner.

4. PMA shall retain an independent consultant to gather and produce to GOAA: (1)all correspondence between any agent of PMA and Jervis B. Webb beginning October 1, 2017through present; and (2) all correspondence between Martin Ineichen and Noel Alvarez beginningOctober 1, 2017 through present. Correspondence unrelated to the Project or that is subject toattorney-client privilege need not be produced. Upon conclusion of the review, the independentconsultant shall provide an Affidavit outlining: (1) the process for gathering the correspondence;(2) the searches performed, and (3) affirming that all documents responsive to this paragraph wereproduced.

D. Cooperation with Forensic Data Analyst

In support of the investigation, and in accordance with the procedures to be furtheridentified by the Forensic Data Analyst, PMA and Jervis B. Webb shall, at a minimum, provide

the following:

1. A point of contact, preferably within the IT Department or with a basic

understanding of PMA or Jervis B. Webb's respective computer systems, to coordinate theduplication of device(s) and to answer any systems-based questions that may arise during the data-analysis portion of the investigation.

2. A time and location, to be agreed upon with the Forensic Data Analyst, for the datacollection to take place. Alternatively, the data collection may require devices and/or hard drives

to be collected and brought to the Forensic Data Analyst, or remote access by the Forensic DataAnalyst. If such is the case, PMA and Jervis B. Webb shall cooperate fully with the Forensic Data

Analyst to complete the data collection process.

Attachment A

3. Any passwords, encryption logins, etc. required for the retrieval and analysis of

forensic IT data, as required by the Forensic Data Analyst.

E. Audit Report by Forensic Data Analyst

The purpose of the forensic data investigation is to create a report evaluating PMA's and

Jervis B. Webb's computer network usage, and whether it indicates the viewing, deletion, transfer,

or saving of any documents on Exhibit A, beginning on November 1, 2017 through the present

("Report"). The Report will be published in compliance with Florida's Public Records Statutes,

and will contain the following:

1. The scope of investigation;

2. The process employed by the Forensic Data Analyst;

3. The data examined; and

4. Findings by the Forensic Data Analyst.

Recognizing the existence of confidential data on the devices examined, the Report will be

limited to findings directly related to the scope of work. Other confidential information—not

related to the scope of work—and other non-relevant information will be omitted from the Report.

F. Further Investigation; Reservation

If GOAA, in its sole discretion, concludes further data collection and investigation is

necessary because the investigation above is inconclusive or incomplete, the parties are

uncooperative in any manner, or because the results demonstrate that additional data collection

and analysis is necessary for any other reason, GOAA reserves its right to demand such further

data collection and investigation that it deems necessary. Such additional data collection and

analysis may include, without limitation, the following:

1. Whether PMA staff downloaded onto its servers, cloud-based services, or

removable storage devices any of the documents identified on Exhibit A or any other confidential

STC BHS BP-00132 procurement information not published to the Proposers between November

1, 2017 and the present;

2. Whether any of the searches and computer usage depicted in Exhibit B evidence

the transfer, download, upload, or deletion of any document identified on Exhibit A or any other

confidential STC BHS BP-00132 procurement information not published to the Proposers between

November 1, 2017 and the present;

3. Whether Jervis B. Webb has possession on its network or any cloud-based services

any of the documents identified on Exhibit A or any other confidential STC BHS BP-00132

Attachment A

procurement information not published to the Proposers between November 1, 2017 and thepresent; and

4. Whether any emails or other forms of electronic communications discuss, or

evidence the transfer or deletion of, any of the documents identified on Exhibit A or any otherconfidential STC BHS BP-00132 procurement information not published to the Proposers betweenNovember 1, 2017 and the present.

5. An evaluation and analysis of the forensic copies of the devices described in Section

C, No. 3.

Attachment A

User Name User Email IP Address Action Affected Site (kaj Parent Folder

)/20180:49 mineichen mineichenegoaa.org 71.46.234.214 Login

3/20188:52 mineichen [email protected] 71.46.234.214 Previewed 2018-01-08 BP-500132 Memo Technical Proposals.pdf 1572.29 /GOAA Root Folder/Box Enterpdse Sync/GOAA Plg. Eng. & Construction/GOAA Project Information/101's, Proposals, & SOQs/I3P-500132 BUS/BP-000132 BHS (0 BOM) Technical Proposals

3/20189,01 mineichen [email protected] 71.46.234214 Previewed {FULL) BP•500132 Staff Reviews Packet.pdf 498.42 /5044 Root Folder/Box Enterprise Sync/GOAA Pig. Eng. & ConStrUction/GOAA Project inforrnatIon/LOIls, Proposals, & SOCis/EIP.S00132 OHS

6/2018 9:03 mineichen [email protected] 71.46.234.214 Previewed Design and Technical Proposal-A.pdf 175399.6 /GOAA Root Folder/Box Enterprise Sync/GOAA Plg, Eng. & Construction/GOAA Project Information/101's, Proposals, & SOCis/817-300132 BHS/BP.S00132 - BHS (DOOM) Technical Proposals/Jervis 8. Webb • Technical Proposal

'201812:47 mineichen [email protected] 71.46.234.214 Previewed SOCh Compleie_PDPA.pdE 3419.74 /GOAA Root Folder/Box Enterprise Sync/GOAA Pig, Eng. & Construction/GOAA Project Information/101's, Proposals, & SOQs/BP.S00132 BHS/BP-500132- BHS (DOOM) SOQs/BP•500132 50Qs/Glidepath LLC dim BEUMER Glidepath

'201812:50 mineichen minelchen@goaa,org 71.46.234.214 Previewed T-0 Proposal.pdf 95334.16 /GOAA Root Folder/Box Enterprise Sync/GOAA Plg, Eng. & Construction/GOAA Project Information/LC:Vs, Proposals, & SOQs/BP-S00131 BHS/BP-S00132 OHS (0 BOM) Technical Proposals/Vanderiande Industries. Inc./1. Vander.T•D Propose,

'2018 13:02 mineichen minelche [email protected] 71.46.234,214 Download Technical Proposal for DOOM Services for BP-300132 1311.5_archive.pdf 221953.7 /GOAA Root Folder/Box Enterprise Sync/GOAA Pig, Eng. & Construction/GOAA Project Information/Lars, Proposals, & SOQs/BP-S00132 BHS/BP-500132- BHS (DOOM) Technical Proposals/Beumer Glidepath - Technical Proposal

'201816:35 mineichen [email protected] 71.46.234.214 Login

'201816:36 mineichen [email protected] 71.46.234.214 Previewed BP•447 347716•134R2BauConvSys(SC52)(5023 As-Builts) RVWD_JSM.pcd 2535.83 /GOAA Root Folder/Box Enterprise Sync/GOAA Plg, Eng. & Construction/GORR Eng. & Construction/BP-447 Main Ticket Lobby ModlOotlons/BP•447 Design Team Drop Box/AE Submittals to GOAA

Pyhihit A fn Affarhmtmnt A

time user src_ip dest_ip bytes_in bytes_out duration

2018-01-19T13:05:18.000-0500 goaa\mineichen 172.24.151.19 107.152.26.200 237530544 4784544 162

2018-01-19T13:05:18.000-0500 goaa\mineichen 172.24.151.19 107.152.26.200 94246 3505 162

2018-01-19T13:02:52.000-0500 goaa\mineichen 172.24.151.19 107.152.26.200 47653 3039 16

2018-01-19T13:05:18.000-0500 goaa\mineichen 172.24.151.19 107.152.26.199 41421 16328 172

2018-01-19T13:01:01.000-0500 goaa\mineichen 172.24.151.19 162.125.18.133 40925 120415 6024

2018-01-19T13:05:18.000-0500 goaa\mineichen 172.24.151.19 107.152.26.199 37983 10467 172

2018-01-19T13:05:19.000-0500 goaa\mineichen 172.24.151.19 107.152.26.199 31282 8686 177

2018-01-19T13:01:37.000-0500 goaa\mineichen 172.24.151.19 72.21.81.200 25671 1960 103

2018-01-19T13:05:18.000-0500 goaa\mineichen 172.24.151.19 107.152.26.199 19446 11238 172

2018-01-19T13:05:18.000-0500 goaa\mineichen 172.24.151.19 107.152.26.199 17462 21719 176

2018-01-19T13:01:36.000-0500 goaa\mineichen 172.24.151.19 72.21.81.200 9355 1634 122

2018-01-19T13:05:18.000-0500 goaa\mineichen 172.24.151.19 107.152.27.197 8906 4790 162

2018-01-19T13:02:58.000-0500 goaa\mineichen 172.24.151.19 13.84.218.189 8867 3616 16

2018-01-19T13:01:36.000-0500 goaa\mineichen 172.24.151.19 72.21.81.200 8737 799 122

2018-01-19T13:03:56.000-0500 goaa\mineichen 172.24.151.19 13.93.147.83 7357 3807 16

2018-01-19T13:02:58.000-0500 goaa\mineichen 172.24.151.19 137.135.52.44 7049 5854 15

2018-01-19T13:09:25.000-0500 goaa\mineichen 172.24.151.19 65.55.44.108 4524 1537 91

2018-01-19T13:14:28.000-0500 goaa\mineichen 172.24.151.19 162.125.32.135 4360 2270 181

2018-01-19T13:08:27.000-0500 goaa\mineichen 172.24.151.19 162.125.5.3 4354 1800 15

2018-01-19T13:02:53.000-0500 goaa\mineichen 172.24.151.19 162.125.34.6 4336 1784 181

2018-01-19T13:06:30.000-0500 goaa\mineichen 172.24.151.19 162.125.34.137 4283 1247 180

2018-01-19T13:05:19.000-0500 goaa\mineichen 172.24.151.19 107.152.27.197 3825 802 163

2018-01-19T13:08:08.000-0500 goaa\mineichen 172.24.151.19 173.194.219.139 2221 2308 141

2018-01-19T13:11:45.000-0500 goaa\mineichen 172.24.151.19 173.194.219.138 2187 3187 119

2018-01-19T13:08:08.000-0500 goaa\mineichen 172.24.151.19 173.194.219.138 1950 3157 88

2018-01-19T13:10:59.000-0500 goaa \mineichen 172.24.151.19 173.194.219.102 1765 3884 79

2018-01-19T13:08:08.000-0500 goaa\mineichen 172.24.151.19 173.194.219.102 1717 2726 145

2018-01-19T13:02:33.000-0500 goaa\mineichen 172.24.151.19 173.194.219.102 1638 2726 110

2018-01-19T13:13:01.000-0500 goaa\mineichen 172.24.151.19 173.194.219.102 1551 2726 137

2018-01-19T13:09:53.000-0500 goaa\mineichen 172.24.151.19 173.194.219.102 1419 1734 172

2018-01-19T13:08:08.000-0500 goaa\mineichen 172.24.151.19 173.194.219.138 1335 1254 88

2018-01-19T13:11:45.000-0500 goaa\mineichen 172.24.151.19 173.194.219.138 1290 1230 119

2018-01-19T13:10:59.000-0500 goaa\mineichen 172.24.151.19 173.194.219.102 1166 1173 79

2018-01-19T13:08:08.000-0500 goaa\mineichen 172.24.151.19 173.194.219.102 1162 1165 145

2018-01-19T13:04:26.000-0500 goaa\min eichen 172.24.151.19 173.194.219.138 934 3115 111

2018-01-19T13:09:53.000-0500 goaa\mineichen 172.24.151.19 173.194.219.102 447 619 172

2018-01-19T13:05:00.000-0500 goaa\mineichen 172.24.151.19 162.125.18.6 186 180 15

2018-01-19T13:05:00.000-0500 goaa\mineichen 172.24.151.19 162.125.5.3 126 180 15

Exhibit B to Attachment A

IP

107.152.26.199

107.152.26.200

107.152.27.197

13.84.218.189

13.93.147.83

137.135.52.44

162.125.18.133

162.125.18.6

162.125.32.135

162.125.34.137

162.125.34.6

162.125.5.3

173.194.219.102

173.194.219.138

173.194.219.139

65.55.44.108

72.21.81.200

Registrant (IP Owner)

Box.com

Box.com

Box.com

Microsoft

Microsoft

Microsoft

Dropbox

Dropbox

Dropbox

Dropbox

Dropbox

Dropbox

Google

Google

Google

Microsoft

MCI Communication

Exhibit B to Attachment A

onaf Findings from Martin Ineichen's Box.Com Access - Beginning 6/1/2017

--usgisipmassmimmwr ;;‘`'.0 .,0 :4,44i/[email protected] 71.46.234.214 Previewed socCio USGA Form-Page 18_Signed.u... 37.26 /8088 Root Folder/Box Enterprise Sync/GOAA Plg, Eng. & Constr.—..../GOAA Project Information/LOB, Proposals, & 5004/6P-500132 61-15/61,500132 895 (013014j/BP-500152 1--5/Glidepeth LLC 01,0

75/2017 7:17 mineichen [email protected] 71.46.234.214 Previewed SOO 2.0 Executive Brief Cover Letter_Signed.pdf 50.21 /GOAA Root Folder/Box Enterprise Sync/GOAA Plg, Eng. & Construction/GOAA Project Information/LOns, Proposals, & 5005/BP-500132 BHS/BP-500132 -131-15 (DBOMi/BP-500132 SOQs/Glidepath LLC dba BEUMER GI depth

75/?017 mineichen mineichen@goaaorg 71.46.234.214 Previewed SOCI Complete_PDFA.pdf 3419.74/8088 Root Folder/Box Enterprise Sync/GOAA Plg, Eng. & Construction/GOAA Project Information/LOns, Proposals, Si S005/BP-500132 BHS/BP-500132 - BHS (0110Mj/BP-S00132 SOQs/Glidepath LLC dba BEUMER GlIciteath

1/203712:11 [email protected] 71.46.234.214 Previewed Siemens Postal, Parcel & Airport Logistics, FIT Elf 33923.85 /8088 Root Folder/Box Enterprise Sync/GOAA Plg, Eng. & Construction/GOAA Project Information/LOIls. Proposals, & SOCts/BP-500132 BHS/BP-S00132 BHS (MOM) SOQs/BP-500132 5005

M2017 12,28 mineitea___nineichen@goaa. org 71.46.234.214 Previewed

_____

Vanderlande Industries, Inc..pdf 18145.85 /GOAA Root Folder/Box Enterprise Syhc/GOAA Pig. Eng. & Construction/GOAA Project Information/LOIls, Proposals, & S005/BP-S00132 BHS/BP-500132 BHS (DBOM) 50(1s/8P-500132 50CIS

1/.2p17 12:48 rnineic5en. [email protected] 71.46.234.214 Previewed

._ ..---.--500 3.0 USGA Form-Pee0 18,Siignadiii1"—""" 37.26 /80ÁA Root Folder/Box Enterprise Sync/80ÁA P1,_En0:_& Construction/GOAA Project Information/COI's, Proposals, & 50Qs/BP-500132 BH5/13P-500132 BHS (DOOM) SOC/s/BP-S00132 SC/Qs/G et!

i/j1)17 12:48 mineichen 71.46.234.214 Previewed SO4 CompletePDFA.pdf 3419.74 /GOAA Root Folder/Box Enterprise Sync/GOAA Plg, Eng. & Construction/GOAA Project Information/LOIls, Proposals, & SOQs/BP'S00132 BHS/BP-S00132 BHS (DBOM) SOOS/BP-S00132 50Qs/[email protected]

/7 20177:02 minelchen rni.ntshe^@va?.:93.... 71.46.234.214 Previewed— .

158P-500132 DBOM BHS STCP1Attst!feps.ELTechnical-Atten#FINto.11_ I/format:1m53.9 71 Í80A8 Root Folder/Box Enterprise Sync/GOAA Plg, Construction/GOAA Project Information/COI's, Proposals, & 50Qs/BP-500132 SI-IS/BP-500132 Proposer I —/7/2017 7:04 mineichen [email protected] '71.4i.234.114 Previewed 19 BP-500131 - Addendum 5 12017-12426i.pdf i99.12 /80ÁA Root Folder/Box Enterprise Sync/GOAA Pig, Eng. & ConstructIon/GOAA Project information/I-Ors, Proposals, & 500.s/BP-S00132 BHS/BP-S00131 Proposer Information

Ruth

Attachment B - 1

x e.!..2:ef.gf,2f1.7%

2iigz"2,1e,exx

"if

------

'''

,Nrsezeiiisa. sUme:§3efef" ':säa.~

eAu

gr „,2,,,,..9. 0eeeeseemee2e2eeeeeee

.e,". e'e"

°x'_ §sä§e"'"rq

Efr...*222921222$29f:Ege.:22

VIff

52M3 2

r. 2, ,

'

1.3.33.g.3“eveutau

222i.1*

R -

JJJJJJJJJJJJJ333333333J 3S J JJJJJJJJJJJJJJJJ

e '

iltl:e .14:Mnnagil

xxx if i3121212; fsff

tektkeztezezettetetet*6*2t!tkttat22e2622eta8tteett8tett

tezeteetzezeztecitkizietiziiäe

itiebibiixixiizaetaesee

«ddo'd dtie4d4.144«0«dd0444240e4f444e444464e44*«d«424d4e247

-4844d4444444400000«000dged048

eddedardi!«.4«40ereferdeiret00040

Phninn "M"MP"n"

Illinllil" P"

niligillinnr"hn!

Illffillifinht 1

Mi

- -

ieleie

letitv 12

.

3

if. ..ee

.......

.. ::tgt:: ......... . 2 .

eE,es LSlS22122222312211111829

gllk€1€111

.......... . Q0Q000

1/119ffilln

i>

>22222

illillffinililli

eee00 .... 0 . 0 ..... 0 . QQ0000Q0

‚wee:11:ele1111.112e1Aw

1. 11

if ff›

388f "A f Af

MffM§X8888883-88E8888MUMMMUM2

8888888"

888MMUMUMIMissgsg

2E83" e MAMMMAifi

.....

F1F2FS2~ca

222 ''R

ez1

212222222112

22222

12

1;;;;;;:=

111111111

. a . 0 ... ae e . .c..........

...

go.07,e'E-

..g

.............

.

le.`ääöä.«. f.ii-"1.;;""""-"göölöiEl8e“

oemeeeeeee ........ e ......... ememe ................... e ...... ee

ii551

K ä555§55

554555

5 5

5555555

2- .....

1".12 ....

.1:eibErj.ee.e.te:42222: ... ai .

kkikr1 r

PPP`Pa.

(1, CC. Pcpa.

a. en PP PP

P(` .......... e, ......... ̀PP

5 ggitill111322Mg111111:14ii111111131ä1M91111111111g111111111MMilltillIMMIIMMINlille11111111111i111111111111

t88888.8S8.88e "8S8'038"1l8'tRe"1A8"t~8"1~8' ilt§lillii§§§§Häl§§§1§11§1§M§gge§g§e§§§e§egeglititilititieli@gg§g§iitidgMiMMWM§§g§gg§§g§litggilt§§§§§§1§§

.oaoo

eee

..........

.....

..... szs.seees

1"8•48081

zgmg

86819sesysergssesekue!eses6ecewm!sr

9friss . 'säks.sagmes,s0091seseeee0miihipjetluttugnejmuum

1

2

25

sf

..... Q000000000

2RRRReeeeeeeeeee

ReeeeeeeeeeeeeeeeemRin

000

000

:::::::::::::

122229222

Ove0000meeo

1299292291

555rir

"3

M-ee

2g2922:A21'92:2

44

444444

§§22

§2"

2g="9""2 iePeeuViuiei".99

1- "-—

' '' HP

2.§§_=--n

5 '

---

222°22222222222 2

4445.5,1aea,53...—

i3222

es;

r.:74Pig"r115.e5 geffl:ain'eurniMe-e-=

Es

;;;;;..;

eäJä

aäJJJJJe

i;;;;;;;I

az

ziall;aza

2222212222

geggesegewwwesegeriess,.gesessseswese

t4o4

4444.04*4 4. 44

Otteeteeatzt

et

kktezzezzaeccaketk tett ezetzeztazakkkkttk tketzezeezzekekkkketkkkktettexe aiteit tikkiiikiiiiiikketiitiikkikiizikaiteiii

q40q44084

444««4484444

oQe4444dddeddd484 44404422e44eddde2048.444e444e422 ddedde d8fe4404dde0t0ded84dd°48dddd484de4ge444

m "

111l 1gti 11333331

II 1'V iern

teelleTyy

...... .... ....•.

•

;;. ;;;;;;;;;;;;,,;-

. ... ...... 4e4

•Do ..

;,.O,

.,,,,,,, ......

44*444

4

025!522E2044etute.c2et....c

cm--tciem

me

!I

Iglegje gei

==l1e111111 IMMUN

14111111 H!!!!!!!!iljult1

9444

1111

Mgiiii111/11111ilt gii/liglil

. .........

. .

1if-

›elille›.›2222

422 2

222222eleeell3e112=22›››.

222»22»3›1›222222222:222al i>» ahi:›222

mimmimmemmmmmuemm===.822m.mmememmimmmimimmummummummmmemmemmemmmmmogo.,,emmiwimm---- 8....=888mmemmemmm======......88mmimmummimmmaem

4.4.2

-=22222".2'2

"2g

*040

*4*

44

IMMUHHHHHHHHUUNeeee

2;assalgaaasaazzaaa

NtIggggNUMeeMUHN

2

lllw-,---,

°11m15112!!ee§m§§§§§eä§ä§g§ m

gmg gggg,

eHUHHUHIWUMIUNUMEHHUMMUninifinfin

'UMMUHUtilifligUiliiiIMMHHHH§MidniffligH

iffleasxaggoigssesmsassassasat.-s .. .. ge2x2e2,2e2ee,2,

46

;22$422212$889828288282815gMehibiüegeeep32323333

000030000004044

-22

ppiNprip2N;2;2;2;NNIli

2.22

22242222224229 22222229.222222

22222

2.7ZS2R2R2232$

9;;;145

.2.12.2288882228

"ii°,4A-rA*5

111

3re=gw-rpue- e2-v•Areqr:eims

Zi52.2432126122122,212125

§55 --- 5.

2:155212222

22rie174.tEifieak:§el§55

gm'mgz"

---"2"''33:3°3332222233233:3232333CG323°

443i

sitssaresemetretre

öSeggegg

Je

33gäJä33334343 33

1221121

2

iitazaztzebtktezzeztaatztttktttttezzetttetktte221221ettYtttätttzetzezeezt

141.11.4. 4*

!!!!!!1llflIllIllll

ce---eeet

e 2

122 333

312

11

155555555e5et555

ee

itttkitiiiei iiiiitititiiiiiiiiiiiiititeiiiiiiitiiiiitieiezezeesetatt

44"fef*fe.lf eeegeeg545.$4525.45555555.5.555e«feeeeeeefeeee5.5ege545455

eiliillt ie

=-== fe 3e mT

e,

ti ii....e.el

ilisiee'll

......

....... ..;:;;;.;;;;;;3«:;;;;;;::j ..

......................

...--.c.-.

_g1113

" 5"

11111 INN

14 111111/11"

—difj/1111111

e! 1.555

55

WHHEIM

etfifi

.. Q4

. . .

2

C'Y

MZ.2721

2

51411"'

oiiii3 sl'nwm23zel'el—n21

33332›

5

e› 113›.›11111

3*

133i 11

azil ilifi

›iliiiii1113313333113g

33A33333338282

$388833391303333888288 sedi1111102!h

8flinnid;;;88833MiliRMMMeeeMMM§MliMMIR/iMMiiiIMM2Aiegie3gM2MM§MMeMeeeIMMIIMMiMei22iiiMe

88

..uHu

..

i;igi53 ,!5;e5219.

. inMg5'

21

3

„iq21.d§i

a221222122222222

:'eeeie

.....

,e3122241

2L

2.eelle

2e

j5 aaaaa55

2212322242

22i11211

8

1221222224

2

33CC33322

3,2t

2222

2

555555555

5555555515155 5!

!55 !I

55

)5!

ifz,'t5.5ze

.:.1., .... :

.

;543;55)

e

. tezez

552

Zi

ti

5

. ir; .... .9.Ai.4zz5I5:55555:51:

.0,..333 ................:A'e.:;:::::4.Nfliz,;;P,L.55i:

gggi:

,-EU, Ltee ,

:etl-eE

i—

i=1.2 ..1

liKtilil ,,,, ,

sw.is

2 °

. . ;„

;g:11::

Is

2

1..

......5 .... - .

PC ............. emece.ccecremee ..... c ......................... POMe ................. eceococcememcmccmcce ...... ce222ccewem ...... cocceeeceecce

2225255555555

SESS8825S

Illi11111112MIIIIIMM1211!NNU21212111112M1W;_;;t ;

;;;NA!!!!!!!!!In111111WInnssm§

5§§v§slemememesin mulmm

muststmgmumul213259

tstsu5555§§

99959

§§§m§§§g§§§§gisissistsmistutstutstuttutimmtstitiittimmutumustsststims mussummull

exe2e23222

xeg,e23

332,122222!22229,e2!222s525g

•I3132222232C22323122243838313CC333331334333211333334444333533331111

c

c

222 ...... ccococo ..... 2

..22222......

C C2.2

23

°

333

RRRRRRRRRR

gö ...............322

2

112122

-222;e3p5i22.,,-2,22,0

2 92222229

,i33RR.2

ee-pigseeueuzegt39..,eweeeep

,- 2.,-..;ege- e;e!eeeeeeee

e...eeeeee;eeeee:niiiie ,

91 .

2e.

..6.222

- 2eet$seeeepAigeugjeueiui

z

eseselse'

2,52

6.40UUU0

23

,,

zeeez.

2S

22.2.1

ee_im,--9 !ei;evieeei

eigeviMiWeei e

..9,i:31.5522T,222.623:32.§-262X221r33,2.g.iereiiIr

'Ae.e

eze

33''''''§i15

> M§eMMek

- geieiEnli§2EeereeeeeZZereeeeg;ireW14,

LerAii2iAger"

22

....... ......

2ä444ä3ä42.....

22;1;1;222z

2868288383

12

......

.223

ää,533P

3äää

ä3:13

2

3

2 2

22229.2U

121

.2323 663

Wel;:

eiEvi!i

!!i i

ttiim iin i

ie ii inii-1 i% t4 it1tii te ze te e”

w-

tt e

tte t

ae ee zeetee te t5 k

zazezezetee t. te .e äe te te t,:e te ee a

t.i z

,i ti ee te tl t,1.

25222552

8822.8888.8

!

8

i

8

004004Z,

44**4040440444:*6«t0

4. ,

0004e«22ee44e0e4444

44

'

.

,M=

i!.

11 Yil

-1, 41.01m,i"i7.üA

IM .1.!

i

MMh

1

11111111111 444.44

4 ........... eae

ittli

- I 111111

4 iiitili Ii11111111111111111111 1-

I.Eile,iiiiiiigg 1

11111111 1111111111 11111"'

tj11141111111111111/1///11"'

!/!!IllEe. Ilglepp.EEeeElil L

ii

; 1

g555

N YA

242

88

88

11 3

28Z3 ›8388181.

iiiiiiih

11111111111111111111111111 iiiiiiii›:›2

i111- 121

132

-0 00 0,0 ..

ii.e22.5d

-

eeeiereeeme88H88meeiiiem8WMieeemmemesgedemeees888-- sgeemeev38m88888eeeemeememag8emmemmemeeememmemeememmememememexem

888888a8233gme8888

g 2me

Ui

- 90005555555eEgiiii“Es 0559090050555055955500

55

rlingeir, :eue737. eeezzszr.1,

22§2.H.9.-i:!m

t.

... .

Euzzs , Oighze

.. .

1

'.ii 855.2444, 0'1:

.

1 I; .....

..e;;;;2

eeeeze

.

2113

11

2t

22212522

12122222'62

21282221221111211212

22222222.!

I

42

.514010

zji tx

.. eiel1

SS

EE—ESEEEE3

............. c... ................ ..... ...................

8855 15 115

.3 .

3

2

11111Miti1111112!12111111111i2111111MIllilil188§§8§§§119§§ii§§i§§i§11§M§§§e§§§g§§§g§ggg§§

.22.2

50000000

6.222222222000.

2

MiE8888888884§888§8188888838888888888888888888

2232

22222222

0900

22222222222

!IHM inEWHIIIIIHMIIIIHr"Mäli111/11/

g88 P11,11‘MiämPHIMIMIIffinnllg§§g§§!

2222205225

2RRRRRRR23

RRRRRRR

unupuieuege

eaaazireZ.ZiArrifiiiii,1„.e.;Z:igAr

21.15M9,1432'.,,Agie;i1

3;1:3311

aea2ae en:=naaaaa€

naeG,

a,.eann

§§2^21A

-

:e 3,...e 2e.3ee30e

nnnnnnnalaeszslaseeiesecreasemasaeem

nnennnaeac_,..seieeeeaaa!nzAena..3„e.elegesparamaaieeesseIs322ae3.aa335 n ea

a aieee.leeaa, 4:e33e?..'eaegeeeeaaaaa ..... a

uweg

e3ea .. 3

333333443

43-4.:

3__Iddi

*egget

4433.3

311191

1111111

teeti

sageegags

•ititi

ttitteettetttättettteettetttatttettetetatt tettttettatttetttattititiiiittttettiiiiiii tittittti

t ttettteettet

11111

se«..«

.140.3e4(4«d«d«

4gee" «nnnee4ngeeeffeeeeneennneffeeeefeeee

n«***.e.e.ne.neeleenennne*.enfrnItnnn.nn.n«,nel

!

3

Li.13f71.717.773

....... . 13337

_33131- . .1J1J3.1.1 .

...

11111J:M11

Y 1!

§1/111 13ii

111 eihilliii€€€€€€ligigiii

"

d'

1 11111;1111111"11"

11111/1111111111111111/11111111111111111111111111111111/111111111iiiii1111111b;11111111

g,

z

111 • '''•

1111'

111 1

3 3

iiiii

33

›einieeleeelieeemi

3 31 ilggggi';;;;;;Aggggg4Aigeng3313331 ei e

eeemmemememenneweeemmmiammemeeeennannannneweeemeemmeneeemeamemeeemememeennnnsnameeezezememmen

II

11 ;;;;; .. "

leit7,U;

iliZA

Hz;

22

t

2

2222

...... L,

34333333

2

2- 3 PMM

13)11Min

%mi3e3

CO

1,s;fef;235--t

''"eeeeee,JEe

-.Y z!'!Vd!

eee3e3eeee3eeri

« AA

=rie3

ee

Nza wag

3

..............

...........

55g

5g5g5g5g52:!!!!5g

5g5g!T=2

5 555h5 5

55555

g gggg-

Z8 3f4X:131

fiff

HHHhillinHOHHHHHHillifliiHHHI

t

11111111

. .e..,

2LEEEE1,7•Eg

Igiggilpgg

iiiiiiilsgsgsggggsgsgil

2.E

3 3 6 3 3 x

3

3

UI IM!

1.111113I11343

222113

II

I3128223 91212121MMUNI11111121111112iMMIIIIIWIMPAA

§§§§§§§§§m§m§§§§§§§§§g§§§ §§§§iiiii§§§m§§§§§gmummittittlimiligmme§d§ä§§§iii limimmg§§§§§§§§$§81111 !pplimitminflutfilm§

sgesaassausaagazaaegimilimrss

migaiscaelesseamgi mz3222sasatquil

22

2828288288

iumu

t2

i

;;e

ri~e

fiit`e

eziP331

gitd

4 ~s

2222A2222222222222222;25,25,99992222 222ii222224292995229222222222

"1 "111111MMHPUMIlffi

.2.22

232"1332 333Wgx332 3322333g9e.p's";33233

0„,,j1",„,hti

9 -M-

-- -eVae"

M1-----

,emozi5f-m"Eumeoeee - 33 - i

)exti22

-1,3n3-"3135333$323'3:333333,

Y2237.52

12

itummillin

e3;3333111,3,1111;.13.ei15.33823'39e57.3335.33.esza.tz.9.5gageR:_•,

e..ee,.:1 ..,

zaa..3.33'.333'

---- "i'3'332","'"

51

- eze.

35----121332'!"5133333.5::-Z213--3332ggsg"-1-2

rara

Jgee

sgJe

aQJQ

SQzC"z

ea

7St iggeX

ä .3e221222222222 22

ge%r2

g

.> eel

e34.

.i.i.iieidd

5

4

difiiiQP0

CC

Eod

iElialii !ViEs55.555SSEIriFiziE5s5E-555552zia5.5.te. iiii5i555

355552rnme

"1""il2" lain1^211111J111111""dli111101

11a

ml "1"111111JeJ

11/j444"44M4

eAmil"i"P'

il/INd13" " "

'

•gg ge ggg

<

.g3e3

8gsgsggse3emee

°

422212

222221

teetteFttttettttteeeeetttttettttettt

,.14e4121«2«.4.«,feele.foe« e «...;,eeee

fso.if.,33#fl

1111te:ttetete

tItttitt.ttfd

aGae

3131111 11 IIII111111111111111111111111114143

xgg xi

111:11

_1 _WUM

111 11 M1111

1

eh

e#itet etetet_

11111111i---.... MMN2:N3352322222222222222222;22232222222222

2222

2222...

2222.

2222

,22225,9

922222929299222222.

5

MUMMIIMIIIIIMUMMUMIUMIUMM miteutemmmuillitttiligw

!!"""ml!'"Illu!!!!1"'""""

MUNIUMNIMIMMINIMININIMM

mmuniteleg§§§g§§§§§§§§§§1m11§§§igigagii

..$

. 22.12 3aaaaaaa4a;

22223232222222222

2 ........

2 ........... co

RR

eee'o" Oeii1aa )8838 a55ba 558565ooe e26eeeZ

ot.

Rg2

illgiiiii22

'''':'' ..... ...

2 1:'9,3RI3pKe.“.^5pAiWU3ie.28,51.,01§"'22.17811feMiggilWaieele§e0fia§gefiEe§§§i§i§eiEeeeeE"

fiirfifEieZ

eeEeE5euie5-je •

iig '

"

geoze,euggrneeerluou '

egg.eeeeeeeeeev"

eeeeeeg-gg-gg 2.3

ee3--e ''''' .222.2e.g-gggg5gg'g..ggg

211t

g- gg.ereg§uenlie5r

°;.."12:5i3elfi4

2-3:5 '''''' —

eeeeeeeemezeeeze

•

33

d 152.2 /

#1

322*

ieiA

.PA51;7427,

fi

2222222

3

42j233 ;14;ae 444 434j

383322922

3.3.1

5358

285

4c,

e4.

1111114

11111441!

53151559515193553-31515-555155

'ee.eimea '

!eilte

MMArni/MIMM8888988MMM

888328ee5M

828

19..

----- t --- "'

ti

28

8888

-

03-

IIIII1111111111111111i111111111 I3

=4,:::::,:4z4!3!„."...Z.g!!,!!!!2!

4 4

444

8928

995!!53535353533353555555555558 2595585555585555555555555553585

5555595535585.

Hilii111111 1 "99i1115? .,e3, 5. .2

"ligiffinWHHHOHUHIMPMIMPH

4I4404/

-- hatag.aztäita'

e,.223,288832.te22. t22i22ee,0»000„!

2” gagisss-222

2;Aei333/13.23.2zels.

weemzaeseigg88288weeuesseemen—ielue

----gemeews

weesgsgsgs8emu

nilui

85

999159

§

ggIggtgg

gg

g g

uu

z timo;

n•r“fl

g t!!!!HOU

I I

n

rtrurru,'.

HIM

!I=

223823223294998g88 Y99899995132999 Y9 ä2888828,2888;81998Yg5i92.5

9238929989828;2229829293429288888888828992382828;838888 888M3M88 8283828328888382288

PP*

- x4

2

2eieie4e4e44444w4eiwie

• •e4•4•44 --

• •4•44 ---- 4

8888

illiMäPäigliiiiii11111111112M3111111111

!IiiiiiIiii1111111!!!!!!WEl9!!!!!!!!!!3!3!!!3!!!!!11111

18"1111 !!!!1!!!!!!!1!!2!1232!2"

11 "111211!!99!!!8!!!!!!!11111111111!!!!!!!!!!!!!! 1

1P111111111

3852282830 5233$874.53252

222::2222;88883RRiR292

8

tcsgssgsctxtzgsnzgtss;assassasas.sszszsasssase

35

98888555855528

52550550055535

55555355030555555555

5503555535355555553555555555333325553255550555

RRR

52 52

R Wind!

eRRR R

R

iiiiiii Warn

§1

8888871.48888888

8

8382282

lieeuAleMedeliliqffleiersP'

EMU-rale 2120. '

2.XAA.1-..v.22Ze:".',

2,''.

es VrnAgAlg

-"eeseillpHeU-7,2"

esseseLeNee2eeees

32222.22333i3e4e0liii

3§4eUilfifaileieMilM5.3*

t.eAV***—

i

ge4::4e9e4e,

88;222

5

tttX4,53eMEi,

11 1111111111111 1111 111111

L2JAHeg$331331328282

ev2sisEsslim

140411.111

22gMgMtt

see ** e ** esess

21212822222

4..««

3i 3

eeeee

313333

8822222Aep.

k..33229433324282

228

82228222222282 228

Will

IInlnhflnH

is

„,,,..§.§342V2222222.277,3233.74.

58

33e3-2i. ..22.

22-7;529.3

e ****

ttt *****

z eii.eeee

22ee..4eee5,1111tAjfIlitjltitftf/

•-••

E

i..iFEEFFEIEVe

p(11111141101114.4. 11U4MVA(MII!!!!!M111111414131141114f 7 d41443111

-•

„„222 82222#2###

822212221828...„„

oo

* **

.

Y,Y,Y

. . .o ..... .. .

.. o ............ ....... cr000.

22 2

gyennuc2511ulleluilluil2miegieelelmmene

“1.4 .

, i3e1i33izgs.e,„

22

ssgssssemmeemmemeemmeeesssssessgsgsssmemmeeeeeeemmeeeeeeemssessssssmssmeeeeemmeeemeeeeemeeieeemememmeeemiemeeemi

33333233333333euo.

eeei

LtaZ12

SS88833

.:55555

‹.

ittleillitä§ät

02..1

218

* 221

.5

0s

55,2i“giiii "

1 'rers.rrn

233

Illiiel2

44riremrrr

iiiiii5

U333

2ee.122

CM-e.

eae

Farin

$HH

Hele2.2

2HI44

3133.

!WM5ri

5.5 .-WM?ii?ieEK

'''UneeIlftWid2327,456242oe3

i-'“4

-r4.7,"iiPHHHHH.11

3YR93g223aS3g2gSgSRM299WeggY5g929993299J2329292939223519g92g999992g923R92929999999A95959gR999993ANA;i2gge.2925ggrn33292Mg$$$$g

•4 4 . 4 4

•4

4 .. 444

4'4444444

22

Tininnnnumisustrunnuummunnumiummumurunununummunnumiunnunummunnummununimuu

1..1111 111111111111111.1111.11I1111111!"'"4"1""!

8:4""'"IM WI"'"'"1111111"'"11111!

'810 1111'!!!!!!!!!Mmummum" 11"'"

223=4"Ve.'4VVVV.

"

e

2

2

ä444444114444g44e88444444444u4r44...444.

-144444404%444%44s44m044

4 gesiemisasesistsisssseseses?011eaudgeseess8s88s8s5e.laszasssssss88

8.$$228

?22 r!sssmssassgsg...--- .....

.RR

M

s

2

3333

'eek.egke**

0.

I"

.......... ..e

m2z2z=teeeeemgtes-

.!..teeeieteeege.e5g.e

.

,eSfAi222R4

638,742121-85V30.

23§0271.

24

elg--gt— eezezzte.ura•egt—eze:teteei:sereetteeeeeu*

-e2 ... !"z"-se

--umett—ezt .

.. seet§tueuuee§e-,.eteuez•euzeeezte:2t

iggiggigg äggggg33,41 gg

gääggg34 ggggggga

3335353 88 33

aii22as

I5 5 83 5 33 33 33 83 83 83 44

44.

2222222

333333353338353335333333388585

12aatigiiii

0 000 00 0 4 4

4

004 4040 0000

tetetätigetettatitCtiteitteit tegee

5555etteetz eteteeteetate e

ttettettettetetttettetttetieceittet

e44ee.,24eee

ez eee2.12e2.,ef:.

z42.4424044424/4044044022e

lili13111111111IIIIIIIIIIIIIIIIIIII/11111111

APag:Ig.24,1,4.1tag:tit.it

g Arg

35888

t tate 1.

2 Z22320003

•4.0,r4d05004544

I434

7

4.2;i23

!e!!!"!

azii5VEVErizEeFE2ExiiiziVVEFFsFEzE1112I

EsEeliiVrgierieii!EitEiViiiiViViei!.ZEFeEESEVEVFM3%!.Fie

EVEEf.Ef.FEEESIVEFFSEEEFEZI .

niiinlzumnfipininmPuihmarnimliphin,

- 1

'e e

00 000000000000

0000L00000000000~0000000000008

1 ;;Z.;2221;;ZWZ;222022555474222222222e4Ale:M2A222Z2Z22e45i1Mirli2;;21..MiZeTZZZ2Z222

445340"

;

i

l

i_ cee244 . ii;

fl

näije'Aiehlii,i2.1=Aleif33*Raaszitei

meeireemmemgmatittemeet8gmmsemetemmtte828888gmetteme8xgggemeweeteeettemeeggsmeemmtm

-v.sgsgmetteette

888888stimmettemetememmume

33333333.133173

059ii

ee R

-r5555

1313333.3

331233

f ts *f

t

f

4

?

fflilii

Tlif

m111111

Iti'W

„glit{Miteit

'.e 4...e- eee,äeieeemee.3

3 tiiiltneegif:ee

eneulumeili?????iegemeo

z??????????iIii

511

? ? z ?

WIHIHIHUHU!

22$3g33$Z22

300040003000000 ....

33333333333e3333333333eee33333333

rZ

2i

'ThatielpHIV

ji I

I nufmnii HI Wha

,???z??2???zie„ ",,toittwumnik

555555555 1111115

E1515555M

5 5 511115151515555555

55

55

11,11115555555555 555511V1'1115515

5555551

1 L15151111555 100!

..............

gViz'.133Ui

33.293331

.74?Ci0200002000ük7it‘

kkWOOkü0

55

ezez ezzeizie2e

e 29922922;ä1222i2i2g2 .92229222223252929222922222

2,2222233322

2

222223222,222A

23432222222222232333333

IIIUMMM/H2MHIMMUOMIMIMUMUM33231MIUMMIMUMIMIMIMIUMI111133MiNeMMMIMIHI 1115iiiiiiiiiiligiiiIIIIIIIIIIIIII

2000

imeltigitimfmn.u§imitip

q i t222329922929222isiilli

tilvl

88

ifspe!ememm§g§§§§§§§e4ilestemmiumuggi

-.1144447 7

A92244 e

ee

.:,5 2.3

.33777:271

88888888888E88-

7..111177447.7:24

13

8888888888888888888

2.2...888888888888088888888888888888888884

8888888888843330831508282/52888888

8886881588W581§88888888888888888888881588888888... .....

2 22

stegteeesgeeeee6e

e eee

eeessevess14/sealitevilf$sefeevevve4e,seeeeeee5;Oga$emg

:5

I5

I:44M544445444344545444445444435.53443445444155

elinielE555

iiiigt55

S558Seopoogooee .....

Re.RWR2R222

SS

002

22222532

.3.....2:2Ns..",

32sVielf2g2212z8

-

)3222

5" 's

23233

92?

23k.K.eEeEker§g?,4

<31P.I.:"

..'

3333U23352 eu"--

e.,eieee.gi:

32

22222222

212222222g§§§e3399),5.)0

J8183 ''

882,888

'

222238212

flIIIII

441

R

'-i- g

e.mem!Meleilgi4g2emieäft;:5

eeee ..f

2"

*3

I I 1 4141111111111111 IIIII11111111111111

eM--e-uP' ' eerneemeee .

2emeximee

K.2 KK

e eeee.eeer..25--I

emeeeiliemee2---

s.12"

3222Se .......... *.

igää4433......33ä

2 52222

........

3,31.32132fl 2522

288,888888

ieitittete...treeketzetete--“

..... 2

52

'.'12

4.4.'«.....44*.ge4Qdge.Odoodq44.e.

deeeededegsiddefddeed0

11111111111111111111

33333333333423333133113

3343312333.333333zEzEs233.-.3.33333s433333.31..333

3333 .... 3333333433334_232343334343343.4.3.34.34.33.

t

yi

i22

" eigi 1 I iffew-liux!

1111111milmliAli

lig Imullimlin iiimpilllimpu

l iffiffilliliwilipplimlpilllinooniqpilliiillifilii.i.,.,,,2.

i,.,‘,Iii.li "Iliiilllinillw.i,,,I

niliii,.,.ili,

......

77 )

22222222 -p.k.tet.,eet

1n51 'i568 3

28S632 3

.S-cjiiiiiii.;;;;;;;17

8.T8333;::83

88888.

iiifflK

22222

"243.2IIIiiziiii

! i : 22

25352322222ete .

r.1.1—:

11,:l'fll'

illililmuudieemmummeiam8ggsgemeeneeeee2iimeggeemeememememamememeeeeeeegggsggemememeggggsgsgmeemesememeesiemeemm§-882

eeem '"geMR1

ee

:tim

t

2 •

I!

32)332222

ief333-

33322 88 8i333ee

e -

IfIffiliffiiii

!!! %

22

836

11141441iltilelententatit

!!!! §i§itrnMi

'22firEfEr

11

till

lHhIiliHuIiILt

e z

ezZ

"qie54eee

.5g5ieflIVifl

e"

?Zii022H

11

-,

333331111131111

OigillgIgl

!!

-e2gU2... .

1333631/06

0!!!!!10

a2Iieeeeccc

.gik2Ut4'

11111111111,11

2222 5

3 5 3 53525225k2)22i2i3

22

2

ee33332323333ii2

47323

Zirgh

2kkiitMUUU

xt

ijiJIwu

2

ifiggHt!gt!!0!

A,ltf,t5W

23: 5

32225223225525522528252222222222

••• ...

4433422324434

!2

*58

83 f388ipe88

lt

88822

;lt 0

1

1 Z1

UI

158223522323332223222525253533232525233

232355223232!3"8"

1111111M1111/11I1/1/W

1g11"5""" "IIIM111,13!!!!!!!!!!!!!!!

33343833934433

twaaszazzazzazzasz

azzazzAzzazasx.e.azaszsa

sasszszazzszar.---xxxzazzsz:zzazzzzas

2223222225222

222225

323 z

33 4a 34 88883eeeee8f888883983

38888888888888883sa

48e3333333 e888888;818:33318888808$8U88888388838333881881888888

22*2!!!!!!!!!388833888888

,.*

leidifit..

2.2222

le°"; ....

344323.2

222222

AFFIDAVIT OF OSCAR BRAVO

STATE OF ILLINOIS )

) ss:COUNTY OF COOK )

I, Oscar Bravo, being first duly sworn, depose and state as follows:

1. The process for gathering correspondence:

a. HALOCK received the following artifacts for analysis:

i. Microsoft Exchange transport logs from 10/1/2017 through 1/22/2018.

ii. Barracuda SPAM firewall inbound and outbound SMTP logs from

10/1/2017 through 1/22/2018.

iii. Lenova LP5Os system for NAlvarez on 2/13/2018.

iv. Lenova T403 system for Mlneichen on 2/13/2018.

v. 4 mobile devices for imaging on 2/23/18. Imaging of the mobile

devices is in process as of 2/23/2018.

b. HALOCK received the artifacts, maintained chain of custody throughout the

analysis, and placed the artifacts in a locked room with keycard access to only

authorized HALOCK personnel and a surveillance camera inside the room.

c. The physical systems were acquired using a write blocker using forensic

imaging software "Guymager" and saved to Guidance Software Encase image

file format (E01), MD5 and SHAT hashes were acquired before and after

imaging for validation and comparison of HDD information.

d. The physical systems and logs were processed using 1) Guidance Software

EnCase Forensics v 7.1; (2) Magnet Forensics Axiom v1.2.3; to analyze all

possible data which includes allocated, unallocated and slack space. Forensic

processing includes hashing of data using both MD5 and SHA1 as well as

indexing all data and ready for searching.

2. The searches performed on the processed system data and logs:

The date and time range of the searches were contained to: 10/1/2017 00:00:00

through 01/22/2018, 2018 23:59:5 and included the following searches:

1

Attachment D

a. Identified correspondence between Martin Ineichen and Noel Alvarez,

b. Identified correspondence between any agent of PMA and Jervis B. Webb.

This was achieved by using the gerviswebb.com as search string.

c. Identified results excluded correspondence that had the following strings:

i. [email protected];

[email protected];

3. All data resulting from the aforementioned searches were. proVided to PMA

HTML (web browser readable) and PST (exports of email searches including any

and all attachments) formats.

4. The statements in this Affidavit are made from my personal knowledge.

5. I am employed by HALOCK SECURITY LABS, and have been serving as a

FORENSIC INVESTIGATOR for 6 years.

STATE OF ILLINOIS

COUNTY OF COOK )

The foregoing was

o

) ss:

acknowledged before ine this 23rd day of February 2018, by

or who has produced

and who did id not take an oath.

Given under my hand and seal this 23rd day of February 2018.

%,-0111-41ibm-,,, tfega:-naialassaboAtaffiraeoreamu-J.Ipm0

4

OFFICIAL SEALPATRICK i CODERRE

Notary Public - State of Illinois

My Commission Expires Mar 21, 2018

NI/ )",111110"111

NOTARY PUBLIC

My commiSsion expires:

Attachment D

Affidavit of Shaun R. Vodde

I, Shaun R. Vodde, declare as follows:

1. I am a Senior Director in the TransPerfect Forensic Technology and Consulting

Division ("TransPerfect") based in Washington, D.C. TransPerfect provides digital forensic

analysis of electronic media and digital artifacts from computer based systems.

TransPerfect is engaged in the business of digital forensics and electronic discovery. I, and

my company, are frequently engaged to preserve, collect, analyze, cull (data filtering and

reduction by file type, date range, and keywords), review and/or produce electronically

stored information from computers or computer files ("ESI").

2. My curriculum vitae is annexed as Exhibit 1 and outlines my education and work

experience to date. Summarizing briefly, I received a Bachelor of Science from Embry-

Riddle Aeronautical University and have more than a decade of international technology,

forensic investigation, and litigation support experience. I have received specialized

training and earned a number of certifications in the forensics and technology fields.

3. Prior to joining TransPerfect, I worked at Deloitte Financial Advisory Services LLP

as a Senior Associate in the New York practice where I conducted forensic investigations

and worked on electronic discovery, hosting, and incident response engagements. During

my time with Deloitte, I worked for private sector clients, government agencies, and

conducted both domestic and international investigations. During this time I also spent six

months abroad developing an e-discovery and forensics processing laboratory, which

included training a digital forensic team.

$ynopsys

4. On February 22, 2018, TransPerfect was retained by Jervis B. Webb Company

("Webb") to provide forensic IT investigation services in connection with Webb's bid for the

Attachment E

Project entitled "Greater Orlando Aviation Authority BP-S00132 Baggage Handling System

for the South Terminal C, Phase 1, Orlando International Airport" (the "Project").

5. I have personal knowledge of the matters stated in this Affidavit.

TransPerfect has forensically acquired electronically stored data residing within

mobile devices and iCloud accounts of the following Webb employees:

a. Todd Alderman

b. Ken Hamel

c. Alex Wuchte

d. Andrew Grusnick

e. Colin Oatley

Joe Emery

g. Alan Daavettila

Tracking information for acquired data and storage media is reflected in Exhibit 2.

7. TransPerfect has not altered in any manner the data collected from these seven

devices. TransPerfect will retain all data collected from these devices pending the outcome

of the forensic IT investigation that is being conducted by the Greater Orlando Aviation

Authority, and for a period of six months thereafter.

1 declare under penalty of perjury that the foregoing is true and cow.

Executed on 'Cat)) " 2951 C-4

Shaun R, VoddeState of County ofThe foregoing document was acknowledged be ore me this day of rib 201tby N.Y.-kOt\ who personallyappeared who proved to me on the basis of satisfactory evidence to be the person(s) whose name(s) is/are subscribed to the

within instrument and acknowledged to me that he/she/they executed the same in his/her/their authorized capacity(les), andthat by his/her/their signature(s) on the instrument the person(s), or the entity upon behalf of which the person(s) acted,

e u ed the instrument

Notary Signature

LAUREN LUBERGERNOTARY PUBLIC

District of ColumbiaMy Commission Expires Atty. 31, 2018

Attachment E

Exhibit 1

Attachment E

Curriculum Vitae for

Shaun R. VoddeSr. Director, Forensic Technology and Consulting

TransPerfect Legal Services

BIO/SUMMARY

Shaun Vodde is the Sr. Director of Forensic Technology and Consulting Operations in the Washington,D.C. office of TransPerfect Legal Solutions. As a digital forensics and e-discovery technologyprofessional, Shaun has more than a decade of international technology, forensic investigation, andlitigation support experience. He has executed large-scale forensic collections, investigations, and e-discovery engagements throughout Europe, the Middle-East, Asia, Africa, North and South America. Hiscomprehensive skillset starts with a network engineering background and service on a U.S. NationalIncident Response Team. An in-depth understanding of server architecture, archival systems, and massstorage investigations has helped Shaun deliver world-class litigation and advisory support services formajor law firms, the U.S. Military, government agencies, and Fortune 500 companies around the globe.Shaun has developed and directed forensic teams and laboratories both overseas and in the UnitedStates. He has been engaged as a technical resource for deposition proceedings, prepared expertreports, provided testimony, and served as an expert witness. His proven knowledge and extensiveexperience make Shaun a valuable member of the TransPerfect Forensic Technology and Consultingleadership team.

Shaun began his career in the technology field as an undergraduate student at Embry-RiddleAeronautical University, working as an assistant to the lead network engineer in troubleshooting,documenting, and expanding the University-wide network. He was later recommended to a positionadministering an isolated computer infrastructure for a government-military funded project. After gainingan invaluable understanding of the interaction between network devices, servers, and security systemarchitectures, Shaun accepted his first full-time position as a Network Engineer and Wireless Specialist.Expanding his knowledge base to include commercial carrier class wireless backhauls, he surveyed,designed, and implemented network solutions for governments and hospital systems, gaining experiencein his first consulting role. Thereafter, Shaun applied his in-depth industry knowledge and analytical skillsto the forensic arena, accepting a position with Deloitte Financial Advisory Services in their WorldFinancial Center Office in New York City. Distinguishing himself, Shaun was selected to receive additionaltraining to become a member of Deloitte's National Computer Incident Response Team. He also utilizedhis analytical and interpersonal skills to develop both knowledge and relationships in emergingtechnologies such as early case assessment and archive remediation. In this capacity, Shaunparticipated and conducted over a hundred forensic collections, investigations, e-discovery, and incidentresponse engagements, as well as developing an overseas e-discovery and forensics processinglaboratory. Joining the Forensic Technology and Consulting leadership team for TransPerfect LegalSolutions, Shaun draws upon his knowledge, experience, and professional relationships to develop andexpand forensic laboratories, forensic colleagues, and practitioners, and build industry partnerships todeliver world class service to TransPerfect's client base.

EDUCATION & TRAINING• Bachelor of Science in Aeronautical Science, Embry-Riddle Aeronautical University

Daytona Beach, FL, 2002• Information Systems Risk Management Conference

Information Systems Audit and Control Association (ISACA), 2014• FBI Citizens Academy, U.S. Department of Justice, Federal Bureau of Investigation

Washington Field Office, 2013• Real-World Triage and Collection with EnCase® Portable, Guidance Software, November 2011• Security 508: System Forensics, Investigation & Response, SANS, December 2010• Live Data Acquisition and Analysis (Memory Forensics), BitSec Global Forensics, April 2010• Client Targeting and Relationship Building Skills, Deloitte, October 2009• CT Summation Discovery Cracker® 5.4.x Training , Access Data, September 2009• Professional Standards for FDS, Deloitte, August 2009

TRANSPERFECTOIG TAL FORENSICS

Attachment E

700 Sixth Street, NW • Washington, DC 20001(202) 833-3131 • [email protected]




• Complex Financial Transactions Mortgage Fraud Consumer Lending Disputes, Deloitte, July 2009• Complex Financial Transactions Securities Fraud and Contractual Disputes, Deloitte, July 2009• White Collar Crime Investigations Prosecutions, Deloitte, April 2009• Conducting Effective Interviews, Skillsoft, December 2008• Computer Fraud Detection and Deterrence, December 2008• Federal Compliance Training and Certification, December 2008• Computer and Enterprise Investigations Conference, Guidance Software, April 2008• Effective Interviewing Techniques, SmartPros, February 2007• Privacy in Practice The New Business Imperative, Learning.Net, October 2006• Cyber Crime and Tracking Electronic Mail, John H. Stamler Police Academy, April 2006• How Courts Work Legal Terminology Overview, Deloitte, December 2005• Advanced EnCase Enterprise, Guidance Software, November 2005• EnCase Intermediate Analysis Reporting, Guidance Software, June 2005

CERTIFICATIONS & LICENSES• FAA Commercial Pilot License, Multi-Engine, Instrument• Licensed Private Investigator, State of Texas• AccessData Mobile Examiner (AME), Access Data, May 2012• AccessData Certified Examiner (ACE), Access Data, September 2011• EnCase Certified Examiner (EnCE), Guidance Software Inc., January 2007• Wireless LAN for. Account Managers, Cisco, August 2002• Wireless LAN for SE's and FE's, Cisco, August 2002

INSTRUCTOR• Basic Skills for Forensic Investigators Workshop

World Bank, October 2015• Forensics in Action, A 2-day Workshop

ISACA, North America ISRM, November 2014

PRESENTER• Using Emerging Technology to Address Conflicting U.S. and Foreign Data Obligations

White & Case, LLP, October 2016• Introduction to Forensics

White & Williams, LLP, May 2014• Forensics & e-Discovery for Litigation Professionals

Cleary Gottlieb Steen & Hamilton, LLP, February 2014• Digital Forensics for Paralegals

Kirkland & Ellis, LLP, September 2013• Forensics for Sales Professionals

TransPerfect, August 2013

AWARDS• Outstanding Performance Award, Deloitte & Touche LLP, April 2008, October 2008• Exemplary Performance Award, Deloitte & Touche LLP, September 2005, April 2006, June 2006,

November 2006, December 2006, August 2007, February 2008, April 2008, August 2009, October2009

• Service Award, Deloitte & Touche LLP, February 2010• Recognition of Invaluable Contribution, FDIC / Deloitte, April 2010• Recognition of FDIC Commitment and Dedication, Deloitte, April 2010

TRANSPERFECTIGITAL FUHEINIS CB

Attachment E

700 Sixth Street, NW • Washington, DC 20001(202) 833-3131 • svoddeRtransperfect.com




PROFESSIONAL AFFILIATIONS• Scientific Working Group on Digital Evidence (SWGDE)• InfraGuard• Federal Bureau of Investigation National Citizens Academy Alumni Associate (FBINCAA)• Computer Technology Investigators Network (CTIN)• Digital Forensics Association (DFA)• High Technology Crime Investigation Association (HTCIA)

CLEARANCES• Controlled Unclassified Information — U.S. Army (expired)• Confidential (Public Trust) — FDIC (expired)• Confidential (Public Trust) — USDOJ (expired)

PRIOR EMPLOYMENTDeloitte Financial Advisory Services, LLP, New York, NYSenior Associate, 2005 — 2011As a key member of the Forensic and Dispute Services team, Mr. Vodde provided consultation andtechnical advisory services to Deloitte's clients. Shaun, individually and as a team leader, conductedforensic investigations and worked on electronic discovery, hosting, and incident response engagements.For private sector clients as well as government agencies, Shaun has conducted domestic andinternational forensic investigations. One facet of his international experience was the development of ane-discovery and forensics processing laboratory, which included training a forensics team on collectionsand processing. He worked on several large scale data recovery projects and gained extensiveexperience in investigating servers, mass storage, and backup & archival systems. During this time Mr.Vodde was also selected to become a member of Deloitte's National Computer Incident Response Team.

Regional Airline Academy, DeLand, FLSystems Support Specialist, 2004 — 2005During his tenure as Systems Support Specialist, Mr. Vodde was responsible for maintaining andtroubleshooting the Local Area and Wide Area Networks (LAN/WAN). Shaun also designed, tested, andimplemented a campus-wide wireless network. While supporting executive users, telecomimplementations, and maintaining flight simulators, Shaun was also responsible for the Microsoft Server2003 implementation.

Empire Computing and Consulting Inc., Ormond Beach, FLNetwork Engineer and Wireless Specialist, 2002-2003As Network Engineer and Wireless Specialist, Mr. Vodde provided network design solutions to hospitalsystems, colleges, universities, local government agencies, and businesses. Shaun provided survey,design, cost estimation, and implementation services of both wired LAN/WAN and commercial carrierclass wireless backhauls. Mr. Vodde's responsibilities included client relations, billing, and thesupervision of installations.

Direct Mail Express, Daytona Beach, FLDatabase Analyst, 2001-2002Shaun worked as a Database Analyst in DME's Daytona Beach Campus part timeWhile attending college, Shaun was responsible for the standardization of DME's client data, databasecreation, and the manipulation of databases in order to fulfill client requests. Shaun's expertise, visionand hard work resulted in savings through the automation of downline tasks. During his time with DME,

TRANSPERFECTGITAL 01-tE NSICS

Attachment E

700 Sixth Street, NW • Washington, DC 20001(202) 833-3131 • [email protected]




Shaun worked extensively utilizing Microsoft Excel, Access, Group 1 Software, and in-house applicationshosted on an AS/400.

Embry-Riddle Aeronautical University, Daytona Beach, FL,Multiple Positions, 1996-2002As the student assistant to the lead network engineer, Shaun worked extensively maintaining,troubleshooting, and developing the University-wide Local and Wide Area Networks. Mr. Vodde gainedexperience and expertise with Cisco, HP, and Cabletron networking appliances. Shaun also participatedin documentation and maintenance of the fiber-optic backbone and was heavily involved in the testingand implementation of campus-wide wireless network.

Subsequently, Mr. Vodde accepted a position administering an isolated computer infrastructure for agovernment funded project. Shaun oversaw the daily operation of servers, backup systems, andfirewalls, and worked with the special projects team. He was also responsible for the design andimplementation of a secure web portal. This project was used to view and edit documents on remotecomputers while ensuring the content was not transferred outside of the secured facility.

Shaun joined Embry-Riddle as Lab Assistant during his freshman year of college. He supported studentusers with network access and software support. His responsibilities were soon increased to includemaintaining computer systems, lab infrastructure, and integration testing. Filling a need created by acampus expansion project, Mr. Vodde became the IT Network Technician, accepting responsibility forcampus-wide network maintenance, and for trouble-shooting the dormitory computer Network.

TRANSPERFECTGITAL eUt-IENSICS

Attachment E

700 Sixth Street, NW • Washington, DC 20001(202) 833-3131 • svoddeRtransperfect.com

Exhibit 2

Attachment E

TRANSPERFECT C2024176G TAL FORENS CS

031-0001

, ). •- _ ,. -•=11,j'''

f4114- - -

Nexus 5X

,,

i•V[:iriffY. 0-

89184

Make

LG / Google

:{: .4 roe?

89182uatley Colin

Daayettila Al 031-0002 Apple . A1549 . . 89182 89184

Emery Joe 031-0003 Apple A1778 89182 89184

Grusnick Andrew 031-0004 Apple A1784 39182 89184

Wuchte Alex 041-0001 Google G-2PW4100 129061 129059

Hamel Ken 039-0001 Apple 6 s 144833 144838

Alderman Todd 051-0001 Apple 7 144833 144838

Attachment E

AFFIDAVIT OF TODD ALDERMAN

STATE OF MICHIGAN

) §COUNTY OF OAKLAND

I, Todd Alderman, being first duly sworn, depose and state as follows:

1. I am a Vice President for Jervis B. Webb Company ("Webb") and I am authorized

to make this Affidavit on behalf of Webb in support of Webb's bid for the Project entitled

"Greater Orlando Aviation Authority BP-S00132 Baggage Handling System for the South

Terminal C, Phase 1, Orlando International Airport" (the "Project").


3. In connection with Webb's bid on the Project, I did not

- receive any information from PMA, directly or indirectly, regarding the

design criteria for the Project.

- provide PMA with Webb's technical design or solicit any feedback from

PMA that was technical in nature.

- receive a copy of any other bidder's Technical and Design Proposal, or

any information related to any other bidder's Technical and Design

Proposal.have any communications of any kind with PMA, related to the Project,

where PMA improperly shared information that would give Webb a

competitive advantage with respect to any aspect of Webb's bid.

4. Throughout the entire bid process, I believe that Webb has acted with the

utmost good faith and without any intent to obtain an improper competitive advantage over

any other bidder, and I believe that Webb has not obtained any improper competitive

advantage.

5. I did not have any communication of any kind with anyone at PMA on or after

January 18, 2018 (the due date for Technical and Design Proposals).

Subscribed and sworn to before me,

Debra Dixon, this 5th day of February 2018

i,/eyN)DEBRA S. DIXON

Notary Public - MichiganLivingston County

My Commission Expires March 12, 2021Acting In the county of Oakland

Todd Alderman

Attachment F

363059/1222

AFFIDAVIT OF COLIN OATLEY

STATE OF MICHIGAN


I, Colin Oatley, being first duly sworn, depose and state as follows::

1. I am Senior Sales Proposal Manager for Jervis B. Webb Company ("Webb") and I

am authorized to make this Affidavit on behalf of Webb in support of Webb's bid for the Project

entitled "Greater Orlando Aviation Authority BP-S00132 Baggage Handling System for the South

Terminal C, Phase 1, Orlando International Airport" (the "Project").









Proposal.

- have any communications of any kind with PMA, related to the Project,






advantage.





S Weryj

DEBRA S. DIXONNotary Public - Michigan

Livingston CountyMy Commission Expires March 12, 2021

Acting In the county of Oakland

Colin Oatley

363057/1222

Attachment F

AFFIDAVIT OF ANDREW GRUSNICK

STATE OF MICHIGAN


I, Andrew Grusnick, being first duly sworn, depose and state as follows:

1. I am Director — Project Management for Jervis B. Webb Company ("Webb") and I

am authorized to make this Affidavit on behalf of Webb in support of Webb's bid for the Project

entitled "Greater Orlando Aviation Authority BP-S00132 Baggage Handling System for the South

Terminal C, Phase 1, Orlando International Airport'? (the "Project").


3. In connection with Webb's bid on the Project, l did not







Proposal.- have any communications of any kind with PMA, related to the Project,






advantage.





4- S:


Uvingston CountyMy Commission Expires March 12, 2021

Acting in the county of Oakland

363060/1222

Attachment F

AFFIDAVIT OF KENNETH HAMEL

STATE OF MICHIGAN


I, Kenneth Hamel, being first duly sworn, depose and state as follows:

1. I am a Vice President for Jervis B. Webb Company ("Webb") and I am authorized

to make this Affidavit on behalf of Webb in support of Webb's bid for Project entitled "Greater

Orlando Aviation Authority BP-S00132 Baggage Handling System for the South Terminal C,

Phase 1, Orlando International Airport" (the "Project").




design criteria for the Project.- provide PMA with Webb's technical design or solicit any feedback from




Proposal.- have any communications of any kind with PMA, related to the Project,






advantage.






Livingston CountyMy Commission Expires March 12, 2021

Acting in the county of Oakland Attachment F

363058/1222

From:

Sent time:

To:

Subject:

Attachments:

Noel Alvarez

10/24/2017 03:54:49 PM

Robert Sanders <[email protected]>

Re: Meeting with Daifuku - Novi, Michigan

image001.jpg

Not a problem

Do we want to have lunch together then? l have been invited to dinner by the Webb guys that l

kn ow...

From: Robert Sanders

Sent: Tuesday, October 24, 2017 10:38 AM

To: Noel Alvarez

Subject: RE: Meeting with Daifuku - Novi, Michigan

Since the location has changed, l suggest you take a taxi to our office and l will get you back to the airport after

the meeting.

Bob S

From: Noel Alvarez


To: Robert Sanders <[email protected]>

Subject: Re: Meeting with Daifuku - Novi, Michigan

If it's not too much trouble

I arrive on Delta flight 2877 at 11AM

Thanks,

Noel Alvarez

407-353-4982



To: Noel Alvarez


Should I pick you up from the airport; go to lunch then to Daifuku?

From: Noel Alvarez

Sent: Wednesday, October 18, 2017 2:30 PM

To: Robert Sanders <rsandersRprnaconsultants.com>

Subject: Re: Meeting with Daifuku - Novi, Michigan

Yes sir. I arrive at 11AM and leave at 8PM


Sent: Wednesday, October 18, 2017 1:22 PM

To: Noel Alvarez


Attachment G

Noel,

Still on for this meeting?

Bob S


Sent: Monday, September 25, 2017 11:55 AMTo: 'Andrew Grusnick. <AGrusnickPierviswebb.com>; Todd Alderman <[email protected]>

Cc: Noel Alvarez <[email protected]>


Andrew,

The date and time has been confirme

Bob S

From: Andrew Grusnick imailto:[email protected])

Sent: Monday, September 25, 2017 8:51 AM

To: Robert Sanders <[email protected]›; Todd Alderman <TAIdermanPierviswebb.com>Cc: Noel Alvarez <[email protected]>


Hello Bob,

Todd and l are both open that week. How does Wednesday at 2:00 sound? If this doesn't work, please suggest

another time and l will send an invite.

Andrew GYusnick I Director, ATec Project Management

JERVIS B. WEBB COMPANY

30100 Cabot Drive, Novi, MI 48377(248) 419-7366 office I (248) 884-0460 mobile

DAIFUKU Always an Edge Ahead

From: Robert Sanders [mailto:[email protected]]Sent: Friday, September 22, 2017 11:54 AM

To: Andrew Grusnick <[email protected]>; Todd Alderman <[email protected]>


Subject: Meeting with Daifuku - Novi, Michigan

Andrew,

I have heard that Noel and you have spoken and the date for our meeting appears to be shifting to the

week of October 23rd; do you and Todd have a date and time preference?

Best Regards,

t ra-49

Executive Director

Attachment G

One Woodward Avenue, Suite 1400

Detroit, MI 48226

313.681.5128 office

313.407.7752 cell

Please consider the environment before printing this email.

PRIVACY NOTICE: The information contained in this e-mail, including any attachments, isconfidential and intended only for the named recipient(s). Unauthorized use, disclosure, forwarding, orcopying is strictly prohibited and may be unlawful. If you are not the intended recipient, please deletethe e-mail and any attachments and notify us immediately by return e-mail.

Attachment G

From: Noel Alvarez

Sent time: 10/26/2017 01:52:24 PM


Subject: Fw: Meeting with Daifuku - Novi, Michigan

Attachments: image001.jpg

Good morning,

Who can we get to slap together a Statement of Qualifications for DAIFUKU, as discussed? I have

some ideas on what it should contain, but l have ZERO bandwidth to get this going right now.

Regards,

NoelFrom: Andrew Grusnick <[email protected]>Sent: Wednesday, October 25, 2017 8:47 AM

To: Robert Sanders; Todd Alderman

Cc: Noel Alvarez; Levi Gealy; Ken Cunningham; Laurie Blacker


That works for us.

Andrew Grusnick l Director, ATec Project Management


30100 Cabot Drive, Novi, MI 48377

(248) 419-7366 office l (248) 884-0460 mobile


From: Robert Sanders [mailto:[email protected]]

Sent: Wednesday, October 25, 2017 8:47 AM


Cc: Noel Alvarez <[email protected]>; Levi Gealy <[email protected]>; Ken Cunningham

<[email protected]>; Laurie Blacker <[email protected]>


We are struggling with heat in Detroit, should we reset the location to your office.

From: Andrew Grusnick [mailto:[email protected]]


To: Robert Sanders <[email protected]>; Todd Alderman <[email protected]>

Cc: Noel Alvarez <[email protected]>, Levi Gealy <[email protected]>; Ken Cunningham



Good Morning Bob,

Our water is functioning this morning so if you would prefer to meet in our new office we can do that.Otherwise we can still come down to your office, no issue either way.

Andrew Grusnick 1 Director, ATec Project Management


Attachment H

30100 Cabot Drive, Novi, MI 48377(248) 419-7366 office I (248) 884-0460 mobile




To: Andrew Grusnicl«[email protected]>; Todd Alderman <[email protected]>




Our office in Detroit will work and I will have your security clearances in advance of your arrival.

Address and contact info:


Detroit, MI 48226

313.681.5128 office

313,407.7752 cell



To: Robert Sanders <[email protected]>; Todd Alderman <TAlderman@jerviswebb,com>


<[email protected]>


Hello Bob,

Yes indeed, we have been affected. The water is off today and likely for the next few days. Would you be

available to host us at your office? If not, we should probably reschedule. But we would be happy to meet in

Detroit or Ann Arbor if that works for you.

Andrew Grusnick l Director, ATec Project ManagementJERVIS B. WEBB COMPANY30100 Cabot Drive, Novi, MI 48377(248) 419-7366 office I (248) 884-0460 mobile







Andrew and Todd,

Not sure if your operations have been impacted by the 48 inch water main break; just checking-in to confirm

tomorrow's scheduled meeting at 2:00 pm.

Best Regards,

Attachment H

Executive Director

Woodward Avenue, Suite 1400

Detroit, MI 48226

313.681.5128 office

313.407.7752 cell


for toPRIVACY NOTICE: The information contained in this e-mail, including any attachments, is

confidential and intended only for the named recipient(s). Unauthorized use, disclosure, forwarding, or

copying is strictly prohibited and may be unlawful. If you are not the intended recipient, please delete

the e-mail and any attachments and notify us immediately by return e-mail.

Attachment H

From: Mary Aiello

Sent time: 11/27/2017 09:52:07 PMTo: Noel Alvarez <[email protected]>; Robert Sanders <[email protected]>


Daifuku_BHS_PMO_SOQ draft v3.pdf image001.jpg image003.png image005.png image007.pngAttachments: image009.png image011.jpg image013.png image014.png image017.jpg image018.png

image019.jpg

Thank you for the comments, Noel, and especially for the catch on the 01A page. I've sent a revised page onto

Bryan and to the graphics person.

Bob also thinks the DFW page should be removed. Page 15 has been revised. I've added a version of your text to

page 16.

Please let me know if I can provide any additional changes in the attached.

Marketing Senior Senior Associate 1 Document Specialist, Technical Writer & Corporate Editor

PMA ConsultantsOne Woodward Ave., Suite 1400 1 Detroit, MI 48226O: 313.681.5189 I F: 313.963.8918www.ornaconsultants.com

Connect with us.

From: Noel Alvarez

Sent: Monday, November 27, 2017 1:57 PM

To: Mary Aiello <[email protected]>; Robert Sanders <[email protected]>


1. Are we keeping or deleting page 10? I vote for deleting it, but can be persuaded

2. Page 15: you do realize that the photo is of the Orlando International Airport but the quote is from

MDOT, right? Should we not have a picture from Logan International Airport instead?

3. Page 16: I agree that this page looks unbalanced. How about adding the following paragraph (or

something like it?:

"As industry leaders in program, project and construction management, PMA Consultants will leverage

its national aviation expertise, proven techniques and processes to assist in ensuring project delivery in

timely fashion, of the highest quality and within budget. PMA Consultants will always strive to provide

amazing service while keeping focus on particular project drivers and the client's utmost satisfaction,"

From: Mary Aiello

Sent: Monday, November 27, 2017 1:10 PM

To: Noel Alvarez <[email protected]>; Robert Sanders <[email protected]:om>


Hi Bob & Noel,

Attached is the Daifuku draft with both of your comments incorporated. Note: On page 16, I left the intro text

(blue) and moved the text from the box down in that same section as indicated. Without the intro text, the left

side of the page looks bare/unbalanced with the text on the right side of the page.

Attachment l

Please let me know if you would like any additional changes.

Make it a great day!

74 t:elb,-Marketing Senior Associate I Document Specialist, Technical Writer & Corporate Editor

PMA ConsultantsOne Woodward Ave., Suite 1400 Detroit, MI 48226O: 313.681.5189 I F: 313.963.8918www.bmaconsultants.com

Connect with use

From: Noel Alvarez

Sent: Monday, November 27, 2017 10:50 AM

To: Mary Aiello <[email protected]›; Robert Sanders <rsanders@pmaconsu(tants.com>


My edits/recommendations on the attached

Thanks Mary

From: Mary Aiello

Sent: Wednesday, November 22, 2017 2:28 PM

To: Robert Sanders <[email protected]>; Noel Alvarez <[email protected]>


Re: the prior Daifuku SOQ draft send, gentlemen, please let me know if you have any changes.

iticuy 74 i,e21,(7.Marketing Senior Associate I Document Specialist, Technical Writer & Corporate Editor

PMA ConsultantsOne Woodward Ave., Suite 1400 I Detroit, MI 48226O: 313.681,5189 F: 313.963.8918www.prnaconsultants.com

MOO•;;; r

Connect with us.


Sent: Friday, October 27, 2017 10:38 AM

To: Noel Alvarez <[email protected]>

Cc: Mary Aiello <[email protected]>


I will discuss with Mary on Monday.

From: Noel Alvarez

Sent: Thursday, October 26, 2017 8:52 AM


Attachment I

Subject: Fw: Meeting with Daifuku - Novi, Michigan

Good morning,

Who can we get to slap together a Statement of Qualifications for DAIFUKU, as discussed? I have

some ideas on what it should contain, but I have ZERO bandwidth to get this going right now.

Regards,

Noel

From: Andrew Grusnick <[email protected]>


To: Robert Sanders; Todd Alderman

Cc: Noel Alvarez; Levi Gealy; Ken Cunningham; Laurie Blacker


That works for us.




(248) 419-7366 office l (248) 884-0460 mobile








We are struggling with heat in Detroit, should we reset the location to your office.

From: Andrew Grusnick [mailto:[email protected]




<I<[email protected]>; Laurie Blacker <[email protected]>


Good Morning Bob,

Our water is functioning this morning so if you would prefer to meet in our new office we can do that.

Otherwise we can still come down to your office, no issue either way.




(248) 419-7366 office I (248) 884-0460 mobile


Attachment I







Our office in Detroit will work and I will have your security clearances in advance of your arrival.

Address and contact info:


Detroit, MI 48226

313.681.5128 office

313.407.7752 cell





<[email protected]>


Hello Bob,

Yes indeed, we have been affected. The water is off today and likely for the next few days. Would you be

available to host us at your office? If not, we should probably reschedule. But we would be happy to meet in

Detroit or Ann Arbor if that works for you.

Andrew Grusnickl Director, ATec Project Management

JERVIS B. WEBB COMPANY30100 Cabot Drive, Novi, MI 48377(248) 419-7366 office i (248) 884-0460 mobile

DAIFUKUAlways an Edge Ahead


Sent: 'Tuesday, October 24, 2017 9:41 AM




Andrew and Todd,

Not sure if your operations have been impacted by the 48 inch water main break; just checking-in to confirm

tomorrow's scheduled meeting at 2:00 pm.

Best Regards,

W62-4( e2e/Aei

Executive Director

Attachment I


Detroit, Ml 48226

313.681.5128 office

313.407.7752 cell


for toPRIVACY NOTICE: The information contained in this e-mail, including any attachments, isconfidential and intended only for the named recipient(s). Unauthorized use, disclosure, forwarding, orcopying is strictly prohibited and may be unlawful. If you are not the intended recipient, please deletethe e-mail and any attachments and notify us immediately by return e-mail.

Attachment I

From:

Sent time:

To:

Subject:

Attachments:

Andrew,

Noel Alvarez

12/19/2017 06:52:00 PM

Andrew Grusnick <[email protected]>

RE: MCO South Terminal Project Details

Daifuku_BHS_PMO_SOQ_v4.pdf

In anticipation of our conference call tomorrow afternoon find attached for your consideration PMA 's Aviation

SOQ.

A number of things that came to mind as I reviewed Daifuku 's proposed organization chart:

1. My recommendation is that the team ensures that the organizational chart clearly shows the

following positions:

a. Design Manager

b. (Site) QAQC Manager

c. Construction Manager

d. Project Manager (presumably this is a BHS Project Manager)

e. Project Scheduler

f. BHS Controls Manager

g. Mechanical Contractor (or at the least the top ones that Daifuku will short list to bid or

joint venture with)

h. Electrical Contractor (or at the least the top ones that Daifuku will short list to bid or joint

venture with)

2. I believe we have the highly qualified folks to fill the following positions:

a. Design Manager — Nick Peterson, a State of Florida registered PE

b. (Site) QAQC Manager Shaun Stief

c. Project Manager (presumably this is a BHS Project Manager) — Martin Ineichen

d. Project Scheduler --John Philbrick, a State of Florida registered PE and a Oracle Primavera

trainer

3. In addition, I think that as far as the Project Executive role ...

a. GOAA will most likely disallow these hours as they view this role as a Director position with

little to no site presence. These hours will need to be accounted some other manner within the

lump sum bid.

b. This role can be a shared role where PMA can provide onsite PM guidance and push for

team synergy together with the Daifuku Project Executive

Lastly, I think we have others that can assist with other PM duties that are particular to the GOAA

way of doing business:

a. Change Management Support Stephen Daly

Jobsite Coordination with GOAA Departments — Robin Hale

c. Jobsite Inspection / Oversite Support — James Miles

d. BHS Controls / I/O Checkout Support (and Troubleshooting) - Larry Louree

I look forward to our discussions tomorrow afternoon.

Best Regards,

Noel

Attachment J


Sent: Friday, December 15, 2017 7:22 AM

To: Noel Alvarez <[email protected] >

Cc: Robert Sanders <[email protected] >; Rick Johnson <[email protected] >; Todd

Alderman <[email protected] >

Subject: MCO South Terminal Project Details

Noel,

Attached you fill find our anticipated Org chart for the MCO project. Additionally, below are role descriptions

from the specifications. We also put together some bullet points on what we see as the responsibilities of each

role.

Hopefully this helps for our call today at 1:00. Thanks Noel.

The basic milestones for the project are:

NTP — Feb 2018

100% Design Complete — Oct. 2018

Start of Install — April 2019

Base Install Complete —June 2020

Commissioning & Testing —June 2020 through Dec 2020

Go-Live —Jan 2021

Requirement for Envelope A:

H. Project Staffing Approach

Pursuant to Florida Statute 287.055 (9) (b), the design criteria professionals that prepared or assisted with the

preparation of the design criteria package are not eligible to render services under a design/build contract and

therefore may not be included on the Proposer's team.

Project Approach to Staffing . Identify the proposed Project Team (including at a minimum, the Project

Manager, Design Manager, BHS Controls Manager, QC Manager, Construction Manager Mechanical/Electrical

Contractor and Project Scheduler) and describe the role and scope of services to be performed by each team

member during the Design/Build Services phase (i.e. Programming, Design, Manufacturing, Construction, and

Commissioning).

2. Provide an organizational chart showing the reporting relationships and describe the Proposer's approach to

the management of all team members for all Project phases. Provide suggestions for generating the

coordination, synergy and teamwork to complete the Project effectively and efficiently.

3. Provide a proposed Project staffing plan for the entire Project by phase. Describe how the staffing plan will

evolve as the Project progresses.

4. The Design Manager shall be a Florida registered Professional Engineer and shall have a minimum of five (5)

years' experience in the design of integrated baggage handling systems and integrated CBIS on comparable

projects.

5. The BHS Controls Manager shall have a minimum of five (5) years' experience on comparable projects and be

qualified to perform the work described in the DCP.

6. Proposer's team must include a BHS programmable logic controller (PLC) system design engineering group

whose normal assignment is the design, engineering, manufacture and installation of BHS PLC systems and who

continuously employs trained personnel in BHS PLC system engineering, manufacture, and installation.

7. Highlight any MWBE and LDB/SDVOBE firms in the above-described documentation.

AND

3.7.3 The resumes of the Contractor's key personnel, including but not limited to the Project Manager, Design

Manager, lead design professionals, Construction Manager and Superintendent that the Contractor intends to

Attachment J

use on the Project and an organizational chart shall be submitted to the OAR prior to the commencement ofWork, and updated during the course of the Project if any staffing changes are made.

Webb Descriptions of RolesSite Project Manager, responsibilities:

• Oversee construction on a day to day basis• Planning and Coordination between all Webb personnel and subcontractors in the field

• • Planning and coordination with other prime contractors working on the airport base job

• Preparation of daily work plans and adherence to said plans

• Oversee quality of work by subcontractors

• Attend all project field and coordination meetings

• Reports directly up to Webb Overall Project Executive

• Must have full time presence in Orlando

Scheduler, responsibilities:• Understanding of large constructions projects, with multiple prime contracts each containing numerous

subcontractors — all working in overlapping areas that will be contingent on one another and requiresimultaneous access/use

• Daily maintenance to an ongoing, live schedule• Demonstrated expertise with P6 software

• Coordination with prime contractors and subcontractors as to progress of tasks and how they interact• Coordination with on-site team to understand current and future activities and how they will be

effected by other trades• Monitor conflicting matters/tasks and bring to project management's attention for remedial action


Site QA/QC Manager, responsibilities:• Coordinate with quality inspections with all the site subcontractors and vendors• Coordinate with the customers representative on all quality matters• Verify that the quality related site activities are in accordance with the applicable codes and standards• Control all nonconformance reports and undertake remedial action

• Monitor the implementation of the approved site QC Plan• Assure all technical documents relative to site quality control are current status



JERVIS B. WEBB COMPANY30100 Cabot Drive, Novi, MI 48377

(248) 419-7366 office (248) 884-0460 mobile


PRIVACY NOTICE: The information contained in this e-mail, including any attachments, is




Attachment J

From: Alex Wuchte <[email protected]>

Sent time: 01/15/2018 03:41:59 PM


Subject: RE: 14-3436 MCO - Executive Summary Review / ORG Chart

Attachments: image001.png Organizational Chartpdf

Noel,

Additionally, here is our ORG chart for your review.

Thanks,

Alex

From: Alex Wuchte

Sent: Monday, January 15, 2018 9:34 AM

To: 'Noel Alvarez' <[email protected]>

Cc: Todd Alderman <[email protected]>; Colin Oatley <[email protected]>; Andrew Grusnick

<[email protected]>

Subject: 14-3436 MCO - Executive Summary Review

Hey Noel,

Per our conversations, attached is our executive summary for your review. Please comment as necessary.

Thanks,

Alex Wuchte l Business DevelopmentJERVIS B. WEBB COMPANY30100 Cabot Drive. Novi, MI 48377(248) 419-7500 office I (847) 565-9235 mobile

Daifuku Airport Tachnologi

www,DhiftskuMme:coagn

PRIVACY -NOTICE: The information contained in this e-mail, including any attachments, isconfidential and intended only for the named recipient(s). Unauthorized use, disclosure, forwarding, orcopying is strictly prohibited and may be unlawful. If you are not the intended recipient, please deletethe e-mail and any attachments and notify us immediately by return e-mail.

Attachment K

From: Noel Alvarez

Sent time: 01/16/2018 03:30:28 PM

To: Alex Wuchte <[email protected]>

Subject: Re: 14-3436 MCO - Executive Summary Review / ORG Chart

Attachments: image001.png Organizational Chart_pma comments.pdf

Comments on the Org Chart

Working on reviewing the executive summary

Regards,From: Alex Wuchte <[email protected]>


To: Noel Alvarez

Cc: Todd Alderman; Colin Oatley; Andrew Grusnick

Subject: RE: 14-3436 MCO - Executive Summary Review / ORG Chart

Noel,

Additionally, here is our ORG chart for your review.

Thanks,

Alex

From: Alex WuchteSent: Monday, January 15, 2018 9:34 AM



<[email protected]>Subject: 14-3436 MCO - Executive Summary Review

Hey Noel,


Thanks,

Alex Wuchte l Business DevelopmentJERVIS B. WEBB COMPANY30100 Cabot Drive. Novi, MI 48377(248) 419-7500 office l (847) 565-9235 mobile

PRIVACY NOTICE: The information contained in this e-mail, including any attachments, is confidential

and intended only for the named recipient(s). Unauthorized use, disclosure, forwarding, or copying is

strictly prohibited and may be unlawful. If you are not the intended recipient, please delete the e-mail

and any attachments and notify us immediately by return e-mail.

Attachment L


Sent time: 01/15/2018 03:34:03 PM



Attachments: image001.png Executive Summary.docx

Hey Noel,


Thanks,

Alex Wuchte l Business Development


30100 Cabot Drive. Novi, MI 48377

(248) 419-7500 office l (847) 565-9235 mobile





Attachment M


Sent time: 01/16/2018 03:16:52 PM


Subject: RE: 14-3436 MCO - Executive Summary Review

Attachments: image001.png 02 Executive Summary.docx

Noel,

Attached is a slightly updated version of the executive summary. Please use this for your review.

Sorry for the last minute alteration!

Thanks,

Alex

From: Alex Wuchte




<[email protected]>


Hey Noel,


Thanks,

Alex Wuchte I Business Development



(248) 419-7500 office I (847) 565-9235 mobile

[VI





Attachment N

From: Noel Alvarez

Sent time: 01/16/2018 03:54:15 PM


Subject: Re: 14-3436 MCO - Executive Summary Review

Attachments: image001.png 02 Executive Summary_pma comments.docx

Comments/edits (used Track Changes) on the attached, for your consideration

Regards,

Noel


Sent: Tuesday, January 16, 2018 9:16 AM

To: Noel Alvarez



Noel,



Thanks,

Alex

From: Alex Wuchte




<[email protected]>


Hey Noel,


Thanks,

Alex Wuchte l Business Development



(248) 419-7500 office l (847) 565-9235 mobile

OY





Attachment O

Redacted

Attachment O

• •

ComthentecLINAlj: Is this for shoit

Some Of the:reading ijudience nlight not knoii,

Copli)-10ntd organization ha significant

IC5 0.f.5,.M:015:eeiencel'1:1*(t4t this what GOAA will beir.focusing ,

Exhibit O

Redacted

Exhibit O


Sent time: 01/03/2018 04:59:22 PM


Subject: RE; Webb - PMA Exclusive Teaming Agreement - MCO STC

Attachments: image001.png MCO Proposal Schedule (with Concrete Deck Milestones).pdf

Hi Noel,

No worries, we are both a little behind! Attached is the working schedule for MCO. I'll get the NDA executed

and send a copy over for your records.

Using the schedule we would like you to start putting a quote together for the management we have discussed.

We can review that further and address any questions in our meeting we have scheduled for this Friday.

Can you please send us resumes for the following people in word format, including a picture of each person:

• Noel Alvarez

• Martin Ineichen

• Shaun Stief

• John Philbrick

I know it's short notice, but it would be great if we could have these by the weekend. Please let me know if that

's feasible for you.

Thanks!

Alex Wuchte Business Development


(847) 565-9235 mobile

From: Noel Alvarez [mailto:[email protected]]

Sent: Thursday, December 28, 2017 7:00 AM

To: Alex Wuchte <[email protected] >

Cc: Robert Sanders <[email protected] >; Rick Johnson <[email protected] >; Todd

Alderman <[email protected] >; Andrew Grusnick <[email protected] >

Subject: Re: Webb - PMA Exclusive Teaming Agreement - MCO STC

Good morning

Apologies for the delay. Find attached the signed teaming paperwork.

Regards,

Noel

Attachment P

From: Alex Wuchte < [email protected] >

Sent: Friday, December 22, 2017 3:27 PM

To: Noel Alvarez

Cc: Robert Sanders; Rick Johnson; Todd Alderman; Andrew Grusnick

Subject: Webb - PMA Exclusive Teaming Agreement - MCO STC

Noel,

Attached please find the exclusive teaming agreement that was discussed earlier this week for the subject

project. You 'II notice that we have already signed it. Please review, execute, and return at your earliest

convenience.

Enjoy your Holiday everyone!

Kind regards,

Alex Wuchte I Business DevelopmentJERVIS B. WEBB COMPANY30100 Cabot Drive. Novi, MI 48377(248) 419-7500 office l (847) 565-9235 mobile





Attachment P

From:

Sent time:

To:

Subject:

Attachments:

Noel Alvarez

01/08/2018 09:44:00 PM

'Alex Wuchte' <[email protected]>

RE: Webb - PMA Exclusive Teaming Agreement - MCO STC

Martin lneichen PMA 12 2017.doc Shaun Steif PMA 12 2017.doc Shaun Steif.jpgPhilbrick_John_2016 Scheduling_Draft.docx image001.png

Attached the resumes in work file format for your use along with Shaun's picture

i am updating mine so that one will follow shortly

work on a proposed staffing plan for our folks for your consideration / review

From: Alex Wuchte [mailto:[email protected]]

Sent: Friday, January 5, 2018 3:10 PM


Cc: Andrew Grusnick <[email protected]>; Todd Alderman <[email protected]>

Subject: FW: Webb - PMA Exclusive Teaming Agreement - MCO STC

FYI

From: Alex Wuchte

Sent: Wednesday, January 3, 201.8 10:56 AM


Cc: Robert Sanders <[email protected]>; Rick Johnson <[email protected]>; Todd

Alderman <[email protected]>; Andrew Grusnick <[email protected]>

Subject: RE: Webb - PMA Exclusive Teaming Agreement - MCO STC

Hi Noel,

No worries, we are both a little behind! Attached is the working schedule for MCO. I'll get the NDA executed and

send a copy over for your records.




• Noel Alvarez

• Martin Ineichen

• Shaun Stief• John Philbrick

I know it's short notice, but it would be great if we could have these by the weekend. Please let me know if

that's feasible for you.

Thanks!

Alex Wuchte l Business DevelopmentJERVIS B. WEBB COMPANY(847) 565-9235 mobile

Attachment Q







Good morning


Regards,

Noel



To: Noel Alvarez



Noel,


project. You'll notice that we have already signed it. Please review, execute, and return at your earliest

convenience.


Kind regards,

Alex Wuchte I Business DevelopmentJERVIS B. WEBB COMPANY30100 Cabot Drive. Novi, MI 48377(248) 419-7500 office I (847) 565-9235 mobile

DAIFLIKUwww,Daifulculabc.coak

Daittiku Airport Ted= fogies





Attachment Q

From: Noel Alvarez

Sent time: 01/08/2018 10:42:00 PM



Attachments: Noel Alvarez PMA 01 2018.doc image001.png

My resume

From: Noel Alvarez

Sent: Monday, January 8, 2018 3:45 PM

To: 'Alex Wuchte' <[email protected]>



Attached the resumes in work file format for your use along with Shaun's picture

I am updating mine so that one will follow shortly

work on a proposed staffing plan for our folks for your consideration / review

From: Alex Wuchte [mailto:[email protected]]

Sent: Friday, January 5, 2018 3:10 PM



Subject: FW: Webb - PMA Exclusive Teaming Agreement - MCO STC

FYI

From: Alex Wuchte

Sent: Wednesday, January 3, 2018 10:56 AM





Hi Noel,

No worries, we are both a little behind! Attached is the working schedule for MCO. I'll get the NDA executed and

send a copy over for your records.




• Noel Alvarez

• Martin lneichen

• Shaun Stief

• John Philbrick

I know it's short notice, but it would be great if we could have these by the weekend. Please let me know if

that's feasible for you.

Attachment R

Thanks!

Alex Wuchte Business DevelopmentJERVIS B. WEBB COMPANY

(847) 565-9235 mobile







Good morning


Regards,

Noel



To: Noel Alvarez



Noel,


project. You'll notice that we have already signed it. Please review, execute, and return at your earliest

convenience.


Kind regards,

Alex Wuchte I Business DevelopmentJERVIS B. WEBB COMPANY30100 Cabot Drive. Novi, MI 48377(248) 419-7500 office l (847) 565-9235 mobile

Darifuleu Aire orbTt‘kchno ,y t4

www.DaittgloiAToc...iloot

Attachment R



strictly prohibited and may be unlawful, If you are not the intended recipient, please delete the e-mail


Attachment R

From:

Sent time:To:

Subject:

Attachments:

Noel Alvarez01/16/2018 10:14:00 PM

Alex Wuchte <[email protected]>RE: 14-3436 MCO - Executive Summary Review

PMA_DAIFUKU_Staffing Forecast through 2020_V0.2 Page Layout.pdf image001.png

In addition, find attached a rough staffing plan for your use

From: Noel Alvarez




<[email protected]>

Subject: Re: 14-3436 MCO - Executive Summary Review

Comments/edits (used Track Changes) on the attached, for your consideration

Regards,

Noel



To: Noel Alvarez



Noel,



Thanks,

Alex

From: Alex Wuchte



Cc: Todd Alderman <[email protected]›; Colin Oatley <[email protected]>; Andrew Grusnick

<[email protected]>


Hey Noel,


Thanks,

Alex Wuchte I Business DevelopmentJERVIS B. WEBB COMPANY30100 Cabot Drive. Novi, MI 48377(248) 419-7500 office i (847) 565-9235 mobile

Attachment S

01





Attachment S

SUPPLEMENTAL INVESTIGATION REPORT · SUPPLEMENTAL INVESTIGATION REPORT ... affidavit supporting the...

Documents

Transcript of SUPPLEMENTAL INVESTIGATION REPORT · SUPPLEMENTAL INVESTIGATION REPORT ... affidavit supporting the...