Omnia Cooperative Purchasing Agreement R200803 — Riverside City Council, June 17, 2025 (part 2 of 2)

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
2 | P a g e
For the purposes of the supply chain risk management plan , SYNNEX concentrated on the following risk management focus areas:

Level of Focus Standards & Controls Identifier
Program Security Program Management PM
Management Awareness and Training AT
Management Personal Security PS
Management Planning PL
Management Risk Assessment RA
Management System & Services Acquisition SA
Operational Certification, Accreditation & Security Assurance CA Operational Contingency Planning CP
Operational Incident Response IR
Operational Maintenance MA
Operational Media Protection MP
Operational Physical & Environmental Protection PE
Technical Access Control AC
Technical Audit & Accountability AU
Technical Configuration Management CM
Technical Identification & Authentication IA
Technical System & Communication Protection SC
Technical System & Information Integrity SI
Privacy Authority & Purpose AP
Privacy Data Accountability, Audit & Risk Management AR Privacy Data Minimization & Retention DM
Privacy Data Quality & Integrity DI
Privacy Data Security SE
Privacy Data Transparency TR
Privacy Data Use Limitation UL
Privacy Individual Participation & Redress IP

Table 1 Focus Areas

SYNNEX Corporation uses NIST, ISO, SYNNEX plans, policies, procedures , and commercial best practices Supply Chain Risk Management process es, beginning with validating procurement source selection strategy and supplier qualification an d ending with proper disposition of equipment and completion of services provided to the government.

SYNNEX’s global network design and engineering organization delivers solutions that incorporate equipment that has been properly examined through its procurement channel either during source selection or through SYNNEX’s pre -approved government and Original Equipment Manufacturer (OEM) qualified resellers.

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
3 | P a g e
SYNNEX’s strategic procurement is focused on providing reseller partners with the resources and serv ices they need to deliver the best solutions to their clients, all while increasing their profitability and maximizing their business. Approved (certified) suppliers have the appropriate quality control measures to prevent counterfeit item s from being introduced into the supply chain, including:

 Approved / validated shipping methods
 Shipping in tamper-resistant packaging
 Control in all phases using electronic bar coding and optical character recognition which tracks movement, provides lifecycle, recurring inventory  Secure storage (with controlled access)
 Equipment handled by authorized and certified personnel  Replacement equipment to be purchased from approved suppliers  SYNNEX’s Supply Chain Risk Management Plan is aligned with the requirements set forth in NIST Special Publications, ISO, and Best Practices

SYNNEX brings the most relevant technology solutions to the IT and consumer electronics markets to help our partners sustainably grow their business. We distribute more than 30,000 technology prod ucts from more than 400 of the world’s leading and emerging manufacturers, and provide complete solutions to more than 20,000 resellers and retail customers in the U.S., Canada, and Japan.

As part of our value -added services, SYNNEX provides a variety of professional and marketing services, including demand generation; education and training; pre- and post- sales support; end-user enablement; server assessment; design and integration; product lifecycle support; contract design and assembly; and IT resource planning. In addition, SYNNEX provides a wide range of financial options to ensure that our partners always have the means to close deals.

Our Westcon -Comstor Americas business operates in North and Latin America and focuses on security, collaboration, n etworking, and data center. Our expert technical knowledge and industry-leading partner programs are designed to keep our partners at the forefront of their markets to drive business and growth. Westcon -Comstor Americas goes to market under the Westcon and Comstor brands.

Our Hyve Solutions division designs, manufactures, and deploys cost -effective, energy- efficient data center servers and storage solutions worldwide to some of the largest data center users.

SYNNEX technology innovative solutions include, but not limited to Internet of Things (IoT), Cloud Computing, Digital Signage, Device -as-a-Subscription, and IT Security, placing innovative products and services in customers’ hands.

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
4 | P a g e

Distribution Services

In our Technology Solutions segment, we purchase peripherals, IT systems, system components, software, networking equipment, consumer electronics and complementary products from our primary suppliers and sell them to our reseller and retail customers.

We perform a similar function for our distr ibution of licensed software products. Our reseller customers include value -added resellers, or VARs, corporate resellers, government resellers, system integrators, direct marketers, and national and regional retailers.

In Technology Solutions, we also pro vide comprehensive IT solutions in key vertical markets such as government and health care, and we provide specialized service offerings that increase efficiencies in the areas of print management, renewals, networking, logistics services, and supply chain management. Additionally, within our Technology Solutions segment, we provide our customers with systems design and integration solutions for data center servers and storage solutions built specifically to our customers’ data center environments. We distr ibute more than 30,000 technology products (as measured by active SKUs) from more than 300 IT, CE, and OEM suppliers to more than 20,000 resellers, system integrators, and retailers throughout the United States, Canada, Japan, Mexico, China and Latin Ameri ca. We combine our core strengths in distribution with our customer -engagement services to help our customers achieve greater efficiencies in time to market, cost minimization, real-time linkages in the supply chain, and after-market product support.

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
5 | P a g e
2 Chapter II Methodology
Approach

SYNNEX developed the ICT Supply Chain Risk Management Plan using The National Institute of Standards and Technology, Special Publication s (SP) 800-53/800-171/800- 161/NISTIR 7622, (Controls), International Organization for Standardization (ISO), International Electrotechnical Commission (IEC) , (Standards), SYNNEX policy, plans, procedures, and commercial best practices tactics, techniques, and procedures.

SYNNEX leverages the Department of Homeland Security (DHS), National Cybersecurity and Communications Integration Center (NCCIC), and Cyber Security Evaluation Tool (CSET) to conduct a deep dive analyst and assessment of SYNNEX ’s supply chain risk management posture. SYNNEX developed the SCRM Plan utilizing a moderate imp act baseline to address the twenty -six (26) controls and standards which consisted of two hundred and two (2 02) privacy, security , and data assessment questions that align directly to the security, and privacy controls, standards in accordance with, NIST, ISO/IEC, SYNNEX plans, policies, procedures and best practices.

Assessment Process:

1. Categorized and organized selected standards and controls.

2. Determined assurance levels.

3. Answered questions.

4. Analyzed results.

The Supply Chain Risk Management Plan fo cused on several categories (e.g., ICT SCRM, Risk M anagement, Security Controls, Infrastructure, Ecosystem, Encryption, Data Privacy, Data Policy, Data Discovery, Data Handling, Data Remediation, Incident Response, Audits, Procurement, Warehouse, Transport ation, Distribution, Back -End office, and Custer experience, and OEM Supply Chain Operations). Other focus areas included Data Flow, Business Processes, Vulnerability Scans, Threat Intelligence, Security Awareness Program (Training), Environmental, Waste M anagement, Certifications, and Plans, Policies, and Procedures review.

SYNNEX uses a three -Tiered risk management approach (Tier 1, 2 & 3 – i.e. Threats, Vulnerabilities, Scenarios, Methods, and ICT Supply Chain Constraints ) for identifying and remediating security risk and impact to the organization, and incorporates processes improvement – as required. Threats include: Threat Agent, Counterfeiters, Insider Threat, Foreign Intelligence, Malicious Code Insertion, Tampering with Supplies, Industrial Espionage, and Intellectual Capital / Property Loss.

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
6 | P a g e
3 Chapter III Supply Chain Risk Management (SCRM) Plan

Risk Management Model

SYNNEX adheres to NIST Special Publications Risk Management Framework and Security Objectives-Related security controls that support confidentiality, integrity, and availability security objectives.

Organizational Inputs
 Laws, Directives, Policy, Plans, Procedures, Guideline  Strategic Goals, Objectives and Mandates
 Information Security Framework and Requirements
 Priorities, Resources Availability, Funding, Timeline and Milestones  Categorize Information Systems (FIPS 199 & NIST SP 800-60)  Select Security Controls (FIPS 200 & NIST SP 800-53)
 Implement Security Controls (NIST SP 800-160)
 Assess Security Controls (NIST SP 800-53A)
 Authorize Information Systems (NIST SP 800-37)
 Monitor Security Controls (NIST 800-137)

Architecture Description
 Mission/Business Processes
 FEA Reference Models
 Segment and Solution Architectures
 Information System Boundaries

Information Security Control Objectives
 Program
o The focus is on information security program-level security topics o This focus is on the overall framework for the program to govern management, operational, technical and privacy controls

 Management
o The focus is on techniques and concerns that are normally addressed by management in SYNNEX’s information security program
o These focus on the management of the information security program a nd the management of risk within SYNNEX

 Operational
o The focus on techniques and concerns that are generally implemented and executed by people, as opposed to systems, that are put in place to improve the security of a particular system or group of systems SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
7 | P a g e
o These often require technical or specialized expertise; often relying upon management activities as well as technical controls

 Technical
o The focus on processes and technologies that computer system control or execute
o These are dependent upon the proper functioning of the system for their effectiveness and therefore require significant operational considerations

 Privacy
o The focus is on controls that impact Personally Identifiable Information (PII) o These are dependent upon the proper functioning of the other classes of controls for their effectiveness and therefore require significant operational considerations

Organizational Chart

The organizational charts below illustrate three dimensions of the company – 1.

Strategy, 2. Operations, and 3. Technology. See Appendix D.

Corporate Team (CEO Direct Reports)

The Chief Executive Officer (CEO) is responsible for establishing the direction, strategy and growth of the company.

Corporate Team (CFO Direct Reports)

The Chief Financial Officer (CFO) is responsible for the financial stability of the company; supporting the CEO’s vision; leading the legal department, compliance team, human resources, and internal audit team; and supporting the technology team.

Technology Team (President, WTSD Direct Reports)

The Worldwide Technology Solutions Distribution President leads the technology team and business operations as it relates to solutions delivery, distribution, engineering, security, and technology.

Certificates

 SYNNEX Corporation Certificate of Registration
SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
8 | P a g e
Synnex Corporation, 5559 Automall Parkway, Fremont, CA, 94538, USA ISO 9001:2015, Certification Number: 87147/A/0003/UK/En Warehouse, Storage, Pick-Pack-Ship RMA, Date 11/10/2018, Expires 11/9/2021

 SYNNEX Corporation Certificate of Registration
Synnex Corporation,44201 Noble Drive, Fremont, CA, 94538, USA ISO 9001:2015, Certification Number: 87147/B/0001/UK/En The Provision of OEM and Hyve Contract Assembly Services Which Include Assembly, Subassembly, Test, Pack, Pack and Ship Operations for Data Storage and Data Services, Date 11/10/2018, Expires 11/9/2021

 SYNNEX Corporation Certificate of Registration
Synnex Corporation,10381 Stateline Road, Olive Branch, MS, 38654, USA ISO 9001:2015, Certification Number: 87147/A/0002/UK/En Contract Assembly and Shipment of Services, Personal Computers, Peripherals and Related Components, Date 10/10/2018, Expires 11/9/2021

 SYNNEX Corporation Certificate of Registration
Synnex Corporation, 455 Research Drive, Southaven, MS, 38672, USA ISO 9001:2015, Certification Number: 87147/A/0004/UK/En The Provision of OEM and Hyve Contract Assembly Services Which Include Assembly, Subassembly, Test, Pack, Pack and Ship Operations for Data Storage and Data Services, Date 10/10/2018, Expires 11/9/2021

 SYNNEX Corporation Certificate of Registration
Synnex Corporation, 44201 Noble Drive, Fremont, CA, 94538, USA ISO 14001:2015, Certification Number: 87147/A/0001/UK/En Integration of Computers and Related Equipment and Distribution, Date 3/24/2018, Expires 323/2021

Audits

Fremont, CA
ISO Quality Last Audit 10/10/18
ISO Quality Next Audit Tentative 10/1/2019
ISO Environment Last Audit 03/04/2018
ISO Environment Next Audit 04/24/2019

Olive Branch, MS

ISO Quality Last Audit 10/24/2018
ISO Quality Next Audit Tentative 10/1/2019

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
9 | P a g e
Southaven, MS
ISO Quality Last Audit 10/24/2018
ISO Quality Next Audit Tentative 10/1/2019

Policies

 SYNNEX Environmental Policy (hosted on website)
o SYNNEX recognizes and accepts its responsibility to be a good steward of the environment and to help achieve a state of sustainable development.

In support of these responsibilities, SYNNEX has established the following commitments:
o Compliance with all applicable state, federal, and local legal requirements with a goal of going beyond compliance wherever practical and possible.
o Prevention of pollution in all its forms.
o Conservation of natural resources, including energy, through source reduction, reuse, and recycling wherever practical. o Continual environmental performance improvement through the involvement of all SYNNEX employees, subcontractors, suppliers, and partnership with the local community.
o Integrate environmental considerations into our business activities. o Ensure that our employees have the awareness, skills, and knowledge to carry out this policy and encourage respect for the environment.

 SYNNEX Corporation Quality Management System, ISO 9001:2015 Standard ANSI/ISO/ASQ 9001-2015, hosted on SYNNEX Intranet
 SYNNEX Corporation Supply Chain Risk Management (GE-2-039), hosted on SYNNEX Intranet
 SYNNEX Corporation Summary of Security Documents (NO: IT-1-005), hosted on SYNNEX Intranet
 SYNNEX Corporation Network Security Policy, Corporate, hosted on SYNNEX Intranet
 SYNNEX Corporation Acceptable Use Policy, Corporate, hosted on SYNNEX Intranet
 SYNNEX Corporation Password Policy, Corporate, hosted on SYNNEX Intranet  SYNNEX Corporation Remote Access Policy, Corporate, hosted on SYNNEX Intranet
 SYNNEX Corporation Network Change Policy, Corporate, hosted on SYNNEX SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
10 | P a g e
Intranet

 SYNNEX Corporation Firewall and Internet Policy, Corporate, hosted on SYNNEX Intranet
 SYNNEX Corporation Incident Response Plan, Corporate, hosted on SYNNEX Intranet
 SYNNEX Corporation Cyber Security Policy, Corporate, hosted on SYNNEX Intranet
 SYNNEX Corporation Security Awareness Training Policy, Corporate, hosted on SYNNEX Intranet
 SYNNEX Corporation Change Request Form, Corporate, hosted on SYNNEX Intranet only
 SYNNEX Corporation Data Centers, Corporate, hosted on SYNNEX Intranet  SYNNEX Corporation Guide to Identify Phishing or Fraudulent Emails, Corporate, hosted on SYNNEX Intranet
 SYNNEX Corporation Business Continuity Plan, Corporate, hosted on SYNNEX Intranet

NIST Based Supply Chain Control Areas of Responsibility

Please refer to Appendix A, NIST Based Supply Chain areas of responsibility.

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
11 | P a g e
AT-1 Security Awareness and Training Policies and Procedures AT-1 Security Awareness and Training Policies and Procedures (ICT SCRM Awareness & Training)
Assurance Yes Reference(s): Tier 1 & 2
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-161, FIPS 200
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: AT-1, AT-2, AT-3, AT-4, AT-5, PL-4, PS-7, SA-3, SA-12, SA-16, PM- 14, CA-2, CA-7, CP-4 & IR-3
Summary of Security Control Implementation
SYNNEX Corporation has an effective enterprise-wide Security Awareness and ICT Supply Chain Risk Management training program that takes a holistic approach and considers policy, technology, and supply chain operations to train SYNNEX’s global workforce which include Corporate Headquarters, United States, Canada, Japan Distribution, Data Center, Consumer Electronics & Gaming, and Westcon-Comstor Americas. Training is done according to roles, position, title, and responsibilities of individuals, as well as the specific supply chain risk management and security requirements of the organization and the information systems to which personnel have authorized access. Training is focused on making the workforce aware of ICT SCRM concerns and successful strategy. Training is conducted at all levels. Training is focused on supply chain operations, risk, execution functions, supply chain management (logistics) operations, contracting, procurement, acquisition, warehousing, distribution, shipping, program management, quality assurance, information technology, administrative operations, and elements of supply chain life cycle management. Training is conducted in multiple languages to accommodate the employee’s preference. Training is provided to management, contractors, logistics professionals, contract professionals, sales team, legal, program managers, quality assurance professionals, system owners, shipping and receiving staff, enterprise architects, information system developers, software developers, acquisition/procurement officials, information system managers, system/network administrators, personnel conducting supply chain risk management operations, configuration management, auditing activities, personnel performing independent verification and validation activities, security control assessors, and other personnel having access to system-level software. Adequate security-related technical training is specifically tailored for assigned duties. Security awareness, ICT SCRM training, and role-based security training applies to contractors and consultants providing services to federal agencies. SYNNEX has a mature and comprehensive security awareness and ICT SCRM training program, with policies and procedures designed with technical measurement, metrics, and enforcement when possible, reinforced by training to fill gaps. Technical and administrative controls can be implemented to bound and SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
12 | P a g e
minimize the opportunity for people to make mistakes; training is focused on things that cannot be managed technically. In some cases, practical exercises are include in the security awareness and ICT SCRM training program, which include tabletop exercises; cyber-attacks; breaches; no-notice social engineering attempts to collect information, gain unauthorized access, or simulate the adverse impact of opening malicious email attachments or invoking, via spear phishing attacks, malicious web links, and supply chain adverse consequences. Training is essential to SYNNEX and helps in the reduction of security (physical and cyber-attacks) and supply chain misfortunes.

Employees are given security awareness and ICT SCRM training as a part of their onboarding and/or annual training as required. SYNNEX documents the training process and managers review training on a quarterly, annual, and/or as-needs-dictate basis.

Upon completion of ICT SCRM and Security Awareness Training, feedback is provided and a lessons-learned document is generated for review and process improvement.

Security Awareness and ICT Supply Chain Risk Training is also conducted at OEM facilities and locations by OEM security personnel.

CM-1 Configuration Management Policy and Procedures
CM-1 Configuration Management Policy and Procedures
Assurance Yes Reference(s): Tier 1, 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-12, 800-100, 800-128, 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: CM-1, CA-7, CM-2, CM-4, CM-5, CM-6, CM-9, SA-10, SI2, & SI-12 Summary of Security Control Implementation
SYNNEX’s ICT SCRM configuration management plans meet the requirements in configuration management policies while being tailored to individual information systems and supply chain management operations. Our plans define detailed processes and procedures for tracking systems, components, devices, shipments, and configuration management operations to support system development life cycle activities at the information systems and supply chain management level. Our configuration management plan assists us with our tracking systems, components, and document management throughout the ICT supply chain infrastructure and life cycle management process. It helps us know exactly where assets are in the supply chain, and who owns the systems. Use of configuration management controls by system integrators, suppliers, external service providers, and brokers has proven to be extremely valuable.

SYNNEX’s configuration management plans are developed during the development/acquisition phase of the system development and supply chain life cycle.

Our configuration management plans help in a threefold manner: (1) they have a huge SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
13 | P a g e
impact on all facets of the supply chain (logistics) operations, information technology and security; (2) our configuration management policy and procedures help us address the entire supply chain management life cycle process, which includes full SDLC; (3) our procedures factor in removing components to and from the SYNNEX information system boundary, and consider configuration items, data retention, date in motion, data at rest, and data in transit for configuration items and corresponding metadata and tracking of the configuration item and its metadata. We also interface with our service providers, as applicable in enhance our configuration management process.

Our plan describes SYNNEX’s change management processes, how to update configuration settings and baselines, how to maintain information system component inventories, how to control development, test, and operational environments, and how to develop, release, and update key documents. Configuration Management Plans are developed, documented, and disseminated to specific individuals identified in the company. Policies are detailed in nature, and clearly define purpose, scope, audience, goals, objectives, roles, responsibilities, management commitment, coordination among organizational entities, compliance, governance, supply chain management operations and security. Procedures, and Playbooks are developed to facilitate the implementation of the configuration management policy and associated configuration management controls. Weekly, Monthly, Quarterly, Semi-Annual, and Annual reviews and updates are conduct on a scheduled cadence and/or as needs dictate. Policy and Procedures are developing using applicable federal laws, Executive Orders, directives, regulations, policies, standards, guidance, and SYNNEX requirements/mandates. OEM security controls are implemented into our ICT supply chain management operations and protocols.

CM-3 Configuration Management | Change Control
CM-3 Configuration Management | Change Control
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-12 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: CM-3, CA-7, CM-2, CM-4, CM-5, CM-6, CM-9, SA-10, SI2, & SI-12 Summary of Security Control Implementation
SYNNEX’s Configuration Change Control Review Board determines the types of changes to the information system and ICT SCRM that are configuration-controlled. The Change Review Board is responsible for the reviewing process as it relates to configuration-controlled changes to the ICT SCRM, and information system and approves and/or disapproves such changes with explicit consideration for security and SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
14 | P a g e
system impact analyses. Audit and review activities associated with configuration- controlled changes to the ICT SCRM and information systems are coordinated. The Configuration Change Review Board provides oversight to determine organization- defined configuration changes. SYNNEX implements ICT supply chain management infrastructure and secure system configuration reviews, updates, testing, system patches, and vulnerabilities scans based on industry recognized best practices, and adheres to access control, identify and authorization, and configuration management policy and procedures as a part of ICST SCRM and new system installations and upgrades. This controls support and enhance the trackability of ICT SCRM to collect and manage change control data. SYNNEX adheres to industry commercial best practices standards for ICT SCRM, hardware, software and new installation standards. SYNNEX reviews ICT SCRM and architectural topology and configuration drawings, and updates baselines as required. SYNNEX’s configuration change control includes ICT SCRM changes to baseline configurations for components and configuration items of information systems, changes to configuration settings for information technology products (e.g., operating systems, applications, firewalls, routers, and mobile devices), unscheduled/unauthorized changes, and changes to remediate vulnerabilities.

SYNNEX’s processes for managing configuration changes to information systems include Configuration Control Boards (CCB) that approve proposed changes to systems.

For new development information systems or systems undergoing major upgrades, organizations consider including representatives from development organizations on the Configuration Control Boards. Auditing of changes includes activities before and after changes are made to organizational information systems, as well as the auditing activities required to implement such changes. The Configuration Change Control Review Board is the only body who can approve or disapprove ICT SCRM and IT changes, modification, upgrades, test, or degradation to the system. The process is documented and achieved for historical use and artifacts. SYNNEX Management and the Configuration Change Control Review Board review all OEM changes and/or modifications as it relates to ICT SCRM operational and protocol.

CM-5 Configuration Management | Access Restriction
CM-5 Configuration Management | Access Restriction
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-128 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: CM-3, AC-3, AC-6, PE-3, AU-2, AU-12, AU-6, CM-3, CM-6, AU-7, CM- 5, PE-6, PE-8, CM-7, SC-13 & SI-7
SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
15 | P a g e
Summary of Security Control Implementation
SYNNEX defines, documents, approves, and enforces physical and logistical access restrictions associated with ICT SCRM changes to the information system and change management policy and procedures. Changes to ICS SCRM hardware, software, and/or firmware components of information systems can potentially have significant effects on the overall security of the systems. Therefore, SYNNEX permits only qualified and authorized individuals to access information systems for purposes of initiating changes, including upgrades and modifications. SYNNEX maintains access records to ensure that configuration change control is implemented and to support after-the-fact actions should organizations discover any unauthorized changes. Access restrictions for change also include software libraries, physical and logical access controls (data centers environment, security appropriations, rings of security, virtual servers, etc.), workflow automation, media libraries, abstract layers (e.g., changes implemented into third-party interfaces rather than directly into information systems), and change windows (e.g., changes that occur only during specified times, making unauthorized changes easy to discover). Access restrictions are automatically enforced, and Information Systems enforces access restrictions and supports auditing of the enforcement actions. SYNNEX prevents the installation of organization-defined software and firmware components without verification that the component has been digitally signed using a certificate that is recognized and approved by the organization. Software and firmware components are prevented from installation unless signed with recognized and approved certificates include software and firmware version updates, patches, service packs, device drivers, and basic input output system (BIOS) updates. SYNNEX identifies applicable software and firmware components by type, by specific items, or a combination of both. SYNNEX uses digital signatures, tokens, and certifications to verify signatures for authentication.

SYNNEX employs dual authorization to ensure that changes to selected information system components and information cannot occur unless two qualified individuals approve such changes. SYNNEX exercises ICS SCRM limiting privileges to change information system components with respect to operational systems. SYNNEX uses Archer and other monitoring, tracking, and reporting systems, applications, and tools for support configuration Access Restrictions for Change activities. SYNNEX’s Configuration Change Control Review Board reviews all OEM changes and/or modifications as it relates to ICT SCRM operational and protocol.

CM-8 Configuration Management | Component Inventory
CM-8 Configuration Management | Component Inventory
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-128 & 800161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
16 | P a g e
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: CM-8, CM-2, CM-6, PM-5, SI-7, AC-17, AC-18, AC-19, CA-7, SI-3, SI- 4, SI-7, & RA-5
Summary of Security Control Implementation
SYNNEX implements a ICT SCRM global centralized information system component inventories database that includes components from all organizational information systems and outlier systems. The inventory includes mission critical component assets within the information system and ICT supply chain infrastructure, and system-specific information component, information system association, and information system owner(s). Information deemed necessary for effective accountability of information system components includes hardware inventory specifications; software license information; software version numbers; component owners; and for networked components, devices, machine names and network addresses. Inventory specifications include manufacturer, device type, model, serial number, and physical location.

Information is documented and used as required for ICS SCRM accountability, refresh operations, investigations and IT/Security operations. SYNNEX maintains an up-to-date, complete, and accurate inventory as deemed reasonable. Inventory of baseline is also captured. SYNNEX also employs automated mechanisms to detect the presence of unauthorized hardware, software, and firmware components within the information system environment, and takes appropriate action when an unauthorized component is detected. Other features include enhanced monitoring for unauthorized remote connections and mobile devices. Monitoring for unauthorized system components is accomplished by periodic scanning of systems. Automated mechanisms are implemented within information systems and in other separate devices. SYNNEX places ICS SCRM unauthorized information system components in separate domains and subnets, or otherwise quarantines such components. Dedicated individuals are responsible for information system component inventory operations. ICS SCRM Operations include inventory system components updates as an integral part of component installations, removals, and information system updates. SYNNEX has a rigorous component inventory which include OEM partners. SYNNEX’s Configuration Change Control Review Board reviews all OEM component inventory changes and/or modifications as it relates to ICT SCRM operations. If contracts need to be adjusted to meet new SYNNEX requirements, the legal and contracting functions get involved.

IR-4 (10) Incident Handling | Supply Chain Coordination IR-4 (10) Incident Handling | Supply Chain Coordination Assurance Yes Reference(s): Tier 1,2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-61 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
17 | P a g e
Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: IR-4(10), AU-6, CM-6, CP-2, CP-4, IR-2, IR-3, IR-8, PE-6, SC-5, SC- 7, SI-3, SI-4, & SI-7
Summary of Security Control Implementation
SYNNEX has a mature ICT SCRM incident response plan that includes the core incident response handling capabilities (e.g., preparation, detection, analysis, containment, eradication, and recovery). ICT SCRM activities embedded in the plan include roles for system/product developers, integrators, manufacturers, packagers, assemblers, distributors, vendors, end-users, and OEM partners. SYNNEX is prepared to support and coordinate incident handling activities involving supply chain events with other organizations (e.g., OEM vendors, customers, local, state and government activities) involved in SYNNEX’s global supply chain operations with their incident response team(s) and legal department. SYNNEX is prepared to react to supply chain incidents involving security compromises, breaches involving information system components, information technology products, development processes or personnel, and distribution processes or warehousing facilities. SYNNEX conducts security awareness training and tabletop exercises to help mitigate security events/incidences. SYNNEX adheres to NIST SP 800-61 and 800-53 for incident response handling.

IR-6 (3) Incident Reporting | Coordination with Supply Chain IR-6 (3) Incident Reporting | Coordination with Supply Chain Assurance Yes Reference(s): Tier 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-161 & 800-61
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: IR-6(3), AU-6, CM-6, CP-2, CP-4, IR-2, IR-3, IR-8, PE-6, SC-5, SC-7, SI-3, SI-4, SI-7 IR-4, IR-5, & IR-8,
Summary of Security Control Implementation
When a SYNNEX employee is onboarded, they are given security awareness training.

Training helps employees to understand the threat landscape, bad actors, how to identify malicious attacks, vulnerabilities, and how to report incidents. Additional training is given to employees with technical responsibilities on how to respond and report incidents at the technical level. SYNNEX’s Incident Response Team is given in-depth training in incident response activities, including how to deal with investigations, analysis, and reporting of incidents at the local, state, federal, government, and US- CERT levels. SYNNEX employees are trained to communicate security incident SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
18 | P a g e
information to systems integrators, (OEM) suppliers, and external service providers, and open two-way communications to protect company information. In addition, SYNNEX employees are trained to ensure that information is reviewed and approved for sending based on its agreements with the suppliers. Employees know that incident reporting data is adequately protected for transmission and received by approved individuals only. The IR Team is trained on preparation, detection, analysis, containment, eradication, recovery, and how to work with legal and other outside agencies and activities. The IR Team understands the IR plans, policies, procedures, guidelines, federal regulations and incident handling operations.

PE-3 Physical Access Control
PE-3 Physical Access Control
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-73, 800-76, 800-78, 800-116; ICD 704, 705; DoD Instruction 5200.39; Personal Identity Verification (PIV) in Enterprise Physical Access Control System (E-PACS) & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: PE-3, AU-2, AU-6, MP-2, MP-4, PE-2, PE-4, PE-5, PS-3, & RA-3 Summary of Security Control Implementation
SYNNEX has a comprehensive Physical Secure plan as a part of the Business Continuity Plan (BCP). The plan applies to SYNNEX ICT supply chain employees, contractors, consultants, and visitors. A validation process is in place based on SYNNEX defined requirements and policy prior to granting access to the ICT supply chain infrastructure, IT environment, and other relevant elements. Guards are in place in strategic locations to safeguard and protect SYNNEX employees and visitors. Physical access devices are deployed, such as keys, locks, combinations, cameras, motion detectors, card readers, and other physical security devices. Physical access control systems comply with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. SYNNEX subscribes to the Federal Identity, Credential, and Access Management Program, which provides implementation guidance for identity, credentials, and access management capabilities for physical access control systems. SYNNEX also has audit logs employed and accessed as required. There are card readers and guards at restricted access points, which include facility access points, interior access points to information systems and/or components requiring supplemental access controls, or both. SYNNEX has determined the extent, frequency, and/or randomness of security checks to adequately mitigate risk associated with exfiltration.

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
19 | P a g e
SYNNEX has implemented tamper detection/prevention at selected hardware components and anti-tamper technologies (e.g., tamper-detection seals and anti-tamper coatings) to detect hardware alterations through counterfeiting and other supply chain- related risks. SYNNEX is taking extraordinary measures to protect and safeguard SYNNEX employees, equipment, assets, and intellectual property. The SVP IT and/or his/her designated representative can grant access to privilege users to support ICS SCRM information systems and infrastructure. Processes are in place to efficiently revoke unwanted users, system integrators, external service providers, and suppliers needing access to physical facilities and information systems. OEM partners are integrated into the Business Continuity Plan as applicable.

PE-20 Asset Monitoring and Tracking
PE-20 Asset Monitoring and Tracking
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-73 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: PE-20 & CM-8
Summary of Security Control Implementation
SYNNEX utilizes asset locations monitoring and tracking technologies (i.e., OCR, Infrared scanners, RFID, and digital signature) to ensure that critical assets such as vehicles or essential information system components remain in authorized locations.

Activities are logged and monitored. Components transported between protected storage areas awaiting disposition, testing, maintenance, and/or disposal are also tracked and monitored. SYNNEX has employed CCTV cameras and monitoring devices to monitor the location and movement of defined assets. Asset location technologies are employed in accordance with applicable federal laws, Executive Orders, directives, regulations, policies, standards, and guidance. OEM partners utilize asset monitoring, anti-tampering, detection, and tracking technology to support SYNNEX ICT SCRM program and operations.

PV-2 Tracking Provenance and Developing a Baseline
PV-2 Tracking Provenance and Developing a Baseline
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
20 | P a g e
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: PV-2, CM-3, CM-5, CM-6, CM-6 (1), CM-6 (2), CM-8, CM-8 (4), CM-8 (6), CM-8 (7), CM-8 (8), CM-8 (9), CM-9, CM-10 (1), CM-11, & Sa-12 (14) Summary of Security Control Implementation
SYNNEX’s provenance tracking and baseline apparatus helps with the tracking and monitoring of ICS SCRM components, artifacts, service providers, documents, and data collection throughout the supply chain. The SYNNEX unique identification baseline is data-driven, utilizes secure data encryption technology, and leverages cloud computing technology to monitor, document, and track assets and supplies as it traverses though the ICT supply chain pipeline. The SYNNEX baselines provided from systems and components leveraging information systems, data, and components within the ICT supply chain infrastructure. This effort enhances the tracking, documents, and disseminates to relevant supply ICT chain change management. It also provides individual tracking, monitoring, and processes to access changes to the provenance of components, applications, data, tools, and processes in global information system and ICT supply chain infrastructure. As a safety and security feature, the application ensures non-repudiation of provenance information and the provenance change records including when, what, and to whom. The provenance and baseline will be integrated into other smart technology applications and Internet of Things. SYNNEX’s tracking of provenance will validate to detect unauthorized tampering and modification throughout the ICT supply chain, especially during repairs/refurbishing, by comparing the updated provenance with the original baseline provenance. SYNNEX’s tracking of provenance baselines and swim lanes will be advantages in system configuration management mechanisms. SYNNEX should realize near real-time traceability and accountability.

SYNNEX’s tracking provenance and baseline model will be useful on several fronts as it matures. SYNNEX OEM partners utilize asset monitoring, detection, and tracking technology to support SYNNEX ICT SCRM tracking provenance program / operations.

RA-3 Risk Assessment
RA-3 Risk Assessment
Assurance Yes Reference(s): Tier 1, 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, 800-12, 800-30, 800-100 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
21 | P a g e
Evaluation Tool (CSET)
Related Controls: RA-3 & PM-9
Summary of Security Control Implementation
SYNNEX’s risk assessments are mission critical to ICT SCRM operations at tiers 1,2, &

3. Risk and Impact are ranked and rated according to criticality, vulnerability, threats, security, company assets, and intellectual capital. SYNNEX’s Risk Management Plan (RMP) outlines mission critical risk and impact to the ICS SCRM landscape and environment, and helps combat risk and reduce exposure and impact to the company.

Data is collected and analyzed to assess risk and performance. Risk assessments are conducted at all three tiers for analysis. Tier 1 data is the primary data stream, followed by tier 2 and 3. Information is scrutinized for impact and risk to the organization. Results are documented and recommendations are made, along with a remediation plan and process improvement course-of-action plans. Risk assessments are conducted at the strategic, tactical, and operational levels, include at the OEM level, on a scheduled basis and/or when mission needs require.

SA-4 Acquisition Process | Requirements
SA-4 Acquisition Process | Requirements
Assurance Yes Reference(s): Tier 1,2 &3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: SA-4
Summary of Security Control Implementation
SYNNEX’s acquisition process is an integrated process that follows supply chain risk management best practices and NIST (Federal Information Systems and Organizations) guidelines. The acquisition strategy establishes a baseline and tailorable ICT supply chain security requirements to apply to system integrators, suppliers, ecosystems, and external service providers. Our acquisition approach adheres to regulatory requirements which include technical requirements; chain of custody; transparency and visibility; sharing information on information and supply chain security incidents throughout the supply chain, rules for disposal or retention of elements such as components, data, or intellectual property; and other relevant requirements. We incorporate critical elements, including ICT supply chain, to demonstrate a capability to remediate emerging vulnerabilities based on open source information and other sources, and to identify requirements for managing intellectual property ownership and responsibilities for elements such as software code, data and information, as well as manufacturing, development, integration environment, designs, and proprietary processes when SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
22 | P a g e
provided to the organization for review or use. Establish a plan for migration that can support system and mission operations and ensure that system integrators, suppliers, and/or external service provider can provide insights plans for end-of-life of components.

Establish a plan for acquisition of spare parts to ensure adequate supply. Work with the supplier, system integrator, or external service provider to identify and define existing and acceptable incident response and information sharing processes, including inputs on vulnerabilities from other organizations within their supply chains, and define requirements for functional properties and implementation information, as well as any development methods, techniques, or practices which may be relevant. We strive to establish and maintain verification procedures and criteria for delivered products and services and ensure that the continuous monitoring plan includes supply chain aspects in its criteria. Monitoring includes, but not limited to monitoring of functions/ports/protocols in use and monitor system integrators’ and external service providers’ information systems located within the supply chain infrastructure. Monitor and evaluate the acquired work processes and work products where applicable, for process improvement and remediation – as required. Report information security weaknesses and vulnerabilities detected during the use of ICT products or services to appropriate stakeholders, including OEMs where relevant. Review and confirm that the delivered product or service complies with the agreement on an ongoing basis and articulate any circumstances when secondary market components may be permitted.

SA-8 Security Engineering Principles
SA-8 Security Engineering Principles
Assurance Yes Reference(s): Tier 1,2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: SA-8, PM-7, SA-3, SA-4, SA-17, SC-2 & SC-3 Summary of Security Control Implementation
When SYNNEX develops new security applications, code, algorithms, and/or introduces new products and services to the environment, SYNNEX security engineers apply NIST, ISO/IEC, and best practices information system security engineering principles. These principles include system design requirements, specifications, development, implementation, testing, integration, and modification of information systems. These principles are also included in legacy applications and system enhancements to the environment. Security engineering principles are the foundation for developing secure and reliable information systems and applications. Security principles apply to system upgrades, skip packages, information system reform initiatives and modernization.

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
23 | P a g e
Before new security software, firmware, applications, services or components are considered for implementation into the environment, SYNNEX security engineers conduct a feasibility study, analyze the current state of the environment, and study all facets of the environments. Security engineering principles must be able to accommodate business and technical needs and be secure. Security engineers analyze the environment by security stacks, layers, and protocols to see if new and/or legacy upgrades will support the infrastructure. When designing new security applications or introducing new software, firmware and/or components to the landscape, system engineers develop layered security protections protocol and incorporate proven security requirements (security controls) into the system development life cycle, delineating physical and logical security trust and boundaries. Security engineers document the processes and incorporate best practices security policy and procedures in the architecture, including security controls as a part of the information system engineering design. Before new systems, applications, components and upgrades are introduced into the environment, SYNNEX security engineers conduct system tests, perform threat modeling, develop use cases, check for threat agents and viruses, conduct penetration tests, and mitigate risk before deploying in the environment. Developers are given training on the new applications, components and services. At the end of the development, an acceptance test is conducted and signed off by management for security, functionality, and reliability.

SA-11 Developer Security Training and Evaluation
SA-11 Developer Security Training and Evaluation
Assurance Yes Reference(s): Tier 1, 2 &3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 ISO/IEC 20243-1:2018, 15408, Information Technology,
Open Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: SA-11, CA-2, CM-4, SA-3, SA-4, SA-5 & SI-2 Summary of Security Control Implementation
When SYNNEX security engineers and developers develop new system applications, software, hardware, or firmware, and/or introduce new information systems, components and information services, into the environment, a detailed security assessment and project plan is developed. The assessment plan includes, but is not limited to performance testing, unit testing, system integration testing, security testing and regression. Test are evaluated and analyzed for completeness, reliability, security and functionality. The assessment plan also includes flaw remediation processes and developmental testing of security controls at all post-design phases of the system development lifecycle. Security tests focus on security controls, implementation, SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
24 | P a g e
operating as advertised, and operational intent, and are designed to support security policy and procedures. Flaws are remediated and tested. Security engineers and developers conduct rigorous testing of OEM software, firmware and components by leveraging web-based scanning applications and by conducting penetration testing with sophisticated tools, applications and binary analyzers. Engineers and developers also conduct source code reviews, as well as in-depth testing of artifacts, business rules, and processes. Test must pass all security assessment criteria, and remediation activities must be resolved and tested before applications, information systems, components, or information services can be integrated into the environment. The security assessment plan is well documented and is approved by management and the configuration management board.

SA-12 Supply Chain Protection (SCP)
IR-6 (3) Supply Chain Protection (SCP)
Assurance Yes Reference(s): Tier 1, 2 &3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: IR-6(3), AT-3, CM-8, IR-4, PE-16, PL-8, SA-3, SA-4, SA-8, SA-10, SA- 14, SA-15, SA-18, SA-19, SC-29, SC-30, SC-38 & SI-7
Summary of Security Control Implementation
SYNNEX protects its supply chain operations from threats to information systems, system components, and information services by fortifying its physical and logical environment as a part of its security and information protection apparatus strategy.

Information systems, components, applications, and information system services are secured through the implementation of a security protection plan. The plan encompasses the security life cycle management which includes information systems, applications, system components, and information system services ((i.e., design, development, manufacturing, picking, packing, pulling, assembly, distribution, transportation, system integration, documenting, operations, maintenance, end of life).

SYNNEX’s security protection plan includes security awareness training at all levels of the organization. The organization is educated on the risk, threats, and security vulnerabilities and violations facing supply chain operations and how to mitigate these risks. The company is trained to be vigilant in vetting personnel in every area of operations, using tamper-resistant packaging during shipment and warehousing to protect development and mission critical plans, policies, and procedures. Personnel are encouraged to report unusual activity and security violations to management. All reports are taken seriously, and immediate action is taken as required. OEM partners participate SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
25 | P a g e
in SYNNEX’s Supply Chain Protection – as required.

SA-15 Development Process, Standards, and Tools
SA-15 Development Process, Standards, and Tools
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: SA-15, SA-3 & SA-8
Summary of Security Control Implementation
SYNNEX has an arsenal of documented, detailed engineering processes, standards, controls, information systems, system components, services, and tools. Processes and standards illustrate system and security requirements. SYNNEX’s process, standards, and tools development adheres to NIST SP 800-53, 800-161, FIPS 199, 200, ISO/IEC, OEM, and Best Practices security controls and cyber security framework. Tools include COTS, GOTS, software, firmware applications, hardware, analytics, forecasting, modeling, MS suite, program management, Visio, CAD, prediction, and specialized applications. Development documents include, but are not limited to engineering drawings, topology drawings, schematics, flowcharts, network diagrams, wiring diagrams, swim lanes, modeling, and analytics (KRI/KPI) reports. Processes and tools include strategic, tactical, and operational environment / landscape drawings, cyber security evaluation tools, supply chain risk management evaluation tools, vulnerability, threat, business intelligence, impact, and risk models and analysis applications.

SYNNEX processes focus on mission critical threat and security analysis, information system components, system integrations, testing, and process improvement. Tools include code source monitoring and analysis, threat modeling, scanning tools, data scrapping application, simulation software, and impact to the system and environment reports. SYNNEX processes, workflow, engineering, waterfall diagrams, and program management plans are reviewed by management and approved by the configuration management, risk management, compliance and legal teams – as required. OEM partners also play an active role in the development process, standards, and tools operations – as required by SYNNEX.

SA-18 Tamper Resistance and Detection
SA-18 Tamper Resistance and Detection
Assurance Yes Reference(s): Tier 1, 2 & 3
Security Moderate  National Institute of Standards and Technology (NIST) SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
26 | P a g e
Assessment
Level
Special Publication (SP) 800-53 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: SA-18, PE-3, SA-12 & SI-7
Summary of Security Control Implementation
SYNNEX has a mature tamper protection and detection program in place, leveraging state-of-the-art tactics, techniques, technologies, and strategy to protect information systems, system components, and information services. SYNNEX uses RFID, OCR, badging, locks, cameras, guards, doors, security motion intrusion detectors, monitoring tools, alerts and other related tamper-resistant and detection applications / devices to combat both physical and logistical tampering. High-risk areas such as data centers and secure areas with sensitive information or equipment are isolated and/or blocked off to the public. Tampering detection devices / applications are applied to information systems, system components, and information system services and are constantly monitored and scrutinized. Components are monitored for tampering and theft, and violations are reported to management. SYNNEX’s tampering and detection policy and procedures are well documented and are exercised on a daily basis. If an incident is reported, immediate action is taken, and measures are put in place to resolve the issue.

The tampering protection and detection policy and procedures are reviewed on a quarterly basis and/or as needs dictate. Process improvement initiatives are implemented as required. OEM suppliers play an important role in the planning, distribution, application, and reporting of tampering and detection operations.

SA-19 Component Authenticity
SA-19 Component Authenticity
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: SA-19, PE-3, SA-12 & SI-7
Summary of Security Control Implementation
SYNNEX ICT SCRM Anti-Counterfeit policy and procedures are in alignment with NIST, ISO/IEC, Federal Laws, and best practices and are exercised on a daily basis. SYNNEX SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
27 | P a g e
takes counterfeiting very seriously and does their due diligence to safeguard against counterfeit of components and information systems. SYNNEX only purchases items from approved OEM vendors and does not buy from unauthorized distributors or third- party vendors. All purchases go through an approved vendor process and the entire process is documented and monitored. If a suspected counterfeit transaction or event is reported, immediate action is taken by SYNNEX and reported. Counterfeit may occur at the organizational, distributor (OEM), vendor, and/or developer level. SYNNEX is diligently on the lookout for counterfeit components, information systems, source code, and manufacturing. Tampering applications and detection measures are inspected throughout the supply chain management process.

SI-2 Flaw Remediation
SI-2 Flaw Remediation
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 Federal Information Processing Standard Publication 200  ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: SI-2, CA-2, CA-7, CM-3, CM-5, CM-8, MA-2, IR-4, RA-5, SA-10, SA- 11 & SI-1
Summary of Security Control Implementation
SYNNEX reviews, tests, scans, and monitors all software and firmware being introduced into the environment by approved OEM distributors. Software and firmware applications are tested frequently with anti-virus software, system scans, and penetration tests to check the reliability, security, and functionally of the software and firmware. Updates and remediation activities are implemented if applications are out of tolerance and require patching or updates. If a software and/or firmware application requires remediation, only authorized IT personnel may apply patches, hotfixes, upgrades, or skip packages, as required by the OEM and the configuration management board.

SYNNEX leadership approves all tests, updates and skip packages, and documents the entire process and approval process. After remediation actives are complete, software and firmware enhancements/fixes are tested before being put into the production environment. SYNNEX documents all low-level software and firmware patches, hotfixes, and upgrades in a remediation plan of action and milestone plan, and action is taken at the appropriate time. Before SYNNEX applies remediation activities, it always considers the risk, impact and vulnerability to the business.

SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
28 | P a g e
SI-4 Information System Monitoring
SI-4 Information System Monitoring
Assurance Yes Reference(s): Tier 1, 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 Federal Information Processing Standard Publication 200  ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
Evaluation Tool (CSET)
Related Controls: SI-4, AC-3, AC-4, AC-8, AC-17, AU-2, AU-6, AU-7, AU-9, AU-12, CA- 7, IR-4, PE-3, RA-5, SC-7, SC-26, SC-35, SI-3 & SI-7
Summary of Security Control Implementation
SYNNEX employs sophisticated external and internal security event monitoring tools, applications, agents (i.e., intrusion detection systems, intrusion prevention systems, malicious code protection software and scanning) and alert monitoring to observe and detect security events, incidences, anomalies, suspected unauthorized access, changes in the system behavior, modifications, enhancements, and unusual activity in SYNNEX ICT supply chain environment and information system boundaries, firewalls, and demilitarized zones. SYNNEX leverages five rings of security to support information system monitoring (e.g., email filtering, workstation security, firewall, automated backup, and employee training). Monitoring includes automated and manual monitoring of SYNNEX data center, cloud environment, servers, routers, gateways, backbone, trust, email, and network operations. Metadata is constantly monitored and scanned on a systematic basic. Data files, catalogs, data warehouses, libraries, databases, and search engines are scanned for malicious activity, breaches, data leakage, and security violations. SYNNEX also monitors ISP system and employee activity. SYNNEX follows NIST, ISO and Best Practices concerning information system monitoring.

SI-7 Software, Firmware, and Information Integrity
SI-7 Software, Firmware, and Information Integrity
Assurance Yes Reference(s): Tier 2 & 3
Security
Assessment
Level
Moderate  National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 & 800-161
 Federal Information Processing Standard Publication 200  ISO/IEC 20243-1:2018, Information Technology, Open
Trusted Technology Provider Standard (O-TTPS),
Mitigating maliciously tainted and counterfeit products, Assessment procedures for the O-TTPS and ISO/IEC
 Department of Homeland Security (DHS) Cyber Security
SYNNEX Corporation
Supply Chain Management (SCRM) Plan

SYNNEX Corporation SCRMP No.: SC-042819-001 Supply Chain Risk Management Plan v1.0 RFQ 47QTCA-19-Q-0009 Moderate-Impact Baseline Amendment 0013
April 28, 2019
29 | P a g e
Evaluation Tool (CSET)
Related Controls: SI-7, SI-7 (11), (12) & (13)
Summary of Security Control Implementation
SYNNEX adheres to NIST SP 800-53, 800-161, and FIPS 22 as it pertains to ICT Supply Chain Risk Management practices, standards, guidelines, policy, and procedures. SYNNEX Systems and Information Integrity policy and procedures are comprised of SYNNEX’s ICT SCRM information systems, infrastructure, components, assets, ecosystem, verification protocol, security information and event management tools, applications, agents, program requirements, standards, and specifications. ICT supply chain risk, security controls, malicious code (binary / machine executable code), and counterfeit protection measures are included in the systems and information integrity policy and procedures. SYNNEX conducts source code reviews on a systematic basis, and has a rigorous data loss prevention program to protect data-in- transit, data-in-motion, and data-at-rest. SYNNEX’s environment is systematically tested (i.e., manual test, penetration test, and automated test) and verified for unauthorized access, vulnerabilities, breaches, security violations, malicious code, botnet attacks, counterfeit, and suspected changes in the ICT SCRM environment. SYNNEX uses a variety of verification tools and applications to test for unauthorized access in the environment, has strict business rules concerning privileged access, and does not allow any person and/or persons to have the “keys to the kingdom.” Checks and balances are put in place both logically and physically to protect SYNNEX environment and information systems within the ICT SCRM apparatus. Software deployment, modifications, and changes to the systems and/or applications must be vetted through the Configuration Management Board and tested in the development environment before it can be introduced into the production environment. Software and/or firmware integrity monitoring and testing includes operating system, system applications, metadata, parity checks, cryptographic hashes, and other related internal and application testing and monitoring. All software and firmware is purchased and approved by authorized OEM and/or verified distributors. SYNNEX employs security alerts and log monitoring, and applies strict business rules to safeguard against unauthorized access to the ICT SCRM environment.

© 2020 SYNNEX Corporation
© 2020 SYNNEX Corporation
ConcentrixGlobal business services company Technology SolutionsDistribution, logistics, and integrated solutions65 Locations: U.S., Canada, Japan, Mexico, China, Central and South AmericaProduct Categories: IT systems, networking, UCC, peripheral, components, IoT, peripherals, software, security, analytics, integrated solutionsHybrid Cloud Strategy Servicing:SMB, mid-market, enterprise, hyperscale computing (Hyve Solutions)Locations: 40+ countries in 6 continentsPriority Verticals: Healthcare, banking and financial, insurance, technology, automotiveSolutions: Analytics & consulting, automation & optimization, customer engagement centers, digital self-service, experience design & mobility, gig platform, marketing solutions, technology & systems integration, voice of the customer$19.1BTTMRevenue 40K+tech products distributed25K+resellers & retail customers400+OEMs &partners$4.7BTTM Revenue225K+associates80Fortune 500 clients70+languages A Fortune 200 Global Business Process Services Company

SYNNEX CORPORATE
2019 LINE CARD
Contact Us:

1.800.456.4822
www.synnex.com
279520-19 | 032719
7 6
3 2
5 4
89 1
Map your destination to increased productivity,
cost savings and overall business success. Our
distribution centers are strategically located across
the United States to provide you with product
where you need it when you need it. Each of our
distribution centers provides our customers with
warehouse ratings of nearly 100% in accuracy and
PPS (pick, pack and ship) performance. Couple that
with unsurpassed service from our infrastructure
support, giving you one more reason why you
should be doing business with SYNNEX. That’s
service and infrastructure support you can rely on!
Sounds simple, but at
SYNNEX we understand that
true business growth requires
access to meaningful, tangible
business infrastructure, tools,
and resources. That’s why
over the last year we’ve
invested heavily in providing
our partners with high-impact
business services, designed
from the ground up to provide
real value, and delivering on
our commitment to provide
unprecedented support to
our most valuable asset, our
partners.
• GSA Schedule
• ECExpress Online Ordering
• Software Licensing
• Reseller Marketing Services
• Leasing
• Integration Services
• Trade Up
• A Menu of Financial Services
• SYNNEX Service Network
• ASCii Program
• PRINTSolv
Components East
800.444.7279
Components West
888.756.4888
Government Sales
800.456.4822 Ex. 4007
Security Sales
800.444.7389
Leasing
800.451.5744
POS Solutions
800.753.6927
Customer Service
800.756.1888
OEM West
800.756.7888
CTI Products (Sales)
800.444.7359
Regional Office
800.756.5974
SMB Sales Group
855.899.0050
Supplies & Accessories
888.223.1164
Software
866.226.7532
License Online West
800.414.6596
License Online Central/
East
800.432.6980
Auto ID / POS Sales
800.950.5974
ICG Security &
Wireless LAN
800.688.0751
Corporate Headquarters
Fremont, California
Sales Headquarters
Greenville, South Carolina
Warehouse Locations
1 Tracy, California
2 Chantilly, Virginia
3 Romeoville, Illinois
4 Richardson, Texas
5 Monroe, New Jersey
6 Grove City, Ohio
7 Miami, Florida
8 Southaven, Mississippi
9 Chino, California
*ISO-9001-2000 Manufacturing Facillities

ADVANCING IT INNOVATIONS

INFRASTRUCTURE

SERVICES
2019 LINE CARD
© 2019 SYNNEX Corporation. All rights reserved. SYNNEX, the SYNNEX Logo, and all other SYNNEX company, product and services names and slogans are trademarks or registered trademarks of SYNNEX Corporation. SYNNEX, and the SYNNEX Logo Reg. U.S. Pat. & Tm. Off.

Westcon, Comstor and GoldSeal are registered trademarks of WG Service Inc., used under license. Other names and marks are the property of their respective owners.

1.800.456.4822
www.synnex.com
279520-19 | 032719
10ZiG
2FA
3D Classroom
3D Systems
3M Touch
3M Mobile Interactive Solutions
3S Vision
3VR
4D Global
4Sight
6fusion
65bit Software
911 Enable
A Deeper View
AAEON Electronics an ASUS Company
ABBYY Software ESD
Absolute Software
ABVI
Access Data
Accessory Power
Accortec
Accu-Tech
Accuview
Acer
Act-On
Actian
Actifio
Actineon
Actiontec
ActivIdentity Envoy
Actsoft
Acuo Technology
Adaptec
Adaptiva
Adata
Add-On Computer Peripherals, LLC
Addlogix
Addmaster
ADESSO
Adlink
Adobe
Adrem Software
ADS Technologies
Advanced Input-Esterline
Advantech
Aegis Micro/Formosa– USA
Aerohive
Aetherstore
Afco Systems
After Mouse
AG Antenna
Agema
Agosto
Airclass
Akitio
Algo Communications
Alibaba Cloud
AlienVault
Alive Studios
Allen Systems Group
Allied Telesis
Allocacoc
Alloy
Allround Automation
ALLSOP
Altair Engineering
Altaro
Althon Micro
Altia Systems
AltiGen
Aluratek
Ambir Technology
AMD/ATI Fire
Amer Networks (formerly Freedom 9)
Amico Accessories
AML
Amped Wireless
Amphenol
AMX
Amzer
Anacom Medtek
Anchor PD
ANCORA
Anthro Corporation
Antop Antennas
Anuta
Aomata
Aopen
AppAssure
Appspace
APC
API
Aporeto
AppCom Solutions
Appistry
Apstra
Aquarius
Arbor Networks
Architext
Arclyte
Arctic Cooling
Areca
Aristo Flatbed Cutters
Armoractive
Armored Shield
Array Networks
Artisan
Artisan Infrastructure
Aruba Networks
Arxscan
Asante Networks
ASG
Aspect Software
Aspire/Standzout
Assist Education
Astro Gaming
ASUS
Asus CE
Asus Notebook
AT&T
Atdec
Aten Technology
ATI Graphics Cards
Atlantis Computing
Atrack
ATX
Audio Fetch
Audio Messaging Solutions (AMS)
Augmentix
Aurora Multimedia
Auslogics
Authen2cate
Authlogics
Autotask
Avanquest
Avaya
Avenues
Avermedia
Aviva Solutions
Axiom
Azend Corporation
Azpen
B+B Smartworx
BAE Systems

BAK USA
Bamboo Solutions
Bandura Systems
Bandwidth
Baracoda/Ingenico
Barco Medical
Barcoview
Barnes & Noble
Barracuda Networks
Basler
Battery Technology
Bay Dynamics
Bay Technical Associates
BCDvideo
Becrpyt
BedPhones
Bedwell Technologies
Belkin
Bematech
BenQ
Best Minds
Best Mounting/AFC
Better Energy Systems
Beyond Trust
Bidwell Technologies
Big Switch
BioTeam
Bitflow
BITS Ltd.

BitTitan
Bixolon
Black Box
Black Box Retail Services
Blocksi
Blue Ant Wireless*
Blue Coat
Bluebeam
BlueData
Blueforce
Boardshare
Body Solid
Booz Allen Hamilton
BorderWare
Bosch Comm
Bouncepad
BoxIT
Brady People ID
Braggables/MJ Mitchell Consulting
Brainboxes, Ltd
Braven
Brenthaven
Bretford
Bretford Manufacturing
Bridge Communication
Brocade
Brother
Brother Mobile Solutions
BTH2
Buffalo Technology
Bump Armor
Buncee
Bush Industries
Business Logic
Buslink/Global Silicon
BYTECC
C2G
Cable Manufacturing
Cables Unlimited
Cachengo
CalAmp
Cambre Products
Canon
CAPSA Healthcare
Carbonite
Card Scanning Solutions
Case Power
Casio Projectors
CBM Metal
Celestix
Cenomax
CENTON
Centrify
Century Software
Certes Networks
Champion Solutions
Champion Systems
Channel Vision (Custom Installation)
Chargtech
Chassis Plans
Check Point Software
Checkpoint Security Systems
Chef Software
Chelsio
Chenbro
Chief Manufacturing
Ciena
CIG
Cilutions
Cinemassive
Cisco
Clearcenter
ClearColor Ink
Clearone
Club3D
CME
CobWebs
Coby
CognitiveTPG
Cognito
Comcast Business
Commvault
Component One
Compu-Lock
Compulocks Brands
Compunetix
Computer Instruments
Computer Security
Computer Warranty Services
Comsquared Systems
Conarrative
Connection-E/Trifusion
Contex Americas
Convertertechnology
Conveyant Systems
Coolmax
Copernicus
Core Security
Corel
Corente
Corlogix
Corologix
Corsair Micro
Cortado/Thinprint
Cplane
CPR Tools
CradlePoint
CraftUnique
Creative Labs
Crestron
Crimson AV
Crimson Technologies
Crosstec
CRU-Dataport
Crucial Technology
CruDataport
CSDC
CTA Digital
Ctera
Cumulus Networks
Curriculum Loft
CXTEC
Cy-Fi
Cyberlink.com
Cybernet Manufacturing
CyberPower

CYBERPOWERPC
Cybertron PC
Cybric
Cycle Computing

CYCLONE
Cylance
CYREN
D-Link
Da-Lite Screens
Dahle
Daktech
2019 LINE CARD (CONT.)
Contact Us:

1.800.456.4822
www.synnex.com
© 2019 SYNNEX Corporation. All rights reserved. SYNNEX, the SYNNEX Logo, and all other SYNNEX company, product and services names and slogans are trademarks or registered trademarks of SYNNEX Corporation. SYNNEX, and the SYNNEX Logo Reg. U.S. Pat. & Tm. Off.

Westcon, Comstor and GoldSeal are registered trademarks of WG Service Inc., used under license. Other names and marks are the property of their respective owners.
279520-19 | 032719
Damac
Dane Elec Corp
DAQRI
Data Drive Thru
Data Motion
Datacore
Datago
DataLocker Inc
Datalogic
Datamax Media
Datamax Software Group
Dataram
Dataxoom
Datel
Datera
Daymen Inc.

Decoded Bags
Definitive Technology
Déjà vu Security
Delphi Display Systems
DENAQ, Inc
Deployable Systems/Hardigg
DestructData
Devolutions
DH2i
Diablotek
Dialogic
Diamond
Diamondback Fitness
Dicota
Digedu
Digi International
Digistor
Digital Guardian
Digital Highway
Digital Peripheral Solutions dba Q-See
Digital Storm
DigitalPersona
Digium
Direct Dimensions
Distinow
Distrix
Docker
Doculex
DOD Tech
Dot Hill (eNex Systems)
DP Solutions
Draper
Drawp
Drobo
Dropbox Enterprise
DS3
DT Research
Dyconn
DYMO
Dynamic Systems
E-Sponder
Earthwalk
Eastman Kodak
Easy Tempo
Eaton Corporation

ECO STYLE
ECO TREND Cases, LLC.

Ecosol Solar Technologies
ECS Composites
Edge-core Networks
EDGE Memory
Edgeline Technologies
Edgewater Networks
Edgewave
Edigin
Education Collaborators
Educational Collaborators
EJ Technologies
Ekahau
Electroboard
Electrorack
Elegant Packaging
Elite Screens
Elliptical Mobile
Elmo USA
Elsa Group
Emathsmasters
Emerge
Encore Networks
Encore Software ESD
Encounter Pointe
Endor AG / Fanatek
ENET
EnGenius
Engineered Network Services
Enlight
EnMotus
EnovateIT
EnterpriseDB

ENTRUST
Envoy Data Corporation
Epson
Equus/Mirus Innovations
eReplacements
Ergotech
Ergotron
Ericom
Erwin
Esker
eSpark

ESTERLINE
EVault
Event Builder
Everfocus
Everki
EVGA
Evolis
Evoluent
Evolve III
Ex Point
Exablaze
Exablox
Exabyte
Excelero
Exorvision
Explain Everything
Extensis
Extenua
F5 Networks
Fabcon
Faction
Fargo Electronics
Faxback
Fellowes
FiatLux
Fidelis Cybersecurity
Filewave
Finisar
FireEye
Firemon
Firich/FEC
First Data
First Mobile Technologies
Fishtree
FivePoint
Fixmestick
Flexa Cutters
Flexa Dye Sublimation
Flexera Software
ForensIT
ForeScout
Foreseeson
Formax
Fortinet
Foscam Digital
FoxIt
Freedom9
Frontrow/Phonic Ear
Fuji Film
Fuji Film Recording Media
Fujitsu America, Inc.

Full Armor
Full Spectrum Laser
Furman
Fusion-io
Futura Retail Solutions
Future Business
Gamber Johnson
Gammatech
Garland
Garmin
Gateprotect
GBC (a division of ACCO Brands)
Gefen
Geist Manufacturing
Gemalto Envoy
General Imaging
Genesis One
GeorgeJon
GETAC
GFI
Gigabyte
GiiNii
Glacier Computer
Global Environ. Svcs
Global Knowledge
Global Marketing Partners
Global Silicon Electronics
Gluster
GoGuardian
GoldTech
Goldtouch
Good Technology
Google
Graphus
Gridless Power
Griffin
GRS Weigh
Gryphon
Guardian Edge
Guidance Software
Gumdrop
Gvision
H&R Block ESD
Hannspree
Hapara
Hayes Software
Havis
Headplay
Healthcare Information (HCI)
Healthpostures
Hedvig
Hercules/Thrustmaster
Heritage Travelware
Heritage Travelware - Kenneth Cole
Hewlett Packard Enterprise
Hi-Fi Works
Hi-Value Toners
HID Identity/Synercard
High Wire
Higher Ground/HGGEAR
HIKVision
Hitachi Global Storage
Hitachi Hard Drive
HL Corporation/Flicker
HNC Virtual
Howard Medical
HP Inc
HQ Cam
HSM of America
HTM -Vertagear
Huawei
Huawei Device USA
Huddly
Humanetics
HumanScale
Hypersign
Hyundai
I-Blason
I’m SPA/I’m Watch
I/O Magic
i3 International
i3 Technologies
ICOP Digital
IDAPT
Idera
IGEL
IGI
IKAN Corp
iKEY
Imageware
Imagine Technologies
Imagistics
Imation
IMC Networks
Imperva
InBoxer
Incase
Incipio
Incisive Software
Independence IT
Independence IT
Indigo
Industry Weapon
Infinidat
Infoblox
Infocase
InFocus
InfoPrint
Informa Software
Infosoft-Fusion Charts
Infrascale
Ingres
Inkjetwarehouse
Inland Products
Innergie
Innovative Card Scanning
Innovative Office
Inseego
Insperity
Instant Technologies
Insulfab
Integra Networks
Integral
Intel
Intelligent Computer Solutions
Intelligent ID
Intellinet
Intuit ESD
Intuition
INUVIO
Inwin
ioFabric
Iogear

IOLO ESD
Iomega
Iosafe
IP Home Products
iPearl
IRSA Video
ISI
iStabilizer
iStarUSA
iStorage
IT In Motion
ITWorx
Ixia
2019 LINE CARD (CONT.)
Contact Us:

Jaton
Jefa Tech
JetBrains
JMR Electronics
Joro
JPL
Juicepresso
JungleDisk
Juniper Networks
Just Systems Canada
JVC
Kaminario
Kanex
Kanguru
Kantek
Karv Flatbed Cutters
Kaser Corporation
Ken-a-vision
Kensington
Kerio
Keyovation
Keyscan
KeySource International
Keytronic
Kinesis
Kingston
Kingston Digital Inc
Kingston Distribution
Kinyo
Kitenga
Klas Telecom
Kleen Concepts
Knowledge Management Association
Koamtac
Kobian
Kobian
KODAK
KOM Networks
Komprise
Konftel
Konica Minolta
Kramer
KSI Data Sciences
KSI Envoy
Kwikset
Kyocera
LaCie
LandAirSea
Lanier
LapCabby
Laplink Software
Lasershield
Launchpad
Lawson Screen
LD Smart
Learn21
Legrande
Leica Geosystems
Lenovo
Lepide
Let’s Gel
Level Platforms
LexisNexis
Lexmark
LG Electronics
Liaison
LifeSize
Lightspeed Systems
LigoWave
Likewise
Lilee
Lind Electronics
Link Depot
Linksys
LinkSystems
Linoma
Listenwise
Lite-On
Litronics Envoy
LittleBits
LiveTiles
LMI Solutions
Location Based Technologies
Lockdown Tech
Lockncharge
Loctek
Logbar
Logicube
Logitech
Longse
Lowry Software
Lsquared
Lumisource
M360
M&A Technology
Maclocks
Macro Image Technology
Magellan
Magix Software
Magma
Magnetic 3D
Magtek
Mainpine, Inc
MakeSense
Makitso Displays

MMF POS
Man and Machines
Managed Objects
Manhattan
Mariner Software ESD
Markzware
Materialise
Matrox
Maxell
Maxta
Maxtor
Maxtrak
MaxxFi
McAfee
Mediatech
medM
Mellanox
Memorex
Memorex Electronics
Memory Experts
Meridiun
Merkury
Message Labs
Message Logic
Meta Company
Metadot Corp
Metafuse dba Project Insight
Metrologic
Metropolis
Metrovac
Mettler Toledo
MicroMicr
Micron
MicroPac Technologies
Microsoft
Microsoft ESD
Microsoft Hosted Exchange
Microsoft OEM
Microsoft Retail
Microsoft Surface
Microsoft Surface Hub
Milestone Systems
Mimo Monitors
Minicom
Minuteman Power Technologies
MIO Technologies
Mirantis
Mita
Mitsubishi
Mitsubishi Digital Electric America
Mizco
MJ Mitchell Consulting/Braggables
Mobelisk
Mobile Action Technology, Inc.

Mobile Demand
Mobile Edge
MobileMark
Mobiltrackr
Mobisystems
Mohawk USA
Mojo Networks
Monitors In Motion
Monnit
Monoprice
Moonwalk
MooreCo, Inc
Mota
Motion Computing
Motorola Phones
Motorola Solutions
Movavi Software ESD
Movea
MPak
MS - Cash Drawer
MSE
MSI Gaming Laptops
MSS Software
Multi-link
Muratec
Mutare
MyCDesk (Elyone)
MyStemKits
N1 Critical
N-Able
Nanonation
Ncipher Envoy
NCP Engineering
NDS Surgical Imaging
Nearpod
NEC
NEC Corporation of America
NEC Display Solutions
NEC Servers
NEC Software
NEC Storage
Nervepoint
Neschen Americas
NetAccess
Netcomm
Netgear
Netis Systems
Netlib
Netmotion
Netop
Netsparker
Netsurion – Eventtracker
Network Equipment Technologies
Netwrix
Neverware
Newell Co-Sanford
Newline
Nexenta
NexGen
Nicware/Niclabel
Niko Electionics
Nimbus Data Systems
Nitro PDF
Noble Locks
Nodeprime
Nokia
Nor-Tech
Norcent
Notable Solutions, Inc.

Novastor
Novuscell Batteries
Now Micro
Nuage
Nuance Communications
Nuance Dragon Medical
Numonix
Nvidia
O’Neil Printers
O2 Security
Objectworld
Observint
Obsidian
OCN Labs
OCSystems
Octa
OCZ Technology
ODIN Technologies
Ohbot
Okidata
Olea
OLIXIR Envoy
OminScan 2
OnCue
OneWorldTouch
OnSSI
Onyx Graphics Inc
Oomi
Open-E
Open-Xchange
Opengear
OPS Solutions
Optimum
Optoma
Oracle
Original Power
OrionVM
Ortronics

OSNEXUS
Otter Products
Otto
OutSystems
Overland Storage
Oxcyon
Packaging Strategies
Packet 8
Packetviper
Paessler
Palo Alto Networks
Panasonic
Panasonic Communications
Panasonic Consumer - Security
Panasonic POS
Panasonic Pro Video
Panasonic Projectors
Panasonic Toughbooks
Panda Security
Pannin
Panorama Antenna
Pantone Solutions
Papago
Para Sys. Inc.

Paragon Furniture
Paragon Software
Parallels
Partner Tech
Patriot Memory
2019 LINE CARD (CONT.)
Contact Us:

Westcon, Comstor and GoldSeal are registered trademarks of WG Service Inc., used under license. Other names and marks are the property of their respective owners.
279520-19 | 032719
Patrol PC
Paxton Access
Payoda
PC Gearhead
PC Matic
PC Pit Stop
PDUs Direct
Peerless Industries
Pelican
PenPal Schools
Pentaho
Perfect Fit
PeripheralLogix

PEXAGON
Pexagon Tech
PGI
Phantom Glass
Pharos Science and Application
Philips
PhishMe
Phonic Ear
Photo Shelter
Pi-Top
Pica8
Ping HD
Pivot3
Planar
Plantronics
Plasmon Optical Media

PLE SOFTWARE GROUP
Plextor
Plug-In Storage
Plum Laboratories
Plumgrid
Plus Technologies
PNY
Point A Technologies
Policy Medical
Polycom
Polyvision/Steelcase
POSBank USA
POSH Manufacturing
Positron
Posturite
Powercart
Powervar
Precise Biometrics Envoy
Precision Dynamics Corp
Precision Mounts
PrehKeyTec
Premier Mounts
Premium Compatibles
Prestige International
Preton
Prevalent
Prime View
Printek
Printer-Logic
Printronix AutoID
Printronix LLC
Private Label Media
Proline
Prologic
Promethean
Promise
Promisec
Protect Computer Products
Protect Covers
Proxima RF
Proximity Systems
PSC
Psion
Pulse Secure
Puppet Labs
Pure Orange
Purple
Qlogic
QNAP
Qualtrax
Quanmax
Quanta
Quantum
Quark
Quartet
Quatech
Quatrro
Quest International
Quest/Totoku
Quick Quality Cabinets
Quicken ESD
Qumu
Rackmount.IT
Rack Solutions
Radaptive
Radiant Logic
Radware
Rain Design
RAM Mounts
Rapid7
Rapid Deploy
Raptor Blasting Systems
Raritan
RCR International
RDK Products
Ready Dock
ReCast
Recordex
Red Hat
Red Lion
RedGate Software
RedXDefense
RedyRef
Reed Elsevier Inc.

Reflexion
ReLaunch Aggregator
ReplayXD
Retrospect
Revolabs
Revolution Acoustics
Rhino Technology Group
Ricoh
Ridgeline Technology
RidgeLogic
RIF6
Rise Vision Digital Signage
RISO
Riverside Technologies
RJS Software
RLE
Robinson Win Word
Robo3D
Roccat
Rock Hill Distribution
Rocky Mountain Ram
Rocstor
Rootsecure
Rose Electronics
Royal Consumer Products
RSPA (Sungale)
RSPA, Inc
RT Sales
Ruckus Wireless
SA International
Safe-T
Safety Vision
Sagemcom
Sakar-Altec Lansing
Salamander
Samsung
Sandisk
Sans Digital
Sanyo
Sanyo Denki
SAP
Sapien Technologies
SATO
Savin
Scala
Scale Computing
School Messenger
Science Logic
SCM Microsystems Envoy
SCO Group
ScopeStack
Scosche
Scott Clark Medical
SCP
Screenrag
Screenscape
Scrible
Seagate
SealShield
Seavus
SecPod
Security First
Securly
SEH Technologies
Seiko Instruments
Seiko Instruments USA
Sen.se
Sena Cases
Sencore Inc.

Sengled
Sennheiser
Sentinel
Sentry360
ServerTech
ServicePoint365
Services
Sharegate
Sharp
Shaun Jackson Design
Shivnet
Shuttle Computer
Shuttle Security
SI Screens (Screen Innovations)
Sierra Wireless
Sigma Photo
Signagelive
Signix
SIIG
Silex
SiliconDust
Silver Peak
Simple8
Simplifi
Simply NUC
SIOS Technology, Inc
Sitch AI
SKB Cases
Skin-It
Skull Candy
Skykick
Skykit
Smart AVI
Smart Modular
SmartPower Systems
Smith Enterprises
SMK-Link
Snoopwall
Socket Mobile
SOFTEX
SoftLayer
Software & Peripherals
Software Shelf
Solar Rig
Solarflare
Sole Source Technology
Solid Line Products
Solidfire
SOLO
Sonic Foundry
Sonitronix
Sony
Sony Chemicals
Sony Content Capture Solutions
Sony Professional Monitors
Sony Projectors
Sony ProSumer Displays
Sotel
SoundTrap
SP Controls
Space Saving Solutions
Spark Integration
Spectrum Business
Spectrum Corporation
Speechswitch
SpeedLink
Sphere3D
SPIKES
Spracht

SPRACHT
Sprinxle
SSE Technologies
SSG Consulting
SSH
Stadia Media
Staedtler Noris
Star Micronics
Startech
Startech.com
STEC
Steganos
Stelle
StemFuse
Stephen Gould Corp.

Still Secure
Stirling Communications
STM Brands
StorageCraft
StorageTek
StorMagic
Stormboard
Stratus
Stulz Air
SugarCRM
Suitable
SUMMA America
SunBrite TV
Supercom
Supermicro
Surecall
Swiftpage
Swingline
Swyx
Syam
Syba Multimedia
Sychron
Sychron
Symantec
Symantec Hosted Services
Symbee
SyncroSoft
Synel Industries
Synology
Syntax-Brillian
Syntela
System Design Advantage
Systran
T-Mobile
TAA Products
TabletExpress
TabletKiosk
TABLETMedia
TAG / Technology Advancement Group
TAG Global Systems
Take Charger
Talis Data Systems
Talkaphone
Tandberg
2019 LINE CARD (CONT.)
Contact Us:

Westcon, Comstor and GoldSeal are registered trademarks of WG Service Inc., used under license. Other names and marks are the property of their respective owners.
279520-19 | 032719
Tandesa
Tangent Computers
Tannoy
Targus
TCP Wave
TDK
TEAC
TeamOne Networking
Team Viewer
Teamboard
TEC Lighting, INC
Tech Global
Tech Products 360
Techguard Security
Technologies LTD.

Tegile
TEKLYNX International
Teleepoch
Telephonetics
Teles
Telit
TelWorx
Tely Labs
Tempest Lighting
Tempusnova
Tenergy
Teradici
TeraMedica
Teras
Texthelp
The Joy Factory
Thecus
Thermal Take
ThingLogix
ThreatTrack
Tidebreak
Tiger-Vac
Titan Radio
Tommo
Toolfarm
Toopher
Top Patch
Toshiba
Toshiba Security
Toshiba-Tec
Total Computing Solutions
Total Micro
Totoku Motor
Touch Systems
TP Link
TPcast
TPG
TPK VD
Tracewell Systems
Track Scan
Transcend Information
Tranxition
Tremolo Security
TRENDnet
Trenton Systems
TRG Group (Wenger/SwissGear)
Triad Floors
Tri-Color
Trident Systems
Tripp Lite
Tripwire
Trisys
Troy MICR
TSC
TSI Touch
Ttuff Technologies
Turtle by Perm-A-Store
TVS (Eversun– Technologies)
Twinhead
Twistlock
Tyan
Tycon Power
UMANGO
Uniform Industrial Corp
Unify
Unirise
Unitech America
Universal Devices
Uniwide

UNXIS (SCO)
Unytouch Manufacturing/Firebox
Upcycle Goods
UPEK
Uptime Devices
Urban Armor Gear
US Robotics
USSI
Utility Associates
Utimaco
V5
Valcom
VanDyke Software
Vantage Point
Vantec
VARCommerce
Varonis
Vation Ventures
Vault
VCOM - Hamilton Buhl
VDO360
Veilux
Velocilinx
VeloCloud
Veracity
Verbatim
Verizon Enterprise
Vertiv
Viavi
Victorinox
Victory Multimedia
Videobank Digital
Videxio
Viewer Central
ViewSonic
VIO
Vipre
Vircom
Virsto
Virtuu
Visage Mobile
Vision Wireless
Visioneer
VisionMAX
Visix
Vistaquest
Vivid Laminators
VM Electronics
Vorp Energy
Votiro
VSS Monitoring
Vtech
VuPoint
VuRyte
VWR/Triumph Boards
VXL Instruments
Warp Mechanics
Wasp Bar Code
Watchguard
WD, a Western Digital Company
Webroot
Wellbeats
Weltron
WePresent
West Penn Wire
Westinghouse
WeVideo
White Label Document Services
WhyGosh
Williams Software Group
WinMagic
Winston International
Wiresoft
Wirexpress
Wizard Wall
Wolters Kluwer Health
Women In Bags / Fabrique
Wondersign
Woodware Furniture
Worthington Distribution
Woven Systems
Wyse
X-Rite Pantone
X-IO
Xerox
Xerox Scanner
XFX
Xi3
XPand Cinema
Xplore Technologies
Xsigo
Xtreme Cables
XtremeMac
XYZ Printing
Yamaha
YouSendIt
Yuneec
Zend Technologies
Zettaset
Ziften Technologies
Zimbra
Zinstall
ZLINE
Zoom Video
Zotac
ZTE
ZyXel
SYNNEX
The Strategic Procurement division helps new vendors
enter distribution by identifying, developing, and managing the vendors needed to complete our customers’ solutions.

These vendors represent many different verticals and
business models and help us drive incremental value for our partners.

Why Choose SYNNEX
as Your Distribution
Partner?
Suppliers
More than 500 incremental
vendors
Product Categories
• Commercial
• Professional AV
• Networking
• Manufacturing/industrial
• Consumer electronics
• Public Sector
• Government
• Education
• Regulated Industries
• Healthcare
Full Distribution Services
• Logistics Management
• Product Fulfillment
• 24x7 Order Processing and
Billing
• Technical and Sales Support
• Dedicated PM Team
• Virtual Inventory/EDI

CONTACT
Strategic Procurement
Email us directly at:
[email protected]
Call your SYNNEX Rep:
864-349-4117
SYNNEX
Software:
2FA
Assist Education
3D Classroom
4D Global
6Fusion
65bit Software*
911 Enable*
A Deeper View
Abbyy USA
Absolute Software
Access Data*
ActivIdentity Envoy
Act-On
Actsoft
Acuo Technology*
Adaptiva
Adrem Software
Alive Studios*
Allen Systems Group
Allround Automation
Altaro
Aomata
API*
Aporeto
Appistry
Apstra
Architext*
Arxscan
Aspect Software
Assist Education
Aurora Multimedia
Auslogics
Authen2cate*
Authlogics
Avanquest
Aviva Solutions*
Bamboo Solutions*
Best Minds
Blueforce
Booz Allen Hamilton
Bridge Communication
Business Logic
Celestix*
Centrify
Champion Solutions
Chef*
Clearcenter
CobWebs
Computer Instruments
Conarrative
Convertertechnology*
Conveyant Systems
Corel
Corente
Core Security*
Cortado/Thinprint*
CPR Tools
Crimson Technologies
Crosstec*
Crossvale
CSDC*
Curriculum Loft
Cyberlink.com
Cyberloq
Cybric
Cyren
Data Motion
Datel
Déjà vu Security
Devolutions
DH2i
Digital Guardian
DigitalPersona
Digi-Cert
DP Solutions
Drawp
Dynamic Systems
Easy Tempo
Edgewave
Edigin
Ekahau
Emathsmasters
Encounter Pointe Software
Engineered Network Services
Entrust*
Esker
Event Builder*
Excelero
Extensis*
Faxback
Fishtree*
Flexera Software
ForensIT
FoxIt*
Frontrange Software*
Gemalto Envoy
Genesis One*
Global Environ. Svcs*
GoGuardian
Graphus
Hayes Software
Idera
IGI
Imageware
Incisive Software
Indigo
Infosoft-Fusion Charts
Insperity
Instant Technologies
Intelligent ID
ITWorx
ISI
JetBrains*
Just Systems Canada*
Laplink Software*
Launchpad
Learn21
Lepide
Liaison*
LinkSystems
Linoma
Liquid
Litronics Envoy
Logicube
Lowry Software*
Lsquared
M360
Magellan*
Magix Software
Make Sense
Markzware
Materialise
Maxtrak
medM
Meridiun
Meta Company
Metafuse dba Project Insight
Mobiltrackr
Mobisystems
MSS Software
MyCDesk (Elyone)
MyStemKits
Ncipher Envoy
NCP Engineering
Nearpod
Nervepoint
Netlib
Netmotion*
Netsparker*
Netsurion – Eventtracker
Neverware*
Nicware/Niclabel
Nitro PDF
Nodeprime
Novastor
Now Micro
Nuance Communications
Nuance Dragon Medical
Numonix
OminScan 2
Open-E
Optimum
OrionVM*
Oxcyon*
Paragon Software
Parallels
Payoda*
PC Pit Stop
PenPal Schools
Perpetuum
PGI
PhishMe
Photo Shelter
Plumgrid
Plus Technologies
Policy Medical
Pradeo
Preton
Prevalent
Printer-Logic
Privatizeme
Promisec
Puppet Labs
Qualtrax
Quatrro
Quark
Qumu*
Radaptive*
Radiant Logic*
Rapid Deploy
ReCast
RedGate Software*
Retrospect*
RJS Software
Rootsecure
SA International
Safe-T
Sapien Technologies
Science Logic*
ScopeStack
Seavus
SecPod
Security First
Sentinel
Sharegate
Signagelive
Signix
Simple8*
Spectrio
Spectrum Corporation*
Spikes

SPRACHT
Sprinxle*
SSG Consulting
SSH*
StemFuse
Stratus*
Supercom
Swiftpage
Swyx
SyncroSoft*
Syntela*
Systran
TABLETMedia
Tandesa*
TechTerra
TeraMedica
ThingLogix
ThinkParq
Tidebreak
Toolfarm
Toopher
Total Computing Solutions
Tranxition
Tremolo Security*
Utimaco
VanDyke Software*
Varonis*
Videobank Digital
Vircom*
Votiro
Waterdog
Wellbeats
Williams Software Group
WinMagic*
Wolters Kluwer Health
Xmedius
Ziften Technologies*
Zimbra*
Zinstall
Hardware:
3S Vision*
7Signal
4Sight
ABVI
Accessory Power*
Accortec*
Accu-Tech
Accuview
Actifio
Actineon*
Actiontec*
Acuant
Addlogix
Addmaster
ADESSO
Adlink
Advanced Input-Esterline
Afco Systems*
After Mouse*
AG Antenna
Algo Communications
Allied Telesis
Allocacoc
ALLSOP
Altair Engineering
Ambir Technology
Amer Networks
Amico Accessories*
Amped Wireless
Amphenol
Amplivox
Amzer
Anacom Medtek
Anthro
Antop Antennas
Aquantia
Arclyte
Arctic Cooling
Armoractive
Armored Shield
Array Networks
Asante
Aspire/Standzout
Astro Gaming*
Atdec
Atrack*
ATX
Audio Fetch
Avermedia*
Axiom
Azend*
Azpen*

BAK USA
Barco Medical*
Battery Technology
Bay Technical
BCDvideo
Belkin
Best Mounting/AFC
Better Energy Systems*
BioTeam*
BITS Ltd
Black Box*
Black Box Retail Services*
Boardshare
Bouncepad
BoxIT
Braggables/MJ Mitchell Consulting*
Brainboxes, Ltd
Brenthaven
Bretford
Brother Mobile Solutions*
Bump Armor
Bush Industries
Business Machine Security
Buslink/Global Silicon
C2G
Cambre Products
Cellphone-Mate
CENTON
Certes Networks
Chargtech
Chassis Plans
Cilutions
Cinemassive
Club3D
CME
Compunetix
Computer Security
Connection-E/Trifusion*
Coolmax
Copernicus*
Corlogix
CraftUnique
CRU Dataport
CXTEC
Cybernet Manufacturing
CyberPower PC
Cybertron PC
Cycle Computing*

CYCLONE
Damac*
D-Link
Dahle
Daktech
Dane Electric
DAQRI
Datalogic
Datera*
Daymen Inc.*
Decoded Bags
Definitive Technology
Delphi Display Systems
DENAQ, Inc
Deployable Systems/Hardigg
DestructData
Dialogic*
Dicota
Digistor*
Digital Highway
Digital Storm
Distinow
DOD Tech*
Draper, INC
DT Research
Dyconn*
DYMO
Earthwalk

ECO STYLE
ECS Composites
Edgeline Technologies*
EJ Technologies
Electroboard*
Electrorack
Elegant Packaging
Elite Screens
Elliptical Mobile
ELM Fieldsight LLC
Elmo USA*
Elsa Group
Emerge Technologies
ENET
Engenius
EnovateIT*
Envoy Data
Equus/Mirus Innovations
Ergotech
Everfocus
Everki
Evolis
Evolve III
Exorvision
Ex Point
Fellowes
First Data*
First Mobile Technologies
FivePoint
Fixmestick*
Foreseeson
Formax
Foscam Digital
Frontrow/Phonic Ear
Furman
Gamber Johnson*
Gammatech
Garland*
Gateprotect
Geist Manufacturing
GeorgeJon
GETAC
Glacier Computer
GiiNii*
Global Marketing Partners
Goldtouch
Google
Gryphon
Gumdrop*
Gvision
Hannspree
Havis*
Headplay
Healthcare Information
Healthpostures
Hercules/Thrustmaster
Heritage Travelware
HNC Virtual*
Howard Medical
HQ Cam*
HSM of America
HTM -Vertagear
Huawei*
Huddly
Humanetics*
HumanScale
i3 Technologies
I-Blason*
I/O Magic
IDAPT *
Ideum
IGEL*
iKEY*
Incipio*
Infocase
Infrascale
Inkjetwarehouse*
Inland Products
Innovative Card Scanning
Innovative Office
Insulfab*
Intelligent Computer Solutions
Intellinet
Integra Networks
Iosafe
Longse
Manhattan/Intellinet
iPearl*
IRSA Video
iStarUSA
IT In Motion
Jaco*
JAR Systems*
Jatheon
Jefa Tech
JMR Electronics
Joro*
JPL
Juicepresso*
Kanex
Kanguru
Kantek
Kaser Corporation
Keezel
Ken-a-vision
Kensington
Keyscan
Keytronic
Kinesis*
Kingston Distribution
Klas Telecom*
Knowledge Management
Association
Koamtac
KOM Networks
KSI Envoy
Leica Geosystems
LandAirSea
LD Smart
Let’s Gel
Lexis Nexis
Lilee
Lind Electronics
Linksys
Location Based Technologies
Lockdown Tech*
Lockncharge*
Loctek
Logbar*
Lumisource
M&A Technology
Maclocks/Compulocks
Magma
Mainpine*
Makitso Displays
Man and Machines
Manhattan
Marshall Electronics
MaxxFi
MediaTech
Merkury
Message Logic
Metadot Corp.

Metropolis
Metrovac
Mettler Toledo
Micropac
Mimo Monitors
Minuteman UPS
Mizco
Mobelisk
Mobile Demand *
MobileEdge
Monitors In Motion
Monnit
Monoprice
Moonwalk*
MooreCo, Inc
MPak*
MultiLink
N1 Critical
Nanonation

NEC POS
Netis Systems
Netop
Newline*
Noble Locks
Nor-Tech
Novuscell Batteries
Observint
Obsidian
Octa*
ODIN Technologies
Ohbot
Olea
OLIXIR Envoy*
OneWorldTouch
Oomi*
OPS Solutions
Packaging Strategies*
Packetviper*
Pannin
Panorama Antenna
Paragon Furniture
Patrol PC
Paxton
PC Gearhead
PDUs Direct
Pelican
Perfect Fit
PeripheralLogix

PEXAGON
Phantom Glass*
Pi-Top
Plug-In Storage*
Polyvision/Steelcase*
Positron
Posturite
Powercart
Powervar*
Precise Biometrics Envoy
Precision Dynamics Corp
Precision Mounts
Prestige International
Prime View
Proline
Prologic
Protect Covers
Proxima RF
Proximity Systems
Pure Orange
Quick Quality Cabinets
Rackmount.IT
Rack Solutions
Rain Design
RAM Mounts
Raritan
RCR International
RDK Products
Ready Dock*
Recordex
RedXDefense
RedyRef*
ReLaunch Aggregator
ReplayXD
Revolution Acoustics
RLE
Robinson Windword, Inc*
Roccat
Rocstor
Rose Electronics
RSPA, Inc
RT Sales
Rubbermaid Medical*
Sakar-Altec Lansing*
Safety Vision*
Salamander
Samsonite
Scott Clark Medical *
SCM Microsystems Envoy
Screenscape*
SealShield
2019 LINE CARD
© 2019 SYNNEX Corporation. All rights reserved. SYNNEX, the SYNNEX Logo, and all other SYNNEX company, product and services names and slogans are trademarks or registered trademarks of SYNNEX Corporation. SYNNEX, and the SYNNEX Logo Reg. U.S. Pat. & Tm. Off. Westcon, Comstor and GoldSeal are registered trademarks of WG Service Inc., used under license. Other names and marks are the property of their respective owners. STRATPRO-13433 032719 Seamark
SEH Technologies
Seiko Instruments USA
Sengled*
ServerTech
Shaun Jackson Design
Shivnet
SI Screens
Silicon Power
Simply NUC
Sitch AI
SKB Cases
Skin-It
Skull Candy
Smart AVI
Smith Enterprises
Smith Micro
SMK-Link
Snoopwall*
Socket Mobile, INC
Software & Peripherals*
Software Shelf
Solar Rig
SoleSource Technology
Solid Line Products
SOLO*
SonicFoundry*
Sonitronix
SP Controls*
Space Saving Solutions
Spark Integration
Speedlink
SSE Technologies
Startech.com
Staedtler Noris
Stelle
Still Secure
Stirling Communications
STM Brands
Stulz Air
Suitable*
Sumar
SunBrite TV
Suncraft
Syba Multimedia
TAA Products
Tablet Express
Tablet Kiosk
Tag Global Systems
Take Charger
Talkaphone
Tangent Computers
TCP Wave
Teamboard
TeamOne Networking
Team Viewer
Techguard Security*
Tech Products 360
Telephonetics
Teles
Telit
Tempest Lighting
Tenergy
Teras*
Thecus
The Joy Factory

THERMALTAKE
Tiger-Vac
Titan Radio
Tommo
Total Micro
TPcast
TP-Link
Tracewell Systems*
TrendNet
Tri-Color
Triad Floors
Tycon Power
Uniform Industrial Corp
Unirise
Universal Devices
Unytouch
Upcycle Goods
Uptime Devices
Urban Armor Gear*
USSI
Utility Associates
V5*
Vantec
Vation Ventures
Vault*
VCOM - Hamilton Buhl
VDO360
Velocilinx
Victorinox
Viewer Central
VIO
Vistaquest
Viziflex
VM Electronics
Vorp Energy
Vtech
VuPoint*
VuRyte
VWR/Triumph Boards
VXL Instruments
WASP
WePresent
Winson International
Wirexpress*
Wizard Wall
Woodware Furniture
Worthington Distribution
Xi3*
Xpand Cinema
Xplore Technologies*
Xtreme Cables
Yuneec*
ZTE
Zyxel Communications
*Requires vendor authorization
Copyright 2018 SYNNEX Corporation. All rights reserved. SYNNEX, the SYNNEX Logo, and all other SYNNEX company, product and services names and slogans are trademarks or registered trademarks of SYNNEX Corporation. SYNNEX, and the SYNNEX Logo Reg.

U.S. Pat. & Tm. Off. Other names and marks are the property of their respective owners.

ENGAGE NOW
For quotes or more information,
email [email protected].

Transform Public Transportation with IoT
The Internet of Things (IoT) is transforming the public transportation industry and driving it toward a smarter future.

By collecting data that can be retrieved remotely in real-time, IoT is bringing ease and efficiency to operations, processes, and analytics, all while giving riders connectivity that enables productivity on the go. SYNNEX’s ready-built IoT solutions can help deliver:
• An enhanced rider experience
• Wi-Fi that allows for business-travel efficiency and productive students
• Optimization of rider demographics for smarter marketing • Improved efficiency and safety
The SYNNEX Difference
SYNNEX solves the puzzle of complexity around IoT
and makes selling simple. We provide the complete
ecosystem of products and services that enable
companies to monitor transportation systems and
performance efficiently and cost-effectively.
• Experienced team: We have subject matter
experts in education, public safety, transportation,
and more.
• Assessment/design: We offer solution providers
a range of pre-sales consultation support services,
including assessments, device selection, migration
strategies, connection with OEMs, financial
alternatives, and deployment/logistics solutions.
• Solution Development: We provide access
to ongoing technical support for OEMs and
resellers by developing technology solutions their
end users need.
• On-Site Deployment Services: We ensure your
customers have on-time and ready-to-use solutions
which deliver a consistent, focused approach to your
technology deployments.
– Fleet utilization
– Optimized routes
– Real-time driver
monitoring
– Proactive maintenance
– Safety warning systems
– Electronic logging
device (ELD)
$68 BILLION

VALUE OF PUBLIC

TRANSPORTATION INDUSTRY
$35 + MILLION

TIMES PEOPLE BOARD

PUBLIC TRANSPORTATION

EACH WEEKDAY

10.1 BILLION

TRIPS AMERICANS

TOOK ON PUBLIC
TRANSPORTATION IN 2017
Copyright 2018 SYNNEX Corporation. All rights reserved. SYNNEX, the SYNNEX Logo, and all other SYNNEX company, product and services names and slogans are trademarks or registered trademarks of SYNNEX Corporation. SYNNEX, and the SYNNEX Logo Reg.

U.S. Pat. & Tm. Off. Other names and marks are the property of their respective owners.

CARRIERS
KEY

COMPONENTS
For more information,
email [email protected].

RUGGED
MOBILE
CAMERA
ROUTER
(GATEWAY)
RUGGED
MOBILE
DEVICE
CLOUD

MANAGEMENT

CONSOLE
VIDEO

MANAGEMENT

SOFTWARE

GPS/MOUNT

POWER ADAPTOR

ANTENNA

Ó Ü G
Ü à
G Ó Ò Ü H I
Û
Ò Ü à Û Ò
Û I
7 K
H

&
/
2 8
'
6 R
O
Y

P
L
V
V
L
R
Q

L
V

W
R

F
R
Q
Q
H
F
W

R
X
U

Y
H
Q
G
R
U
V

W
R

U
H
V
H
O
O
H
U
V

D
Q
G

H
D
F
K

R
W
K
H
U

D
O
O
R
Z
L
Q
J

X
V

W
R

S
U
R
Y
L
G
H

L
Q
W
H
O
O
L
J
H
Q
W

V
R
O
X
W
L
R
Q
V

W
K
D
W

D
G
G
U
H
V
V

E
R
W
K

S
U
H
V
H
Q
W

D
Q
G

I
X
W
X
U
H

P
D
U
N
H
W

G
H
P
D
Q
G
V

,
W

F
D
Q

E
H

G
L
I
I
L
F
X
O
W

W
R

Q
D
Y
L
J
D
W
H

D
O
O

W
K
H

L
Q
I
R
U
P
D
W
L
R
Q

D
Q
G

F
K
R
L
F
H
V

D
Y
D
L
O
D
E
O
H

:

L
W
K

R
X
U

W
K
U
H
H

P
D
L
Q

S
L
O
O
D
U
V

R
I

E
X
V
L
Q
H
V
V

3 (
2 3
/
(

_

3 5
2 &
(
6 6

_

3 2
5 7
$
/

\
R
X

Z
L
O
O

E
H

D
E
O
H

W
R

H
[
S
D
Q
G

\
R
X
U

I
R
R
W
S
U
L
Q
W

D
Q
G

E
H
F
R
P
H

D

W
U
X
V
W
H
G

D
G
Y
L
V
R
U

W
R

\
R
X
U

F
X
V
W
R
P
H
U
V

3 ( 2 3 / (
, W L V L P S R V V L E O H I R U D F R P S D Q \ W R X Q G H U V W D Q G H Y H U \ S U R G X F W W H F K Q R O R J \ D Q G R S S R U W X Q L W \ 2 X U W H D P R I F
O
R
X
G

H
[
S
H
U
W
V

D
U
H

K
H
U
H

W
R

K
H
O
S

\
R
X

E
X
L
O
G

D
Q
G

H
[
S
D
Q
G

\
R
X
U

F
O
R
X
G

S
R
U
W
I
R
O
L
R

7 K
H

I
R
O
O
R
Z
L
Q
J

L
V

D

V
K
R
U
W

O
L
V
W

R
I

W
K
H

U
H
V
R
X
U
F
H
V

D
Y
D
L
O
D
E
O
H

' H G L F D W H G 7 H D P R I & O R X G
%
X
V
L
Q
H
V
V

'
H
Y
H
O
R
S
P
H
Q
W

0 D
Q
D
J
H
U
V

& H U W L I L H G & O R X G
$
U
F
K
L
W
H
F
W
V

D
Q
G

(
Q
J
L
Q
H
H
U
V
& X V W R P L ] H G 7 U D L Q L Q J , Q F O X G L Q J 2 Q
E
R
D
U
G
L
Q
J

D
Q
G

(
Q
D
E
O
H
P
H
Q
W

$
F
W
L
Y
L
W
L
H
V
3 5 2 & ( 6 6
5 H F R J Q L ] L Q J W K H L P S R U W D Q F H R I S U R F H V V W R \ R X U V X F F H V V L V L P S H U D W L Y H : H X Q G H U V W D Q G W K D W U H T X L U H P H Q W V D
Q
G

H
[
S
H
F
W
D
W
L
R
Q
V

D
U
H

F
R
Q
V
W
D
Q
W
O
\

F
K
D
Q
J
L
Q
J

D
Q
G

Z
H

D
U
H

K
H
U
H

W
R

K
H
O
S

\
R
X

E
X
L
O
G

D

S
U
D
F
W
L
F
H

W
K
D
W

H
Q
V
X
U
H
V

\
R
X
U

V
X
F
F
H
V
V

L
Q

W
K
H

P
D
U
N
H
W
S
O
D
F
H

6 R
P
H

R
I

W
K
H

D
Y
D
L
O
D
E
O
H

U
H
V
R
X
U
F
H
V

D
U
H

O
L
V
W
H
G

E
H
O
R
Z

4 X D U W H U O \ % X V L Q H V V 3 O D Q Q L Q J 6 H
V
V
L
R
Q
V

6 R O X W L R Q D Q G % X V L Q H V V 3 U R F H V V )
R
F
X
V
H
G

/
L
Y
H

D
Q
G

9 L
U
W
X
D
O

(
Y
H
Q
W
V
3 X U S R V H % X L O W 6 R O X W L R Q V Z L W K *
R

W
R

0 D
U
N
H
W

5 R
D
G
P
D
S
V
3 2 5 7 $ /
. Q R Z L Q J W K D W W U D Q V D F W L Q J R U G H U V L Q D T X L F N V H D P O H V V P D Q Q H U L V R Q H R I W K H P R V W L P S R U W D Q W D V S H F W V R I F
R
Q
G
X
F
W
L
Q
J

E
X
V
L
Q
H
V
V

Z
H

K
D
Y
H

S
U
R
Y
L
G
H
G

D

F
X
V
W
R
P

E
X
L
O
W

P
D
U
N
H
W
S
O
D
F
H

E
D
V
H
G

R
Q

\
R
X
U

I
H
H
G
E
D
F
N

W
R

K
H
O
S

Z
L
W
K

W
K
L
V

D
V
S
H
F
W

R
I

\
R
X
U

E
X
V
L
Q
H
V
V

+
R
Z
H
Y
H
U

Z
H

G
L
G
Q
¶
W

V
W
R
S

W
K
H
U
H

7 K
H

&
O
R
X
G

/
H
D
U
Q
L
Q
J

&
H
Q
W
H
U

L
V

\
R
X
U

S
H
U
V
R
Q
D
O

U
H
V
R
X
U
F
H

W
R

P
D
N
H

V
X
U
H

\
R
X

D
U
H

H
T
X
L
S
S
H
G

Z
L
W
K

W
K
H

L
Q
I
R
U
P
D
W
L
R
Q

D
Q
G

W
R
R
O
V

\
R
X

Q
H
H
G

W
R

W
U
D
L
Q

D
Q
G

R
Q
E
R
D
U
G

\
R
X
U

W
H
D
P

6 R
P
H

R
I

W
K
H

R
W
K
H
U

E
H
Q
H
I
L
W
V

\
R
X

F
D
Q

D
F
F
H
V
V

D
U
H

D
V

I
R
O
O
R
Z
V

9 H Q G R U $ 3 , , Q W H J U D W L R Q
/ R Z 7 R X F K 4 X R W L Q J D Q G 2 U G H U L Q J 3 L O R W 3 U R J U D P , Q F O X V L R Q
R
Q

1 H
Z

3 O
D
W
I
R
U
P

5 H
O
H
D
V
H
V

5 H D F K 2 X W W R F O R X G V R O Y # V \ Q Q H [ F R P W R * H W 6 W D U W H G 7 R G D \

% H Q H I L W V D Y D L O D E O H W R 3 U H P L H U & R P P X Q L W \ 0 H P E H U V ( P D L O F R P P X Q L W \ # V \ Q Q H [ F R P W R M R L Q W K H F R P P X Q L W \

' 5 , 9 , 1 * & 2 1 1 ( & 7 ( ' 6 2 / 8 7 , 2 1 6
0 2
%
,
/
,
7 <
6 R
O
Y

L
V

W
K
H

6 <
1 1
(
;

D
F
W
L
Y
D
W
L
R
Q

S
O
D
W
I
R
U
P

W
K
D
W

H
Q
D
E
O
H
V

F
R
Q
Q
H
F
W
L
Y
L
W
\

R
I

G
H
Y
L
F
H
V

Z
L
W
K

Z
R
U
O
G

F
O
D
V
V

Z
L
U
H
O
H
V
V

D
Q
G

Z
L
U
H
O
L
Q
H

F
D
U
U
L
H
U
V

0 R
E
L
O
L
W
\

L
V

S
H
U
Y
D
V
L
Y
H

L
W

L
V

D
O
O

D
U
R
X
Q
G

X
V

6 <
1 1
(
;

S
U
R
X
G
O
\

R
I
I
H
U
V

F
R
Q
Q
H
F
W
L
Y
L
W
\

P
R
E
L
O
H

G
H
Y
L
F
H

D
Q
G

J
D
W
H
Z
D
\

F
O
R
X
G

V
H
F
X
U
L
W
\

D
Q
G

D
S
S
O
L
F
D
W
L
R
Q

S
O
D
W
I
R
U
P
V

W
K
D
W

H
Q
D
E
O
H
V

P
R
E
L
O
H

0
0
D
Q
G

,
R
7
V
R
O
X
W
L
R
Q
V

I
R
U

W
R
G
D
\
¶
V

H
Q
W
H
U
S
U
L
V
H

& R Q Q H F W L Y L W \
* D W H Z D \ V
& O R X G 6 H F X U L W \
$ G Y D Q F H G , 6 9

$
S
S
O
L
F
D
W
L
R
Q
V
$ W W K H K H D U W R I R X U P L V V L R Q L V R Q H R Y H U D U F K L Q J J R D O W R N H H S \ R X U F X V W R P H U V F R Q Q H F W H G S
U
R
G
X
F
W
L
Y
H

D
J
L
O
H

D
Q
G

U
H
V
S
R
Q
V
L
Y
H

Z
K
L
O
H

J
L
Y
L
Q
J

\
R
X

P
X
O
W
L

*
7 0

P
R
G
H
O

Z
L
W
K

F
D
U
U
L
H
U
V

U
H
I
H
U
U
D
O

F
R

V
H
O
O

D
Q
G

U
H
V
H
O
O

/
H
W

X
V

K
H
O
S

\
R
X

F
K
D
Q
J
H

W
K
H

F
R
Q
Y
H
U
V
D
W
L
R
Q

Z
L
W
K

\
R
X
U

F
X
V
W
R
P
H
U
V

I
U
R
P

M
X
V
W

G
H
O
L
Y
H
U
L
Q
J

W
H
F
K
Q
R
O
R
J
\

W
R

L
P
S
U
R
Y
L
Q
J

E
X
V
L
Q
H
V
V

R
X
W
F
R
P
H
V

& R P P L W W H G W R < R X U % X V L Q H V V
7 K H 6 < 1 1 ( ; G H G L F D W H G W H D P R I F R Q Q H F W L Y L W \ D Q G S U R G X F W V S H F L D O L V W V D U H K H U H W R K H O S \ R X H [ S D Q G D Q H [ L V W L Q J P
R
E
L
O
L
W
\

D
Q
G

F
R
Q
Q
H
F
W
L
Y
L
W
\

S
U
D
F
W
L
F
H

R
U

F
U
H
D
W
H

D

Q
H
Z

R
Q
H

6 <
1 1
(
;

F
D
Q

K
H
O
S

\
R
X

% X L O G W K H 5 L J K W 6 R O X W L R Q V
6 H O O 0 R U H D Q G ( D U Q 0 R U H Z L W K 0 X
O
W
L
S
O
H

3 U
R
I
L
W
D
E
L
O
L
W
\

0 R
G
H
O
V
% H W K H + H U R I R U < R X U ( Q G 8 V H U 6 K L I W < R X U & R P P X Q L F D W L R Q
6 R O X W L R Q S U R Y L G H U V D Q G Y H Q G R U V F D Q S D U W Q H U Z L W K 6 < 1 1 ( ; W R E U L Q J W R J H W K H U P R E L O H D Q G Q H W Z R U N G H Y L F H V U H O L D E O H Z
L
U
H
O
H
V
V

D
Q
G

Z
L
U
H
O
L
Q
H

F
R
Q
Q
H
F
W
L
Y
L
W
\

F
R
Q
W
U
R
O

V
H
F
X
U
L
W
\

D
Q
G

D
Q
D
O
\
W
L
F
V

V
R
I
W
Z
D
U
H

D
V

Z
H
O
O

D
V

W
K
H

V
H
U
Y
L
F
H
V

W
R

G
H
V
L
J
Q

G
H
S
O
R
\

D
Q
G

P
D
Q
D
J
H

\
R
X
U

F
R
Q
Q
H
F
W
L
Y
L
W
\

V
R
O
X
W
L
R
Q

( V W D E O L V K H G ( F R V \ V W H P
2 Q 6 L W H & R Q Q H F W L Y L W \ ( [ S H U W V 6 H U Y L F H 6 R O X W L R Q $ V V H W V
5 H D F K R X W W R 0 2 % , / , 7 < 6 2 / 9 # 6 < 1 1 ( ; & 2 0 W R V W D U W G U L Y L Q J V R O X W L R Q V W R G D \

6 < 1 1 ( ; , R 7
9 D O L G D W H 7 H V W 6 X S S R U W
0 R
U
H

W
K
D
Q

D
Q

L
G
H
D

6 <
1 1
(
;

L
V

V
L
P
S
O
L
I
\
L
Q
J

D
Q
G

V
R
O
Y
L
Q
J

S
U
R
E
O
H
P
V

E
\

F
U
H
D
W
L
Q
J

S
X
U
S
R
V
H

E
X
L
O
W

V
R
O
X
W
L
R
Q
V

S
U
R
Y
L
G
L
Q
J

L
Q
W
H
O
O
L
J
H
Q
W

G
D
W
D

D
Q
G

D
X
W
R
P
D
W
L
Q
J

V
\
V
W
H
P
V

H
Q
D
E
O
L
Q
J

\
R
X

W
R

L
Q
F
U
H
D
V
H

R
Y
H
U
D
O
O

H
I
I
L
F
L
H
Q
F
\

D
Q
G

S
U
R
G
X
F
W
L
Y
L
W
\

I
R
U

\
R
X
U

F
X
V
W
R
P
H
U
V

2 X
U

J
R
D
O

L
V

W
R

V
L
P
S
O
L
I
\

W
K
H

F
R
Q
F
H
S
W

R
I

,
R
7
D
Q
G

S
U
R
Y
L
G
H

H
Q
G

W
R

H
Q
G

F
R
Q
I
L
J
X
U
D
W
L
R
Q
V

W
K
D
W

D
U
H

U
H
D
G
\

I
R
U

L
P
P
H
G
L
D
W
H

G
H
S
O
R
\
P
H
Q
W

D
Q
G

L
P
S
O
H
P
H
Q
W
D
W
L
R
Q

' H Y H O R S H G Z L W K < R X U % X V L Q H V V L Q 0 L Q G 6 < 1 1 ( ; L V K H U H W R V H U Y H D V W K H J H Q H U D O F R Q W U D F W R U I R U \ R X U E X V L Q H V V S U R Y L G L Q J S U H V D O H L P S O H P H Q W D W L R Q D Q G S
R
V
W

V
D
O
H

V
X
S
S
R
U
W

7 K
U
R
X
J
K

R
X
U

V
P
D
U
W

V
R
O
X
W
L
R
Q
V

\
R
X

Z
L
O
O

E
H

D
E
O
H

W
R

S
U
R
Y
L
G
H

L
Q
W
H
O
O
L
J
H
Q
W

F
O
R
X
G

R
I
I
H
U
L
Q
J
V

7 K
L
V

D
O
O
R
Z
V

\
R
X

W
R

I
R
F
X
V

R
Q

J
U
R
Z
L
Q
J

\
R
X
U

H
[
L
V
W
L
Q
J

E
X
V
L
Q
H
V
V

D
Q
G

H
[
S
D
Q
G
L
Q
J

\
R
X
U

I
R
R
W
S
U
L
Q
W

L
Q

W
K
H

P
D
U
N
H
W

:

H

D
U
H

\
R
X
U

H
[
S
H
U
W
V

L
Q

W
K
H

L
Q
G
X
V
W
U
\

H
Q
D
E
O
L
Q
J

\
R
X

W
R

V
H
U
Y
H

D
V

W
K
H

W
U
X
V
W
H
G

D
G
Y
L
V
R
U

W
R

\
R
X
U

F
X
V
W
R
P
H
U

E
D
V
H

7 K
H

I
R
O
O
R
Z
L
Q
J

D
U
H

W
K
H

F
R
U
H

F
R
P
S
R
Q
H
Q
W
V

R
I

R
X
U

,
R
7
S
U
D
F
W
L
F
H

3 X E O L F & O R X G

%
D
V
L
F

,
3 * D W H Z D \ V
& R Q Q H F W L Y L W \
' H Y L F H V
' D W D $ Q D O \ W L F V
$ G Y D Q F H G , 6 9

$
S
S
O
L
F
D
W
L
R
Q
V
6 P D U W 6 R O X W L R Q V 6 R O Y L Q J 5 H D O : R U O G 3 U R E O H P V , Q W R G D \ ¶ V P D U N H W F X V W R P H U V D U H O R R N L Q J I R U W U X V W H G D G Y L V R U V D Q G F R Q V X O W D Q W V W K D W D U H D E O H W R K H O S W K H P V R O Y H S
U
R
E
O
H
P
V

6 <
1 1
(
;

K
D
V

F
U
H
D
W
H
G

,
R
7
V
R
O
X
W
L
R
Q
V

E
D
V
H
G

R
Q

D
F
W
X
D
O

R
S
S
R
U
W
X
Q
L
W
L
H
V

V
H
H
Q

L
Q

G
L
I
I
H
U
H
Q
W

L
Q
G
X
V
W
U
L
H
V

8 V
L
Q
J

R
X
U

L
Q
G
X
V
W
U
\

H
[
S
H
U
W
V

W
R

K
H
O
S

V
R
O
Y
H

S
U
R
E
O
H
P
V

D
Q
G

R
X
U

H
Q
J
L
Q
H
H
U
V

W
R

Y
D
O
L
G
D
W
H

D
Q
G

W
H
V
W
V

W
K
H

V
R
O
X
W
L
R
Q
V

Z
H

K
D
Y
H
E
X
L
O
W

G
H
S
O
R
\
D
E
O
H

V
R
O
X
W
L
R
Q
V

W
K
D
W

\
R
X
U

F
X
V
W
R
P
H
U
V

Q
H
H
G

%
H
O
R
Z

L
V

W
K
H

V
K
R
U
W

O
L
V
W

R
I

R
X
U

H
[
S
D
Q
G
L
Q
J

Y
H
U
W
L
F
D
O

I
R
F
X
V

( G X F D W L R Q
* R Y H U Q P H Q W

)
(
'

6 /
(
'

+ H D O W K F D U H
7 U D Q V S R U W D W L R Q
( O H Y D W H < R X U & D S D E L O L W L H V
$ G G L Q J Q H Z V R O X W L R Q V W R \ R X U S R U W I R O L R P H D Q V P R U H W K D Q D G G L Q J S U R G X F W V 6 < 1 1 ( ; X Q G H U V W D Q G V W K H L Q Y H V W P H Q W W
K
D
W

D
G
G
L
Q
J

D

Q
H
Z

V
R
O
X
W
L
R
Q

R
U

I
R
F
X
V

G
H
P
D
Q
G
V

:

L
W
K

W
K
D
W

L
Q

P
L
Q
G

Z
H

K
D
Y
H

K
L
U
H
G

D

F
R
P
S
O
H
W
H

W
H
D
P

R
I

H
Q
J
L
Q
H
H
U
V

S
U
R
Y
L
G
H

P
X
O
W
L
S
O
H

V
H
U
Y
L
F
H

R
I
I
H
U
L
Q
J
V

G
H
Y
H
O
R
S
H
G

F
X
V
W
R
P

R
Q
E
R
D
U
G
L
Q
J

D
Q
G

H
Q
D
E
O
H
P
H
Q
W

W
U
D
L
Q
L
Q
J

S
O
D
Q
V

K
R
V
W

P
X
O
W
L
S
O
H
Y
L
U
W
X
D
O

D
Q
G

O
L
Y
H

H
Y
H
Q
W
V

W
R

K
H
O
S

V
X
S
S
R
U
W

\
R
X
U

E
X
V
L
Q
H
V
V

:

H

D
U
H

D
Q

H
[
W
H
Q
V
L
R
Q

R
I

\
R
X
U

W
H
D
P

W
K
D
W

Z
L
O
O

F
R
Q
W
L
Q
X
H

W
R

J
U
R
Z

L
Q

R
U
G
H
U

W
R

P
H
H
W

\
R
X
U

L
Q
F
U
H
D
V
L
Q
J

U
H
T
X
L
U
H
P
H
Q
W
V

5 H D F K R X W W R , 2 7 # 6 < 1 1 ( ; & 2 0 W R H [ S D Q G \ R X U E X V L Q H V V W R G D \

- Resellers who position the store as a solution for one or several specific end customers they already deal with have seen success. Often such end-customers buy specific products over-and-over again. - An eStorefront allows these end-customers to place orders at their convenience. - Other resellers have success when they are bidding (or have won a bid) on a contract for a specific end customer. These contract often require an ability to order online.
- At times, those end-customers require a punch-out capability, and that’s something we can discuss with you. (More about this is discussed in the CUSTOM PROGRAMMING section further down the page). - Resellers do NOT see much success – if any - opening an eStorefront hoping orders will magically appear from customers with whom they’ve never done business before. - The large online eCommerce businesses handle those customers very well already.

Where Resellers Have Seen Success
How Shopping Works
- By default, it’s available to anyone who finds it, similar to Amazon.com; however, you can also control acces s. The store can be set to display only the login screen by default. The login screen can also be set to display – or not display – a new- customer-account-creation section.
- Once a customer has an account, he or she enters his or her bill-to and ship-to information.

1.Reseller Billing (RSB)
This method is good for purchase order (PO) submissions, or if you have credit terms in place with your end-customers and you want to keep that in place. - No credit card fields on checkout.
- Optional or required PO number entry field. If set to required, a required PO document upload requirement can also be turned on.
- Reseller receives email when order is submitted.
- Reseller logs in and approves (submits) the order to SYNNEX when convenient. - SYNNEX does the pick/pack/ship to the end-customer (no SYNNEX branding on the shipment).
- SYNNEX invoices you.
- You invoice the end-customer.
- Because you take title ownership of the products sold, any sales count towards any goals/rebates you may have with manufacturers.

At this point there are several end-customer payment methods available:

End-Customer Ordering/Payment Methods
Store Access Options
- You have full administrative access to the back-end of the eStorefront, through a URL that’s different from the one your customers use.
- Support is available from our Helpdesk team, the same helpdesk that supports you on ECExpress, our online ordering tool.
- If you require our eStorefront to communicate data with an end-customer’s system (e.g. procurement pun-chout) or your own internal systems, that would require custom programming.
- This involves our System Engineering team talking to the necessary parties to determine development scope.
- A statement of work (SOW), including hours of work required, programming fees (hourly rate), and a delivery ETA would be presented and agreed upon by all parties before work can proceed.
- We require that you have a SYNNEX account with either credit terms or credit card on file.
- There is a $99 setup fee for an eStorefront.
- There is a $199/month fee with a 12-month contract that auto-renews. - You can terminate at any time, with 60 days written notice.

Copyright 2015 SYNNEX Corporation. All rights reserved. SYNNEX, the SYNNEX Logo and all other SYNNEX company, product and servicesnames and slogans are trademarks or registered trademarks of SYNNEX Corporation. SYNNEX and the SYNNEX Logo Reg. U.S. Pat. & Tm.Off. Other names and marks are the property of their respective owners.

Admin Access
Support
Custom Programming
Fees and Getting Started
SYNNEX eStorefronts
Overview
SYNNEX eStorefronts is a system built by SYNNEX and hosted on our servers .

It’s based on our own EC
Express online ordering system: eStorefronts are like ECExpress on a diet – a tool that’s available to you as a way for your end- customers to buy
from you.

We connect the eStorefront to your SYNNEX account, so by default anything you are authorized to buy from SYNNEX is available to your end-customers. An eStorefront can als
o be set up to offer a select number of SKUs; one current store has as little as 30 SKUs, set up specifically for a contract the reseller won. - The shopping experience is very much like what you find at other online stores:

You can search by keywords, or by clicking product categories. Once in a category you can use filters to search by brand, product attribute, and even pricing. - The search results page does a real-time calculation of inventory from all our warehouses. We can show that inventory number, or “In Stock”. When a SKU is out of inventory or on backorder, we can show that number also. - Most customers elect to display the word “Call”. That helps prevent an end customer from ordering an out-of-stock or backordered product accidentally, only to then bother you for updates on the order.
- When customers add items to their shopping cart, they enter a zip/postal code.

Our system looks at that code, the SKUs and quantities in the cart, and then determines the warehouse with the stock that is closest to that zip/postal code and displays shipping options. Default shipping methods are FedEx, UPS, etc. - You have the ability to make extra margin on the shipping fee by applying a markup percentage of your choosing.
- Once shipping fee has been calculated, end customers can continue shopping or proceed to checkout.

2.Reseller Billing with PayPal (RSB with PayPal)
This methods is good if you have AN end customer with credit terms, but you want to offer PayPal as an option too.
- At checkout, end customer clicks PayPal button.
- End-customer logs in or enters credit card info.
- End-customer receives PayPal confirmation.
- SYNNEX picks/packs/ships order to end-customer;
the name on the end-customer
credit card statement is your PayPal account name.
- SYNNEX invoices you.
- PayPal payment method can be assigned at the end-customer level, so one customer can be Purchase Order only, another customer can be PayPal only, and a third customer can have a choice of PO or PayPal.
- Because you take title ownership of the products sold, any sales count towards any goals/rebates you may have with manufacturers.

3.End-user Billing (EUB) (not available in Canada)
- End-customer logs in and enters credit card info.
- SYNNEX picks/packs/ships order to end-customer. With reseller info on packing list (no SYNNEX branding on the shipment).
- Name on the end-customer’s credit card statement is eStorefrontmall.com. - Twice a month, we deposit profits into your SYNNEX account. - Because you don’t take title ownership of the products sold, any sales do NOT count towards any goals/rebates you may have with manufacturers.

3.Special Pricing

1.Default margin percentage
- Default margin percentage, applied to all SKUs.
- That is a
percentage of your choosing: 10%; 10.25% - whatever you want. - Special Pricing allows you to set a specific price for a SKU. By default, special pricing applies to all end-customers. There is neither start nor end dates for this, so you should be careful, especially if your cost from SYNNEX rises and becomes higher than your selling price.

Margin Ranges allow you to make more margin on lower cost items from SYNNEX.

Nobody wants to make 10% margin on a $10 cable!
Here’s an example of what you can set up:
- If your SYNNEX cost is between a penny an $5, charge 100% margin. - Between $5 and $10, charge 95%
-
Between $10 and $20, charge, 85.75%
By default, these ranges are applied to all end-customers, unless you specify otherwise.

2.Price Groups
Price Groups allow you to set up markups by:
- SYNNEX product
category.
- By end-customer,
- By vendor,
- A com
bination of the above.

By default, these groups are applied to all end customers, unless you specify otherwise. For
example, you could have a default margin percentage of 10% except for
printers, which could be 5% for all customers.

You could set that percentage to 8% for a specific end customer, or vendor.

End-Customer Pricing Options
There are a number of ways to set up end-customer pricing.

Here they are:

Riverside City CouncilJune 17, 2025

Riverside City Council
June 17, 2025