Contract addendum information security and confidentiality statement