%PDF-1.4 % 40 0 obj <> endobj 41 0 obj <> endobj 42 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 490.9714 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 512.4123 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 543.321 23.0228 Tm .73 .19 0 0 k [( V)6.4(OL 4)]TJ ET EMC /P <>BDC BT 7 0 0 7 587.3827 23.0228 Tm (1)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 35 556.9316 Tm 0 0 0 1 k -.005 Tc [(Corpor)19.5(ate go)7.3(v)6.4(ernance r)9.3(e)0(f)11.7(ers t)9.8(o)0( the set of)]TJ ET EMC /P <>BDC BT 9 0 0 9 197.2124 556.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 544.9316 Tm -.005 Tc [(r)9.3(esponsibilities t)9.8(o)0( be fullled b)5.4(y)0( the higher-le)6.4(v)6.4(e)0(l)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.3367 544.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 532.9316 Tm -.005 Tc [(management structur)9.3(es of an or)9.3(ganization, such as)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.2183 532.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 520.9316 Tm -.005 Tc [(the management team, boar)9.3(d of dir)9.3(ect)9.8(ors \(BoD\),)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.6002 520.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 508.9316 Tm -.005 Tc [(and boar)9.3(d and management committees. )19.5(The)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.5034 508.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 496.9316 Tm -.005 Tc [(demands and expectations set b)5.4(y)0( inv)6.4(est)9.8(ors and)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.1228 496.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 484.9316 Tm -.005 Tc [(r)9.3(egulat)9.8(ors ha)7.3(v)6.4(e)0( been a wak)9.8(e-up call, and it has)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.1945 484.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 472.9316 Tm -.005 Tc [(become imper)19.5(ativ)6.4(e for these higher-le)6.4(v)6.4(e)0(l)]TJ ET EMC /P <>BDC BT 9 0 0 9 195.249 472.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 460.9316 Tm -.005 Tc [(management bodies t)9.8(o)0( ha)7.3(v)6.4(e)0( their r)19.5(adars captur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.6199 460.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 448.9316 Tm -.005 Tc [(the go)7.3(v)6.4(ernance aspects of cybersecurity in addition)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.1238 448.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 436.9316 Tm -.005 Tc [(t)9.8(o)0( their r)9.3(egular corpor)19.5(ate go)7.3(v)6.4(ernance activities. )]TJ ET EMC /P <>BDC BT 9 0 0 9 35 412.9316 Tm [(W)16.1(arnings issued b)5.4(y)0( EU r)9.3(egulat)9.8(ors on cyber)-24.4(thr)9.3(eats)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.0211 412.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 400.9316 Tm -.005 Tc [(and risk scenarios posed b)5.4(y)0( Br)9.3(exit ar)9.3(e classic)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.3151 400.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 388.9316 Tm -.005 Tc [(examples of this imper)19.5(ativ)6.4(e. A hack)9.8(er gr)9.8(oup used a)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.6396 388.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 376.9316 Tm -.005 Tc [(Br)9.3(exit-themed document t)9.8(o)0( deliv)6.4(er Z)10.3(ekapab)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.1352 376.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 364.9316 Tm -.005 Tc [(malwar)9.3(e t)9.8(o)0( high-pr)9.8(ole or)9.3(ganizations such as the)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.1358 364.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 352.9316 Tm -.005 Tc [(Or)9.3(ganization for the Pr)9.8(ohibition of Chemical)]TJ ET EMC /P <>BDC BT 9 0 0 9 208.0198 352.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 340.9316 Tm -.005 Tc [(W)15.2(eapons \(OPCW)-7.3(\), the United Kingdom Def)11.7(ense and)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.487 340.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 328.9316 Tm -.005 Tc [(Science )19.5(T)48.4(echnology Labor)19.5(at)9.8(or)-8.8(y \(DSTL\), and the)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.5628 328.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 316.9316 Tm -.005 Tc [(United Kingdom F)10.3(o)0(r)9.3(eign and Commonwealth Oce)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.4719 316.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 556.9316 Tm -.005 Tc [(\(FCO\). So chances ar)9.3(e v)6.4(e)0(r)-8.8(y)0( high that b)5.4(y)0( obser)-8.8(ving)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.3267 556.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 544.9316 Tm -.005 Tc [(political de)6.4(v)6.4(elopments, hack)9.8(ers ma)7.3(y tr)-8.8(y t)9.8(o)0( tak)9.8(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.2633 544.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 532.9316 Tm -.005 Tc [(adv)7.3(antage of the latest de)6.4(v)6.4(elopments, such as)]TJ ET EMC /P <>BDC BT 9 0 0 9 436.9118 532.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 520.9316 Tm -.005 Tc [(Br)9.3(exit, t)9.8(o)0( inno)7.3(v)7.3(ate and adv)7.3(ance cyber)19.5(attacks such)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.4648 520.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 508.9316 Tm -.005 Tc [(as Z)10.3(ekapab Malwar)9.3(e attacks.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 369.2987 511.6316 Tm 0 Tc (1)Tj ET EMC /P <>BDC BT 9 0 0 9 372.2858 508.9316 Tm -.005 Tc -.0195 Tw [( The )-19.5(Electr)9.8(onic)]TJ ET EMC /P <>BDC BT 9 0 0 9 430.6561 508.9316 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 496.9316 Tm -.005 Tc (Security Association \(ESA\) has advised that)Tj ET EMC /P <>BDC BT 9 0 0 9 425.9671 496.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 484.9316 Tm -.005 Tc [(nancial institutions should striv)6.4(e t)9.8(o)0( impr)9.8(o)7.3(v)6.4(e their)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.9213 484.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 472.9316 Tm -.005 Tc [(fr)19.5(agile I)14.2(T)19.5( systems and explor)9.3(e the inher)9.3(ent risk t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.2503 472.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 460.9316 Tm -.005 Tc [(information security)52.3(, connectivity and outsour)9.3(cing)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.1254 460.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 448.9316 Tm -.005 Tc [(business tr)19.5(ansactions that will help or)9.3(ganizations)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.4379 448.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 436.9316 Tm -.005 Tc [(eff)11.7(ectiv)6.4(ely addr)9.3(ess potential cyberrisk.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 405.1621 439.6316 Tm 0 Tc (2)Tj ET EMC /P <>BDC BT 9 0 0 9 408.1494 436.9316 Tm -.005 Tc ( ESA has)Tj ET EMC /P <>BDC BT 9 0 0 9 443.0644 436.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 424.9316 Tm -.005 Tc [(also pr)9.8(o)7.3(vided advice t)9.8(o)0( the nancial sect)9.8(or on)]TJ ET EMC /P <>BDC BT 9 0 0 9 434.094 424.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 412.9316 Tm -.005 Tc [(str)9.3(eamlining the incident management pr)19.5(actice in a)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.9041 412.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 400.9316 Tm -.005 Tc [(wa)7.3(y that will help manage cyber)19.5(attacks. )19.5(The advice)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.6889 400.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 388.9316 Tm -.005 Tc [(also has str)19.5(ategies on establishing a legislativ)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 439.2587 388.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 376.9316 Tm -.005 Tc [(appr)9.8(oach \(thr)9.8(ough eff)11.7(ectiv)6.4(e corpor)19.5(ate go)7.3(v)6.4(ernance\))]TJ ET EMC /P <>BDC BT 9 0 0 9 454.6835 376.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 364.9316 Tm -.005 Tc [(t)9.8(o)0( manage thir)9.3(d-par)-24.4(ty ser)-8.8(vice pr)9.8(o)7.3(viders.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 410.1411 367.6316 Tm -.0083 Tc (3 )Tj ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 253.5 340.9316 Tm -.005 Tc [(Figur)9.3(e 1)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 286.0991 340.9316 Tm [( depicts the typical corpor)19.5(ate go)7.3(v)6.4(ernance)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.7333 340.9316 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 328.9316 Tm -.005 Tc [(structur)9.3(e in an or)9.3(ganization. )]TJ ET EMC /P <>BDC BT 9 0 0 9 253.5 304.9315 Tm ( )Tj ET EMC /P <>BDC /GS3 gs BT /F5 1 Tf 30 0 0 30 35 661.5348 Tm .73 .19 0 0 k -.02 Tc [(Redening Corpor)19.5(ate)]TJ ET EMC /P <>BDC BT 30 0 0 30 300.5599 661.5348 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 30 0 0 30 35 627.5348 Tm -.02 Tc [(Go)7.3(v)6.4(ernance for Better Cyberrisk)]TJ ET EMC /P <>BDC BT 30 0 0 30 433.4149 627.5348 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 30 0 0 30 35 593.5348 Tm -.02 Tc (Management)Tj ET EMC /Artifact <>BDC .72 .13 .67 .01 k 470.593 53.141 132.467 390.153 re f EMC /P <>BDC BT /F4 1 Tf 11 0 0 11 476.7948 423.5205 Tm 0 0 0 0 k (Vimal Mani,)Tj ET EMC /P <>BDC BT /F2 1 Tf 11 0 0 11 532.8556 423.5205 Tm ( CISA, )Tj ET EMC /P <>BDC BT 11 0 0 11 476.7948 411.5205 Tm (CISM, Six Sigma )Tj ET EMC /P <>BDC BT 11 0 0 11 476.7948 399.5205 Tm (Black Belt )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 388.7205 Tm 0 Tc (Is the head of the )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 377.9205 Tm [(cybersecurity pr)9.8(ogr)19.5(am )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 367.1205 Tm (at Bank of Sharjah. He )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 356.3205 Tm [(is r)9.3(esponsible for the )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 345.5205 Tm [(bank)54.7(s end-t)9.8(o-end )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 334.7205 Tm (cybersecurity )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 323.9205 Tm [(pr)9.8(ogr)19.5(am. Mani )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 313.1205 Tm [(coor)9.3(dinates )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 302.3205 Tm [(cybersecurity effor)-24.4(ts )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 291.5205 Tm (within banking )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 280.7205 Tm [(oper)19.5(ations acr)9.8(oss the )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 269.9204 Tm (Middle East. Mani is )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 259.1205 Tm [(also r)9.3(esponsible for )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 248.3204 Tm [(coor)9.3(dinating bankwide )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 237.5205 Tm [(cybersecurity str)19.6(ategy )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 226.7205 Tm [(and standar)9.3(ds, leading )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 215.9204 Tm (periodic security risk )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 205.1205 Tm [(assessment effor)-24.4(ts, )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 194.3204 Tm (leading incidents )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 183.5205 Tm [(inv)6.4(estigation and )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 172.7205 Tm [(r)9.3(esolution, and )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 161.9204 Tm -.02 Tc [(coor)9.3(dinating the bank)54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.3931 161.9204 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 151.1204 Tm [(security awar)9.3(eness )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 140.3204 Tm [(and tr)19.5(aining pr)9.8(ogr)19.5(ams. )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 129.5205 Tm -.02 Tc [(He is an activ)6.4(e member)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.8256 129.5205 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 118.7205 Tm [(of the ISA)5.4(CA)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 527.512 121.6904 Tm ()Tj ET EMC /P <>BDC BT 9 0 0 9 531.7573 118.7205 Tm ( Chennai )Tj ET EMC /P <>BDC BT 9 0 0 9 476.7948 107.9203 Tm [(\(India\) Chapter)60.1(. He )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 97.1204 Tm [(can be r)9.3(eached at )]TJ ET EMC /P <>BDC BT 9 0 0 9 476.7948 86.3203 Tm -.03 Tc (vimal.consultant@gmail.com)Tj ET EMC /P <>BDC BT 9 0 0 9 586.3752 86.3203 Tm 0 Tc (.)Tj ET EMC /P <>BDC /GS2 gs BT 7 0 0 7 36 22.1458 Tm 0 0 0 1 k [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 143.4848 22.1458 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 572.622 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC 0 0 0 0 k /GS3 gs 514.45 692.116 53.716 54.884 re f EMC /Figure <>BDC Q /GS3 gs BT /F6 1 Tf 9 0 0 9 514.4502 721.5889 Tm .72549 .12941 .67059 .007843 k .0249 Tc 0 Tw (FEATURE)Tj ET q 1 i 514.575 747 53.591 -54.759 re W n q 1 0 0 1 568.166 747 cm 0 0 m 0 -54.884 l -9.375 -54.884 l -9.375 -9.945 l -49.977 -9.945 l -49.977 0 l 0 0 l f Q EMC /Artifact <>BDC Q q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 0 k 33 55.98 426 245.5 re f EMC /Figure <>BDC Q .14118 .027451 .13333 0 k 33 56.105 425.93 230.625 re f .74118 .19608 .007843 0 k 33 286.73 425.93 14.75 re f q 1 i 33 301.48 426 -245.375 re W n 0 0 0 0 K 0 J 0 j 2 w 10 M [] 0 d q 1 0 0 1 33 286.73 cm 0 0 m 426 0 l S Q Q BT /F7 1 Tf 9 0 0 9 130.6602 291.5782 Tm 0 0 0 0 k 0 Tc [(Figur)9.6(e).1( 1Structur)8.7(e).1( of Corpor)15.5(ate Go)7.8(v)6.1(e).1(rnance in an Or)9.4(ganization)]TJ ET .52157 .14902 .015686 0 k 86.178 209.496 95.807 28.145 re f 193.798 208.902 95.808 28.146 re f 195.552 249.115 95.807 28.145 re f 193.871 169.185 95.808 28.145 re f 301.359 208.685 95.808 28.145 re f 300.767 169.185 95.807 28.145 re f 103.735 115.039 56.006 37.55 re f 103.735 68.539 56.006 37.55 re f 166.333 115.039 56.006 37.55 re f 228.428 115.039 56.006 37.55 re f 288.134 115.039 56.007 37.55 re f 349.816 115.039 56.006 37.55 re f .027451 .98039 .8 .003922 K 0 J 0 j .585 w 10 M [] 0 d 1 i q 1 0 0 1 241.775 248.852 cm 0 0 m 0 -8.3 l S Q .027451 .98039 .8 .003922 k q 1 0 0 1 239.443 241.234 cm 0 0 m 2.332 -4.039 l 4.664 0 l 0 0 l f Q q 1 0 0 1 241.775 209.14 cm 0 0 m 0 -8.301 l S Q q 1 0 0 1 239.443 201.522 cm 0 0 m 2.332 -4.039 l 4.664 0 l 0 0 l f Q q 1 0 0 1 132.577 115.209 cm 0 0 m 0 -5.486 l S Q q 1 0 0 1 130.245 110.406 cm 0 0 m 2.332 -4.039 l 4.664 0 l 0 0 l f Q q 1 0 0 1 345.41 209.14 cm 0 0 m 0 -8.301 l S Q q 1 0 0 1 343.078 201.522 cm 0 0 m 2.332 -4.039 l 4.664 0 l 0 0 l f Q q 1 0 0 1 181.96 223.123 cm 0 0 m 8.555 0 l S Q q 1 0 0 1 189.833 220.791 cm 0 0 m 4.038 2.332 l 0 4.664 l 0 0 l f Q q 1 0 0 1 300.767 222.28 cm 0 0 m -7.732 0 l S Q q 1 0 0 1 293.717 224.612 cm 0 0 m -4.038 -2.332 l 0 -4.664 l 0 0 l f Q q 1 0 0 1 137.373 152.935 cm 0 0 m 105.419 16.25 l 238.434 -.102 l S Q q 1 0 0 1 138.403 150.734 cm 0 0 m -4.347 1.689 l -.711 4.609 l 0 0 l f Q q 1 0 0 1 374.846 150.602 cm 0 0 m 4.292 1.821 l .568 4.628 l 0 0 l f Q q 1 0 0 1 196.623 153.502 cm 0 0 m 46.169 15.683 l 117.265 -.341 l S Q q 1 0 0 1 198.019 151.514 cm 0 0 m -4.574 .909 l -1.5 4.416 l 0 0 l f Q q 1 0 0 1 312.709 151.036 cm 0 0 m 4.453 1.387 l 1.025 4.55 l 0 0 l f Q q 1 0 0 1 242.792 169.185 cm 0 0 m 10.503 -14.072 l S Q q 1 0 0 1 251.019 154.265 cm 0 0 m 4.284 -1.842 l 3.737 2.79 l 0 0 l f Q BT /F8 1 Tf 10.5225 0 0 10.5225 216.196 260.1124 Tm .74972 .67919 .6705 .90146 k .0001 Tc [(Shar)9.2(eholders)]TJ -1.1591 -3.8216 TD 0 Tc [(Boar)9(d of Dir)9(ect)9.7(ors)]TJ -9.7755 .0564 TD .0001 Tc -.0001 Tw [(Boar)9.2(d Secr)9.2(etar)-8.9(y)]TJ .9605 -7.5883 TD 0 Tc 0 Tw [(Corpor)19(ate)]TJ -.3804 -1 TD -.0001 Tc [(Go)7.4(v)6.7(e)-.1(rnance)]TJ .1631 -1 TD -.0002 Tc (Committee)Tj 1.1202 -2.398 TD .0001 Tc (Cyber)Tj -1.2036 -1 TD -.0001 Tc [(Go)7.4(v)6.7(e)-.1(rnance)]TJ .1631 -1 TD -.0002 Tc (Committee)Tj 7.2013 5.8979 TD -.0001 Tc (Risk)Tj -1.3321 -1 TD -.0002 Tc (Committee)Tj 7.0288 1 TD -.0026 Tc [(Au)-3.2(dit)]TJ -1.1277 -1 TD -.0002 Tc (Committee)Tj 5.5064 1 TD 0 Tc (Compliance)Tj .1677 -1 TD .0005 Tc (Committee)Tj 7.3084 1 TD -.0067 Tc (Pay)Tj -1.4465 -1 TD .0005 Tc (Committee)Tj -14.4298 5.1924 TD .0003 Tc -.0003 Tw [(Boar)9.5(d Committees)]TJ 10.2068 0 0 10.5225 313.202 225.9967 Tm .0001 Tc .0002 Tw [(Gener)19.9(a)0(l Manager/)]TJ -.9528 -1.2 TD .0003 Tc 0 Tw [(Chief Ex)10.3(ecutiv)6.9(e Officer)]TJ 10.5225 0 0 10.5225 307.146 179.4981 Tm 0 Tc (Senior Management)Tj ET EMC endstream endobj 43 0 obj <>/ExtGState<>>> endobj 86 0 obj <> endobj 93 0 obj <> endobj 94 0 obj <> endobj 95 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 144 492.3389 Tm .72 .13 .67 .01 k -.005 Tc [(Cor)9.3(e Principles of Corpor)14.7(ate Go)7.3(v)6.4(ernance )]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 144 474.3389 Tm 0 0 0 1 k [(The following ar)9.3(e the critical set of corpor)19.5(ate)]TJ ET EMC /P <>BDC BT 9 0 0 9 320.5939 474.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 462.3389 Tm -.005 Tc [(go)7.3(v)6.4(ernance principles that enable or)9.3(ganizations )]TJ ET EMC /P <>BDC BT 9 0 0 9 144 450.3389 Tm [(t)9.8(o)0( pr)9.8(oactiv)6.4(ely addr)9.3(ess v)7.3(arious risk fact)9.8(ors, )]TJ ET EMC /P <>BDC BT 9 0 0 9 144 438.3389 Tm [(including cyberrisk, and can enable r)9.3(educed risk )]TJ ET EMC /P <>BDC BT 9 0 0 9 144 426.3389 Tm [(in business oper)19.5(ations. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 144 402.3389 Tm [(F)16.6(airness )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 144 390.3389 Tm [(In dealing with the issues of the or)9.3(ganization, the)]TJ ET EMC /P <>BDC BT 9 0 0 9 336.533 390.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 378.3389 Tm -.005 Tc [(boar)9.3(d must be fair and fr)9.3(ee of pr)9.3(ejudice. If an)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.798 378.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 366.3389 Tm -.005 Tc [(independent opinion is r)9.3(equir)9.3(ed, boar)9.3(ds should seek)]TJ ET EMC /P <>BDC BT 9 0 0 9 349.0487 366.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 354.3389 Tm -.005 Tc [(a knowledgeable independent entity t)9.8(o)0( r)9.3(e)6.4(view the)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.2501 354.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 342.3389 Tm -.005 Tc [(issue and pr)9.8(o)7.3(vide its opinion. Considering the)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.1743 342.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 330.3389 Tm -.005 Tc [(inputs fr)9.8(om all the stak)9.8(eholders without par)-24.4(tiality)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.0428 330.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 318.3389 Tm -.005 Tc [(and inviting a thir)9.3(d par)-24.4(ty t)9.8(o)0( assess specic)]TJ ET EMC /P <>BDC BT 9 0 0 9 312.0671 318.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 306.3389 Tm -.005 Tc [(business tr)19.5(ansactions such as mer)9.3(gers and)]TJ ET EMC /P <>BDC BT 9 0 0 9 315.7925 306.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 294.3389 Tm -.005 Tc [(acquisitions ar)9.3(e some of the wa)7.3(ys in which fairness)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.5414 294.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 282.3389 Tm -.005 Tc [(can be integr)19.5(ated int)9.8(o the structur)9.3(e of corpor)19.5(ate)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.769 282.3389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 675.2251 Tm -.005 Tc [(go)7.3(v)6.4(ernance. Not being fair with stak)9.8(eholders will)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.0068 675.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 663.2251 Tm -.005 Tc [(not help an or)9.3(ganization in taking concr)9.3(ete action t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 567.0852 663.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 651.2251 Tm -.005 Tc [(addr)9.3(ess the v)7.3(arious cyberrisk fact)9.8(ors faced b)5.4(y)0( the)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.8882 651.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 639.2251 Tm -.005 Tc [(or)9.3(ganization. Being fair with stak)9.8(eholders her)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.3033 639.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 627.2251 Tm -.005 Tc [(indicates honesty and disclosur)9.3(e made b)5.4(y)0( an)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.9066 627.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 615.2251 Tm -.005 Tc [(or)9.3(ganization t)9.8(o)0( the stak)9.8(eholders on its effor)-24.4(ts and)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.5375 615.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 603.2251 Tm -.005 Tc [(about the eff)11.7(ectiv)6.4(eness of existing contr)9.8(ols t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.0973 603.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 591.2251 Tm -.005 Tc [(pr)9.8(otect the or)9.3(ganization fr)9.8(om cyber)19.5(attacks. A lack)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.4858 591.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 579.2251 Tm -.005 Tc [(of adequate disclosur)9.3(e ma)7.3(y r)9.3(esult in not getting the)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.1042 579.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 567.2251 Tm -.005 Tc [(right dir)9.3(ection or appr)9.8(o)7.4(v)7.3(als fr)9.8(om stak)9.8(eholders for)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.856 567.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 555.2251 Tm -.005 Tc [(new initiativ)6.4(es planned for cyberrisk management. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 362.5 531.2251 Tm (Accountability )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 362.5 519.225 Tm [(Accountability r)9.3(e)0(f)11.7(ers t)9.8(o)0( the right t)9.8(o)0( hold people t)9.8(o)0( a)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.3069 519.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 507.2251 Tm -.005 Tc [(set of standar)9.3(ds and t)9.8(o)0( judge whether the)6.4(y ha)7.3(v)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.7545 507.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 495.2251 Tm -.005 Tc [(fullled their r)9.3(esponsibilities in light of these)]TJ ET EMC /P <>BDC BT 9 0 0 9 536.2969 495.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 483.2251 Tm -.005 Tc [(standar)9.3(ds or not. F)10.3(or example, the audit committee)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.3066 483.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 471.2251 Tm -.005 Tc [(needs t)9.8(o)0( demonstr)19.5(ate its accountability in r)9.3(e)6.4(view of)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.7766 471.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 459.2251 Tm -.005 Tc [(nancial statements, internal contr)9.8(ol systems and)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.0605 459.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 447.2251 Tm -.005 Tc [(use of external audit)9.8(ors. Lack of accountability)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.8008 447.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 435.2251 Tm -.005 Tc [(r)9.3(esults in the risk of people not per)-7.3(forming their)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.8793 435.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 423.2251 Tm -.005 Tc [(assigned r)9.8(oles and r)9.3(esponsibilities, and policies and)]TJ ET EMC /P <>BDC BT 9 0 0 9 567.2961 423.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 411.2251 Tm -.005 Tc [(pr)9.8(ocedur)9.3(es ma)7.3(y not be followed, lea)7.3(ving the)]TJ ET EMC /P <>BDC BT 9 0 0 9 535.9296 411.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 399.2251 Tm -.005 Tc [(or)9.3(ganization vulner)19.5(able t)9.8(o)0( risk. Holding people)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.0441 399.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 387.2251 Tm -.005 Tc [(accountable t)9.8(o)0( actions and policies that suppor)-24.4(t)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.9399 387.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 375.2251 Tm -.005 Tc [(eff)11.7(ectiv)6.4(e cyberrisk management can help ensur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.0406 375.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 363.2251 Tm -.005 Tc [(that the enterprise is holistically suppor)-24.4(ting str)9.8(ong)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.2606 363.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 351.2251 Tm -.005 Tc [(cyberrisk pr)19.5(actices. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 362.5 327.225 Tm (Responsibility )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 362.5 315.225 Tm [(Responsibility r)9.3(e)0(f)11.7(ers t)9.8(o)0( the actions t)9.8(o)0( be per)-7.3(formed)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.5681 315.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 303.225 Tm -.005 Tc [(b)5.4(y)0( v)7.3(arious stak)9.8(eholders as par)-24.4(t of the corpor)19.5(ate)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.0239 303.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 291.225 Tm -.005 Tc [(go)7.3(v)6.4(ernance structur)9.3(e. F)16.6(ailing t)9.8(o)0( fulll the assigned)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.1449 291.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 279.225 Tm -.005 Tc [(r)9.3(esponsibilities could r)9.3(esult in risk. F)10.3(or example, it)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.5807 279.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 267.225 Tm -.005 Tc [(could lead t)9.8(o)0( ineff)11.7(ectiv)6.4(e security str)19.5(ategy)52.3(, security)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.8674 267.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 255.2251 Tm -.005 Tc [(plans, lack of security awar)9.3(eness among staff, )]TJ ET EMC /P <>BDC BT 9 0 0 9 362.5 243.2251 Tm (etc. When people do not fulll their accountabilities)Tj ET EMC /P <>BDC BT 9 0 0 9 564.2375 243.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 231.2251 Tm -.005 Tc [(of implementing security policies and pr)9.8(ocedur)9.3(es,)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.6211 231.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 219.2251 Tm -.005 Tc [(the risk is dir)9.3(ectly pr)9.8(opor)-24.4(tional t)9.8(o)0( the degr)9.3(ee )]TJ ET EMC /P <>BDC BT 9 0 0 9 362.5 207.2251 Tm [(of accountability)52.3(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 362.5 183.2251 Tm [(F)10.3(or example, consider the ar)9.3(eas of patching and)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.1193 183.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 171.2251 Tm -.005 Tc [(network security)52.3(. By not implementing patches in)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.1392 171.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 159.2251 Tm -.005 Tc [(line with policy objectiv)6.4(es, systems tend t)9.8(o)0( become)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.5077 159.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 147.2251 Tm -.005 Tc [(vulner)19.5(able, which mak)9.8(es them a ripe tar)9.3(get for)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.3903 147.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 135.225 Tm -.005 Tc [(hack)9.8(ers. Not deplo)7.3(ying foolpr)9.8(oof network security)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.043 135.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 123.225 Tm -.005 Tc [(solutions in line with the network security policy t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.6736 123.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 111.225 Tm -.005 Tc [(pr)9.8(otect the network perimeter can lead t)9.8(o)0( an)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.2556 111.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 99.225 Tm -.005 Tc [(or)9.3(ganization easily becoming compr)9.8(omised b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.6127 99.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 87.225 Tm -.005 Tc [(hack)9.8(ers. In the Bangladesh centr)19.5(al bank hacking)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.8576 87.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .73 .19 0 0 k [( V)6.4(OL 4)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (2)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Figure <>BDC Q q 1 i -7.7212 701.723 396 -235.2 re W n .32394 681.975 349.503 -172.5 re 17.172 24.986 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS3 gs q 351.36 0 0 -174.48 -.52121 683.003 cm /Im2 Do Q EMC /Artifact <>BDC Q q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .72 .13 .67 .01 k /GS3 gs 143.268 77.474 205.5 193.57 re f EMC /P <>BDC BT /F2 1 Tf 14 0 0 14 176.514 241.4741 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(A)17.5( L)-9.3(A)5.3(CK)17.5( OF)17.5( ADEQU)10.7(A)63(T)0(E)]TJ ET EMC /P <>BDC BT 14 0 0 14 324.5394 241.4741 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.514 223.4741 Tm .0351 Tc -.0175 Tw [(DISCL)31.7(OSURE)17.5( M)-8.8(A)45.9(Y)17.5( RESUL)134.2(T)]TJ ET EMC /P <>BDC BT 14 0 0 14 326.5707 223.4741 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.514 205.4741 Tm .0351 Tc -.0175 Tw [(IN)17.5( NO)13.2(T)37.1( GE)-9.8(T)-7.8(TING)17.6( )19.6(THE)]TJ ET EMC /P <>BDC BT 14 0 0 14 295.1254 205.4741 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.514 187.4741 Tm .0351 Tc -.0175 Tw [(RIGH)14.1(T)37.1( DIREC)14.1(TION)17.5( OR)]TJ ET EMC /P <>BDC BT 14 0 0 14 295.392 187.4741 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.514 169.4741 Tm .0351 Tc -.0175 Tw [(APPRO)10.7(V)36.6(ALS)17.5( FROM)]TJ ET EMC /P <>BDC BT 14 0 0 14 278.5961 169.4741 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.514 151.4741 Tm .0351 Tc -.0175 Tw [(ST)38.5(AKEHOLDERS)17.5( FOR)17.5( NEW)]TJ ET EMC /P <>BDC BT 14 0 0 14 327.5892 151.4741 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.514 133.4741 Tm .0351 Tc -.0175 Tw [(INI)14.1(TI)-8.8(A)63(TIVES)17.5( PL)-9.3(ANNED)]TJ ET EMC /P <>BDC BT 14 0 0 14 302.5834 133.4741 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.514 115.4741 Tm .0351 Tc -.0175 Tw [(FOR)17.5( CYBERRISK)]TJ ET EMC /P <>BDC BT 14 0 0 14 259.9476 115.4741 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.514 97.4741 Tm .0351 Tc [(M)-8.8(A)0(N)-8.8(A)5.3(GEMEN)14.1(T)124(.)]TJ ET EMC /Figure <>BDC Q q 1 i 260.833 106.599 23 -23.75 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 278.937 96.311 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 149.461 266.9 23 -23.75 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 154.379 253.532 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 96 0 obj <>/XObject<>/ExtGState<>>> endobj 118 0 obj <> endobj 123 0 obj <> endobj 128 0 obj <> endobj 133 0 obj <> endobj 138 0 obj <> endobj 143 0 obj <> endobj 148 0 obj <> endobj 153 0 obj <> endobj 168 0 obj <> endobj 173 0 obj <> endobj 178 0 obj <> endobj 183 0 obj <> endobj 188 0 obj <> endobj 189 0 obj <> endobj 190 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .73 .19 0 0 k [( V)6.4(OL 4)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (3)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 675.2251 Tm 0 0 0 1 k -.005 Tc [(incident, a lack of r)9.3(ewalls and the deplo)7.3(yment of a)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.8262 675.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 663.2251 Tm -.005 Tc [(poor r)9.8(outer wer)9.3(e identied as some of the r)9.8(oot)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.125 663.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 651.2251 Tm -.005 Tc (causes of the incident.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 126.2993 653.925 Tm -.0083 Tc (4 )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 627.2251 Tm -.005 Tc [(The following ar)9.3(e some corpor)19.5(ate go)7.3(v)6.4(ernance)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.1067 627.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 615.2251 Tm -.005 Tc [(r)9.3(esponsibilities: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 597.2251 Tm [(Pr)9.8(o)7.3(viding str)19.5(ategic dir)9.3(ection t)9.8(o)0( the or)9.3(ganization )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 36.9471 597.2251 Tm .04 1 .83 0 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 579.2251 Tm 0 0 0 1 k -.005 Tc [(Monit)9.8(oring the health of the or)9.3(ganization,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 210.3913 579.2251 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 36.9471 579.2251 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 567.2251 Tm 0 0 0 1 k -.005 Tc [(per)-7.3(formed b)5.4(y)0( the or)9.3(ganization )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 549.2251 Tm [(Monit)9.8(oring the oper)19.5(ational and nancial health of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 241.8445 549.2251 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 36.9471 549.2251 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 537.2251 Tm 0 0 0 1 k -.005 Tc [(the or)9.3(ganization )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 519.225 Tm [(Ensuring that business is driv)6.4(en b)5.4(y)0( an ethical)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 224.9112 519.225 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 36.9471 519.225 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 507.2251 Tm 0 0 0 1 k -.005 Tc [(base suppor)-24.4(ted b)5.4(y)0( good business conduct and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 232.552 507.2251 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 495.2251 Tm -.005 Tc (activities )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 477.2251 Tm [(Ov)6.4(erseeing the potential risk fact)9.8(ors faced b)5.4(y)0( the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 241.0305 477.2251 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 36.9471 477.2251 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 465.2251 Tm 0 0 0 1 k -.005 Tc [(or)9.3(ganization and ensuring the timely ex)9.8(ecution of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 242.3455 465.2251 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 453.2251 Tm -.005 Tc [(appr)9.8(opriate risk mitigation actions )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 435.2251 Tm [(Monit)9.8(oring the health of internal contr)9.8(ols of the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 233.8685 435.2251 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 36.9471 435.2251 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 423.2251 Tm 0 0 0 1 k -.005 Tc [(or)9.3(ganization and ensuring the timely ex)9.8(ecution of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 242.3455 423.2251 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 411.2251 Tm -.005 Tc [(r)9.3(equir)9.3(ed corr)9.3(ectiv)6.4(e actions )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 393.2251 Tm [(Ensuring the soundness of r)9.3(epor)-24.4(ting)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 191.2428 393.2251 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 36.9471 393.2251 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 381.2251 Tm 0 0 0 1 k -.005 Tc [(mechanisms suppor)-24.4(ting eff)11.7(ectiv)6.4(e disclosur)9.3(e of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 233.7144 381.2251 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 369.2251 Tm -.005 Tc [(the nancial health of the or)9.3(ganization )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 351.2251 Tm [(Ov)6.4(erseeing the chief ex)9.8(ecutiv)6.4(e ocer)-7.8()54.7(s)0( \(CEO)54.7(s\))]TJ ET EMC /LBody <>BDC BT 9 0 0 9 232.549 351.2251 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 36.9471 351.2251 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 339.2251 Tm 0 0 0 1 k -.005 Tc [(per)-7.3(formance and ensuring the timely ex)9.8(ecution)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 233.732 339.2251 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 327.225 Tm -.005 Tc [(of corr)9.3(ectiv)6.4(e actions r)9.3(equir)9.3(ed t)9.8(o)0( fulll the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 209.6555 327.225 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 315.225 Tm -.005 Tc [(expectations of the or)9.3(ganization)39.1()54.7(s)0( stak)9.8(eholders )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 291.225 Tm [(T)31.8(r)14.7(anspar)9.3(ency )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36.9471 279.225 Tm [(T)36.6(r)19.5(anspar)9.3(ency is about pr)9.8(o)7.3(viding timely r)9.3(epor)-24.4(ting of)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.5354 279.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 267.225 Tm -.005 Tc [(potential issues faced b)5.4(y)0( the enterprise.)]TJ ET EMC /P <>BDC BT 9 0 0 9 194.1805 267.225 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 255.2251 Tm -.005 Tc [(Shar)9.3(eholders should ha)7.3(v)6.4(e)0( a tr)19.5(anspar)9.3(ent view of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.6131 255.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 243.2251 Tm -.005 Tc [(or)9.3(ganization on a r)9.3(egular basis t)9.8(o)0( understand the)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.3612 243.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 231.2251 Tm -.005 Tc [(risk posed t)9.8(o)0( their inv)6.4(estments. )19.5(T)36.6(r)19.5(anspar)9.3(ency r)9.3(e)0(f)11.7(ers)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.3752 231.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 219.2251 Tm -.005 Tc [(t)9.8(o)0( the r)9.3(espect that should be giv)6.4(en t)9.8(o)0( stak)9.8(eholders)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.2434 219.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 207.2251 Tm -.005 Tc [(and their right t)9.8(o)0( factual, quality information in a)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.9459 207.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 195.2251 Tm -.005 Tc [(timely manner)60.1(. F)10.3(or example, the nancial disclosur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.1521 195.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 183.2251 Tm -.005 Tc [(t)9.8(o)0( inv)6.4(est)9.8(ors and shar)9.3(eholders is a critical activity)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.7322 183.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 171.2251 Tm -.005 Tc [(that needs complete tr)19.5(anspar)9.3(ency)52.3(. Lack of)]TJ ET EMC /P <>BDC BT 9 0 0 9 204.7231 171.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 159.2251 Tm -.005 Tc [(adequate tr)19.5(anspar)9.3(ency could r)9.3(esult in risk such as)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.5436 159.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 147.2251 Tm -.005 Tc [(loss of stak)9.8(eholder)60.1(, consumer and staff trust;)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.4141 147.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 135.225 Tm -.005 Tc [(r)9.3(egulat)9.8(ors imposing nes; and mor)9.3(e. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 36.9471 109.2251 Tm .72 .13 .67 .01 k [(Responsibilities of Boar)9.3(d Committees )]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 36.9471 91.2251 Tm 0 0 0 1 k [(The following ar)9.3(e the r)9.3(esponsibilities of v)7.3(arious)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.1058 91.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 79.2251 Tm -.005 Tc [(boar)9.3(d committees, which pla)7.3(y a critical r)9.8(ole in)]TJ ET EMC /P <>BDC BT 9 0 0 9 217.0083 79.2251 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 493.8389 Tm -.005 Tc [(impr)9.8(o)7.3(ving corpor)19.5(ate go)7.3(v)6.4(ernance pr)19.5(actices for)]TJ ET EMC /P <>BDC BT 9 0 0 9 435.239 493.8389 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 481.8389 Tm -.005 Tc [(enabling lower-risk business oper)19.5(ations: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 463.8389 Tm [(The audit committee o)7.3(v)6.4(ersees nancial)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 421.8521 463.8389 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 255.4471 463.8389 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 451.8389 Tm 0 0 0 1 k -.005 Tc [(statements and str)9.3(ength of the internal contr)9.8(ols)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.7381 451.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 439.8389 Tm -.005 Tc [(of an or)9.3(ganization, and mak)9.8(es timely disclosur)9.3(es)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 459.0361 439.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 427.8389 Tm -.005 Tc [(t)9.8(o)0( inv)6.4(est)9.8(ors on the nancial str)9.3(ength of the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 435.2747 427.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 415.8389 Tm -.005 Tc [(or)9.3(ganization and on the v)7.3(ariety of risk fact)9.8(ors)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 444.8735 415.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 403.8389 Tm -.005 Tc [(faced b)5.4(y)0( the or)9.3(ganization. In doing this, the )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 391.8389 Tm (audit committee should engage an external)Tj ET EMC /LBody <>BDC BT 9 0 0 9 437.3563 391.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 379.8389 Tm -.005 Tc [(audit)9.8(or who will r)9.3(e)6.4(view the enterprise)39.1()54.7(s)0( annual)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 447.0663 379.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 367.8389 Tm -.005 Tc (nancial statement and the design and)Tj ET EMC /LBody <>BDC BT 9 0 0 9 419.6769 367.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 355.8389 Tm -.005 Tc [(implementation eciency of internal contr)9.8(ols)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 445.0524 355.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 343.8389 Tm -.005 Tc [(o)7.3(v)6.4(er nancial r)9.3(epor)-24.4(ting. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 325.8389 Tm [(The risk committee, in coor)9.3(dination with the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 439.2912 325.8389 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 255.4471 325.8389 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 313.8389 Tm 0 0 0 1 k -.005 Tc [(audit committee, deliv)6.4(ers r)9.3(epor)-24.4(ts summarizing)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 450.2677 313.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 301.8389 Tm -.005 Tc [(the committee)39.1()54.7(s)0( r)9.3(e)6.4(view of the risk postur)9.3(e of the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 456.0247 301.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 289.8389 Tm -.005 Tc [(or)9.3(ganization, with a focus on v)7.3(arious business)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 448.6934 289.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 277.8389 Tm -.005 Tc [(risk fact)9.8(ors such as str)19.5(ategic risk, cr)9.3(edit risk,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 441.514 277.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 265.8389 Tm -.005 Tc [(oper)19.5(ation risk, cyberrisk, legal risk, internal fr)19.5(aud,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 457.4741 265.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 253.8389 Tm -.005 Tc [(r)9.3(egulat)9.8(or-enfor)9.3(ced actions, litigations,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 415.2485 253.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 241.8389 Tm -.005 Tc (whistleblower-identied issues, technology)Tj ET EMC /LBody <>BDC BT 9 0 0 9 435.5226 241.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 229.8389 Tm -.005 Tc (issues and the status of an enterprisewide risk)Tj ET EMC /LBody <>BDC BT 9 0 0 9 449.9009 229.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 217.8389 Tm -.005 Tc [(management fr)19.5(amework implementation. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 199.8389 Tm [(The compensation committee \(pa)7.3(y committee\))]TJ ET EMC /LBody <>BDC BT 9 0 0 9 452.6218 199.8389 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 255.4471 199.8389 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 187.8389 Tm 0 0 0 1 k -.005 Tc [(o)7.3(v)6.4(ersees the implementation of the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 406.1712 187.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 175.8389 Tm -.005 Tc [(compensation policy of the or)9.3(ganization, guides)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 455.4028 175.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 163.8389 Tm -.005 Tc [(de)6.4(v)6.4(elopment of per)-7.3(formance-based)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 407.8782 163.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 151.8389 Tm -.005 Tc [(compensation packages and appr)9.8(o)7.4(v)6.4(es)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 419.113 151.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 139.8389 Tm -.005 Tc [(compensation packages de)6.4(v)6.4(eloped. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 121.8389 Tm [(The corpor)19.5(ate go)7.3(v)6.4(ernance committee o)7.3(v)6.4(ersees)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 452.8229 121.8389 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 255.4471 121.8389 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 109.8389 Tm 0 0 0 1 k -.005 Tc (and determines the membership of the BoD and)Tj ET EMC /LBody <>BDC BT 9 0 0 9 455.4455 109.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 97.8389 Tm -.005 Tc [(measur)9.3(es the quality of per)-7.3(formance of the BoD)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 455.9795 97.8389 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 85.8389 Tm -.005 Tc [(as a whole and of individual boar)9.3(d members. )]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC .72 .13 .67 .01 k /GS3 gs 253.5 508.475 205.5 173.5 re f EMC /P <>BDC BT 14 0 0 14 286.7461 652.4049 Tm 0 0 0 0 k .0351 Tc [(SH)-8.8(AREHOLDERS)]TJ ET EMC /P <>BDC BT 14 0 0 14 397.7275 652.4049 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 14 0 0 14 262.7461 634.4049 Tm .0351 Tc -.0175 Tw [(SHOULD)17.5( H)-8.8(A)42.4(VE)17.5( A)]TJ ET EMC /P <>BDC BT 14 0 0 14 373.1875 634.4049 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 262.7461 616.4049 Tm .0351 Tc -.0175 Tw [(TRANSP)67.3(AREN)14.1(T)37.1( VIEW)17.6( OF)]TJ ET EMC /P <>BDC BT 14 0 0 14 424.1084 616.4049 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 262.7461 598.4049 Tm .0351 Tc -.0175 Tw [(THE)17.5( ORGANIZ)-6.4(A)63(TION)17.5( ON)17.5( A)]TJ ET EMC /P <>BDC BT 14 0 0 14 435.9756 598.4049 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 262.7461 580.4049 Tm .0351 Tc -.0175 Tw [(REGUL)-9.3(AR)17.5( BASIS)17.5( )19.6(T)13.6(O)]TJ ET EMC /P <>BDC BT 14 0 0 14 392.7109 580.4049 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 262.7461 562.4049 Tm .0351 Tc -.0371 Tw [(UNDERST)38.5(AND)17.5( THE)17.5( )-19.6(RISK)]TJ ET EMC /P <>BDC BT 14 0 0 14 422.5566 562.4049 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 262.7461 544.4049 Tm .0351 Tc -.0371 Tw [(POSED)17.5( T)13.6(O)17.5( THEIR)]TJ ET EMC /P <>BDC BT 14 0 0 14 375.1972 544.4049 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 262.7461 526.4049 Tm .0351 Tc [(INVESTMEN)14.1(T)7.8(S)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 369.237 537.6 23 -23.75 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 387.341 527.312 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 259.693 677.831 23 -23.75 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 264.611 664.463 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 191 0 obj <>/ExtGState<>>> endobj 202 0 obj <> endobj 207 0 obj <> endobj 216 0 obj <> endobj 221 0 obj <> endobj 226 0 obj <> endobj 231 0 obj <> endobj 236 0 obj <> endobj 241 0 obj <> endobj 262 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 154 665.7169 Tm -.02 Tc [(The compliance committee)39.1()54.7(s)0( r)9.3(esponsibilities)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 323.8221 665.7169 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 143 665.7169 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 653.7169 Tm 0 0 0 1 k -.02 Tc [(include r)9.3(e)6.4(viewing corpor)19.5(ate go)7.3(v)6.4(ernance pr)19.5(actices)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 342.9217 653.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 641.7169 Tm -.02 Tc [(of the or)9.3(ganization and r)9.3(ecommending)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 302.4193 641.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 629.7169 Tm -.02 Tc [(impr)9.8(o)7.3(v)6.4(ements t)9.8(o)0( the boar)9.3(d, monit)9.8(oring the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 316.7773 629.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 617.7169 Tm -.02 Tc [(independence of dir)9.3(ect)9.8(ors and r)9.3(e)6.4(viewing the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 322.6443 617.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 605.7169 Tm -.02 Tc (criteria for assessing independence, and handling)Tj ET EMC /LBody <>BDC BT 9 0 0 9 342.8691 605.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 593.7169 Tm -.02 Tc [(and r)9.3(esolving potential conicts of inter)9.3(ests. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 575.7169 Tm [(The ethics committee suppor)-24.4(ts the BoD in)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 314.817 575.7169 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 143 575.7169 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 563.7169 Tm 0 0 0 1 k -.02 Tc [(establishing, embedding and o)7.3(v)6.4(erseeing)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 307.3899 563.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 551.7169 Tm -.02 Tc [(or)9.3(ganizational v)7.3(alues in the cultur)9.3(e and business)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 339.2305 551.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 539.7169 Tm -.02 Tc [(of the or)9.3(ganization; ensuring and monit)9.8(oring the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 336.9055 539.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 527.7169 Tm -.02 Tc [(o)7.3(v)6.4(er)19.5(all ethical health of the enterprise; and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 314.818 527.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 515.7169 Tm -.02 Tc [(complying with ethical standar)9.3(ds and the business)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 347 515.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 503.7169 Tm -.02 Tc [(code of conduct established b)5.4(y)0( the or)9.3(ganization.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 339.3357 503.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 479.7169 Tm -.005 Tc [(The boar)9.3(d)54.7(s o)7.3(v)6.4(ersight of cyberrisk management-)]TJ ET EMC /P <>BDC BT 9 0 0 9 143 467.7169 Tm [(r)9.3(elated policies and pr)9.8(ocedur)9.3(es needs t)9.8(o)0( be)]TJ ET EMC /P <>BDC BT 9 0 0 9 314.8651 467.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 455.7169 Tm -.005 Tc [(enhanced fur)-24.4(ther t)9.8(o)0( eff)11.7(ectiv)6.4(ely manage cyberrisk.)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.2115 455.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 443.7169 Tm -.005 Tc [(Boar)9.3(ds should plan t)9.8(o)0( delegate t)9.8(o)0( the committees)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.4897 443.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 431.7169 Tm -.005 Tc [(tasks r)9.3(elated t)9.8(o)0( this on an ongoing basis, which will)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.1506 431.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 419.7169 Tm -.005 Tc [(help the or)9.3(ganization in managing cyberrisk in a)]TJ ET EMC /P <>BDC BT 9 0 0 9 331.1811 419.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 407.7169 Tm -.005 Tc [(pr)9.8(oactiv)6.4(e and timely manner)60.1(. )19.5(The committees)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.4432 407.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 395.7169 Tm -.005 Tc [(should plan t)9.8(o)0( be activ)6.4(ely inv)7.3(olv)6.4(ed in the following)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.019 395.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 383.7169 Tm -.005 Tc [(t)9.8(o)0( help them get a better understanding of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.8707 383.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 371.7169 Tm -.005 Tc [(cyberrisk postur)9.3(e of the or)9.3(ganization and the)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.3542 371.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 359.7169 Tm -.005 Tc [(eff)11.7(ectiv)6.4(e measur)9.3(es t)9.8(o)0( be tak)9.8(en t)9.8(o)0( manage cyberrisk)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.0127 359.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 347.7169 Tm -.005 Tc [(faced b)5.4(y)0( the or)9.3(ganization: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 329.7169 Tm (Understanding the cyberrisk appetite and)Tj ET EMC /LBody <>BDC BT 9 0 0 9 315.9805 329.7169 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 143 329.7169 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 317.7169 Tm 0 0 0 1 k -.005 Tc [(cyberrisk t)9.8(oler)19.5(ance le)6.4(v)6.4(el )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 299.7169 Tm [(Activ)6.4(ely engaging in dialogue with chief)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 309.4766 299.7169 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 143 299.7169 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 287.7169 Tm 0 0 0 1 k -.005 Tc (information ocer \(CIO\), chief information)Tj ET EMC /LBody <>BDC BT 9 0 0 9 321.4891 287.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 275.7169 Tm -.005 Tc (security ocer \(CISO\) and chief risk ocer)Tj ET EMC /LBody <>BDC BT 9 0 0 9 322.8163 275.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 263.7169 Tm -.005 Tc [(\(CRO\) on cyberrisk management str)19.5(ategy)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 316.7428 263.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 251.7169 Tm -.005 Tc [(planning and implementation-r)9.3(elated activities)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 336.4484 251.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 239.7169 Tm -.005 Tc [(and their pr)9.8(ogr)9.3(ess and challenges faced )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 221.7169 Tm [(Re)6.4(viewing the cyberrisk r)9.3(egister on a r)9.3(egular)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 328.0164 221.7169 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 143 221.7169 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 209.7169 Tm 0 0 0 1 k -.005 Tc [(basis t)9.8(o)0( understand the lik)9.8(elihood and impact of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 343.9698 209.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 197.7169 Tm -.005 Tc [(unaddr)9.3(essed cyberrisk )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 179.7169 Tm [(Being par)-24.4(t of cyberrisk assessments and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 314.9927 179.7169 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 143 179.7169 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 167.7169 Tm 0 0 0 1 k -.005 Tc (cybersecurity assessments carried out as )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 155.7169 Tm [(k)9.8(e)6.4(y stak)9.8(eholders )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 137.7169 Tm [(Re)6.4(viewing the adequacy of budgets allocated for)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 345.9571 137.7169 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 143 137.7169 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 125.7169 Tm 0 0 0 1 k -.005 Tc [(cyberrisk management initiativ)6.4(es, tr)19.5(aining and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 335.0773 125.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 113.7169 Tm -.005 Tc [(awar)9.3(eness pr)9.8(ogr)19.5(ams, cybersecurity policies and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 343.5236 113.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 101.7169 Tm -.005 Tc [(pr)9.8(ocedur)9.3(es, and other contr)9.8(ols implemented in)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 337.9832 101.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 89.7169 Tm -.005 Tc [(the or)9.3(ganization )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 665.7169 Tm [(Making appr)9.8(opriate r)9.3(ecommendations t)9.8(o)0( the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 548.6167 665.7169 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F9 1 Tf 12 0 0 12 361.5 665.7169 Tm .04 1 .83 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 653.7169 Tm 0 0 0 1 k -.005 Tc [(boar)9.3(d for impr)9.8(o)7.3(ving the existing cyberrisk)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 535.9945 653.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 641.7169 Tm -.005 Tc [(management pr)19.5(actice in line with global)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 529.63 641.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 629.7169 Tm -.005 Tc [(standar)9.3(ds b)5.4(y)0( comparing it with the cyberrisk)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 547.0579 629.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 617.7169 Tm -.005 Tc [(management pr)19.5(actices of other or)9.3(ganizations in)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 562.0236 617.7169 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 605.7169 Tm -.005 Tc [(the industr)-8.8(y )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 361.5 579.7169 Tm .72 .13 .67 .01 k [(Why Cybersecurity Is Consider)9.3(ed a)]TJ ET EMC /P <>BDC BT 11 0 0 11 531.5769 579.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 361.5 565.7169 Tm -.005 Tc [(Corpor)14.7(ate Go)7.3(v)6.4(ernance Issue )]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 361.5 547.7169 Tm 0 0 0 1 k [(The BoD of an or)9.3(ganization o)7.3(v)6.4(ersees the risk)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.8332 547.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 535.7169 Tm -.005 Tc [(management activities of the or)9.3(ganization, which)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.3412 535.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 523.7169 Tm -.005 Tc (should also include cyberrisk management as an)Tj ET EMC /P <>BDC BT 9 0 0 9 554.1393 523.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 511.7169 Tm -.005 Tc [(integr)19.5(al element.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 427.4707 514.4169 Tm -.0083 Tc (5 )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 487.7169 Tm -.005 Tc (On an ongoing basis, the management team should)Tj ET EMC /P <>BDC BT 9 0 0 9 564.7861 487.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 475.7169 Tm -.005 Tc [(o)7.3(v)6.4(ersee the str)9.3(ength of its internal contr)9.8(ols, the)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.1611 475.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 463.7169 Tm -.005 Tc [(weakness and failur)9.3(e of which could r)9.3(esult in)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.5926 463.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 451.7169 Tm -.005 Tc [(potential cyber)-24.4(thr)9.3(eats. )19.5(The BoD also is r)9.3(esponsible)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.7367 451.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 439.7169 Tm -.005 Tc [(for ensuring that the right r)9.3(esour)9.3(ces ar)9.3(e allocated in)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.4601 439.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 427.7169 Tm -.005 Tc [(a timely manner t)9.8(o)0( addr)9.3(ess emer)9.3(ging cyber)-24.4(thr)9.3(eats. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 403.7169 Tm [(The US Securities and Ex)9.8(change Commission)39.1()54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.3993 403.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 391.7169 Tm -.005 Tc [(\(SEC)54.7(s\) r)9.3(ecently issued guidance for public)]TJ ET EMC /P <>BDC BT 9 0 0 9 529.0497 391.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 379.7169 Tm -.005 Tc [(companies on cybersecurity-r)9.3(elated disclosur)9.3(es has)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.308 379.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 367.7169 Tm -.005 Tc [(garner)9.3(ed a gr)9.3(eat deal of attention for what it sa)7.3(ys)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.5624 367.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 355.7169 Tm -.005 Tc [(about the thr)9.3(eat and risk that cybersecurity)]TJ ET EMC /P <>BDC BT 9 0 0 9 530.4373 355.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 343.7169 Tm -.005 Tc [(pr)9.3(esents for public companieslar)9.3(ge and small.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 550.9664 346.4169 Tm 0 Tc (6)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 553.9537 346.687 Tm -.0083 Tc (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 556.2605 346.4169 Tm 0 Tc (7)Tj ET EMC /P <>BDC BT 9 0 0 9 559.2478 343.7169 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 331.7169 Tm -.005 Tc [(This guideline narr)19.5(ates the SEC)54.7(s expectations)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.2629 331.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 319.7169 Tm -.005 Tc [(r)9.3(egar)9.3(ding the expected beha)7.3(vior of boar)9.3(d members)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.5723 319.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 307.7169 Tm -.005 Tc [(with r)9.3(espect t)9.8(o)0( cybersecurity risk. Corpor)19.5(ate)]TJ ET EMC /P <>BDC BT 9 0 0 9 535.1165 307.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 295.7169 Tm -.005 Tc [(go)7.3(v)6.4(ernance models will quickly become obsolete if)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.4243 295.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 283.7169 Tm -.005 Tc [(the)6.4(y do not ha)7.3(v)6.4(e)0( str)9.8(ong cyberrisk management.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 549.157 286.4168 Tm -.0083 Tc (8 )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 259.7169 Tm -.005 Tc [(Recent cyber)19.5(attacks ha)7.3(v)6.4(e)0( caught the attention of)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.6689 259.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 247.7169 Tm -.005 Tc [(boar)9.3(ds ar)9.8(ound the world due t)9.8(o)0( the impact on)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.1775 247.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 235.7169 Tm -.005 Tc [(or)9.3(ganizations t)9.8(op-line and bott)9.8(om-line gur)9.3(es. F)10.3(o)0(r)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.4823 235.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 223.7169 Tm -.005 Tc [(example, F)10.3(edEx r)9.3(epor)-24.4(ted a US$300 million hit t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.0997 223.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 211.7169 Tm -.005 Tc [(earnings due t)9.8(o)0( the P)6.4(ety)7.3(a malwar)9.3(e attacks in June)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.2579 211.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 199.7169 Tm -.005 Tc (2017. International shipping company Maersk)Tj ET EMC /P <>BDC BT 9 0 0 9 542.1409 199.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 187.7169 Tm -.005 Tc [(r)9.3(epor)-24.4(ted that the P)6.4(ety)7.3(a malwar)9.3(e attacks will r)9.3(esult)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.2889 187.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 175.7169 Tm -.005 Tc [(in appr)9.8(o)10.3(ximate losses up t)9.8(o)0( US$300 million.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 534.6967 178.4168 Tm -.0083 Tc (9 )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 151.7169 Tm -.005 Tc [(A 2015 sur)-8.8(v)6.4(e)6.4(y)0( conducted b)5.4(y)0( the New Y)31.8(ork St)9.8(ock)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.053 151.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 139.7169 Tm -.005 Tc [(Ex)9.8(change \(N)13.7(Y)7.8(SE\) Go)7.3(v)6.4(ernance Ser)-8.8(vices shows the)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.0516 139.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 127.7169 Tm -.005 Tc [(extent t)9.8(o)0( which boar)9.3(dr)9.8(ooms ar)9.3(e unpr)9.3(epar)9.3(ed t)9.8(o)0( deal)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.1495 127.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 115.7169 Tm -.005 Tc [(with cyber)19.5(attacks. Sixty-six per)9.3(cent of sur)-8.8(v)6.4(e)6.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.3939 115.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 103.7169 Tm -.005 Tc [(r)9.3(espondents still lack condence in their)]TJ ET EMC /P <>BDC BT 9 0 0 9 520.3154 103.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 91.7169 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( ability t)9.8(o)0( pr)9.8(otect itself against)]TJ ET EMC /P <>BDC BT 9 0 0 9 535.4343 91.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 79.7169 Tm -.005 Tc [(cyber)19.5(attacks.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 414.5241 82.4168 Tm -.0083 Tc (10 )Tj ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm 0 Tc [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .73 .19 0 0 k [( V)6.4(OL 4)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (4)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC Q endstream endobj 263 0 obj <>/ExtGState<>>> endobj 297 0 obj <> endobj 298 0 obj <> endobj 299 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .73 .19 0 0 k [( V)6.4(OL 4)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (5)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 665.7169 Tm 0 0 0 1 k -.005 Tc [(It has become v)6.4(e)0(r)-8.8(y)0( clear that cybersecurity is no)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.8192 665.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 653.7169 Tm -.005 Tc [(longer only the r)9.3(esponsibility of those in the C-suite)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.1826 653.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 641.7169 Tm -.005 Tc (such as CIOs or CISOs, but it should become one of)Tj ET EMC /P <>BDC BT 9 0 0 9 239.8039 641.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 629.7169 Tm -.005 Tc [(the r)9.3(esponsibilities of the BoD)49.8(. Str)9.8(ong alignment)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.9598 629.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 617.7169 Tm -.005 Tc [(between corpor)19.5(ate go)7.3(v)6.4(ernance and cybersecurity)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.1729 617.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 605.7169 Tm -.005 Tc [(go)7.3(v)6.4(ernance has become imper)19.5(ativ)6.4(e. V)13.7(ulner)19.5(able)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.6956 605.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 593.7169 Tm -.005 Tc [(business sect)9.8(ors such as banking and nancial)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.1319 593.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 581.7169 Tm -.005 Tc [(ser)-8.8(vices should consider ha)7.3(ving an ex)9.8(clusiv)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.8782 581.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 569.7169 Tm -.005 Tc [(cyberrisk committee, or cyber-r)9.3(elated aspects )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 557.7169 Tm [(need t)9.8(o)0( be bundled with digital/technology )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 545.7169 Tm (steering committees. )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 521.7169 Tm [(The boar)9.3(d and senior management need t)9.8(o)0( tak)9.8(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.1126 521.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 509.7169 Tm -.005 Tc [(appr)9.8(opriate measur)9.3(es t)9.8(o)0( ensur)9.3(e the optimum)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.4491 509.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 497.7169 Tm -.005 Tc [(alignment of corpor)19.5(ate and cyberrisk go)7.3(v)6.4(ernance.)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.6782 497.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 485.7169 Tm -.005 Tc [(T)48.4(o)0( do this, changes need t)9.8(o)0( be initiated fr)9.8(om the)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.8323 485.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 473.7169 Tm -.005 Tc [(boar)9.3(d le)6.4(v)6.4(el down thr)9.8(oughout the enterprise. Best)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.5078 473.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 461.7169 Tm -.005 Tc [(pr)19.5(actice guidelines on corpor)19.5(ate go)7.3(v)6.4(ernance)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 212.0159 464.4169 Tm -.0083 Tc (11)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 217.9904 464.687 Tm (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 220.2973 464.4169 Tm (12)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 226.2718 464.687 Tm (, )Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 228.5786 464.4169 Tm (13)Tj ET EMC /P <>BDC BT 9 0 0 9 234.5532 461.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 449.7169 Tm -.005 Tc [(need t)9.8(o)0( be consider)9.3(ed for impr)9.8(o)7.3(ving the alignment)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.5159 449.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 437.7169 Tm -.005 Tc [(of corpor)19.5(ate and cybersecurity go)7.3(v)6.4(ernance)]TJ ET EMC /P <>BDC BT 9 0 0 9 205.6327 437.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 425.7169 Tm -.005 Tc [(pr)19.5(actices. Specically)52.3(, the E)12.7(v)7.3(aluate, Dir)9.3(ect and)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.4048 425.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 413.7169 Tm -.005 Tc [(Monit)9.8(or \(EDM\) domain of the COBI)14.2(T)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 179.2562 416.687 Tm 0 Tc ()Tj ET EMC /P <>BDC BT 9 0 0 9 183.4565 413.7169 Tm -.005 Tc [( 5 F)12.7(r)19.5(amework)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.2111 413.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 401.7169 Tm -.005 Tc [(helps in dening and implementing a r)9.3(esponsible,)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.6762 401.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 389.7169 Tm -.005 Tc [(accountable, consulted, informed \(RA)5.4(CI\) matrix,)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.1118 389.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 377.7169 Tm -.005 Tc [(which will help or)9.3(ganizations in making the boar)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.0687 377.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 365.7169 Tm -.005 Tc [(members r)9.3(esponsible, accountable, consulted and)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.2016 365.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 353.7169 Tm -.005 Tc [(informed on v)7.3(arious happenings center)9.3(ed ar)9.8(ound)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.9268 353.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 341.7169 Tm -.005 Tc [(cybersecurity at the boar)9.3(d le)6.4(v)6.4(el. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 317.7169 Tm [(How Boar)9.3(ds Can Become Cyberrisk F)10.3(ocused )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36.9471 305.7169 Tm [(The boar)9.3(d should set the t)9.8(one t)9.8(o)0( ensur)9.3(e adequate)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.9771 305.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 293.7169 Tm -.005 Tc [(cyberrisk mechanisms exist. Boar)9.3(d-le)6.4(v)6.4(e)0(l)]TJ ET EMC /P <>BDC BT 9 0 0 9 195.3428 293.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 281.7169 Tm -.005 Tc [(cybersecurity awar)9.3(eness is critical for)]TJ ET EMC /P <>BDC BT 9 0 0 9 185.7275 281.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 269.7169 Tm -.005 Tc [(contempor)19.5(ar)-8.8(y or)9.3(ganizations. Additionally)52.3(, boar)9.3(ds)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.9888 269.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 257.7169 Tm -.005 Tc [(should ha)7.3(v)6.4(e)0( good insights int)9.8(o the risk appetite,)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.6923 257.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 245.7169 Tm -.005 Tc [(cybersecurity str)19.5(ategy)52.3(, oper)19.5(ational and tactical)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.1142 245.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 233.7169 Tm -.005 Tc [(cybersecurity contr)9.8(ols implemented, inv)6.4(estments)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.7719 233.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 221.7169 Tm -.005 Tc [(made in lieu of cybersecurity thr)9.3(eat pr)9.3(e)6.4(v)6.4(ention and)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.1028 221.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 209.7169 Tm -.005 Tc [(pr)9.8(otection arr)19.5(angements, and thr)9.3(eat intelligence)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.0117 209.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 197.7169 Tm -.005 Tc [(management pr)19.5(actices of their or)9.3(ganizations. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 173.7169 Tm (The risk management committee should notify the)Tj ET EMC /P <>BDC BT 9 0 0 9 236.1948 173.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 161.7169 Tm -.005 Tc [(boar)9.3(d of potential insider-caused cyber)-24.4(thr)9.3(eats/risk.)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.0153 161.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 149.7169 Tm -.005 Tc [(Boar)9.3(d members should be awar)9.3(e of the incident)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.0059 149.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 137.7169 Tm -.005 Tc [(management capabilities and incident r)9.3(esponse)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.2038 137.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 125.7169 Tm -.005 Tc [(pr)9.3(epar)9.3(edness of the or)9.3(ganization. Boar)9.3(d members)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.294 125.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 113.7169 Tm -.005 Tc [(should be awar)9.3(e of the cr)9.8(own jewels \(i.e., critical)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.6433 113.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 101.7169 Tm -.005 Tc [(information systems\) of the or)9.3(ganization t)9.8(o)0( be)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.103 101.7169 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 89.7169 Tm -.005 Tc [(pr)9.8(otected fr)9.8(om potential cyber)19.5(attacks. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 533.3061 Tm [(Cyberrisk-r)9.3(elated discussions should become a)]TJ ET EMC /P <>BDC BT 9 0 0 9 441.7639 533.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 521.3061 Tm -.005 Tc [(r)9.3(egular item on the boar)9.3(d)54.7(s meeting agenda, as)]TJ ET EMC /P <>BDC BT 9 0 0 9 439.9609 521.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 509.3061 Tm -.005 Tc [(should I)14.2(T)19.5( and priv)7.3(acy risk. P)5.4(a)0(r)-24.4(ticipation of)]TJ ET EMC /P <>BDC BT 9 0 0 9 420.7106 509.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 497.3061 Tm -.005 Tc [(cybersecurity ex)9.8(ecutiv)6.4(es \(e.g., CIOs, CISOs\) in boar)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 460.3531 497.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 485.3061 Tm -.005 Tc [(meetings can r)9.3(esult in major impr)9.8(o)7.3(v)6.4(ements t)9.8(o)0( the)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.4462 485.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 473.3061 Tm -.005 Tc [(cybersecurity pr)19.5(actices of the or)9.3(ganization. CIOs)]TJ ET EMC /P <>BDC BT 9 0 0 9 446.6859 473.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 461.3061 Tm -.005 Tc [(and CISOs should mak)9.8(e boar)9.3(d members awar)9.3(e of)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.1559 461.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 449.3061 Tm -.005 Tc [(how r)9.3(e)6.4(v)6.4(enue, costs, pr)9.8(ot mar)9.3(gin, staff pr)9.8(oductivity)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 457.8703 449.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 437.3061 Tm -.005 Tc [(cust)9.8(omer satisfaction and mark)9.8(et r)9.3(eputation of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.489 437.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 425.3061 Tm -.005 Tc [(or)9.3(ganization can be signicantly impacted b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 433.4986 425.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 413.3061 Tm -.005 Tc [(cyber)19.5(attacks. Boar)9.3(d members should ha)7.3(v)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 423.7392 413.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 401.3061 Tm -.005 Tc [(discussions with the management team on how t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.7134 401.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 389.3061 Tm -.005 Tc [(impr)9.8(o)7.3(v)6.4(e the cyberrisk management capabilities of)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.5405 389.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 377.3061 Tm -.005 Tc [(the or)9.3(ganization and the competencies of staff t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.3686 377.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 365.3061 Tm -.005 Tc [(pr)9.3(e)6.4(v)6.4(ent and pr)9.8(otect the or)9.3(ganization fr)9.8(om emer)9.3(ging)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.871 365.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 353.3061 Tm -.005 Tc [(cyber)19.5(attacks. Boar)9.3(d members should tr)-8.8(y t)9.8(o)0( addr)9.3(ess)]TJ ET EMC /P <>BDC BT 9 0 0 9 459.2543 353.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 341.3061 Tm -.005 Tc [(their knowledge gaps in cyber-r)9.3(elated ar)9.3(eas b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.023 341.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 329.3061 Tm -.005 Tc [(attending external tr)19.5(aining pr)9.8(ogr)19.5(ams and ha)7.3(ving a)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.1375 329.3061 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 317.3061 Tm -.005 Tc [(cybersecurity exper)-24.4(t as an advisor t)9.8(o)0( the boar)9.3(d. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 293.3062 Tm [(Boar)9.3(ds should r)9.3(e)6.4(view the r)9.3(esults of cybersecurity)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.9799 293.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 281.3062 Tm -.005 Tc (audits and assessments. Based on the insights)Tj ET EMC /P <>BDC BT 9 0 0 9 441.5309 281.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 269.3062 Tm -.005 Tc [(gather)9.3(ed fr)9.8(om their r)9.3(e)6.4(views, the)6.4(y should ask the)]TJ ET EMC /P <>BDC BT 9 0 0 9 444.0327 269.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 257.3062 Tm -.005 Tc [(right questions t)9.8(o)0( the management team t)9.8(o)0( ensur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.6255 257.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 245.3062 Tm -.005 Tc [(that timely measur)9.3(es ar)9.3(e tak)9.8(en t)9.8(o)0( r)9.3(educe the)]TJ ET EMC /P <>BDC BT 9 0 0 9 431.1081 245.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 233.3062 Tm -.005 Tc [(cyberrisk of the or)9.3(ganization. As a corr)9.3(ectiv)6.4(e and)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.9855 233.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 221.3062 Tm -.005 Tc [(r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)0( measur)9.3(e fr)9.8(om cyber)19.5(attacks, the BoD)]TJ ET EMC /P <>BDC BT 9 0 0 9 434.9103 221.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 209.3062 Tm -.005 Tc [(should ensur)9.3(e that the management team)]TJ ET EMC /P <>BDC BT 9 0 0 9 420.8091 209.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 197.3062 Tm -.005 Tc [(subscribes t)9.8(o)0( the r)9.3(ele)6.4(v)7.3(ant cyberinsur)19.5(ance plans)]TJ ET EMC /P <>BDC BT 9 0 0 9 443.0625 197.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 185.3062 Tm -.005 Tc [(a)7.3(v)7.3(ailable in the mark)9.8(et. Boar)9.3(d members should be)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.8481 185.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 173.3062 Tm -.005 Tc [(awar)9.3(e of the disaster r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)0( and crisis)]TJ ET EMC /P <>BDC BT 9 0 0 9 414.6713 173.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 161.3062 Tm -.005 Tc [(management capabilities of the or)9.3(ganization. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 137.3062 Tm [(Boar)9.3(ds should invite industr)-8.8(y exper)-24.4(ts t)9.8(o)0( be par)-24.4(t of)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.8913 137.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 125.3062 Tm -.005 Tc [(their meetings t)9.8(o)0( discuss cyberrisk management)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.7437 125.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 113.3062 Tm -.005 Tc [(best pr)19.5(actices. Boar)9.3(ds should also invite law)]TJ ET EMC /P <>BDC BT 9 0 0 9 430.6852 113.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 101.3062 Tm -.005 Tc [(enfor)9.3(cement \(e.g., police, civil def)11.7(ense authorities)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.7125 101.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 89.3062 Tm -.005 Tc [(of the r)9.3(egion wher)9.3(e the or)9.3(ganization oper)19.5(ates\) and)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.5599 89.3062 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 77.3062 Tm -.005 Tc [(mark)9.8(et intelligence agencies t)9.8(o)0( pr)9.3(esent on the)]TJ ET EMC /P <>BDC BT 9 0 0 9 437.2539 77.3062 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC .72 .13 .67 .01 k /GS3 gs 255.447 550.714 346.317 121.753 re f EMC /P <>BDC BT 14 0 0 14 288.6932 642.8968 Tm 0 0 0 0 k .0151 Tc -.0175 Tw [(THE)17.5( BO)10.2(ARD)17.5( AND)17.5( SENIOR)]TJ ET EMC /P <>BDC BT 14 0 0 14 449.6245 642.8968 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 624.8968 Tm .0151 Tc -.0371 Tw [(M)-8.8(A)0(N)-8.8(A)5.3(GEMEN)14.1(T)37.1( )-19.6(NEED)17.5( T)13.6(O)17.5( T)38.5(AKE)]TJ ET EMC /P <>BDC BT 14 0 0 14 460.4204 624.8968 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 606.8968 Tm .0151 Tc -.0175 Tw [(APPROPRI)-8.8(A)63(T)0(E)17.5( MEASURES)17.5( )19.6(T)13.6(O)17.5( ENSURE)17.5( )19.6(THE)]TJ ET EMC /P <>BDC BT 14 0 0 14 541.5529 606.8968 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 588.8968 Tm .0151 Tc -.0175 Tw [(OPTIMUM)17.6( ALIGNMEN)14.1(T)37.1( OF)17.5( CORPORA)63(TE)]TJ ET EMC /P <>BDC BT 14 0 0 14 518.2683 588.8968 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 570.8968 Tm .0151 Tc -.0175 Tw [(AND)17.5( CYBERRISK)17.5( GO)10.7(VERN)-8.8(ANCE)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 474.585 579.839 23 -23.75 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 492.689 569.551 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 261.64 668.323 23 -23.75 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 266.558 654.955 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 300 0 obj <>/ExtGState<>>> endobj 334 0 obj <> endobj 335 0 obj <> endobj 336 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 144 532.6577 Tm -.005 Tc [(potential cyber)-24.4(thr)9.3(eats and attack tr)9.3(ends emer)9.3(ging)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.0175 532.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 520.6577 Tm -.005 Tc [(in the r)9.3(egion. )]TJ ET EMC /P <>BDC BT 9 0 0 9 144 496.6577 Tm -.02 Tc (BoDs should guide the management team in)Tj ET EMC /P <>BDC BT 9 0 0 9 313.7686 496.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 484.6577 Tm -.02 Tc [(establishing a str)9.8(ong oper)19.5(ational risk management)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.8351 484.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 472.6577 Tm -.02 Tc [(cultur)9.3(e that should include a cyberrisk management)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.5749 472.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 460.6577 Tm -.02 Tc [(element as an integr)19.5(al component. BoDs should)]TJ ET EMC /P <>BDC BT 9 0 0 9 326.9576 460.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 448.6577 Tm -.02 Tc [(ensur)9.3(e that cyberrisk management guidelines ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.1743 448.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 436.6577 Tm -.02 Tc [(integr)19.5(ated int)9.8(o the enterprise risk management)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.7479 436.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 424.6577 Tm -.02 Tc [(fr)19.5(amework in a seamless manner)60.1(. Finally)52.3(, the boar)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.1975 424.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 412.6577 Tm -.02 Tc [(should ensur)9.3(e that cybersecurity risk disclosur)9.3(es ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.8782 412.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 400.6577 Tm -.02 Tc [(made t)9.8(o)0( inv)6.4(est)9.8(ors as appr)9.8(opriate and as r)9.3(equir)9.3(ed.)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.0626 400.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 144 376.6577 Tm -.005 Tc [(How the A)5.4(udit Committee Can Become )]TJ ET EMC /P <>BDC BT 9 0 0 9 144 364.6577 Tm [(Cyberrisk-F)10.3(ocused )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 144 352.6577 Tm [(A)5.4(udit committees should ask the right questions in)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.5804 352.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 340.6577 Tm -.005 Tc (a timely manner about the adequacy of cyberrisk)Tj ET EMC /P <>BDC BT 9 0 0 9 335.9747 340.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 328.6577 Tm -.005 Tc [(management measur)9.3(es in place, and the)6.4(y should)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.1721 328.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 316.6577 Tm -.005 Tc [(benchmark the same with peers in the sect)9.8(or)60.1(. )19.5(This)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.2041 316.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 304.6577 Tm -.005 Tc (will help them in gauging the risk appetite of the)Tj ET EMC /P <>BDC BT 9 0 0 9 332.5482 304.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 292.6577 Tm -.005 Tc [(or)9.3(ganization and e)6.4(v)7.3(aluating the gaps and decisions)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.4438 292.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 280.6577 Tm -.005 Tc [(made b)5.4(y)0( senior management. )19.5(This committee)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.5088 280.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 268.6577 Tm -.005 Tc [(should be awar)9.3(e of cybersecurity tr)9.3(ends, cyberrisk-)]TJ ET EMC /P <>BDC BT 9 0 0 9 144 256.6577 Tm [(r)9.3(elated r)9.3(egulat)9.8(or)-8.8(y de)6.4(v)6.4(elopments and major)]TJ ET EMC /P <>BDC BT 9 0 0 9 313.3227 256.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 244.6577 Tm -.005 Tc [(cyber)-24.4(thr)9.3(eats faced b)5.4(y)0( the or)9.3(ganization, and the)]TJ ET EMC /P <>BDC BT 9 0 0 9 329.0446 244.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 232.6577 Tm -.005 Tc (systemic, economic and business disruptions)Tj ET EMC /P <>BDC BT 9 0 0 9 323.8763 232.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 220.6577 Tm -.005 Tc [(caused b)5.4(y)0( these cyber)-24.4(thr)9.3(eats. A)5.4(udits need t)9.8(o)0( be)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.3951 220.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 208.6577 Tm -.005 Tc [(designed as completely risk-driv)6.4(en. I)14.2(T)113.3(- and cyber-)]TJ ET EMC /P <>BDC BT 9 0 0 9 144 196.6577 Tm [(r)9.3(elated risk contr)9.8(ol self-assessments \(RCSAs\))]TJ ET EMC /P <>BDC BT 9 0 0 9 325.0212 196.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 184.6577 Tm -.005 Tc [(should be made mandat)9.8(or)-8.8(y t)9.8(o)0( ensur)9.3(e that the)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.5951 184.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 172.6577 Tm -.005 Tc [(or)9.3(ganization and its technology infr)19.5(astructur)9.3(e ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.0547 172.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 160.6577 Tm -.005 Tc [(adequately pr)9.8(otected with well-designed and)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.873 160.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 148.6577 Tm -.005 Tc [(eff)11.7(ectiv)6.4(ely implemented contr)9.8(ols. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 144 124.6577 Tm (How the Risk Committee Can Become Cyberrisk-)Tj ET EMC /P <>BDC BT 9 0 0 9 144 112.6577 Tm [(F)10.3(ocused )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 144 100.6577 Tm [(The risk committee should r)9.3(e)6.4(view the or)9.3(ganization)39.1()54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.5477 100.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 88.6577 Tm -.005 Tc [(str)19.5(ategy t)9.8(o)0( mitigate cyberrisk and examine disaster)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.5902 88.6577 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 663.5775 Tm -.005 Tc [(r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)0( and continuity plans t)9.8(o)0( ensur)9.3(e the)]TJ ET EMC /P <>BDC BT 9 0 0 9 531.5263 663.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 651.5775 Tm -.005 Tc [(adequacy of cyberrisk management measur)9.3(es in)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.5613 651.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 639.5775 Tm -.005 Tc [(place. )19.5(The risk committee should suppor)-24.4(t the BoD)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.7778 639.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 627.5775 Tm -.005 Tc [(in giving cybersecurity issues higher ur)9.3(gency and)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.3559 627.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 615.5775 Tm -.005 Tc [(prioritizing them with str)9.8(ong o)7.3(v)6.4(ersight as par)-24.4(t of)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.2523 615.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 603.5775 Tm -.005 Tc [(good go)7.3(v)6.4(ernance. In addition, the risk committee)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.957 603.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 591.5775 Tm -.005 Tc [(should communicate with the internal contr)9.8(ols)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.7361 591.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 579.5775 Tm -.005 Tc [(committee and the audit committee t)9.8(o)0( help them)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.6226 579.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 567.5775 Tm -.005 Tc (understand specic risk and who is accountable for)Tj ET EMC /P <>BDC BT 9 0 0 9 565.7919 567.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 555.5775 Tm -.005 Tc [(diff)11.7(er)9.3(ent types of cyberrisk. )19.5(The risk committee)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.6333 555.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 543.5775 Tm -.005 Tc [(should r)9.3(e)6.4(view the cyberrisk appetite on an ongoing)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.5092 543.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 531.5775 Tm -.005 Tc [(basis. )19.5(The risk committee should also r)9.3(e)6.4(view risk)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.226 531.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 519.5775 Tm -.005 Tc [(assessments co)7.3(v)6.4(ering the technology)]TJ ET EMC /P <>BDC BT 9 0 0 9 511.8954 519.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 507.5775 Tm -.005 Tc [(management, v)6.4(endor management, human)]TJ ET EMC /P <>BDC BT 9 0 0 9 532.1047 507.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 495.5775 Tm -.005 Tc [(r)9.3(esour)9.3(ces \(HR\), legal and compliance depar)-24.4(tments. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 362.5 471.5775 Tm [(How the Senior Management )29.3(T)43.5(eam Can Become)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.2852 471.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 459.5775 Tm -.005 Tc [(Cyberrisk-F)10.3(ocused )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 362.5 447.5775 Tm [(The management team should ensur)9.3(e that all)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.6038 447.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 435.5775 Tm -.005 Tc [(r)9.3(equir)9.3(ed policies, pr)9.8(ocesses and systems ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.7253 435.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 423.5775 Tm -.005 Tc [(implemented and adequate. )19.5(This helps ensur)9.3(e that)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.2871 423.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 411.5775 Tm -.005 Tc [(cyberrisk fact)9.8(ors ar)9.3(e identied in a timely and)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.423 411.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 399.5775 Tm -.005 Tc [(pr)9.8(oactiv)6.4(e manner)60.1(. )19.5(The management team should)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.3455 399.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 387.5775 Tm -.005 Tc [(ensur)9.3(e that appr)9.8(opriate communication channels)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.7564 387.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 375.5775 Tm -.005 Tc [(ar)9.3(e in place t)9.8(o)0( r)9.3(epor)-24.4(t the cyberrisk/thr)9.3(eat e)6.4(v)6.4(ents.)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.0839 375.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 363.5775 Tm -.005 Tc [(This team should continuously monit)9.8(or the)]TJ ET EMC /P <>BDC BT 9 0 0 9 531.2954 363.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 351.5775 Tm -.005 Tc [(cyberrisk postur)9.3(e of the or)9.3(ganization and ensur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.1201 351.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 339.5775 Tm -.005 Tc [(that cyberrisk/thr)9.3(eat e)6.4(v)6.4(ents ar)9.3(e r)9.3(epor)-24.4(ted in a )]TJ ET EMC /P <>BDC BT 9 0 0 9 362.5 327.5775 Tm (timely manner using the communication )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 315.5775 Tm (channels established. )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 291.5775 Tm [(Senior management should ensur)9.3(e that the)]TJ ET EMC /P <>BDC BT 9 0 0 9 532.7159 291.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 279.5775 Tm -.005 Tc [(cybersecurity unit is engaged in r)9.3(egular dialog with)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.927 279.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 267.5775 Tm -.005 Tc [(business units on an ongoing basis t)9.8(o)0( ensur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 540.5603 267.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 255.5775 Tm -.005 Tc [(eff)11.7(ectiv)6.4(e cyberrisk management contr)9.8(ols in the)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.9235 255.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 243.5775 Tm -.005 Tc [(business unit. )19.5(The senior management team should)]TJ ET EMC /P <>BDC BT 9 0 0 9 567.1035 243.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 231.5775 Tm -.005 Tc [(ensur)9.3(e that adequate business continuity and I)14.2(T)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.5172 231.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 219.5775 Tm -.005 Tc [(disaster r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)0( arr)19.5(angements ar)9.3(e in place and the)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.6302 219.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 207.5775 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( disaster pr)9.3(epar)9.3(edness is tested on a)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.6224 207.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 195.5775 Tm -.005 Tc [(periodic basis. )19.5(The management team should)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.0673 195.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 183.5775 Tm -.005 Tc [(ensur)9.3(e that the critical cyberrisk management)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.2224 183.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 171.5775 Tm -.005 Tc [(competencies ar)9.3(e identied and staff ar)9.3(e tr)19.5(ained t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.8705 171.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 159.5775 Tm -.005 Tc [(acquir)9.3(e those competencies. )19.5(The management)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.3978 159.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 147.5775 Tm -.005 Tc [(team should ensur)9.3(e that risk-informed decision-)]TJ ET EMC /P <>BDC BT 9 0 0 9 362.5 135.5775 Tm [(making is happening in the da)7.3(y-t)9.8(o-da)7.3(y oper)19.5(ations)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.6338 135.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 123.5775 Tm -.005 Tc [(and risk management is a seamless par)-24.4(t of)]TJ ET EMC /P <>BDC BT 9 0 0 9 533.1982 123.5775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 111.5775 Tm -.005 Tc [(oper)19.5(ational business pr)9.8(ocesses. )]TJ ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm 0 Tc [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .73 .19 0 0 k [( V)6.4(OL 4)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (6)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Artifact <>BDC .72 .13 .67 .01 k /GS3 gs q 1 0 0 1 28.085 670.249 cm 0 0 m 320.652 .096 l 320.688 -121.145 l .036 -121.241 l h f* Q EMC /P <>BDC BT 14 .0042 -.0042 14 61.3431 640.7036 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(P)67.3(A)0(R)39(TICIP)67.3(A)63(TION)17.5( OF)17.5( CYBERSECURI)14.1(T)-7.8(Y)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 303.6225 640.7764 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 37.3485 622.6965 Tm .0351 Tc [(EXECUTIVES)17.5( )]TJ 6.311 0 TD .0176 Tc [(\(E.G.)17.6(,)17.6( )]TJ 2.6494 0 TD .0351 Tc -.0175 Tw [(CIOS)17.5(,)35.1( CISOS)17.5(\))35.1( IN)17.5( BO)10.2(ARD)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 317.3622 622.7805 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 37.3539 604.6965 Tm .0351 Tc -.0175 Tw [(MEE)-9.8(TINGS)17.5( CAN)17.5( RESUL)134.2(T)37.1( IN)17.5( M)-8.8(AJOR)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 268.1967 604.7657 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 37.3593 586.6965 Tm .0351 Tc -.0371 Tw [(IMPRO)10.7(VEMEN)14.1(T)7.8(S)17.5( T)13.6(O)17.5( THE)17.5( )-19.6(CYBERSECURI)14.1(T)-7.8(Y)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 318.5079 586.7808 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 37.3646 568.6964 Tm .0351 Tc -.0175 Tw [(PRA)5.3(C)14.1(TICES)17.5( OF)17.5( )19.6(THE)17.5( ORGANIZ)-6.4(A)63(TION)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 281.627 578.201 m 304.627 578.208 l 304.635 554.458 l 281.635 554.451 l W n 281.627 578.295 m 304.649 578.302 l 304.657 554.458 l 281.635 554.451 l W n 276.983 583.651 m 309.28 583.66 l 309.29 549.065 l 276.993 549.056 l h 279.528 568.769 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 299.734 567.919 cm 0 0 m -.098 -2.881 -.577 -5.075 -1.439 -6.582 c -2.298 -8.09 -3.64 -9.224 -5.461 -9.987 c -3.275 -13.463 l -.261 -12.104 1.94 -10.1 3.33 -7.451 c 4.391 -5.463 4.919 -2.25 4.917 2.188 c 4.915 10.384 l -4.673 10.38 l -4.67 -.002 l 0 0 l h -12.64 -.004 m -12.738 -2.885 -13.217 -5.079 -14.079 -6.586 c -14.938 -8.094 -16.28 -9.228 -18.101 -9.991 c -15.915 -13.467 l -12.901 -12.108 -10.7 -10.104 -9.31 -7.455 c -8.249 -5.467 -7.721 -2.254 -7.723 2.184 c -7.725 10.38 l -17.313 10.376 l -17.31 -.006 l -12.64 -.004 l f Q EMC /Figure <>BDC Q q 1 i 34.283 666.119 m 57.283 666.127 l 57.29 642.377 l 34.29 642.369 l W n 34.283 666.213 m 57.305 666.221 l 57.312 642.377 l 34.29 642.369 l W n 28.085 670.248 m 63.494 670.259 l 63.503 638.315 l 28.094 638.304 l h 279.528 568.769 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 39.205 652.753 cm 0 0 m .098 2.881 .577 5.075 1.439 6.583 c 2.299 8.09 3.64 9.224 5.461 9.987 c 3.275 13.463 l .261 12.104 -1.94 10.1 -3.331 7.451 c -4.39 5.463 -4.919 2.25 -4.917 -2.187 c -4.915 -10.384 l 4.673 -10.38 l 4.67 .002 l 0 0 l h 12.64 .004 m 12.738 2.885 13.217 5.079 14.079 6.587 c 14.938 8.094 16.28 9.228 18.101 9.991 c 15.915 13.467 l 12.901 12.108 10.7 10.104 9.31 7.455 c 8.249 5.467 7.721 2.255 7.723 -2.183 c 7.725 -10.38 l 17.313 -10.376 l 17.31 .006 l 12.64 .004 l f Q EMC Q endstream endobj 337 0 obj <>/ExtGState<>>> endobj 363 0 obj <> endobj 368 0 obj <> endobj 373 0 obj <> endobj 378 0 obj <> endobj 383 0 obj <> endobj 388 0 obj <> endobj 393 0 obj <> endobj 398 0 obj <> endobj 403 0 obj <> endobj 408 0 obj <> endobj 413 0 obj <> endobj 414 0 obj <> endobj 415 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .73 .19 0 0 k [( V)6.4(OL 4)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (7)Tj ET EMC /P <>BDC BT /F4 1 Tf 11 0 0 11 36.9471 662.0775 Tm .72 .13 .67 .01 k -.005 Tc (Conclusion )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 36.9471 644.0775 Tm 0 0 0 1 k -.02 Tc [(The lack of adequate o)7.3(v)6.4(ersight on cyberrisk)]TJ ET EMC /P <>BDC BT 9 0 0 9 203.0162 644.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 632.0775 Tm -.02 Tc [(go)7.3(v)6.4(ernance could r)9.3(esult in loss of cust)9.8(omer)]TJ ET EMC /P <>BDC BT 9 0 0 9 203.6404 632.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 620.0775 Tm -.02 Tc [(condence, r)9.3(eputation damage \(which could also)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.5939 620.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 608.0775 Tm -.02 Tc [(r)9.3(esult in inated st)9.8(ock price\), potential r)9.3(egulat)9.8(or)-8.8(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.3013 608.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 596.0775 Tm -.02 Tc [(actions and litigation. )19.5(T)48.4(o)0( a)7.3(v)7.3(oid such pitfalls, boar)9.3(ds)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.6621 596.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 584.0775 Tm -.02 Tc [(and the senior management team should ha)7.3(v)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.42 584.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 572.0775 Tm -.02 Tc [(adequate o)7.3(v)6.4(ersight of the cybersecurity postur)9.3(e of)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.6642 572.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 560.0775 Tm -.02 Tc [(the or)9.3(ganization. Alignment of corpor)19.5(ate and)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.5252 560.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 548.0775 Tm -.02 Tc [(cyberrisk go)7.3(v)6.4(ernance pr)19.5(actices should be consider)9.3(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.532 548.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 536.0775 Tm -.02 Tc [(one of the t)9.8(op priorities that will help prioritiz)7.8(e and)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.9644 536.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 524.0775 Tm -.02 Tc [(mitigate the arr)19.5(a)7.3(y)0( of cyberrisk fact)9.8(ors faced b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.0739 524.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 512.0775 Tm -.02 Tc [(or)9.3(ganizations. Ha)7.3(ving a cyber)9.3(go)7.3(v)6.4(ernance)]TJ ET EMC /P <>BDC BT 9 0 0 9 194.3759 512.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 500.0775 Tm -.02 Tc [(subcommittee under the corpor)19.5(ate go)7.3(v)6.4(ernance)]TJ ET EMC /P <>BDC BT 9 0 0 9 216.5558 500.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 488.0775 Tm -.02 Tc [(committee; pr)9.8(o)7.3(viding good o)7.3(v)6.4(ersight on cyberrisk)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.1702 488.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 476.0775 Tm -.02 Tc (management activities carried out; and assimilating)Tj ET EMC /P <>BDC BT 9 0 0 9 233.9905 476.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 464.0775 Tm -.02 Tc [(cyberrisk management aspects int)9.8(o the duciar)-8.8(y)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.8516 464.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 452.0775 Tm -.02 Tc [(o)7.3(v)6.4(ersight and risk management r)9.3(esponsibilities of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.5232 452.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 440.0775 Tm -.02 Tc [(BoD can help or)9.3(ganizations manage their cyberrisk)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.6941 440.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 428.0775 Tm -.02 Tc [(postur)9.3(e in a v)6.4(e)0(r)-8.8(y)0( eff)11.7(ectiv)6.4(e and timely manner)60.1(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 209.3185 428.0775 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 36.9471 164.0775 Tm .72 .13 .67 .01 k -.005 Tc (Endnotes )Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 54.3108 146.0775 Tm 0 0 0 1 k [(Yip, M.; Snak)9.8(emack)9.8(er)9.3(el Deliv)6.4(ers Z)10.3(ekapab)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 218.5412 146.0775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 41.9471 146.0775 Tm .04 1 .83 0 k (1)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 53.9471 134.0775 Tm 0 0 0 1 k -.005 Tc [(Malwar)9.3(e,)83( Accentur)9.3(e blog, 29 No)7.3(v)6.4(ember 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.9441 134.0775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 53.9471 122.0775 Tm -.005 Tc [(https:/)109.4(/www)60.6(.accentur)9.3(e.com/us-en/blogs/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 110.0775 Tm [(blogs-snak)9.8(emack)9.8(er)9.3(el-deliv)6.4(ers-z)7.8(ekapab-malwar)9.3(e )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.8107 663.5775 Tm [(E)8.3(u)0(r)9.8(opean Super)-8.8(visor)-8.8(y Agencies, EU Regulat)9.8(ors)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 460.3401 663.5775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 260.4471 663.5775 Tm .04 1 .83 0 k (2)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 651.5775 Tm 0 0 0 1 k -.005 Tc [(W)16.1(arn of Cyber-Thr)9.3(eats and Br)9.3(exit Risks,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 430.4419 651.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 639.5775 Tm -.02 Tc [(Finextr)19.5(a, 12 April 2018, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 361.1074 639.5775 Tm [(https:/)109.4(/www)60.6(.nextr)19.5(a.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 459.598 639.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 627.5775 Tm -.005 Tc [(pr)9.3(essar)-24.4(ticle/73431/eu-r)9.3(egulat)9.8(ors-warn-of- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 615.5775 Tm [(cyber-thr)9.3(eats-and-br)9.3(exit-risks )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.8107 603.5775 Tm [(Finextr)19.5(a, E)8.3(ur)9.8(opean Regulat)9.8(ors Advise Against)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.9922 603.5775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 260.4471 603.5775 Tm .04 1 .83 0 k (3)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 591.5775 Tm 0 0 0 1 k -.005 Tc [(One-Siz)7.8(e-Fits-All Cybersecurity P)6.4(olicy)52.3(,)83()0( 10 April)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.9671 591.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 579.5775 Tm -.005 Tc (2019, )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 296.3867 579.5775 Tm [(https:/)109.4(/www)60.6(.nextr)19.5(a.com/newsar)-24.4(ticle/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 567.5775 Tm [(33670/eur)9.8(opean-r)9.3(egulat)9.8(ors-advise-against-one-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 555.5775 Tm [(siz)7.8(e-ts-all-cybersecurity-policy/security )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.8107 543.5775 Tm (BBC News, $10 Router Blamed in Bangladesh)Tj ET EMC /LBody <>BDC BT 9 0 0 9 455.0391 543.5775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 260.4471 543.5775 Tm .04 1 .83 0 k (4)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 531.5775 Tm 0 0 0 1 k -.02 Tc [(Bank Hack,)83( 22 April 2016, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 373.9926 531.5775 Tm [(https:/)109.4(/www)60.6(.bbc.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 458.4155 531.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 519.5775 Tm -.005 Tc (news/technology-36110421 )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.8107 507.5775 Tm [(Br)9.8(oadman, H.; Corpor)19.5(ate Boar)9.3(ds Ov)6.4(ersight )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 260.4471 507.5775 Tm .04 1 .83 0 k 0 Tc (5)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 495.5775 Tm 0 0 0 1 k -.005 Tc [(of Cyberrisks Is )19.5(T)48.4(oo P)5.4(assiv)6.4(e,)83( )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 389.9072 495.5775 Tm [(F)10.3(orbes)]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 416.589 495.5775 Tm (, )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 483.5775 Tm -.03 Tc [(28 No)7.3(v)6.4(ember 2018, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 347.6645 483.5775 Tm [(https:/)109.4(/www)60.6(.forbes.com/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 471.5775 Tm (sites/)Tj ET EMC /LBody <>BDC BT 9 0 0 9 293.2833 471.5775 Tm -.005 Tc [(harr)-8.8(ybr)9.8(oadman/2018/11/28/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 459.5775 Tm [(corpor)19.5(ate-boar)9.3(ds-o)7.3(v)6.4(ersight-of-cyber-risks-is- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 447.5775 Tm [(t)9.8(oo-passiv)6.4(e/#45ad65ef1f81 )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.8107 435.5775 Tm [(F)10.3(ontaine, D)49.8(.; J. R. Stark; Cybersecurity: )19.5(The)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 443.0336 435.5775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 260.4471 435.5775 Tm .04 1 .83 0 k (6)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 423.5775 Tm 0 0 0 1 k -.005 Tc [(SEC)54.7(s W)16.1(a)0(k)9.8(e-Up Call t)9.8(o)0( Corpor)19.5(ate Dir)9.3(ect)9.8(ors,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 442.4842 423.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 411.5775 Tm -.005 Tc [(Har)-8.8(v)7.3(a)0(r)9.3(d)0( Law School F)10.3(orum on Corpor)19.5(ate)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 433.2443 411.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 399.5775 Tm -.005 Tc [(Go)7.3(v)6.4(ernance and Financial Regulation, )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 387.5775 Tm -.02 Tc [(31 Mar)9.3(ch 2018, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 333.9033 387.5775 Tm [(https:/)109.4(/corpgo)7.3(v)52.3(.law)60.6(.har)-8.8(v)7.3(a)0(r)9.3(d.edu/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 455.792 387.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 375.5775 Tm -.005 Tc [(2018/03/31/cybersecurity-the-secs-wak)9.8(e-up-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 363.5775 Tm [(call-t)9.8(o-corpor)19.5(ate-dir)9.3(ect)9.8(ors/ )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.8107 351.5775 Tm [(Cla)7.3(yt)9.8(on, J.; Statement on Cybersecurity)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 430.221 351.5775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 260.4471 351.5775 Tm .04 1 .83 0 k (7)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 339.5775 Tm 0 0 0 1 k -.005 Tc [(Interpr)9.3(etiv)6.4(e Guidance,)83( US Securities and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 432.2338 339.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 327.5775 Tm -.005 Tc [(Ex)9.8(change Commission, 21 F)10.3(ebruar)-8.8(y 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.8398 327.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 272.4471 315.5775 Tm -.005 Tc [(https:/)109.4(/www)60.6(.sec.go)7.3(v/news/public-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 303.5775 Tm [(statement/statement-cla)7.3(yt)9.8(on-2018-02-21 )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.8107 291.5775 Tm [(F)10.3(eder)19.5(ation of E)8.3(u)0(r)9.8(opean Risk Management)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 438.4452 291.5775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 260.4471 291.5775 Tm .04 1 .83 0 k (8)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 279.5775 Tm 0 0 0 1 k -.005 Tc [(Associations \(FERM)-8.7(A\), )58.6(A)8.3(t the Junction of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 438.2323 279.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 267.5775 Tm -.005 Tc [(Corpor)19.5(ate Go)7.3(v)6.4(ernance and Cybersecurity)52.3(,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.829 267.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 272.4471 255.5775 Tm -.005 Tc [(https:/)109.4(/www)60.6(.eciia.eu/wp-content/uploads/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 243.5775 Tm [(2019/02/FERM)-8.8(A-P)6.4(erspectiv)6.4(es-Cyber-risk-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 231.5775 Tm [(go)7.3(v)6.4(ernance-09.10.2018_0.pdf )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.8107 219.5775 Tm [(Harr)9.3(ell, B.; Impr)9.8(o)7.4(ving Cybersecurity)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 413.5643 219.5775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 260.4471 219.5775 Tm .04 1 .83 0 k (9)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 207.5775 Tm 0 0 0 1 k -.005 Tc [(Go)7.3(v)6.4(ernance in the Boar)9.3(dr)9.8(oom,)83( )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 396.4562 207.5775 Tm (CSO)Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 413.3192 207.5775 Tm (, )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 195.5775 Tm -.02 Tc (25 September 2017, )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 351.4163 195.5775 Tm [(https:/)109.4(/www)60.6(.csoonline.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 458.1734 195.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 183.5775 Tm -.005 Tc [(ar)-24.4(ticle/3227887/impr)9.8(o)7.3(ving-cybersecurity-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 171.5775 Tm [(go)7.3(v)6.4(ernance-in-the-boar)9.3(dr)9.8(oom.html )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.9743 159.5775 Tm [(K)11.3(nowledge@Whar)-24.4(t)9.8(on, Corpor)19.5(ate Go)7.3(v)6.4(ernance)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.2731 159.5775 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 159.5775 Tm .04 1 .83 0 k (10)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 147.5775 Tm 0 0 0 1 k -.005 Tc [(in the Age of Cyber Risks,)83( 1 December 2015,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 448.7672 147.5775 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 272.4471 135.5775 Tm -.005 Tc [(https:/)109.4(/knowledge.whar)-24.4(t)9.8(on.upenn.edu/ar)-24.4(ticle/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 123.5775 Tm [(corpor)19.5(ate-go)7.3(v)6.4(ernance-in-the-age-of-cyber-risks/ )]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC .72 .13 .67 .01 k /GS3 gs q 1 0 0 1 36.939 414.698 cm 0 0 m 205.5 .062 l 205.569 -230.594 l .069 -230.656 l h f* Q EMC /P <>BDC BT /F2 1 Tf 14 .0042 -.0042 14 70.1976 385.1638 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(ALIGNMEN)14.1(T)37.1( OF)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 174.227 385.195 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.203 367.1566 Tm .0351 Tc -.0175 Tw [(CORPORA)63(TE)17.5( AND)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 162.6191 367.1916 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2084 349.1566 Tm .0351 Tc -.0175 Tw [(CYBERRISK)17.5( GO)10.7(VERN)-8.8(ANCE)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 221.8852 349.2094 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2138 331.1566 Tm .0351 Tc -.0175 Tw [(PRA)5.3(C)14.1(TICES)17.5( SHOULD)17.5( BE)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 204.6024 331.2042 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2192 313.1566 Tm .0351 Tc -.0175 Tw [(CONSIDERED)17.5( ONE)17.5( OF)17.5( )19.6(THE)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 219.8999 313.2087 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2247 295.1566 Tm .0351 Tc -.0175 Tw [(T)13.6(O)0(P)17.5( PRIORI)14.1(TIES)17.5( )19.6(TH)-8.8(A)63(T)37.1( WILL)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 230.6789 295.212 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2301 277.1566 Tm .0351 Tc -.0175 Tw [(HELP)17.5( PRIORI)14.1(TIZE)17.5( AND)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 195.4928 277.2014 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2355 259.1566 Tm .0351 Tc -.0175 Tw [(MI)14.1(TIGA)63(TE)17.5( )19.6(THE)17.5( ARRA)45.9(Y)17.5( OF)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 213.9894 259.2069 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2409 241.1566 Tm .0351 Tc -.0175 Tw [(CYBERRISK)17.5( F)83(A)5.3(C)14.1(T)13.6(ORS)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 188.9205 241.1994 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2463 223.1566 Tm .0351 Tc -.0175 Tw [(F)83(A)5.3(CED)17.5( B)26.8(Y)]TJ ET EMC /P <>BDC BT 14 .0042 -.0042 14 111.5432 223.1762 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 .0042 -.0042 14 46.2517 205.1566 Tm .0351 Tc [(ORGANIZ)-6.4(A)63(TIONS)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 165.12 213.228 m 188.12 213.235 l 188.127 189.485 l 165.127 189.478 l W n 165.12 213.322 m 188.142 213.329 l 188.149 189.485 l 165.127 189.478 l W n 160.468 218.668 m 192.765 218.678 l 192.776 184.083 l 160.479 184.073 l h 163.584 205.192 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 183.227 202.945 cm 0 0 m -.098 -2.881 -.577 -5.075 -1.439 -6.582 c -2.298 -8.09 -3.64 -9.224 -5.461 -9.987 c -3.275 -13.463 l -.261 -12.104 1.94 -10.1 3.33 -7.451 c 4.391 -5.463 4.919 -2.25 4.917 2.188 c 4.915 10.384 l -4.673 10.381 l -4.67 -.001 l 0 0 l h -12.64 -.004 m -12.738 -2.885 -13.217 -5.079 -14.079 -6.587 c -14.938 -8.094 -16.28 -9.228 -18.101 -9.991 c -15.915 -13.467 l -12.901 -12.108 -10.7 -10.104 -9.31 -7.455 c -8.249 -5.467 -7.721 -2.254 -7.723 2.184 c -7.725 10.38 l -17.313 10.376 l -17.31 -.006 l -12.64 -.004 l f Q EMC /Figure <>BDC Q q 1 i 43.142 410.581 m 66.142 410.588 l 66.149 386.838 l 43.149 386.831 l W n 43.142 410.675 m 66.164 410.682 l 66.171 386.838 l 43.149 386.831 l W n 36.939 414.698 m 72.347 414.709 l 72.357 382.763 l 36.948 382.753 l h 163.584 205.192 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .027451 .98039 .8 .003922 k /GS3 gs q 1 0 0 1 48.064 397.214 cm 0 0 m .098 2.881 .577 5.075 1.439 6.582 c 2.299 8.09 3.64 9.224 5.461 9.987 c 3.275 13.463 l .261 12.104 -1.94 10.1 -3.33 7.451 c -4.39 5.463 -4.919 2.25 -4.917 -2.188 c -4.915 -10.384 l 4.673 -10.381 l 4.67 .001 l 0 0 l h 12.64 .004 m 12.738 2.885 13.217 5.079 14.079 6.587 c 14.938 8.094 16.28 9.228 18.101 9.991 c 15.915 13.467 l 12.901 12.108 10.7 10.104 9.31 7.455 c 8.249 5.467 7.721 2.254 7.723 -2.184 c 7.725 -10.38 l 17.313 -10.376 l 17.31 .006 l 12.64 .004 l f Q EMC Q endstream endobj 416 0 obj <>/ExtGState<>>> endobj 426 0 obj <> endobj 431 0 obj <> endobj 436 0 obj <> endobj 445 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 51.4388 643.5065 Tm -.005 Tc [(I)14.2(T)19.5( Go)7.3(v)6.4(ernance Institute, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 146.6864 643.5065 Tm [(Guidance for Boar)9.3(ds of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 236.1407 643.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 33.9117 643.5065 Tm .04 1 .83 0 k (11)Tj ET EMC /LBody <>BDC /GS2 gs BT /F3 1 Tf 9 0 0 9 50.9117 631.5065 Tm 0 0 0 1 k -.005 Tc [(Dir)9.3(ect)9.8(ors and Ex)9.8(ecutiv)6.4(e Management)]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 195.3292 631.5065 Tm (, 2006,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 220.9904 631.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 50.9117 619.5065 Tm -.005 Tc [(https:/)109.4(/www)60.6(.isaca.or)9.3(g/K)11.3(nowledge-Center/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 50.9117 607.5065 Tm [(Resear)9.3(ch/Documents/Information-Security-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 50.9117 595.5065 Tm [(Go)7.3(v)6.4(ernance-for-Boar)9.3(d-of-Dir)9.3(ect)9.8(ors-and- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 50.9117 583.5065 Tm [(Ex)9.8(ecutiv)6.4(e-Management_r)9.3(es_Eng_0510.pdf )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 51.4388 571.5065 Tm [(Este)6.4(v)7.3(am, R.; J. S. Net)9.8(o; F)10.3(our Steps t)9.8(o)0( Integr)19.5(ate)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 236.8066 571.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 33.9117 571.5065 Tm .04 1 .83 0 k (12)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 50.9117 559.5065 Tm 0 0 0 1 k -.005 Tc [(I)14.2(T)19.5( and Corpor)19.5(ate Go)7.3(v)6.4(ernance,)83( )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 172.4686 559.5065 Tm [(COBI)14.2(T)19.6( F)10.3(ocus)]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 222.612 559.5065 Tm (, )Tj ET EMC /LBody <>BDC BT 9 0 0 9 50.9117 547.5065 Tm (1 December 2014, )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 124.7662 547.5065 Tm [(www)60.6(.isaca.or)9.3(g/COBI)14.2(T/focus/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 50.9117 535.5065 Tm [(P)5.4(ages/F)10.3(ocusHome.asp)7.3(x )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 51.4388 523.5065 Tm [(ISA)5.4(CA)]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 5.4 0 0 5.4 76.5529 526.4765 Tm 0 Tc ()Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 80.6528 523.5065 Tm -.005 Tc (, )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 84.5575 523.5065 Tm [(COBI)14.2(T)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 109.1265 526.4765 Tm 0 Tc ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 113.2265 523.5065 Tm -.005 Tc ( 5 for Information Security)Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 214.2771 523.5065 Tm (, USA,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 236.8148 523.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 33.9117 523.5065 Tm .04 1 .83 0 k (13)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 50.9117 511.5065 Tm 0 0 0 1 k -.005 Tc (2012, )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 74.8513 511.5065 Tm [(www)60.6(.isaca.or)9.3(g/COBI)14.2(T/P)5.4(ages/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 50.9117 499.5065 Tm [(Information-Security-Pr)9.8(oduct-P)5.4(age.asp)7.3(x)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 39.7789 24.9858 Tm 0 Tc [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .73 .19 0 0 k [( V)6.4(OL 4)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (8)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC Q endstream endobj 446 0 obj <>/ExtGState<>>> endobj 6 0 obj <> endobj 5 0 obj <> endobj 87 0 obj <>stream AdobedC         #"""#'''''''''' l" s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?f͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6l endstream endobj 88 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''l""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?撾Y-flٲ؊nqzlbb.&9:vٳf-\Xj ilǖB-;6lد<ܱ 9u|[ٳbE1.CnXvlٱ͌ˮ6Aٳf1 6luiY6lꜰ8YW%vlٱ\yh&~omۑ`G)u(+cޘ(26rޝZ~S+pƕ4io?O: _-͹]P(8E oeS5<1/o #u DžP~(w}PqIzxkm|4OH#Vw܎Pcvs(1{|@醘"ҴƴQzJ72/Ϯ$C1өǚ|kFBA(&Wݺ}X0BJ]h;v\|p$s1SE N#PO%jW5>H^F#a?F9zS, 't,kR~C[7)|DV̼=}d+ n>:Rzf!!gZF[(QRwIW#1z3ƃs\h۠˩Jxa㊅S\m<4W/7sWlILnMN_52ᕾX]آۧTx5)tq[ZS/nlf|s_z u<?[T'5E{֟Pխ}@?m}?O\ m{6>pٷ=V4 y&/gd|u6l4ě=gy8y$;ݛ6lO63YbO‘.͛6mfq u{۳f͔2#*x=͛6`IF]rC`f͗Zf\a54xf͎34ˆ^-ݛ6lRck|N͛68^R f͊4˩"[c'f͛S㊩(Гf͛!Ū;d=0HPt'Fe@sDٳbl 죫`i&^Pq#\pE5Xd$ywr1.w;6lDiZ\PHqf͛~`cjsu؂=͛6YQev{kf͗ȞىUrLf͎nCr9q#vlٱ0đvlٱ;+Lկ\x'vlٱZc9xcH#+vlٱE,#rL b"En]6l3zSG-A'$6"fɱoQR6 |}q뇶. E4-U´ΟM\!4'l2[ (D-OW )s&%*]wQ:5caG s @|q%Fl3"ʏcXTlYt |NF ,I8&a85W˹ƔmN"~#,K#[?w=j{ji]֘}s,eڃV0n|Ij+Vos,1? Ucנ-QE)?D}$.59%5>,yjTd߰Ĝ~sTeAEs1-H˨7ݳzd  z vlU]GliLOO+mo~o6 vV~_`OוA|qqEwaNF:nC3P~|u:w RƵ3#"V8In:͛65Ę;<ˇvlٱ=qʨ6lr\"K/7f͛.FZqs<Ar;6lije2OA̻6l\=$Rh;6lف%AU+iٳf˯|i%l6lrw,vlٱ,urf͛(osa#+ sٳaƪ'TjCwI,QrFr ST@\x.~dO f͍;uS1's6lG|NUr&;vlٱJc eT񨛳f͊2W ݛ6l}sTbu9q#ٳf˭q:f6lإi̾Gf{f͎]}>g5pd$6lTS/lkԓff͛1Ƕm>v?~J-O ٳa@dM 'UU*2k R97jeK\'v>:rEN]+;gRǮ {d }!A:c YNQ} _8XZ1}>xă8c?Vn3]-s$Tҽ`$U؂bR{ff:s DF*)"#%EFOE zC[(ٗ)ND%#1eZYJw\1HcU5|q@3"Je,lPPqq|Ia512@17LZvpeUlZ2DTޅ{@Ai!j|i(s=ޞ'O8F|%-j_o05(~Lk ,kpC|X lJBWaA5'4O Bw_ו ak] M%~&bl18ÈJXi^}r}jI@v =q+AUEN/sFr>Xb96&}{ʺqk;*ֹDfx'R R95 q;6"_\ֽN>0̡#= &$D}E?z--}֠olٷaFs$K8}_쏐ɶly?wmzFB:l U4\xo讎pR[+@V>5UlB(>G|ue2[E5>tXN,@ 19i®M Tzi! fS1u'yDquP#PNvFu+71'Er:|+6ml(E@XԞ~$#ܒz E|zz1zrY٥&{ &Im<,cSy*M8#cnbE|R{ 9Q^ٞzo|-ӹ WqH+W%pIʮPq9Zf^;X`12O_,Wo߫,:e,JU@k1 o㚧`<2z⤩cc9 W7;~?<~`?~晨rLwQ TYcVޟo\o2Ԯ{`uNDokd /tgij(WYmsp8e ^N}^[ќj׏mǎ#=Ъ s".ŔB3߻f '"Hd96lُ\pc\.͛6_|\qM{f͖^t@ٜcAٳfƚbce"=mٳftrʦ2~JI;6lǾW.nr,h:=˭5呾xٳf|[/hLcrٳbpL]p2A̬\#pٳ`]=-Rpۓs.fMٳ`F8o 5bglN}γ$ٳf&sS*$IvlٳflPٳel lٳew[LLAٳf'+j 盳f͛/7.Xl{cٳe*'ٳf7Ll@df͚Ur{e{~:6lجoI::1nv!T$r š@b*փX)+8T_MbI8Ox~$r{ᎉwk(6ߩ«v *IdZ[$r,zA#oϣf3Ӛ{tG/Oᎃj#9UA4Nl#MSݎ|^{cARmgk)Z8dcQ8X#RzO cxmM{)=Fos6W"MNE]QI5o,bo +ޔɤNd72}˒Uza kے{(>A^2ˎWk*|#-GlUyD1J7H̼!T65/!`OpsNwwFϫT v#S :|胕.SSLS:F4e?3k'#\nę{9?- vѠEsшD~\v@1$%nNs1 MK`c/QfGE++3T=n~ސ8f|< 12ktzR?0B-Gt_o׎CR?߈nxO*?^ZIؐO);G,TbҸvVjC-ݏƆ܌i"9@w=WwU>[НOܵ =WG>iƾa2 IS蟎zt)PYܳ {djL]Y ?3*Ơ|צIGE -Ɇ3&G|[c'f6}m2#J)A#9<u{)ZiZ]:vX/#ΣoFđb:q#*2ڬ{#x6;#~Y*2c{ bB2OHJ?Y~_X|w%aB*{c)NXl^"`XwG:>;ija$)߁b#ˮ_,-IUsT>'f͛,eLo#׊f͛,r e9[. KzRcz NYL|!#]z('1%>=H=R( Oǩ=f˦=2+~'ee]ݛ6lw. 8f͛"8.߮d╗/ AٳfXޚ0x .ڃ33ݹڃf͛8qGwO3eٳf\aٳfj͍ݛ6lW6V6N͛6]sW*q#ٳfˮUrceD6lueaB_f͛_ VmOvlٲLf^ٳe0uSFj?m?Gd9\>)"f͛yGBZo/G1"O#z]>>4ƭ;_gb}ٍ SIVb|*nF')H(of7O>%a>p{v4V5@[p9oR) +YZ "?Er1DT8_hXm#@9v^QZu$ȜrLjd9ȟGP<VÙbJ(Sg_ӭG9}NY;G>?nv;;oN OĤހtF43TT:fδ(6,E3P5i'gڹeS+, U(==i!$ CVjoQO]M?R2ɭrGIY9 ^ ܵC(= wǭKAԓ1nr;ݩ] yYNWUdg6bӃ3}U8bJoh䓍z9Pܒmn.dnm,ܼA;Sz:=j>U[I:lWg)kԁv*eɎ)$zfd3;vzg`@Pw3R-ĨXv;(2zt8$b3#3- v=O9^)[.5'r 5X$ycFA-Г!_j|q2 ||: @cj1ǜݺX\#RfW #Z|0ETD'[T8e"Dqz,Bv1$2-8sAQ~eyiԓv+0TVʣlj:m2A&T| bai&V>8<eUَC\>8MT 2m"ow rS[xSpl!Q1J Ue* rUI 5{ծ[xKX>32hHW$)"E58vip8'3dNgywAՇ M_ΑlˍC^yHCd|2J(ǹۦuR1;{{{H" DpDQUFb|˫6h!\T#?ϰzۜyAsZ3M(ZdQ>׶BJ!bC j%>4L`biRyݮs$@m^si<%' _T ȿj$O3I$'wͯ}S^ͣI-*E.B0Ƨ{c&ܒvG" WF0#b= /MA qݬrhcVf 1$&P,Ǭ  Kg-xIBΧ,KPzŤ"t^M v""_C~CX +__^T;gTȯ΍q3Ko#0݄ybo3[P͉2~ Oi0`5HCm; *FkV,Ku#sl1G_њtXTP KYyRWc|&E9rB͂8Oؙ~HB?&8 44=cm~M,C OP5 =BKN[zӟn?SZi?>XHUidj:!6͖dbB$SC]ר܁푖@u4Ro OSX/'KxҦjf0L:#Hv.ŀcP'Z׺Keה'$_uYyaJ}dQV@(2-qsx"$XXUE#T{b׫GQBI/,H0II "'/}&#CN'Bq1"JIlO N_PIV%<٤H~P4RdhdZE}Fju<'gX|c$2ڑ[& 8eIށw=~H9Tq}Jfv:tUJ}kph *BKX3nko|њGoR_z]~Y@,Wk:K[]2|=1%qmk>|o+sf͊P~u` IpG1'$2>O"M;6lو3N,V7;X$#r]rWk#^5kmy{y2;~`VfjzS2tLyOiĄgD@}Gp]],5| (D(> Rzn%,4QRNJ$NIxk;Ⱦ gD7!ESkJdICG20lH:8ݺuN?Y9iH>1,n?ghv]~ڐ/%uJGS+:@כӬ%T_Ɔ30%tcV?mp~XRMs-K+[CTҕ>sTT~R$;v:q`1ؽGӋx|%̏-2Oy$JUcT}G`SԉÁ';;gDZPvv.]+*#TvbWJG^ e`rǠPc8$j 2H<|*]Jy"ogAlQ9B:Δ1WE{z*{ak*bph=* * W_ 9 "[@4ynSy=M64fu?DUg#oG[^y+5&Y,yɊ'RJ6:Foo_l2ˊ(>x!kqg$oD҃#t^|ф cmZTߢZĕ?8e|E@qE :GnB,mBq8mۏz'٦ǦX=v9. xzWs15?_Ֆ_j hN;0|sS,;#;SLQ$; zw``+M}zh:0_3h|I~u[٩ϵS~C>g c!}:VϖDo_3JRvS5-+RjS 1E`@EeIWw4^;u)*kN|wO=w<:׬{$Y[BL#vQc3jdZ&0^5Mpj=}*~8lMOkvh8rP'Qo~<Є#(1"ͼB˨b$#S+ ¾;d %~d0ݓi] MGj.O~Vy{7zEstIt}P؋;Dҵ J!knu5( Xz/I$< kt/Jv3\g!gӜwP-H1IOF]_V,2H47I<އI=C攌x]XЍo.y_^QV2ΜԜ1 r7)RMn-/,Kp9*9 T Ik,1pE] @7<.mkY5 dC4ʣ­N}5 uoT$$ d^4AĎ 㺉CS*'e1e93 /RPUo߾{5䃉ʣe_g9.!1slc`.jg?;!/=J*Mk,,^q-VDp i?ʑ;gϯ]W=R j5#T I Vp[T%S^]`,N\wa:#$~dކ*\hEF~+?H!Es N3UbK5ߜHz̀7W~ pnod?LQpA}^O펡q'PgMܿn'xRtyg{\P{ضޱ%1F_e6z-XLeҤiO~~`zWTwϿOR-+ _Z͕ίAp8)_O72V!Sէc+Tǟ>X]ƕxxLVc:ZIzY ?iu4ۚ_j?_s\c2ykKQUqN* }1?qkƔ%o7t[7 xg?j8to98W-2X\js𹮔BH ڀ7V[)^J{s7Pzycܫ84)0@F?O2_~<ܷ Z*=[9g u4 fzt[\MKr%nc_-=:.0 2* kX\9x%k)uT4~<}J{@%A1QqZ҂?v-ƒ־CC<ƀզR 'ϙfmy%$Ei/%K['=Dƿi#2@ 4;;] R-$9=xDi.HYP91 V=lba 2xgOxD R#{>iP@BPǓ,<9!  jGکf Ki<-/-Mȯ,3D#;7X /ogxF6fdvN!rM"$rA,Mu'&>U򆁨C/渔V1HdEM~?Y哎X+䣾Yu"l3'jO56Y vyVZ׿,Kז}eZxiWp{t|o8Ig|Mp$} C]Wi$b9,Ė$I'9;yRM6T`ioFD#H}J#>TP#HSbUZ=vmdLacۯ 7͞EKhe1Ԥ $=8׫?ÞL%ĆY8=x*(z}OYhڙ gCӥdR~0QΡcK 4$a iͮ@Rޛؘ cRAc9έ~[jCW`)(<̅"T3]BG, YpMJM'[{HY *UFA7%tZL ,/H#ېcn6=dSmb+CGq%;u5nv= 9'1_ ͝ky=ֿ/oR,C534nE}3&ImɥuoD)ܩV#. D5]Ӓ3` tHbٰAl.,Op޵VCԩ" V== HRZ͛6Vlf͛6))2p?{ݛ6l<"SՈƛmӆ6`:a~;PE,#\l.k&87`~f͛ 3efNKf͛6l.͛6lٱEP+6H鍓]͛6+W'/hNA>0j/AIU߶gC@6l؇]2t,GXȬڶzc%Rh=ea/q زObI>[8{/K.c甬nObI>[0Us(Z~< I$փ"|5[`r@w8Ev΋FJm"n/L]Z}HC L8dw$wi'቏I;w=v- vxKo,zmĆBP8ȸSPx1F1' M2_Oq}H9wĝXT}VTANqe{8V XVd[{5ȱG}o ԼGq_GzS[Sz&ѡP/-%T:ɢfB$$1ۈB='=CiF$,1B'n#9~ y/P]ҬO~lUП}ȗ4ƽX?x=~ ۗ}M-̪Qx&RA( }8Ef۹z<23OA|ͤ_Q\Pj>9}cdcԹ0dpEh?d!Dv^dJ@ b2}m-YF%\;05?^}kagbV:,(#YK@7̊s$ac9?@%[j5rCoY cG'Yi㠆TNL j8n-qVsʜݲmJfG--]A'݆ZXGQS骠u'EE1ťbzϾ\͢8FQD9W̰koFw쀂b?8(W%6Zf[ӭ-xԴ k *h70w9ƼˬI/uY*FSBHzҾ*prY*ZAouHc`QBOw5@<ϴҖ\ sȜ$O. w)fC ' FD+ngXL:t'Bf?oYf{όIOZJjwnt͏M+O~1UOްx8t]VȲXJ3VJ/_$h.;+b+/w KU\F;dvMNw}-NCQ!$G(O7f6]a<">Q7y?־k]q*1VlOcyT֬;WJNCڤ|5?m[3JZWQ\6k$nXw0*xS5ޟ-eʀOgfM "7$ڂmjkYjI=D]ceLʭ_򸝷r3/!SOc_V{a`m1e+Rw^.ٶ(j.QHl9+ B4Dnƞ.n)I6U#}c^kƖ^,׃ q~ uETgGFJJzdnrC@2ܟUfNZ.3'94~c惷GYԌ8pBp̉ :Na(@.dgܝyqy7NRyűh7Je,rkXH湇!訳I97tԼzkK3n/[_>c|խ*`mDlέ>JA'#ogjH,w3s$KQ@uw盎Jۏ%r+:QnSVB~"o~xw2IbjORw9`7f(s;H݋3nƤrrfWros~Pc݌QGTms+< 6iOHKmY:~kr6e?씌(b8ꖍ8# t=K(Mk8˾ gw~7g-kl4Du+r}"%yd}?_" #h*~32 {y]wIU_]ۥwҊSؤF?h'3q>1܎\>Q]>}a!Z0o5 =iWŚ|e0]Y74X_Ѹ#y7r-W{;@xv^?T?K9)>n-I*d?krMſ i#';uw?c/mC}j^# /--^5 7ׇmg|vvXO qFZi,E8>4[eqSh.Q`\?bѿK2BBc濆 =dmEjNb0/a1^.dirՎA[+î%4.j7K^V1+;aV*-ݤMڱ1O4?VfOSG癈z]wwA'c@w(ꐦG+F5,t]qv{<3O  ~V19rcY0~Vf X╇dOϰqva}_`-5/6j*$z(WV ǘ*VSdmgӲ;'ݑ; nL$0dC5w=pga,aЄj񜹌.#g[_xO1͎˪r2##<3J'MsW kQKk8;z*Tn~Z u2D1^MFk5[t14کˡ"viW ijHI=I>-&Psi3\YNyf'Jm9t=gMӣ܀ӷ+bPTӮg7ڸLF},rxd5x~v~dKc6q␜ \Wޝb 5.vR{Gi:ZRFZclUo.O/4qĪD,?cW}©,k/\;T".G/G@l fjT "80Zێe[UAaǪr%:eZRڜ9+;/CǏ+>┥71zq$5+-PDHI2a`eqE턳i4s Oz۬ВX?ezq(\Lj#̦%cQ"?q1QbF_,c0=0~!?0;MIv;f0BgZЃ2{i9\ Le FWվj~c J#TWQS\kF!ʽhs{nK?G(n* jPҙΧum!鶴JdX.K#}W.WQ:)F >Zn㖢:)Ƈ F;FQ ]q*v4ڽ'>5(ԃU .Wo f͛6if͗'A?{ݛ6lFH US HHT @;kV!֬)7V-wVv7.͛6Gfλ6lٳf́͛6ld*phZrӷ|M, xevlٰk",q[c܂{VeV$ss W*#Awxh;6l4R9uVS<} |U$ɷ |⃟"*{(2zpi (P2ÃM9Ca|6lfC@B7XmK}O|%,RYEKJ8GnX$6lt9+^Įeٳchv;SA*h,taڿ#ӣ{Cz0DxQr.zژu+6y)Zw'< kz-bU : K?.3.5P(e|9գ^zW\"DsOƙ.4˫IXEZ$_N BKt7swg|F@@Db ˟{g5/ 1ԉ"1m<&z<&#M5:WV5M:īO ~1F t$,iWD:֬9J =w;Ed‚6DgDdC Ԝ ~G0mQb@J zצOIhTe@>'ҺN͏՗,/|O[HCZG6zJVFz?JVUN-?}zsQ߃|)M::C! vtPKM29MkjIzKƶӷG~N+tMCaҡ:w"?_M~ `/퍦o1+/GC+e{>6<:g(1#N'Dn5Q>Qa w('ԠNфw')W?9i1R,ZKj :=$ذ_ 7W<-lƫ;%zldQٗ-_$Ҽ=l/Ib/idhD/æ" FGdb?FBYjQO'I]CXRToǐYß8 w L|LhP##QUGെ=>;/pz;rs P[41#P(,tίiX}p`|5=ajCowPSa"\jq]DZև`r*b?fG,d, |bG ~ !:ߊ[xEY_8yYgr9$A꿦 &|?CZ%GV*jHjm_|C6+g}5GS#`9 ϛvidjN`Gan#_^oW&gKI/2bH%ۛ5 6u 41Tdg%wٚ'9]3!LQG}evvQQQ_GGO'pZrko NpȝT$I%OllÔ2a0\VjT|8- .#6q?̀a\'0~ 7ET쑆C#45 1>|93y; jڃk*YhR:~+8[(;nqW ^4@rSeE<r?+FM[A"oT,ՉӪ!=hY-?͉]RUCJz:n?\Xy ¥i8"gk3̻/O?SW)˿Sŷr% $-Kq.Ϩʀ½=PlVAn X2>m]/HYAOt6W|4$cł-Wyt4&Q}j LUOU|nC*ٚeZı9O/ݾ7UdDܗ]ܿ@*ۨ[jtپ&=[apXp_*#Ve-e;q}F}čnm*C=}6_&"q1Q1ޘ/KyUK WoX OSzt+?4AH.Eӑ,w?`Cǯ3z[%4}V.'qyR_S|mJ?.e`3VE-J7`=}H/'m ӵm* .waz<Dl{jrYqbR F9@K>VH5Y8e)DFRg( o.VI90R݈rӸWR#7AL]xהNr)ogq,Z* L?/C˺5 AakjӋ@}`@Q&Iohcт+`UΫCv V`YuNW{'Ob"ɄB뺧+*#sIQM9tMcY[Y&偪f{xPʨh}Em)V1u%w3ΒZUd]MC @_ 1\j_l%•G,~'_N&<Oyt`G3dǟ|<#\ֵ-2kf1@*EK%w ?)[;,G,dNLV*i+jA,YV;gO֠O0Ctpj~>c޻EodߢCFEYs ,-3"x k/{K쬟e82DȍHQ?>tvwZ>ǗfL%" "@2tWQ\ HGg^=$~Wxd{ӍHH'$ ag=V"^VIi<ꥶxjƴ4PsǑCۘʹ:m~d4<2J7'p_U%J,NFj.߯85{5XՋ=iݐ9nu'eh>Ϯ Xb<v8* 2Lec6&ӏ+{Zz05]R(g*$>_ltt0u}·7NG"歊r]6KR#Orcf]fhj5X! $n_c{C:f8OO' 8Ir2I"e/>d;Pr~v!^zxo5KK$2]M?jG ?1`ygm׉ɿO<.ey9Mw4O))=D'67y>DQ;y}[w-V(cXy9,ORMNv G'A<? k_z֤3 vf&bCg)!.q8 _y}!>ζ249/_R_j̚%z1UBj~mًI$ԓ$fzmٳf͛6lUٳf͋AŠMKvlٲwjZFE r=;G1XT0d%m&E7]qA:~с"OCv2466lf͜;6lٳf́͛6l?" 1M|m[8ROsSr8GA\rGsf͉M[jTAz 4i5-M%=:=6//Of"`ZZPFZr䎔$U5߾tOZ4W"M 3dB~i=6γ~NLJfjrg.\F8"*_H'leÇOQ$̌q#GkA=KK0QK hDWW3ȉ'qL1oZi$-ICޯ M=%ڏ#{ n/NK`Ɵ mH$YloiR! AU>֚柒lM)z̈RD;*u8i7Z#Y@H1GA\Aok,hT@ /2^T&tiϊJF\8USDN Ft>Xro)rmr*.K 20˼#XPP3w3Vז_^DpiLg~'%r?yjvb_!x Y60zv 6~%s@s'\uǙ݊:lB[H1{S9wݤ~[6ɩ,h(6y5#ZQ+0KQFs'hG[r e(HEs(]ru-!y%߼Bh:qo6Y>a+;0P]]⌉"T"KY ɕW ըvy},r"FJa4N`D}+YS#֫Lꗳ^Hdłe_cAI j2Gai&[Hq܄'#pFŋuI?8dOfG/ eE$_ޜ p" DZ[M\[)YA(JMO:-LI)K3R6xQ[,Lܞk=蒰QL4[{t1 (©ڎt =7r*Gl%<'hֹzpU\*W t?]>oE*S sRO x n2;|tP(:ЮbPGj|߯+~@OҤ31݈%5RԆxV!)O%1jXuUND}?,Ѐ=uggyb[RxXg&`ja^徲_.#vx#vgmE =UKM<,NGdaιi]V"6C>o۸%=N#39#Lasiz֡+Dsu6TȖvϽ < lnx>x)_)Ŕ2pa+͛6L/n-bkrZ8wJMH8nlcu'gK;!lC/)IG/Pށ9}O7D&g=1Zg{?:U4Z[C!);^f4텚$NGT?겿G׈L$l~@hsālA_y[0Jq)#y(0[@V@QXoۚ${Ljrꂍ^5 "}86?"ZMP_910#selIþ#c9#I&W"}Zq4 7$ʙ>Z1yO2 kиs'ݍ5 ")2j_թQքt tVIE=ۡ1@KQA_0<!+QI?N!vA r ((E1`i-h #N0^iq:saʿOn R8]W"{hg I ZTā#2*v?,.{C#~VȫQ@&VNJjъHm^T +Z5'_čQ2z=<~chє'/ua0 dFX) 2F@ZtYݑmU~tGne){mQ'ԯsYZ[ [\T[,2Yd\OYP@˲wbTvY@.俳H^2#u=4# IMZ  Qd,>-%2@|]S'|wk=wHb6ꮄ)_(|fq-ʏeA㜃b &cYLYq.eƸc4cH'<?V822TNrx>%}c"]oG|^#sRmbY|>Ĉ=Gݞoa'.[8qG?lYys]]~۾]{7 R1 茬kF*Bh|> *]}2 Y.Of6R .eh-#ඞ)fQQraA"DlAΜ-oY\8). 'בa({HN& ܵ37Xdye7:y$e }@8:qԏ0q֧^} |lU3IQ>78Ӑ[Ki LZ3dBPJcsv :6(1rQٍGM_^/!Y/J:XH@\"ZžceKJ%[BZag+^Vբ?/_, KhX}._F8\Dr%\Of~(&[oQ|G$cYPf)/ɗ()_xQySKaQ 7U3j45sbSz\a b; H_Lz+:CJ:۴CI}/8 1hUS(Gs}c|bXiJ}ʵ?kQ-cvZ}ʾ(vu_*A,_֏~^λs/O2[_,1ܑ~7tAO>ϖ9s,L؞{t|6ly^t ˭E}HV8!rO0ǧN>O4UBx*:gCپ?OKe')"C{+>.-x)O|sI%=džLm|󠛡$<^.CܕIso|ߡ](@.&0J #$ZFm3][9lsK$#6W7c򜥫R1.+_2jjT歷qIDW'8W R-n(Ge|+4Q\('V̒vܚ o13j2"92JQe+5yQ4 rdR$ H~6aMw9O6/nΒ9-(mڧTO3C䁵~y͛ =xtI?08EFÈ9<^X;oH07 :fAL刼/{J\TR%U^#|eהEԺo_Ixi)y4$sd'ŇS͔sc|DGDzNhK>RI͎rB? Hy[Dy$j]` 'sW\ddҭ@PQvBh8 ^ɫJ{鷚[I~(7"2C[ XQJj*"~XgQ^t=1[ {H8k`WM幊fGz,d8s<2̏+Dc21ØYYHy^2!_4Y"cɭ{ֿ S2GȈomNq=x7_Fi7?m$?\GKyWD*{J~-ygOZ}v6.j1So??y8fUrUvauk_R;h`YC w )3ݣ~Pq)ǂP10tu;?K ɕt)_It^<Lq 8RI?@#ڵטzHimHd mLpfxE%eG'b{RK+JZҵ$";Mop@x(s~#w=Ǟ"st=v.ǫ 8HF2VoIԭEƫ`Y}ʵJo不>ѦySk?5E0 4~ڕvgsծ}6e»`KcøJHڢ}nAE#nKKO%,գV)+Etu0ɆQ쐱zry=Qj^܇Er?wpeI5=\vQRVei"rjr2 9hɎS탴ί-ޙGlfss7 {Pנߡwu"rA%nA eQK}P-O>-nІ}LqX+uh6VÅv2my}:"xhzԏ1JGZ()'ߔaLDzN02\hbh,A!IA]O]̷-km;c|Dl|-Q_ޟ"L5kI9E=6Z,hpq˿\7F)/jͤ -\迠|ר$^Jf^ޔVFGa>c;DOR0zWۍAMj5l(:v藖{fλE6 rv@`c/V)A Lbl:= 5kviV#g#77BbKs{OQ )4xT}U]Dj{1 W &ؐOс&* :}<(sDJ=oGj ;|4ڟ퐿1?'!ri8NC+qoPdx'NhFS~<^Wkk|řI4REHރrw9T{bw; T|@Ly3/$x;Dxw0 5z\ˡ~/7Owtք׾`QNw9T_/5g~и؂Ʀ;Y"(eGo"á})n`ƴ>R|M40y˳68d RHؤz)#;tl/yRWC}~fɫZB{ Ѿuj(is#蟻u~i1Q=2_LGڢ7.4*.n!uGG\bs3C-[΅%r#lUe?#:5Lpӵ"vW4ƽ(ƕ>EsuXeGE_GM?ߐŗ-닥ϲ xy!<6l:) 20$Vrm#t`||U#n\~Y%ּC  ^v0Dױ;T'^A_ 20mJMpYL}-~JSn?g*?kq͸e_4湸 @._~"S?Z4 8;viw+ H?yچ_JS% 'Ŀs]'4}♂FQPdyOǫiBeGSC"E=_hF0m=/_b2 7lPoVAGQ?>&?v<W[0N?V_\|E F6_􈖿6pVǷ+8!˒D_m!_sVTʫkmMӍ] _. kJ?vv]ʹn+ErD+ە@ s6<^Z/lC9QY Ń9@]D9UY[(}>Hיꖐ1852[;/!UB3es-{Ιm7/o))@:Qz բ_nHl?vk;F5Z1oL9OmlQôcK/>JL8?B9xExȇƫ]躕֕~՜ ǨAhP-U)!$<^8ςG>|Gm[=,&_F(O21wg8K,eeQF*QP  |5ȇ'_2|s=jżYRtE$;/gezId>q/I'C"K;ŢA4r%*|nhv'aAMYde$%CJG2MT j|^>8⡉}g@Gʾf$zs,z> sQ-y{, zr9M$o[)'YEq _>t%r8RBĽqw7:\d8A55Ţ0= bݱ%Te]VjqdA㒟,oNS&>Wᏻ}˧2EkUb{&^i#!8 ֟Vy-mV?V#M̗ g8}W V}1xRͧE-u=Q69& 9mRIb̖ޡ;er;*j7,=i)1?34:ѢPCK2ylgY?Fxwԕuu6_gR_ƵhzM,onڵy=aAzzXmֱ}<URd~9~=~9a}1ӓ8ώ|xhOdYbi`oS2G(]:OSo}]}_njaz?S)W8Vao6|Qϝ,^Alٱ8JNq%%u1㾹w-穘Y3 cx,;b>F~=F$QU#2O@qFqGx'|@_ȏ0/&Dyް:,?3\-sPw/֛y~Hw]6lelSלfyơ/MCJ?[f˩ijbӛ9ơk55sbYQs8/.??K(H/)ٲ#/l_s+gQ0_jC/@+se9Xlqrz}r4:1y_ٳf9Xٳf͛, eVƔDݛ6ln aM4) O sTѦ3 C@a׋.Ҍ'4?1)8NБ\şw8':$b>cI\GvQA$+6aqc3A(懷ίsV$AHV7iEN,:^|jG j/Vo1][JZ۲ӟb~`7tm9[Y]PF p>#JsոGQQs㯠} $x pcnt3Jgnr\Il0=忟nx^!^1^gyKޟ _Վ_*@Sq*^P*4SyV\t[.BBɸ\A)QNqM VFo4J !晾֣"D gǃC3aq p&@_ gQ:3aP0>$sH GTӶTR]ۊMF*њӦO?1O^W\ka|ޯ0"KH=Yu@Ԡ5o/L_Xdq~{<F#Sdb#ywÿŧ7qfɨw/_9]s]+ߙZM川]~Zl<y+zb^'eKx&PJ+ q퀵o:[VRCqVB>.i|{,X8cXLMrUԟvòØs9p{Gh!x2JpǐaÓy};=X3;K_jߙFk;&Q2$zёCZyOUu0In Or3 nE>? ,+9ѠVeNR:h 1< H㷹4чP!TcJ5SS&uyVZNwcԑ-):+_4{W5ݏ:PhgÜ_uW5݋|ǪŎ9,__~qow0&!IdHW?[} g:Hĝo˦rhE6>9<п)cs_ O9UpW<~Y<` ?-ߜLQ+%OX=OFs>klj2Ne#fS>g|՚h>) =~]מH& 5spf_zmoP))WMj7IQv|'^\TqgPh5`[a)b6~Vy$< zrXXtI}ObkY@\&N=+&8I'ٶ1P ?[&2>$WހW .'Q'R2oѶsNuAB**Ρ$?V zN u>9kn>$|1 =w탬XRA]45\-`/ w GwSjR4Xc. LL@=v.KDĐEQR75=yvMiu2')ã ϴaJV F8Am;*.jYU⢊KO SV%?:uNvn6%nUܨyB^ݵKxm@G}ҍG{s@cTI;?1 ںT?NiACO]qT!n#Iߕz[jh:En| \d ȃ˓bJqeP8Krho>sxn4M:=ĉ@E(}᰿pn+Jw\e5@jN*I'»(MM;'[Țl*\pCESodNեOo nLԢ.H] C89p_w9XFgÔF[~hջ[8wh#{y\ZΝ)o0IAFBc5vMWY N>1UHْUU WC>7U#?@NՓWm:6 c r\k]ggek32NU:'xOEV}.C)P?Ή28QxUЕe"cstYto0.hlR8_+OT2ƨ.=-Yw<'5s~TInMox;[W 2=ړL&>11 _^#On)B~_ ,PM| 4NBi`}9 $Gak&b W}$+]-cvU&oX>QXПc$Z@Fx `$W֣ƕſv n(T Ш1YTqp= S %;$;IJ)A0>u2Q/'ACr)`q 1F٣ZRd_~d5 !F;,{>-%m2WUniK]f>i\ cEB;8K:*\IvK"05m*JHeiyox!)K[ad#?\G;pY26L~Or8V{v+W}pHWvsb'<d}z)LDˈ?CthoOZMΚ@/tk8^s³jިOssK/ /*2Y54T֡?NrFPe xz˕>J?bqa§YɑcK(~ݛZ{b> ivVʆ;pѺ݃XDou[;&dHV7=sj-s7zI0Ⱥs6ڻΗ'N3[4Fe]'=*] | oω;}cyӟK VQ8ծҟ#\?GrokO㫿M]Gџ'w'~ x&Ni+N?Q?=6=24ƵFcZbw#-~wKվ{#7|llٱSf͛6l;6lyYtO)vlٲeҸGf͛*Ncm|{c)ٳf͗7f͛-t}N͛6lx~]3:p`ٳcOS1svǩvlٲ_n:Ǒvlٱ=?kS?qC;6lcZh tA$atBC:W)M!EŸP{=+5~X}svN W_"X OTQSs"6lو͚͊6l;9$JwNIu].{N?QD+g}}O1E%4« Fzw 4n?fuCWؘp c&WK勪ZMꣿ1@<0BDnC[p)CTb3DЃ3yGQUm6k|QD@+sO'HU?liay/Qx$Tt<.boz|yJ?YZi5>?Lp?6;_V8W_MC}پ[sY!%FCPFy̰Fl笶'!=G_,nd9?qʖII!jJb AOmi] OdqW. *@:NDZ~&q4Ù@LɣIY"*Rm"vi{0ʬ+GJdβG/igm?fQʿ@=TzFE@5Z<_W-. vI$PҼTý24;K @ *Z'{|_/}i4fp (KL>RPSDGY_ڰ҃-b!ogJ;n 0$NѓKs蟽8,c+4*{?< ˖b^gaZڇރdɧio}EG˚d?R1dY""HʎсZ1&. F8 ϖ&C[7_G}W"MQ'?挻CiiOd5eC: j!>x!t*̏B:'n8' {CA,x2WI5{;T?0OB:oz_o_?,(KkVU~x9/ԁ]1R6U=\P=6hi~yhp105oo&F;S3~9O:;m 3ԑΑt0WHsFzdo:N9W=3Pv?g= eM뀜S=RR ծS7).9߭7Y2B޴vstSQrWdbBZ|X^wqU?+1r%МFɗ".Ax)Re`!zC(FN<:4W ğ3Un{35kB;gxO~>i5ɡ^;G6)q~s3$7Yc }:O$W-"EfSqo ΝQw~Dz/s #ѹA_J0~jC#Ƙ{;-Q1Zk?,A #s56;/Z1G Semp&\Zޑtf)A{2ц !`=HrnI,!u%+pەCđeq {'SMWsOqU`Nof)R@VRc;h_}#@:Ly2q H"n;$`5/=7o0&t'p~a"NWztr#rOq j|\A?~y^6rTQro#-j*AM<Ҽ(_(.*WcQ&W9LFsi0wɃ1g!ٿ0-.4&V$'zFduOs$H"lA}Pi^lXRZS\%6IͲؼl j /ZP)HM= 8ΙMv&h!.stUݓZ5lv:'4~.ȑFRxJ#.L:C"*Ry>G܈=R 3'U2h'tU)λ( bG)u (ᔴSsnp8$P.z~%_.f u>7R$ik0g@*jҠ'Y"SOb0laxfb E_>"X+8:c5V?CK!c!G;})6;> in8: twpQGc@d$3,Qv>U]^y-k@%6;E@e~ NR>8o-`_UP9G' @CW+2&Hj#j +8aJvjЏ w w28FcBEw!e1?R`'.$ l@(Ӕj6=(4pL*v [bRiƒD݇hVƧ5BۯpKn Gſ7 dcN]= rON>R8!98~Uaw^dZ#bHovgk9I(RGbNMO 'o#NDv*Ѓ, jimgb 00HT灓W%I'1b ত?@OFn*>*t*+N_?rOOeaw9)㑌uO]ѮE ӷ/u`X4z+OWϥxEhk{c[RIWvj9m+=B, (K?[EૻdnlI4%#-/^u:04 wOJYm:&Gcߘz8Z5}&?vtZnщ"xI9НF$Xw?іBy9|4_6 X_6j/YX/eᾊ_l a}n=,I|fͅz|Vbc>3pCڃ cH;85Fir!4\cCoV9cQaUt>ZsE$QHyI d?|MZY;R.\q6@ ˋt[_Cl&VBl=:#S?nkb@ k]Jd""/_ٙy`bqm;ˣ\ =ʶ,,j}eJiS( /ѩfHQMk?KBeohGeb-4QA}x=l )s* N Y"K0O+`RXnQXy'[0XV~ xF׿cZgl[{X鹼adq;idjPzl+GBCpYSfI|n,$kL\7&$,Q7sf0d(2_|WMI} JD`>|pVėk9}1ő&{ieg_ԗ>pW76K(OhusuK(ݰ2ZQqz-"\_M3u9G(`Gsl%!+1ީ.~,wdK|? XZ 4Q"OV: oG?O}o-\& ]8c{ouT~+7^ Вq sFO_^gү,=_X_⯆ bO"#A #KCs}~O=?ў<}_F+\"? HcjF3ҹ͞go6lٳf́mٳfZe-n*1>ꪆYp4iM?߰!oqNN/`'AK=ﰙljKQ~w\hASGLFٙeҨ6J$7~v[_FrRHc$O¸3N"IV1\\ۤl//6rإRF4L*( o1D } 11.<,zRU+,MՈ3%S.˗VB6%c_/)g3lfo,.cj#|As>}m dٯľ憛zlá`S2F;;%c go`a^Nη>$̚[kJ1SOdFhdH%d8 mfmA,ԏm} h_[]F$BWtgU#y]o4_IN>;euIu8=3kg:==HeP2~g31'߆|?CU $}d:R_䳡Frq-EwF%$}Kb'D@~GfFʀqwۿl{ IR@n ĕf-O+Ҕ0[8EmIl~});>[cݫ"[䛘Ksxх zs%?R]>w@iQUm7Sb KQ ?NL5{%p"M>N\L)Fngٺ[[gCN;;U tȮS{:.(okeoQ̣d0M+ͺ?'TpE|ڲKY ҄YON[Zr yt,?0Q>ubнv>.Fݼ3xM9+%GU+Q*doP Gޔ+2~/3!k"GAiL/@zl+3jv޴?~:չexuA rfR qR}~:Ft?HA_=Ǿpǩޣ5}by((zO 5`DOf: C% ߴ0H6w6EԙbqFVJtku(őx֤JgrH;J5(Z2?k."*Q1~AڽGl=>jlGIG FV<4nK~~u_-C%?|Ӹx##"en7چGsuPê2^1q9oӢ}_\"%aՄ|g#[s͟qJݤ <~>6)I[2(AS*n9AdY@^2Oӿ+2jOul1βqK&3cqtrb?̐?Ґ$F}1gA6Ѝ\?wW6n*{ңh2wF*]/8&2RrBw<)D #(LOn㹭 &(|1wi_ OJb:I {e#ƀ}8n?vE)?)934|-,G_FjG bN hni h#Լ6uFRM._u!= aheCXpˏ̏N} xoˏ䅿;f-4l:FI74ۧI%:n(/ B91#U;ɱC%\Wf5>_C?<6.{M't4F5(58HqTJTW*Rӻ"Gq/=86?jWe$p*BEUJ)3B+`YC.)"@BEC)VVaT:߇?,H(:?rƙR_&LSCk#ų dZ51;KWh|f dը ɺ90S|qm/{<bϦ\[m"҈NNlz>Ò/p=3}\aEZD_-_. pE~V/.,o.Y흣tB7WTzo1\NEF%2"BZ؂#{?',qIKWF+,+>2'/R,+zAÝV.{^5ɹH~|~RMe|YlN3IѭdxR|6o&蓑?Q/N,DD ;Pif%|=>LfY!/Otv&3,|Yz}CjmCBzwvs>-fr˸>`FpCyX/er_\-5+;u1Hb +ҟ\M ٕYÉǞ;SϛH{9Y~oFb*)o q,bZ%^e j"D v+fxq wok,"Tر#ӽy^$b_뵺XA$v}^tꉸiؑ+] d?j2.ۊg+X;'g/H::UЎXіM%7+iR}~ЃO..mYWqJ܍F' J$tPQHw1ഐI (b Zy{") 1FKўS=5(hDqӜĈF#shN ۸_ҧ#s$[P)ן λxtWGJ"G#q`Eҟcq^O6Cɤ4Co׽pċlTJT[^)۬SM Mz *|~4Ĥ*%xVܽH:I48'&'^ ,E7ژ'<׿F唦k?y5pYӓmFX;nOwo%BQb~7 V1ױ,{@h7ӟ׀wAu^9TXzGWnG_AAa?E:eAKN;m6 ӚFEoؿ>RŊ۟Z3LR?r9W q Ifuuz8O(l.#ղZkJ}%1IhܵLѼCOێOJ եFPKE/|T곋X?' ?v+Y l_ǰ~$=:2ӧ9mӏ~<uAo7#p! 47VhSG-Qս/WXxOx?7)넚Q#rOVmSՂzw A&_qf1ߤ5^R_Sѯ:W>wȱյk;[o[ wԴ9x]ޝWOUҟ\k*r}͙fϞߛ7f͛6lٱWf͛6lٱCf͛/+/6lآ;w_&FVvlٲS|ݛ6l]Hb+7#~7L'f͛3unY͉;f͛6X_+,uBǧٳf͛6;6lc9 har,ػ6lъF>bx;4y<P̰yٳgl1tȿ9qղQtinQ(?6/?ۦ;W }5ZT?ݧ'`>c~ǧC_9͛6y(Lٳf͛6*ٳcA7?YźVX崋6qgB &9 ȩsg:_duj43?=Whj1)wi'r-.# Gyr7e @II<H5DIf1~ʓHJM4wͷha85`vfqOW;G2Aɿ-P{0aJCwu۳ h>#_ )^ ~G\d-n,*:9ѥLǑ:eKHh.f>)h>;}2 UumMhHǽ)sO"݋_3؆4K=TuN\(9Bu3VhZХRK9D}~gvPYHc[yUS2WNm!(8%_Ք>#jƋ9kvL/$7VN1T) DIloRH=SPrwthvKH9n sd'|,0&' T,S'bP&'. +m|0ԭ ܰBrozHJBjsE6; ZzsF|&`HdӜ՘cǗ]ϾO|7&7Y(C4Ls'z9e\ꌾIj';7.tF?NXF}k|gڿ&u/WKg<..!Sptg2!^مGu;1iHfd늷8lX\E"h4A$,~q3i [ PZHH>4b9.Q'1(0mx㴰gIcRnvpI+MRU)9_XP ItIK5oI7_DVKG?o6h}l`ݸ D)H,רk|,1spA;)X̭j]K8;~X1j}s_'gqO2WTZۮju9SD,N b A$JTX_ t=2KrhM 0+[d>2H˹ b~]&I \`fgg{Ͻq='p=?8gcƣpKm ҖF3!T?vZE2zae&Hɟ SR"eO0ȯlPMa!Wt'i'o%8Wag]*TvKN?tN짡}pFpF)쿕ks^|KE?(S-;#KOW%?Ώaz %Օh.*_" 5LR\G Sg42lBΨ'K;I |2|cުcYN;Sp~H3w'=փ^G$3wz2|?6=KGtFXn#.'~==s%4\Fz_ynwcsjquW?18]QJֿ3HŻE.] j?GVWdaB7wNqe3iWC?5Y4W)xbZF>t*t N:|RhzW 2FI$/wء =L5>C2ωAޠ ohn)3- :ҟGLi{4 G\w_O% ;|Tu~9uNŸ,mCj*w=M:{2`aƽ?XwpFc Eu /R@'A>$AH 0eda `O;9*mDoK-/=-KPgT{4IN$(U=po.~6U4q_s_+ A}a&hDpۥjtgtJ]ybx/Qp(K+ mJYu;)$&yH'ncb8kicu-r}qŪW3MMVц\>;;JYA@7skq}0͞Y|ԧC$ymvՄ?_ \ǜ`ڍ(<M*:-Ӗњn+^QCb8Uu[/1qb+VŤiد%:ԡ i"bJ+݈p-Z)z+~Ue)aAֿ JʛO#!ɀ<;6n3[%7\FwO\j_SV.\9t.Wӯ]M>Ëx>>@[cdJDB:V r\U^!@zBҿN6cN _'cY>I-N.37~_voFc[quQ}%$/CQ~MV}P} =3o0?6JGݒY$rc\l>iJ?OƘi>ҟxpUcR:w7d{N?w0!;)S"(& &NMcP\]V+a\:%HRG L^5Ib?f̏B? Ul*G- V{Jcկ^X ~S=/Ot$IZmT_ {P~d8dOz? i7\RZI9o,,qQ!#ojt1O|r4oRKVvVP>).׸N_~AoFV?w~R֠5!nbRj Q6O~ zڏ@dHSTX#?6oJ4_ޚ] Rl}D:>+'y*HޑQEfĈ5Ў߃ ZS)VkzWZ̲:}2FJ$~PF$W_?/&?>5Z{"9!"{U:r2}RˏO Կ6-CY闠oBE?\3ͽ '!X/G{_R9 JDJ_yof,|׈MJ+{P`7_9w?Z.5gU 31ɿNjV h.b *3C6B.F6Y `)6_濲]6<3bKZѣ]6F ?\ $:W䦨,Nh_\cjhŖd4k9X<)"t 3X}w tȯ졺$H ֘I3Tpj>nѾdH:VifA}^|XylVa!gh>bXZM-%dKo喫V3 ҕm:1=5%6_3IVSsa/^xFJHޞu"h?5h)Li V?XYU ZoJ<XX5#$7#rf-O~S|YU>-_!W\F;GYD u@ocHs~=-~ֲv~2P^.ڜ|W#|AMGZ{)L NV=++w_~S.Foׇʯ}[>[2@8>:Pk{z}N鼿F*kW/빾:_ԋ.^|^̎/Ee,5VC)$Տ֭Siso_y~+ K\#zXk#/<6lgϙf͛6lUٳf͛6lPٳf͛6*ٳe毰͊]6lf͊6lٲӕ0ݛ6lǮVc6+Ի6lٲ]eeBf͛+6lٳfm(unz$r.͛67%x-l*'ųOX~fFlgj!%S"_?+? !%W!K[gv_`?پLo ?bhǠ!0I;cܚlٳ_&Q͛6lٳb͛683H5+mFV~OIY$2 J$tMۇ>L9!gQH(صZ$'*E}#͝Y{[#qSXx#_GPt$6@˒MGAY۹ϺZbE ?^z#c,Dk80Eʅ'O}9ƯiZA HjR ¹I!%H2:2j#9)}tq6N!LY%EZEKsAAUTn_x oXԭ4g[x„3+׉?NO788a sP$,xٻ7|f98DEG[qU ӹH-uC.x_4:"H9ņirFe:ך?3aw z:֋N:} Y"D5V8|ַZռ% ҌI8S9j^>mٓVsC3OژwkkZǦy1䏫O9~]k!ٝ qKSRw2 C.t}VkdgcVp 'p#|t"Hm!R)PX-\Y@rBGӿ!6nKZ}) l;u,9.uއn__܉߳0_1X!Qޮ3%FS9b#yDowc%{TpNԠmBӉ2(ZxuG7ėp04?sq:ZQ>D5[rgJ27b+ ~GpkPV?utV:d(ȱ1?βihjя߆idҌ&%:r$F7ٱlr'7z{w&Z4=0oMB$PJy8~зӓ_O3&|= v~!3:y~sv~Վ[Nҁ!,ݝŬüyNi@˲ue&' 3S9-.lwn,ҏPs^<'4A @f\A,k,2,28 *{7fvt. l8r~Mjm4@#hwWjJKQ?)Z0;x$ڧS?Agl|zT9m@lCHơKÀ"6@rhZrrj"6M6A>h}ñs"qCOinĖ}(O݀"Wӕj)F=)텚(Ib!*~j>@#{1&bZ'@M?զGo!ӯ,o-])By+*x+תx!bfDPVh/<''ʨbc2*HS'X)5.y@m$2ۆӰ98󬑏'\}%yx9OjV}8u0e 93шU3#5$_ og+D, DeXO9wh7;*Y%%Aۼ\IP}BVgPŐ#+ޤts6c',|ǣs zw(Q$O(Gv]?Pl~pΡՇy)ۊ\3RynsmtLdWUݢcw9W㔠8a7.:%_7 j5Q1NLdOpg{k[wg* :@ 9鿻vd, X<=A}6?^h%MSnkyu'Ťw|,RIF}IxXʠiMz:lOnJL)SOx~_q?wGP(Y!ȀM^OjEx܎)$Ǎj*;}9U+fU@SqSa~Ōr2e_RI$Aa|[o_O6,uL;R֦w>' k^#nq! kZ"Jp u>8xGpgr X)<`K|.B٫})m*v#  {lȟ1&2>˜[S~^+7j|BP~ RXٰ N)FOS TfS^EE?k1bj)/JAځ}c0L E$)foN,2ïٌUF

{2`z&|oݼ',1 4/۳˸=w8mZc_ZEea,nwT@myZ*^P{9>9$6c x]WT}|W1Cu-:O{ZhmԊ¬/5Ke*ߣmV./FSִ&GQ?<梑P0gU<\ʥ+NcӸ;[+OjI[2B~i=|R GR&ЫXģIߟ0iSF(VXTp>wW[QĒQKE;ݳxEo]džxcTu ]=;6c8Ц='?W'2zucc㇝;qJϕtݳw>UosMV_Gȃլ7eioQmH.$~rkޙ]4^BATz5W?OG>/W/ 3'\mۓ/ 6cN?KŅYн<gC_QWV*WI}wsٳfϛ͛6lٱWf͛6lٱWf͛6lٱWf͛6lٱWf͛6lٱWf͛68x2f͌=seXٳf3fvlٳf͛;6lj;l@4tg.͛67Zo,cX^V;Ўlp8Ex2UH?h_]F(A6tiey$gu? }3̟?1ևṗ22̉'Ö|Df|#67r 3QMT@ A\ Zx+^g _Y1ݰ(m&;]ٳbe뚶ܴ-5h3mU?v!\pdÒXRd=6iLexS$=Ҏ 3\vIo_j憪~/͓Mf :r%2AiJṶnYRC\p?ӛ7ݵoxt/Kz-/}cbɝiv}nn<]9@ \']G;{==BOiy^yE=gS_<#|M?}ٵ{/Hgm&)JXq/2nےOI4GycVS86ljPOkhItk-WV[ wT2E $1rz߉>})n~g7 *VLO0"Q)@J?I014U\2(%<8Ibhw)X$4ٌLwzy#VUbսHtE^|ZldbUJ)}5F%\7 A2@Qy^]WhNW!)"B<?0]ӗCBԀ#O%yc@ۀMzxd6lSPJ %|D/"HP GňD6vlٰvsB˧F5݇(>|O͔m'Kb?9?N8Cs;8i?,is8ibs&u.iw&5& |Q?X:hk[co~͝͞^Ԁe?[oYH q5Qo)[4ΧM[5Z8HX@z/R25Z8܈Xr7tNu@n8RhJay9n62dI?qekO[Z?f>vn,sbB KwC2د \SJv5 pnFkL?ZL=yrԁHr!?b˖#/E?m1aJ#p5:4-^JO]1!X}ܗ:3M6ɨ[ OP#R߈ttJIcpAӏ9TQ^C7}IG ?`Foj;&Z$>an+qwUupz*ȓ"EkSY ݉뜊],A}j:.+DJG3Km#)iX<;mG: \GK.%Pw?F[6In=dFD>8t-# {|=.@)VHͻ>f/<]l+Hr>K;^0f"*8}n>SULlwx-f>SU )[DGpWvAK ܅GzsjGAf]7p:qwvIzˮ?f͋r=^4 {Iō6ʿ"aEr,ˇ$sa(>EO˃,sa⌢j@ t0~[dX2",۸YygϚNo_wD``uaydۏJt2ib"<PCjc66 9o/۬rq3 |B|珧30v8T"8^=;ZW-؜-%asuĒUsSHC¸c#6|C˫],7\;vIL}N(fP~ Tf_/6;E[["' ެ)5{eT⹿ZN؟5? 9?y#6lC3 ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6)vlٳf͛;6lٳf͊]6lٳf]6l3N7Ć_h?/Cr4k|רWc/Ο3ύY,dzKb3/m VG䜿Y/u?ٳf14140?szNbO:ٳf;()*>q SG%SO#m33#ތ)"Wf͛W/GIxߵ/͛6 )r?~9w}I4|ݛ6luC!4*|FS9Kђs&f͛=AO|V9|ݛ6lXJ͖&_Ă/_%/&by9d|f8lspcp~ojOH9eprM3=?׬Ӊ}: 3o;[$#'!kmE.I}2FO6u7-ҥOxG*Z R^xkt/gmz_Gœn1C 9(< q) QVCyOG6lr{c,AvlٱoOƎ9??Cf͍5lvlٱ֔8MU,+1Pae(6lu\nl]6lu7/<\ .͛6#?oI1 1CٳfĒ' ߏīqGA3*9 6l3? }L6vp9v G'Z#3 vlٱ!xE|}q-ٳf$ @}q^oK9f͘1TˮP$ ;6l/^Kvlٱ>X:_ʤw>}͛6^j\ٳf5NP͆ٳb¶+5.?盏h\uq rr}F)Eٳf60X+I~d48Y=/X~?]77}>Sr8qvN?ݛ6lr6;6lCq%\xݛ6lC6lKٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳfGt2~pnhyv_׏hp!;6l<O)榭?ג9{3#enWqNoZw?yGdCf̈́fiݛ6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6l"2/xۃ֏ٳd0}Zz_H+gWjNu' E?QN3,)p. s Nok6ly`ٳb%;c!^HHf͛*8;6l*CUr6vlٲuo ٱcvlٲl[>QCHE(f͂ 2vO|>$ٳfV'5-fi7|@ڟ1H'$ sf̓ejDNz탧?qIª{嚙(sn$DvlٰGbf>'.(yqY2ٳbJ -NVv'xMҿAጉS3."OWf͛x8#7e/'f͛)fydO6l;ӤyNMW %uﳛ>OlbZLCO탳f͑m[5Nimx6l~lg#ᛖ6Aٳf͛ ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳfOtmX3K4-_-}8t6lLG5vNJۗG#ɭT~nѝk<~Hٳfٳfݛ6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lٳf]6lص80{ٳf-Qj]8[mtcY>w/e'&w.핛!o!8ssy6lٳf͐`ٳe/ Iٳfʮjvlٲ6umٳfedݛ6lrPWb*@85FVٳcيW%9+L>N͛6] V[o,0>yvlٰ\ `, Qe;sn(sf͗|3_ lѷpvlٱr@?e'!Pr#>畑]vlٳfCf͗C6* f͍c4Ȟl ٳff́͛6lٳb͛68ח|~hr <F'6lc Rt> ?^|Uᄀ@|?hxM?LǛN>{f͑6WL٬tN͛6^lٱKf͍͛6Eٳf͛6lUٳf͛6lUٳf͛6lUٳf͛6lUٳf͛6lUٳf͛6lUٳf͛6lUٳf͛6lUٳf͛6lUٳf͛6lUٳf͂KO8d_3Y֏ݦٳf ~#Mn؏p'ɿPmKb3c !;nMsf̀f͚Fٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳfmabCꏼ6b{f͇ap쿆EZ4f9e0_?ٳdI8usA'ٳf͛6l[f͛6lثf͛6lثf͛0͘bٳcA6N͛6jSqecPٳe}m?f͛(u,GMv>f͛XK|f!e86l܆_/|m qvlٱƉM'i~_p)]ٳer|l`ݎ͛6nC7!qwvlٲ+1̀7n͛6lٳ`]ݛ6lewъ/տoL5Iٳb`rLSϥ˞Ԯ}pS!U;tٳ`_ yWaHA^])37O~qzٳfgvqx׌̺ݛ6lٲWf͛? endstream endobj 447 0 obj <> endobj 448 0 obj <> endobj 449 0 obj <> endobj 450 0 obj <> endobj 451 0 obj <> endobj 52 0 obj <> endobj 53 0 obj <> endobj 452 0 obj <> endobj 453 0 obj <>stream HTTyPwaQCuFMPc&CPE4B8GT1S0IC)QU]QX.Q#!&hD.ļkm4U?~ީ4JR/JXW -EoN" "35D#_?>)\kCv̈́îvAǽy|2-h0{#hr#{\os4idp;d1duӰ{N71G / 43heF G0t4vH &LYxCJ4]/r@ph\Gp d3\Ca; qpF`%UX}Ra[PfX,D 8)6V5aau cZ !=12k6knNzQߊzz.D;WiW Zn:Hts'K]&0?1*)@='*U:ѸDaSwI<Ա:')v0;SHܓ4$3$S-ۡn" +=cW Ke/.=Ç@>G 5P4/cDs!јfA5R #odC8|3.Xa6q$ڬ#]'} D@JW.y_9ծm2>\XYEݵAnlڠp0+U.hP] BXJWgl}\ѓ*6;p2O|xLUYK֒iek_"5b8荛1JAs7W~an^ҿs$ 43Qwݧa Eҋ S`c6\oA(N \ 5~NGwIg;t+5DOt_̼m!8mN9b aHb#jh cf0!Pel.n ~- gtژhC5H+E_V%2FHĞX16'-`v җ5uX倿a RCC0ܘO`))=b| UXY}C$hmheE]c*g)6%w[e(eƟGc ̂RIg#;#jbo\a//W ՠ'.UWX8"[hhc./G2hbwL*xjzi#<~+'dZ/S{KEx6}/ρU-R|YS q+c$P^Ћ/8s^~Hki]9=>tOh8[`.~ɞ#䦥y:4蟍CxNYp6Zq=0/ULM-#Rz&W=cj c(XlJd}x P %a}0NK1/;{cLNDie1ޢwۭYh#:\-P |xֶ o> endobj 455 0 obj <>stream HLUkTTs`fE0&#>@AFa2*Vc1B%j}ҥ.[O@WbFQFх ?w80Z/F 5U;8޲9+̩Y#}tX|-ŬLYyO?J#;OF:E W-ƌcp̯fnu|u`hrqʊ0Ì0oz1#&a0L$j23LɀJ5f3GXsAkWߴ Z&mi%m:J.NW{ۧW}wq0~J6 ߺZ}tw1_#.wvWz-ZG-}z֢}xhs9l^.j` }U4'7ԈFukHY2'e~vXD?02ߺ_Aqf#D)!F\ TKf8.Q O哆B4">b\(65CռYZ xV Vq'oDL;lhFJ [$ #0> ۑ3\U[uw~liuJ֓'t;zRI͛$yV}'ľejy !r@&,NN]jJ<ɰpѝvj?u[ڽ#Qˡg=r&$"v[}t#LL?%:jws?8/1S}$Nsޘ#YDA;.I3ܢuuur4$1ShHǰbHpm tL F]\bՕX bye*8hYJUʞ uZd|7~Y-*rEֻ-Cl^&הK>vR_ZX3-!_oA4{B ɨ쓋4:_qpyk\&[/srRMV IyEߪzZY#re,` x8pi4ʴIuF Y5l3zvXwo0Nq"pةaQńwTΥ&쥙Kr5h 9 kyw'hO(>V1K?Q,srK?rtkta>Zia3>N'͂ }-A:1ss66_h{fIi8B\LD1K*<q },n^.GVj1<[$ǧV@(؄&e;^mPH O@[u`; 0⏠h+U#$i E8ї4%!NjdIK@|*% 4SQNh,qE]z'MiUS8eN7>4zp|JgǛUB|fB6sABa PAFQ| Xv$ηZG 4&E谢,2K%ciG i1Ӻڲg} }u]#tfae/~,`RR!0x<o<[\U g6a7 U iC%9> 0ptxZ& @&V!#}:a1 >>ڟ  M1Q)0dW$Ά47Gk qyE9D:=~"GGjjnba vj=.vKj%ҩKi]9l[6vD5A E> endobj 457 0 obj <>stream HTUiTUO"Ȼ{(RAdŠ8FDQA,(˘ &R$hllSkp..1,u%yh뿳>g},gXfNHIS,2xqo(#j6dU=Tk\zݿnMD7 wy5۔w*тbʊK 2/44( ),XYX0 p7Fr\er\Mfr[ nw`/e.2~8_Ʒ >BpA*IIRtIBI3*o%ޖgX>/jx\u=xF)o6 \-3F@n)78N؅B Gt,oTP_R:M@X7y%k!lJvN;TYcL>m.%] 5ॸcBE̽_-)Hk y<7V&UH?mww_K+zTNe@<.}qS`l!bE+TKKEDm;O8{Tx1<HG;*-Bu1 )ʩ )U 'LؙK\AA5f`LƝL ׄuN8$T޺Ofhh~<=ۻJgS9?yS=|hqfN]_IDLP5E]ZW3MMlIe̠R6aLMF6{ݓEDĿEb-E?ֿso~h:OOGwO~)gho5ߊ9}'h6YٶBŏ/>#IoQ)^)&=;#w[޿WqGn'M:W {h~ ?-"Έ= endstream endobj 458 0 obj <> endobj 459 0 obj <>stream HUkPWzzx ãyt #(4/x:b kkY9C hsSÃ5<溍y(OӢź'`}Zz w"B('>|kDS"v6HQXaaL@8  ](-.8cx"ĬK{tk/{y@'a$jPGTњ:)jЙ$aYtR4w:jFI7}Q9" hvS 1ň>$l&6HSA& '3eX# ,U 8>iК:ط+.e\!y莑ȟBjn=JMJepFxo([s30E zut"țW,Mڟ߲HmV ͜2u+ 2{L;8{.5 A+Y2nW[H9"͏Dm _1 ZVs#TR"5d,A"(f9(GsUh0_p<>&b-VGdi Lx2APy 9DٔFcJ@KgZ$8,"]7g @@z<<)_B{}4 t>tH*:_p~#yp@/l3]["높^`E]Z*^`-y{ʥ_.`kV?~ݥI_[NJXʰpStX-e/έJUK$2dt2˼?qL~!S?%]SeaTV‘K1i M^wڸW7Y8xN;Q{Yy߃z#T;wO"%RXEk$B-YN6Q&oApB  x fQ5΁;r8L!LLJ+~*M߃i"$"᭎~' J>qL7ER*e7Fv8X9褃(+c# ^@ l=q' !@_CZj[8=E:΁EEhp?R)}LS5ti_է}izv\~O,WčGrz6gH N"(½._`2l7V _ Ƃ9Yt`8N`@et/ nkUn(UB Յ)n;CfRe&OY`Xג\Z͡QUXV:C|i:[ź`8Y tJy bCaG9iu+GqŗQWBD~.U=zu<1agُ \$nnI[4.6v WwjE ̄oC6 bKnf٭kĚ8' ,q1a0}U>iu-{ArA괘-q[ d$X 0ӻN>ŔJ8{ٜ 82]$Hen10gt?g','۬-=zZfp}3FYD%޲U8)$ak9XNN׃#d5qX̳%|cR vxz9,_F'3]_!^jSTܧ=)p.]b* Ļzੱg*n  sE>kfSc7sc/yKssa6CSPVc0Ud߃&WQwy{KDBd "*jdNE(HZV% 1,{a ` 5ֆ &쁗?_ ({40afᰉ-eT5v@4"}I8}A2:BA*/`hhݫl&rp26f]LmF3=7V̍-j^%Sx ۶?^9x>$Mh`E xfbH] $ 8>&BG)i6y?$K$pf7򏵧Wn)fk3!T'v2S~jX O~>2kzFP\U wU;JzaԳyUZXm"[9浐m+яC);mK*-˲#[Ӈ@[_sV2*jf&:pǼ8`Q.yN,8 =C Aga?$&`SҀG?p0[00G)e͎LHCV蚴+zS2 YVi<98r9͒ FqH!ڒ#r[)] k7woafPaR jKRju6ޤ2]*{:*s ̺awAt% B]Rg}j bT|2NEٌ!^zP [ sӐ GCvL0af*5#?!QE]&kFO'Lg$]V֌hnH*M/8+ucv^Ť%%-UB:{f~5Qd.|&9l%G$%o endstream endobj 460 0 obj <> endobj 461 0 obj <>stream HUiTW~Z-[D]lD\@ EŨ0(LCFmm['F `G9sdqIhD͜xV;S='g}߽{ާbJfed [VꂲͅNCqb`)\lhc5ݻYi 6{^킿73^NLO/xcM11 Kʊ3F++ ^4U/+*V[1yOQ1jܙI,0 b1s&ef9 0΍JLR?ΟfiO G{Z%- JDKFlW9܈Qs\?K 埈CK2(CѩnHHgȑQJA 2 6\M!B'8bȽ/xVa3E_|JC CPmy;Z(' V`)PL(K*wֲ5(PUi>V74d2vlƁZ[1FL'tLʉeu<`vߩ{Nw%4[T;.r\ Զݙז׈W.#+NkjG :f`~۰o7OI9h`䴀Rgfo?0 d 2AR dQΞwH!ĥBnA5B$Zc$)~u ^[Pofm?䀷6i|yGxd$HBgh !8xi0jQ ǹjcpkL! g#،P68 Q  {# MVZ0gUc3Cnɦ[b1΀nfI7ỵkѕHZ\"VQP^lKDΠKɄ=/.&' IJ*N$3u'ؿ'G!Ũ?lBr `+Dv݈^gQ3SCлu&$J=F(>KA̍[LeסWh+K1Ŋ-q?^ ~Jn&7~z cf@ 28Ղ%{YPA x) r/w Fc4aX;{ݮ0gqXچN}Zڱ .l c,K߳HŒ/G;o:eE@r QcB,msZ:z,t8G$DvͯYj=˞)P=dR>u֊DK˃]҃CO*ʍ @_PL_ $]XhU:4Os̸g#ln)ms#j;0'L|I$ 8B+eaq8rNT6Us![~5 d_ )%a0h P Ma~ɏ28bg{noҼW9,>;vh+iKhR6%)q"X)͞'Xa%{ θ#L"g{ :XYz}=$v l_E}B &_1hh|!=};[! 8Q+. ]kTx.ʂ܏y\-%X\e=sg-ILC\jp^8ocjͷwۛ4?<ާ" =a.- F> h(耿B( Gp.D'fw'`o+ )^]!PIQ;a" @A-BGp?R 8BZD˼@%hN`/AOE1Xa莶 IZ3uY+zj=n~ZFVٽw3jս<:v.^}ϣ 0qx-ӯSsܽAx*P(aʺ[e\e}=n^]H':Kڠ5Ԕ) r"wStOk.0&egBb}"-M<0Lhe21l:MGbL1!)JN`eT:w`A0Gu~+)E;cz_ ƪ .FV?J:0dNijS+2M:Kx0 ENļpw,=5՝4v@91fQ?%wpvcht6PL7^nvB_@9q1|?'8'hłČČzՇN6o"Mq{e\ ѥ,E)UMƲICaN/=l C 4b7&y B3Bc뼋L}3Kod\ODӮ}Xciiljil9u}- 0Y qsrȀXNe~{4Q= PLP7uIFy-II-{;>Yӷ r&B0%& 2/PمXm /0])Ya<0FA>}(̧ى_chj;He8!G%[9pAt.Y)(^V0j3枒'_^siMF5TۻqIǮn}/I^Ӂ\Tpb;!hͰ GKy]1zA.|O-Ofo\5W0CB0wYe'39މhCXcaY,-E}`4a!8 ߤ֯ߵN놑k*2>?#'˝3lf#4ƿ3RMF]gٰd&[oCeQemʊ}'5ܛqI<X%j,J~.p+mhkÙo\2ޟ==bx=bOY|_Fnb5}M' E8zC VԀ ZzoqP:c)l'f8IJ\2?77k3m0L[ [^/+fZY522cAC]n*$P'JB,quU]`*)9z aՇ[:*,   `/n #笙hwbO-xpQOۧmE5_f0tǐ ei[tcycXӢHe4W}JK-ek6NZ,] 8Jr:8p:k'рm9qAH]_l)^SלKU1Ĭ-IvE[$4 a~09+CbggLaY]Qa$LxF IUY> TZ.} : endstream endobj 462 0 obj <> endobj 463 0 obj <>stream Hbd`ad`ddrv,LuIL [f!CG_լr > endobj 465 0 obj <>stream HTOMHTQݗ2Xoͤ͢&-H $cp74[*PPǙp1 $BH)BkBI3v-s>G\klSp{wc흩'EC'~2/^⭲$73.0vc5^vuly4=߂=AYKt EC5*(eE>aAE$1%(4:*hҷ4(NiAXQT1|E;^Է0~B@/*Z ϜU+&pfDPs٩٩Zy8kζ5Mԅh_5T.Žx;O;hlhrpP䯕+ endstream endobj 466 0 obj <> endobj 467 0 obj <>stream Hl}lSo Bw+p hW*"Z;"|2 ;N;q8$`Mb;c;!N@T кIkVi6MT=^+ G޷J[kSV5V)jX%}UK|7%ц׽56'XMl"&~DGO"v{~0q($lj"QBtDND1k^E++ɕgW#|$*|M'rE~g_,9$(=(=a R?/ F/^V)$T,qLѦkz_ - o8\N'} o19]LMdۢ~2Kg+ tEeiމEهEOSpzzkfBōh?V-"&E$^cq'&בVIIߦe@C,=ͅT0πA9%s QwʡBR=[br'铹G _=I8o6d'ɡ~P[cfy\n>M3im@YHqufC+3a~84hB0)Ua S "z3F8>:ӓp"}}bь{Am;.|qA2jCPád5cGu3!:|F-T X^m(9̝ (F5`V+j/pH쉶zZ̢jS)d(2=.s#W^N*jWJƭhp4]Fk6V$-<^I;f'l?okd2JThu,wuڕ rz-Mk3P!sIq?ʩÇ |aυi RȠ4]9+H<.UP%7 rxR2yd?lwY`a^zQ1Od.hD:P勏ldpuww/h`*:Bhb\誂/mzt(n孶&κh{~ٻA9yd- 303uTUK2B Ŕ./қh%`7hlcmY !b~). A`msBnP:C6M@orlfw mxyC//b KZk ,}(0Th` 5.32^>~W܍x.<7J-g\UQl/{B/U2Y/&xLe)*h 7CC@SlmsuSV= d*RoJWZQU'y:6g!qjW5y}zcvA_o$͆^g:)z=Rc&yDKL~-K!6wN $.o v+t4wـi(O_FRq'R$sKzަ5.y:w*^ͳf&> endobj 469 0 obj <>stream Ht{lSm{7n6iUucmWJyMP!)؎Gb % $#qcg;ǎ'!70ґM HQuiLGGyiKx|>ޱemoQjHUU$ٞ"B},x%}Quc&)x]|jŋS=oU<>|&SIyS>me󌼧|?bI咿KڴUigvWX9Wb܃OW7 qyO]]&_fYֿяУɍ,Q%Q&Xq5;[]H=&[x3 )UP}=HoƸ&g1θ lH]"Cle a{]M>n 5E}Qe>\P;Yυ\K(< `cdcK1)n|Q ?8 ?*4*4r^;n_N'OldfsnU QRUlE޸j9 tS4`@ё%EPyy$bUt(Էp0Ħ!͕~ةDJjQZ :&g?H[{F]=_dߞn1zPg+Dh-Ǹ)5v'yº2]VZÄ^V9uR6RbR{TF1 + Gc穙S%vyTi/d*^Z@=l1S6F2/-/n"X0ȡNC=a8aghהP%V^O 6n&)śjG-s2Z 5ZF[P6Etۂ yNr*|gS~Mq(7J 4gZGp[g?Lwt'Ҟl&ƹT{PGX L  4J9*I'U6ȓUE.^BUgp&O^C=BIL&uKO3g:#ݣ k֤6He8$%:|> oȑ]Vcr M5@ THܹ`{>#+RӮ_S:wրE'`|ȱ bTn4ڦ*G!3ٜ'%$}#,Jv`kO ,=D {-Or:@vB΋Kr!#4F/P 6)51CzJAX +A2997V  _ĥDl\Oě?dG<: oɓv|cSxj=1]Ǹe7ߝovGǝΦ:9AxDŇRY+m%mL  #ټ;,#d)3`*O6Z:S1ӹ6nέfI٨4%B> !ܸ :x8_?tXI*[!ϢR*7 ބC4V˩hx6PU '՚HDDu&>?U[Т@{1|h=ЂFGpw;x1zl|BЭcȥiӣT̸} <ar7Ljz?==q1Nz.fYsw@xpY0l栱9D) +ZhO_3h\4UmjA7Ȋd1l (xꪱF8HRحXk0u2R䤦kh b ~\&#i)PS 车mf)L"f2sĈ lk H |kBktؐ ' ð̐]w-)6e>} *mVQB'$k8HOf{т2 ѦBxAr(&WV!SkHR"E$_#Hh"rRFBv=_Z]8(E@O = 亂_'QZn`Pc endstream endobj 44 0 obj <> endobj 45 0 obj <> endobj 46 0 obj <> endobj 47 0 obj <> endobj 48 0 obj <> endobj 49 0 obj <> endobj 50 0 obj <> endobj 51 0 obj <> endobj 192 0 obj <> endobj 470 0 obj <> endobj 472 0 obj <> endobj 474 0 obj <> endobj 476 0 obj <> endobj 478 0 obj <> endobj 480 0 obj <> endobj 471 0 obj <>stream HTMo0 >v!hh%aZibQImHO7նAQq4F8a[H30C@R28Զ,|'4 ,·|JWo!=~hgH`+q/̀ d}zhprF̒ bSZ'qjgEL2&8W#cL1Eb̛J浺ъeRP~+ʈWy8  #kX\:#+s"G(ȯSC+۠gķB endstream endobj 473 0 obj <>stream HTMo0 >2qH:RU!q؇=$.QsJm;6Npcߍ^#X$F*~up2.%&>󝜋;ޠof㓄7hPU`f|܋j?_xq2`FRahmT/Yڹ{R A?>stream HTQj0+m ƐG9AHPBvJ!m GaVl۽go~8Nx-d9^ϷSA9D>\FhDSs,w2} ޞaq>>p8Rh[0%b܋oxuy8g7)^3B-4 [@k:2NR>7Ӕ~ \36o ]#߭ӌ0Q}&y~׊M΃ Ux8H_FO5ʜ 2TREJŔ֑Rݚ)uT!DoxOهl9}nt"ɏ endstream endobj 477 0 obj <>stream HTMk0 :v|BA`vOm% ,qC(t[cYz"pt -3 AͼOi*Rt9>kz||Rtt3P`/̀T^o!]jc8`h\Pq ՀT\ZՄH26b#'w Flą_)|"깪{I*L23VY!DeZ( GUALvV5Rq\C/Ϻ̖;=W#k endstream endobj 479 0 obj <>stream HTMo0 >v!@))BZ[Ua!1Q9 6't8~F ]oi:7f{5/W)M3'Ӎ ofwc:y4\`uN?蠹Zk1YO|YاQdB'AdI ԀF*f$!D^&C#Y`2LU`2mqY&CcJE.IkFZ(I@Cr)k*}JBryοُEuuf[׎w/-b9 endstream endobj 481 0 obj <>stream HTPj0 +tlOm,dE6svnH ==ޓ{EMGq  V`[Wt:G:<4o #{(qx?T{/l;i/!|ǓzBؿy f[6ȚFj~|jMU)ՊM3+vad\_,dqGx{P!k sk endstream endobj 7 0 obj <> endobj 55 0 obj <> endobj 97 0 obj <> endobj 193 0 obj <> endobj 264 0 obj <> endobj 301 0 obj <> endobj 338 0 obj <> endobj 417 0 obj <> endobj 482 0 obj <> endobj 483 0 obj <> endobj 54 0 obj <> endobj 443 0 obj <> endobj 441 0 obj <> endobj 439 0 obj <> endobj 437 0 obj <> endobj 434 0 obj <> endobj 432 0 obj <> endobj 429 0 obj <> endobj 427 0 obj <> endobj 424 0 obj <> endobj 422 0 obj <> endobj 420 0 obj <> endobj 418 0 obj <> endobj 411 0 obj <> endobj 409 0 obj <> endobj 406 0 obj <> endobj 404 0 obj <> endobj 401 0 obj <> endobj 399 0 obj <> endobj 396 0 obj <> endobj 394 0 obj <> endobj 391 0 obj <> endobj 389 0 obj <> endobj 386 0 obj <> endobj 384 0 obj <> endobj 381 0 obj <> endobj 379 0 obj <> endobj 376 0 obj <> endobj 374 0 obj <> endobj 371 0 obj <> endobj 369 0 obj <> endobj 366 0 obj <> endobj 364 0 obj <> endobj 361 0 obj <> endobj 359 0 obj <> endobj 357 0 obj <> endobj 355 0 obj <> endobj 353 0 obj <> endobj 351 0 obj <> endobj 349 0 obj <> endobj 347 0 obj <> endobj 345 0 obj <> endobj 343 0 obj <> endobj 341 0 obj <> endobj 339 0 obj <> endobj 332 0 obj <> endobj 330 0 obj <> endobj 328 0 obj <> endobj 326 0 obj <> endobj 324 0 obj <> endobj 322 0 obj <> endobj 320 0 obj <> endobj 318 0 obj <> endobj 316 0 obj <> endobj 314 0 obj <> endobj 312 0 obj <> endobj 310 0 obj <> endobj 308 0 obj <> endobj 306 0 obj <> endobj 304 0 obj <> endobj 302 0 obj <> endobj 295 0 obj <> endobj 293 0 obj <> endobj 291 0 obj <><><>]/Pg 264 0 R>> endobj 289 0 obj <> endobj 287 0 obj <> endobj 285 0 obj <> endobj 283 0 obj <> endobj 281 0 obj <> endobj 279 0 obj <> endobj 277 0 obj <> endobj 275 0 obj <> endobj 273 0 obj <> endobj 271 0 obj <> endobj 269 0 obj <> endobj 267 0 obj <> endobj 265 0 obj <> endobj 260 0 obj <> endobj 258 0 obj <> endobj 256 0 obj <> endobj 254 0 obj <> endobj 252 0 obj <> endobj 250 0 obj <> endobj 248 0 obj <> endobj 246 0 obj <> endobj 244 0 obj <> endobj 242 0 obj <> endobj 239 0 obj <> endobj 237 0 obj <> endobj 234 0 obj <> endobj 232 0 obj <> endobj 229 0 obj <> endobj 227 0 obj <> endobj 224 0 obj <> endobj 222 0 obj <> endobj 219 0 obj <> endobj 217 0 obj <> endobj 214 0 obj <> endobj 212 0 obj <> endobj 210 0 obj <> endobj 208 0 obj <> endobj 205 0 obj <> endobj 203 0 obj <> endobj 200 0 obj <> endobj 198 0 obj <> endobj 196 0 obj <> endobj 194 0 obj <> endobj 186 0 obj <> endobj 184 0 obj <> endobj 181 0 obj <> endobj 179 0 obj <> endobj 176 0 obj <> endobj 174 0 obj <> endobj 171 0 obj <> endobj 169 0 obj <> endobj 166 0 obj <> endobj 164 0 obj <> endobj 162 0 obj <> endobj 160 0 obj <> endobj 158 0 obj <> endobj 156 0 obj <> endobj 154 0 obj <> endobj 151 0 obj <> endobj 149 0 obj <> endobj 146 0 obj <> endobj 144 0 obj <> endobj 141 0 obj <> endobj 139 0 obj <> endobj 136 0 obj <> endobj 134 0 obj <> endobj 131 0 obj <> endobj 129 0 obj <> endobj 126 0 obj <> endobj 124 0 obj <> endobj 121 0 obj <> endobj 119 0 obj <> endobj 116 0 obj <> endobj 114 0 obj <> endobj 112 0 obj <> endobj 110 0 obj <> endobj 108 0 obj <> endobj 106 0 obj <> endobj 104 0 obj <> endobj 102 0 obj <> endobj 100 0 obj <> endobj 98 0 obj <> endobj 91 0 obj <> endobj 89 0 obj <> endobj 84 0 obj <> endobj 82 0 obj <> endobj 80 0 obj <> endobj 78 0 obj <> endobj 76 0 obj <><><><><><>]/Pg 55 0 R>> endobj 74 0 obj <> endobj 72 0 obj <> endobj 70 0 obj <> endobj 68 0 obj <> endobj 66 0 obj <> endobj 64 0 obj <> endobj 62 0 obj <> endobj 60 0 obj <> endobj 58 0 obj <> endobj 56 0 obj <> endobj 38 0 obj <> endobj 36 0 obj <> endobj 34 0 obj <> endobj 32 0 obj <> endobj 30 0 obj <> endobj 28 0 obj <> endobj 26 0 obj <> endobj 24 0 obj <> endobj 22 0 obj <> endobj 20 0 obj <> endobj 18 0 obj <> endobj 16 0 obj <> endobj 14 0 obj <> endobj 12 0 obj <> endobj 10 0 obj <> endobj 8 0 obj <> endobj 484 0 obj [10 0 R 10 0 R 10 0 R 14 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 22 0 R 22 0 R 22 0 R 22 0 R 24 0 R 28 0 R 28 0 R 28 0 R 28 0 R 28 0 R 32 0 R 32 0 R 32 0 R 32 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 34 0 R 38 0 R 38 0 R 40 0 R 41 0 R] endobj 485 0 obj [58 0 R 58 0 R 60 0 R 62 0 R 62 0 R 62 0 R 62 0 R 62 0 R 62 0 R 64 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 66 0 R 68 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 70 0 R 72 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 80 0 R 80 0 R 80 0 R 84 0 R 86 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 93 0 R 94 0 R] endobj 486 0 obj [100 0 R 100 0 R 104 0 R 104 0 R 104 0 R 108 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 76 0 R 110 0 R 110 0 R 110 0 R 116 0 R 118 0 R 121 0 R 121 0 R 123 0 R 121 0 R 126 0 R 126 0 R 128 0 R 126 0 R 131 0 R 131 0 R 133 0 R 131 0 R 131 0 R 131 0 R 136 0 R 136 0 R 138 0 R 136 0 R 136 0 R 136 0 R 141 0 R 141 0 R 143 0 R 141 0 R 141 0 R 141 0 R 146 0 R 146 0 R 148 0 R 146 0 R 146 0 R 146 0 R 151 0 R 151 0 R 153 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 154 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 156 0 R 158 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 166 0 R 166 0 R 168 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 171 0 R 171 0 R 173 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 171 0 R 176 0 R 176 0 R 178 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 181 0 R 181 0 R 183 0 R 181 0 R 181 0 R 181 0 R 181 0 R 181 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 188 0 R 189 0 R] endobj 487 0 obj [196 0 R 196 0 R 200 0 R 200 0 R 202 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 205 0 R 205 0 R 207 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 208 0 R 214 0 R 214 0 R 216 0 R 214 0 R 219 0 R 219 0 R 221 0 R 219 0 R 219 0 R 219 0 R 219 0 R 219 0 R 219 0 R 219 0 R 219 0 R 219 0 R 224 0 R 224 0 R 226 0 R 224 0 R 224 0 R 224 0 R 229 0 R 229 0 R 231 0 R 229 0 R 229 0 R 234 0 R 234 0 R 236 0 R 234 0 R 234 0 R 234 0 R 234 0 R 234 0 R 234 0 R 234 0 R 239 0 R 239 0 R 241 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 242 0 R 242 0 R 242 0 R 244 0 R 244 0 R 244 0 R 244 0 R 244 0 R 244 0 R 244 0 R 244 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 248 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 252 0 R 256 0 R 256 0 R 256 0 R 260 0 R] endobj 488 0 obj [267 0 R 267 0 R 271 0 R 271 0 R 271 0 R 275 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 277 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 281 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 283 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 285 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 289 0 R 291 0 R 291 0 R 291 0 R 291 0 R 291 0 R 291 0 R 291 0 R 291 0 R 291 0 R 291 0 R 291 0 R 291 0 R 295 0 R 295 0 R 295 0 R 295 0 R 295 0 R 295 0 R 295 0 R 295 0 R 295 0 R 297 0 R 298 0 R] endobj 489 0 obj [304 0 R 304 0 R 291 0 R 291 0 R 291 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 308 0 R 308 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 310 0 R 312 0 R 312 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 314 0 R 316 0 R 316 0 R 316 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 318 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 324 0 R 324 0 R 324 0 R 328 0 R 332 0 R 332 0 R 332 0 R 332 0 R 332 0 R 332 0 R 332 0 R 332 0 R 332 0 R 334 0 R 335 0 R] endobj 490 0 obj [341 0 R 341 0 R 345 0 R 345 0 R 345 0 R 349 0 R 351 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 355 0 R 361 0 R 361 0 R 363 0 R 361 0 R 361 0 R 361 0 R 361 0 R 366 0 R 366 0 R 368 0 R 366 0 R 366 0 R 366 0 R 366 0 R 366 0 R 366 0 R 366 0 R 371 0 R 371 0 R 373 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 376 0 R 376 0 R 378 0 R 376 0 R 376 0 R 376 0 R 376 0 R 381 0 R 383 0 R 381 0 R 381 0 R 381 0 R 381 0 R 381 0 R 381 0 R 381 0 R 381 0 R 381 0 R 386 0 R 386 0 R 388 0 R 386 0 R 386 0 R 386 0 R 386 0 R 386 0 R 386 0 R 386 0 R 386 0 R 386 0 R 386 0 R 391 0 R 391 0 R 393 0 R 391 0 R 391 0 R 391 0 R 391 0 R 391 0 R 391 0 R 396 0 R 396 0 R 398 0 R 396 0 R 396 0 R 396 0 R 396 0 R 396 0 R 396 0 R 396 0 R 401 0 R 401 0 R 403 0 R 401 0 R 401 0 R 401 0 R 401 0 R 401 0 R 401 0 R 401 0 R 401 0 R 406 0 R 406 0 R 408 0 R 406 0 R 406 0 R 406 0 R 406 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 411 0 R 413 0 R 414 0 R] endobj 491 0 obj [420 0 R 420 0 R 424 0 R 424 0 R 424 0 R 426 0 R 424 0 R 424 0 R 424 0 R 424 0 R 424 0 R 424 0 R 424 0 R 429 0 R 429 0 R 431 0 R 429 0 R 429 0 R 429 0 R 429 0 R 429 0 R 429 0 R 434 0 R 434 0 R 434 0 R 434 0 R 434 0 R 434 0 R 434 0 R 434 0 R 436 0 R 434 0 R 434 0 R 434 0 R 439 0 R 439 0 R 439 0 R 443 0 R] endobj 492 0 obj <> endobj 4 0 obj <>/K 5 0 R>> endobj 493 0 obj << /Dt (D:20190715105745) /JTM (Distiller) >> endobj 494 0 obj /This endobj 495 0 obj << /CP (Distiller) /Fi 494 0 R >> endobj 496 0 obj << /JTF 0 /MB [ 0.000 0.000 603.000 783.000 ]/W [ 0 7 ]>> endobj 497 0 obj << /Fi [ 495 0 R ]/P [ 496 0 R ]>> endobj 498 0 obj << /Dm [ 603.000 783.000 603.000 783.000 ]>> endobj 499 0 obj << /Me 498 0 R >> endobj 500 0 obj << /D [ 497 0 R ]/MS 499 0 R /Type /JobTicketContents >> endobj 501 0 obj << /A [ 493 0 R ]/Cn [ 500 0 R ]/V 1.100 >> endobj 3 0 obj <> endobj 502 0 obj <>stream 2019-07-15T10:57:40-06:00 2019-07-15T10:57:40-06:00 QuarkXPress(R) 14.02 QuarkXPress(R) 14.02 %%DocumentProcessColors: Cyan Magenta Yellow Black %%EndComments Sally Kennedy Layout 1 endstream endobj 1 0 obj <>/MarkInfo<>/QXPr:DeviceNColorants 2 0 R>> endobj 2 0 obj <<>> endobj xref 0 503 0000000000 65535 f 0000281721 00000 n 0000281943 00000 n 0000278019 00000 n 0000277372 00000 n 0000138520 00000 n 0000138136 00000 n 0000252498 00000 n 0000267987 00000 n 0000000000 00000 f 0000267936 00000 n 0000000000 00000 f 0000267890 00000 n 0000000000 00000 f 0000267843 00000 n 0000000000 00000 f 0000267432 00000 n 0000000000 00000 f 0000267329 00000 n 0000000000 00000 f 0000267115 00000 n 0000000000 00000 f 0000267057 00000 n 0000000000 00000 f 0000267009 00000 n 0000000000 00000 f 0000266963 00000 n 0000000000 00000 f 0000266902 00000 n 0000000000 00000 f 0000266848 00000 n 0000000000 00000 f 0000266790 00000 n 0000000000 00000 f 0000266613 00000 n 0000000000 00000 f 0000266567 00000 n 0000000000 00000 f 0000266513 00000 n 0000000000 00000 f 0000000016 00000 n 0000000079 00000 n 0000000142 00000 n 0000017097 00000 n 0000244333 00000 n 0000244860 00000 n 0000245719 00000 n 0000246458 00000 n 0000246983 00000 n 0000247613 00000 n 0000247823 00000 n 0000248418 00000 n 0000216290 00000 n 0000216449 00000 n 0000254362 00000 n 0000252720 00000 n 0000266467 00000 n 0000000000 00000 f 0000266416 00000 n 0000000000 00000 f 0000266368 00000 n 0000000000 00000 f 0000266309 00000 n 0000000000 00000 f 0000266261 00000 n 0000000000 00000 f 0000266091 00000 n 0000000000 00000 f 0000266042 00000 n 0000000000 00000 f 0000265908 00000 n 0000000000 00000 f 0000265859 00000 n 0000000000 00000 f 0000265761 00000 n 0000000000 00000 f 0000265461 00000 n 0000000000 00000 f 0000265415 00000 n 0000000000 00000 f 0000265356 00000 n 0000000000 00000 f 0000265310 00000 n 0000000000 00000 f 0000265260 00000 n 0000000000 00000 f 0000017262 00000 n 0000138579 00000 n 0000142764 00000 n 0000265214 00000 n 0000000000 00000 f 0000265099 00000 n 0000000000 00000 f 0000017326 00000 n 0000017390 00000 n 0000017454 00000 n 0000033629 00000 n 0000252943 00000 n 0000265052 00000 n 0000000000 00000 f 0000265000 00000 n 0000000000 00000 f 0000264952 00000 n 0000000000 00000 f 0000264897 00000 n 0000000000 00000 f 0000264849 00000 n 0000000000 00000 f 0000264799 00000 n 0000000000 00000 f 0000264742 00000 n 0000000000 00000 f 0000264640 00000 n 0000000000 00000 f 0000264584 00000 n 0000000000 00000 f 0000264529 00000 n 0000000000 00000 f 0000033802 00000 n 0000264473 00000 n 0000000000 00000 f 0000264411 00000 n 0000000000 00000 f 0000033855 00000 n 0000264355 00000 n 0000000000 00000 f 0000264293 00000 n 0000000000 00000 f 0000033908 00000 n 0000264237 00000 n 0000000000 00000 f 0000264169 00000 n 0000000000 00000 f 0000033961 00000 n 0000264113 00000 n 0000000000 00000 f 0000264045 00000 n 0000000000 00000 f 0000034014 00000 n 0000263989 00000 n 0000000000 00000 f 0000263921 00000 n 0000000000 00000 f 0000034067 00000 n 0000263865 00000 n 0000000000 00000 f 0000263797 00000 n 0000000000 00000 f 0000034120 00000 n 0000263741 00000 n 0000000000 00000 f 0000263667 00000 n 0000000000 00000 f 0000034173 00000 n 0000263617 00000 n 0000000000 00000 f 0000263494 00000 n 0000000000 00000 f 0000263444 00000 n 0000000000 00000 f 0000263375 00000 n 0000000000 00000 f 0000263289 00000 n 0000000000 00000 f 0000263233 00000 n 0000000000 00000 f 0000263108 00000 n 0000000000 00000 f 0000034226 00000 n 0000263052 00000 n 0000000000 00000 f 0000262923 00000 n 0000000000 00000 f 0000034279 00000 n 0000262867 00000 n 0000000000 00000 f 0000262770 00000 n 0000000000 00000 f 0000034333 00000 n 0000262714 00000 n 0000000000 00000 f 0000262633 00000 n 0000000000 00000 f 0000034387 00000 n 0000262585 00000 n 0000000000 00000 f 0000262476 00000 n 0000000000 00000 f 0000034441 00000 n 0000034506 00000 n 0000034571 00000 n 0000053986 00000 n 0000248835 00000 n 0000253168 00000 n 0000262428 00000 n 0000000000 00000 f 0000262374 00000 n 0000000000 00000 f 0000262318 00000 n 0000000000 00000 f 0000262232 00000 n 0000000000 00000 f 0000054123 00000 n 0000262176 00000 n 0000000000 00000 f 0000262080 00000 n 0000000000 00000 f 0000054176 00000 n 0000261965 00000 n 0000000000 00000 f 0000261879 00000 n 0000000000 00000 f 0000261823 00000 n 0000000000 00000 f 0000261760 00000 n 0000000000 00000 f 0000054230 00000 n 0000261704 00000 n 0000000000 00000 f 0000261617 00000 n 0000000000 00000 f 0000054284 00000 n 0000261561 00000 n 0000000000 00000 f 0000261492 00000 n 0000000000 00000 f 0000054338 00000 n 0000261436 00000 n 0000000000 00000 f 0000261370 00000 n 0000000000 00000 f 0000054392 00000 n 0000261314 00000 n 0000000000 00000 f 0000261233 00000 n 0000000000 00000 f 0000054446 00000 n 0000261177 00000 n 0000000000 00000 f 0000261088 00000 n 0000000000 00000 f 0000054500 00000 n 0000261027 00000 n 0000000000 00000 f 0000260946 00000 n 0000000000 00000 f 0000260853 00000 n 0000000000 00000 f 0000260704 00000 n 0000000000 00000 f 0000260591 00000 n 0000000000 00000 f 0000260486 00000 n 0000000000 00000 f 0000260438 00000 n 0000000000 00000 f 0000260376 00000 n 0000000000 00000 f 0000260328 00000 n 0000000000 00000 f 0000260275 00000 n 0000000000 00000 f 0000054554 00000 n 0000073533 00000 n 0000253394 00000 n 0000260227 00000 n 0000000000 00000 f 0000260173 00000 n 0000000000 00000 f 0000260125 00000 n 0000000000 00000 f 0000260069 00000 n 0000000000 00000 f 0000260021 00000 n 0000000000 00000 f 0000259970 00000 n 0000000000 00000 f 0000259868 00000 n 0000000000 00000 f 0000259705 00000 n 0000000000 00000 f 0000259654 00000 n 0000000000 00000 f 0000259548 00000 n 0000000000 00000 f 0000259454 00000 n 0000000000 00000 f 0000259259 00000 n 0000000000 00000 f 0000259118 00000 n 0000000000 00000 f 0000258928 00000 n 0000000000 00000 f 0000258880 00000 n 0000000000 00000 f 0000258794 00000 n 0000000000 00000 f 0000073660 00000 n 0000073726 00000 n 0000073792 00000 n 0000093952 00000 n 0000253620 00000 n 0000258746 00000 n 0000000000 00000 f 0000258692 00000 n 0000000000 00000 f 0000258594 00000 n 0000000000 00000 f 0000258539 00000 n 0000000000 00000 f 0000258391 00000 n 0000000000 00000 f 0000258336 00000 n 0000000000 00000 f 0000258188 00000 n 0000000000 00000 f 0000258130 00000 n 0000000000 00000 f 0000258001 00000 n 0000000000 00000 f 0000257832 00000 n 0000000000 00000 f 0000257784 00000 n 0000000000 00000 f 0000257722 00000 n 0000000000 00000 f 0000257674 00000 n 0000000000 00000 f 0000257621 00000 n 0000000000 00000 f 0000257573 00000 n 0000000000 00000 f 0000257487 00000 n 0000000000 00000 f 0000094068 00000 n 0000094134 00000 n 0000094200 00000 n 0000112891 00000 n 0000253846 00000 n 0000257439 00000 n 0000000000 00000 f 0000257385 00000 n 0000000000 00000 f 0000257337 00000 n 0000000000 00000 f 0000257281 00000 n 0000000000 00000 f 0000257233 00000 n 0000000000 00000 f 0000257182 00000 n 0000000000 00000 f 0000257132 00000 n 0000000000 00000 f 0000256972 00000 n 0000000000 00000 f 0000256921 00000 n 0000000000 00000 f 0000256779 00000 n 0000000000 00000 f 0000256723 00000 n 0000000000 00000 f 0000256651 00000 n 0000000000 00000 f 0000113007 00000 n 0000256595 00000 n 0000000000 00000 f 0000256514 00000 n 0000000000 00000 f 0000113061 00000 n 0000256458 00000 n 0000000000 00000 f 0000256380 00000 n 0000000000 00000 f 0000113115 00000 n 0000256324 00000 n 0000000000 00000 f 0000256252 00000 n 0000000000 00000 f 0000113169 00000 n 0000256196 00000 n 0000000000 00000 f 0000256112 00000 n 0000000000 00000 f 0000113223 00000 n 0000256056 00000 n 0000000000 00000 f 0000255963 00000 n 0000000000 00000 f 0000113277 00000 n 0000255907 00000 n 0000000000 00000 f 0000255821 00000 n 0000000000 00000 f 0000113331 00000 n 0000255765 00000 n 0000000000 00000 f 0000255675 00000 n 0000000000 00000 f 0000113386 00000 n 0000255619 00000 n 0000000000 00000 f 0000255525 00000 n 0000000000 00000 f 0000113441 00000 n 0000255469 00000 n 0000000000 00000 f 0000255391 00000 n 0000000000 00000 f 0000113496 00000 n 0000255343 00000 n 0000000000 00000 f 0000255209 00000 n 0000000000 00000 f 0000113551 00000 n 0000113617 00000 n 0000113683 00000 n 0000133561 00000 n 0000254072 00000 n 0000255161 00000 n 0000000000 00000 f 0000255107 00000 n 0000000000 00000 f 0000255051 00000 n 0000000000 00000 f 0000254974 00000 n 0000000000 00000 f 0000133677 00000 n 0000254918 00000 n 0000000000 00000 f 0000254840 00000 n 0000000000 00000 f 0000133730 00000 n 0000254784 00000 n 0000000000 00000 f 0000254697 00000 n 0000000000 00000 f 0000133784 00000 n 0000254649 00000 n 0000000000 00000 f 0000254590 00000 n 0000000000 00000 f 0000254542 00000 n 0000000000 00000 f 0000254490 00000 n 0000000000 00000 f 0000133838 00000 n 0000138020 00000 n 0000215744 00000 n 0000215921 00000 n 0000216014 00000 n 0000216106 00000 n 0000216198 00000 n 0000216610 00000 n 0000216879 00000 n 0000219370 00000 n 0000219688 00000 n 0000223058 00000 n 0000223308 00000 n 0000225604 00000 n 0000226126 00000 n 0000232005 00000 n 0000232416 00000 n 0000237697 00000 n 0000237893 00000 n 0000238203 00000 n 0000238409 00000 n 0000238934 00000 n 0000239191 00000 n 0000241112 00000 n 0000241408 00000 n 0000249006 00000 n 0000250293 00000 n 0000249170 00000 n 0000250675 00000 n 0000249572 00000 n 0000251059 00000 n 0000249865 00000 n 0000251449 00000 n 0000250083 00000 n 0000251832 00000 n 0000250233 00000 n 0000252209 00000 n 0000254298 00000 n 0000254324 00000 n 0000268032 00000 n 0000268982 00000 n 0000269988 00000 n 0000271353 00000 n 0000272836 00000 n 0000274303 00000 n 0000275618 00000 n 0000276941 00000 n 0000277264 00000 n 0000277521 00000 n 0000277584 00000 n 0000277608 00000 n 0000277659 00000 n 0000277734 00000 n 0000277786 00000 n 0000277848 00000 n 0000277883 00000 n 0000277958 00000 n 0000278306 00000 n trailer << /Size 503 /Root 1 0 R /Info 3 0 R /ID[<6755b7c6cd78a4ad6c65885092275882><6755b7c6cd78a4ad6c65885092275882>] >> startxref 281963 %%EOF