%PDF-1.4 % 42 0 obj <> endobj 49 0 obj <> endobj 50 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 490.9714 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 512.4123 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 543.321 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 587.3827 23.0228 Tm (1)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 144.1656 595.427 Tm 0 0 0 1 k -.005 Tc [(Ther)9.3(e will be mor)9.3(e than 64 billion Internet of )19.5(Things)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.3822 595.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 583.427 Tm -.005 Tc [(\(IoT\) de)6.4(vices b)5.4(y)0( 2025.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 231.3083 586.127 Tm 0 Tc (1)Tj ET EMC /P <>BDC BT 9 0 0 9 234.2957 583.427 Tm -.005 Tc [( Many of these de)6.4(vices lack)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.3311 583.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 571.427 Tm -.005 Tc [(necessar)-8.8(y security f)11.7(eatur)9.3(es and could be)]TJ ET EMC /P <>BDC BT 9 0 0 9 305.5616 571.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 559.427 Tm -.005 Tc [(disco)7.3(v)6.4(e)0(r)9.3(ed using IoT)19.5( sear)9.3(ch engines. In a study b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.9601 559.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 547.427 Tm -.005 Tc [(the UK go)7.3(v)6.4(ernment authority Centr)9.3(e for the)]TJ ET EMC /P <>BDC BT 9 0 0 9 313.0918 547.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 535.427 Tm -.005 Tc [(Pr)9.8(otection of National Infr)19.5(astructur)9.3(e \(CPNI\), se)6.4(v)6.4(e)0(r)19.5(a)0(l)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.1776 535.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 523.427 Tm -.005 Tc [(hundr)9.3(ed thousand unpr)9.8(otected de)6.4(vices wer)9.3(e found)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.7668 523.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 511.427 Tm -.005 Tc (on the Internet.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 203.8751 514.127 Tm 0 Tc (2)Tj ET EMC /P <>BDC BT 9 0 0 9 206.8624 511.427 Tm -.005 Tc ( In light of such risk, US State of)Tj ET EMC /P <>BDC BT 9 0 0 9 331.8812 511.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 499.427 Tm -.005 Tc [(California Senate Bill 327 Information Priv)7.3(acy:)]TJ ET EMC /P <>BDC BT 9 0 0 9 324.6223 499.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 487.427 Tm -.005 Tc [(Connected De)6.4(vices \(SB 327\) and similar legislativ)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.1133 487.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 475.427 Tm -.005 Tc [(initiativ)6.4(es aim at addr)9.3(essing these pr)19.5(actical issues)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.7928 475.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 463.427 Tm -.005 Tc [(within a judicial capacity)52.3(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 144.1656 439.427 Tm [(SB 327 was signed b)5.4(y)0( the go)7.3(v)6.4(ernor of the State of)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.691 439.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 427.427 Tm -.005 Tc [(California in September 2018 and will go int)9.8(o eff)11.7(ect)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.0008 427.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 595.427 Tm -.005 Tc [(in Januar)-8.8(y 2020.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 428.2023 598.127 Tm 0 Tc (3)Tj ET EMC /P <>BDC BT 9 0 0 9 431.1895 595.427 Tm -.005 Tc [( While the bill)54.7(s title ties it t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 540.2046 595.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 583.427 Tm -.005 Tc [(priv)7.3(acy \(as it is a pr)9.8(otected fundamental human)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.7161 583.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 571.427 Tm -.005 Tc [(right\), its demanding stipulations addr)9.3(ess the)]TJ ET EMC /P <>BDC BT 9 0 0 9 540.8821 571.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 559.427 Tm -.005 Tc [(security of connected de)6.4(vices. )19.5(The eff)11.7(ect of the law)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.7885 559.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 547.427 Tm -.005 Tc [(is not limited t)9.8(o)0( one US state or just the United)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.3439 547.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 535.427 Tm -.005 Tc [(States, since it can be dicult for de)6.4(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 521.2953 535.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 523.427 Tm -.005 Tc [(manufactur)9.3(ers t)9.8(o)0( contr)9.8(ol wher)9.3(e their pr)9.8(oducts ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.8043 523.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 511.427 Tm -.005 Tc [(sold. In addition, launching a less secur)9.3(e and less)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.2158 511.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 499.427 Tm -.005 Tc [(priv)7.3(acy-friendly v)6.4(ersion of a pr)9.8(oduct anywher)9.3(e can)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.2402 499.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 487.427 Tm -.005 Tc [(be a v)6.4(e)0(r)-8.8(y)0( unpopular decision. )]TJ ET EMC /P <>BDC BT 9 0 0 9 362.6656 463.427 Tm [(Abo)7.3(v)6.4(e)0( all, the law has global impact, as the United)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.4131 463.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 451.427 Tm -.005 Tc [(States is a lar)9.3(ge mark)9.8(et for Internet of )19.5(Things \(IoT\))]TJ ET EMC /P <>BDC BT 9 0 0 9 561.9949 451.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 439.427 Tm -.005 Tc [(pr)9.8(oducts. )19.5(That is why SB 327)54.7(s eff)11.7(ect, lik)9.8(e the US)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.6924 439.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 427.427 Tm -.005 Tc [(California Consumer Priv)7.3(acy Act \(CCP)67.4(A\),)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 522.7708 430.127 Tm 0 Tc (4)Tj ET EMC /P <>BDC BT 9 0 0 9 525.7581 427.427 Tm -.005 Tc [( seems t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.4996 427.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 415.427 Tm -.005 Tc [(go be)6.4(y)7.3(ond the bor)9.3(ders of California and the United)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.9872 415.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 403.427 Tm -.005 Tc [(States. A)8.3(t)0( the same time, it can be expected that)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.3331 403.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 391.427 Tm -.005 Tc [(other US states ma)7.3(y de)6.4(v)6.4(elop their own IoT)19.5( laws t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.5558 391.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 379.427 Tm -.005 Tc [(adjust the scope of their br)9.3(eadth, such as Or)9.3(egon)39.1()54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.8564 379.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 367.427 Tm -.005 Tc (House Bill 2395.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 427.0597 370.127 Tm -.0083 Tc (5 )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 343.427 Tm -.005 Tc [(SB 327 ser)-8.8(v)6.4(es as an illuminating case study in the)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.5063 343.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 331.427 Tm -.005 Tc [(e)6.4(v)7.3(olution of priv)7.3(acy thr)9.8(ough legislation. While it )]TJ ET EMC /P <>BDC BT 9 0 0 9 362.6656 319.427 Tm [(can be attested that priv)7.3(acy is a fundamental right,)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.0048 319.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 307.427 Tm -.005 Tc [(the same cannot be done for security: In this wa)7.3(y)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.9706 307.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 295.427 Tm -.005 Tc [(the connected de)6.4(vices law ex)9.8(emplies a)]TJ ET EMC /P <>BDC BT 9 0 0 9 521.5939 295.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 283.427 Tm -.005 Tc [(bur)9.3(geoning domain of legislatur)9.3(e that is de)6.4(v)6.4(eloped)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.4331 283.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 271.427 Tm -.005 Tc [(t)9.8(o)0( seek the middle gr)9.8(ound among priv)7.3(acy)52.3(, security)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.938 271.427 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 259.427 Tm -.005 Tc [(and technology)52.3(. )]TJ ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 30 0 0 30 144.1656 675.894 Tm .21 1 .75 .12 k -.02 Tc [(Building Security Int)9.8(o IoT)19.6( De)6.4(vices )]TJ ET EMC /P <>BDC BT 18 0 0 18 144.1656 648.8942 Tm [(How SB 327 Highlights Modern Legislativ)6.4(e Challenges)]TJ ET EMC /Artifact <>BDC .9 .53 .1 0 k .16605 67.5 568 180.511 re f EMC /P <>BDC BT /F4 1 Tf 11 0 0 11 36 232.147 Tm 0 0 0 0 k [(F)16.6(arbod H. F)10.3(oomany)81.6(,)]TJ ET EMC /P <>BDC BT /F1 1 Tf 11 0 0 11 130.0952 232.147 Tm [( Ph.D)49.8(., CISSP )]TJ ET EMC /P <>BDC BT 9 0 0 9 36 221.347 Tm 0 Tc [(Is a technical pr)9.8(ogr)19.5(am manager of security r)9.3(esear)9.3(ch at SD Elements/Security Compass. His studies ar)9.3(e focused on the)]TJ ET EMC /P <>BDC BT 9 0 0 9 508.9484 221.347 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 210.547 Tm [(criminological and security applications of biometrics. F)10.3(oomany has been inv)7.3(olv)6.4(ed in academic r)9.3(esear)9.3(ch and industr)-8.8(y pr)9.8(ojects in)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.1827 210.547 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 199.747 Tm [(the ar)9.3(eas of smar)-24.4(t car)9.3(d Ja)7.3(v)7.3(a)0( application de)6.4(v)6.4(elopment, Ja)7.3(v)7.3(a)0( EE-based enterprise e-banking application de)6.4(v)6.4(elopment, priv)7.3(acy and)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.8468 199.747 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 188.947 Tm [(security in softwar)9.3(e de)6.4(v)6.4(elopment, secur)9.3(e design of enterprise applications, adv)7.3(anced signal pr)9.8(ocessing techniques in speech and)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.0743 188.947 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 178.147 Tm [(sound pr)9.8(ocessing, biomedical engineering, and the e)6.4(v)7.3(aluation of the social and priv)7.3(acy aspects of biometric identication.)]TJ ET EMC /P <>BDC BT 9 0 0 9 521.5297 178.147 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 167.347 Tm [(F)10.3(oomany has published and pr)9.3(esented his work on signal pr)9.8(ocessing and security in se)6.4(v)6.4(e)0(r)19.5(al IEEE conf)11.7(er)9.3(ences and journals, the)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.4152 167.347 Tm ( )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36 156.547 Tm [(ISA)5.4(CA)]TJ ET EMC /P <>BDC BT /F1 1 Tf 5.4 0 0 5.4 60.7983 159.517 Tm ()Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 65.0434 156.547 Tm (Journal)Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 94.5967 156.547 Tm [(, crime science conf)11.7(er)9.3(ences and networks, the International Association of Priv)7.3(acy Pr)9.8(of)11.7(essionals \(I)-8.8(APP\) conf)11.7(er)9.3(ence,)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.5587 156.547 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 145.747 Tm [(and )19.5(The Open W)15.2(eb Application Security Pr)9.8(oject \(OW)21(ASP\) Global AppSec Conf)11.7(er)9.3(ences. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 11 0 0 11 36 121.7469 Tm -.02 Tc (Nathanael Mohammed )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36 110.947 Tm 0 Tc [(Is a technical writer at SD Elements/Security Compass. He specializ)7.8(es in communicating about technology)52.3(, with a focus on)]TJ ET EMC /P <>BDC BT 9 0 0 9 525.6694 110.947 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 100.147 Tm [(security)52.3(, priv)7.3(acy and compliance. He has been inv)7.3(olv)6.4(ed with pr)9.8(ojects concerning EU Gener)19.5(al Data Pr)9.8(otection Regulation)]TJ ET EMC /P <>BDC BT 9 0 0 9 510.482 100.147 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 89.3469 Tm [(r)9.3(equir)9.3(ements and tr)19.5(anslating compliance policies t)9.8(o)0( ex)9.8(ecutable pr)9.8(ocesses in Agile softwar)9.3(e de)6.4(v)6.4(elopment, and he has published)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.8761 89.3469 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 78.5468 Tm [(ar)-24.4(ticles in the )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 92.0873 78.5468 Tm [(ISA)5.4(CA Journal)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 148.645 78.5468 Tm ( and )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 168.0381 78.5468 Tm [(I)-8.8(APP Priv)7.3(acy )19.5(T)48.4(ech)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 239.058 78.5468 Tm (.)Tj ET EMC /Figure <>BDC Q q 1 i .16605 415.448 349.502 -160.798 re 241.427 78.547 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS3 gs q 351.364 0 0 -162.578 -.69916 416.358 cm /Im2 Do Q EMC /P <>BDC Q q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36 22.1458 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 143.4848 22.1458 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 572.622 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC 0 0 0 0 k /GS3 gs 36 692.116 58.529 54.884 re f EMC /Figure <>BDC Q q 1 i 36 747 58.5 -54.759 re W n .90588 .52157 .094118 0 k /GS3 gs q 1 0 0 1 36 747 cm 0 0 m 0 -54.884 l 9.375 -54.884 l 9.375 -9.945 l 49.977 -9.945 l 49.977 0 l 0 0 l f Q Q /GS3 gs BT /F5 1 Tf 9 0 0 9 55.1411 721.6074 Tm .90588 .52157 .094118 0 k .0249 Tc 0 Tw (FEATURE)Tj ET EMC endstream endobj 51 0 obj <>/XObject<>/ExtGState<>>> endobj 77 0 obj <> endobj 82 0 obj <> endobj 87 0 obj <> endobj 92 0 obj <> endobj 97 0 obj <> endobj 102 0 obj <> endobj 107 0 obj <> endobj 122 0 obj <> endobj 123 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 143 675.1879 Tm .9 .53 .1 0 k -.005 Tc [(T)101.6(o)0( Whom Does SB 327 A)23.5(pply? )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 143 657.1879 Tm 0 0 0 1 k [(SB 327 applies t)9.8(o)0( manufactur)9.3(ers of de)6.4(vices and)]TJ ET EMC /P <>BDC BT 9 0 0 9 331.7897 657.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 645.1879 Tm -.005 Tc (physical objects sold in California and capable of)Tj ET EMC /P <>BDC BT 9 0 0 9 336.0175 645.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 633.1879 Tm -.005 Tc [(connecting t)9.8(o)0( the Internet. )19.5(The law species that)]TJ ET EMC /P <>BDC BT 9 0 0 9 334.8849 633.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 621.1879 Tm -.005 Tc [(the object)54.7(s connection t)9.8(o)0( the Internet can be dir)9.3(ect)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.7991 621.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 609.1879 Tm -.005 Tc [(or indir)9.3(ect. Manufactur)9.3(ers of mobile phones,)]TJ ET EMC /P <>BDC BT 9 0 0 9 317.9709 609.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 597.1879 Tm -.005 Tc [(lapt)9.8(ops, tablets, e-book r)9.3(eaders, Bluet)9.8(ooth)]TJ ET EMC /P <>BDC BT 9 0 0 9 308.3129 597.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 585.1879 Tm -.005 Tc [(headphones \(that ar)9.3(e indir)9.3(ectly connected t)9.8(o)0( the)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.774 585.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 573.1879 Tm -.005 Tc [(Internet\), smar)-24.4(t IoT)19.5( thermostats, smar)-24.4(t )19.5(T)-7.8(Vs and any)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.3148 573.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 561.1879 Tm -.005 Tc [(other de)6.4(vice that can connect t)9.8(o)0( the Internet \(and)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.2303 561.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 549.1879 Tm -.005 Tc [(ar)9.3(e assigned an IP or Bluet)9.8(ooth addr)9.3(ess\) should)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.1622 549.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 537.1879 Tm -.005 Tc [(comply with this law)60.6(. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 227.3785 537.1879 Tm [(Figur)9.3(e 1)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 259.9777 537.1879 Tm ( depicts the rules of)Tj ET EMC /P <>BDC BT 9 0 0 9 337.8358 537.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 525.1879 Tm -.005 Tc [(how the law is applicable and what needs t)9.8(o)0( be)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.652 525.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 513.1879 Tm -.005 Tc [(done t)9.8(o)0( comply with the law)60.6(. Howe)6.4(v)6.4(e)0(r)60.1(,)0( when writing)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.8525 513.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 501.1879 Tm -.005 Tc [(a softwar)9.3(e libr)19.5(ar)-8.8(y or softwar)9.3(e de)6.4(v)6.4(elopment kit)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.862 501.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 489.1879 Tm -.005 Tc [(\(SDK\) that ma)7.3(y be used in an IoT)19.5( de)6.4(vice, the law)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.0512 489.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 477.1879 Tm -.005 Tc [(does not apply)52.3(. )19.5(Ther)9.3(e needs t)9.8(o)0( be a physical object)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.9442 477.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 465.1879 Tm -.005 Tc [(or de)6.4(vice in question for SB 327 t)9.8(o)0( apply)52.3(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 441.1879 Tm [(While connected de)6.4(vices can be anything, the)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.9919 441.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 429.1879 Tm -.005 Tc [(following list of consumer IoT)19.5( de)6.4(vices giv)6.4(es an idea)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.4789 429.1879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 417.1879 Tm -.005 Tc [(about the r)19.5(ange of applications: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 399.1879 Tm [(Connected childr)9.3(en)39.1()54.7(s)0( t)9.8(o)7.3(ys and bab)5.4(y monit)9.8(ors )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 143 399.1879 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 154 381.1879 Tm 0 0 0 1 k -.005 Tc [(Connected saf)11.7(ety-r)9.3(ele)6.4(v)7.3(ant pr)9.8(oducts such as)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 327.2065 381.1879 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 143 381.1879 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 154 369.1879 Tm 0 0 0 1 k -.005 Tc [(smok)9.8(e detect)9.8(ors and door locks )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 351.1879 Tm [(Smar)-24.4(t camer)19.5(as, )19.5(T)-7.8(Vs and speak)9.8(ers )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 143 351.1879 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 154 333.1879 Tm 0 0 0 1 k -.005 Tc [(W)15.2(ear)19.5(able health tr)19.5(ack)9.8(ers )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 143 333.1879 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 154 315.1879 Tm 0 0 0 1 k -.005 Tc [(Connected home aut)9.8(omation and alarm systems )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 143 315.1879 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 372.5 676.6879 Tm 0 0 0 1 k -.005 Tc (Connected appliances \(e.g., washing )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 361.5 676.6879 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 372.5 664.6879 Tm 0 0 0 1 k -.005 Tc [(machines, r)9.3(efriger)19.5(at)9.8(ors\) )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 646.6879 Tm [(Smar)-24.4(t home assistants)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 464.469 649.3879 Tm -.0083 Tc (6 )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 361.5 646.6879 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /P <>BDC BT /F4 1 Tf 11 0 0 11 361.5 620.6879 Tm .9 .53 .1 0 k -.005 Tc [(Understanding the Law: Requir)9.3(ements for)]TJ ET EMC /P <>BDC BT 11 0 0 11 564.999 620.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 361.5 606.6879 Tm -.005 Tc (Complying With SB 327 )Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 361.5 588.6879 Tm 0 0 0 1 k [(The California State Legislatur)9.3(e consists of two)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.3012 588.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 576.6879 Tm -.005 Tc [(houses, the Senate and Assembly)52.3(. SB 327 was)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.9095 576.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 564.6879 Tm -.005 Tc [(initiated in the Senate and was designed t)9.8(o)0( pr)9.8(otect)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.9061 564.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 552.6879 Tm -.005 Tc [(the priv)7.3(acy and security of connected de)6.4(vices in the)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.093 552.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 540.6879 Tm -.005 Tc [(br)9.8(oadest wa)7.3(y possible. )19.5(Thr)9.8(ough an ex)9.8(change of)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.9875 540.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 528.6879 Tm -.005 Tc [(amendments, the hear)-24.4(t of the law was naliz)7.8(ed int)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.7743 528.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 516.6879 Tm -.005 Tc [(two par)-24.4(ts. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 492.6879 Tm -.02 Tc [(Subdivision \(a\) r)9.3(equir)9.3(es equipping de)6.4(vices with)]TJ ET EMC /P <>BDC BT 9 0 0 9 540.3405 492.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 480.6879 Tm -.02 Tc [(r)9.3(easonable and appr)9.8(opriate security f)11.7(eatur)9.3(es.)]TJ ET EMC /P <>BDC BT 9 0 0 9 534.3108 480.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 468.6879 Tm -.02 Tc [(Subdivision \(b\) is slightly har)9.3(der t)9.8(o)0( decipher)60.1(, but its)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.1673 468.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 456.6879 Tm -.02 Tc [(cor)9.3(e message is illustr)19.5(ated in )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 474.9027 456.6879 Tm [(gur)9.3(e 1)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 504.7606 456.6879 Tm -.0195 Tw [(. The )-19.5(most)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.3064 456.6879 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 444.6879 Tm -.02 Tc [(impor)-24.4(tant point is that while it off)11.7(ers two solutions for)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.0153 444.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 432.6879 Tm -.02 Tc [(secur)9.3(e user authentication, it does not limit what ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.3809 432.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 420.6879 Tm -.02 Tc [(consider)9.3(ed appr)9.8(opriate solutions t)9.8(o)0( only those two. In)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.9927 420.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 408.6879 Tm -.02 Tc [(other wor)9.3(ds, when the law states if either of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.5992 408.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 396.6879 Tm -.02 Tc [(following r)9.3(equir)9.3(ements ar)9.3(e met,)83( it should not be)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.3066 396.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 384.6879 Tm -.02 Tc [(interpr)9.3(eted as ...if and only if)83( In fact, passwor)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.6672 384.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 372.6879 Tm -.02 Tc [(authentication ma)7.3(y no longer be necessar)-8.8(y in many)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.686 372.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 360.6879 Tm -.02 Tc [(situations. Howe)6.4(v)6.4(e)0(r)60.1(,)0( it is easier t)9.8(o)0( r)9.3(esor)-24.4(t t)9.8(o)0( one of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.4576 360.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 348.6879 Tm -.02 Tc (two suggestions of subdivision \(b\) for compliance)Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 336.6879 Tm [(that is, either using unique passwor)9.3(ds for each de)6.4(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.5928 336.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 324.6879 Tm -.02 Tc [(or using a means for rst-time user gener)19.5(ated)]TJ ET EMC /P <>BDC BT 9 0 0 9 535.7214 324.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 312.6879 Tm -.02 Tc [(authentication \(such as t)9.8(o)0(k)9.8(ens and passwor)9.3(ds\).)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.7523 312.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (2)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Figure <>BDC Q .023529 .12941 .20392 0 k /GS3 gs 144.037 68.461 421.928 209.225 re f .90588 .52157 .094118 0 k 144.037 278.977 421.928 14.734 re f q 1 i 144 293.711 422 -225.25 re W n 0 0 0 0 K 0 J 0 j 1.991 w 10 M [] 0 d q 1 0 0 1 144.037 278.977 cm 0 0 m 421.997 0 l S 1 0 0 1 -.037 -.223 cm 0 0 m 421.997 0 l S Q Q BT /F7 1 Tf 9 0 0 9 200.2153 283.6024 Tm 0 0 0 0 k 0 Tc 0 Tw [(Figur)9.6(e).1( 1Rules for How SB 327 Is A)22.6(pplicable and the Requir)8.8(ed Actions for Compliance)]TJ ET .90588 .52157 .094118 0 k 1 i q 1 0 0 1 205.818 228.285 cm 0 0 m 7.526 8.412 l 15.053 0 l 7.526 -8.412 l 0 0 l f Q .91406 .75 .15625 .023438 K 0 J 0 j .443 w 8 M [] 0 d q 1 0 0 1 205.818 228.285 cm 0 0 m 7.526 8.412 l 15.053 0 l 7.526 -8.412 l 0 0 l s Q BT /F8 1 Tf 7.9691 0 0 7.9691 187.5586 260.3817 Tm .74609 .67578 .66797 .89844 k -.001 Tc .0004 Tw (Is a device or physical)Tj 0 -1.2 TD (object being)Tj T* -.0008 Tc 0 Tw (manufactured?)Tj 13.5497 2.8444 TD -.001 Tc .0004 Tw (Is it capable of)Tj 0 -1.2 TD .0005 Tw (connecting to the)Tj T* 0 Tw (Internet?)Tj ET .90588 .52157 .094118 0 k q 1 0 0 1 395.747 230.056 cm 0 0 m 7.526 8.412 l 15.052 0 l 7.526 -8.412 l 0 0 l f Q q 1 0 0 1 395.747 230.056 cm 0 0 m 7.526 8.412 l 15.052 0 l 7.526 -8.412 l 0 0 l s Q BT 7.9691 0 0 7.9691 360.178 210.952 Tm .74609 .67578 .66797 .89844 k -.0009 Tc .0003 Tw (Is it assigned an IP address)Tj T* -.0008 Tc .0002 Tw (or a Bluetooth address?)Tj ET .90588 .52157 .094118 0 k 455.958 213.232 96.957 34.533 re f 455.958 247.765 96.957 -34.533 re S BT 7.9691 0 0 7.9691 458.933 237.3602 Tm 0 0 0 0 k -.0161 Tc .0004 Tw (Equip the device with)Tj T* -.0159 Tc .0002 Tw (reasonable security)Tj T* 0 Tw (features.)Tj ET .90588 .52157 .094118 0 k q 1 0 0 1 497.132 128.671 cm 0 0 m 7.304 8.412 l 14.609 0 l 7.304 -8.412 l 0 0 l f Q q 1 0 0 1 497.132 128.671 cm 0 0 m 7.304 8.412 l 14.609 0 l 7.304 -8.412 l 0 0 l s Q BT 7.9691 0 0 7.9691 512.274 154.2749 Tm .74609 .67578 .66797 .89844 k .0023 Tc -.0004 Tw (Does the)Tj T* (device have)Tj T* .0021 Tc 0 Tw (authentication?)Tj ET .90588 .52157 .094118 0 k 313.4 152.579 115.994 22.579 re f 313.4 175.158 115.994 -22.579 re S BT 6.1982 0 0 6.1982 316.563 162.0969 Tm 0 0 0 0 k .0012 Tc -.0011 Tw (Use a unique password per each device.)Tj ET .90588 .52157 .094118 0 k 313.842 115.389 115.552 22.579 re f 313.842 137.968 115.552 -22.579 re S BT 6.1982 0 0 6.1982 316.838 128.4509 Tm 0 0 0 0 k .0031 Tc .0002 Tw (Generate a first-time authenticator for the)Tj T* .0001 Tw (first use \(e.g., a one-time password\).)Tj ET .90588 .52157 .094118 0 k 313.842 78.643 115.552 22.579 re f 313.842 101.222 115.552 -22.579 re S BT 6.1982 0 0 6.1982 316.838 88.1619 Tm 0 0 0 0 k .0013 Tc -.0012 Tw (Use another strong security feature.)Tj ET .21961 .97647 .73333 .098039 k q 1 0 0 1 220.653 227.711 cm 0 0 m 81.656 .758 l 81.648 1.643 l -.008 .885 l 0 0 l h 81.23 -1.017 m 85.637 1.238 l 81.189 3.41 l 81.23 -1.017 l f Q q 1 0 0 1 321.154 228.847 cm 0 0 m 70.605 .934 l 70.594 1.82 l -.012 .885 l 0 0 l h 70.186 -.842 m 74.584 1.43 l 70.128 3.585 l 70.186 -.842 l f Q q 1 0 0 1 410.585 229.624 cm 0 0 m 41.306 .596 l 41.294 1.481 l -.013 .885 l 0 0 l h 40.889 -1.181 m 45.284 1.096 l 40.826 3.246 l 40.889 -1.181 l f Q 503.55 213.453 .88605 -72.352 re 504.436 213.453 m h 506.207 141.544 m 503.994 137.117 l 501.78 141.544 l 506.207 141.544 l f .14453 .085938 .046875 0 k q 1 0 0 1 443.119 127.565 cm 0 0 m 0 6.234 5.748 11.289 12.839 11.289 c 19.929 11.289 25.678 6.234 25.678 0 c 25.678 -6.235 19.929 -11.29 12.839 -11.29 c 5.748 -11.29 0 -6.235 0 0 c f Q q 1 0 0 1 443.119 127.565 cm 0 0 m 0 6.234 5.748 11.289 12.839 11.289 c 19.929 11.289 25.678 6.234 25.678 0 c 25.678 -6.235 19.929 -11.29 12.839 -11.29 c 5.748 -11.29 0 -6.235 0 0 c s Q BT 7.9691 0 0 7.9691 450.959 124.9079 Tm 0 0 0 1 k -.0024 Tc 0 Tw (OR)Tj ET .21961 .97647 .73333 .098039 k q 1 0 0 1 496.897 129.335 cm 0 0 m -24.353 -.796 l -24.325 -1.68 l .029 -.884 l 0 0 l h -23.969 .989 m -28.322 -1.368 l -23.824 -3.436 l -23.969 .989 l f Q .21961 .97647 .73333 .098039 K q 1 0 0 1 433.821 163.646 cm 0 0 m .499 -74.409 l S Q 443.126 127.122 -5.984 -.88501 re 437.585 128.893 m 433.157 126.679 l 437.585 124.465 l 437.585 128.893 l f q 1 0 0 1 433.452 163.646 cm 0 0 m -4.058 0 l S 1 0 0 1 .83 -36.745 cm 0 0 m -4.888 0 l S 1 0 0 1 .166 -37.632 cm 0 0 m -5.054 0 l S 1 0 0 1 -121.048 85.889 cm 0 0 m .396 -96.386 l S Q 313.407 131.106 -5.984 -.88498 re 307.866 132.877 m 303.439 130.664 l 307.866 128.45 l 307.866 132.877 l f .047059 .65098 .98824 .003922 k q 1 0 0 1 150.034 228.063 cm 0 0 m 0 3.545 10.01 6.419 22.357 6.419 c 34.706 6.419 44.715 3.545 44.715 0 c 44.715 -3.545 34.706 -6.42 22.357 -6.42 c 10.01 -6.42 0 -3.545 0 0 c f Q BT 7.9691 0 0 7.9691 162.3535 225.4071 Tm 0 0 0 0 k -.0082 Tc (START)Tj ET .21961 .97647 .73333 .098039 k q 1 0 0 1 194.529 228.949 cm 0 0 m 7.256 0 l 7.256 -.886 l 0 -.885 l 0 0 l h 6.813 1.771 m 11.241 -.443 l 6.813 -2.656 l 6.813 1.771 l f Q .047059 .65098 .98824 .003922 k q 1 0 0 1 261.601 129.114 cm 0 0 m 0 4.157 9.217 7.526 20.587 7.526 c 31.956 7.526 41.174 4.157 41.174 0 c 41.174 -4.157 31.956 -7.527 20.587 -7.527 c 9.217 -7.527 0 -4.157 0 0 c f Q BT 7.9691 0 0 7.9691 275.041 126.6779 Tm 0 0 0 0 k -.0021 Tc (END)Tj .74609 .67578 .66797 .89844 k -6.9135 13.0556 TD -.0719 Tc (Yes)Tj 13.0616 .0556 TD (Yes)Tj 10.8306 .1668 TD (Yes)Tj 9.1196 -12.7778 TD (Yes)Tj ET .21961 .97647 .73333 .098039 k 213.566 219.873 -.44287 -1.771 re 213.123 219.873 m h 213.566 216.774 -.44287 -1.771 re 213.123 216.774 m h 213.566 213.675 -.44287 -1.771 re 213.123 213.675 m h 213.566 210.576 -.44287 -1.771 re 213.123 210.576 m h 213.566 207.476 -.44287 -1.771 re 213.123 207.476 m h 213.566 204.377 -.44287 -1.771 re 213.123 204.377 m h 213.566 201.278 -.44287 -1.771 re 213.123 201.278 m h 213.566 198.179 -.44287 -1.7709 re 213.123 198.179 m h 213.566 195.08 -.44287 -1.771 re 213.123 195.08 m h 213.566 191.981 -.44287 -1.771 re 213.123 191.981 m h 213.566 188.882 -.44287 -1.771 re 213.123 188.882 m h 213.566 185.783 -.44287 -1.771 re 213.123 185.783 m h 213.566 182.684 -.44287 -1.771 re 213.123 182.684 m h 213.566 179.585 -.44287 -1.771 re 213.123 179.585 m h 213.566 176.486 -.44287 -1.771 re 213.123 176.486 m h 213.566 173.387 -.44287 -1.771 re 213.123 173.387 m h 213.566 170.288 -.44287 -1.771 re 213.123 170.288 m h 213.566 167.188 -.44287 -1.771 re 213.123 167.188 m h 213.566 164.089 -.44287 -1.771 re 213.123 164.089 m h 213.566 160.99 -.44287 -1.771 re 213.123 160.99 m h 213.566 157.891 -.44287 -1.77 re 213.123 157.891 m h 213.566 154.792 -.44287 -1.771 re 213.123 154.792 m h 213.566 151.693 -.44287 -1.771 re 213.123 151.693 m h 213.566 148.594 -.44287 -1.771 re 213.123 148.594 m h 213.566 145.495 -.44287 -1.771 re 213.123 145.495 m h 213.566 142.396 -.44287 -1.772 re 213.123 142.396 m h 213.566 139.296 -.44287 -1.77 re 213.123 139.296 m h 213.566 136.198 -.44287 -1.771 re 213.123 136.198 m h 213.566 133.099 -.44287 -1.771 re 213.123 133.099 m h 213.123 129.999 m 213.123 129.153 l 214.49 129.153 l 214.49 129.595 l 213.344 129.595 l 213.566 129.374 l 213.566 129.999 l 213.123 129.999 l h 215.818 129.153 1.7705 .44199 re 218.917 129.153 1.7706 .44199 re 222.016 129.153 1.771 .44199 re 225.115 129.153 1.771 .44199 re 228.214 129.153 1.771 .44199 re 231.313 129.153 1.771 .44199 re 234.413 129.153 1.771 .44199 re 237.512 129.153 1.771 .44199 re 240.611 129.153 1.771 .44199 re 243.71 129.153 1.7714 .44199 re 246.809 129.153 1.771 .44199 re 249.908 129.153 1.77 .44199 re 253.007 129.153 1.77 .44199 re 256.106 129.153 1.669 .44199 re 257.333 127.161 m 261.76 129.374 l 257.333 131.587 l 257.333 127.161 l f BT 7.9691 0 0 7.9691 215.7168 215.139 Tm .74609 .67578 .66797 .89844 k -.0004 Tc (No)Tj 12.6516 .1773 TD (No)Tj 11.5193 .6005 TD (No)Tj ET .21961 .97647 .73333 .098039 k 313.656 226.957 .44299 -1.771 re 314.099 226.957 m h 313.656 223.858 .44299 -1.771 re 314.099 223.858 m h 313.656 220.759 .44299 -1.7709 re 314.099 220.759 m h 313.656 217.66 .44299 -1.771 re 314.099 217.66 m h 313.656 214.56 .44299 -1.771 re 314.099 214.56 m h 313.656 211.461 .44299 -1.771 re 314.099 211.461 m h 313.656 208.362 .44299 -1.7705 re 314.099 208.362 m h 313.656 205.263 .44299 -1.7705 re 314.099 205.263 m h 313.656 202.164 .44299 -1.7705 re 314.099 202.164 m h 313.656 199.065 .44299 -1.771 re 314.099 199.065 m h 313.656 195.966 .44299 -1.771 re 314.099 195.966 m h 313.656 192.867 .44299 -1.771 re 314.099 192.867 m h 313.656 189.768 .44299 -1.771 re 314.099 189.768 m h 313.656 186.668 .44299 -1.771 re 314.099 186.668 m h 313.656 183.569 .44299 -1.771 re 314.099 183.569 m h 313.537 180.589 -1.771 .44301 re 310.438 180.589 -1.771 .44301 re 307.339 180.589 -1.771 .44301 re 304.24 180.589 -1.772 .44301 re 301.14 180.589 -1.77 .44301 re 298.042 180.589 -1.772 .44301 re 294.942 180.589 -1.77 .44301 re 291.843 180.589 -1.771 .44301 re 288.744 180.589 -1.771 .44301 re 285.645 180.589 -1.771 .44301 re 282.546 180.589 -1.771 .44301 re 279.447 180.589 -1.771 .44301 re 276.348 180.589 -1.771 .44301 re 273.249 180.589 -1.771 .44301 re 270.15 180.589 -1.771 .44301 re 267.578 180.062 .44299 -1.771 re 268.021 180.062 m h 267.578 176.963 .44299 -1.771 re 268.021 176.963 m h 267.578 173.864 .44299 -1.771 re 268.021 173.864 m h 267.578 170.765 .44299 -1.771 re 268.021 170.765 m h 267.578 167.666 .44299 -1.771 re 268.021 167.666 m h 267.578 164.567 .44299 -1.771 re 268.021 164.567 m h 267.578 161.468 .44299 -1.771 re 268.021 161.468 m h 267.578 158.369 .44299 -1.771 re 268.021 158.369 m h 267.578 155.27 .44299 -1.771 re 268.021 155.27 m h 267.578 152.17 .44299 -1.771 re 268.021 152.17 m h 267.578 149.072 .44299 -1.772 re 268.021 149.072 m h 267.578 145.972 .44299 -1.77 re 268.021 145.972 m h 267.578 142.873 .44299 -1.771 re 268.021 142.873 m h 267.578 139.774 .44299 -1.124 re 268.021 139.774 m h 270.013 139.092 m 267.799 134.665 l 265.586 139.092 l 270.013 139.092 l f 504.814 120.116 -.44199 -1.772 re 504.372 120.116 m h 504.814 117.016 -.44199 -1.77 re 504.372 117.016 m h 504.814 113.917 -.44199 -1.771 re 504.372 113.917 m h 503.264 112.368 -1.77 -.44299 re 500.166 112.368 -1.771 -.44299 re 497.066 112.368 -1.77 -.44299 re 493.967 112.368 -1.77 -.44299 re 490.869 112.368 -1.772 -.44299 re 487.769 112.368 -1.77 -.44299 re 484.671 112.368 -1.772 -.44299 re 481.571 112.368 -1.771 -.44299 re 478.472 112.368 -1.771 -.44299 re 475.373 112.368 -1.771 -.44299 re 472.274 112.368 -1.771 -.44299 re 469.174 112.368 -1.77 -.44299 re 466.076 112.368 -1.771 -.44299 re 462.976 112.368 -1.77 -.44299 re 459.878 112.368 -1.771 -.44299 re 456.779 112.368 -1.772 -.44299 re 453.679 112.368 -1.77 -.44299 re 450.581 112.368 -1.772 -.44299 re 447.481 112.368 -1.77 -.44299 re 444.382 112.368 -1.771 -.44299 re 441.283 112.368 -1.771 -.44299 re 438.184 112.368 -1.771 -.44299 re 435.085 112.368 -1.771 -.44299 re 431.986 112.368 -1.771 -.44299 re 428.886 112.368 -1.77 -.44299 re 425.788 112.368 -1.771 -.44299 re 422.689 112.368 -1.771 -.44299 re 419.59 112.368 -1.771 -.44299 re 416.491 112.368 -1.772 -.44299 re 413.391 112.368 -1.77 -.44299 re 410.293 112.368 -1.772 -.44299 re 407.193 112.368 -1.77 -.44299 re 404.094 112.368 -1.771 -.44299 re 400.995 112.368 -1.771 -.44299 re 397.896 112.368 -1.771 -.44299 re 394.797 112.368 -1.771 -.44299 re 391.698 112.368 -1.771 -.44299 re 388.599 112.368 -1.771 -.44299 re 385.5 112.368 -1.771 -.44299 re 382.401 112.368 -1.771 -.44299 re 379.301 112.368 -1.77 -.44299 re 376.203 112.368 -1.772 -.44299 re 373.103 112.368 -1.77 -.44299 re 370.005 112.368 -1.772 -.44299 re 366.905 112.368 -1.771 -.44299 re 363.806 112.368 -1.771 -.44299 re 360.707 112.368 -1.771 -.44299 re 357.608 112.368 -1.77 -.44299 re 354.509 112.368 -1.771 -.44299 re 351.41 112.368 -1.771 -.44299 re 348.311 112.368 -1.771 -.44299 re 345.212 112.368 -1.771 -.44299 re 342.113 112.368 -1.772 -.44299 re 339.013 112.368 -1.77 -.44299 re 335.915 112.368 -1.772 -.44299 re 332.815 112.368 -1.77 -.44299 re 329.716 112.368 -1.771 -.44299 re 326.617 112.368 -1.771 -.44299 re 323.518 112.368 -1.77 -.44299 re 320.419 112.368 -1.771 -.44299 re 317.32 112.368 -1.771 -.44299 re 314.221 112.368 -1.771 -.44299 re 311.122 112.368 -1.771 -.44299 re 308.023 112.368 -1.771 -.44299 re 304.923 112.368 -1.77 -.44299 re 301.825 112.368 -1.772 -.44299 re 298.725 112.368 -1.77 -.44299 re 295.627 112.368 -1.772 -.44299 re 292.527 112.368 -1.77 -.44299 re 289.428 112.368 -1.771 -.44299 re 286.329 112.368 -1.771 -.44299 re 283.23 112.368 m 282.409 112.368 l 282.631 112.146 l 282.631 113.096 l 282.188 113.096 l 282.188 111.925 l 283.23 111.925 l 283.23 112.368 l h 282.188 114.424 .44299 1.772 re 282.631 114.424 m h 282.188 117.524 .44299 .07901 re 282.631 117.524 m h 284.623 117.161 m 282.409 121.587 l 280.195 117.161 l 284.623 117.161 l f BT 7.9691 0 0 7.9691 507.1 115.6109 Tm .74609 .67578 .66797 .89844 k (No)Tj ET .21961 .97647 .73333 .098039 k 403.191 221.643 .44199 -1.7705 re 403.633 221.643 m h 403.191 218.544 .44199 -1.7705 re 403.633 218.544 m h 403.191 215.445 .44199 -1.7709 re 403.633 215.445 m h 403.191 212.346 .44199 -1.771 re 403.633 212.346 m h 403.191 209.247 .44199 -1.771 re 403.633 209.247 m h 403.191 206.148 .44199 -1.771 re 403.633 206.148 m h 403.191 203.049 .44199 -1.771 re 403.633 203.049 m h 403.191 199.95 .44199 -1.771 re 403.633 199.95 m h 403.191 196.851 .44199 -1.771 re 403.633 196.851 m h 403.191 193.751 .44199 -1.7709 re 403.633 193.751 m h 403.191 190.653 .44199 -1.771 re 403.633 190.653 m h 403.191 187.554 .44199 -1.771 re 403.633 187.554 m h 403.191 184.455 .44199 -1.771 re 403.633 184.455 m h 403.191 181.356 .44199 -1.771 re 403.633 181.356 m h 402.359 179.088 -1.77 .44299 re 399.26 179.088 -1.77 .44299 re 396.161 179.088 -1.771 .44299 re 393.062 179.088 -1.77 .44299 re 389.964 179.088 -1.772 .44299 re 386.864 179.088 -1.771 .44299 re 383.765 179.088 -1.771 .44299 re 380.666 179.088 -1.771 .44299 re 377.567 179.088 -1.771 .44299 re 374.467 179.088 -1.77 .44299 re 371.369 179.088 -1.772 .44299 re 368.269 179.088 -1.77 .44299 re 365.171 179.088 -1.772 .44299 re 362.071 179.088 -1.771 .44299 re 358.972 179.088 -1.77 .44299 re 355.874 179.088 -1.772 .44299 re 352.774 179.088 -1.77 .44299 re 349.675 179.088 -1.771 .44299 re 346.576 179.088 -1.771 .44299 re 343.477 179.088 -1.771 .44299 re 340.378 179.088 -1.771 .44299 re 337.279 179.088 -1.772 .44299 re 334.179 179.088 -1.77 .44299 re 331.081 179.088 -1.772 .44299 re 327.981 179.088 -1.77 .44299 re 324.882 179.088 -1.77 .44299 re 321.783 179.088 -1.771 .44299 re 318.684 179.088 -1.77 .44299 re 315.586 179.088 -1.772 .44299 re 312.486 179.088 -1.771 .44299 re 309.387 179.088 -1.771 .44299 re 306.288 179.088 -1.771 .44299 re 303.189 179.088 -1.771 .44299 re 300.09 179.088 -1.771 .44299 re 296.991 179.088 -1.772 .44299 re 293.891 179.088 -1.77 .44299 re 290.793 179.088 -1.771 .44299 re 287.694 179.088 -1.771 .44299 re 284.594 179.088 -1.771 .44299 re 282.188 178.395 .44299 -1.77 re 282.631 178.395 m h 282.188 175.297 .44299 -1.771 re 282.631 175.297 m h 282.188 172.198 .44299 -1.771 re 282.631 172.198 m h 282.188 169.099 .44299 -1.771 re 282.631 169.099 m h 282.188 165.999 .44299 -1.771 re 282.631 165.999 m h 282.188 162.9 .44299 -1.771 re 282.631 162.9 m h 282.188 159.801 .44299 -1.771 re 282.631 159.801 m h 282.188 156.702 .44299 -1.771 re 282.631 156.702 m h 282.188 153.603 .44299 -1.771 re 282.631 153.603 m h 282.188 150.504 .44299 -1.771 re 282.631 150.504 m h 282.188 147.405 .44299 -1.771 re 282.631 147.405 m h 282.188 144.306 .44299 -1.771 re 282.631 144.306 m h 282.188 141.206 .44299 -.246 re 282.631 141.206 m h 284.623 141.403 m 282.409 136.976 l 280.195 141.403 l 284.623 141.403 l f .91406 .75 .15625 .023438 K q 1 0 0 1 306.316 228.728 cm 0 0 m 7.526 8.412 l 15.053 0 l 7.526 -8.412 l 0 0 l s Q .90588 .52157 .094118 0 k q 1 0 0 1 306.316 228.728 cm 0 0 m 7.526 8.412 l 15.053 0 l 7.526 -8.412 l 0 0 l f Q EMC endstream endobj 124 0 obj <>/ExtGState<>>> endobj 165 0 obj <> endobj 166 0 obj <> endobj 167 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (3)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 676.6879 Tm 0 0 0 1 k -.005 Tc [(It is wor)-24.4(th noting that SB 327 was not designed t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.1725 676.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 664.6879 Tm -.005 Tc [(be a )9.8(passwor)9.3(d bill,)83( and subdivision \(b\) was added)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.0364 664.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 652.6879 Tm -.005 Tc [(t)9.8(o)0( the dr)19.5(aft t)9.8(o)0( r)9.3(econcile it with a similar assembly)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.7976 652.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 640.6879 Tm -.005 Tc (bill, AB 1906.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 88.1992 643.3879 Tm 0 Tc (7)Tj ET EMC /P <>BDC BT 9 0 0 9 91.1865 640.6879 Tm -.005 Tc ( In fact, the scope of the bill was)Tj ET EMC /P <>BDC BT 9 0 0 9 218.0774 640.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 628.6879 Tm -.005 Tc [(initially br)9.8(oader and included r)9.3(equir)9.3(ements for the)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.6794 628.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 616.6879 Tm -.005 Tc (consent and notice of data collection.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 185.4868 619.3879 Tm 0 Tc (8)Tj ET EMC /P <>BDC BT 9 0 0 9 188.4741 616.6879 Tm -.005 Tc -.0195 Tw [( The )-19.5(initial)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.8474 616.6879 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 604.6879 Tm -.005 Tc [(dr)19.5(aft expr)9.3(essed concerns about widespr)9.3(ead data)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.9643 604.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 592.6879 Tm -.005 Tc [(br)9.3(eaches and the security and priv)7.3(acy of childr)9.3(en)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.6405 592.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 580.6879 Tm -.005 Tc (and families.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 87.7652 583.3879 Tm 0 Tc (9)Tj ET EMC /P <>BDC BT 9 0 0 9 90.7525 580.6879 Tm -.005 Tc [( Repor)-24.4(ts of hack)9.8(ed t)9.8(o)7.3(ys,)]TJ ET EMC /P <>BDC BT 9 0 0 9 185.6451 580.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 568.6879 Tm -.005 Tc [(nonconsensual data collection b)5.4(y)0( smar)-24.4(t )19.5(T)-7.8(Vs and)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.3535 568.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 556.6879 Tm -.005 Tc [(accounts of a doll that could be pr)9.8(ogr)19.5(ammed t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.5635 556.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 544.6879 Tm -.005 Tc [(utter obscenities t)9.8(o)0( childr)9.3(en demonstr)19.5(ate the)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.044 544.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 532.6879 Tm -.005 Tc [(motiv)7.3(ation behind the bill.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 138.6087 535.3879 Tm -.0083 Tc (10)Tj ET EMC /P <>BDC BT 9 0 0 9 144.5831 532.6879 Tm -.005 Tc [( )19.5(The dr)19.5(aft also quotes)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.7415 532.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 520.6879 Tm -.005 Tc [(the r)9.3(epor)-24.4(ts of mor)9.3(e than 657 br)9.3(eaches \(49 million)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.576 520.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 508.6879 Tm -.005 Tc [(r)9.3(ecor)9.3(ds\) r)9.3(eceiv)6.4(ed b)5.4(y)0( the California A)8.3(t)0(t)9.8(orne)6.4(y Gener)19.5(al)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.5734 508.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 496.6879 Tm -.005 Tc [(between 2012 t)9.8(o)0( 2015.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 127.4923 499.3879 Tm -.0083 Tc (11)Tj ET EMC /P <>BDC BT 9 0 0 9 133.4668 496.6879 Tm -.005 Tc [( )19.5(These facts ar)9.3(e crucial in)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.4998 496.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 484.6879 Tm -.005 Tc (understanding the mission and intended scope of)Tj ET EMC /P <>BDC BT 9 0 0 9 232.2749 484.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 472.6879 Tm -.005 Tc [(this law and similar initiativ)6.4(es. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 36.9471 446.6879 Tm .9 .53 .1 0 k [(Reasonable Security F)10.3(eatur)9.3(es )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 36.9471 428.6879 Tm 0 0 0 1 k -.02 Tc (The crux of the law concerns equipping Internet-)Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 416.6879 Tm [(connected de)6.4(vices with r)9.3(easonable security f)11.7(eatur)9.3(es.)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.1543 416.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 404.6879 Tm -.02 Tc [(The law asks for r)9.3(easonable security f)11.7(eatur)9.3(es that ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.1146 404.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 392.6879 Tm -.02 Tc [(appr)9.8(opriate t)9.8(o)0( the natur)9.3(e and function of the de)6.4(vice,)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.7625 392.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 380.6879 Tm -.02 Tc [(appr)9.8(opriate t)9.8(o)0( the information it handles, and pr)9.8(otect)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.7132 380.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 368.6879 Tm -.02 Tc [(the de)6.4(vice. Many ha)7.3(v)6.4(e)0( found this wor)9.3(ding t)9.8(o)0( be t)9.8(o)0(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.7121 368.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 356.6879 Tm -.02 Tc [(br)9.8(oad and v)7.3(ague.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 102.9078 359.3879 Tm -.0333 Tc (12)Tj ET EMC /P <>BDC BT 9 0 0 9 108.6124 356.6879 Tm -.02 Tc [( Some people ha)7.3(v)6.4(e)0( e)6.4(v)6.4(en criticiz)7.8(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.6908 356.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 344.6879 Tm -.02 Tc [(this add-on appr)9.8(oach t)9.8(o)0( information security)52.3(.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 207.8375 347.3879 Tm -.0333 Tc (13)Tj ET EMC /P <>BDC BT 9 0 0 9 213.542 344.6879 Tm -.02 Tc ( It will)Tj ET EMC /P <>BDC BT 9 0 0 9 235.2613 344.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 332.6879 Tm -.02 Tc [(tak)9.8(e time t)9.8(o)0( see how subdivision \(a\) will be)]TJ ET EMC /P <>BDC BT 9 0 0 9 200.3358 332.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 320.6879 Tm -.02 Tc [(interpr)9.3(eted in the futur)9.3(e.)]TJ ET EMC /P <>BDC BT 9 0 0 9 128.319 320.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 36.9471 294.6879 Tm .9 .53 .1 0 k -.005 Tc [(Using IoT)29.3( Security F)12.7(r)14.7(ameworks t)14.7(o)]TJ ET EMC /P <>BDC BT 11 0 0 11 201.7993 294.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 36.9471 280.6879 Tm -.005 Tc [(De)6.4(v)6.4(elop Reasonable Security F)10.3(eatur)9.3(es )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 36.9471 262.6879 Tm 0 0 0 1 k -.02 Tc [(Se)6.4(v)6.4(e)0(r)19.5(al public pr)9.8(ojects ha)7.3(v)6.4(e)0( tried t)9.8(o)0( build fr)19.5(ameworks)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.3809 262.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 250.6879 Tm -.02 Tc [(for the de)6.4(v)6.4(elopment and e)6.4(v)7.3(aluation of IoT)19.5( security)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.9391 250.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 238.6879 Tm -.02 Tc [(contr)9.8(ols and f)11.7(eatur)9.3(es necessar)-8.8(y for SB 327. It is)]TJ ET EMC /P <>BDC BT 9 0 0 9 219.2684 238.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 226.6879 Tm -.02 Tc [(useful t)9.8(o)0( analyz)7.8(e some of those initiativ)6.4(es because,)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.0415 226.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 214.6879 Tm -.02 Tc [(ultimately)52.3(, it is unknown what the lawmak)9.8(ers of SB)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.5123 214.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 202.6879 Tm -.02 Tc [(327 intended b)5.4(y)0( their br)9.8(oad statements until the)6.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.3816 202.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 190.6879 Tm -.02 Tc [(r)9.3(egulate it thr)9.8(ough legal r)19.5(amications. In the interim,)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.813 190.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 178.6879 Tm -.02 Tc [(the following fr)19.5(ameworks pr)9.8(o)7.3(vide a star)-24.4(ting point )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 166.6879 Tm [( for implementing best pr)19.5(actices for addr)9.3(essing )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 154.6879 Tm (SB 327 compliance.)Tj ET EMC /P <>BDC BT 9 0 0 9 113.1254 154.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F9 1 Tf 9 0 0 9 36.9471 130.6879 Tm -.005 Tc [(The OW)21(ASP IoT)29.3( )29.3(T)101.6(op 10 )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 118.6879 Tm [(The Open W)15.2(eb Application Security Pr)9.8(oject)]TJ ET EMC /P <>BDC BT 9 0 0 9 205.6854 118.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 106.6879 Tm -.005 Tc [(\(OW)21(ASP\) IoT)19.5( )19.5(T)48.4(op 10 and its subpr)9.8(oject, IoT)19.5( A)8.3(ttack)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.9141 106.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 94.6879 Tm -.005 Tc [(Sur)-7.3(face Ar)9.3(eas Pr)9.8(oject, attempt t)9.8(o)0( pr)9.8(o)7.3(vide guidelines)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.7751 94.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 82.6879 Tm -.005 Tc [(for manufactur)9.3(ers and consumers about IoT)]TJ ET EMC /P <>BDC BT 9 0 0 9 211.7498 82.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 70.6879 Tm -.005 Tc (security issues.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 98.1683 73.3878 Tm -.0083 Tc (14)Tj ET EMC /P <>BDC BT 9 0 0 9 104.1429 70.6879 Tm -.005 Tc [( )19.5(The rst vulner)19.5(ability in the IoT)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.9041 70.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 527.25 Tm -.005 Tc [(T)48.4(op 10 is weak, guessable or har)9.3(d-coded)]TJ ET EMC /P <>BDC BT 9 0 0 9 416.1367 527.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 515.25 Tm -.005 Tc [(passwor)9.3(ds, and number six on the list is insucient)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.9841 515.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 503.25 Tm -.005 Tc [(priv)7.3(acy pr)9.8(otection. )19.5(The OW)21(ASP IoT)19.6( )19.5(T)48.4(op 10 focuses)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.0649 503.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 491.25 Tm -.005 Tc [(on simplicity)52.3(. While these pr)9.8(ojects aim t)9.8(o)0( cr)9.3(eate a)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.5905 491.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 479.25 Tm -.005 Tc [(conceptual structur)9.3(e for understanding, classifying)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.7542 479.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 467.25 Tm -.005 Tc [(and addr)9.3(essing IoT)19.5( vulner)19.5(abilities, a mor)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 419.2186 467.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 455.25 Tm -.005 Tc [(compr)9.3(ehensiv)6.4(e fr)19.5(amework is needed for securing)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.5386 455.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 443.25 Tm -.005 Tc [(specic aspects of a pr)9.8(oduct. F)10.3(or example, when)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.2656 443.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 431.25 Tm -.005 Tc [(securing web inter)-7.3(faces, a detailed checklist, such)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.7834 431.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 419.25 Tm -.005 Tc [(as the Application Security V)21.5(erication Standar)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 445.4959 419.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 407.25 Tm -.005 Tc (\(ASVS\),)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 285.3799 409.95 Tm -.0083 Tc (15)Tj ET EMC /P <>BDC BT 9 0 0 9 291.3544 407.25 Tm -.005 Tc [( is mor)9.3(e suitable. In the latest v)6.4(ersion of)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.555 407.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 395.25 Tm -.005 Tc [(ASVS, a separ)19.5(ate appendix C is de)6.4(v)7.3(oted t)9.8(o)0( IoT)]TJ ET EMC /P <>BDC BT 9 0 0 9 436.899 395.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 383.25 Tm -.005 Tc [(v)6.4(erication r)9.3(equir)9.3(ements. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 359.25 Tm [(The OW)21(ASP IoT)19.5( )19.5(T)48.4(op 10 and its subpr)9.8(ojects pr)9.8(o)7.3(vide)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.0649 359.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 347.25 Tm -.005 Tc [(gr)9.3(eat r)19.5(aw material for a team of security engineers)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.5325 347.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 335.25 Tm -.005 Tc [(t)9.8(o)0( examine vulner)19.5(abilities and attack sur)-7.3(face ar)9.3(eas)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.8288 335.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 323.25 Tm -.005 Tc [(t)9.8(o)0( build a secur)9.3(e de)6.4(v)6.4(elopment pr)9.8(ogr)19.5(am. )]TJ ET EMC /P <>BDC BT /F9 1 Tf 9 0 0 9 255.4471 299.25 Tm [(The UK Go)7.3(v)6.4(ernment)-11.7()113.3(s)0( Code of Pr)14.7(actice for)]TJ ET EMC /P <>BDC BT 9 0 0 9 422.7407 299.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 287.25 Tm -.005 Tc (Consumer IoT )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 255.4471 275.25 Tm -.02 Tc [(The UK go)7.3(v)6.4(ernment has de)6.4(v)6.4(eloped useful guidance)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.5009 275.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 263.25 Tm -.02 Tc [(on securing IoT)19.5( de)6.4(vices t)9.8(o)0( r)9.3(etailers and)]TJ ET EMC /P <>BDC BT 9 0 0 9 404.5748 263.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 251.25 Tm -.02 Tc [(manufactur)9.3(ers in a series of pr)9.8(ojects that include)]TJ ET EMC /P <>BDC BT 9 0 0 9 442.0841 251.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 239.25 Tm -.02 Tc [(best pr)19.5(actices in a Secur)9.3(e b)5.4(y)0( Design)50.8( collection,)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 439.1529 241.95 Tm -.0333 Tc (16)Tj ET EMC /P <>BDC BT 9 0 0 9 444.8576 239.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 227.25 Tm -.02 Tc [(Code of Pr)19.5(actice for Consumer IoT)19.5( Security)-7.3()]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 426.7504 229.95 Tm -.0333 Tc (17)Tj ET EMC /P <>BDC BT 9 0 0 9 432.4549 227.25 Tm -.02 Tc ( and a)Tj ET EMC /P <>BDC BT 9 0 0 9 455.6636 227.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 215.25 Tm -.02 Tc [(mapping between this code of pr)19.5(actice against a)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.9497 215.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 203.25 Tm -.02 Tc [(number of other major IoT)19.5( security published)]TJ ET EMC /P <>BDC BT 9 0 0 9 426.9393 203.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 191.25 Tm -.02 Tc [(documents and standar)9.3(ds.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 358.0642 193.95 Tm -.0333 Tc (18)Tj ET EMC /P <>BDC BT 9 0 0 9 363.7687 191.25 Tm -.02 Tc ( Completely aligned with)Tj ET EMC /P <>BDC BT 9 0 0 9 457.131 191.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 179.25 Tm -.02 Tc (SB 327, the rst guideline \(out of 13\) in the code of)Tj ET EMC /P <>BDC BT 9 0 0 9 448.0656 179.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 167.25 Tm -.02 Tc [(pr)19.5(actice is No default passwor)9.3(ds.)83( Similarly)52.3(, the)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.2081 167.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 155.25 Tm -.02 Tc [(documentation includes technical specication b)5.4(y)0( the)]TJ ET EMC /P <>BDC BT 9 0 0 9 460.6865 155.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 143.25 Tm -.02 Tc [(independent not-for-pr)9.8(ot E)8.3(u)0(r)9.8(opean)]TJ ET EMC /P <>BDC BT 9 0 0 9 391.4515 143.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 131.25 Tm -.02 Tc [(T)48.4(elecommunications Standar)9.3(ds Institute \(E)-9.7(T)7.8(SI\),)]TJ ET EMC /P <>BDC BT 9 0 0 9 437.5481 131.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 119.25 Tm -.02 Tc [(which pr)9.8(oduces standar)9.3(ds for telecommunications at)]TJ ET EMC /P <>BDC BT 9 0 0 9 459.548 119.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 107.25 Tm -.02 Tc [(a global le)6.4(v)6.4(el. E)-9.7(T)7.8(SI pr)9.8(o)7.3(vides 13 pr)9.8(o)7.3(visions for Cyber)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.605 107.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 95.25 Tm -.02 Tc [(Security for Consumer Internet of )19.5(Things,)83()]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 414.1201 97.95 Tm -.0333 Tc (19)Tj ET EMC /P <>BDC BT 9 0 0 9 419.8246 95.25 Tm -.02 Tc ( and)Tj ET EMC /P <>BDC BT 9 0 0 9 436.2697 95.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 83.25 Tm -.02 Tc [(pr)9.8(o)7.3(vision 4.1-1 r)9.3(ecommends that the passwor)9.3(ds of)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.9851 83.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 71.25 Tm -.02 Tc [(IoT)19.5( de)6.4(vices be unique and not r)9.3(esettable t)9.8(o)0( any)]TJ ET EMC /P <>BDC BT 9 0 0 9 434.8062 71.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 59.25 Tm -.02 Tc [(univ)6.4(ersal fact)9.8(or)-8.8(y )]TJ ET EMC /P <>BDC BT 9 0 0 9 320.7096 59.25 Tm -.005 Tc [(v)7.3(alues, much lik)9.8(e SB 327. )]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC .9 .53 .1 0 k /GS3 gs 255.447 544.042 346.317 139.396 re f EMC /P <>BDC BT 14 0 0 14 288.6932 653.8677 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(THE)17.5( L)-9.3(A)33.7(W)17.6( ASKS)17.5( FOR)17.5( REASON)-8.8(ABLE)]TJ ET EMC /P <>BDC BT 14 0 0 14 516.2548 653.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 635.8677 Tm .0351 Tc -.0175 Tw [(SECURI)14.1(T)-7.8(Y)17.5( FEA)63(TURES)17.5( )19.6(TH)-8.8(A)63(T)37.1( ARE)]TJ ET EMC /P <>BDC BT 14 0 0 14 476.2041 635.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 617.8677 Tm .0351 Tc -.0371 Tw [(APPROPRI)-8.8(A)63(T)0(E)17.5( T)13.6(O)17.5( THE)17.5( )-19.6(N)-8.8(A)63(TURE)17.5( )-19.6(AND)]TJ ET EMC /P <>BDC BT 14 0 0 14 505.79 617.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 599.8677 Tm .0351 Tc -.0175 Tw [(FUNC)14.1(TION)17.5( OF)17.5( )19.6(THE)17.5( DEVICE)17.5(,)35.1( APPROPRI)-8.8(A)63(T)0(E)17.5( )19.6(T)13.6(O)]TJ ET EMC /P <>BDC BT 14 0 0 14 566.5547 599.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 581.8677 Tm .0351 Tc -.0175 Tw [(THE)17.5( INFORM)-8.8(A)63(TION)17.5( I)14.1(T)37.1( H)-8.8(ANDLES)17.5(,)35.1( AND)]TJ ET EMC /P <>BDC BT 14 0 0 14 514.4579 581.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 563.8677 Tm .0351 Tc -.0371 Tw [(PRO)13.2(TEC)14.1(T)37.1( THE)17.5( )-19.6(DEVICE)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 419.094 573.167 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 437.198 562.879 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 261.64 679.293 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 266.558 665.925 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 168 0 obj <>/ExtGState<>>> endobj 207 0 obj <> endobj 208 0 obj <> endobj 209 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 143 533.4117 Tm -.005 Tc (Among the documentation is a simple and well-)Tj ET EMC /P <>BDC BT 9 0 0 9 143 521.4117 Tm [(written guide published b)5.4(y)0( the UK)54.7(s National Cyber)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.8031 521.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 509.4117 Tm -.005 Tc [(Security Centr)9.3(e \(NCSC)12.7(\))]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 234.4977 512.1116 Tm -.0083 Tc (20)Tj ET EMC /P <>BDC BT 9 0 0 9 240.4723 509.4117 Tm -.005 Tc [( on utilizing passwor)9.3(ds.)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.4576 509.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 497.4117 Tm -.005 Tc [(The guide contains se)6.4(v)6.4(en tips for de)6.4(v)6.4(eloping )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 485.4117 Tm [(a passwor)9.3(d policy and some analysis about )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 473.4117 Tm [(the r)9.3(ecommendations. )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 449.4117 Tm [(The second and thir)9.3(d r)9.3(ecommendations of the code)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.4102 449.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 437.4117 Tm -.005 Tc [(of pr)19.5(actice concern implementing a vulner)19.5(ability)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.2007 437.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 425.4117 Tm -.005 Tc [(disclosur)9.3(e policy and k)9.8(eeping softwar)9.3(e up t)9.8(o)0( date.)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.5922 425.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 413.4117 Tm -.005 Tc [(In a closely r)9.3(elated initiativ)6.4(e, the UK go)7.3(v)6.4(ernment has)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.8874 413.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 401.4117 Tm -.005 Tc [(published a pr)9.8(oposal for mandating a f)11.7(ew security)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.3164 401.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 389.4117 Tm -.005 Tc [(r)9.3(equir)9.3(ements for consumer smar)-24.4(t de)6.4(vices.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 310.9 392.1116 Tm -.0083 Tc (21)Tj ET EMC /P <>BDC BT 9 0 0 9 316.8745 389.4117 Tm -.005 Tc -.0195 Tw [( These)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.1609 389.4117 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 377.4117 Tm -.005 Tc [(r)9.3(equir)9.3(ements ar)9.3(e focused on the t)9.8(op thr)9.3(ee main)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.6164 377.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 365.4117 Tm -.005 Tc [(guidelines in the code of pr)19.5(actice: unique)]TJ ET EMC /P <>BDC BT 9 0 0 9 304.2841 365.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 353.4117 Tm -.005 Tc [(passwor)9.3(ds, vulner)19.5(ability disclosur)9.3(e policies and)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.1749 353.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 341.4117 Tm -.005 Tc (security updates. )Tj ET EMC /P <>BDC BT 9 0 0 9 143 317.4117 Tm [(The similarities between the UK r)9.3(egulat)9.8(or)-8.8(y pr)9.8(oposal)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.3041 317.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 305.4117 Tm -.005 Tc (and SB 327 show how popular belief and dominant)Tj ET EMC /P <>BDC BT 9 0 0 9 343.4781 305.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 293.4117 Tm -.005 Tc [(perspectiv)6.4(es ar)9.3(e structur)9.3(ed ar)9.8(ound the impor)-24.4(tance)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.8872 293.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 281.4117 Tm -.005 Tc [(of these essential f)11.7(eatur)9.3(es. It can be helpful for)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.5248 281.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 269.4117 Tm -.005 Tc [(or)9.3(ganizations t)9.8(o)0( prioritiz)7.8(e the implementation of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.6423 269.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 257.4117 Tm -.005 Tc [(UK)54.7(s 13 guidelines o)7.3(v)6.4(er other IoT)19.5( guidance. In)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.0339 257.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 245.4117 Tm -.005 Tc [(comparison with OW)21(ASP )19.5(T)48.4(op 10 \(which highlights)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.4601 245.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 233.4117 Tm -.005 Tc [(t)9.8(op 10 vulner)19.5(abilities\), the UK code of pr)19.5(actice has a)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.404 233.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 221.4117 Tm -.005 Tc [(mor)9.3(e pr)9.3(escriptiv)6.4(e t)9.8(one. It pr)9.8(o)7.3(vides high-le)6.4(v)6.4(e)0(l)]TJ ET EMC /P <>BDC BT 9 0 0 9 316.7825 221.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 209.4117 Tm -.005 Tc [(guidance on addr)9.3(essing the most signicant)]TJ ET EMC /P <>BDC BT 9 0 0 9 318.0038 209.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 197.4117 Tm -.005 Tc [(consumer IoT)19.5( security issues. Implementing those)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.1191 197.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 185.4117 Tm -.005 Tc [(13 guidelines and considering NCSC)54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 292.2581 185.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 173.4117 Tm -.005 Tc [(r)9.3(ecommendations for passwor)9.3(ds can help)]TJ ET EMC /P <>BDC BT 9 0 0 9 309.755 173.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 161.4117 Tm -.005 Tc [(or)9.3(ganizations be compliant with SB 327. )]TJ ET EMC /P <>BDC BT /F9 1 Tf 9 0 0 9 143 137.4117 Tm [(The E)8.3(u)0(r)17.6(opean Union Agency for Cybersecurity)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.6141 137.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 125.4117 Tm -.005 Tc (Recommendations )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 143 113.4117 Tm [(The E)8.3(u)0(r)9.8(opean Union Agency for Cybersecurity)-7.3()54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 329.4924 113.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 101.4117 Tm -.005 Tc [(\(ENISA)58.6()54.7(s\) IoT)19.5( )19.5(T)48.4(ool)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 213.4433 104.1115 Tm -.0083 Tc (22)Tj ET EMC /P <>BDC BT 9 0 0 9 219.4178 101.4117 Tm -.005 Tc [( and ENISA)58.6()54.7(s)0( Baseline Security)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.8789 101.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 89.4117 Tm -.005 Tc (Recommendations for IoT)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 249.3403 92.1115 Tm -.0083 Tc (23)Tj ET EMC /P <>BDC BT 9 0 0 9 255.3149 89.4117 Tm -.005 Tc ( dene security)Tj ET EMC /P <>BDC BT 9 0 0 9 315.166 89.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 77.4117 Tm -.005 Tc [(measur)9.3(es and pr)19.5(actices for baseline and better)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.7355 77.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 65.4117 Tm -.005 Tc [(security in IoT)19.5( \(and for smar)-24.4(t cities and smar)-24.4(t cars\).)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.7863 65.4117 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 697.9758 Tm -.005 Tc [(Security measur)9.3(es ar)9.3(e categoriz)7.8(ed b)5.4(y)0( security)]TJ ET EMC /P <>BDC BT 9 0 0 9 542.7014 697.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 685.9758 Tm -.005 Tc [(domains and thr)9.3(eat gr)9.8(oups.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 470.3563 688.6757 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 661.9758 Tm -.02 Tc [(Ther)9.3(e ar)9.3(e mor)9.3(e than 80 contr)9.8(ols identied b)5.4(y)0( ENISA)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.4509 661.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 649.9758 Tm -.02 Tc [(on the list. )19.5(The contr)9.8(ols ar)9.3(e technical measur)9.3(es;)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.3115 649.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 637.9758 Tm -.02 Tc [(policies; or or)9.3(ganizational, people and pr)9.8(ocess)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.5192 637.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 625.9758 Tm -.02 Tc [(measur)9.3(es. )19.5(These contr)9.8(ols ar)9.3(e mapped t)9.8(o)0( the OW)21(ASP)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.2162 625.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 613.9758 Tm -.02 Tc [(IoT)19.5( )19.5(T)48.4(op 10 \(and other standar)9.3(ds\) wher)9.3(e)6.4(v)6.4(er possible.)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.1123 613.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 601.9758 Tm -.02 Tc [(The descriptions ar)9.3(e shor)-24.4(t and need mor)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 520.9283 601.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 589.9758 Tm -.02 Tc [(interpr)9.3(etation in many cases. F)10.3(or example, a technical)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.353 589.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 577.9758 Tm -.02 Tc [(contr)9.8(ol r)9.3(eads: Ensur)9.3(e web inter)-7.3(faces fully encr)-8.8(ypt the)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.2214 577.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 565.9758 Tm -.02 Tc [(user session, fr)9.8(om the de)6.4(vice t)9.8(o)0( the back)9.8(end)]TJ ET EMC /P <>BDC BT 9 0 0 9 531.498 565.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 553.9758 Tm -.02 Tc [(ser)-8.8(vices, and that the)6.4(y ar)9.3(e not susceptible t)9.8(o)0( XSS,)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.2772 553.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 541.9758 Tm -.02 Tc [(CSRF)114.3(, SQL injection, etc.,)83()]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 456.9326 544.6757 Tm -.0333 Tc (24)Tj ET EMC /P <>BDC BT 9 0 0 9 462.6371 541.9758 Tm -.02 Tc [( which is br)9.8(oad enough t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.6051 541.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 529.9758 Tm -.02 Tc [(r)9.3(equir)9.3(e a web application security pr)9.8(ogr)19.5(am.)]TJ ET EMC /P <>BDC BT 9 0 0 9 526.009 529.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 505.9758 Tm -.005 Tc [(These r)9.3(ecommendations pr)9.8(o)7.3(vide a mor)9.3(e high-le)6.4(v)6.4(e)0(l)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.8356 505.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 493.9758 Tm -.005 Tc [(y)6.4(et accur)19.5(ate pr)9.3(esentation of IoT)19.5( security)]TJ ET EMC /P <>BDC BT 9 0 0 9 520.21 493.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 481.9758 Tm -.005 Tc [(r)9.3(equir)9.3(ements and can be used in conjunction with)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.4463 481.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 469.9758 Tm -.005 Tc [(the OW)21(ASP IoT)19.5( t)9.8(op 10 and ASVS t)9.8(o)0( ensur)9.3(e full)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.744 469.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 457.9758 Tm -.005 Tc [(co)7.3(v)6.4(e)0(r)19.5(age of r)9.3(equir)9.3(ed activities. As with the OW)21(ASP)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.3994 457.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 445.9758 Tm -.005 Tc [(IoT)19.5( )19.5(T)48.4(op 10 and attack sur)-7.3(face, these r)9.3(equir)9.3(ements)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.5723 445.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 433.9758 Tm -.005 Tc [(need t)9.8(o)0( be fur)-24.4(ther br)9.8(ok)9.8(en down and detailed for)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.067 433.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 421.9758 Tm -.005 Tc (specic use cases and technology stacks. )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 361.5 395.9758 Tm .9 .53 .1 0 k [(Scope and Ov)6.4(er)-8.8(view of IoT)29.3( Security)]TJ ET EMC /P <>BDC BT 11 0 0 11 534.9219 395.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 361.5 381.9758 Tm -.005 Tc [(F)10.3(eatur)9.3(es )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 361.5 363.9758 Tm 0 0 0 1 k -.02 Tc [(As demonstr)19.5(ated, security and priv)7.3(acy contr)9.8(ols can)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.2273 363.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 351.9758 Tm -.02 Tc [(be dened on v)7.3(arious le)6.4(v)6.4(els of gr)19.5(anularity on the)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.2715 351.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 339.9758 Tm -.02 Tc [(policy-t)9.8(o-pr)9.8(ocedur)9.3(e scale. V)22.5(arious initiativ)6.4(es and)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.3464 339.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 327.9758 Tm -.02 Tc [(r)9.3(esear)9.3(ch gr)9.8(oups ha)7.3(v)6.4(e)0( attempted t)9.8(o)0( pr)9.8(o)7.3(vide)]TJ ET EMC /P <>BDC BT 9 0 0 9 525.2837 327.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 315.9758 Tm -.02 Tc [(classications for security vulner)19.5(abilities and contr)9.8(ols)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.8217 315.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 303.9758 Tm -.02 Tc [(at diff)11.7(er)9.3(ent gr)19.5(anularity le)6.4(v)6.4(els. Some classify security)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.2957 303.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 291.9758 Tm -.02 Tc [(r)9.3(equir)9.3(ements int)9.8(o 12 gr)9.8(oups: identication,)]TJ ET EMC /P <>BDC BT 9 0 0 9 524.506 291.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 279.9758 Tm -.02 Tc [(authentication, authorization, auditing, condentiality)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.2816 279.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 267.9758 Tm -.02 Tc [(integrity)52.3(, a)7.3(v)7.3(ailability)52.3(, nonr)9.3(epudiation, immunity)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 536.7111 267.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 255.9758 Tm -.02 Tc [(sur)-8.8(viv)7.3(ability)52.3(, secur)9.3(e maintenance and priv)7.3(acy)]TJ ET EMC /P <>BDC BT 9 0 0 9 533.0012 255.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 243.9758 Tm -.02 Tc [(r)9.3(equir)9.3(ements.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 414.4522 246.6757 Tm -.0333 Tc (25)Tj ET EMC /P <>BDC BT 9 0 0 9 420.1569 243.9758 Tm -.02 Tc [( Others dene se)6.4(v)6.4(en pernicious)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.7996 243.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 231.9758 Tm -.02 Tc [(kingdoms of security that ar)9.3(e widely quoted and)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.4229 231.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 219.9758 Tm -.02 Tc (cited.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 382.4675 222.6757 Tm -.0333 Tc (26)Tj ET EMC /P <>BDC BT 9 0 0 9 388.1721 219.9758 Tm -.02 Tc [( Each of these sour)9.3(ces ser)-8.8(v)6.4(es as a helpful)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.1677 219.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 207.9758 Tm -.02 Tc [(r)9.3(e)0(f)11.7(e)0(r)9.3(ence for identifying and classifying softwar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.3371 207.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 195.9758 Tm -.02 Tc [(security issues in the domain of IoT)106.5(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 498.1289 195.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 171.9758 Tm -.005 Tc [(T)48.4(o)0( addr)9.3(ess the challenge of securing domains such)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.8018 171.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 159.9758 Tm -.005 Tc [(as IoT)19.5( de)6.4(vices, v)7.3(arious attempts at building a)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.1539 159.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 147.9758 Tm -.005 Tc [(security tax)9.8(onomy wer)9.3(e used t)9.8(o)0( arriv)6.4(e at a)]TJ ET EMC /P <>BDC BT 9 0 0 9 527.9653 147.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 135.9758 Tm -.005 Tc [(tax)9.8(onomy of security weaknesses and their r)9.3(ele)6.4(v)7.3(ant)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.9346 135.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 123.9758 Tm -.005 Tc [(security f)11.7(eatur)9.3(es and measur)9.3(es. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 490.2661 123.9758 Tm [(Figur)9.3(e 2)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 522.8652 123.9758 Tm [( pr)9.8(o)7.3(vides a)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.8236 123.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 111.9758 Tm -.005 Tc [(simplied snapshot of this tax)9.8(onomy t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 517.6599 111.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 99.9758 Tm -.005 Tc [(demonstr)19.5(ate the work)54.7(s scope. Under each abstr)19.5(act)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.2964 99.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 87.9758 Tm -.005 Tc [(pr)9.8(oblem, ther)9.3(e ar)9.3(e se)6.4(v)6.4(e)0(r)19.5(al weaknesses and)]TJ ET EMC /P <>BDC BT 9 0 0 9 531.3325 87.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 75.9758 Tm -.005 Tc [(accompanying security measur)9.3(es and contr)9.8(ols that)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.5547 75.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 63.9758 Tm -.005 Tc [(can be consider)9.3(ed security f)11.7(eatur)9.3(es. Additionally)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.144 63.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (4)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Artifact <>BDC .9 .53 .1 0 k /GS3 gs .059998 547.47 348.708 157.256 re f EMC /P <>BDC BT 14 0 0 14 62.1578 675.1556 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(T)13.6(O)17.5( ADDRESS)17.5( )19.6(THE)17.5( CH)-8.8(ALLENGE)17.5( OF)]TJ ET EMC /P <>BDC BT 14 0 0 14 287.7916 675.1556 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.1578 657.1556 Tm .0351 Tc -.0175 Tw [(SECURING)17.6( DOM)-8.8(AINS)17.5( SUCH)17.5( AS)17.5( IO)13.2(T)37.1( DEVICES)17.5(,)]TJ ET EMC /P <>BDC BT 14 0 0 14 332.4928 657.1556 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.1578 639.1556 Tm .0351 Tc -.0175 Tw [(V)36.6(ARIOUS)17.5( A)63(T)-7.8(TEMPT)7.8(S)17.5( A)63(T)37.1( BUILDING)17.6( A)]TJ ET EMC /P <>BDC BT 14 0 0 14 279.2682 639.1556 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.1578 621.1556 Tm .0351 Tc -.0175 Tw [(SECURI)14.1(T)-7.8(Y)17.5( )19.6(T)38.5(A)0(X)12.2(ONOM)13.7(Y)17.5( WERE)17.5( USED)17.5( )19.6(T)13.6(O)]TJ ET EMC /P <>BDC BT 14 0 0 14 292.0652 621.1556 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.1578 603.1556 Tm .0351 Tc -.0175 Tw [(ARRIVE)17.5( A)63(T)37.1( A)17.5( )19.6(T)38.5(A)0(X)12.2(ONOM)13.7(Y)17.5( OF)17.5( SECURI)14.1(T)-7.8(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 296.905 603.1556 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.1578 585.1556 Tm .0351 Tc -.0175 Tw [(WEAKNESSES)17.5( AND)17.5( )19.6(THEIR)17.5( RELEV)36.6(AN)14.1(T)]TJ ET EMC /P <>BDC BT 14 0 0 14 284.402 585.1556 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.1578 567.1556 Tm .0351 Tc -.0175 Tw [(SECURI)14.1(T)-7.8(Y)17.5( FEA)63(TURES)17.5( AND)17.5( MEASURES)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 297.853 576.596 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 315.957 566.308 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 35.105 700.581 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 40.023 687.213 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 210 0 obj <>/ExtGState<>>> endobj 224 0 obj <> endobj 225 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (5)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Figure <>BDC Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .9 .53 .1 0 k /GS3 gs 37.061 690.564 493.639 14.161 re f .05 .65 1 .01 k 36.947 690.564 54.818 -12.791 re 91.765 690.564 89.902 -12.791 re 181.667 690.564 108.54 -12.791 re 290.207 690.564 65.782 -12.791 re 355.989 690.564 87.709 -12.791 re 443.698 690.564 87.709 -12.791 re f .21 1 .75 .12 k 36.947 677.774 54.818 -75.147 re 36.947 602.627 54.818 -133.391 re 36.947 234.934 54.818 -104.154 re f 290.207 677.774 65.782 -123.569 re 290.207 554.204 65.782 -58.244 re 290.207 495.96 65.782 -285.237 re 36.947 469.236 54.818 -234.302 re 290.207 210.723 65.782 -79.943 re f 0 0 0 0 K 0 J 0 j 1.827 w 10 M [] 0 d q 1 0 0 1 36.947 690.564 cm 0 0 m 54.818 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 0 K 0 J 0 j 1.827 w 10 M [] 0 d /GS3 gs q 1 0 0 1 91.765 690.564 cm 0 0 m 351.932 0 l S 1 0 0 1 351.932 0 cm 0 0 m 87.709 0 l S Q .914 w q 1 0 0 1 91.765 678.23 cm 0 0 m 0 11.42 l S 1 0 0 1 89.902 0 cm 0 0 m 0 11.42 l S 1 0 0 1 174.322 0 cm 0 0 m 0 11.42 l S 1 0 0 1 87.709 0 cm 0 0 m 0 11.42 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 36.947 677.774 cm 0 0 m 54.818 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 91.765 677.774 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -24.211 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -26.724 cm 0 0 m 197.528 0 l S 1 0 0 1 199.355 181.813 cm 0 0 m 64.868 0 l S 1 0 0 1 64.868 0 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 677.774 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 665.668 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 665.668 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 653.562 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 653.562 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 634.147 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 634.147 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 614.733 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 614.733 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 602.627 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 602.627 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 590.521 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 590.521 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 578.416 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 578.416 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 566.31 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 566.31 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 554.204 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 554.204 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 542.099 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 542.099 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 522.684 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 522.684 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 495.96 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 495.96 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 469.236 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 469.236 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 449.822 cm 0 0 m 87.709 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 449.822 cm 0 0 m 88.166 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 418.301 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 418.301 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 398.886 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 398.886 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 386.781 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 386.781 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 91.765 469.236 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -12.106 cm 0 0 m 197.528 0 l S 1 0 0 1 0 -19.415 cm 0 0 m 197.528 0 l S 1 0 0 1 264.223 126.082 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 374.675 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 362.569 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 362.569 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 350.464 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 350.464 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 331.049 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 331.049 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 318.943 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 318.943 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 299.529 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 299.529 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 280.114 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 280.114 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 268.008 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 268.008 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 248.593 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 248.593 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 234.934 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 234.934 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 222.829 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 222.829 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 210.723 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 210.723 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 198.617 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 198.617 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 186.512 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 186.512 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 167.097 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 167.097 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 355.989 154.991 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 154.991 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 290.207 130.78 cm 0 0 m 65.782 0 l S 1 0 0 1 65.782 0 cm 0 0 m 87.709 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 443.698 130.78 cm 0 0 m 88.166 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 91.765 234.934 cm 0 0 m 89.902 0 l S 1 0 0 1 89.902 -12.106 cm 0 0 m 107.626 0 l S 1 0 0 1 -89.902 0 cm 0 0 m 89.902 0 l S 1 0 0 1 89.902 -12.106 cm 0 0 m 107.626 0 l S 1 0 0 1 -89.902 0 cm 0 0 m 89.902 0 l S 1 0 0 1 89.902 -12.106 cm 0 0 m 107.626 0 l S 1 0 0 1 -89.902 0 cm 0 0 m 89.902 0 l S 1 0 0 1 89.902 -12.106 cm 0 0 m 107.626 0 l S 1 0 0 1 -89.902 0 cm 0 0 m 89.902 0 l S 1 0 0 1 89.902 -19.415 cm 0 0 m 107.626 0 l S 1 0 0 1 0 -24.211 cm 0 0 m 107.626 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 36.947 130.78 cm 0 0 m 54.818 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 91.765 167.097 cm 0 0 m 89.902 0 l S 1 0 0 1 89.902 -12.106 cm 0 0 m 107.626 0 l S 1 0 0 1 -89.902 -12.106 cm 0 0 m 89.902 0 l S 1 0 0 1 89.902 -12.106 cm 0 0 m 108.54 0 l S 1 0 0 1 0 535.345 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -24.211 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -26.724 cm 0 0 m 0 25.81 l S 1 0 0 1 0 -26.724 cm 0 0 m 0 25.81 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -13.659 cm 0 0 m 0 12.745 l S 1 0 0 1 262.031 430.733 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -26.724 cm 0 0 m 0 25.81 l S 1 0 0 1 0 -26.724 cm 0 0 m 0 25.81 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -13.659 cm 0 0 m 0 12.745 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.562 cm 0 0 m 0 11.649 l S 1 0 0 1 0 -11.649 cm 0 0 m 0 11.649 l S 1 0 0 1 -262.031 92.049 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 459.741 cm 0 0 m 0 11.192 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 0 K 0 J 0 j .914 w 10 M [] 0 d /GS3 gs q 1 0 0 1 36.947 602.627 cm 0 0 m 54.818 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 91.765 602.627 cm 0 0 m 89.902 0 l S 1 0 0 1 89.902 0 cm 0 0 m 107.626 0 l S Q Q q 1 i 37.061 704.726 494.802 -574.403 re W n 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 0 K 0 J 0 j .914 w 10 M [] 0 d /GS3 gs q 1 0 0 1 36.947 469.236 cm 0 0 m 54.818 0 l S 1 0 0 1 0 -234.302 cm 0 0 m 54.818 0 l S Q Q q 1 i 36.947 704.726 494.916 -574.403 re W n 36.947 704.726 493.706 -588.766 re 588.848 23.023 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 1 K 0 J 0 j .914 w 10 M [] 0 d /GS2 gs q 1 0 0 1 181.667 234.934 cm 0 0 m 107.626 0 l S Q 0 0 0 0 K /GS3 gs q 1 0 0 1 291.12 554.204 cm 0 0 m 64.868 0 l S 1 0 0 1 0 -58.244 cm 0 0 m 64.868 0 l S 1 0 0 1 0 -285.237 cm 0 0 m 64.868 0 l S Q 0 0 0 1 K /GS2 gs q 1 0 0 1 91.765 154.991 cm 0 0 m 89.902 0 l S 1 0 0 1 0 -24.211 cm 0 0 m 89.902 0 l S Q 1.827 w q 1 0 0 1 290.207 677.774 cm 0 0 m 0 11.877 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -26.724 cm 0 0 m 0 26.724 l S 1 0 0 1 0 -26.724 cm 0 0 m 0 26.724 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -13.659 cm 0 0 m 0 13.659 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 19.415 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 12.106 l S 1 0 0 1 0 -11.649 cm 0 0 m 0 11.649 l S Q .914 w q 1 0 0 1 531.407 666.125 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -26.724 cm 0 0 m 0 25.81 l S 1 0 0 1 0 -26.724 cm 0 0 m 0 25.81 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -13.659 cm 0 0 m 0 12.745 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -19.415 cm 0 0 m 0 18.501 l S 1 0 0 1 0 -12.106 cm 0 0 m 0 11.192 l S 1 0 0 1 0 -12.562 cm 0 0 m 0 11.649 l S 1 0 0 1 0 -11.649 cm 0 0 m 0 11.649 l S Q /GS3 gs BT /F7 1 Tf 9.1364 0 0 9.1364 145.391 694.219 Tm 0 0 0 0 k -.015 Tc .023 Tw [(Figur)9.8(e 2Ov)6(er)-8.2(view of the Categories of Security Pr)17.8(oblems \(in the IoT)29.2( Domain\))]TJ 7.3091 0 0 7.3091 45.2675 681.4281 Tm -.0099 Tc -.0001 Tw [(Security Goal)-3076.9(W)15.5(e).9(akness Categories)-5862.2(W)15.6(eakness V)21.4(a)-.6(riant)-5818.8(Security Goal)-3676(W)15.6(e)1.1(akness Categories)-4287.1(W)15.6(eakness V)21.4(a)-.6(riant)]TJ 6.3954 0 0 6.3954 40.6017 669.3224 Tm -.0097 Tc 0 Tw [(Data)-9.3( )]TJ 0 -1.143 TD -.0093 Tc (Confidentiality)Tj ET /GS2 gs BT /F8 1 Tf 6.3954 0 0 6.3954 185.3242 669.3224 Tm 0 0 0 1 k -.0095 Tc -.0009 Tw (Timing leakage)Tj ET /GS3 gs BT /F7 1 Tf 6.3954 0 0 6.3954 293.8613 669.3224 Tm 0 0 0 0 k -.0006 Tw (Code Quality)Tj ET /GS2 gs BT /F8 1 Tf 6.3954 0 0 6.3954 447.3521 669.3224 Tm 0 0 0 1 k -.0097 Tc (Integer issues)Tj -40.971 -1.893 TD .0006 Tw [(Err)9.1(o)-1.1(r r)9.3(e)-.2(sponse leakage)]TJ 40.971 0 TD -.0007 Tw [(Buff)11.5(er and pointer issues)]TJ -40.971 -1.893 TD .0006 Tw [(Leakage thr)9.4(o)-1.1(ugh logs, media and)-9( )]TJ 0 -1.143 TD -.0099 Tc 0 Tw (messages)Tj 40.971 1.143 TD -.0096 Tc -.0008 Tw [(T)36(y)1(pe conv)6.5(e)-.2(rsions and format)-10.4( )]TJ 0 -1.143 TD -.0095 Tc 0 Tw (strings)Tj -55.029 -1.893 TD -.0096 Tc -.0008 Tw [(Unpr)9.3(otected data in tr)19.2(ansit)-31083.3(U).3(nclarity of code/err)9.2(o)-.5(r pr)9.2(one)-10( )]TJ 41.314 -1.143 TD -.0094 Tc 0 Tw [(pr)19.4(actices)]TJ -41.314 -1.893 TD -.0097 Tc -.0007 Tw [(Unpr)9.2(otected data at r)9.1(e)0(st)-32003(Using unmanaged code)]TJ ET /GS3 gs BT /F7 1 Tf 6.3954 0 0 6.3954 40.5954 594.1694 Tm 0 0 0 0 k -.0099 Tc -.0001 Tw [(Access Contr)18.3(o)-.5(l)]TJ ET /GS2 gs BT /F8 1 Tf 6.3954 0 0 6.3954 95.4104 594.1694 Tm 0 0 0 1 k -.0091 Tc .0001 Tw [(W)15.8(e).7(ak/missing authentication)-30058.8(Using danger)10.1(ous functions)]TJ 14.057 -1.893 TD .0002 Tw [(Missing authentication)-18468.4(W)15.7(o)-.1(rkflow and logic err)9.9(o)-.6(rs)]TJ T* .0001 Tw [(W)15.9(e).6(ak authentication)]TJ 40.971 0 TD -.0095 Tc -.0009 Tw [(Timing and r)19.6(a)-.3(ce condition)]TJ -40.971 -1.893 TD -.0092 Tc .0002 Tw [(W)15.8(e).5(ak/lack of authorization)-30601.5(U)1.1(nstable/wr)10(ong workflow)-8.4( )]TJ T* [(W)15.7(e).4(ak k)10.2(e)6.6(y/cr)9.7(edential pr)9.9(otection)]TJ ET /GS3 gs BT /F7 1 Tf 6.3954 0 0 6.3954 293.8486 545.7432 Tm 0 0 0 0 k 0 Tw (Nonrepudiation)Tj ET /GS2 gs BT /F8 1 Tf 6.3954 0 0 6.3954 359.6321 545.7432 Tm 0 0 0 1 k .0001 Tw [(Lack of authenticity pr)9.9(oof/check)]TJ -27.257 -1.893 TD -.0095 Tc -.0009 Tw (Session management)Tj 40.971 0 TD -.0096 Tc -.0008 Tw [(Not pr)9.1(o)7(v)-.5(iding authenticity pr)9.4(oof/)]TJ 0 -1.143 TD -.0203 Tc 0 Tw [(fe)-10.4(a)-10.6(t)-10.7(u)-11.4(r)-1.2(e)]TJ -55.029 -1.893 TD -.0093 Tc .0003 Tw [(Privilege escalation and)-10( )]TJ 0 -1.143 TD -.0097 Tc -.0007 Tw [(unnecessar)-8.8(y).2( permissions/)]TJ T* -.0095 Tc 0 Tw (privileges)Tj 55.029 2.286 TD -.01 Tc -.0004 Tw (Not checking authenticity/)Tj 0 -1.2 TD -.0098 Tc 0 Tw (integrity)Tj -40.971 -2.979 TD -.0093 Tc .0003 Tw [(Lacking compar)-23.4(tmentalization/need)-10( )]TJ 0 -1.143 TD -.0186 Tc .0082 Tw [(to)-9.8( k)-9(n)-8.9(o)-9.5(w)]TJ ET /GS3 gs BT /F7 1 Tf 6.3954 0 0 6.3954 293.8486 487.4934 Tm 0 0 0 0 k -.0096 Tc -.0004 Tw [(Secur)9.2(e).1( System Design)]TJ ET /GS2 gs BT /F8 1 Tf 6.3954 0 0 6.3954 359.6321 487.4934 Tm 0 0 0 1 k -.0007 Tw (Lacking design for data flow/)Tj T* 0 Tw (boundaries)Tj ET /GS3 gs BT /F7 1 Tf 6.3954 0 0 6.3954 40.5887 460.7668 Tm 0 0 0 0 k [(Data/System)-10( )]TJ T* -.0095 Tc (Integrity)Tj ET /GS2 gs BT /F8 1 Tf 6.3954 0 0 6.3954 95.4041 460.7668 Tm 0 0 0 1 k -.0096 Tc -.0008 Tw [(Missing or weak input v)7.3(a)-1.2(lidation)-28921.4(M)-.3(issing/weak/exploitable)-10( )]TJ 41.314 -1.143 TD 0 Tw [(backup/r)9.3(e)-.2(st)8.4(or)9.3(e)]TJ -27.257 -1.8929 TD -.0094 Tc .0004 Tw [(Missing tar)9.3(g).4(et v)7.4(alidation)]TJ T* -.0096 Tc .0006 Tw [(Cr)9.2(oss-site scripting)]TJ 40.971 0 TD -.0094 Tc -.001 Tw (Lack of information about/)Tj 0 -1.143 TD .0004 Tw [(contr)9.6(ol o)7.2(v)6.7(er thir)9.6(d par)-23.4(t)-.1(y)-8.7( )]TJ -55.029 -1.893 TD -.0092 Tc .0002 Tw (Missing or weak encoding)Tj 55.029 0 TD -.0011 Tw [(Lack of inter)-7.1(face t)8.9(o)-.6( settings/)]TJ 0 -1.143 TD -.0096 Tc 0 Tw [(par)19.2(a)0(meters)]TJ -55.029 -1.893 TD -.0095 Tc -.0009 Tw (\(String\) injections)Tj 55.029 0 TD -.0093 Tc -.0011 Tw (Missing documentation)Tj -55.029 -1.8931 TD [(Data misr)9.7(epr)9.7(e).1(sentation)]TJ 41.314 0 TD .0004 Tw [(Lacking security contr)9.8(ol r)9.8(o)-.8(utines)]TJ -27.257 -1.893 TD -.0096 Tc .0006 Tw [(Visual misr)9.2(epr)9.4(e)-.1(sentations)-17227.3(Unsecur)9.4(e)-.1( design f)11.7(e)-.1(atur)9.2(es)]TJ T* -.0092 Tc -.0012 Tw (Mime confusion)Tj 40.971 0 TD -.0097 Tc -.0007 Tw [(Inter)-7.8(f).5(ace design issues)-8.7( )]TJ -55.029 -1.893 TD -.0094 Tc -.001 Tw [(Jailbr)9.6(e)0(ak detection)-9.1( )]TJ 0 -1.143 TD -.0091 Tc 0 Tw [(cir)10.2(c)-.1(umv)7.4(e).8(ntion)]TJ 41.314 1.143 TD -.0093 Tc -.0011 Tw [(W)15.7(e).4(ak/lack of logging and)-9.9( )]TJ 0 -1.143 TD 0 Tw [(monit)9.3(oring)]TJ -41.314 -1.893 TD .0004 Tw [(T)37.1(r).5(usting client data/oper)19.4(a)-.4(tion)]TJ 55.029 0 TD -.0012 Tw [(Lack of log pr)9.8(otection)]TJ -55.029 -1.893 TD -.0091 Tc .0001 Tw (Lack of obfuscation and anti-)Tj 0 -1.143 TD 0 Tw (debugging)Tj 55.029 1.143 TD -.0096 Tc -.0008 Tw (Insufficient logging)Tj -55.029 -3.036 TD -.0092 Tc .0002 Tw [(W)15.7(e).5(ak/lack of malicious agent)-9.8( )]TJ 0 -1.143 TD -.0094 Tc 0 Tw (detection)Tj 55.029 1.143 TD -.0011 Tw [(Lack of monit)9.3(oring/r)9.9(e).1(duction/)]TJ 0 -1.143 TD -.019 Tc 0 Tw [(re)-9.6(p)-8.9(o)-9.9(r)-33.2(t)-9.9(i)-10(n)-9.3(g)]TJ -55.029 -1.893 TD -.0091 Tc -.0013 Tw [(Cr)-8(ypt)9.4(ogr)20(aphic issues)]TJ 41.314 0 TD -.0095 Tc .0005 Tw (Lack of updates)Tj -27.257 -1.893 TD -.0092 Tc .0002 Tw [(W)10.8(r)9.8(ong/weak cr)-8(ypt)9.3(ogr)20(aphic oper)20(ations)-12595.8(Ignoring security warnings and)-9.8( )]TJ 27.257 -1.143 TD -.0188 Tc 0 Tw [(re)-9.4(p)-8.7(o)-9.7(r)-33(t)-9.7(s)]TJ -27.257 -1.893 TD -.0093 Tc .0003 Tw [(W)15.6(e).3(ak r)19.8(a)-.8(ndom v)7.9(a)-.8(riables)-18298.2(U).9(nnecessar)-8.1(y).4( f)10.7(e).5(atur)9.6(es)]TJ ET /GS3 gs BT /F7 1 Tf 6.3954 0 0 6.3954 40.5695 226.4441 Tm 0 0 0 0 k -.0095 Tc 0 Tw [(Ser)-8.5(v)-.2(ice)-9.5( )]TJ 0 -1.143 TD -.0093 Tc [(A)25.1(v)7.2(ailability)]TJ ET /GS2 gs BT /F8 1 Tf 6.3954 0 0 6.3954 95.3849 226.4441 Tm 0 0 0 1 k .0004 Tw [(Complex or lar)9.7(ge inputs)]TJ 55.029 0 TD -.0096 Tc 0 Tw (Debuggability)Tj -55.029 -1.893 TD -.0247 Tc [(Lack of priority/emer)8.4(g)-.6(ency design)]TJ 55.029 0 TD -.0092 Tc .0002 Tw [(Remote access/activ)8(a)-.2(tion)]TJ -55.029 -1.893 TD -.0094 Tc -.001 Tw [(Single point of failur)9.5(e)]TJ ET /GS3 gs BT /F7 1 Tf 6.3954 0 0 6.3954 293.8294 202.2309 Tm 0 0 0 0 k -.0007 Tw [(Legal and Priv)7.2(acy)-10.1( )]TJ 0 -1.143 TD -.0099 Tc 0 Tw (Aspects)Tj ET /GS2 gs BT /F8 1 Tf 6.3954 0 0 6.3954 359.6129 202.2309 Tm 0 0 0 1 k -.0092 Tc .0002 Tw [(Lack of pr)10(ofanity blocking)]TJ -41.314 -1.893 TD .0001 Tw [(Lacking fault t)9.3(o)-.5(ler)20(a).4(nce)]TJ 41.314 0 TD -.0011 Tw [(Priv)7.8(a)0(cy violation)]TJ -41.314 -1.893 TD -.0246 Tc -.0001 Tw [(F)15.6(a)-.6(ulty ex)9.5(ception and err)8.4(o)-.3(r)-25.5( )]TJ 0 -1.143 TD -.0244 Tc 0 Tw (handling)Tj 55.029 1.143 TD -.0092 Tc .0002 Tw (Spam emails)Tj -55.029 -3.036 TD -.009 Tc 0 Tw [(F)17.3(ailing unsaf)11.2(e)]TJ 55.029 0 TD -.0095 Tc (Consent)Tj 0 -1.893 TD -.0091 Tc (Notice)Tj ET EMC Q endstream endobj 226 0 obj <>/ExtGState<>>> endobj 252 0 obj <> endobj 257 0 obj <> endobj 262 0 obj <> endobj 267 0 obj <> endobj 272 0 obj <> endobj 277 0 obj <> endobj 282 0 obj <> endobj 291 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 144 676.8104 Tm -.005 Tc [(ther)9.3(e is a contr)9.8(ol database that curr)9.3(ently has mor)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.6019 676.8104 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 664.8104 Tm -.005 Tc [(than 550 weaknesses and mor)9.3(e than 1,350 security)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.7051 664.8104 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 652.8104 Tm -.005 Tc [(f)11.7(eatur)9.3(es and contr)9.8(ols in v)7.3(arious categories of)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.5505 652.8104 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 640.8105 Tm -.005 Tc [(ar)9.3(chitectur)9.3(e and design, de)6.4(v)6.4(elopment,)]TJ ET EMC /P <>BDC BT 9 0 0 9 293.7185 640.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 628.8105 Tm -.005 Tc [(r)9.3(equir)9.3(ements, deplo)7.3(yment, and testing.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 297.1891 631.5105 Tm -.0083 Tc (27)Tj ET EMC /P <>BDC BT 9 0 0 9 303.1637 628.8105 Tm -.005 Tc -.0195 Tw [( These )-19.5(ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.1235 628.8105 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 616.8105 Tm -.005 Tc [(lter)9.3(ed based on the applicability criteria for each)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.3074 616.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 604.8105 Tm -.005 Tc [(pr)9.8(oject. As demonstr)19.5(ated thr)9.8(ough the study of IoT)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.4683 604.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 592.8105 Tm -.005 Tc [(fr)19.5(ameworks, high-le)6.4(v)6.4(el contr)9.8(ol classes can be)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.2458 592.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 580.8105 Tm -.005 Tc [(decomposed int)9.8(o detailed lists of contr)9.8(ols for)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.381 580.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 568.8105 Tm -.005 Tc [(v)7.3(arious technologies. )19.5(These lists can ha)7.3(v)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 310.5532 568.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 556.8105 Tm -.005 Tc [(hundr)9.3(eds of contr)9.8(ols and should be r)9.3(ened based)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.4684 556.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 544.8105 Tm -.005 Tc (on some applicability rules for those technologies. )Tj ET EMC /P <>BDC BT 9 0 0 9 144 520.8104 Tm [(F)10.3(or or)9.3(ganizations that must meet the challenge of)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.7935 520.8104 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 508.8105 Tm -.005 Tc (complying with SB 327, determining actionable)Tj ET EMC /P <>BDC BT 9 0 0 9 328.8137 508.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 496.8105 Tm -.005 Tc [(guidelines for r)9.3(easonable security f)11.7(eatur)9.3(es is)]TJ ET EMC /P <>BDC BT 9 0 0 9 327.0088 496.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 484.8105 Tm -.005 Tc [(alle)6.4(viated b)5.4(y)0( these existing tax)9.8(onomies and contr)9.8(ol)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.6781 484.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 472.8105 Tm -.005 Tc [(databases. )19.5(The tax)9.8(onomy pr)9.3(esented pr)9.3(e)6.4(viously)]TJ ET EMC /P <>BDC BT 9 0 0 9 329.9881 472.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 460.8105 Tm -.005 Tc [(demonstr)19.5(ates the siz)7.8(e of work needed t)9.8(o)0( de)6.4(v)6.4(elop)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.0446 460.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 448.8105 Tm -.005 Tc [(IoT)19.5( de)6.4(vices with security at the for)9.3(efr)9.8(ont. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 144 422.8105 Tm .9 .53 .1 0 k (Conclusion )Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 144 404.8105 Tm 0 0 0 1 k [(SB 327 highlights the fr)9.8(ontier of legislating priv)7.3(acy)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.9407 404.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 392.8105 Tm -.005 Tc [(and security)52.3(. Although the mo)7.3(v)6.4(ement t)9.8(owar)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 320.5815 392.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 380.8105 Tm -.005 Tc [(conceiving of and enfor)9.3(cing the priv)7.3(acy and security)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.8938 380.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 368.8105 Tm -.005 Tc [(of connected de)6.4(vices is gaining tr)19.5(action, as seen in)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.5828 368.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 356.8105 Tm -.005 Tc [(compar)19.5(able alignment among v)7.3(arious other)]TJ ET EMC /P <>BDC BT 9 0 0 9 316.3252 356.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 344.8105 Tm -.005 Tc [(legislativ)6.4(e initiativ)6.4(es, ther)9.3(e exists f)11.7(ew documented)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.722 344.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 332.8105 Tm -.005 Tc [(examples of how the priv)7.3(acy and security of)]TJ ET EMC /P <>BDC BT 9 0 0 9 317.2317 332.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 320.8105 Tm -.005 Tc [(connected de)6.4(vices should be enfor)9.3(ced or how)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.2299 320.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 308.8105 Tm -.005 Tc [(or)9.3(ganizations should addr)9.3(ess compliance. )]TJ ET EMC /P <>BDC BT 9 0 0 9 144 284.8105 Tm [(A good star)-24.4(ting point for exploring and de)6.4(v)6.4(eloping)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.2626 284.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 272.8105 Tm -.005 Tc [(priv)7.3(acy and security contr)9.8(ols for any or)9.3(ganization)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.8569 272.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 260.8105 Tm -.005 Tc [(activ)6.4(ely seeking t)9.8(o)0( comply with IoT)19.5( laws is the UK)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.2632 260.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 248.8106 Tm -.005 Tc [(IoT)19.5( guidelines. In addition t)9.8(o)0( these, de)6.4(v)6.4(eloping)]TJ ET EMC /P <>BDC BT 9 0 0 9 326.2486 248.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 236.8106 Tm -.005 Tc [(technology-specic security contr)9.8(ols can be)]TJ ET EMC /P <>BDC BT 9 0 0 9 317.1703 236.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 224.8106 Tm -.005 Tc [(completed using technical lists of r)9.3(equir)9.3(ements and)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.4159 224.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 212.8106 Tm -.005 Tc [(vulner)19.5(abilities, such as the IoT)19.5( )19.5(T)48.4(op 10, A)8.3(ttack)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.2926 212.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 200.8106 Tm -.005 Tc [(Sur)-7.3(face, ASVS App C and ENISA r)9.3(ecommendations.)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.4937 200.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 188.8106 Tm -.005 Tc [(These contr)9.8(ols can be formed in steps and la)7.3(y)6.4(ers of)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.4027 188.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 176.8106 Tm -.005 Tc [(abstr)19.5(action but r)9.3(equir)9.3(e the exper)-24.4(tise of a security)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.368 176.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 164.8106 Tm -.005 Tc (engineering team. )Tj ET EMC /P <>BDC BT 9 0 0 9 144 140.8106 Tm [(While security tax)9.8(onomies and databases for)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.7538 140.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 128.8105 Tm -.005 Tc [(se)6.4(v)6.4(e)0(r)19.5(al pr)9.8(ogr)19.5(amming languages and technologies)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.924 128.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 116.8105 Tm -.005 Tc [(exist t)9.8(oda)7.3(y)52.3(,)0( it is necessar)-8.8(y t)9.8(o)0( dene criteria for)]TJ ET EMC /P <>BDC BT 9 0 0 9 326.3564 116.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 104.8106 Tm -.005 Tc [(when the)6.4(y become applicable t)9.8(o)0( the IoT)19.6( context t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.5557 104.8106 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 92.8106 Tm -.005 Tc [(best manage and or)9.3(ganiz)7.8(e these tasks. )]TJ ET EMC /P <>BDC BT 9 0 0 9 362.5 676.8104 Tm [(This examination of IoT)19.5( r)9.3(egulations and security)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.3027 676.8104 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 664.8104 Tm -.005 Tc [(contr)9.8(ols underscor)9.3(es the par)19.5(adigm that has)]TJ ET EMC /P <>BDC BT 9 0 0 9 534.8846 664.8104 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 652.8104 Tm -.005 Tc [(become dominant as security)52.3(, priv)7.3(acy and usability)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.997 652.8104 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 640.8105 Tm -.005 Tc [(intersectwher)9.3(e the domain was once lar)9.3(gely open)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.8184 640.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 628.8105 Tm -.005 Tc [(t)9.8(o)0( interpr)9.3(etation, IoT)19.5( de)6.4(vice security and priv)7.3(acy is)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.4959 628.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 616.8105 Tm -.005 Tc [(incr)9.3(easingly accessible t)9.8(o)0( the communities that not)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.58 616.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 604.8105 Tm -.005 Tc [(only inuence their standar)9.3(ds, but that must also)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.5869 604.8105 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 592.8105 Tm -.005 Tc [(abide b)5.4(y)0( them. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 362.5 566.8105 Tm .9 .53 .1 0 k (Endnotes )Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.8636 548.8104 Tm 0 0 0 1 k [(Newman, P)158.2(.; IoT)19.5( Repor)-24.4(t: How Internet of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 539.6642 548.8104 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 367.5 548.8104 Tm .05 .65 1 .01 k (1)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.5 536.8104 Tm 0 0 0 1 k -.005 Tc [(Things )19.5(T)48.4(echnology Gr)9.8(owth Is Reaching)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 532.9197 536.8104 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 524.8104 Tm -.005 Tc [(Mainstr)9.3(eam Companies and Consumers,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 543.014 524.8104 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.5 512.8104 Tm -.005 Tc (Business Insider)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 443.2568 512.8104 Tm [(, 28 Januar)-8.8(y 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 515.0536 512.8104 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.5 500.8105 Tm -.005 Tc [(https:/)109.4(/www)60.6(.businessinsider)60.1(.com/internet- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 488.8105 Tm [(of-things-r)9.3(epor)-24.4(t )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.8636 476.8105 Tm [(Centr)9.3(e for the Pr)9.8(otection of National)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 522.8496 476.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 367.5 476.8105 Tm .05 .65 1 .01 k (2)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.5 464.8105 Tm 0 0 0 1 k -.005 Tc [(Infr)19.5(astructur)9.3(e, Simplifying Y)31.8(our Appr)9.8(oach:)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 546.9047 464.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 452.8105 Tm -.005 Tc [(P)5.4(asswor)9.3(d Guidance,)83( UK, 2015,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 501.7698 452.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.5 440.8105 Tm -.005 Tc [(https:/)109.4(/assets.publishing.ser)-8.8(vice.go)7.3(v)52.3(.uk/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 428.8105 Tm [(go)7.3(v)6.4(ernment/uploads/system/uploads/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 416.8105 Tm [(attachment_data/le/458857/P)5.4(asswor)9.3(d_ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 404.8105 Tm [(guidance_-_simplifying_y)7.3(our_appr)9.8(oach.pdf )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.8636 392.8105 Tm [(California Legislativ)6.4(e Information, )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 367.5 392.8105 Tm .05 .65 1 .01 k 0 Tc (3)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.5 380.8105 Tm 0 0 0 1 k -.005 Tc [(SB 327 Information Priv)7.3(acy: Connected)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 534.0041 380.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 368.8105 Tm -.005 Tc [(De)6.4(vices, USA, 28 September 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 514.5327 368.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.5 356.8105 Tm -.005 Tc [(https:/)109.4(/leginfo.legislatur)9.3(e.ca.go)7.3(v/faces/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 344.8105 Tm [(billT)48.4(extClient.xhtml?bill_id=201720180SB327 )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.8636 332.8105 Tm [(Goldman, E.; )58.6(A)0( Status Repor)-24.4(t on the California)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 562.9437 332.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 367.5 332.8105 Tm .05 .65 1 .01 k (4)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.5 320.8105 Tm 0 0 0 1 k -.005 Tc [(Consumer Priv)7.3(acy Act,)83( )19.5(T)48.4(echnology &)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 526.4301 320.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 308.8105 Tm -.005 Tc [(Mark)9.8(eting Law Blog, 14 F)10.3(ebruar)-8.8(y 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 532.466 308.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.5 296.8105 Tm -.005 Tc [(https:/)109.4(/blog.ericgoldman.or)9.3(g/ar)9.3(chiv)6.4(es/2019/02/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 284.8105 Tm [(a-status-r)9.3(epor)-24.4(t-on-the-california-consumer-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 272.8105 Tm [(priv)7.3(acy-act.htm )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.8636 260.8105 Tm [(Winst)9.8(on & Str)19.5(awn LLP)158.2(, Or)9.3(egon Becomes)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 540.8979 260.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 367.5 260.8105 Tm .05 .65 1 .01 k (5)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.5 248.8106 Tm 0 0 0 1 k -.005 Tc [(Second State t)9.8(o)0( P)5.4(ass Internet of )19.5(Things Data)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 556.5056 248.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 236.8106 Tm -.005 Tc [(Security Law)60.6(,)83()0( Casetext, 21 A)5.4(ugust 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 538.7383 236.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 379.5 224.8106 Tm -.005 Tc [(https:/)109.4(/casetext.com/analysis/or)9.3(egon- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 212.8106 Tm [(becomes-second-state-t)9.8(o-pass-internet-of-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 200.8106 Tm (things-data-security-law )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.8636 188.8106 Tm -.0195 Tw [(E)8.3(u)0(r)9.8(opean T)48.4(elecommunications )-19.5(Standar)9.3(ds)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 544.8969 188.8106 Tm 0 Tc 0 Tw ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 367.5 188.8106 Tm .05 .65 1 .01 k (6)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.5 176.8106 Tm 0 0 0 1 k -.005 Tc (Institute, Cyber Security for Consumer Internet)Tj ET EMC /LBody <>BDC BT 9 0 0 9 564.8071 176.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 164.8106 Tm -.005 Tc -.0195 Tw [(of Things,)83( )-19.5(2019, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 446.8363 164.8106 Tm 0 Tw [(https:/)109.4(/www)60.6(.etsi.or)9.3(g/deliv)6.4(er/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 152.8106 Tm (etsi_ts/103600_103699/103645/ )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 140.8106 Tm (01.01.01_60/ts_103645v010101p.pdf )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 379.8636 128.8105 Tm [(California Legislativ)6.4(e Information, SB 327)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 542.7078 128.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 367.5 128.8105 Tm .05 .65 1 .01 k (7)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 379.5 116.8105 Tm 0 0 0 1 k -.005 Tc [(Information Priv)7.3(acy: Connected De)6.4(vices)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 536.9034 116.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 104.8106 Tm -.005 Tc [(06/29/18- Assembly Priv)7.3(acy and Consumer)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 551.444 104.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 92.8106 Tm -.005 Tc [(Pr)9.8(otection, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 424.3645 92.8106 Tm [(https:/)109.4(/leginfo.legislatur)9.3(e.ca.go)7.3(v/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 379.5 80.8106 Tm (faces/billAnalysisClient.xhtml?bill_id )Tj ET EMC /LBody <>BDC BT 9 0 0 9 379.5 68.8106 Tm (=201720180SB327 )Tj ET EMC /P <>BDC BT /F1 1 Tf 7 0 0 7 39.7789 24.9858 Tm 0 Tc [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (6)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC Q endstream endobj 292 0 obj <>/ExtGState<>>> endobj 310 0 obj <> endobj 315 0 obj <> endobj 320 0 obj <> endobj 325 0 obj <> endobj 330 0 obj <> endobj 335 0 obj <> endobj 340 0 obj <> endobj 345 0 obj <> endobj 350 0 obj <> endobj 355 0 obj <> endobj 360 0 obj <> endobj 365 0 obj <> endobj 370 0 obj <> endobj 375 0 obj <> endobj 380 0 obj <> endobj 385 0 obj <> endobj 390 0 obj <> endobj 395 0 obj <> endobj 400 0 obj <> endobj 405 0 obj <> endobj 406 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (7)Tj ET EMC /LBody <>BDC /GS2 gs BT 9 0 0 9 54.3108 676.8104 Tm 0 0 0 1 k -.005 Tc [(California Legislativ)6.4(e Information, SB 327)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 217.1549 676.8104 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 41.9471 676.8104 Tm .05 .65 1 .01 k (8)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 664.8104 Tm 0 0 0 1 k -.005 Tc [(Information Priv)7.3(acy: Connected De)6.4(vices)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 211.3506 664.8104 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 652.8104 Tm -.005 Tc (05/17/17- Senate Floor Analyses,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 185.5521 652.8104 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 53.9471 640.8105 Tm -.005 Tc [(https:/)109.4(/leginfo.legislatur)9.3(e.ca.go)7.3(v/faces/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 628.8105 Tm (billAnalysisClient.xhtml?bill_id )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 616.8105 Tm (=201720180SB327 )Tj ET EMC /LBody <>BDC BT 9 0 0 9 54.3108 604.8105 Tm (Ibid. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 41.9471 604.8105 Tm .05 .65 1 .01 k 0 Tc (9)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 54.4744 592.8105 Tm 0 0 0 1 k -.005 Tc (Ibid. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 592.8105 Tm .05 .65 1 .01 k 0 Tc (10)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 54.4744 580.8105 Tm 0 0 0 1 k -.005 Tc (Ibid. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 580.8105 Tm .05 .65 1 .01 k 0 Tc (11)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 54.4744 568.8105 Tm 0 0 0 1 k -.005 Tc [(Marsh, C.; California)32.7()54.7(s)0( New IoT)19.5( Security Law)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 229.8441 568.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 568.8105 Tm .05 .65 1 .01 k (12)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 556.8105 Tm 0 0 0 1 k -.005 Tc [(Sparks Conv)6.4(ersation in Sacr)19.5(ament)9.8(o)39.1()54.7(s )19.5(T)48.4(ech)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 221.6802 556.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 544.8105 Tm -.005 Tc [(Community)52.3(,)83()0( Link)9.8(edIn, 2 Januar)-8.8(y 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 205.6256 544.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 53.9471 532.8105 Tm -.005 Tc [(https:/)109.4(/www)60.6(.link)9.8(edin.com/pulse/californias-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 520.8104 Tm [(new-iot-security-law-sparks-conv)6.4(ersation- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 508.8105 Tm (tech-marsh/ )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 54.4744 496.8105 Tm [(Err)19.5(ata Security)52.3(, California)32.7()54.7(s)0( Bad IoT)19.5( Law)60.6(,)83()0( )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 496.8105 Tm .05 .65 1 .01 k 0 Tc (13)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 484.8105 Tm 0 0 0 1 k -.005 Tc (10 September 2018, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 135.4812 484.8105 Tm [(https:/)109.4(/blog.err)19.5(atasec.com/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 472.8105 Tm -.04 Tc [(2018/09/californias-bad-iot-law)60.6(.html#.XRvBHpNKjfZ)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 241.4909 472.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 54.4744 460.8105 Tm -.005 Tc [(The Open W)15.2(eb Application Security Pr)9.8(oject,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 224.9341 460.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 460.8105 Tm .05 .65 1 .01 k (14)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 448.8105 Tm 0 0 0 1 k -.005 Tc [(OW)21(ASP Internet of )19.5(Things Pr)9.8(oject,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 193.9953 448.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 53.9471 436.8105 Tm -.005 Tc [(https:/)109.4(/www)60.6(.owasp.or)9.3(g/index.php/OW)21(ASP_ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 424.8105 Tm [(Internet_of_Things_Pr)9.8(oject )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 54.4744 412.8105 Tm [(The Open W)15.2(eb Application Security Pr)9.8(oject,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 224.9341 412.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 412.8105 Tm .05 .65 1 .01 k (15)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 400.8105 Tm 0 0 0 1 k -.005 Tc [(Categor)-8.8(y: OW)21(ASP Application Security)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 208.6007 400.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 388.8105 Tm -.005 Tc [(V)21.5(erication Standar)9.3(d Pr)9.8(oject,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 171.1139 388.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 53.9471 376.8105 Tm -.005 Tc [(https:/)109.4(/www)60.6(.owasp.or)9.3(g/index.php/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 364.8105 Tm [(Categor)-8.8(y:OW)21(ASP_Application_Security_ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 352.8105 Tm [(V)21.5(erication_Standar)9.3(d_Pr)9.8(oject )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 54.4744 340.8105 Tm [(Go)7.3(v)52.3(.UK, Secur)9.3(e b)5.4(y)0( Design,)83( 6 June 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 215.1321 340.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 340.8105 Tm .05 .65 1 .01 k (16)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 53.9471 328.8105 Tm 0 0 0 1 k -.005 Tc [(https:/)109.4(/www)60.6(.go)7.3(v)52.3(.uk/go)7.3(v)6.4(ernment/publications/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 316.8105 Tm [(secur)9.3(e-b)5.4(y-design )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 54.4744 304.8106 Tm [(Depar)-24.4(tment for Digital, Cultur)9.3(e, Media & Spor)-24.4(t,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 235.7878 304.8106 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 304.8106 Tm .05 .65 1 .01 k (17)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 292.8106 Tm 0 0 0 1 k -.005 Tc [(Code of Pr)19.5(actice for Consumer IoT)19.5( Security)52.3(,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 231.6285 292.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 280.8106 Tm -.005 Tc [(United Kingdom, Oct)9.8(ober 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 176.5289 280.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 53.9471 268.8106 Tm -.005 Tc [(https:/)109.4(/assets.publishing.ser)-8.8(vice.go)7.3(v)52.3(.uk/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 256.8106 Tm [(go)7.3(v)6.4(ernment/uploads/system/uploads/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 244.8106 Tm [(attachment_data/le/773867/Code_of_Pr)19.5(actice)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 232.8106 Tm [(_for_Consumer_IoT_Security_Oct)9.8(ober_2018.pdf )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 54.4744 220.8106 Tm [(Depar)-24.4(tment for Digital, Cultur)9.3(e, Media & Spor)-24.4(t,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 235.7878 220.8106 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 220.8106 Tm .05 .65 1 .01 k (18)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 208.8106 Tm 0 0 0 1 k -.005 Tc [(Mapping of IoT)19.5( Security Recommendations,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 229.7518 208.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 196.8106 Tm -.005 Tc [(Guidance and Standar)9.3(ds t)9.8(o)0( the UK)54.7(s )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 184.8106 Tm [(Code of Pr)19.5(actice for Consumer IoT)19.5( )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 172.8106 Tm [(Security)52.3(,)83()0( United Kingdom, Oct)9.8(ober 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 214.2314 172.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 53.9471 160.8106 Tm -.005 Tc [(https:/)109.4(/assets.publishing.ser)-8.8(vice.go)7.3(v)52.3(.uk/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 148.8106 Tm [(go)7.3(v)6.4(ernment/uploads/system/uploads/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 136.8106 Tm (attachment_data/le/774438/Mapping_of_IoT__)Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 124.8106 Tm (Security_Recommendations_Guidance_and_ )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 112.8106 Tm [(Standar)9.3(ds_t)9.8(o_CoP_Oct_2018.pdf )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.9743 676.8104 Tm (Op cit )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 297.7346 676.8104 Tm -.0195 Tw [(E)8.3(u)0(r)9.8(opean T)48.4(elecommunications)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 420.1998 676.8104 Tm 0 Tc 0 Tw ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 676.8104 Tm .05 .65 1 .01 k (19)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 664.8104 Tm 0 0 0 1 k -.005 Tc [(Standar)9.3(ds Institute )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.9743 652.8104 Tm [(Centr)9.3(e for the Pr)9.8(otection of National)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 415.9603 652.8104 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 652.8104 Tm .05 .65 1 .01 k (20)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 640.8105 Tm 0 0 0 1 k -.005 Tc [(Infr)19.5(astructur)9.3(e, Simplifying Y)31.8(our Appr)9.8(oach:)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 439.8518 640.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 628.8105 Tm -.005 Tc [(P)5.4(asswor)9.3(d Guidance,)83( United Kingdom, 2015,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 446.6346 628.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 616.8105 Tm -.005 Tc [(https:/)109.4(/assets.publishing.ser)-8.8(vice.go)7.3(v)52.3(.uk/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 604.8105 Tm [(go)7.3(v)6.4(ernment/uploads/system/uploads/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 592.8105 Tm [(attachment_data/le/458857/P)5.4(asswor)9.3(d_ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 580.8105 Tm [(guidance_-_simplifying_y)7.3(our_appr)9.8(oach.pdf )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 568.8105 Tm [(E)8.3(u)0(r)9.8(opean Union Agency for Cybersecurity)52.3(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.653 568.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 568.8105 Tm .05 .65 1 .01 k (21)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 556.8105 Tm 0 0 0 1 k -.005 Tc [(ENISA Good Pr)19.5(actices for IoT)19.5( and Smar)-24.4(t)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 434.644 556.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 544.8105 Tm -.03 Tc -.0195 Tw [(Infr)19.5(astructur)9.3(es T)48.4(ool,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 351.0081 544.8105 Tm 0 Tw [(https:/)109.4(/www)60.6(.enisa.eur)9.8(opa.eu/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 459.7233 544.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 532.8105 Tm -.005 Tc [(t)9.8(opics/iot-and-smar)-24.4(t-infr)19.5(astructur)9.3(es/iot/good-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 520.8104 Tm [(pr)19.5(actices-for-iot-and-smar)-24.4(t-infr)19.5(astructur)9.3(es-t)9.8(ool )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 508.8105 Tm [(E)8.3(u)0(r)9.8(opean Union Agency for Cybersecurity)52.3(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.653 508.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 508.8105 Tm .05 .65 1 .01 k (22)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 496.8105 Tm 0 0 0 1 k -.005 Tc [(ENISA Good Pr)19.5(actices for IoT)19.5( and Smar)-24.4(t)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 434.644 496.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 484.8105 Tm -.03 Tc -.0195 Tw [(Infr)19.5(astructur)9.3(es T)48.4(ool,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 351.0081 484.8105 Tm 0 Tw [(https:/)109.4(/www)60.6(.enisa.eur)9.8(opa.eu/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 459.7233 484.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 472.8105 Tm -.005 Tc [(t)9.8(opics/iot-and-smar)-24.4(t-infr)19.5(astructur)9.3(es/iot/good-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 460.8105 Tm [(pr)19.5(actices-for-iot-and-smar)-24.4(t-infr)19.5(astructur)9.3(es-t)9.8(ool )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 448.8105 Tm [(E)8.3(u)0(r)9.8(opean Union Agency for Cybersecurity)52.3(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.653 448.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 448.8105 Tm .05 .65 1 .01 k (23)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 436.8105 Tm 0 0 0 1 k -.005 Tc [(Baseline Security Recommendations for IoT)106.5(,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 451.8039 436.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 424.8105 Tm -.02 Tc (2017, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 295.5768 424.8105 Tm [(https:/)109.4(/www)60.6(.enisa.eur)9.8(opa.eu/publications/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 456.0776 424.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 412.8105 Tm -.005 Tc [(baseline-security-r)9.3(ecommendations-for-iot )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.9743 400.8105 Tm (Ibid)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 287.2832 400.8105 Tm (. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 400.8105 Tm .05 .65 1 .01 k 0 Tc (24)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.9743 388.8105 Tm 0 0 0 1 k -.005 Tc [(Merkow)60.6(, M. S.; L. Ragha)7.3(v)7.3(an; )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 384.584 388.8105 Tm [(Secur)9.3(e and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 427.9037 388.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 388.8105 Tm .05 .65 1 .01 k (25)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 376.8105 Tm 0 0 0 1 k -.005 Tc [(Resilient Softwar)9.3(e De)6.4(v)6.4(elopment)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 395.7573 376.8105 Tm [(, A)5.4(uerbach)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.5126 376.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 364.8105 Tm -.005 Tc (Publications, USA, 2010 )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.9743 352.8105 Tm [(T)56.7(sipenyuk, K.; B. Chess; G. McGr)19.5(aw; Se)6.4(v)6.4(e)0(n)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 442.0192 352.8105 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 352.8105 Tm .05 .65 1 .01 k (26)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 340.8105 Tm 0 0 0 1 k -.005 Tc [(P)6.4(ernicious Kingdoms: A )19.5(T)55.2(a)0(x)9.8(onomy of Softwar)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 458.0231 340.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 328.8105 Tm -.005 Tc [(Security Err)9.8(ors,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 336.4699 328.8105 Tm [(IEEE Security & Priv)7.3(acy)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 425.0487 328.8105 Tm [(, v)7.3(ol. 3,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 451.6658 328.8105 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 316.8105 Tm -.005 Tc (iss. 6, 2005, p. 81-84 )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.9743 304.8106 Tm [(Security Compass, SD Elements Pr)9.8(oduct)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 435.4051 304.8106 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 304.8106 Tm .05 .65 1 .01 k (27)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 292.8106 Tm 0 0 0 1 k -.035 Tc [(Content,)83( 2019, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 329.6473 292.8106 Tm [(https:/)109.4(/www)60.6(.security)6.4(compass.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 460.1011 292.8106 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 280.8106 Tm -.005 Tc (sdelements/content/)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC Q endstream endobj 407 0 obj <>/ExtGState<>>> endobj 6 0 obj <> endobj 5 0 obj <> endobj 43 0 obj <>stream AdobedC         #"""#'''''''''' S" s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?f͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf endstream endobj 44 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''S""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?P)Sab~5"lt8LJ"9ؽ+䎤OC AlI~ݤ_Wbc?T퍊e #ʬ 2 IM%֡9(ɚgB u-Ϗ Lu?rb 9yJS||.E jmT)'qS4YP7$w}$z"Ť$_z,.JC.ҿᵭj=K9MFO,yKSŃM%34\c>$tupISZm^UxP+N2#U{.U-wb SH;ŧZi𷑃R}Z>ti5ۋ|SEh ~c1$ Н2xqbaGI|˲C pR{YyzNAw{InQ?կSnKz#}I9߁zGj~Qv1(>#ꖯUƝrnq"Eq7}T,TrR#HߨxXAȏrMG|3VO'snynvVfיT,{%|8TҔ cKbdVo,LprT3`*i(cZ̴*MĤEEwԁZ⼱#ÙՎv<|r89ӏ:TW2 ]=Vp@UWj\qAF34Ռuҵ0S!Nmd  =5~86aJ2xACkc|146(}VrѣL!zT/qAOm~#717Fe&3WöQbUw&۾u$s+ NhoF")&*L+v (ǩC@Hsm!6:|" !ܮ~#^'b34**n['j#yuZ^“o0xTaΟ% [Ǣ\n \a|/"nL1%;D)#u7Xn6 a}Π 1Nh~>z8~)O]UޮmuCWKpƷ$48yDZͩteFٱT Ҿ$mnF1O 0yͷ0%z\a)vIHڮz"ٹNnϙ4[{xA?K?_ sN$c7S1;fpBPDqF]ǹOi!Dߓ2 '};f#K4w'z l7vc;-]gyzUw$| J{o#l/5Zd>H2O+X/tRN|>cR? uL-f}NS{gP<|V㖛D?}FIoK#=A,ΪBDӴVֹ7@~476H)»`iN!#׼;[E?NG 15'|?['H$YSEˏ ѭGIC 5'h85=NNO' NQ[ɛ6,=N 8j^6Q`l!mu"?Ƶ*%Ѻp$w򭄟yL#KI=P.5i QX)2^ }w8eq"#!%  (~eSXHK Ȥ:̦StZ,v:>HJ0j7k[^3}8{7;K^oIF  c,vVqsv(Lgĥ y(J I[{m"is?*FXɄMK+ntΨ䎔%Ry~IFѠkپOYpF/732 u}WY3t8{[323')@^3&n0h8Cre$,:yDyJGo2G 8eoר) _Br-I7?G`oTC<aռk |JV(ь DGؖ^)tP8 8/1 ?4^W񂀲e۶6}Ryi teoBzk^Ոj֖Pq!yGcVv$~g/]Yn|kR( JW: S,.Cvvt s2JښYY' ̱uuIr"l/?2`$S=Nl.2bQ]]˶JUմQ#"yy1 _7ڋV}&J2̵6_Z9{JYGR x<`=&YH$T7&pYZ%k[k}7OD2Dp7oGk1lXT+B2Yz*슌g.赲H6vG :mL2z܀)Fz"TWA^ci%&>Vsa{D+MemA4}VyJ)ZQէmUX ("xFԧjZv[iZaŏ"ǙlǦ0C<@qM c$3!7ln-` )p]z0[6f}IkB&"Q}aQFN2DݲM~unF|eԵ PuWťpprs5 Ixqcbx2 K",;jz~3ԫ ӮĞe[JOj~skv%BᘁdF}FKtȠin$XӡiӱJAE?tcs%ŝ#0[:rF\'pGÚ 4x{?@48d=ݫ. U򵅚z yMXbuBI͇#S-gYeclGCԩ"%bhʅHទ8MW~!:VDR5OQI;s :c(V3 yAOx3WڌO,MqW.IYR͒dz$#59Gjbp_ QkJ;N ~ mZ,5;@P: ' C#;"#(qޤ42_t dg5QUdU4 Du)GD ң=0BFOnȤJ\|J3GZ0JCQPw~An'#@ٹ*jz.en@NgYO6B1ߕCdXr'&k#6mGO׈ʫ"MpJ/QRvnZ2 0 =[6xI-W^P~CJ%S:q,^O_| -<*K \>l;o-ͨclQcHuK(h!IF*I&VȪy#FdmQbwu2cm i̖7ɖ*KpJ: ӭ Mi?FJW2,Gw? J qNJDsF<0&HȠ ߟ=FlI2fd*4^ ?LAhy/ڝ1(d.d"C(-R\0xMoIr"W6$Mqԩ}>V9M~}Eq,+90nzzVZivPʚĽ+(D=xA q `kIW:{GpCe,P(×/NıoGz˒$:xbM&f#UR(xeNLVc5TQ;OQ,14ݲJ\QJ_?tHq̄=~ղiQi y)for:A =JpCP9 -ui=$VWG(0 cZOP )%iZu^&ᔆjoZS g."n+F:gbH7@&ǽ?]SJ=%}oqQ1GőxҭV_8V5)T5JSrf$@*Vþt;e_&9N><+c[xm{ 4)?q[ Sp̸*Q¶]jq:iN™THmә8cG3Mg<ϧzCXKSҸQefPj@cT 6${ wp@U)$GCPWR#N ~oEWeQz|q W>Mrct^I`#~lG[xZW[YÊ D>,aP'fX(@MH]o4N!jV)&@;vHa-GrP |\NZ`|qtnaBo5)L f5g5x.gq_6}tGidBqߎa=Eq"P07(EָEih*Q}8~TrDVG(JbS~MT4XDcr[|NY}cHS qHQVoX2#_QHmaC.j&\-an-*VZWS%V"@|)lw3#̪"SŶ T/<9PH(+1?WiJp Ufs~㏢|+ڝ{dD5v?ӃZksx˿y^*H8|r9z?/3J"c#r+o~=_>Bs OJb,}5?d(#ߍ# )kl5Zc9,X}1ɔ=xѴuʔ?N!<_Pٞ?M^F TyU%ZWm C4y~|yc}[I|V|SQͬ?ՇA<󎣴=RߩkN bV3t._++э,1"Ys$\55?N3n[⥁erKcK|>as*=q! KQmy5bH OnEUaU> Zw}"7cdXp(Հ+f~LBJ$^ЖN=ZL(YA(jpre䬠aAbɭLOpbS^&?3mcjzt2&wcB9q#F5?9jA;"-HYx@:pdCTU ] ]=OŸ9˨[kyc<+ai"BMCq%OO0A<<VXec1@r}PKrr$-yv9Fc~?¿ai CՂ+p$>n'?h>y;d6vjpm\JyЀ$lSԐ=Z[s.f#傣:.mt4CK̟b'?ni5d@Q(>a2K愎Ϲ 0L )#pڑ$tv"rG'凝KE5\"׵?.<6IO6C޳vRW5'&]aGn>bأ΅bm+Q^} _Ո'o./K?~aIOR[Io#'H Y֊HkD!9$MCMOH|}or,$qtWP⒪\|_3a{O)N58O'%vd SbN'Dk;ݭģLE)1L7m,:@*>e0Kr=r6E`:BgkPFE,I 蟔`ԂMInѿ{1!>ۥqNj?]*pLzM&A?2D{m/g{]^_]T1 e/u;}'X`MFCp:\1 6/.!Xnթfe*Fn$ɤee˽=A'ھ~DԖZDa K+uX @~1(G (>5 ~&jxgc>,pawG8qF8Qp_I!4y8ZtNOdp;}JEU(Bı#nvE\NP)Z9~8Uԍ0HsrFʿtڧ;w9yR'ƈG0 Oj׮/Ur Tw>"TOO 2Ɓ!(_U"2JUb7+Lt X3OXMNbV`yP(N*'P]9q5w<5ſ G*\/3ɻ2V |)2G7t]%G(ooÛ&*ybf#Ǘ[\.QCۇ,y<GR;7vܡbʚ,dl_٤g䭙Irw'l, G2~(,?!޿i^FV1}YԑaLq_%h_pIp?j_ao!k^-"~~a(}Zܟbp>s֣A(>|5' ?Y9t:lgL?{(NG!4o[GkF4n/ ݛc" gzj׮זrE rv`4rʷדOr*;F^*>K3\] @EJ`k3 Zj@GkL)]#Gx D)"piڦmv\95k|B4??5KSغś?$[dnCEkz&[ ʞ#ZbSG`m摏k >{I'O~ 察<_oQ $]Gz)&`H5tҡŭCnsO j57$|Au!*sXi>`ұo;MU>;b9D05>zp2iŇmEZonZX_־d`ZoF'S\[=r>j5r6RrQ$!#$&Zuu.bxBFgL$j04dGljR%z O&XٍEP^`2G,x% G/󞷳g GX$y⮁}`T`:'̓ r5h&w|3 h"ɪ^ǧ/99(*;8QOBHM9U)1Ccp£,-ŚqZ5q֘ă!,|6l7JmLu~\`v KAJc*[6 rbW^8˽w,7&;x@.AsMŸ{e2?cp<iir=H&qy\x8YGi5RDҜ,k,Q" 4 #:%уŷa׷#/ݮ剣PӠ"vߛMiО!dګ9ϼ{$qXH;=>ch8ՕTR{|>:N̡,?>t뮽UmGsI5fs?O%rXM=16Hj c\xQ d2C!&ܝ]^i~$H prx2@巿mi?ad"U@Yb.;_Jv4C2^nOpݴwb?gMyIL4wYʧ50i\^梿wl87%M+oğ.}\iPWï݁#cvyh>(RK3_bASۈ\VAKNؽΤ`dTBm_|DrZU5P2{|ۓĬORFSܱ&)#rnMJ RS~vF@Q[ۡ *7fQy$6uJҧ[y#-D )7qWMnpUj>Q3M6e3@>+ʕn?g]G,Hr FH/O-ޠ*VI7;vPͬJAᄒ"۰ŀ"'7߯( oojA6EIB74dLlbn!yoL1~T_~}0Ofb$a}C?_O^8ĎK= DH|]B+f[R<C&אV7gesM>W*c!ON6@3Ts͉3e3-SsAT$}eyKS_[ge5RؙlilylMq2Qڡ|i|O4([[-- rcKⅱ2\_/劗ċ r +%.|lo,͒lܱ.YERWSHW .:R^"1z k۞Zty| )_᧘?ڳV=sgZϣi+tT⽠S2N|Gǐ=>aD/#-ĵ$1>Wİrޡz60_M{=6tˀJ8oXMiV~mz4Y$w9m/4yoҫKF"hj?k!_'%5+=Z2)a64GњGhdemFY'3r>&l˨$N?dw7\IΎȡGLB;#ja|ƉȿBCG`=?0oHgOl!->RAc)i=ӕ,%!1MϻZ#9HNk>U8?JnoN?CLO,)cE'Q]i6n̮ѱBўHH4q?&ih[51ێRH}0o=I _O\% @K4 76Y e.ʌYi>W)LX1 u=' D:ӸM  @Qe#m(k B;b,lDT Q\E"5=-"!uxhBʝ%j2(xZ$ce^  4d;KnĎS v80L{Cv'$vR2̞G|ٙI+Sฯm,?dJ?ݤo_XX͎ 0#_IbYqv8qD9uG"#9,xjD=a~R(& -nʂ;f%*c VX۬gf?*ժ/9c{ < GӇ0yo#zk68EkoSBu5Ȟ3%Cu?8Tt\u=OXo e1ȜG+Sx80'.C.$֚yF#_î-6qgB$Vrۦy)ቋUa]2(P(>?ͺFvj]B+_6 Nfh%\:j׭/1(r,Wh33(F3^A {CYusX+܍ZuF:,bp"&c8}b'gDH vγSP{uAɡ"hb79䢌=SJi1x1SʸG9w # Du5B[51mGcڐ|` ሕ# ZE L: иn fT-pEC(kb30&1&Af,Xl7GJ5-(sT'+Owm 2;u,Bi0aJ0v6Q\gEiڟZWaGԉJ5O 32HWUcE+F(A(?_{+ֹnx~8aI'6cKV!sb$ǂ~.[oAFNQF^HmfD'L?I9kXBz1SrkdXVTvP}J؟ 27;QW.Y_HsZ!+1(`J+T&R*b;g6W/t0 vkSNC|W^LD抠>5}k &&28ˣx=LyJ'2giW5Sv>FWВiAy/-k_RK7@O!@ZWVzM]cRgUi$Hn5`..M!A2.n%5Sf>#<[ظtıψ^Czc6ڞ9 HܸLhYb1R!cpK!&oȻkolZVͅo.ߔU*kրPG? x92ǐ+:yxzDFٳfAa9|A߳*CRTa0.F6l#@K㸅%XgMP2[A7/jspi:!Wm7Z3ߒ0|NoqǓqgCwŎxB3l Ft8,ܞ1ʻK>>#u/R扁Wol6G+o<5^?>.*hsj4Rc1lO8z=7l%2LF\ufx(5Ai!nQ톶a"{ES)i`uT c(ڌl05OS,# Xpa6v'((F;eڵW%ޛFFz#-T3I{ e4)iK3DF唈ш+,q]w8\\*f)V*D1Ж$囉f$(paSc\?'2F8 dH\11rgh3t֧o@# y{ eHQ%3 TےMN-m ,i]qWnv& رvֿIPzL5r6>*&\[j ߔ袛Q<|p?l r#i@w;g@Pp4ԏ4MG,pBIceR+[CFHM);mL1IDD7՟/%D@j /%7 crJ :`5->;[R0H=0E>ƑTWZяSO ^ @?g_Ys҃esՎ%\$&}['y5~")zt9>:B? +r]?|{87,esWUq-/ ˮ+\5&6?~?Q9TH;QF{X'_\4s_. ,l(⣷Yi"wx|&[%iҡ&&<pAW4Q^`sKbWⅫIDWu#瑄%(Qir6 r$H*Njo{2kr]  EZO鋠UG\uŔˉ?Ey cFǹ2]?O$(z4;wZէdF<Pǣ8DD_IvK1,>`u\jى>@˄D 唁l~F1G<#2eٳfœ6Чn+[V`+NTUݕ,"ZsE`;g(6TA7щ#3MÇ,B1D^f͛X#(=kRcy`GgBfaEQ FL?j#0_&d{KU V 5?JTv}c((fƧp7Vp\h˥>y9r3Ȟd%ÞLKlIIbIzf͚")?}î SЅ7R,H\[}Ӑ♎(oyf͛ puzDO;֧>p"*Zc~r,ǪPS3?akpnR .geh"S kq<݊K̲xؖle2/s8a $l? U\d89z]f-FdxĀ;AaF[GmGJRcݧ]c`-?YV1j yk;5HIViXϦQD;{%il"Ԭ#v3[Q%6p\ 0`Fs{nKyZ)<^7 9+EgCXcGL0q`^`n/]Qj*îI㒸,'6;RyPv2 RT' 9xpG5ۆc43Ghׯ߆yLn _#څDOOis]9NM?VGƩNS4O3G;PzFoZYT ' {i1C hAu&'^ȯ,H#8)#oC,Y܇GEbyaT7P_Zޱ[ge~7^S= ,^, #>.%",\TZhr^C$P*,kڽsJ8cӎyG}99y"FC<?uFzuc""՝0j/ zE 护auOF=i%| >Dc~pJg&xe {r;ъ04#Er fJ^( ms{3u*c|r6^zVlZYbs~>cw)yxhGeN$.JOёoKE(GFDu@T$pXc / խkvK-C({֘4]@~˃73FpvܩqHX$OV8d ?C$GXPAjdsIԭ.#Aֆ{aݽՔYjD;xՅT9ƹly<r%1zYrqO~xf&f!w߶D%t,vc>Zz8QXVCǾ.u2 H|,t{aRChP[͎\Ho@$n UjyEvN_*M dI6Ր-s/CGr{ ƕ S@)W[mnrSS&*UǓ08U͍W6jk6Dkk\g,9W(ZS]Xrcgb}r`VE,~*ҧ~C $e+W,q2dLDs'B\Y2:Ϩ 8jP=7[Op@ea;ua=/Aظo /}a"5ܱd^%QP[KFXf D!GD{a\HQ-@˺TpDRH޿^@IgjF_-߫➪Vޜ o- ~4*#<.JwIUVD^E@ :sz^TV{\gנFؓ6S6$͙RH*岹mrċe3beM*c cycbllI*2M-409/gęM!yli8EF|I_-'[\P0&_/}sW\$__ d*W*Y\S&j KAu2,Bi{c0\{t#H抻̬j`0=B.fMs$O:;s]+G^r=N%MNV?'4lqT H$y$vlٱ+||q3x;u8j7pv}͛6Env~ocdHh: 1YK9P|0/-_K&8rDt\b w 6l%2nƿ<ǀE91qodñG&)|}>F_]5(I' =Hi 'Vߗǯr;iZҴBYGYW'W z~4kJbh yZ-9f:a.0pIK7E}B/ŤuS`<iTVE/[7:ppOם:9D'eNDR4ڜJ1ЈM9Me ?IL,{xj\!^۴X50hmeCJ+JznI< ֤J]Xu _9ɚzl89op?}!xU,C\PI0FroК { 9 =ʐ>sC&%|0HP;([]9 #OͲlsHwz# CHE,O`0b;mb?*>-4(+ʨU zatø<ǍwQ"0=Մ\Kr[€7ߒxYYEΛ Ɯ @/H)_/nx4ircGشZDR9r-M\jK=cI|:E]'Q-WP#X)tAjV4a:uu8֮a~nx5$|rA EcNΈ3q8Տ-^tݔw8բ`i)1#mZ]r z no1Q+l:3eY(&"U[\s#@%K'^C,5N*VKB´fW#Ra 3NO_v o66vpX 7%c>x2DqOz1FL5)o_[ߋDG nx!;/vf#MpVe)'*)ĊȾ\Z^5;2Πg-La07Wi2^D>?ި3](w=6Mg&<ŀOr`Hv/ۖ0pj  u 7FCȣ샻n2D(~?v~|Qz]RoQOS;S%nV2t}.x ŌԀO~xpd8Bx ISb|N9[N$n}mj #=/PaV6B4Y9at AL? 5&6ah.#E#V2d l1妐\  ŦXH2e@Ъ?") FP74֞8$Oף|j\s@Jc[͜l nx\iRP1u iUaFh{CH'(dH6|>nYB`;A-HXu4jB<(eh` (AH8W7#72ӋDAō1$ZlO!ѳԊWQ\xz>=!_7 Bg!MPTek:{ܸ,@Dc(,#zsPQ\V&Pxc~1БL^ˈXrA+{e f vBO_"= cpԗZl*2\|̂2_|:l39Pqz6?⹑6rY}aR)jrf#\af! "' 8֣嚪4=jă]v+6íPx ySwMg S8Ӡn]!\e[J>2G9,leY~8z?-`~kz(f)7rp=VW| A{իUp+_CC7ܭ$p]s`>WB}ƹ槰'S¾<]| (Oz7m姰'`io&½d_@!bϾ=l郏1|OyFtܚ|xWH,^[?7쑓?[xWkW N,nF++8:~Cè()ob<[½}x1@*=Xo>뚗ո} ~F&u9{d"N%ξɩ./eoy1 $1zO)]%! 'Jٔ#n mg+d!Ⴉ?d߼\"@Jl%fS4đRY-C3a]CUq01SI=pZ|(2OU+ܼ#(-+$pZxS;b,ٙ&lr,&Lk6$͔lT\OQl|I)gʥ6AqlXgę؛>U) vN0>1gʌW*|L&όg3 *|a|L$PerVWB\ci‹lաj둭RQ* c횞BDnhO.]ቮt|q1NLĒI=pQsBaZ,ōNYg+$ZYH"zvlٱF9\LŲ\k%ٳf#OQzwe5=»*,Otm @f类:3{/ 黳f"NmLpZƪ([S1 ?@4`# Kٚ|0li  K8§LX6 Ez XH]wHl#z@8% #]]j o1۰ M0 \i!UHg[YcF0<\\sfΑdjdD9Qhz?0DZϮ]Hhȼc3xN?;zzx~"EIoUPku(NXQf>^,01Tz`ҢsPyy('%&W#]OAӓڀ* JPto2acVj0hV׺rh|$UlvEO^U0iAIAb>z0 (]|!F@aEh%FSׁ{j]߁SqPrgƠIb8P([}OXMHN;|*Nd=>&=Gcd6N. 8gCc9 'YS#Z;8P=2!^*Y_7äO߸§g?2-י52\5;P?5Xr7;˳]sH|Oa: 9?#W>Y92K$1(1~G9j3U9@>k͈LQc`~2nnkp km*CI-v]>xT\qY&S( T6My\ vt*X6 mǍ*cՀ@֞@48@ ,h~+Sn8}a~A E0RnoЏ8Ԙ;=ϰË+ -M$6W>:RjtOG.7>'g#Ǐ Y2V#41>T>{(}Ij~n~}wxfcm9dT S0\hmČKK8l)fę&lJn2c\ؓ6S6"Jl_N6ʮ["͔͉3e20\ƓgY>Td岹c+N9g3e&aurcyeW__gċd c+g\$3@Ms6Z>QzbDMJ[D_~6KrǛvcj6f I9vh.C􍏛Y&q^͢k60S'BN vlٰu5B-^ɔ/`J:b(c{MM 2 {>MM&Ӑvjr}T=roR4cmN1BUP f㳻7DƬZIuJ"aUlQ,ICm=EP=*CGL |ɸ"Ccb!Xpv96;9$W[pz-n&ǤBtXe'^DsX MQCCe.mdžrvM i?:Q=0;"j1 sV-N ?a"Wcz/LG S=;Ss&ԖGx-vVIcK(XI6lR$R1IX*/rߋ.Vkq v<ߋuTrs1p≉9 v1 O-!@m=8߻쿖Vl6ԮԆEqԆ?zˏNQwqGmaI=Gu{.#&d?e\F 5G~!ݿ6.ye#O3)mW/VXl&0\}ϾO4IݬrTUݏ94M޿$m󤀚MX/ϛ-Kx_ ї6X*vIJ gC.p}7Psd$+.CXGa\cLM&G'- Os3Dɻ~IƝ.AC~4ܓVv83w֐v~Bw`?UpnCeqyl'-&6 >3d \Ӄק74;B ..RFCƉXqǽ9ر?NUp?2)s /[)6Pҏ7Lp*" m:Οr:g(3%^&u098>b~V &P%b c&QP eWWTR ;}nKSX4`O4z˲>ڌW#jxCFI5;?0{_eM> I.*\>֚Z|b I5܁sDiIGQ=XYPj}8>[W(?Qr?6>kAGlԻ2Ӈ=B0DVV7qն4UjWTȖq}z̘!^} OvmqZ1o>G/R}sV D ?9 VzMŹfeP|{',8jreCh8gp1; =WS,@ /#@iڸ%nH8=hūuXP"jh2U!#ބsǮZjh&.rFMIak^8 MѪ̇ơi<铋Z9[TqRV7Z .$*dUbG:8n}Xdmz|X6d ?``SBTж } Ejz j+|w'ڿo,uO=0jSzpbzG,F8 ._|܁){S5nv#O\y0e4)tJM˰t}Li alrwC%Y.nX4ٸiG3餀U`>ܒ1f&mtjbrFi\,Y+griW S_#Ze:V[FH =v93FyFe-{Ӓ81Fz [C2 2M?ViƟ ޜyI֬xzûItLqPzm*ڙE12 d}k?IpAR=¹dd~1"#o{9-"1o4tmPx(s7= S?G77["{z7ر~TN{mYܬU}4$11Ẓ53e}NinĉmWu~r?#h1#h?[C067vV8y>w$Q38:+c pUpLG\#nY M*=V|mmاF?8PgmcY'cV;vXDDERcH2)佔t G3m'aV-|c04Sl:E)/z ^Nh5@5c?3_E'^7UORO.Pi;YW8!Lv H[Lx~Ae>Xz/xXh ޳a絕nP¦J%:foSB0=dWLՠcTJ֪{} d}.ChzFgvy 8sqC-بqǜHr9Zl F|Pt^Kh{0P ޕ"sNX|'Q (mQk c5Zd) onP,T$x۾2TJ„WI4%Xc?;z0dcȏBQ $.дE|*J;m]CyxJq_׊qLgK`q<)KS5<1L.%>|qN9tS/;±1)E?vz& بF=Lj%NuhQR)ZOR=nڞ:o"pH"B PtĹ~.X%UZ|[?꼇Ǖ+,؋f|E4FnHf$\|A3"͕m\XW-g툳e&MKeWN6&llE+3f qk\qlMቖ̙Uq6p0!$::r'4YԅempI; ꓴmk$@yxȉKfsfwI+sL񲑑$%ٳf͊COQA\O-M8"j@MH7f͛:G &})u};gI,0"4T64r.SLw,O6I =0 M$=p C ǩǐBVpǓՎ@'rjK2re=CA |mhr8ZqF~;`[[)=sEDUP}G.C rWd0!5=c}c"bOhd?qPX.cl5?o|Y? 0V{))n㈭N@dvf5S*XTB3Z{~QT+N,<=WOFǧ.F8|G$~e (e*H=}80@-f͛c7VONj! Rhñᔖipd)Z2Cy&P;{7o G-=ٳfÍi.صڿ01Y/{[XږvUQ=ͺ@,l0#sfid9Sn S/,N>Jc騝e)3fü#!)L}5[:e2/&ZVW?Dzp|Gs+_H2Q#2\Ƞ8HtQ%llE@ojv@exr/dIFrIRqVf^܎%̃PbiMדBSdZ9" ]Y:/v0;M$bKYZ4Ke|>~xq&_J%?d3|icKc<:mhHFjiy4K<)#<t=6dvT_[We$cksnNDqFZ }Ogcmd Yf?ޞtF4a d >ܜiv\ѕpMcMjJ&A_[$4!g<&lp|4ު8P9vU#ӯ\2G_ \hr^4K4 *ўGuYӵfxt sscY,=1OXጣR qN>0x'DpĊ JM)߆ {9ELuXL0O"uL2N:uϧvҴ̬~ @ $3K }I[e&' ?ח5[McoiPhãN&I0ٸo1S1 r#G;OK H#Iˢ'1*q*Ѯ\%^Eܶ8nnugP`r;e-"55kEs+3ٵ4V!Kz2&%p~Sᄭ6UJ0jq]*;1~ɪ eO߬+acM1,!8+oМDNd_#YYYQ{lVm?U⒠u>Vp#ݾxm `Idc%󏩍/u&rIĵ0ÖsO J[yR_Qjŕ|5gt5Lj>|5ڟ`'hӊ[phy[Z>►BT՘~_j}dYjǹ:>ꡛOGN~+_78ՉsX!"K;*VG y5n#ؽr ᱾Ҋ;3Op21M SksNi\FNOr-gpJOАnx}~[[w F/U"|XrߌYWCU` c3D̢$\+LU"cL/5?,P1xČIN+=%i?be}q6#>=1}2eʮcO meI,"P,wWp H*euMK<X; 2B 7cLȄ8~q)(8_Tw*W%0L Fnc^|(xA6"B:ݎ0.mMOp3בV'cs hUnW|~7 yŔM_GFz$#>@,9W^}'dqHcslJjo-FF;t#+`i¿2r\9FПWp fH52j:?M?PMQS~d\L:~itV?pB#vE 10&qRH݉}RV?pgj:BHʰćj>J0RR &dPWS}9u~[=zoOO0Q'U"H2GC6)ڞU-LV=48G,~n.zq?J(r7]zCN>o15$qOrGAjSjR ,؋6flE4ny9u\ؓ6S6"퐔5ˮ'\ψffY&q9UʮUrٱ|؋6VdIseeW-gfY&[Ur%$)bv##&Ɠ/8!\repNp}9 I͔ٳcNlٳTݛ6lٳf]6lsa#f%!Ȼ6l")$UߩE'|0 3)6Ú"FMwx bHه\ٲpgA3Mu,ю3;ڭi1bvƃNT'ֹye>%(; b(GaZFP7èrԍ H)ˣT;?Lse)9㣻G .oi'A=02u5Ղ @QsX{C_tcb=t>/t!b=[C)?36H5[kMb>c/UӢԭmoiqslxL<IB;TlH/pGQ=&:y4ZLjǦCǓCx/$:B!&lү!Q'FŬ<2  궐:윊tR"v=?+&s<;Wi2L㌪2n/S d-fQXtԙJSDqxyj',:i )"85h}5lvjZ XհE>/oH(g1k8=|/w VSo*^ 4ł"R;H'e|ͺxcYgy ,Z͛,f.T4j:q"@6Y/l5lkpWsҔ0H[疜xeO ,w0?oͶX,v`Goͪ0$n8Z.wrWP} lNH}k\y5;%ړ<98NNM{gh#ԏ>4jXu$ׇi0Liac0;ǘMmdCkbm '>plp/Vwn`ޟi~z}\$~`[;7WPGu]kYj-i.ٶ9c$u0G|F'6s2ߣ ⭨Z5/"<ct¬Wnm45DdFI.Dr!W=W45ǧ#{KK26.~HpS %=lL8g+nDt[EbﾔܬrW|hXMܩ>ҿv2W9Ο铔x8ĤPKՀ ,,Q]G#ڸӐDQdr=B_MՐPFr}`X"}3We|X(wx~xl-R+sT~]L~KE-9n/y~N{NJQ[ ᷤxΏO9jbns#?/~wxu^<hS>?_Ln/=xM#,݆<qppG/ZU_]֭ yцD49|پ#qǠݎ0!"c*6(|;1VpiֺMxlK[Q͐ XB}kȴ9KU^~}و#tRq<AV]sA3_? NJ',/0XG\]\3pc$0rku,/BjiMs:ƦCy=T%L)&ۋk:z|- ţG/%d_Wf *ἰ$ G=>e;đ4DnBFæwvn+1DQ 9qcg:e)qry~饊DO#9A0a_·4䲔:"Fg(x#$ ql/E:nߎ0G߉i_Ķ2#Ǿjz~@ +?!Ԭ' P}`6t0 ɌWpgc=[t4Ol6~ }p"\I+՘y-;>'q{lJnӮkJcs˄8 r߭ccŝ' >nG6#M1 eсo]nfe˹ڦBV.FGSn-O&'$sL`8K2D7;|ٰPIf/U/ /]" u`甒M0F-p{mƫ!7#2qY]6lLw>&$[k;e.{aKY[_Ep w#f0dK12Du815]K;*RIɅXi\S}^`1B_ޓ0MҴ*5*5بidzԏ#Zי.1`uj~Ԅut͜tz]/]OLǽEb5ϒ>>SnF,T i__dC3˦z@Gw=A=?Vd+=BbZ. m.{L~ͧb ;dMm^5s zl[Ǐ*ab60ja_[|D3_:?@XX|>Ve*gWO<lڭ8P}8_d_phc#'cPsa?uu*nϔ=xf&?Hߥ$?bܟ7\pv1?CO קqݎa+:tE_xs/~h).dy~Ȣz6ÅNylGGԋݗ3]~[$Jr]Xf`I5FJFs}m, Ԟa)$g33<[H7s@W.Lߡd֦@Q\q՗S~G8^$'F,w[tH oڙQ-Hf^sr)qzO]oƽ񙳱I곰RA';duՆ-6H[%$ja듑nr`UoVbj nspϋ}?Gs3G2c3a3F1QĨٹ < o)Nꣾ1%vSn@ЃPFI׺'-eF7ip(cq7B_ҴѣEZ v4 l~4ԕв7z`a _O#"*<]f Y.9#!QMW#}X0$rBS##_k4 <5Rn'l?^@Usv~)umBcÛT|LM>bWPV1N9TWTa^lmg[v3䝹)?ikie5 nd82jSGSYINJCc |'69`lrxxc =Bw\A)PRp>gpPJa<jVhR\J7>M$&m޸I<4/m-ZOPzkxt,q(⌿8:8G9Dkӻ4ٳaÇ_%~(OۖF2EOiauct.|8F ~(+v>Ǫc㐐G >.vK-T0OX9! }P+\|f9AOo5+hbk_ @{Ϫ^K{rG(,H0VXfd ̈O,uS,/DO2"A>f_ٯZo59X˓H6" D>ʐt5,x ˻; &"<-3<|=͛-TNIk,6b:ii8I\]C?da2[hK(=6o1|OE\G8}`I=R=gѳhQvv{Gh&v4Dz<,^J>9MG>>ys2YڳE=Zm;WC?kSGZ8 VRzqv(RX Z;DJC\ܨb&KoVEd-wkgk! +o]"\0חyf<ܟ~nA(i܏]J?vWnnoZXȊ(@YpcA]=pvl.I6 6ďc.[Os~Z 2 x\J͗4O[ۃ/17?$W}S2chȾ S\[ӘtSy?bn9!{c%BI#k!9ҽJUđPF'YGuo$AJŸ/H&r-cb?>|XxY8?|0M+wh𛑭+$hj*3T)_VrsI8'Fy};ɒ[XYho0̟~_V\s1垊bf#.>넄T#Gl 'U௒׾j yl>Cæ~_~޽9|Yq;,KٳcY88 765 ͏v\6llA툱ȒWf͍vsI~O|e$]Vq;6l_\War5N x yVcd6lӕٳf͛6lSN͛6lٲ)vlٲ镛Wf͛//䙊vlٰMH~|Y'>0đp=)O+ߜ}vbL]8h6l42H 3b>߆JJo {Hͮ'&,ZN; w fYpؘWbCf͂ӯяY;alrbV&"Cf͛ n&pݱkҡ8P$ԳuokX"E4Qi?5C1>@sfkFu|D{-zeLV˔SQtJ~Jy${7•??"ӳ<.a(f!k8eFy c@,Q-9YIxGPSlE'aIp 5i^sSW#""H_A[3""LA PvlٰYyCìҾ7f͛ 1 !/Ą `y 0;35~x>9@~ ~%>,FV/9}HXXٳau|3@x^y&1ê[b%iXڜ2k".T>>G.xڡ#eÇ>9'.Dsrß A< 6ln1kA\]$>za37f͛ ]iw oBc-Eqj]4s2FR:^,MpSG"IReKI %`%ȟ![鸁U K>Cv]:᚟ sL rMФԥ!(JxtE3Ҭi$+_RF4%=CcmdF]zAlhWJip06h sk.rώ8 !(q]c{.Bq92> Lw9O`%#kO |_\c{apl`ys5ϖK[=:'y0ӟ*W!gqsH] 8d *&'NV؎8*oMpI2]GEIe.~6K[t: Wn5GomUG~S^M0N`-mEh&>$ a#ъ/-rHӎ/"pLI՗bxS-Mi@}f)H+SMu-z+3Vw ^ OCR1T{;{Nz;cS)O|FA]LN#NR<'hÊc<8f)D< ŴD|HZhxTɄ)EM $ͫXibpZVxw6a=0,pzQN9=aoꑍ 8~\.Z|J˅q`z(ܾ-sqoeiX k~Ð ᬞ@~2E4nuʽA#d-Z =0a͇faFAa ](hhO<.yTasʼnS?j0X/F׺}9̆Z7\&k>pbNt}V.Ui >ɦo={RӃ[Neab?Ͼde{C |HFcO}C{Ͷ}IcL\jGj7zHZ6ڹ2ZmpSNiCnsh[ xP "a؂vE(.ޡo*nCVӾrT'bq1Gs߫9oG'Qr+BlU[qLLd"ef0Wl6h6Y 4KZaRq0/;F6ks@yn͛6IZOSN%z.>]K,NѴ+˨jП(b6+k{P TҁW~FtcqpqG|{zԌLZDxIzQ&8 ǖ1R;2՜Զ ;gsliZ/6,ztͧr u7V= uTSq aE5+*xhk(D7 |bv"!de*C͆`䅚5>p_PWz̊o|4Sx% ȳ:>0T|ѧ1(XHo}k侶l7*Ucu_ =FP/WrEqn-C U4v<+]HgkH"/V4?9pc\b p+ * Lo裪V n,H /&.ciPAʣ8}q{ OdAPP+nn#$QWd,7)j_hHE{ҔecuqYQU֜ܔA0[bnbNVoK .vI#ŝ "8 9 zNЎ_XQhkbuHGKŒO ߺaԴyiA;6aͧFU &W嶪UB*Sqx?BJQz%WUc-z|U^ف1 ?i\D n>8;5xPAc?Fn31pLd B%~Fv8ke&ZdUdR`IT0y}Aɸ`qOCGĖ~th\y Jܕ0n=0D?HWk÷>"ofTQ nᇿ,Ӗ)-$u'Ǵc|ݘ9p8_4ȭ#y+Cv1xӗ݅V-TF&&=za}?ƞc1$.KD,ٳc,qq9[vvlٱq88.L f͉$zbVds ]6lFW; 29Bējc>o=:vlٱjq8&lBmٳf͕6Eٳf͛6V)vlٲcvlٳW5rAٳf͛6JSf͎SLe'~Hoǖ2?cN,>]]6l6PolPǦ9.u8d}3Px ѓ6gٳfͦ#BccԮ'&nfaX?v;mJzmS<)Q=\nʜ:'r#͛6>;qLT$~ǮT'7A fl1h)\srmqlR8Ye($#*&2/9'ӀM~dfU,wTJ|U,wW\ՠ75qEg܊7˩Enf;vX$П{v«*=NFs]'9Db8`<{CR')J"xg+~!ڤ(@3utA#[ ᐣH9٧GK9d@ۆBU +f)|1@t9 n)dZFU#tۨK׃|-rz,d-#IB\͛6u 9c'!unNK;y5~v P~+T c_}e/1۴ASMz]/K9dД@'GZ{Yε58]>O9Q>!lrjXD>#g+&2Fw(HHow&\r.O\UYjT-751iw@-)zz>%Aog^ t>+&xXR0vv~P!f@ ޓQB2 Nh6Q%f/@J Co#9nG#2Hią WmJ=>;V0*}H@x-ՌZݬ3S-U~i^e@DV`(iМiIYM]'D˃޹a "a(#p3­(a+C |^V.j}8jCҔ \/>U,QIhAp}|t[{bV,9j o-k24r"&ޞ9LcJ"Ėp'3"0[;W,PǨVrIBAQh! wPO_ᅁ#χƀN$D=kt'N_y9}陚g2yj5ee$t!5ƄmƝjU$*trܻr;~ ,-m4{fxgNݲIYEei0k9+|B7y9s,X_|0QH,' JJ?G\4|y˛1(F"<12z5H Í.meed+AѭSփ1Ag$iIj@m,7;4dnQU?-"&J⑫sֿ.z5yoQͿfbGP#S6Mo^3Owwa{m;3 8Tai,ݍiqd>e#Tq,\AV>q:b 3_8 js2%A idz}wo_OM*( zcvӵkg- &>9 Z[T1<JL-΃hpb0Fmiҕ`ǗSl(¹OՆ\@O]NP<@Njl~Hn r ېbNT wmydjr.\2po܍Nje1mbڂ8FЊ%m X26h45c~3~}~'GXrhm4%QI?TMx= X Nkt,:1~TуL^خ,@|Q]5@D?'mc3k ~#kpyzGL꿡ͬeiW]%%a[Q5%UՌFNWWο+:եQ );у'G֩Οʙ?f=f<#1V,~Z)T?Af3Xq6Ld-93eAWy6l1U$8C; |mI5Bv=$$8xhn.͛6)O]JHH}sî$];6l*;Ec bGf͕Ec9ƅ$A&l,xvsQov=ϔCf̓ ]8I9>1[T#$"lqB&́͛6*\? Ki p!n~1q7pNN:ٳf99+q  C,p^?1)᷷x?bA]{Z!,lH%\gbߟ>dxjQ=P?f̈́7p%hɭo- 8zC> z!*: FL{;6l٬J BĀu':GG lM?݋㜩H`UcQ32F%i'Q17hO` 9Y&v㋒=W(p"ƅQE7uһbO¿h36>X9Jc#n_ gG6ILcy|Pm͛XSݎiG,_ (*}kG{9A=,Gsrq6,Gs6lh V z:&R04Ơr2JQNm.E ~Iɤ1F)/ bfɮ]/r+|&=lFۈոRI7?2)uD\݇0M ѷapvQ __]N|_!q{ Ʀg-֟v7 a#Gk- [9/ȥTQG%22p? _=c`zOS0]-G`W*?NIc(؏Am- v?AŴcO!TޜS9?˓H![&Np؝s Imntۤ dJxF=Te!A@"":uY̞qF?'H723:mJ:w0Du w[\xLIí"CM7QL2LG^gKNakڟّI" w"9l 1iqFЫ q?H[KjJ>G$>uV\iHن l,N70I߲EwpAjp}oS>\0i蟮c>Ѧ= ڈÿLql"?Z6YՉP+i~Py,h)~'OGpDmkEm%UBq޿vѴ:'sHىzgK<" L|CqNq"M9X s;K9ٕ0ŷ6 Gtj)BF4ASҵM֘*AFW/JNjw;~yﭴV-#e{Kq\VoLmҬVSJ>٪m](9tDD\#.'&)8xD dy%D AX0-$&(zy]I~c ɨJ< IlmW5P:w.>iǓ?ahH8ȿsgVY}]M`83aa=&;[hi=ĢDO >; T]_4BF+6unBF8KFj8{_}VFuFn;7 !p*QDol=R!Q@Vh&c"@&5)aRȆX4Υj+2^sAF0T*?x~pHDJlO ܰ-3uپ`e$O &PQ{I"@;ƁKKtiO8)2e̟C9]O\b{Y2v}h#&bGQZ\侬xn>8-ևƻ!io*'O9u?^iʣu7mNW1V!$u/WѤC^5sWj5"sKC3`F`yu;k-AewGO3F-mdV"ORN7_>'4Q"M F<@$f'nT?\Ef눿|.)͛lAv+-vlٱ8SJr9K%ٳf5{!|\IV9v>CqvlٱzLns3TM6lٳf͑.͛6lٱKf͘qXf͕6lUٳf͚͛$ ]6lS,df͎ˮܼ7nN͛6=N`Ǧ V2taN&bp4y6loS둞Oʢ9w嬝ipf͇K:D>aX}lI僴dp9qqw6lػ[ZPp9SJpVzu+PGCʲS 8ډ`D7f͛ޘr5ևlhk%)FDK38Lٳ`޻`H8e69=bf͛`LP<ۏ4>* B]9>#nٴÂ[ >?[b}[~ٳcn~ /ڐڢð we4? {?gh.Hx;8c]A<ٳa ҳ9HطƤ ۱&E:7ĜLZSA@sd>rny@ Ȝu;6lغڨIVWl0fc<; p agrF͛6 Րn~Xyb9+NA?y1a'mU}7>͛6){9Hh~9>\,0oϭ;K+8[Jn}HNۗ8Nݛ6lmN8\ڌtcL epBi˓b9wUU|:W7f͛RׂR0 XG5cs7OA`1)d#"5Yn9 ,,yL"ٳdEV鎚%⚤Yr!cy$N ?aY&2蓷\ǯ"@r#q.͛6J%_zLMcLxZH~(hhHh/xL2%~3$G8^GG9 e6ltxPr?ym/$7v/\aѽwŠSu;flS Q )4x2 wٳfSŭLʟhAL{6 ,5r]#<Xx} {^BG@0eAD͒+nt4G,Em6lʌfKUiW:| srq$HEvlܑ@+^2!¢7Zc7DM'UI}+ 3Wn:j|&oW;z  KN1H#T+Z@ t ;PeG٦'-н=2z~9̞ Vr:Tz~ YMG=?[ljrlflIҥyOL@̊/&; 5n']\bg?FhژP^q?Io+6lFku"z_;xbv2ɻ$xx:~ٳfFǎa$[!S[W 4a|rwS1O{ZyHԫpNu]=rոᵇt6^.?F1|cL4ᒝ*Xj jO5 5[?2&үx8mty0x\G.f<ǺCCr18܎h'yFi*H/g77ؓqqz}q kQSpkNj}H Fqѣ~蚗-UiW|u8#7:~Iٚ)DJ1K %ӊ&G ۿR1 {Ჸ{mFP+D R0oJNCY60-ƒ{#O@M8kscm*J%p0kL4]5` :Г@"jӦS@N\kLGe =01DZeƛ *­ni-&ۈR|1so ! ,兺,O;K\\F:}YJ0BDxY1|9r"8H^4QZJi@~bbU Tv(]O'\:[ah!!<FE*>=*~݂xM9w ; ޘ;zKn8}q#:ŇeQᯀ5^>,_{vL{KpBl: '߯Wʜ_HeuCyN^Ҝ}dA /<9%yf ػɺ=͛6ڀ )‹鸩!K͛6jsՈwrrcqZ&I>)ٳcrG0ٳf͛6 Wf͛+6c;6lYi.͛6VlٱWf͛6lٰ+f͘e͒6lc/00f͗/NQF'lٳfr J)ݟ5_ٳf'Ӿa! =Q2=͛65F]C W(TeFYDǛf͉/1j(9tOl;d32GٳfĕoLA Bxy'!i76l?ݔ:_A .>Q!yOsEn80awafS.aڽyX_6l< 8˪Py71VljM7tAQU4 !n]AXqÆ ܹ]6lRFaƛ&bb?!-bJ»'hH$ j !u ޹;6lN^igwm$0O$0d?d7 v=2a'4H bk20]'5!GlIڭV3 O ☉h3Ur1@srIqA 7%G6/诉hEMr( _ w„!V{`9bE3UU.zlٰa'I8x$BEx2PpK1,R:@Ͷ,oDTO8 #}ݛ6lVmymNءJ0V@)Z #|FG/ï@lS8{6Hm6ldɄoȚ2$6'b1,0>*F_ `6liANLjv)-ڃ%k!mQB&<Яا0dWv@=|rn[ 96ٳfon5qǷ݅X退DTڄЙ!4*h_z!HExg/\! Gɷ$O?N͛6<' $qOцz,zPDC}>6lycJR[$NޙXX˒CrU|s+AYR6*Ö @ Ixsiw ioJ4-n&Mi/ӌ\TfPz/nI{} dW+ gB?"}F8|yKQIe7\6ֈסDu,I\nd Qiv?yA^2 LjӀ+*9r텿cE:|-F8x&,sCnY)F9aM˥B 2TpBNGϿN07)Ѧ LhEEe">46?y^/?v2MNh}b}&_OL&?-1R~ȳ4ȿ1||_8>_9])lk_-n# $GݘI]nxl-Ip#^XZ48`iztd.X*4'?JjH v9 Z|ڑ8圿?Ha߰[x1-~֝aC 1`aJrS! 0~01ڝ٤dG쟦~SƼx}8|yYN LW~=սlNM)wDOwpO'JF]'F2Uy>ܛoS:bLJ?g`L`\e:6l; f)˄;6l ޣ?Q\8Er/y/&9v.Wvlٰ Scs^[uf͕Lv4z+f͔rVE͛6VlٳfraCf͍͗Hdٳef˦l4huvlٳeW,`'`f͛/6^>xѻWæ8|N<s f͋D%Q;b]c Kչ}pgm\GɰN1ڬ6ln-qtSݻit8Ngsqz6l(<md@/ƽA'XH?qr| 1H|ʎn^9 =#n]6l-:Tt/Ӊ52 HJZl_ͯqL;6lW+(d1)`E߃}k$O5k36졽 s__kgЅn#Ycܛ=L(>(G̜͌˞r'oٱYspqD_p ,JqJ"ÛxT}3&Vٳb!Ҵ b*Cv끭ѤvvQadeX/>'3>Xs!lٳeǦ*z)\AؿqfT]8Lȋ|Ï{٘cvlٱItAwq'8Goaaځ ?ٳbcLEW8?[Fs᙮P*Ř]o 7OCmVFRpQsfͅ%?YSn\k@}VO?v,m3Oǫ)ޣ0OCTdI<=͛U KiV{y9P]v žtASbxo`҈llFnZn3f^\ڀUՠÝ2)##U`0ͮ%H( ^Nq7 "(]6]Fq-əNE`ɛ/$dIlMO\j*pٮt=-7kɺ2MD"ۊzaV}y%fzsݰf% <;$rauc bFX񜣐0rԐ( S q!&(q鐊ڞo俚2mp)?mW+S-!^plHS& 胗.=h79}Geq~L`(j׶%`!e~#|'~~9 ̇j6?x?? $_۴LccDoًLk:|X ~N|3>e=ݖ$݀dbhuKDi*h۾tLT(S2P&kQDDW4S=y}.ִ;y+$H(EP8ֿ}QӯxucKy0"XcՂ`.M2)dLh&!_4/z|?ˏ|qj/:/H[R.1!".u`6l &?' &4C̢%emf͛ NA3T0[3teeٳfVlٯivlٳcN;p;6lܬvlٲfͅ]6lYyxbٳfLn}̝6lU2\ǦU3d1'vlٲN} n͛68o6_W{f͘lqƑrA f͏<1r`f͊}9Lh:\mٳfǃeб:<1#_{|{+?>FtdJ*j;H;= W7<1R7ߠQZOO_+r[ywQ/7[rX/>܎?3iuO!A=;S0#8F,Yayg`8w'do #<)p98Ez Yϸ)N. Ш O^k=F6^j@ZPZG]}:R'AvY$%$Q:O n[Y-erE_M6؆ kS%#7#NWI Gq>_sf͆/o !}#IL6ykAŇs̙C~`+sݛ6lB8卑*FVX0FnV/e&6f͛ nm~q( xC-5i,%~Ǟ@v-gٳaA|g'W߶2%>]-ify6æeo}#r f͉Ju?!FLTАJN婉8KhX6zF $s(6lٌun3>KU9 14?0iZk~z/_NRA?PHS7,ws^ѿ>͛6e槤~8>wAL+ITÍL ᎚.DjzS=~'1;H+"2ٳaݱ~p 'dM FPTEz Ț!X+i!!Y1>. #|]6lBйkfNنE-D34lT$|{ #ӈqr(qjF`Rf +>Cl}Q<ÈHzJvlٲ>(TSIXQOw4[~5Պ_"KI9s/vlٲ,4ۃ>_ۂ!ҕHgb1_C_CgHDt$}6lVuHY{-핬:u5÷MZdJWIb1M2IT6?vf3˶YwZ -wd0QT(ݲ޸k0}7z}ơ}8rirNysq6X9W߶+<ŀm^,NWDj(;Eޣ<3$W]ǩqD}8r&&bI͛Qc ݕFdcSKf͛(H9^xf>f͛Z\WS4ў(;_m;Z>ҧ u8e1ȇ# 5K\QK]gL5hV@9G*Tkw_[ Sn~>_-5&2[R}zIԠJrN̈́)p?}dJ^>VDL2<+G^SZ>[t|.TALLhc[bJMCr)=IíNr-w%Ic5;I$6l_p'JjqYY%%ٳfƜf͛1ͅ]6laǑ9)ٳf͚26͛6l@f͛7|员drCf͌sl(r+t@k6lؘ^90 @w6lهƠ|}}$Cf͔:frχQٳfPc_ rAvlٲ69kH|f͛-{rx(A2pG>K/ٳfŬ AЏ ˱AͿm?QR!/tYdad=sltf͋ Bt Ef͛i:0ܟkp8@+I|+N QAF<\D'dvzf͛}E)}{ (x0=Tٳ`5AR=F*F G{6l[=02>"Ŀ* zas]aͱn&<&'aQAv͛65.BkOn(eG,:j2:@#ܟ t٬W2H[5) 6S`̣?֥s2xXI!ÖV.Xhٳ` @d1QeAnDT:`, DaEW^gI&W9P2,لp5'f͛$ZUAJFZ#cѝF5 6cwsndt s.cŵ]ş͛6R9 #fiS3R:YpZpFo܆b,Nۻ6l;ǒ(kS B=9|/ja".}$ٳbrȌMzp`:t#ۏ{o2/fͅד1 `+ U좀b^تFn+w%UWi5"' cTHb6lB>o|9g]X-zqcc1xWBBAvlٰ7(ySv] A@=R7cöI1 G t«V X|c>MYa!_Eٳf­@71heIj9URq]QxD r(vd ZGfn - rY˵ͩ,MsY,`]I'IkI/#wĉhY 'Lt1@if͛03 ;6lٲs$dٳfV4nM LZ0Il,I JGQ0yfv\A\Z/_6),lx>*pѓ%韨}cN_6$FH&q,1"C$tՈJi~!F-ߥ?mj1G\CpusH6»hpv {d_U"^[UB͛ /; ָ>Z¹I'8fS)SV]6l q#$w9Kf͍͗L24f͛* \9!ӳf͉0mr*inq&]6lflfWHvlٲLlT;6l3CLzq̴/ٳbej)6=pWn2RNL/f́ /u%^ 0OٳfU8\t)2rx~f͛ScN*2TAٳfcjcXf͛51ɓf͛ƣS?,Qcc^YcqeV6līB `yx:\I-Tlá&b#+=K&=)Cf͂s'8ɮ$)-hz*~Tw`t$'~){I͚cr2<.͛6-+ -`VQGm/(: !f)2 `c7f͛[JAゅMXmAV#2`P-:sf͋*∿"e,,)<:6l N|BPAf͛7>]2TzNNk%ExW2Ă9vlٰ=n#V[+/}Ǘ.&d$Au͍vlٱ KeH#sLMU?F&dٳe;w@536cl~LI.͛6=#TDG/#RIbVƲU3D{vlٱODFKM;bs70 2q`Gen͛6=^n*wE*1TbvFݛ6l PJ}S/-Tl$ a"~GI'ٳfĦX]%S R^3v,mi$a)e *>2s" ׽ٳfP[r:Q`ӡYH? eOG#)LdeVe߾]%1F#1͛61&&}*~{*lH 5GYB)P{|3[R;3@_2xfLx˞ `7f͛#(_NxhGFR:A-QX3HaťZ*+hVV:zfϏ&21K2?SfͅUYE,#e 1q+¤S`y0}o q!!4ŭB&m1vZ=+Hᑻmߏ T܏vlٰM3|HSB:˶V\4v Ҙ٬b2#,Gv8ihW(.BȖvj'ٲÀ$1$ tnn8qJ18eEj RiDfq޸gY¶V{5CCCcVH-9-q Sů:CNLbԠP'$xshڙQÈpr~t86?u4%r[de|7~Б+snG2Ƈc>=ԼhTulLF7zaL~"/}paKO,>>. j`e1a.l·e9x5J }v.!e>IV4Xx1QX_úyq#kh})"~]Ao&v]I?dOF>fOڙxx%s<(SsHi4e#2H %xc-5[?(?7 i14ȵ&?N$B 5֝tֱ̿7 aa?1L[ZϤf@ `4Rgyjl%'nMƣ=C9 cm>OeK[En_ Btص$zErQ 'bM:W%w{][A>)Y7>cG|h!~ozfx4km21N}SxpM)jw#FJvN}z}B1=Tr\10z rO)iܾײ解)XBHk>ԝ=/B+f!'|=ծjH"rU]O睒f͛ j'S58sY p˳f́ňƕbٳbTٳfUaA_ rQ2mٳ`7S~ifZp9r 4;6lTʦ;6B6lf^l ٳb@~2xSռ+^u~6lLr]r8U[Ff͛I<݊*8ewvlٱ5+ Tا\yRkvlٱ|U]llf͛7L4ٳfLF;cٳfǎ;lqF^KߌTzZ Jl",f͌FqOT\Hm@f͛@{qnǬ2Dtvlٱ=ov_-h zb Bӥquo@;w/vlٰJ̠%NXrݗf͆_X71a+9) n$\9~jx6llv.~W*p8i#ޕ$=OL`~f͛.j<cܯی0\M{6?XC(&6lrzW$$t#Hr|\T(0EͻG5ˊ2`N͛6 gIX:a[[^Fi ѭm1\+w.͛6N*(iAK<^%&ngsvFY"ݛ6l":uo $"TmЎRH>&5>٦"FXC 6]O%vlٱXaPb t틀|3'x@f6lN۫`*QIi8#9uWZj.83T4D֪|Y,z8RKܻ6lPszfcZHL Cj%M*׍>"<+ukWXڥ'|rb9@Vovf͛2,z02R~ywf%ٳfH] RyGC,پĿc߸N~p ?iaGe 2ٳfm0*6fUHu?1n"YSЌxF>g62 ؇dcٳf6Sxk^:'5oN-AOSGJ1SMN{6lI O.BKHGM>X.(Vt5ڻ@ebWS-]}H`0Mo'|vlٱ[[ 5 ڋ1ZP) .|>X}}+ZZgl癸ŷ,E W闢6i1Y=ڣ ?QUPEa]ݸͶ "N>.<[<]pc~C>\}h@r7@ƀdFhm12w|g+Z6vLV8!yVJ~cs,RHV[K(:fr}uO2ܒ%Νf;RJOݛ~SiO5c #[Wp2]NL:q[J~/O4} )OCmlZ:Ȥm_‹hH@8ecˇ3]KFw`;*6*m!u3Hΰ7* 44.Rau ;aaяsWˇIiLe9J^s˝:l:iI4FþvRy4 ڊ+ly M fk4gBTWzX. G[[WDMB0M0Hz}k5μOí*6'K[Em#+2v8GɇI\?%6ꖌcيZN## DL5lܛ2GCK( 9q PfxLld2qW%<؃ke<9$x7FQ?L=[Lif㌩~:qJ#G(y)G݅u鲽j|TLK{k*ʟq+Nqyh45$R@+SNUb`w*;`'KZp-o$ށe>\A XuœU#e[}p2mK&3/\?GYj_KHQ;8\%B|2bLwQ>6Ow04`‡C5 ׏ xZB>a흲ѮzƱ1Gܝa4ٴgY#+҉)zAbKb^?fp(lQG63 ~,dtat)WW7do+8겎?Na׃XQr(> u|1SREH~chJTlvoItGEåiq*+ cV?eСs%f] xxjaq.L1;ziV`_N⒟ٝB {<,xӐ9tm8>2vlٱ,͘ٳf\X4 6lجcv!LMX^-x|6l͛6lٳeLٳf\Yx-6lx ?~Xc$Z{d&l{Kf́P*cPX;6l|'\ FȜ7?h|$ٳajPHr2hX|)I%ͣA};ݛ6l9HeZDvm4EZ vˁLӗa^`ˡp$ Jlf4bzrM6l pGEK?EI$BxGNP1UVؑ$ez "ޛvlٰdej>;R8Fњr`ZU'n?wyQ}{ëCOيxf@MEߟvlٱ?p1^ ~|z|6C7#uAOlD|.=*y[ԻSɾا"9x?f͛^O"7p{xwx|5iE$iڹ%#" 2޹6l.TY#doFh@Wq*V&JhOhYۗe3x]"7?+ W;6lRhIE; bߣfQꗷ >g͚_00: (',xRΏT7rD $Ԝ"&BћyD=+G$Vq.ɳB3 K-ɣ1)iuOg}bWo]ɖ¼3ޛ/#yhD#!dH^:E=m]2f/nD'LQ7¿Pv0'zϥ )EӮ@d ӻƬ^@9tCcYX[kxa?8P ZH>+>3 Ry&E Ŭ2[#Ț61/Wӣ[C,\|.<apI'-&ohZ^ *{npA%?d# fLg.lFfȄȍ3{wZUf@]vO0)[bFE~)_[`?xtǭ8/ce}&auy~'/e,l8ɪ'ETQ}?Mwan!y$'?[byչ[W9(:]~8G*}HvNrϒ^Ac1uqA6ZUrJEdȜHWdj+^m= [z;=f[m>Ǫ~ڮzt놃O~ZT\y5k=BT c؁S`:-&iNy&AY.zz@nc)Q$K(b;S6v'=Sc]?u5iڤ~ -4#~ay 1~# ?i?!4I+4UVjTfttݝ,5[x0<RiQ ?!{}y><}SO 녚v"*8mfݷ/ SۮDg_2$͘`]6l=8ӄٳfÆƌ)͑ ]6l9$͒ vlٰ'ksd2f͈͛B;6lض) 6l2S sf\9cfٰ͆6*ٳal)ͅ]6l63S6l?_bX6S.Kf͂͑Cf̓qx{¼8sHvlٰ \do6ecC ٳdunjɎl6lx~lCf͒w9͑,6l4S6Eٳf9>ïlR6l)Oӗ\z1vlٲT; z9͑*ٳdw>_N 3e9?vlٰ~_߅f͆~=>,̈́+f͒u]GN{d\y3͞}#f6lC=Ca"VM3f̬\|YN͛6Mu5Ju^^M +{ϖ͘Y:GO7f͛'ק| ^ˏxmLOo?f͒m+|.\Gzm?/c͔9~f͛:T^#Vx'016ew/??{?j=Mmz񧨿nzN[9͞k+s 9t\z~;k<2jy_Ouf:} >?ftgJȶltx6oAqt6{cxs6Od1rUx[6_H/V=3 9}_tھx_'K˯^_y[l%Y쟷Z~͞EW;sj~φH;llG0g}=?'_ɝyrRx{rS? endstream endobj 408 0 obj <> endobj 409 0 obj <> endobj 410 0 obj <> endobj 411 0 obj <> endobj 412 0 obj <> endobj 57 0 obj <> endobj 58 0 obj <> endobj 413 0 obj <> endobj 414 0 obj <>stream HTUyT'off\ތ3/hKT&.m,| n.WH2k÷=s|{鸧yϐ) "hVzxG6~(+"iO]5y~'Z Gm<"xmr9Eu x}r%¨$\4-GH<,'?rJ1Sm"LBD B?Vy*`)+y!t.No2?34ݬ B1 Ǭ '`l~TQ~Ip-h%%"s[0 (0~8|Crl/TYU4H@:m l ӕfI [X98Ozy-Г @A;9ҴDLi8A|JD";f3h^ O(~NS:誤R'}ߠtގq}oAU-kUf[YVZg,Kg8dWY ]eB<+ _fOx|,yr-+6,sK$%LO(~3u4-^e^w_1|%[tw`,6"q6 cXrY 2D Oz'9 F=jp.]SsXd֪p'bpJV4'{fh-"[amT8Kѷ>9:EH #&:hB;8aEO$kh %RsE7')It[mv,D0ʿYw~Sǒ oQ>d,mE13ۙ_ZUxNa)HԤ)[P?|HFW? tpx4539;tR|$hhPXr+΢(,f"~Z JAok2ƒ.MF ى贫7&D7O`K z]dM)CwL_mN䑳>I$!? /~-/2knkN` & endstream endobj 415 0 obj <> endobj 416 0 obj <>stream HlU{P߃p".{hH@yEQ|2*4TE85c$5i1c!~OGN7dٓ23"1A8EtP,D%F}jEf)5e!aaV1h Ť]KK*,1oeZ^^\Zd({72b4؋V-,*0 | ADMyacbA8ZDV G;t޺2=`z#O' G򦊨/NzDgxgOm4}b0&  Fc<@Stt?¿ۃD'OTfܛ~HQq#Q4xc ESQ6|>#lsWsAP8\0z3F6%W$/H. $@bg=GK?=eXUOG0wy0% p,.䱁V:b)(@A<ʌ--Oh\1u*`x&P^ҰL?X΅3no*էXJb _Of Xh ?/#xm&"*iRZAVvYdL塕Q00v"99 M$SiVq?0 G!1C}tZ~ 0R$ v1x:6zMĞbS'B=yԓ>hLOQFS) svtR~ݐk1R!N+w$ϰf!̽j￸(@ĭLB-O%0֘ڒ6uzׯzK޾;BsOɓ2M=o>VROU-NW9I%xVBd7Q0h)zg~hdD 4@[ Rok+LݷЎa}# SӤPڠ}C'njcH АkC_;/JH%zZd:)Kõ*9tNZ|(irsOs\AUK]Nf#"Yg˰[xTش]hooonly?戳Qj,- ז9ͥek/YT .]$R[4 $Oڤ \R f-JP&AAY nnY08 qDa]d&z ԭ; \nmQ }tq*/a& dPPa1 I=0rkz\š)%, ƂE-̼wEt0 hcc퓓YyڊZXZq`9{$V tcgվ/_#r0_J_&ɜ|F*9K`4 @Svs_o@Hj,ؽz5exꎇR)@˗iVY/kOʇe54.ޠ |ХVzeu>\4s_^hZNwB ZuȻ4QNM.GmR IhhV}f"*@@)9C)vJ>`'޳,y—A`褹sBT(cmKC3upj  /rzWD%) /Y_ĥd5RAE +20D b4ܙ3Cmϰ153]u}ZC4 n?W?}5 +Wzd#MZw!\8'w\@: @p&^hMJ,5n]'~\ p sR7\f|%f A/TǙPFnA y@8FtVkLOWZNn3x Oq*xӗ26OLA;x»8Uoݝ)c:Umr7>`9X`yBUJ캈jQԒ}?Uy$0BO8]qSpp;<5N!SL? 8ebAfD*E-QJ>cuu:qxBrD'r uǮ9S*faV|(q1Z{oڏ]8[RRVtCUܴP}]^D@<"O`s@P?~\|,CCF6Gs,aU1~i8sD^yQ.}2NGRteS?1`㔀:fVETLCGu>~F).㘝Zd+n&ƂdcN­UNXKJ^I'3k]a !jCKz@knI2Ɍ+5Рe#k,dN]^R'P@upv{BbavZvACn~=(4(@%5kc^"]gcqdq145p+Ρ˛A$x^$Zv՚e}S,4t86&' S;sTƞ ڕjH)9z7,/|oRY^*|㡣@%IX%LT=p":Bb |rj4D+bôJ^SvI|~_ЀOJ-z&+ ߘgG8hcu77oUTT D6a5ǒHa }0C)"Ly/rPf:ks^ ɦ.2i> endobj 418 0 obj <>stream HUiTWj6 `WMU ((EAF@pQ%,0J25.1c4"n$Qc\B̈9ƙH4Ȉ[ݷۙzNos}}.u ˲ɉq,!3,.M+]$VkGI8ۻ?[oe 0y@{ŃˎP^Ya?k>c c d)}qߏΏ4dyEXEhc32ɄPye^ި9 +z8=VtiY{ 6q3|/ʜ=wOh_įZ,dN֡pT+1ن2Q-6MNmW;1ڨ@Aw>)ʙ9J|*A'5uYuS-f9܊ӑ'3?2?_z ƃ?P+!}1ש+nt+ݙ[֘ GHx`(V!97_Ss@7B dyS#MF|♿le{zbgxwIE 7JNaa3G=o'U6PMR_c:aPg V9{Jឈ?@*,u<3P%cw'LC'8 F1}`4µҨIjb~VZIPQj6-$xZo~prw?xyCΊo|QXFpw{[َeA7{?$].0 w\ \!W0*2'+};At$QC Ck7kD"k{ 9%,\lRt0?]$L)  0- ǞTNF^J._ȿuܶ]XC};U-0"/$/K`K =1OBנ0ՒC(xDl1ƠK''EuPط3p+Z=M1f]I`l@C1]ՑKs ݌z: w7q֍ !2W%VmSow64 ;76Pi[RY_W֭P[mrpgp^o vhuӒ  BC:gY;/V9}5+ģަ‰=359P'GM͘`X,~DO_Pk%]JWIᤆpS5fzc QQcQvh[$nU[m桩蝦nX]_23ҡM4v8(i(LF0S EZ^xleRVtt77ǷY(> endobj 420 0 obj <>stream HUkPv\v PH!MDP4mLbZJ({DQP$h[Xu8>{λ'?Ly{}y0!0';6=RPSVSW[Ppe/vTɠf@CΚj۶#y*|fIc\ Y5/^.,!j ˩YX]0[uuXa+*WVOx`F3C a62a3Lìf gSh9CaeKKFFSn~nk>fN­ h2F?1v]_sot?axs;^WWWS17LI:lDOOOS(d߭m?0 " 7ཀƠsL!!!hf: ͎|{!?_`fH@ӓZ^m?nvЬCmնrh-`խڞ@MȣTE( >b9Gx DҸ:KiLԠ߳pMD%TGaBbO@Vj)~zHl2 sphlkUDi}0hfۄ79p=Mk)<O\= 8QޫGa) .*Ei{YYpO8o.ԕVN̳yK7Jl-JV^)bܓMoCh4]pjMj%)oӉ9ln^U*cUX1Wgʇ3Xv~ p|Bm?3Rtt:'bƓdr6@|yCor/'X>3PO Tb}O"֩O#EBUV}iHd&g˙##P}]z؆IRr^o0BIZ,{8W"eQ DSB7Vqnj9ygp:əneh}iDH Ǡ*QC49$c6 4Wܣjg%( rҋ#E+ȓ$x͊ԂG?d\>"3C&p|t;7sI=cMyGEq^qZwfsLlfB >@!PAPA- QPThz(FmX4Ukbm>̝ӻKzrzgo~c8X6FcrJ!x-`&п XMy1I_E&9YVzT%l-zG*m&X(ǀgv7hx ЫeI ߩ-@O5dm2AZt|teCHSqPQU#E)xCUV&eEie($9{y{@ }\Ll 12&XwN+asF)Ή8\!YΠ@B ȢdKXAʬ+ -:[*KM#@Pp.Ցlz-qqTY"$XTŏ\ Sf%wD6"@TpSʹgږ,׎oCPC`[}9RdXSQgy|[B/b @Z-uȅNOmBA-0jWZ%ip$![5h!ڀQm30iȅ{QPuyP rzAtqz>Ǎ$¾8"NƂM8bQV3ESLZ2@U<] 4rO61sq KNci}b{n1P @fi(X0}mhW+c5 6 ؓ,I32e\DdI*O )ʅk3 uU~/D#a͍- . .g'Mq }k/tv9񊅐:a:@&)F^633qBd<9uV`.?zCW[M{=1Y'`V,]VqOgJy,"b㾋> B`km\u8Ǵj86T/6Mi5氐gScKNd7Y˕=}G- /k]6Y {xCمf*+OI Ii4BzhLNְˊ^̌z%6bM!ݭ(CNnLrtwަUz:&*vIJ¬76|.2=GQ4\Lۣo!0.ˢqVt}"Z @Qg%.R&X>8u:?qgΞ~/]TzRLl8y}fDwpЁI'CN%O~ZHQ"7N H1v<1kR&9D45RAW=ep6oJf_v64pB <26D0lȩxY7`/E@F`9~]/7˖-+1b{3FVH⭧/;z&/[J8Ä'HzurH36-8G>C qJ!F=&~?lt`jơ'VFS/I1K_a-Axﻥ2)'7|W`;;?8sGrn#RvV–%3=3R22~^p{ѭETf3f&u(1 ܊D`c'>rJbU9␴ :ɰyi Di-e$+hx'ҝ%"(5VAR *=61Ūf3[֛[IѱPkdpqvL fmxrh+eqD3S]E* m)e Xo@*kntc KZ ɬn:1(&LCg1qB7!ʤc%k NL`{Zn P8m~%*F_DtB簻0DЖNps]_X3PADF;W+hY0^;HwGrmgSKG_U-vˈPmYkk {#` 23p=Щ9 3C.B.u Mb:8'7LyC \!uڑ E EA.)T|l kC ؆0' #)p"ٖ$nc?RoܟFV]}c"^MRv\xmb,P0թ$&WS0J4JL(T W @>jcZP쐇:Ob >!8%=%?y5CkOtu0~θܘȯSH/.ʑsJ*ʽ;y%6\Y⬌e9I28. ~/$B9,Ⱜ, 87_(UAL;E܈>$)J?IfB8]V/13ɼݦ -\&~GH7_%kwsF)t> endobj 422 0 obj <>stream HUkTSW $< \$(*P|GX"-e ~6PAvt-&҆Kc'};bȴ]0 ,hb,ΪJc-lPiN=A-{XD胐w^:C9#JڵF{ ]{%IA-%9/cdO7/[/h@ğd!8  oJgFmZyw*˧wnmjzi<`l}]GjmmrCy}Ya'"B|Vv_1l9{}paxv/abG|дQVЈ7NaWp?C -N.m+ \Le-2^O\c~S\3GN788,0"/RIpK<?.Pi [qu36.}yWW`YsX6o3pH8>rn`b9HFj 64G7`3akÅfM#6B2@lF(l@ͧw Њ&+Z-Xi5tA"L0t7_P @/3Q OY,kѓ]\hPםî IB8r fBKxMZ5>Bvb1NF Kx$q.@]4`EPpFQ:l$YE ib ,,#J2`RG2AGktlaR*TwPoَMwnoUUͨL5X gLC,vmئMKz^yee5X_{ ͥW;';)޸^XVI8J~Z. EgL bR?lq܉`+F6Ո#(`k@V|PV#Cztv%0}oA߂W7̐cS/ҬE+Z^ j[ "_Q"Q ΰ k=z_$fx'J᪠bQc 9C8GucX#@&U,~2)9ap//V|m˝6p&P/&֣ocګsSh0U+)ste3ZڶT\ضD|j}ؿ:|SP9 SX!u8N=qTSQ5op!uChLAs4]د>Lp:4Tu31 -10۾xCR"NT4O;O~$\ʹku?aW~ֶmEy_{5C-w[>w@BJI?zbܨي4EZ /^|w`r><&kHST[flådBU:G~V-kb+8qbo~߂b Lda~,xdubI-p5_לҴ' sX8l^ 1HZaeiUgh7_G`!!b?(sQwy 8:r}4덆G.~eYև+ r:&k'ݔ/d(a^)P?/, )\&):;2ea sсSyyf׮>f)c6?[r/suKwad#(' ۵vq91_ƿ(,3,3v;{6'.ď)$i NՃPA%*dy nb S!"S(0X@^3$-'(u9z4vYZ߭h@e,(ʈc6KظH̑rnbPTc8 wV>+DV De8Qf2:( RJ9peh23D)-6 fJ f5{H̲d]{?j24UM ԱYqKr\A)ý*`k9\|t$LKpIlbb&1LzGŸKh 'I>q<@-_HiLcO|d00z\p:B}"n*& M ]ڝQRL[ VMHi/=In':iBj*yOq7_/M;9_ݔ0 %Op|jYin`;EVCա۔Rp4qQw_vKOU ko:TQu!F~)m=̂%X"/eRuk IILWk[S>J,G礵Z,%DKs*#S8_Mh X-)E'd+=urʍF;d9Dz?kX/_]z"(bØ ^ n~ZqPE []W%B18n5ʨlX ث|Zo5_tw3zƞ:vaæ#>3\3Do8 l%h0七9LBy&pZ|XkS '5!4 G)FgGh3(Vc-3?']^;̗t3 5eO%U tPBKfh0FYN w4Ģ*2 '_ ֍tJ#1^}gDFl l> endobj 424 0 obj <>stream Hbd`ad`ddvw psv,LuIL [f!CG_լr > endobj 426 0 obj <>stream HTOOHQvdԷlsY Add,nbҺs S$! aJA(BIB|̀:~ߏ@ 㜫7Zn^cG~rk'(TcxOPt``A,q6V%qv EL/묗=e/?oA3o)-T/_UXWTM5u8OTЊF#"" [4[TwРUj>%h=/[M?!KBA7| ϔ A8\PVs٩ܩؼklV͚ !z/j aGAP ig,3 ē?Rȷ ౐HᎻ:_ff2;0l`<[is;vhszѭu37 u9<,WpY 0 endstream endobj 427 0 obj <> endobj 428 0 obj <>stream HlU{TsgxM|dxfl4G۪E**CXXvy. A1daayP)"WBI4=Ms\8?;~b>>>;qdhePGW)BHD68t)]0kY޴+56a>|e ð7wM.`$v8ð ,va{؟P>%a}s_>>L ~D=72Xh Z?+8 8')dCHZᐯ(ڈ~g)zbHCx_"ޣ/$ Bq$/r4# i麽ME#;=/,1;U,zXI=6srz^"edŨh}t(feSkEUwSmSv3m]~Qo-#rOvjw&&,HG|\MBjxO6@YK-J@j7!Tp-ׄe HsG;\qCl$.Q+9) iI 䀻Z̗:X \/  Z]Ϊ܂,tՄH; }L9r JP* bmS[_fā(K;53I{v['AC9YcAu5:{Yײ~_v|Ȫ mA6e^XZhamfYIɭ.8儳AFJid@7@Eq6/qꚸ?ne $?&HV9->Gk{J-*ҬɠeD/˓4jR]]& @hT 0x^:*%YQ ¾/3BaM1:5|Iwů0&fF]f^yIQH5jVt`VŤpN_1z<=:~^h⇌}]$5#Nza-Fp{ifiP62v3k`ĉWrGkkEEo LI<pD>DI|1C0kG';`к#B'(Kelz)n,W\(]vNa%b(a~d:9x:I9޾E^qsțLVJ/pؠdýo[>e࿑uw$O_`U('ɞ0@1}ؐQp A+=^c~_f A7z/n eưy>ͩR륣K+m*iɢua jl| m!~eauc.?δ6Io"u6+`m:m+*4[4}*{d7%O d>EV3&_q=/uQO yL:?*D7*P0ܽ xdo͡؂SS;େ-ёb4.1+;-Ox]Wz{ւqjH٫kGIxTɑtW$2^#ysl35h &%8P璙 !`pJnt诱#}m}|B%VhI)o*">ֳ up~R:<ɶlJqK:QO(e?<2TS1]e1m\Q43VZm:C_z.5~C-赘h'mX,ǖr `iBPNUpcVJ`*-]Mz2=s1cȭ-5iM3 s@[֛DjIgA5V*c{4tKq!Ȃò6UeꛪA_!/htcb,Thu>DǤӚs'yRXZ`#;e]0E 3hD- =uSe =#~IUVdp 5NvӅ"z엍hacy%4U8 :qg#ҞH".k0碑9}qz$84P:qpVw%hmcIÏzn-JL}j'&jKB@iX +6c =iqaoX'!cD֎Swt79kI4?S_T B{pÁ >㼬i3ßz#; Z"G.+t`_kq8>ZNR?ږK0y}`1KA1,6da{ӁQj`,='CTv79t?sTMir.0ڊjaUBO5,3W#01+.ǃA0 G\袢Y!Cc $qtSsR0j;3Ts1]S"a#[Q)h^]׼7-H=YW(#S"^kѷJBr^p" n _@<8Ww]GKHQZFVk`MuhɖIpkNL`:/ɺcEuާqZz;c|>;Ғ1/8 8Lx7ًRlfdd-ˤ=47 b~%?k5I=ݾzDth<]i4p^VH 75b'DTF/3q<:L@nF[;IF@/hXg/I|*W]0̦|F{m$z*> endobj 430 0 obj <>stream HtT}PSWwj{mg[V+wmUZ*IH/$ gj>$ɇHڵ~T~:VLٝGoww=s~/J"#vllso-*n),)dޛ#/g ؙbk鯽E _I%%Y-yU"yHVEIVK%au楒D ɄDQEz0S>EG/ZoW`HM_Kjbj1TLRɘ-|n^xcsO$EK5䏯§iIPfp-(4]DŽpHg% J)E$nQT!ҧs)CQ ӵOx/Lt_ Ki4|Qn^Nm"M4_KÈDKpFJ98/o/יlK&zWQ4ZH𚷌:~2)s\\#nnH4\ n*\r~?}#yC8u bB`: Qe٫]l3jƞYczcYL {3vl .B^v`6z;6gY&5LT̚d!贶;YpM\ުΥ&VɓTqU6mC1TIL_gY^` Vjo-*ML\ɑBv iXͤaO(܃* " ޸zJ[gS!^:f0(}& \Xeib"A$lpD 1Z NZMZ %l71ma+,LY%ZB5f)\aӄLh`ؐ7u7f}NO%ze)-ۙ\FJɦwhDol&]Uc{\un GCš4?Վ_a6B0MRcJ\i"5[S 䄼aE_? oR" w2`&MX<.:XHJ`(Ts0[N>\ `,zMҘٮ+ ޥ v>'m!u oWa?L|?-TcFA(42C* 2p .6d/i44 pqm ð<_4ocPL<L{ݣb d S:}9P6zĿnrJ XYpD~ qk!oaMD(ahm#,|Mt™S}L93k&ލ?,*l@ RUw@B|鑽j~ q.hHk;/{zik :,{2̯*Wsb}O񕼚Y{b2g[OiUO]5e|0_ I(IPіHUI&֭V9^Cg'wݣKR^zY).Cm\ \ U-hiJ&mhԘ!ʻ/Y'bs oCs Ocژゖe%ѩ7COsUU{ya-] DH7c6 J~SKv\eFT~~:Aʗ n,ISI w]z|`z/j%x &tvb[ң 12ᶐi!t /uN8 uYcR\IN7 JZ@ocvȏ YQ.hVy6lz7";.QP,=SJ-hk!}.P2ІU`-r*_Aa-Uݧib \%Ƈ.ɰCKTGPéeQlR<(t:Wv ~VFCZ.#;}_+0ok3t  : /rmaTަxKܸH&TJʉX2J@q9|\Gˢ|]Lb,MQr ,aZ! 4p [B˟|LFYf?CKxD8} endstream endobj 52 0 obj <> endobj 53 0 obj <> endobj 54 0 obj <> endobj 55 0 obj <> endobj 56 0 obj <> endobj 125 0 obj <> endobj 126 0 obj <> endobj 127 0 obj <> endobj 169 0 obj <> endobj 431 0 obj <> endobj 433 0 obj <> endobj 435 0 obj <> endobj 437 0 obj <> endobj 439 0 obj <> endobj 441 0 obj <> endobj 432 0 obj <>stream HTMo0 >vꁄ2Ru>vF=IX!Ae:v {mgq8{pSgA`:=ͷսrQ2Nl;,{8 ,YnŒ@ Ξ`q$}avM[m{V=B7t8<<`ptJW yހTZ?ƪTql,ena2ĜA\&.q>sY5O\:#cdžQS7!**b4ꘄ MLASQ(P E%1O aYWo{=n4 ,^ /` endstream endobj 434 0 obj <>stream HTn0E|,Sea0FBHiHY&ޱːEOH5wj{ 8C[q/^#[$^ϷU|A9|N3{ۍ4x쯰Xkī7{{1 7hgHm`ͳr/j@ܿ[ǫCqb'4zeL[hVy hN)i^s朸b&r%wK\^NSIt1IEs r.(BM‰ K)I($R,PlhMz#Ѭ83ￅMG endstream endobj 436 0 obj <>stream HTRMO0 W8C;&Ei>.qG%FiwؿǎǀJ_W'f{u kgzgN){Y7efh=$T;O3[׍J(9 ,ezKzw>{ bw t34`S퀐M!bc8`hAiznST:%;Ӕ*b JY,J"GSZ"ME!j9ULe$H2!ZU\^I arD]HZ4x`v%EXG uB<8eozyo.s endstream endobj 438 0 obj <>stream HTMo0 >v!|Jʆ>vtH#DsmH'6_gzZƫUg^ pj>.ӌAw#;.y϶ɶWۢ6ǫ18!;gi^tNAH9^e-NF*R_DU vi5Vse(@׎1qyNLrDumWX-R,aۘYĔw0NSdNXyPPp3Rř :'(pv֒Z^he? #K endstream endobj 440 0 obj <>stream HTPN0 +|ܴCBa%nDM{ dK{œ,닅,o >d[nk endstream endobj 442 0 obj <>stream HTMo0 >v!| $TikU}hz`:@cmH$O{MPpq጗B@| kW4%n޶'cxb=~ ^`q?Ntq:= "XVs^A o! x148F_ BDk( Z6c*$֟W""TF ̙pƜ ̅p|~"D&MvDcb26;0?~_('ipgbs'|!UiXma!%lF$sy)-)ޛ^_yQ~s; ˯` endstream endobj 7 0 obj <> endobj 60 0 obj <> endobj 128 0 obj <> endobj 170 0 obj <> endobj 211 0 obj <> endobj 227 0 obj <> endobj 293 0 obj <> endobj 443 0 obj <> endobj 444 0 obj <> endobj 59 0 obj <> endobj 403 0 obj <> endobj 401 0 obj <> endobj 398 0 obj <> endobj 396 0 obj <> endobj 393 0 obj <> endobj 391 0 obj <> endobj 388 0 obj <> endobj 386 0 obj <> endobj 383 0 obj <> endobj 381 0 obj <> endobj 378 0 obj <> endobj 376 0 obj <> endobj 373 0 obj <> endobj 371 0 obj <> endobj 368 0 obj <> endobj 366 0 obj <> endobj 363 0 obj <> endobj 361 0 obj <> endobj 358 0 obj <> endobj 356 0 obj <> endobj 353 0 obj <> endobj 351 0 obj <> endobj 348 0 obj <> endobj 346 0 obj <> endobj 343 0 obj <> endobj 341 0 obj <> endobj 338 0 obj <> endobj 336 0 obj <> endobj 333 0 obj <> endobj 331 0 obj <> endobj 328 0 obj <> endobj 326 0 obj <> endobj 323 0 obj <> endobj 321 0 obj <> endobj 318 0 obj <> endobj 316 0 obj <> endobj 313 0 obj <> endobj 311 0 obj <> endobj 308 0 obj <> endobj 306 0 obj <> endobj 304 0 obj <> endobj 302 0 obj <> endobj 300 0 obj <> endobj 298 0 obj <> endobj 296 0 obj <> endobj 294 0 obj <> endobj 289 0 obj <> endobj 287 0 obj <> endobj 285 0 obj <> endobj 283 0 obj <> endobj 280 0 obj <> endobj 278 0 obj <> endobj 275 0 obj <> endobj 273 0 obj <> endobj 270 0 obj <> endobj 268 0 obj <> endobj 265 0 obj <> endobj 263 0 obj <> endobj 260 0 obj <> endobj 258 0 obj <> endobj 255 0 obj <> endobj 253 0 obj <> endobj 250 0 obj <> endobj 248 0 obj <> endobj 246 0 obj <> endobj 244 0 obj <> endobj 242 0 obj <> endobj 240 0 obj <> endobj 238 0 obj <> endobj 236 0 obj <> endobj 234 0 obj <> endobj 232 0 obj <> endobj 230 0 obj <> endobj 228 0 obj <> endobj 222 0 obj <> endobj 220 0 obj <> endobj 218 0 obj <> endobj 216 0 obj <> endobj 214 0 obj <> endobj 212 0 obj <> endobj 205 0 obj <> endobj 203 0 obj <> endobj 201 0 obj <> endobj 199 0 obj <> endobj 197 0 obj <> endobj 195 0 obj <> endobj 193 0 obj <><><><><><><><><><><><><><><><><><><><><><><><><>]/Pg 170 0 R>> endobj 191 0 obj <> endobj 189 0 obj <> endobj 187 0 obj <> endobj 185 0 obj <> endobj 183 0 obj <> endobj 181 0 obj <> endobj 179 0 obj <> endobj 177 0 obj <> endobj 175 0 obj <> endobj 173 0 obj <> endobj 171 0 obj <> endobj 163 0 obj <> endobj 161 0 obj <> endobj 159 0 obj <> endobj 157 0 obj <> endobj 155 0 obj <> endobj 153 0 obj <> endobj 151 0 obj <> endobj 149 0 obj <> endobj 147 0 obj <> endobj 145 0 obj <> endobj 143 0 obj <> endobj 141 0 obj <> endobj 139 0 obj <> endobj 137 0 obj <> endobj 135 0 obj <> endobj 133 0 obj <> endobj 131 0 obj <> endobj 129 0 obj <> endobj 120 0 obj <> endobj 118 0 obj <> endobj 116 0 obj <> endobj 114 0 obj <> endobj 112 0 obj <> endobj 110 0 obj <> endobj 108 0 obj <> endobj 105 0 obj <> endobj 103 0 obj <> endobj 100 0 obj <> endobj 98 0 obj <> endobj 95 0 obj <> endobj 93 0 obj <> endobj 90 0 obj <> endobj 88 0 obj <> endobj 85 0 obj <> endobj 83 0 obj <> endobj 80 0 obj <> endobj 78 0 obj <> endobj 75 0 obj <> endobj 73 0 obj <> endobj 71 0 obj <> endobj 69 0 obj <> endobj 67 0 obj <> endobj 65 0 obj <> endobj 63 0 obj <> endobj 61 0 obj <> endobj 47 0 obj <> endobj 45 0 obj <> endobj 40 0 obj <> endobj 38 0 obj <> endobj 36 0 obj <> endobj 34 0 obj <> endobj 32 0 obj <> endobj 30 0 obj <> endobj 28 0 obj <> endobj 26 0 obj <> endobj 24 0 obj <> endobj 22 0 obj <> endobj 20 0 obj <> endobj 18 0 obj <> endobj 16 0 obj <> endobj 14 0 obj <> endobj 12 0 obj <> endobj 10 0 obj <> endobj 8 0 obj <> endobj 445 0 obj [10 0 R 10 0 R 10 0 R 14 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 22 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 28 0 R 30 0 R 34 0 R 34 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 36 0 R 38 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 42 0 R 47 0 R 47 0 R 49 0 R] endobj 446 0 obj [63 0 R 63 0 R 65 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 75 0 R 77 0 R 80 0 R 80 0 R 82 0 R 80 0 R 85 0 R 87 0 R 90 0 R 92 0 R 95 0 R 97 0 R 100 0 R 102 0 R 100 0 R 105 0 R 105 0 R 107 0 R 108 0 R 108 0 R 108 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 110 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 112 0 R 116 0 R 116 0 R 116 0 R 120 0 R 122 0 R] endobj 447 0 obj [131 0 R 131 0 R 135 0 R 135 0 R 135 0 R 139 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 143 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 147 0 R 147 0 R 147 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 151 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 157 0 R 157 0 R 157 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 163 0 R 163 0 R 163 0 R 163 0 R 163 0 R 163 0 R 163 0 R 163 0 R 163 0 R 163 0 R 163 0 R 165 0 R 166 0 R] endobj 448 0 obj [173 0 R 173 0 R 175 0 R 175 0 R 175 0 R 175 0 R 175 0 R 175 0 R 175 0 R 175 0 R 175 0 R 175 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 177 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 181 0 R 181 0 R 181 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 183 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 185 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 187 0 R 189 0 R 189 0 R 189 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 197 0 R 197 0 R 197 0 R 201 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 205 0 R 207 0 R 208 0 R] endobj 449 0 obj [214 0 R 214 0 R 218 0 R 218 0 R 218 0 R 222 0 R 224 0 R] endobj 450 0 obj [230 0 R 230 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 193 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 232 0 R 234 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 238 0 R 240 0 R 240 0 R 240 0 R 240 0 R 240 0 R 240 0 R 240 0 R 240 0 R 240 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 242 0 R 244 0 R 250 0 R 250 0 R 252 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 255 0 R 255 0 R 257 0 R 255 0 R 255 0 R 255 0 R 255 0 R 255 0 R 255 0 R 255 0 R 255 0 R 260 0 R 262 0 R 260 0 R 260 0 R 260 0 R 260 0 R 260 0 R 260 0 R 265 0 R 265 0 R 267 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 270 0 R 270 0 R 272 0 R 270 0 R 270 0 R 270 0 R 270 0 R 270 0 R 270 0 R 270 0 R 275 0 R 275 0 R 277 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 280 0 R 280 0 R 282 0 R 280 0 R 280 0 R 280 0 R 280 0 R 280 0 R 280 0 R 280 0 R 280 0 R 285 0 R 285 0 R 285 0 R 289 0 R] endobj 451 0 obj [296 0 R 296 0 R 300 0 R 300 0 R 300 0 R 304 0 R 308 0 R 308 0 R 310 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 313 0 R 315 0 R 318 0 R 320 0 R 323 0 R 325 0 R 328 0 R 328 0 R 330 0 R 328 0 R 328 0 R 328 0 R 328 0 R 328 0 R 328 0 R 328 0 R 333 0 R 335 0 R 333 0 R 333 0 R 333 0 R 333 0 R 338 0 R 338 0 R 340 0 R 338 0 R 338 0 R 338 0 R 338 0 R 343 0 R 343 0 R 345 0 R 343 0 R 343 0 R 343 0 R 343 0 R 343 0 R 343 0 R 343 0 R 348 0 R 348 0 R 350 0 R 348 0 R 348 0 R 353 0 R 353 0 R 355 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 353 0 R 358 0 R 358 0 R 360 0 R 358 0 R 358 0 R 358 0 R 358 0 R 358 0 R 358 0 R 358 0 R 358 0 R 358 0 R 358 0 R 358 0 R 363 0 R 363 0 R 363 0 R 365 0 R 363 0 R 368 0 R 368 0 R 370 0 R 368 0 R 368 0 R 368 0 R 368 0 R 368 0 R 368 0 R 368 0 R 368 0 R 373 0 R 373 0 R 375 0 R 373 0 R 373 0 R 373 0 R 373 0 R 373 0 R 373 0 R 373 0 R 378 0 R 378 0 R 380 0 R 378 0 R 378 0 R 378 0 R 378 0 R 378 0 R 378 0 R 378 0 R 383 0 R 383 0 R 385 0 R 383 0 R 383 0 R 383 0 R 383 0 R 383 0 R 383 0 R 388 0 R 388 0 R 390 0 R 393 0 R 393 0 R 393 0 R 395 0 R 393 0 R 393 0 R 393 0 R 393 0 R 398 0 R 398 0 R 400 0 R 398 0 R 398 0 R 398 0 R 398 0 R 398 0 R 398 0 R 398 0 R 403 0 R 403 0 R 405 0 R 403 0 R 403 0 R 403 0 R 403 0 R] endobj 452 0 obj <> endobj 4 0 obj <>/K 5 0 R>> endobj 453 0 obj << /Dt (D:20191115131249) /JTM (Distiller) >> endobj 454 0 obj /This endobj 455 0 obj << /CP (Distiller) /Fi 454 0 R >> endobj 456 0 obj << /JTF 0 /MB [ 0.000 0.000 603.000 783.000 ]/W [ 0 6 ]>> endobj 457 0 obj << /Fi [ 455 0 R ]/P [ 456 0 R ]>> endobj 458 0 obj << /Dm [ 603.000 783.000 603.000 783.000 ]>> endobj 459 0 obj << /Me 458 0 R >> endobj 460 0 obj << /D [ 457 0 R ]/MS 459 0 R /Type /JobTicketContents >> endobj 461 0 obj << /A [ 453 0 R ]/Cn [ 460 0 R ]/V 1.100 >> endobj 3 0 obj <> endobj 462 0 obj <>stream 2019-11-15T13:12:42-06:00 2019-11-15T13:12:42-06:00 QuarkXPress(R) 14.02 QuarkXPress(R) 14.02 %%DocumentProcessColors: Cyan Magenta Yellow Black %%EndComments Sally Kennedy Layout 1 endstream endobj 1 0 obj <>/QXPr:DeviceNColorants 2 0 R/Lang(en-US)/ViewerPreferences<>>> endobj 2 0 obj <<>> endobj xref 0 463 0000000000 65535 f 0000314706 00000 n 0000314928 00000 n 0000311004 00000 n 0000310357 00000 n 0000166630 00000 n 0000166327 00000 n 0000287970 00000 n 0000302336 00000 n 0000000000 00000 f 0000302285 00000 n 0000000000 00000 f 0000302239 00000 n 0000000000 00000 f 0000302192 00000 n 0000000000 00000 f 0000301848 00000 n 0000000000 00000 f 0000301727 00000 n 0000000000 00000 f 0000301606 00000 n 0000000000 00000 f 0000301500 00000 n 0000000000 00000 f 0000301412 00000 n 0000000000 00000 f 0000301358 00000 n 0000000000 00000 f 0000301310 00000 n 0000000000 00000 f 0000301262 00000 n 0000000000 00000 f 0000301194 00000 n 0000000000 00000 f 0000301142 00000 n 0000000000 00000 f 0000301030 00000 n 0000000000 00000 f 0000300981 00000 n 0000000000 00000 f 0000300891 00000 n 0000000000 00000 f 0000000016 00000 n 0000166689 00000 n 0000170633 00000 n 0000300845 00000 n 0000000000 00000 f 0000300791 00000 n 0000000000 00000 f 0000000079 00000 n 0000000142 00000 n 0000014618 00000 n 0000279552 00000 n 0000280411 00000 n 0000281042 00000 n 0000281568 00000 n 0000282197 00000 n 0000247167 00000 n 0000247326 00000 n 0000289611 00000 n 0000288192 00000 n 0000300745 00000 n 0000000000 00000 f 0000300694 00000 n 0000000000 00000 f 0000300646 00000 n 0000000000 00000 f 0000300501 00000 n 0000000000 00000 f 0000300439 00000 n 0000000000 00000 f 0000300352 00000 n 0000000000 00000 f 0000300300 00000 n 0000000000 00000 f 0000300247 00000 n 0000000000 00000 f 0000014801 00000 n 0000300195 00000 n 0000000000 00000 f 0000300135 00000 n 0000000000 00000 f 0000014852 00000 n 0000300083 00000 n 0000000000 00000 f 0000300030 00000 n 0000000000 00000 f 0000014903 00000 n 0000299978 00000 n 0000000000 00000 f 0000299925 00000 n 0000000000 00000 f 0000014954 00000 n 0000299873 00000 n 0000000000 00000 f 0000299820 00000 n 0000000000 00000 f 0000015005 00000 n 0000299766 00000 n 0000000000 00000 f 0000299708 00000 n 0000000000 00000 f 0000015056 00000 n 0000299653 00000 n 0000000000 00000 f 0000299594 00000 n 0000000000 00000 f 0000015108 00000 n 0000299537 00000 n 0000000000 00000 f 0000299450 00000 n 0000000000 00000 f 0000299293 00000 n 0000000000 00000 f 0000299245 00000 n 0000000000 00000 f 0000299184 00000 n 0000000000 00000 f 0000299136 00000 n 0000000000 00000 f 0000299084 00000 n 0000000000 00000 f 0000015161 00000 n 0000015226 00000 n 0000043267 00000 n 0000282407 00000 n 0000282578 00000 n 0000283230 00000 n 0000288417 00000 n 0000299036 00000 n 0000000000 00000 f 0000298982 00000 n 0000000000 00000 f 0000298934 00000 n 0000000000 00000 f 0000298878 00000 n 0000000000 00000 f 0000298830 00000 n 0000000000 00000 f 0000298779 00000 n 0000000000 00000 f 0000298599 00000 n 0000000000 00000 f 0000298548 00000 n 0000000000 00000 f 0000298430 00000 n 0000000000 00000 f 0000298372 00000 n 0000000000 00000 f 0000298269 00000 n 0000000000 00000 f 0000298218 00000 n 0000000000 00000 f 0000298016 00000 n 0000000000 00000 f 0000297939 00000 n 0000000000 00000 f 0000297878 00000 n 0000000000 00000 f 0000297649 00000 n 0000000000 00000 f 0000297601 00000 n 0000000000 00000 f 0000297507 00000 n 0000000000 00000 f 0000043416 00000 n 0000043482 00000 n 0000043548 00000 n 0000065844 00000 n 0000283690 00000 n 0000288643 00000 n 0000297459 00000 n 0000000000 00000 f 0000297405 00000 n 0000000000 00000 f 0000297334 00000 n 0000000000 00000 f 0000297222 00000 n 0000000000 00000 f 0000297092 00000 n 0000000000 00000 f 0000297034 00000 n 0000000000 00000 f 0000296931 00000 n 0000000000 00000 f 0000296797 00000 n 0000000000 00000 f 0000296688 00000 n 0000000000 00000 f 0000296627 00000 n 0000000000 00000 f 0000296442 00000 n 0000000000 00000 f 0000295513 00000 n 0000000000 00000 f 0000295465 00000 n 0000000000 00000 f 0000295403 00000 n 0000000000 00000 f 0000295355 00000 n 0000000000 00000 f 0000295302 00000 n 0000000000 00000 f 0000295254 00000 n 0000000000 00000 f 0000295152 00000 n 0000000000 00000 f 0000065971 00000 n 0000066037 00000 n 0000066103 00000 n 0000087976 00000 n 0000288869 00000 n 0000295104 00000 n 0000000000 00000 f 0000295050 00000 n 0000000000 00000 f 0000295002 00000 n 0000000000 00000 f 0000294946 00000 n 0000000000 00000 f 0000294898 00000 n 0000000000 00000 f 0000294847 00000 n 0000000000 00000 f 0000088103 00000 n 0000088167 00000 n 0000128080 00000 n 0000289095 00000 n 0000294799 00000 n 0000000000 00000 f 0000294745 00000 n 0000000000 00000 f 0000294657 00000 n 0000000000 00000 f 0000294606 00000 n 0000000000 00000 f 0000294506 00000 n 0000000000 00000 f 0000294394 00000 n 0000000000 00000 f 0000294318 00000 n 0000000000 00000 f 0000294221 00000 n 0000000000 00000 f 0000294169 00000 n 0000000000 00000 f 0000293915 00000 n 0000000000 00000 f 0000293859 00000 n 0000000000 00000 f 0000293761 00000 n 0000000000 00000 f 0000128208 00000 n 0000293705 00000 n 0000000000 00000 f 0000293611 00000 n 0000000000 00000 f 0000128263 00000 n 0000293555 00000 n 0000000000 00000 f 0000293473 00000 n 0000000000 00000 f 0000128318 00000 n 0000293417 00000 n 0000000000 00000 f 0000293327 00000 n 0000000000 00000 f 0000128373 00000 n 0000293271 00000 n 0000000000 00000 f 0000293181 00000 n 0000000000 00000 f 0000128428 00000 n 0000293125 00000 n 0000000000 00000 f 0000293039 00000 n 0000000000 00000 f 0000128483 00000 n 0000292983 00000 n 0000000000 00000 f 0000292889 00000 n 0000000000 00000 f 0000128538 00000 n 0000292841 00000 n 0000000000 00000 f 0000292779 00000 n 0000000000 00000 f 0000292731 00000 n 0000000000 00000 f 0000292678 00000 n 0000000000 00000 f 0000128593 00000 n 0000147458 00000 n 0000289321 00000 n 0000292630 00000 n 0000000000 00000 f 0000292576 00000 n 0000000000 00000 f 0000292528 00000 n 0000000000 00000 f 0000292472 00000 n 0000000000 00000 f 0000292424 00000 n 0000000000 00000 f 0000292373 00000 n 0000000000 00000 f 0000292317 00000 n 0000000000 00000 f 0000292239 00000 n 0000000000 00000 f 0000147574 00000 n 0000292183 00000 n 0000000000 00000 f 0000292127 00000 n 0000000000 00000 f 0000147627 00000 n 0000292071 00000 n 0000000000 00000 f 0000292015 00000 n 0000000000 00000 f 0000147681 00000 n 0000291959 00000 n 0000000000 00000 f 0000291903 00000 n 0000000000 00000 f 0000147735 00000 n 0000291847 00000 n 0000000000 00000 f 0000291766 00000 n 0000000000 00000 f 0000147789 00000 n 0000291710 00000 n 0000000000 00000 f 0000291641 00000 n 0000000000 00000 f 0000147843 00000 n 0000291585 00000 n 0000000000 00000 f 0000291513 00000 n 0000000000 00000 f 0000147897 00000 n 0000291457 00000 n 0000000000 00000 f 0000291376 00000 n 0000000000 00000 f 0000147951 00000 n 0000291320 00000 n 0000000000 00000 f 0000291254 00000 n 0000000000 00000 f 0000148005 00000 n 0000291198 00000 n 0000000000 00000 f 0000291114 00000 n 0000000000 00000 f 0000148059 00000 n 0000291058 00000 n 0000000000 00000 f 0000290965 00000 n 0000000000 00000 f 0000148113 00000 n 0000290909 00000 n 0000000000 00000 f 0000290843 00000 n 0000000000 00000 f 0000148167 00000 n 0000290787 00000 n 0000000000 00000 f 0000290702 00000 n 0000000000 00000 f 0000148221 00000 n 0000290646 00000 n 0000000000 00000 f 0000290556 00000 n 0000000000 00000 f 0000148275 00000 n 0000290500 00000 n 0000000000 00000 f 0000290410 00000 n 0000000000 00000 f 0000148330 00000 n 0000290354 00000 n 0000000000 00000 f 0000290268 00000 n 0000000000 00000 f 0000148385 00000 n 0000290212 00000 n 0000000000 00000 f 0000290150 00000 n 0000000000 00000 f 0000148440 00000 n 0000290094 00000 n 0000000000 00000 f 0000290012 00000 n 0000000000 00000 f 0000148495 00000 n 0000289956 00000 n 0000000000 00000 f 0000289866 00000 n 0000000000 00000 f 0000148550 00000 n 0000289810 00000 n 0000000000 00000 f 0000289732 00000 n 0000000000 00000 f 0000148605 00000 n 0000148660 00000 n 0000166211 00000 n 0000246621 00000 n 0000246798 00000 n 0000246891 00000 n 0000246983 00000 n 0000247075 00000 n 0000247487 00000 n 0000247775 00000 n 0000250679 00000 n 0000251042 00000 n 0000255148 00000 n 0000255419 00000 n 0000257877 00000 n 0000258406 00000 n 0000264065 00000 n 0000264502 00000 n 0000270094 00000 n 0000270290 00000 n 0000270600 00000 n 0000270806 00000 n 0000271331 00000 n 0000271679 00000 n 0000275353 00000 n 0000275729 00000 n 0000284310 00000 n 0000285722 00000 n 0000284719 00000 n 0000286109 00000 n 0000285040 00000 n 0000286508 00000 n 0000285210 00000 n 0000286898 00000 n 0000285471 00000 n 0000287288 00000 n 0000285531 00000 n 0000287578 00000 n 0000289547 00000 n 0000289573 00000 n 0000302381 00000 n 0000303296 00000 n 0000304180 00000 n 0000305831 00000 n 0000307450 00000 n 0000307525 00000 n 0000308976 00000 n 0000310259 00000 n 0000310506 00000 n 0000310569 00000 n 0000310593 00000 n 0000310644 00000 n 0000310719 00000 n 0000310771 00000 n 0000310833 00000 n 0000310868 00000 n 0000310943 00000 n 0000311291 00000 n trailer << /Size 463 /Root 1 0 R /Info 3 0 R /ID[] >> startxref 314948 %%EOF