%PDF-1.4 % 46 0 obj <> endobj 47 0 obj <> endobj 54 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 490.9714 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 512.4123 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 543.321 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 587.3827 23.0228 Tm (1)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 144.1656 588.8444 Tm 0 0 0 1 k -.005 Tc [(Cloud adoption has incr)9.3(eased b)5.4(y)0( leaps and bounds,)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.9357 588.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 576.8444 Tm -.005 Tc [(adding t)9.8(o)0( the alr)9.3(eady incr)9.3(easing types of cyberrisk.)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.2299 576.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 564.8444 Tm -.005 Tc [(The costs of doing business in the digital age ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.3105 564.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 552.8444 Tm -.005 Tc [(rising. Cloud ser)-8.8(vice abuse r)19.5(anks among the)]TJ ET EMC /P <>BDC BT 9 0 0 9 318.6499 552.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 540.8444 Tm -.005 Tc [(gr)9.3(eatest cybersecurity thr)9.3(eats. )19.5(T)48.4(o)0( illustr)19.5(ate the)]TJ ET EMC /P <>BDC BT 9 0 0 9 327.0021 540.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 528.8444 Tm -.005 Tc [(potential magnitude of this thr)9.3(eat, consider how a)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.7802 528.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 516.8444 Tm -.005 Tc [(vir)-24.4(tual machine \()-9.8(VM\) could use side-channel timing)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.5654 516.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 504.8444 Tm -.005 Tc [(information t)9.8(o)0( extr)19.5(act priv)7.3(ate cr)-8.8(ypt)9.8(ogr)19.5(aphic k)9.8(e)6.4(ys in)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.476 504.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 492.8444 Tm -.005 Tc [(use b)5.4(y)0( other VMs on the same ser)-8.8(v)6.4(e)0(r)60.1(.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 292.2723 495.5444 Tm 0 Tc (1)Tj ET EMC /P <>BDC BT 9 0 0 9 295.2596 492.8444 Tm -.005 Tc ( A malicious)Tj ET EMC /P <>BDC BT 9 0 0 9 343.8287 492.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 480.8444 Tm -.005 Tc [(hack)9.8(er would not necessarily need t)9.8(o)0( go t)9.8(o)0( such)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.9431 480.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 468.8444 Tm -.005 Tc [(lengths t)9.8(o)0( pull off that sor)-24.4(t of f)11.7(eat, though. If a)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.5937 468.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 456.8444 Tm -.005 Tc [(multitenant cloud ser)-8.8(vice database is not designed)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.0888 456.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 444.8444 Tm -.005 Tc [(pr)9.8(operly)52.3(, a single aw in one client)54.7(s application)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.6177 444.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 432.8444 Tm -.005 Tc [(could allow an attack)9.8(er t)9.8(o)0( get not just that client)54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.4916 432.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 420.8444 Tm -.005 Tc [(data, but e)6.4(v)6.4(e)0(r)-8.8(y)0( other clients data as well. )]TJ ET EMC /P <>BDC BT 9 0 0 9 144.1656 396.8444 Tm [(Data security and priv)7.3(acy ar)9.3(e incr)9.3(easingly)]TJ ET EMC /P <>BDC BT 9 0 0 9 307.3262 396.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 384.8444 Tm -.005 Tc [(challenging in t)9.8(oda)7.3(y)-7.3()54.7(s cloud-based envir)9.8(onments.)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.0247 384.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 372.8444 Tm -.005 Tc [(Pr)9.8(o)7.3(viding independent thir)9.3(d-par)-24.4(ty assur)19.5(ance, such)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.315 372.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 360.8444 Tm -.005 Tc [(as a System and Or)9.3(ganization Contr)9.8(ols \(SOC)12.7(\) 2)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.1043 360.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 348.8444 Tm -.005 Tc [(r)9.3(epor)-24.4(t, helps addr)9.3(ess these concerns and helps)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.5559 348.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 336.8444 Tm -.005 Tc [(cloud ser)-8.8(vice pr)9.8(o)7.3(viders \(CSPs\) sta)7.3(y ahead of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 335.2736 336.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 324.8444 Tm -.005 Tc [(competition. )19.5(This assur)19.5(ance also helps)]TJ ET EMC /P <>BDC BT 9 0 0 9 298.4094 324.8444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 312.8444 Tm -.005 Tc [(or)9.3(ganizations mitigate data security and )]TJ ET EMC /P <>BDC BT 9 0 0 9 144.1656 300.8444 Tm [(priv)7.3(acy risk. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 362.6656 587.3444 Tm .9 .53 .1 0 k [(Incr)9.3(easing Cloud F)16.6(act)14.7(or )]TJ ET EMC /P <>BDC /GS2 gs BT /F3 1 Tf 9 0 0 9 362.6656 569.3444 Tm 0 0 0 1 k [(F)10.3(orbes)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 389.3474 569.3444 Tm ( indicates that 83% of enterprise workloads)Tj ET EMC /P <>BDC BT 9 0 0 9 562.5781 569.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 557.3444 Tm -.005 Tc [(will be in the cloud b)5.4(y)0( 2020.)83()]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 474.0052 560.0444 Tm 0 Tc (2)Tj ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 476.9924 557.3444 Tm ( )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 479.1887 557.3444 Tm -.005 Tc (With this cloud)Tj ET EMC /P <>BDC BT 9 0 0 9 537.8226 557.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 545.3444 Tm -.005 Tc [(for)9.3(ecast, many CSPs ar)9.3(e in for inv)7.3(olv)6.4(ement in a)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.3562 545.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 533.3444 Tm -.005 Tc [(lar)9.3(ge mark)9.8(et. In 2017, ther)9.3(e wer)9.3(e 19,188 CSPs with)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.9253 533.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 521.3444 Tm -.005 Tc (US$134 billion in funding.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 463.2997 524.0444 Tm -.0083 Tc (3 )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 497.3444 Tm -.005 Tc [()58.6(As cloud becomes incr)9.3(easingly mainstr)9.3(eam)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.7189 497.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 485.3444 Tm -.005 Tc [(thr)9.8(ough 2022, it will dominate e)6.4(v)6.4(er-incr)9.3(easing)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.5983 485.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 473.3444 Tm -.005 Tc [(por)-24.4(tions of enterprise I)14.2(T)19.5( decisions.)83()]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 502.3075 476.0444 Tm 0 Tc (4)Tj ET EMC /P <>BDC BT 9 0 0 9 505.2948 473.3444 Tm -.005 Tc [( )19.5(This cloud shift)]TJ ET EMC /P <>BDC BT 9 0 0 9 568.1013 473.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 461.3444 Tm -.005 Tc [(r)9.3(epr)9.3(esents both risk and oppor)-24.4(tunity)52.3(. It has been)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.1793 461.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 449.3444 Tm -.005 Tc [(pr)9.3(edicted that public cloud ser)-8.8(vices spending will)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.4653 449.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 437.3444 Tm -.005 Tc [(r)9.3(each US$370 billion in 2022.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 477.5746 440.0444 Tm 0 Tc (5)Tj ET EMC /P <>BDC BT 9 0 0 9 480.5618 437.3444 Tm ( )Tj ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 482.7449 437.3444 Tm -.005 Tc [(Figur)9.3(e 1)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 515.344 437.3444 Tm ( shows some)Tj ET EMC /P <>BDC BT 9 0 0 9 567.8691 437.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 425.3444 Tm -.005 Tc [(nance-r)9.3(elated cybersecurity tr)9.3(ends. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 362.6656 399.3444 Tm .9 .53 .1 0 k (Cloud Security Challenges )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 362.6656 381.3444 Tm 0 0 0 1 k [(Cloud ser)-8.8(vices can pr)9.8(o)7.3(vide or)9.3(ganizations, including)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.4097 381.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 369.3444 Tm -.005 Tc [(f)11.7(eder)19.5(al agencies, with the oppor)-24.4(tunity t)9.8(o)0( incr)9.3(ease)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.3818 369.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 357.3444 Tm -.005 Tc [(the exibility)52.3(, a)7.3(v)7.3(ailability)52.3(, r)9.3(esiliency and scalability of)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.9897 357.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 345.3444 Tm -.005 Tc [(cloud ser)-8.8(vices, which or)9.3(ganizations can, in turn, use)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.4246 345.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 333.3444 Tm -.005 Tc [(t)9.8(o)0( incr)9.3(ease security)52.3(, priv)7.3(acy)52.3(, eciency)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 513.5413 333.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 321.3444 Tm -.005 Tc [(r)9.3(esponsiv)6.4(eness, inno)7.3(v)7.3(ation and competitiv)6.4(eness.)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.2136 321.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 309.3444 Tm -.005 Tc [(Howe)6.4(v)6.4(e)0(r)60.1(,)0( many or)9.3(ganizations, especially those in)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.426 309.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 297.3444 Tm -.005 Tc [(r)9.3(egulated sect)9.8(ors such as nance and healthcar)9.3(e,)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.1066 297.3444 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F5 1 Tf 30 0 0 30 144.1656 662.2303 Tm .21 1 .75 .12 k -.02 Tc [(SOC Repor)-24.4(ts for Cloud Security)]TJ ET EMC /P <>BDC BT 30 0 0 30 535.4167 662.2303 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 30 0 0 30 144.1656 628.2303 Tm -.02 Tc [(and Priv)7.3(acy)]TJ ET EMC /Artifact <>BDC .9 .53 .1 0 k .16605 67.5 132.613 208.007 re f EMC /P <>BDC BT /F4 1 Tf 11 0 0 11 36.2185 257.8375 Tm 0 0 0 0 k (Ashwin)Tj ET EMC /P <>BDC BT 11 0 0 11 71.2717 257.8375 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 36.2185 245.8375 Tm -.02 Tc [(Chaudhar)-8.8(y)81.6(,)]TJ ET EMC /P <>BDC BT /F2 1 Tf 11 0 0 11 89.094 245.8375 Tm [( CP)67.4(A,)]TJ ET EMC /P <>BDC BT 11 0 0 11 113.4102 245.8375 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 36.2185 233.8375 Tm -.02 Tc (CISA, CRISC, CISM,)Tj ET EMC /P <>BDC BT 11 0 0 11 124.9264 233.8375 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 36.2185 221.8375 Tm -.02 Tc [(CGEI)14.2(T)106.5(,)0( CCSK,)]TJ ET EMC /P <>BDC BT 11 0 0 11 97.4948 221.8375 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 36.2185 209.8375 Tm -.02 Tc [(CISSP)158.2(, I)14.2(TIL, PMP )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.2185 199.0374 Tm 0 Tc [(Is the chief ex)9.8(ecutiv)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 120.176 199.0374 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 188.2375 Tm [(ocer of Acceder)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 111.9055 188.2375 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 177.4375 Tm [(Inc., a Cer)-24.4(tied Public)]TJ ET EMC /P <>BDC BT 9 0 0 9 122.6676 177.4375 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 166.6375 Tm [(Accountant \(CP)67.4(A\) rm)]TJ ET EMC /P <>BDC BT 9 0 0 9 125.6911 166.6375 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 155.8375 Tm (focusing on System)Tj ET EMC /P <>BDC BT 9 0 0 9 115.3772 155.8375 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 145.0374 Tm [(and Or)9.3(ganization)]TJ ET EMC /P <>BDC BT 9 0 0 9 104.2063 145.0374 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 134.2375 Tm [(Contr)9.8(ols r)9.3(epor)-24.4(ting,)]TJ ET EMC /P <>BDC BT 9 0 0 9 110.341 134.2375 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 123.4374 Tm (cloud data security)Tj ET EMC /P <>BDC BT 9 0 0 9 112.0549 123.4374 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 112.6375 Tm [(and priv)7.3(acy)52.3(. He can be)]TJ ET EMC /P <>BDC BT 9 0 0 9 125.9768 112.6375 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 101.8375 Tm [(r)9.3(eached at)]TJ ET EMC /P <>BDC BT 9 0 0 9 78.4192 101.8375 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.2185 91.0374 Tm [(Ashwin.Chaudhar)-8.8(y@a)]TJ ET EMC /P <>BDC BT 9 0 0 9 36.2185 80.2375 Tm [(cceder)9.3(e.io.)]TJ ET EMC /P <>BDC /GS2 gs BT 7 0 0 7 36 22.1458 Tm 0 0 0 1 k [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 143.4848 22.1458 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 572.622 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC 0 0 0 0 k /GS3 gs 36 692.116 58.529 54.884 re f EMC /Figure <>BDC Q q 1 i 36 747 58.5 -54.759 re W n .90588 .52157 .094118 0 k /GS3 gs q 1 0 0 1 36 747 cm 0 0 m 0 -54.884 l 9.375 -54.884 l 9.375 -9.945 l 49.977 -9.945 l 49.977 0 l 0 0 l f Q Q /GS3 gs BT /F6 1 Tf 9 0 0 9 55.1411 721.6074 Tm .90588 .52157 .094118 0 k .0249 Tc 0 Tw (FEATURE)Tj ET EMC /Figure <>BDC q 1 i 146.132 283.76 422.012 -216.771 re W n 146.132 283.76 422.034 -216.26 re W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .019608 .12941 .20392 0 k 146.132 68 421.512 200.219 re f .90588 .52157 .094118 0 k 146.132 269.51 421.512 14.25 re f 0 0 0 0 K 0 J 0 j 1.991 w 10 M [] 0 d q 1 0 0 1 145.716 269.509 cm 0 0 m 421.997 0 l S 1 0 0 1 -.037 -.222 cm 0 0 m 421.997 0 l S Q BT /F7 1 Tf 9 0 0 9 300.8127 274.1355 Tm 0 0 0 0 k .0001 Tc -.0004 Tw [(Figur)9.5(e)-.3( 1Cybersecurity )29(T)31.5(r)9.1(ends)]TJ /F8 1 Tf 14 0 0 14 173.9577 167.3649 Tm 0 0 0 1 k .0002 Tw (Data security and privacy)Tj -.547 -1 TD .0002 Tc .0001 Tw (are increasing challenges in)Tj 1.554 -1 TD 0 Tc .0003 Tw (todays cloud-based)Tj 1.131 -1 TD 0 Tw (environments.)Tj /F9 1 Tf 13.8993 0 0 13.8993 340.4352 211.0455 Tm .57 0 1 0 k ()Tj /F7 1 Tf .5 0 TD -.0002 Tw ( US$6T)Tj /F8 1 Tf 10 0 0 10 389.9865 211.0455 Tm 0 0 0 1 k .0019 Tc .0001 Tw (Approximate size of cybercrime market)Tj /F9 1 Tf 13.8993 0 0 13.8993 340.4352 180.0837 Tm .57 0 1 0 k 0 Tc 0 Tw ()Tj /F7 1 Tf .5 0 TD -.0002 Tw ( US$158)Tj /F8 1 Tf 10 0 0 10 397.3175 180.0837 Tm 0 0 0 1 k -.014 Tc 0 Tw (Average cost per lost or stolen record)Tj -5.432 6.328 TD .0001 Tc -.0001 Tw (The biggest financial consequence is lost business)Tj 0 -1 TD 0 Tc 0 Tw (and customers:)Tj /F9 1 Tf 13.8993 0 0 13.8993 340.4352 149.0203 Tm .57 0 1 0 k ()Tj /F7 1 Tf .5 0 TD -.0002 Tw ( US$3M)Tj /F8 1 Tf 10 0 0 10 395.091 149.0203 Tm .672 .605 .594 .465 k -.0141 Tc .0001 Tw (Average cost of a data breach)Tj 7 0 0 7 156.026 98.9547 Tm 0 0 0 1 k .0011 Tc -.0001 Tw (Based on information sourced from World Economic Forum.)Tj ET Q q 1 i 218.33 183.312 50.036 50.037 re W n q 50.398 0 0 -50.038 218.329 233.35 cm /Im2 Do Q Q q 1 i 146.132 283.76 422.012 -216.771 re W n 146.132 283.76 422.034 -216.26 re W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n q 31.715 0 0 -31.378 243.765 249.612 cm /Im4 Do Q BT /F9 1 Tf 13.8993 0 0 13.8993 340.4352 117.9537 Tm .57 0 1 0 k 0 Tc ()Tj /F7 1 Tf .5 0 TD -.0002 Tc ( 3)Tj 8.1033 0 0 8.1033 357.6193 122.5823 Tm 0 Tc (rd)Tj /F8 1 Tf 10 0 0 10 369.256 117.9537 Tm 0 0 0 1 k .0021 Tc -.0001 Tw (Biggest risk of doing business)Tj ET Q q 1 i 546.24 73.439 13.88 16.145 re W n q 14.875 0 0 -17.646 546.239 90.361 cm /Im6 Do Q Q q 1 i 146.132 283.76 422.012 -216.771 re W n 146.132 283.76 422.034 -216.26 re W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .516 .43 .43 .074 K 0 J 1 j 1.26 w 10 M [] 0 d q 1 0 0 1 155.644 94.166 cm 0 0 m 406.087 0 l S Q EMC Q endstream endobj 55 0 obj <>/XObject<>/ExtGState<>>> endobj 105 0 obj <> endobj 106 0 obj <> endobj 107 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 143 494.6994 Tm -.005 Tc [(face additional security and priv)7.3(acy challenges)]TJ ET EMC /P <>BDC BT 9 0 0 9 327.0645 494.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 482.6994 Tm -.005 Tc [(when adopting cloud ser)-8.8(vices. )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 458.6994 Tm [(Cloud platform har)9.3(dwar)9.3(e and softwar)9.3(e ar)9.3(e e)6.4(v)7.3(olving)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.5835 458.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 446.6994 Tm -.005 Tc [(t)9.8(o)0( tak)9.8(e adv)7.3(antage of the latest har)9.3(dwar)9.3(e and)]TJ ET EMC /P <>BDC BT 9 0 0 9 318.9642 446.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 434.6994 Tm -.005 Tc [(softwar)9.3(e f)11.7(eatur)9.3(es, and ther)9.3(e ar)9.3(e hundr)9.3(eds or)]TJ ET EMC /P <>BDC BT 9 0 0 9 317.8788 434.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 422.6994 Tm -.005 Tc [(thousands of vir)-24.4(tualiz)7.8(ed or containeriz)7.8(ed workloads)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.1566 422.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 410.6994 Tm -.005 Tc [(that ar)9.3(e spun up, scaled out, mo)7.3(v)6.4(ed ar)9.8(ound and)]TJ ET EMC /P <>BDC BT 9 0 0 9 329.61 410.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 398.6994 Tm -.005 Tc (shut down at any instant, based on business)Tj ET EMC /P <>BDC BT 9 0 0 9 317.7303 398.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 386.6994 Tm -.005 Tc [(r)9.3(equir)9.3(ements. In such envir)9.8(onments, or)9.3(ganizations)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.3951 386.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 374.6994 Tm -.005 Tc [(want t)9.8(o)0( be able t)9.8(o)0( monit)9.8(or)60.1(, tr)19.5(ack, apply and enfor)9.3(ce)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.9388 374.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 362.6994 Tm -.005 Tc (policies on the workloads, based on business)Tj ET EMC /P <>BDC BT 9 0 0 9 321.5832 362.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 350.6994 Tm -.005 Tc [(r)9.3(equir)9.3(ements, in a consistent, r)9.3(epeatable and)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.7234 350.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 338.6994 Tm -.02 Tc [(aut)9.8(omated wa)7.3(y)52.3(.)0( )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 314.6993 Tm [(In other wor)9.3(ds, or)9.3(ganizations want t)9.8(o)0( maintain)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.5638 314.6993 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 302.6993 Tm -.02 Tc [(consistent security pr)9.8(otections and t)9.8(o)0( ha)7.3(v)6.4(e)0( visibility)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.4156 302.6993 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 290.6993 Tm -.02 Tc [(and contr)9.8(ol for their workloads acr)9.8(oss on-pr)9.3(emises)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.4196 290.6993 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 278.6993 Tm -.02 Tc [(priv)7.3(ate clouds and thir)9.3(d-par)-24.4(ty hybrid/public clouds t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.5859 278.6993 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 266.6993 Tm -.02 Tc [(meet their security and compliance r)9.3(equir)9.3(ements.)]TJ ET EMC /P <>BDC BT 9 0 0 9 331.9875 266.6993 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 242.6994 Tm -.005 Tc [(This is fur)-24.4(ther complicated b)5.4(y)0( or)9.3(ganizations needs)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.3353 242.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 230.6994 Tm -.005 Tc [(t)9.8(o)0( comply with security and priv)7.3(acy laws applicable)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.6913 230.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 218.6994 Tm -.005 Tc [(t)9.8(o)0( the information that the)6.4(y collect, tr)19.5(ansmit or hold,)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.0735 218.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 206.6994 Tm -.005 Tc [(which ma)7.3(y change depending on whose)]TJ ET EMC /P <>BDC BT 9 0 0 9 300.7231 206.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 194.6994 Tm -.005 Tc [(information it is \(e.g., E)8.3(u)0(r)9.8(opean citiz)7.8(ens)]TJ ET EMC /P <>BDC BT 9 0 0 9 300.3632 194.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 182.6994 Tm -.005 Tc [(information under the EU Gener)19.5(al Data Pr)9.8(otection)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.7246 182.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 170.6994 Tm -.005 Tc (Regulation [GDPR]\), what kind of information it is)Tj ET EMC /P <>BDC BT 9 0 0 9 334.8968 170.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 158.6994 Tm -.005 Tc [(\(e.g., health information compar)9.3(ed t)9.8(o)0( nancial)]TJ ET EMC /P <>BDC BT 9 0 0 9 324.8815 158.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 146.6994 Tm -.005 Tc [(information\), and in what state or countr)-8.8(y the)]TJ ET EMC /P <>BDC BT 9 0 0 9 320.6451 146.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 134.6994 Tm -.005 Tc [(information is located. Additionally)52.3(, an or)9.3(ganization)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.9924 134.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 122.6994 Tm -.005 Tc [(must be able t)9.8(o)0( meet its own policies b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 301.2583 122.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 110.6994 Tm -.005 Tc [(implementing appr)9.8(opriate contr)9.8(ols dictated b)5.4(y)0( its)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.0161 110.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 98.6994 Tm -.005 Tc [(risk-based decisions about the necessar)-8.8(y security)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.5077 98.6994 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 86.6994 Tm -.005 Tc [(and priv)7.3(acy of its information. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 676.6879 Tm [(Because laws in one location ma)7.3(y conict with an)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.5957 676.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 664.6879 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( policies or mandates \(e.g., laws or)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.142 664.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 652.6879 Tm -.005 Tc [(r)9.3(egulations in another location\), an or)9.3(ganization)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.645 652.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 640.6879 Tm -.005 Tc [(ma)7.3(y decide that it needs t)9.8(o)0( r)9.3(estrict the type of cloud)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.1632 640.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 628.6879 Tm -.005 Tc [(ser)-8.8(v)6.4(ers it uses, based on the state or countr)-8.8(y)52.3(.)0( )19.5(Thus,)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.4265 628.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 616.6879 Tm -.005 Tc [(the cor)9.3(e impediments t)9.8(o)0( br)9.8(oader adoption of cloud)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.0903 616.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 604.6879 Tm -.005 Tc [(technologies ar)9.3(e the abilities of an or)9.3(ganization t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.3826 604.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 592.6879 Tm -.005 Tc [(pr)9.8(otect its information and vir)-24.4(tual assets in the)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.6812 592.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 580.6879 Tm -.005 Tc [(cloud and t)9.8(o)0( ha)7.3(v)6.4(e)0( sucient visibility int)9.8(o that)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.7135 580.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 568.6879 Tm -.005 Tc [(information t)9.8(o)0( conduct o)7.3(v)6.4(ersight and ensur)9.3(e that)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.3393 568.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 556.6879 Tm -.005 Tc [(the or)9.3(ganization and its CSP ar)9.3(e complying with)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.8844 556.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 544.6879 Tm -.005 Tc [(applicable laws and business pr)19.5(actices. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 520.6879 Tm [(In addition, ther)9.3(e ar)9.3(e technical challenges and)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.7853 520.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 508.6879 Tm -.005 Tc [(ar)9.3(chitectur)19.5(al decisions that must be made when)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.1422 508.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 496.6879 Tm -.005 Tc [(connecting two dispar)19.5(ate clouds. An impor)-24.4(tant)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.3358 496.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 484.6879 Tm -.005 Tc [(consider)19.5(ation r)9.3(e)6.4(v)7.3(olv)6.4(es ar)9.8(ound the type of wide ar)9.3(ea)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.5009 484.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 472.6879 Tm -.005 Tc [(network connecting the on-pr)9.3(emises priv)7.3(ate cloud)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.4395 472.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 460.6879 Tm -.005 Tc [(and the hybrid/public cloud, because it ma)7.3(y impact)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.2606 460.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 448.6879 Tm -.005 Tc (the latency of the workloads and the security)Tj ET EMC /P <>BDC BT 9 0 0 9 537.9246 448.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 436.6879 Tm -.005 Tc [(postur)9.3(e of the management plane acr)9.8(oss the )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 424.6879 Tm [(two infr)19.5(astructur)9.3(es.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 438.6428 427.3879 Tm -.0083 Tc (6 )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 361.5 398.6879 Tm .9 .53 .1 0 k -.005 Tc [(Miscongur)9.3(ed Cloud Ser)-8.8(v)6.4(ers )]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 361.5 380.6879 Tm 0 0 0 1 k [(A major challenge t)9.8(o)0( cloud security is)]TJ ET EMC /P <>BDC BT 9 0 0 9 509.007 380.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 368.6879 Tm -.005 Tc [(miscongur)9.3(ed cloud ser)-8.8(v)6.4(ers. )19.5(T)48.4(o)0( sa)7.3(v)6.4(e)0( costs,)]TJ ET EMC /P <>BDC BT 9 0 0 9 534.0606 368.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 356.6879 Tm -.005 Tc [(or)9.3(ganizations ar)9.3(e mo)7.3(ving t)9.8(o)0( the cloud r)19.5(apidly)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.6233 356.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 344.6879 Tm -.005 Tc [(without pr)9.8(oper security contr)9.8(ols such as)]TJ ET EMC /P <>BDC BT 9 0 0 9 519.7012 344.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 332.6879 Tm -.005 Tc [(ar)9.3(chitectur)9.3(e design, access contr)9.8(ols, vulner)19.5(ability)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.9296 332.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 320.6879 Tm -.005 Tc [(assessment or penetr)19.5(ation testing. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 296.6879 Tm [(Some leading r)9.3(epor)-24.4(ts indicate this tr)9.3(end. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 379.5 278.6879 Tm [(In 2018, the media sect)9.8(or t)9.8(opped the char)-24.4(t)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.3724 278.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 379.5 266.6879 Tm -.005 Tc [(with 40 per)9.3(cent of publicly disclosed)]TJ ET EMC /P <>BDC BT 9 0 0 9 520.6052 266.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 379.5 254.6879 Tm -.005 Tc [(incidents. Half of these incidents inv)7.3(olv)6.4(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 540.6864 254.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 379.5 242.6879 Tm -.005 Tc [(miscongur)9.3(ed cloud ser)-8.8(v)6.4(ers and other)]TJ ET EMC /P <>BDC BT 9 0 0 9 528.2132 242.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 379.5 230.6879 Tm -.005 Tc [(impr)9.8(operly congur)9.3(ed systems that leak)9.8(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.0645 230.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 379.5 218.6879 Tm -.005 Tc [(data or allowed a r)9.3(emote attack)9.8(er t)9.8(o)0( exploit)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.5671 218.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 379.5 206.6879 Tm -.005 Tc (the asset.)Tj ET EMC /P <>BDC BT /F2 1 Tf 5.4 0 0 5.4 417.4583 209.3878 Tm -.0083 Tc (7 )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 182.6879 Tm -.005 Tc [()58.6(A)8.3(ttack)9.8(ers ar)9.3(e tar)9.3(geting users of cloud ser)-8.8(vices and)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.5131 182.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 170.6879 Tm -.005 Tc [(miscongur)9.3(ed cloud ser)-8.8(v)6.4(ers ar)9.3(e exposing cust)9.8(omer)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.0332 170.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 158.6879 Tm -.005 Tc [(and emplo)7.3(y)6.4(ee data.)83()]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 441.3729 161.3878 Tm 0 Tc (8)Tj ET EMC /P <>BDC BT 9 0 0 9 444.3602 158.6879 Tm -.005 Tc [( Or)9.3(ganizations should check)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.9532 158.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 146.6879 Tm -.005 Tc [(and monit)9.8(or settings on cloud ser)-8.8(vice ar)9.3(chitectur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.3646 146.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 134.6879 Tm -.005 Tc [(and not maintain default settings. )19.5(Thir)9.3(d-par)-24.4(ty cloud)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.199 134.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 122.6879 Tm -.005 Tc [(v)6.4(endors should be v)6.4(etted for high-security)]TJ ET EMC /P <>BDC BT 9 0 0 9 526.6865 122.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 110.6879 Tm -.005 Tc [(standar)9.3(ds befor)9.3(e choosing t)9.8(o)0( do business with)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.4016 110.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 98.6879 Tm -.005 Tc [(them. Or)9.3(ganizations should alwa)7.3(ys ensur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 528.5869 98.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 86.6879 Tm -.005 Tc [(awar)9.3(eness of who contr)9.8(ols each component of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.8639 86.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 74.6879 Tm -.005 Tc [(cloud infr)19.5(astructur)9.3(e and dene policies for wher)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.5714 74.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (2)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Artifact <>BDC .9 .53 .1 0 k /GS3 gs .32394 508 348.444 175.438 re f EMC /P <>BDC BT 14 0 0 14 63.334 653.8677 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(BECA)8.3(USE)17.5( L)-9.3(A)33.7(WS)17.5( IN)17.5( ONE)17.5( L)31.7(OCA)63(TION)17.5( M)-8.8(A)45.9(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 327.338 653.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 39.334 635.8677 Tm .0351 Tc -.0175 Tw [(CONFLIC)14.1(T)37.1( WI)14.1(TH)17.5( AN)17.5( ORGANIZ)-6.4(A)63(TION)17.5()17.5(S)]TJ ET EMC /P <>BDC BT 14 0 0 14 291.3341 635.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 39.334 617.8677 Tm .0351 Tc -.0175 Tw [(POLICIES)17.5( OR)17.5( M)-8.8(AND)10.2(A)63(TES)17.5( )]TJ 12.1143 0 TD .0176 Tc 0 Tw [(\(E.G.)17.6(,)17.6( L)-26.8(A)16.2(W)-17.5(S)0( O)-17.5(R)]TJ ET EMC /P <>BDC BT 14 0 0 14 307.4943 617.8677 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 14 0 0 14 39.334 599.8677 Tm .0351 Tc -.0175 Tw [(REGUL)-9.3(A)63(TIONS)17.5( IN)17.5( ANO)13.2(THER)17.5( L)31.7(OCA)63(TION)17.5(\))35.1(,)35.1( )17.6( )]TJ ET EMC /P <>BDC BT 14 0 0 14 39.334 581.8677 Tm [(AN)17.5( ORGANIZ)-6.4(A)63(TION)17.5( M)-8.8(A)45.9(Y)17.5( DECIDE)17.5( )19.6(TH)-8.8(A)63(T)37.1( I)14.1(T)]TJ ET EMC /P <>BDC BT 14 0 0 14 311.6369 581.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 39.334 563.8677 Tm .0351 Tc -.0371 Tw [(NEEDS)17.5( T)13.6(O)17.5( )-19.6(RESTRIC)14.1(T)37.1( THE)17.5( T)-7.8(YPE)17.5( )-19.6(OF)17.5( )-19.6(CL)31.7(OUD)]TJ ET EMC /P <>BDC BT 14 0 0 14 318.5617 563.8677 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 39.334 545.8677 Tm .0351 Tc -.0175 Tw [(SER)9.2(VERS)17.5( I)14.1(T)37.1( USES)17.5(,)35.1( BASED)17.5( ON)17.5( )19.6(THE)17.5( ST)38.5(A)63(T)0(E)17.5( )17.6( )]TJ ET EMC /P <>BDC BT 14 0 0 14 39.334 527.8677 Tm [(OR)17.5( COUN)14.1(TR)23.4(Y)120.6(.)]TJ ET EMC /Figure <>BDC Q q 1 i 133.138 537.126 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 151.242 526.838 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 36.281 679.293 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 41.199 665.925 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 108 0 obj <>/ExtGState<>>> endobj 140 0 obj <> endobj 147 0 obj <> endobj 148 0 obj <> endobj 149 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (3)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 676.6879 Tm 0 0 0 1 k -.005 Tc [(and how security measur)9.3(es ar)9.3(e deplo)7.3(y)6.4(ed. )19.5(The same)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.5025 676.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 664.6879 Tm -.005 Tc [(security policies that would be emplo)7.3(y)6.4(ed for classic)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.505 664.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 652.6879 Tm -.005 Tc [(I)14.2(T)19.5( infr)19.5(astructur)9.3(e should be implemented with CSPs. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 628.6879 Tm [(V)21.5(endor \(Thir)9.3(d-P)5.4(ar)-24.4(ty\) Risk )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36.9471 616.6879 Tm [(Managing thir)9.3(d-par)-24.4(ty risk is an impor)-24.4(tant aspect in)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.6546 616.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 604.6879 Tm -.005 Tc [(the o)7.3(v)6.4(er)19.5(all risk management pr)9.8(ocess. Cloud)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.0702 604.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 592.6879 Tm -.005 Tc [(pr)9.8(o)7.3(viders ar)9.3(e thir)9.3(d par)-24.4(ties that st)9.8(or)9.3(e or pr)9.8(ocess)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.1391 592.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 580.6879 Tm -.005 Tc [(v)7.3(aluable information. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 54.9471 562.6879 Tm [(F)12.7(r)9.8(om a cybersecurity perspectiv)6.4(e, thir)9.3(d-)]TJ ET EMC /P <>BDC BT 9 0 0 9 54.9471 550.6879 Tm [(par)-24.4(ty risks fr)9.3(equently inv)7.3(olv)6.4(e a set of)]TJ ET EMC /P <>BDC BT 9 0 0 9 196.7446 550.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 54.9471 538.6879 Tm -.005 Tc [(thr)9.3(eats that ma)7.3(y ex)9.8(ceed the scope of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 212.7749 538.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 54.9471 526.6879 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( risk management activities.)]TJ ET EMC /P <>BDC BT 9 0 0 9 217.5275 526.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 54.9471 514.6879 Tm -.005 Tc [(Some or)9.3(ganizations focus t)9.8(oo narr)9.8(owly on)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.5141 514.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 54.9471 502.6879 Tm -.005 Tc [(risks. F)10.3(or example, when hosting data in)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.0369 502.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 54.9471 490.6879 Tm -.005 Tc [(the cloud, most or)9.3(ganizations ask the)]TJ ET EMC /P <>BDC BT 9 0 0 9 199.8361 490.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 54.9471 478.6879 Tm -.005 Tc [(v)6.4(endor for attestations or some e)6.4(vidence of)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.9118 478.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 54.9471 466.6879 Tm -.005 Tc [(cybersecurity capability)52.3(.)]TJ ET EMC /P <>BDC BT /F2 1 Tf 5.4 0 0 5.4 147.8568 469.3879 Tm -.0083 Tc (9 )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 298.6879 Tm -.005 Tc [(IoT)29.3( and Cloud )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36.9471 286.6879 Tm -.02 Tc [(Connected de)6.4(vices and cyberphysical systems ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.3139 286.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 274.6879 Tm -.02 Tc [(becoming mor)9.3(e pr)9.3(e)6.4(v)7.3(alent in enterprise envir)9.8(onments.)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.4066 274.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 262.6879 Tm -.02 Tc [(As the cloud envir)9.8(onment expands t)9.8(o)0( encompass)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.8857 262.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 250.6879 Tm -.02 Tc (these technologies, the connected world depends on)Tj ET EMC /P <>BDC BT 9 0 0 9 237.9366 250.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 238.6879 Tm -.02 Tc [(de)6.4(vices t)9.8(o)0( manage, or)9.3(chestr)19.5(ate and pr)9.8(o)7.3(vision data.)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.2174 238.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 226.6879 Tm -.02 Tc [(By 2023, the number of connected de)6.4(vices is for)9.3(ecast)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.3427 226.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 214.6879 Tm -.02 Tc [(t)9.8(o)0( r)9.3(each 20 billion. )19.5(This incr)9.3(ease in v)7.3(olume is a)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.7884 214.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 202.6879 Tm -.02 Tc [(gr)9.8(owing challenge for ser)-8.8(vice pr)9.8(o)7.3(viders task)9.8(ed with)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.3645 202.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 190.6879 Tm -.02 Tc [(tr)-8.8(ying t)9.8(o)0( k)9.8(eep their networks secur)9.3(e and for)]TJ ET EMC /P <>BDC BT 9 0 0 9 201.953 190.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 178.6879 Tm -.02 Tc [(enterprises and critical infr)19.5(astructur)9.3(e entities)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.1876 178.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 166.6879 Tm -.02 Tc [(deplo)7.3(ying and managing de)6.4(vices.)]TJ ET EMC /P <>BDC BT 9 0 0 9 164.3025 166.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 142.6879 Tm -.02 Tc [(Insecur)9.3(e data ow fr)9.8(om the edge t)9.8(o)0( the cloud is a)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.3109 142.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 130.6879 Tm -.02 Tc [(concern of the Internet of )19.5(Things \(IoT\) model of data)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.0407 130.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 118.6879 Tm -.02 Tc [(pr)9.8(ocessing. Data pr)9.8(ocessing can be done either at the)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.9275 118.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 106.6879 Tm -.02 Tc [(edge or at the cloud. E)9.3(dge computing pr)9.8(o)7.3(vides a wa)7.3(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.2487 106.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 94.6879 Tm -.02 Tc [(t)9.8(o)0( allow applications and ser)-8.8(vices t)9.8(o)0( gather or)]TJ ET EMC /P <>BDC BT 9 0 0 9 212.0127 94.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 82.6879 Tm -.02 Tc [(pr)9.8(ocess data t)9.8(o)0( the local computing de)6.4(vices, awa)7.3(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.033 82.6879 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 493.3296 Tm -.02 Tc [(fr)9.8(om centr)19.5(aliz)7.8(ed nodes, enabling analytics and)]TJ ET EMC /P <>BDC BT 9 0 0 9 432.1868 493.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 481.3296 Tm -.02 Tc [(knowledge gener)19.5(ation t)9.8(o)0( the logical extr)9.3(emes of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.7805 481.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 469.3296 Tm -.02 Tc (network. Although edge computing enhances)Tj ET EMC /P <>BDC BT 9 0 0 9 428.7932 469.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 457.3296 Tm -.02 Tc [(instantaneous r)9.3(esponse and subsequent decision-)]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 445.3296 Tm [(making \(e.g., use of machine learning [ML] t)9.8(o)0( mak)9.8(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.7525 445.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 433.3296 Tm -.02 Tc [(aut)9.8(onomous decisions\), it also r)9.3(esults in a distributed,)]TJ ET EMC /P <>BDC BT 9 0 0 9 460.4763 433.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 421.3296 Tm -.02 Tc [(unsaf)11.7(e and uncontr)9.8(ollable disarr)19.5(a)7.3(y)0( of data, which can)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.4983 421.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 409.3296 Tm -.02 Tc [(become critical when taking int)9.8(o account the amount)]TJ ET EMC /P <>BDC BT 9 0 0 9 457.988 409.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 397.3296 Tm -.02 Tc [(and the sensitivity of data that ar)9.3(e tr)19.5(ansmitted.)]TJ ET EMC /P <>BDC BT 9 0 0 9 432.7894 397.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 385.3296 Tm -.02 Tc [(Limited pr)9.8(ocessing and st)9.8(or)19.5(age capabilities of some)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.136 385.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 373.3296 Tm -.02 Tc [(endpoints ma)7.3(y r)9.3(estrict security f)11.7(eatur)9.3(es such as)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.3351 373.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 361.3296 Tm -.02 Tc [(authentication, encr)-8.8(yption and integrity pr)9.8(otection)]TJ ET EMC /P <>BDC BT 9 0 0 9 444.5407 361.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 349.3296 Tm -.02 Tc [(mechanisms, jeopar)9.3(dizing both access contr)9.8(ol and)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.5367 349.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 337.3296 Tm -.02 Tc [(the condentiality or integrity of data tr)19.5(ansmitted t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.8475 337.3296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 325.3295 Tm -.02 Tc [(the cloud. E)12.7(v)6.4(en when security f)11.7(eatur)9.3(es ar)9.3(e enabled,)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.0164 325.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 313.3295 Tm -.02 Tc [(faulty implementation can ha)7.3(v)6.4(e)0( a gr)9.3(eat impact on the)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.4013 313.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 301.3295 Tm -.02 Tc [(security of the entir)9.3(e model.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 361.5764 304.0296 Tm -.0333 Tc (10)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 367.281 304.0296 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 277.3295 Tm -.005 Tc [(Distributed denial-of-ser)-8.8(vice \(DDoS\) botnet attacks)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.4684 277.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 265.3295 Tm -.005 Tc [(ar)9.3(e another t)9.8(op IoT)19.5( risk. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 241.3295 Tm [(The Mir)19.5(ai botnet exploited a vulner)19.5(ability in IoT)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.9076 241.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 229.3295 Tm -.005 Tc [(de)6.4(vices t)9.8(o)0( launch a DDoS attack against a critical)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.5676 229.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 217.3295 Tm -.005 Tc [(Domain Name System \(DNS\) ser)-8.8(v)6.4(er that disrupted a)]TJ ET EMC /P <>BDC BT 9 0 0 9 460.534 217.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 205.3295 Tm -.005 Tc [(number of the Internet)54.7(s biggest websites, including)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.3458 205.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 193.3295 Tm -.005 Tc [(P)5.4(a)7.3(yP)5.4(al, Spotify and )19.5(T)27.8(witter)60.1(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 169.3295 Tm [(Accor)9.3(ding t)9.8(o)0( the Open W)15.2(eb Application Security)]TJ ET EMC /P <>BDC BT 9 0 0 9 444.0699 169.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 157.3295 Tm -.005 Tc [(Pr)9.8(oject \(OW)21(ASP\), both aspects of security in this)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.3803 157.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 145.3295 Tm -.005 Tc [(conv)6.4(er)9.3(gence ar)9.3(e facing challenges fr)9.8(om each other)60.1(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 459.4554 145.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 133.3295 Tm -.005 Tc [(Cloud web inter)-7.3(face is listed as one of the attack)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.3967 133.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 121.3295 Tm -.005 Tc [(sur)-7.3(faces of IoT)106.5(, while some t)9.8(op security risk fact)9.8(ors)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.4196 121.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 109.3295 Tm -.005 Tc [(include ser)-8.8(vice and data integr)19.5(ation, which is link)9.8(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 457.5186 109.3295 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 97.3295 Tm -.005 Tc [(t)9.8(o)0( the security of IoT)19.5( de)6.4(vices.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 371.2021 100.0296 Tm -.0083 Tc (11 )Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Figure <>BDC Q q 1 i 255.447 683.438 349.503 -172.5 re 378.513 100.03 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS3 gs q 349.501 0 0 -174.013 254.657 684.203 cm /Im8 Do Q EMC /Artifact <>BDC Q q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .9 .53 .1 0 k /GS3 gs 36 316.64 205.5 139.395 re f EMC /P <>BDC BT /F2 1 Tf 14 0 0 14 69.2461 426.4649 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(THE)17.5( SAME)17.5( SECURI)14.1(T)-7.8(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 210.7773 426.4649 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 45.2461 408.4649 Tm .0351 Tc -.0175 Tw [(POLICIES)17.5( )19.6(TH)-8.8(A)63(T)37.1( WOULD)17.5( BE)]TJ ET EMC /P <>BDC BT 14 0 0 14 222.7549 408.4649 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 45.2461 390.4649 Tm .0351 Tc -.0175 Tw [(EMPL)31.7(O)21(YED)17.5( FOR)17.5( CL)-9.3(ASSIC)17.5( )17.6( )]TJ ET EMC /P <>BDC BT 14 0 0 14 45.2461 372.4649 Tm [(I)14.1(T)37.1( INFRASTRUC)14.1(TURE)]TJ ET EMC /P <>BDC BT 14 0 0 14 184.5899 372.4649 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 45.2461 354.4649 Tm .0351 Tc -.0175 Tw [(SHOULD)17.5( BE)17.5( IMPLEMEN)14.1(TED)]TJ ET EMC /P <>BDC BT 14 0 0 14 227.4648 354.4649 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 45.2461 336.4649 Tm .0351 Tc -.0175 Tw [(WI)14.1(TH)17.5( CSPS)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 128.32 345.766 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 146.424 335.478 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 42.193 451.891 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 47.111 438.523 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 150 0 obj <>/XObject<>/ExtGState<>>> endobj 188 0 obj <> endobj 193 0 obj <> endobj 198 0 obj <> endobj 203 0 obj <> endobj 204 0 obj <> endobj 205 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Story <>BDC BT /F2 1 Tf 9 0 0 9 372.5 643.5065 Tm -.005 Tc [(lik)9.8(ely monit)9.8(or its perimeter for attacks, but the)]TJ ET EMC /Story <>BDC BT 9 0 0 9 553.6357 643.5065 Tm 0 Tc ( )Tj ET EMC /Story <>BDC BT 9 0 0 9 372.5 631.5065 Tm -.005 Tc [(consumer is fully r)9.3(esponsible for how their vir)-24.4(tual)]TJ ET EMC /Story <>BDC BT 9 0 0 9 566.6371 631.5065 Tm 0 Tc ( )Tj ET EMC /Story <>BDC BT 9 0 0 9 372.5 619.5065 Tm -.005 Tc (network security is designed and implemented)Tj ET EMC /Story <>BDC BT 9 0 0 9 556.1151 619.5065 Tm 0 Tc ( )Tj ET EMC /Story <>BDC BT 9 0 0 9 372.5 607.5065 Tm -.005 Tc [(based on the t)9.8(ools a)7.3(v)7.3(ailable on the ser)-8.8(vice.)]TJ ET EMC /Story <>BDC BT 5.4 0 0 5.4 542.2239 610.2064 Tm -.0083 Tc (12 )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 583.5065 Tm -.005 Tc [(A)23.5(maz)7.8(on)58.6()113.3(s)0( Shar)9.3(ed Responsibility Model )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 361.5 571.5065 Tm [(Some SaaS pr)9.8(o)7.3(viders belie)6.4(v)6.4(e)0( that if the)6.4(y ar)9.3(e hosting)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.0995 571.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 559.5065 Tm -.005 Tc [(their application on Amaz)7.8(on W)15.2(eb Ser)-8.8(vices \(A)33.7(WS\),)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.507 559.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 547.5065 Tm -.005 Tc [(the)6.4(y ar)9.3(e aut)9.8(omatically compliant just because A)33.7(W)0(S)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.4659 547.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 535.5065 Tm -.005 Tc [(ma)7.3(y be. )19.5(This ma)7.3(y be applicable t)9.8(o)0( other IaaS or)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.9244 535.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 523.5065 Tm -.005 Tc [(P)5.4(aaS pr)9.8(o)7.3(viders. SaaS CSPs ma)7.3(y also need t)9.8(o)0( r)9.3(e)6.4(view)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.52 523.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 511.5065 Tm -.005 Tc [(the exact contr)9.8(ols in the SOC r)9.3(epor)-24.4(ts and examine)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.0493 511.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 499.5065 Tm -.005 Tc [(whether the r)9.3(ele)6.4(v)7.3(ant contr)9.8(ols and criteria ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.3831 499.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 487.5065 Tm -.005 Tc [(co)7.3(v)6.4(e)0(r)9.3(ed in those SOC r)9.3(epor)-24.4(ts. A)24.4(v)7.3(ailability of an SOC)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.1459 487.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 475.5065 Tm -.005 Tc [(r)9.3(epor)-24.4(t should not be just a checkbo)10.3(x for thir)9.3(d-par)-24.4(ty)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.0676 475.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 463.5065 Tm -.005 Tc [(\(v)6.4(endor\) risk compliance. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 439.5065 Tm [(This cust)9.8(omer/A)33.7(WS shar)9.3(ed r)9.3(esponsibility model)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 551.6311 442.2064 Tm -.0083 Tc (13)Tj ET EMC /P <>BDC BT 9 0 0 9 557.6057 439.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 427.5065 Tm -.005 Tc [(also extends t)9.8(o)0( I)14.2(T)19.5( contr)9.8(ols. Just as the)]TJ ET EMC /P <>BDC BT 9 0 0 9 514.0103 427.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 415.5065 Tm -.005 Tc [(r)9.3(esponsibility t)9.8(o)0( oper)19.5(ate the I)14.2(T)19.5( envir)9.8(onment is)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.2052 415.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 403.5065 Tm -.005 Tc [(shar)9.3(ed between A)33.7(WS and its cust)9.8(omers, so is the)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.795 403.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 391.5065 Tm -.005 Tc [(management, oper)19.5(ation and v)6.4(erication of I)14.2(T)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.2562 391.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 379.5065 Tm -.005 Tc [(contr)9.8(ols. A)33.7(WS can help r)9.3(elie)6.4(v)6.4(e)0( the cust)9.8(omer bur)9.3(den)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.6294 379.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 367.5065 Tm -.005 Tc [(of oper)19.5(ating contr)9.8(ols b)5.4(y)0( managing those contr)9.8(ols)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.7412 367.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 355.5065 Tm -.005 Tc [(associated with the physical infr)19.5(astructur)9.3(e deplo)7.3(y)6.4(e)0(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.7322 355.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 343.5065 Tm -.005 Tc [(in the A)33.7(WS envir)9.8(onment that pr)9.3(e)6.4(viously ma)7.3(y ha)7.3(v)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.5929 343.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 331.5065 Tm -.005 Tc [(been managed b)5.4(y)0( the cust)9.8(omer)60.1(. As e)6.4(v)6.4(e)0(r)-8.8(y)0( cust)9.8(omer)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.4987 331.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 319.5065 Tm -.005 Tc [(is deplo)7.3(y)6.4(ed diff)11.7(er)9.3(ently in A)33.7(WS, cust)9.8(omers can tak)9.8(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.2085 319.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 307.5064 Tm -.005 Tc [(adv)7.3(antage of shifting management of cer)-24.4(tain I)14.2(T)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.4064 307.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 295.5064 Tm -.005 Tc [(contr)9.8(ols t)9.8(o)0( A)33.7(WS, which r)9.3(esults in a \(new\) distributed)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.5291 295.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 283.5064 Tm -.005 Tc [(contr)9.8(ol envir)9.8(onment. Cust)9.8(omers can then use the)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.0675 283.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 271.5064 Tm -.005 Tc [(A)33.7(WS contr)9.8(ol and compliance documentation)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.5166 271.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 259.5064 Tm -.005 Tc [(a)7.3(v)7.3(ailable t)9.8(o)0( them t)9.8(o)0( per)-7.3(form their contr)9.8(ol e)6.4(v)7.3(aluation)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.7205 259.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 247.5064 Tm -.005 Tc [(and v)6.4(erication pr)9.8(ocedur)9.3(es as r)9.3(equir)9.3(ed. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 223.5064 Tm [(Data Go)7.3(v)6.4(ernance in the Cloud )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 361.5 211.5064 Tm [(Go)7.3(v)6.4(ernance issues also r)9.3(elate t)9.8(o)0( r)9.3(egulat)9.8(or)-8.8(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 531.704 211.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 199.5064 Tm -.005 Tc [(compliance, security)52.3(, priv)7.3(acy and similar concerns)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.7889 199.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 187.5064 Tm -.005 Tc [(impacting t)9.8(oda)7.3(y)-7.3()54.7(s or)9.3(ganizations. )19.5(T)48.4(oda)7.3(y)-7.3()54.7(s data)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.0667 187.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 175.5064 Tm -.005 Tc [(management and st)9.8(or)19.5(age landscape, wher)9.3(e data)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.8074 175.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 163.5064 Tm -.005 Tc [(entr)9.8(op)5.4(y and data spr)19.5(awl ar)9.3(e r)19.5(ampant, has far-)]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 151.5064 Tm [(r)9.3(eaching consequences for data security)52.3(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 127.5064 Tm [(Many or)9.3(ganizations ar)9.3(e st)9.8(oring signicant amounts)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.2612 127.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 115.5064 Tm -.005 Tc [(of data in distributed and hybrid cloud and e)6.4(v)6.4(e)0(n)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.499 115.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 103.5064 Tm -.005 Tc [(unmanaged envir)9.8(onments, incr)9.3(easing challenges)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.3777 103.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 91.5064 Tm -.005 Tc [(for r)9.3(egulat)9.8(or)-8.8(y compliance. A data inv)6.4(ent)9.8(or)-8.8(y and)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.2716 91.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 79.5064 Tm -.005 Tc [(data ow ar)9.3(e often r)9.3(ecommended. With incr)9.3(easing)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.8883 79.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (4)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 143 492.5436 Tm 0 0 0 1 k -.005 Tc (Security Responsibilities in the Cloud )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 143 480.5436 Tm [(A)8.3(t)0( a high le)6.4(v)6.4(el, security r)9.3(esponsibility maps t)9.8(o)0( the)]TJ ET EMC /P <>BDC BT 9 0 0 9 336.9559 480.5436 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 468.5436 Tm -.005 Tc [(degr)9.3(ee of contr)9.8(ol any giv)6.4(en act)9.8(or has o)7.3(v)6.4(er the)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.7942 468.5436 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 456.5436 Tm -.005 Tc [(ar)9.3(chitectur)9.3(e stack. )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 432.5436 Tm [(The US National Institute of Standar)9.3(ds and)]TJ ET EMC /P <>BDC BT 9 0 0 9 311.1351 432.5436 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 420.5436 Tm -.005 Tc [(T)48.4(echnology \(NIST\) denes )28.8(cloud stack as: )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 154 402.5436 Tm .05 .65 1 .01 k [(Softwar)9.3(e as a Ser)-8.8(vice \(SaaS\))]TJ ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 269.6746 402.5436 Tm 0 0 0 1 k (The CSP is)Tj ET EMC /LBody <>BDC BT 9 0 0 9 319.4576 402.5436 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 402.5436 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 390.5436 Tm 0 0 0 1 k -.005 Tc [(r)9.3(esponsible for nearly all security)52.3(, because the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 335.5016 390.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 378.5436 Tm -.005 Tc (cloud user can only access and manage their use)Tj ET EMC /LBody <>BDC BT 9 0 0 9 348.3344 378.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 366.5436 Tm -.005 Tc (of the application and cannot alter how the)Tj ET EMC /LBody <>BDC BT 9 0 0 9 322.6746 366.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 354.5436 Tm -.005 Tc [(application works. F)10.3(or example, a SaaS pr)9.8(o)7.3(vider)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 342.67 354.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 342.5436 Tm -.005 Tc [(is r)9.3(esponsible for perimeter security)52.3(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 296.9366 342.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 330.5436 Tm -.005 Tc [(logging/monit)9.8(oring/auditing and application)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 328.3392 330.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 318.5436 Tm -.005 Tc [(security)52.3(, while the consumer ma)7.3(y be able only t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.3213 318.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 306.5436 Tm -.005 Tc (manage authorization and entitlements. )Tj ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 154 288.5436 Tm .05 .65 1 .01 k -.02 Tc [(Platform as a Ser)-8.8(vice \(P)5.4(aaS\))]TJ ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 265.174 288.5436 Tm 0 0 0 1 k (The CSP is)Tj ET EMC /LBody <>BDC BT 9 0 0 9 313.4721 288.5436 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 288.5436 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 276.5436 Tm 0 0 0 1 k -.02 Tc [(r)9.3(esponsible for the security of the platform, while)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 340.0439 276.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 264.5436 Tm -.02 Tc [(the consumer is r)9.3(esponsible for e)6.4(v)6.4(e)0(r)-8.8(ything the)6.4(y)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 334.2863 264.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 252.5436 Tm -.02 Tc [(implement on the platform, including how the)6.4(y)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 330.6954 252.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 240.5436 Tm -.02 Tc [(congur)9.3(e any off)11.7(er)9.3(ed security f)11.7(eatur)9.3(es. )19.5(The)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 319.6562 240.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 228.5436 Tm -.02 Tc [(r)9.3(esponsibilities ar)9.3(e, thus, mor)9.3(e e)6.4(v)6.4(enly split. F)10.3(o)0(r)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 330.8723 228.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 216.5436 Tm -.02 Tc [(example, when using a Database as a Ser)-8.8(vice, the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 343.2205 216.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 204.5436 Tm -.02 Tc [(pr)9.8(o)7.3(vider manages fundamental security)52.3(, patching)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 342.2843 204.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 192.5436 Tm -.02 Tc [(and cor)9.3(e congur)19.5(ation, while the cloud user is)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 328.2128 192.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 180.5436 Tm -.02 Tc [(r)9.3(esponsible for e)6.4(v)6.4(e)0(r)-8.8(ything else, including which)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 333.3899 180.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 168.5436 Tm -.02 Tc [(security f)11.7(eatur)9.3(es of the database t)9.8(o)0( use t)9.8(o)0( manage)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 348.1736 168.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 156.5436 Tm -.02 Tc [(accounts or e)6.4(v)6.4(en authentication methods.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 314.8082 156.5436 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 154 138.5436 Tm .05 .65 1 .01 k -.005 Tc [(Infr)14.7(astructur)9.3(e as a Ser)-8.8(vice \(IaaS\))]TJ ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 285.7919 138.5436 Tm 0 0 0 1 k [(Just lik)9.8(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 325.7148 138.5436 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 138.5436 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 126.5435 Tm 0 0 0 1 k -.005 Tc [(P)5.4(aaS, the pr)9.8(o)7.3(vider is r)9.3(esponsible for foundational)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 347.747 126.5435 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 114.5435 Tm -.005 Tc [(security)52.3(, while the cloud user is r)9.3(esponsible for)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 337.6714 114.5435 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 102.5435 Tm -.005 Tc [(e)6.4(v)6.4(e)0(r)-8.8(ything he or she builds on the infr)19.5(astructur)9.3(e.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.0732 102.5435 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 90.5435 Tm -.005 Tc [(Unlik)9.8(e P)5.4(aaS, this places far mor)9.3(e r)9.3(esponsibility)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 338.0768 90.5435 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 78.5435 Tm -.005 Tc [(on the client. F)10.3(or example, the IaaS pr)9.8(o)7.3(vider will)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 341.3661 78.5435 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC .9 .53 .1 0 k /GS3 gs .32394 508.918 348.176 141.338 re f EMC /P <>BDC BT 14 0 0 14 62.334 620.6863 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(M)-8.8(A)0(N)13.6(Y)17.5( ORGANIZ)-6.4(A)63(TIONS)17.5( ARE)17.5( ST)13.6(ORING)]TJ ET EMC /P <>BDC BT 14 0 0 14 316.6925 620.6863 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.334 602.6863 Tm .0351 Tc -.0175 Tw [(SIGNIFICAN)14.1(T)37.1( AMOUN)14.1(T)7.8(S)17.5( OF)17.5( D)10.2(A)63(T)38.5(A)17.5( IN)]TJ ET EMC /P <>BDC BT 14 0 0 14 279.6154 602.6863 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.334 584.6863 Tm .0351 Tc -.0175 Tw [(DISTRIBUTED)17.5( AND)17.5( H)13.6(YBRID)17.5( CL)31.7(OUD)17.5( AND)17.5( EVEN)]TJ ET EMC /P <>BDC BT 14 0 0 14 340.5236 584.6863 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.334 566.6863 Tm .0351 Tc -.0175 Tw [(UNM)-8.8(AN)-8.8(A)5.3(GED)17.5( ENVIRONMEN)14.1(T)7.8(S)17.5(,)35.1( INCREASING)]TJ ET EMC /P <>BDC BT 14 0 0 14 335.0275 566.6863 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.334 548.6863 Tm .0351 Tc -.0175 Tw [(CH)-8.8(ALLENGES)17.5( FOR)17.5( REGUL)-9.3(A)63(T)13.6(OR)23.4(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 255.0675 548.6863 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 38.334 530.6863 Tm .0351 Tc [(COMPLI)-8.8(ANCE)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 137.476 538.044 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 155.58 527.756 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 35.281 646.112 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 40.199 632.744 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 206 0 obj <>/ExtGState<>>> endobj 253 0 obj <> endobj 258 0 obj <> endobj 263 0 obj <> endobj 268 0 obj <> endobj 277 0 obj <> endobj 278 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (5)Tj ET EMC /LBody <>BDC /GS2 gs BT 9 0 0 9 36.9471 643.5065 Tm 0 0 0 1 k -.005 Tc [(IoT)19.5( de)6.4(vices and data lak)9.8(es in the cloud, the visibility)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 239.9351 643.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 631.5065 Tm -.005 Tc [(and contr)9.8(ol ar)9.3(e inv)7.3(ariably lost, r)9.3(esulting in data)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 220.1121 631.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 619.5065 Tm -.005 Tc [(so)7.3(v)6.4(e)0(r)9.3(eignty challenges. Disruptiv)6.4(e technologies)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 224.3252 619.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 607.5065 Tm -.005 Tc [(such as block)9.8(chain \(distributed ledger\) ha)7.3(v)6.4(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 210.9954 607.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 595.5065 Tm -.005 Tc [(emer)9.3(ged as candidates for nancial institutions t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.7854 595.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 583.5065 Tm -.005 Tc [(r)9.3(eform their businesses. )19.5(The speed and cost of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 222.7573 583.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 571.5065 Tm -.005 Tc (doing business using distributed ledger technology)Tj ET EMC /LBody <>BDC BT 9 0 0 9 237.7516 571.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 559.5065 Tm -.005 Tc [(ar)9.3(e expected t)9.8(o)0( impr)9.8(o)7.3(v)6.4(e b)5.4(y)0( simplifying back-oce)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.4888 559.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 547.5065 Tm -.005 Tc [(oper)19.5(ations and lowering the need for human)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 211.2478 547.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 535.5065 Tm -.005 Tc [(inter)-8.8(v)6.4(ention. Howe)6.4(v)6.4(e)0(r)60.1(,)0( a number of security)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 207.4675 535.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 36.9471 523.5065 Tm -.005 Tc [(concerns ar)9.8(ound this new technology r)9.3(emain. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 499.5065 Tm [(Data Encr)-8.8(yption and A)23.5(nonymization )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36.9471 487.5065 Tm [(Priv)7.3(acy mandates such as the EU Gener)19.5(al Data)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.3355 487.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 475.5065 Tm -.005 Tc [(Pr)9.8(otection Regulation \(GDPR\) r)9.3(ecommend data)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.3801 475.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 463.5065 Tm -.005 Tc (anonymization, which can be another form of)Tj ET EMC /P <>BDC BT 9 0 0 9 215.1315 463.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 451.5065 Tm -.005 Tc [(encr)-8.8(yption. Without a pr)9.8(oper data go)7.3(v)6.4(ernance)]TJ ET EMC /P <>BDC BT 9 0 0 9 216.9192 451.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 439.5065 Tm -.005 Tc [(pr)9.8(ogr)19.5(am, or)9.3(ganizations ma)7.3(y face challenges in)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.8292 439.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 427.5065 Tm -.005 Tc [(meeting these priv)7.3(acy compliance mandates. Data)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.6079 427.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 415.5065 Tm -.005 Tc [(encr)-8.8(yption is also mandated for the US Health)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.1046 415.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 403.5065 Tm -.005 Tc [(Insur)19.5(ance P)6.4(o)0(r)-24.4(tability and Accountability Act)]TJ ET EMC /P <>BDC BT 9 0 0 9 209.2066 403.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 391.5065 Tm -.005 Tc [(\(HIP)67.4(AA\) and the P)5.4(a)7.3(yment Car)9.3(d Industr)-8.8(y Data)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.0276 391.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 379.5065 Tm -.005 Tc [(Security Standar)9.3(d \(PCI DSS\). )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 36.9471 353.5065 Tm .9 .53 .1 0 k [(Cloud Assur)14.7(ance for CSPs )]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 36.9471 335.5065 Tm 0 0 0 1 k [(Ther)9.3(e ar)9.3(e se)6.4(v)6.4(e)0(r)19.5(al appr)9.8(oaches for CSPs t)9.8(o)0( pr)9.8(o)7.3(vide)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.5269 335.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 323.5065 Tm -.005 Tc [(assur)19.5(ance t)9.8(o)0( their cust)9.8(omers that would pr)9.8(o)7.3(vide)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.3794 323.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 311.5065 Tm -.005 Tc [(them with condence in using the CSP)54.7(s ser)-8.8(vices. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 287.5065 Tm [(Cloud ST)58.6(AR Cer)-24.4(tication Roadmap )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36.9471 275.5065 Tm (The Cloud Security Alliance \(CSA\),)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 171.6482 278.2064 Tm -.0083 Tc (14)Tj ET EMC /P <>BDC BT 9 0 0 9 177.6227 275.5065 Tm -.005 Tc [( in collabor)19.5(ation)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.7413 275.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 263.5065 Tm -.005 Tc [(with the American Institute of CP)67.4(As \(AICP)67.4(A\),)]TJ ET EMC /P <>BDC BT 9 0 0 9 211.7511 263.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 251.5065 Tm -.005 Tc [(de)6.4(v)6.4(eloped a thir)9.3(d-par)-24.4(ty assessment pr)9.8(ogr)19.5(am of)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.9229 251.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 239.5065 Tm -.005 Tc [(CSPs called the CSA Security )19.5(T)36.6(rust Assur)19.5(ance and)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.372 239.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 227.5065 Tm -.005 Tc [(Risk \(ST)38.6(AR\) A)8.3(ttestation. )19.5(The ST)38.6(AR is the industr)-8.8(y)-7.3()54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.0149 227.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 215.5065 Tm -.005 Tc [(most power)-7.3(ful pr)9.8(ogr)19.5(am for security assur)19.5(ance in)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.0493 215.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 203.5065 Tm -.005 Tc [(the cloud. ST)38.6(AR encompasses k)9.8(e)6.4(y principles of)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.7471 203.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 191.5065 Tm -.005 Tc [(tr)19.5(anspar)9.3(ency)52.3(, rigor)9.8(ous auditing and harmonization)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.8173 191.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 179.5065 Tm -.005 Tc [(of standar)9.3(ds. )19.5(The ST)38.6(AR pr)9.8(ogr)19.5(am pr)9.8(o)7.3(vides multiple)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.6709 179.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 167.5065 Tm -.005 Tc [(benets, including indications of best pr)19.5(actices and)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.38 167.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 155.5065 Tm -.005 Tc [(v)7.3(alidation of the security postur)9.3(e of cloud off)11.7(erings. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 131.5064 Tm [(SOC 2 for Cloud CSA ST)58.6(AR A)8.3(ttestation )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36.9471 119.5064 Tm [(The SOC 2+ F)12.7(r)19.5(amework allows an SOC 2 t)9.8(o)0( r)9.3(epor)-24.4(t)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.5529 119.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 107.5064 Tm -.005 Tc [(on any additional contr)9.8(ols o)7.3(v)6.4(er and abo)7.3(v)6.4(e)0( the trust)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.2874 107.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 95.5064 Tm -.005 Tc [(ser)-8.8(vices criteria contr)9.8(ols for security)52.3(, a)7.3(v)7.3(ailability)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.7789 95.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 83.5064 Tm -.005 Tc [(condentiality)52.3(, pr)9.8(ocessing integrity and priv)7.3(acy)52.3(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.8466 83.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 643.5065 Tm -.005 Tc [(T)55.2(aking adv)7.3(antage of this fr)19.5(amework, ST)38.6(AR)]TJ ET EMC /P <>BDC BT 9 0 0 9 422.666 643.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 631.5065 Tm -.005 Tc [(A)8.3(ttestation pr)9.8(o)7.3(vides a fr)19.5(amework for Cer)-24.4(tied)]TJ ET EMC /P <>BDC BT 9 0 0 9 435.8971 631.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 619.5065 Tm -.005 Tc [(Public Accountants per)-7.3(forming independent)]TJ ET EMC /P <>BDC BT 9 0 0 9 429.6346 619.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 607.5065 Tm -.005 Tc (assessments of CSPs using SOC 2 engagements)Tj ET EMC /P <>BDC BT 9 0 0 9 449.0212 607.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 595.5065 Tm -.005 Tc [(with the CSA)58.6()54.7(s)0( Cloud Contr)9.8(ols Matrix \(CCM\). )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 255.4471 571.5065 Tm [(Cloud Contr)17.6(ols Matrix )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 255.4471 559.5065 Tm [(The CCM is the only meta-fr)19.5(amework of cloud-)]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 547.5065 Tm [(specic security contr)9.8(ols, mapped t)9.8(o)0( leading)]TJ ET EMC /P <>BDC BT 9 0 0 9 431.4288 547.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 535.5065 Tm -.005 Tc [(standar)9.3(ds, best pr)19.5(actices and r)9.3(egulations. CCM)]TJ ET EMC /P <>BDC BT 9 0 0 9 442.1054 535.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 523.5065 Tm -.005 Tc [(pr)9.8(o)7.3(vides or)9.3(ganizations with the needed structur)9.3(e,)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.5204 523.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 511.5065 Tm -.005 Tc [(detail and clarity r)9.3(elating t)9.8(o)0( information security)]TJ ET EMC /P <>BDC BT 9 0 0 9 443.6252 511.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 499.5065 Tm -.005 Tc [(tailor)9.3(ed t)9.8(o)0( cloud computing. CCM is curr)9.3(ently)]TJ ET EMC /P <>BDC BT 9 0 0 9 433.4274 499.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 487.5065 Tm -.005 Tc [(consider)9.3(ed a )]TJ ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 308.4976 487.5065 Tm [(de fact)9.8(o)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 340.2926 487.5065 Tm [( standar)9.3(d for cloud security)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.2723 487.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 475.5065 Tm -.005 Tc [(assur)19.5(ance and compliance. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 255.4471 451.5065 Tm [(Le)6.4(v)6.4(el 2 CSA ST)58.6(AR A)8.3(ttestation )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 255.4471 439.5065 Tm -.02 Tc [(The ST)38.6(AR A)8.3(ttestation is positioned as ST)38.6(AR)]TJ ET EMC /P <>BDC BT 9 0 0 9 422.4785 439.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 427.5065 Tm -.02 Tc [(Cer)-24.4(tication at Le)6.4(v)6.4(el 2 of the Open Cer)-24.4(tication)]TJ ET EMC /P <>BDC BT 9 0 0 9 435.65 427.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 415.5065 Tm -.02 Tc [(F)12.7(r)19.5(amework, and ST)38.6(AR Cer)-24.4(tication is a rigor)9.8(ous thir)9.3(d-)]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 403.5065 Tm [(par)-24.4(ty independent assessment of the security of a)]TJ ET EMC /P <>BDC BT 9 0 0 9 446.5311 403.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 391.5065 Tm -.02 Tc [(cloud ser)-8.8(vice pr)9.8(o)7.3(vider \()]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 344.0149 391.5065 Tm [(gur)9.3(e 2)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 373.8728 391.5065 Tm [(\). ST)38.6(AR A)8.3(ttestation is)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.8376 391.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 379.5065 Tm -.02 Tc (based on type I or type II SOC attestations)Tj ET EMC /P <>BDC BT 9 0 0 9 414.8804 379.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 367.5065 Tm -.02 Tc [(supplemented b)5.4(y)0( the criteria in the CCM.)]TJ ET EMC /P <>BDC BT 9 0 0 9 410.1294 367.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 343.5065 Tm -.005 Tc (This assessment: )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 325.5065 Tm [(Is based on a matur)9.3(e attestation standar)9.3(d )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 325.5065 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 307.5064 Tm 0 0 0 1 k -.005 Tc (Allows for the immediate adoption of the )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 307.5064 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 295.5064 Tm 0 0 0 1 k -.005 Tc [(CCM as additional criteria and the exibility t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 447.2104 295.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 283.5064 Tm -.005 Tc [(update the criteria as technology and mark)9.8(et)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 442.5475 283.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 271.5064 Tm -.005 Tc [(r)9.3(equir)9.3(ements change )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 253.5064 Tm [(Does not r)9.3(equir)9.3(e the use of any criteria that wer)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 457.6321 253.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 253.5064 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 241.5064 Tm 0 0 0 1 k -.005 Tc [(not designed for or r)9.3(eadily accepted b)5.4(y)0( the CSP )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 223.5064 Tm [(Pr)9.8(o)7.3(vides for r)9.8(obust r)9.3(epor)-24.4(ting on the ser)-8.8(vice)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.1862 223.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 223.5064 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 211.5064 Tm 0 0 0 1 k -.005 Tc [(pr)9.8(o)7.3(vider)-7.8()54.7(s)0( description of its system and on the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 448.0068 211.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 199.5064 Tm -.005 Tc [(ser)-8.8(vice pr)9.8(o)7.3(vider)-7.8()54.7(s)0( contr)9.8(ols, including a)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 416.246 199.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 187.5064 Tm -.005 Tc [(description of the ser)-8.8(vice audit)9.8(or)-7.8()54.7(s)0( tests of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 434.3155 187.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 175.5064 Tm -.005 Tc [(contr)9.8(ols in a format v)6.4(e)0(r)-8.8(y)0( similar t)9.8(o)0( the )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 163.5064 Tm [(curr)9.3(ent SSAE 18 r)9.3(epor)-24.4(ting, ther)9.3(eb)5.4(y facilitating)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 445.5942 163.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 151.5064 Tm -.005 Tc [(mark)9.8(et acceptance)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 342.3363 154.2064 Tm -.0083 Tc (15 )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 127.5064 Tm -.005 Tc [(ST)38.6(AR A)8.3(ttestation builds on the k)9.8(e)6.4(y str)9.3(engths of SOC)]TJ ET EMC /P <>BDC BT 9 0 0 9 460.7024 127.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 115.5064 Tm -.005 Tc (2 because it: )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 97.5064 Tm [(Is a matur)9.3(e attest standar)9.3(d \(it ser)-8.8(v)6.4(es as the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 437.8663 97.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 97.5064 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 85.5064 Tm 0 0 0 1 k -.005 Tc [(standar)9.3(d for SOC 2 and SOC 3 r)9.3(epor)-24.4(ting\) )]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC Q endstream endobj 279 0 obj <>/ExtGState<>>> endobj 289 0 obj <> endobj 294 0 obj <> endobj 299 0 obj <> endobj 326 0 obj <> endobj 327 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 154 432.4794 Tm -.01 Tc [(Pr)9.8(o)7.3(vides for r)9.8(obust r)9.3(epor)-24.4(ting on the ser)-8.8(vice)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 322.7605 432.4794 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 432.4794 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 420.4794 Tm 0 0 0 1 k -.01 Tc [(pr)9.8(o)7.3(vider)-7.8()54.7(s)0( description of its system and on the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 333.4463 420.4794 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 408.4794 Tm -.01 Tc [(ser)-8.8(vice pr)9.8(o)7.3(vider)-7.8()54.7(s)0( contr)9.8(ols, including a description)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 347.8456 408.4794 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 396.4794 Tm -.01 Tc [(of the ser)-8.8(vice audit)9.8(or)-7.8()54.7(s)0( tests of contr)9.8(ols in a)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 324.1342 396.4794 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 384.4794 Tm -.01 Tc [(format v)6.4(e)0(r)-8.8(y)0( similar t)9.8(o)0( the curr)9.3(ent SSAE 18)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 317.0956 384.4794 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 372.4794 Tm -.01 Tc [(r)9.3(epor)-24.4(ting, ther)9.3(eb)5.4(y facilitating mark)9.8(et acceptance)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 342.9255 372.4794 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 354.4794 Tm -.005 Tc [(Pr)9.8(o)7.3(vides e)6.4(v)7.3(aluation o)7.3(v)6.4(er a period of time r)19.5(ather)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 340.1774 354.4794 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 354.4794 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 342.4794 Tm 0 0 0 1 k -.005 Tc (than a point in time )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 324.4794 Tm [(Pr)9.8(o)7.3(vides r)9.3(ecognition with the AICP)67.4(A logo )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 324.4794 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 143 300.4793 Tm 0 0 0 1 k -.005 Tc [(CSA Continuous Assessment \(Le)6.4(v)6.4(el 2 and 3)]TJ ET EMC /P <>BDC BT 9 0 0 9 317.562 300.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 288.4793 Tm -.005 Tc (Continuous\) )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 143 276.4793 Tm [(ST)38.6(AR Le)6.4(v)6.4(el 2 Continuous builds on t)9.8(op of the ST)38.6(AR)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.1528 276.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 264.4793 Tm -.005 Tc [(Le)6.4(v)6.4(el 2 r)9.3(equir)9.3(ement of thir)9.3(d-par)-24.4(ty assessments and)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.8964 264.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 252.4794 Tm -.005 Tc [(impr)9.8(o)7.3(v)6.4(es it b)5.4(y)0( allowing the CSP t)9.8(o)0( demonstr)19.5(ate a)]TJ ET EMC /P <>BDC BT 9 0 0 9 336.5689 252.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 240.4794 Tm -.005 Tc [(higher le)6.4(v)6.4(el of assur)19.5(ance and tr)19.5(anspar)9.3(ency with the)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.3856 240.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 228.4794 Tm -.005 Tc (addition of a continuous self-assessment. )Tj ET EMC /P <>BDC BT 9 0 0 9 143 204.4793 Tm [(In ST)38.6(AR Le)6.4(v)6.4(el 2, a CSP is assessed b)5.4(y)0( a thir)9.3(d par)-24.4(ty)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.3778 204.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 192.4793 Tm -.005 Tc [(thr)9.8(ough one of the Le)6.4(v)6.4(el 2 pr)9.8(ogr)19.5(ams against a)]TJ ET EMC /P <>BDC BT 9 0 0 9 324.3553 192.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 180.4793 Tm -.005 Tc [(determined and appr)9.8(opriate scope. )19.5(The Le)6.4(v)6.4(el 2)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.1786 180.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 168.4793 Tm -.005 Tc [(pr)9.8(ogr)19.5(ams, including ST)38.6(AR Cer)-24.4(tication, ST)38.6(AR)]TJ ET EMC /P <>BDC BT 9 0 0 9 320.6527 168.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 156.4793 Tm -.005 Tc [(A)8.3(ttestation and C-ST)38.6(AR, ar)9.3(e based on v)7.3(aried but)]TJ ET EMC /P <>BDC BT 9 0 0 9 331.8107 156.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 144.4793 Tm -.005 Tc (demanding cloud security criteria of the CSA CCM,)Tj ET EMC /P <>BDC BT 9 0 0 9 341.938 144.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 132.4793 Tm -.005 Tc [(the International Or)9.3(ganization for Standar)9.3(dization)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.6962 132.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 120.4793 Tm -.005 Tc [(\(ISO\)/International Electr)9.8(otechnical Commission)]TJ ET EMC /P <>BDC BT 9 0 0 9 334.2012 120.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 108.4793 Tm -.005 Tc [(\(IEC)12.7(\) ISO/IEC 27001 standar)9.3(ds, or the AICP)67.4(A )19.5(T)36.6(rust)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.5493 108.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 96.4793 Tm -.005 Tc [(Ser)-8.8(vices Criteria \(T)7.8(SC)12.7(\), applied t)9.8(owar)9.3(d the CSP)54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.707 96.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 84.4793 Tm -.005 Tc (assessment scope. )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 432.4794 Tm [(Le)6.4(v)6.4(el 3 Continuous Cer)-24.4(tication is a highly selectiv)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.7205 432.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 420.4794 Tm -.005 Tc [(cloud security assessment pr)9.8(ogr)19.5(am, extending the)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.2939 420.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 408.4794 Tm -.005 Tc [(assur)19.5(ance le)6.4(v)6.4(el of a cloud ser)-8.8(vice be)6.4(y)7.3(ond the trust)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.6205 408.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 396.4794 Tm -.005 Tc [(giv)6.4(en b)5.4(y)0( the cer)-24.4(tication cy)6.4(cle of ISO/IEC 27001)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.017 396.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 384.4794 Tm -.005 Tc [(and the audit period of AICP)67.4(A SOC 2 type II r)9.3(epor)-24.4(ts. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 360.4794 Tm [(ST)38.6(AR Le)6.4(v)6.4(el 3 Continuous r)9.3(equir)9.3(es all continuous)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.3541 360.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 348.4794 Tm -.005 Tc [(assessments t)9.8(o)0( be per)-7.3(formed under the)]TJ ET EMC /P <>BDC BT 9 0 0 9 519.6516 348.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 336.4794 Tm -.005 Tc [(super)-8.8(vision of a thir)9.3(d-par)-24.4(ty audit)9.8(or)60.1(. )19.5(This diff)11.7(ers fr)9.8(om)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.7072 336.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 324.4794 Tm -.005 Tc [(Le)6.4(v)6.4(el 2 Continuous, which r)9.3(equir)9.3(es a fr)9.3(equently)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.0016 324.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 312.4794 Tm -.005 Tc [(submitted self-assessment on t)9.8(op of Le)6.4(v)6.4(el 2 b)5.4(y)0( the)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.687 312.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 300.4793 Tm -.005 Tc (CSP itself. )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 276.4793 Tm (SOC 2 vs. ISO 27001/27017 )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 361.5 264.4793 Tm [(Many CSPs ma)7.3(y also ha)7.3(v)6.4(e)0( adopted ISO)]TJ ET EMC /P <>BDC BT 9 0 0 9 516.3842 264.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 252.4794 Tm -.005 Tc [(27001/27017 for their cloud envir)9.8(onment. How SOC)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.1782 252.4794 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 240.4794 Tm -.005 Tc [(compar)9.3(es t)9.8(o)0( this standar)9.3(d is pr)9.8(o)7.3(vided in )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 521.9678 240.4794 Tm [(gur)9.3(e 3)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 552.7706 240.4794 Tm (. )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 216.4794 Tm [(C5 Cloud Contr)17.6(ols )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 361.5 204.4793 Tm [(In F)10.3(ebruar)-8.8(y 2016, the Bundesamt fur Sicherheit)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.5676 204.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 192.4793 Tm -.005 Tc [(Institute \(BSI\), or the German F)10.3(eder)19.5(al Oce for)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.7623 192.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 180.4793 Tm -.005 Tc [(Information Security)52.3(, established the Cloud)]TJ ET EMC /P <>BDC BT 9 0 0 9 530.6844 180.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 168.4793 Tm -.005 Tc [(Computing Compliance Contr)9.8(ols Catalog \(C5\))]TJ ET EMC /P <>BDC BT 9 0 0 9 542.0717 168.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 156.4793 Tm -.005 Tc [(cer)-24.4(tication after it noted the rise in cloud)]TJ ET EMC /P <>BDC BT 9 0 0 9 526.0506 156.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 144.4793 Tm -.005 Tc [(computing in Germany)52.3(.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 452.8934 147.1794 Tm -.0083 Tc (16)Tj ET EMC /P <>BDC BT 9 0 0 9 458.8678 144.4793 Tm -.005 Tc ( With the C5, the BSI)Tj ET EMC /P <>BDC BT 9 0 0 9 538.5276 144.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 132.4793 Tm -.005 Tc [(r)9.3(edened the bar that CSPs should meet when)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.202 132.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 120.4793 Tm -.005 Tc [(dealing with German data. )19.5(The establishment of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.3456 120.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 108.4793 Tm -.005 Tc [(C5 ele)6.4(v)7.3(ated the demands on CSPs b)5.4(y)0( combining)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.6428 108.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 96.4793 Tm -.005 Tc [(the existing security standar)9.3(ds \(including)]TJ ET EMC /P <>BDC BT 9 0 0 9 523.3378 96.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 84.4793 Tm -.005 Tc [(international cer)-24.4(tications such as ISO 27001\) and)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.1224 84.4793 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (6)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Figure <>BDC Q .023529 .12941 .20392 0 k /GS3 gs 144.037 451.446 421.928 200.218 re f .90588 .52157 .094118 0 k 144.037 652.956 421.928 14.74 re f q 1 i 144 667.696 422 -216.25 re W n 0 0 0 0 K 0 J 0 j 1.991 w 10 M [] 0 d q 1 0 0 1 144.037 652.956 cm 0 0 m 421.997 0 l S 1 0 0 1 -.037 -.222 cm 0 0 m 421.997 0 l S Q Q BT /F11 1 Tf 9 0 0 9 283.061 657.5824 Tm 0 0 0 0 k 0 Tc 0 Tw [(Figur)9.6(e).1( 2ST)57.9(AR Cer)-24.7(t).3(ification F)13.3(r)14.8(amework)]TJ ET 153.792 463.373 378.311 155.503 re f .89804 .6549 .003922 0 k 172.379 567.436 44.493 33.069 re f .80392 .031373 .80392 0 k 172.379 515.359 44.493 49.268 re f 0 .22745 .85098 0 k 172.379 463.487 44.493 49.268 re f 0 0 0 0 k 1 i q 1 0 0 1 187.718 584.031 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c f Q q 1 0 0 1 198.806 584.031 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c f Q q 1 0 0 1 209.521 584.031 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c f Q q 1 0 0 1 185.021 584.031 cm 0 0 m 20.102 0 l f Q 0 0 0 0 K 0 J 0 j 1.8 w 10 M [] 0 d q 1 0 0 1 185.021 584.031 cm 0 0 m 20.102 0 l S Q q 1 0 0 1 187.718 540.263 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c f Q q 1 0 0 1 198.806 540.263 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c f Q 1 w q 1 0 0 1 209.521 540.263 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c s Q q 1 0 0 1 185.021 540.263 cm 0 0 m 17.158 0 l f Q 1.8 w q 1 0 0 1 185.021 540.263 cm 0 0 m 17.158 0 l S Q q 1 0 0 1 187.718 488.389 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c f Q 1 w q 1 0 0 1 198.806 488.389 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c h S 1 0 0 1 10.714 0 cm 0 0 m 0 -2.071 -1.679 -3.75 -3.75 -3.75 c -5.821 -3.75 -7.5 -2.071 -7.5 0 c -7.5 2.071 -5.821 3.75 -3.75 3.75 c -1.679 3.75 0 2.071 0 0 c s Q q 1 0 0 1 185.021 488.389 cm 0 0 m 5.965 0 l f Q 1.8 w q 1 0 0 1 185.021 488.389 cm 0 0 m 5.965 0 l S Q q 1 0 0 1 199.061 488.389 cm 0 0 m 2.999 0 l f Q q 1 0 0 1 199.061 488.389 cm 0 0 m 2.999 0 l S Q 0 0 0 .4 k q 1 0 0 1 537.929 582.566 cm 0 0 m 13.4 17.939 l 25.935 .216 l 18.587 .216 l 18.587 -118.873 l 6.916 -118.873 l 6.916 .067 l 0 0 l f Q 153.792 603.098 15.778 15.778 re f 0 0 0 .7 k 172.379 603.098 359.841 15.778 re f .89804 .6549 .003922 0 k 219.949 567.436 312.271 33.069 re f .80392 .031373 .80392 0 k 219.949 538.907 312.271 25.72 re f 219.949 515.348 312.271 20.696 re f 0 .22745 .85098 0 k 219.949 487.035 312.271 25.72 re f 219.949 463.477 312.271 20.695 re f 0 0 0 .7 k 153.792 463.259 15.778 137.246 re f 1 w q 1 0 0 1 440.219 552.28 cm 0 0 m 80.001 0 l S 1 0 0 1 0 32 cm 0 0 m 80.001 0 l S 1 0 0 1 0 -85.333 cm 0 0 m 80.001 0 l S Q BT /F12 1 Tf 14 0 0 14 272.82 630.9466 Tm 0 0 0 1 k .0003 Tw [(Open Cer)-25(t)0(ification F)11.2(r)19(amework)]TJ /F11 1 Tf 8 0 0 8 227.0527 608.4466 Tm 0 0 0 0 k .0003 Tc -.0003 Tw [(A)5(u)-.4(dit F)13.2(r)9.5(equency)-3251.3(S).3(ecurity)]TJ 9.75 -3.4375 TD -.0006 Tc .0006 Tw (Continuous Auditing)Tj 0 -3.875 TD .0001 Tc -.0001 Tw [(Le)7.1(v)6.5(e).9(l 2 + Continuous Self-Assessment)]TJ 0 -3.3125 TD [(Thir)9(d-P)5.9(a)-.2(r)-24.5(t)-.4(y Cer)-24.5(t)-.6(ification)]TJ 0 0 0 1 k 0 -3.25 TD (Continuous Self-Assessment)Tj T* 0 Tc 0 Tw (Self-Assessment)Tj 0 0 0 0 k 16.75 17.125 TD .0003 Tc [(Priv)8.3(acy)]TJ 0 -10.6875 TD 0 Tc [(GDPR CoC Cer)-25.3(tification)]TJ 0 0 0 1 k 0 -6.5 TD -.0001 Tc .0001 Tw (GDPR CoC Self-Assessment)Tj 10 0 0 10 227.5527 580.9466 Tm 0 0 0 0 k 0 Tc .001 Tw [(ST)58.5(AR Le)6.7(v)6(e).4(l 3)]TJ 0 -2.8 TD [(ST)58.5(AR Le)6.7(v)6(e).4(l 2)]TJ 0 -1 TD 0 Tw (Continuous)Tj 0 -2.1 TD .001 Tw [(ST)58.5(AR Le)6.7(v)6(e).4(l 2)]TJ 0 0 0 1 k 0 -2.05 TD [(ST)58.5(AR Le)6.7(v)6(e).4(l 1)]TJ 0 -1 TD 0 Tw (Continuous)Tj 0 -2.15 TD .001 Tw [(ST)58.5(AR Le)6.7(v)6(e).4(l 1)]TJ 0 9 -9 0 165.5527 506.3824 Tm 0 0 0 0 k -.0005 Tc .0005 Tw [(T)39.7(y)-1.1(pe of Audit)]TJ 0 -9 9 0 547.75 582.4012 Tm 0 0 0 1 k .0001 Tc -.0001 Tw [(T)31.6(r)15(anspar)9.6(ency and Assur)15(a).3(nce)]TJ ET EMC endstream endobj 328 0 obj <>/ExtGState<>>> endobj 348 0 obj <> endobj 349 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (7)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 154.2915 Tm 0 0 0 1 k -.005 Tc [(r)9.3(equiring incr)9.3(eased tr)19.5(anspar)9.3(ency in the data)]TJ ET EMC /P <>BDC BT 9 0 0 9 209.8571 154.2915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 142.2915 Tm -.005 Tc [(pr)9.8(ocessing. C5 contr)9.8(ols can be applied globally)52.3(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 118.2914 Tm [(C5 is intended primarily for pr)9.8(of)11.7(essional CSPs, their)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.423 118.2914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 106.2914 Tm -.005 Tc [(audit)9.8(ors and cust)9.8(omers of the CSPs. )19.5(The catalog is)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.2458 106.2914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 94.2914 Tm -.005 Tc [(divided int)9.8(o 17 thematic sections \(e.g., or)9.3(ganization)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.3282 94.2914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 82.2914 Tm -.005 Tc [(of information security)52.3(, physical security\). C5)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.2924 82.2914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 70.2914 Tm -.005 Tc [(mak)9.8(es use of r)9.3(ecogniz)7.8(ed security standar)9.3(ds, such)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.0933 70.2914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 154.2915 Tm -.005 Tc [(as ISO 27001, the Cloud Contr)9.8(ols Matrix of the CSA)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.8582 154.2915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 142.2915 Tm -.005 Tc (and BSI publications, and it uses these)Tj ET EMC /P <>BDC BT 9 0 0 9 407.1982 142.2915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 130.2914 Tm -.005 Tc [(r)9.3(equir)9.3(ements wher)9.3(e)6.4(v)6.4(er appr)9.8(opriate. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 106.2914 Tm [(A SOC 2 r)9.3(epor)-24.4(t pr)9.8(o)7.3(v)6.4(es that a CSP complies with the)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.2601 106.2914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 94.2914 Tm -.005 Tc [(r)9.3(equir)9.3(ements of the catalog and that the)]TJ ET EMC /P <>BDC BT 9 0 0 9 414.0042 94.2914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 82.2914 Tm -.005 Tc [(statements made on tr)19.5(anspar)9.3(ency ar)9.3(e corr)9.3(ect. )19.5(This)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.8856 82.2914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 70.2914 Tm -.005 Tc [(r)9.3(epor)-24.4(t is based on the internationally r)9.3(ecogniz)7.8(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 445.2621 70.2914 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Figure <>BDC Q .21 1 .75 .12 k /GS3 gs 36.5 649.227 422 18.36 re f .9 .53 .1 0 k 1 i 36.5 649.228 118.3 -17.431 re 154.8 649.228 151.85 -17.431 re 306.65 649.228 151.85 -17.431 re f .015 .195 .3 .003 k 36.5 631.797 118.3 -47.431 re 306.65 631.797 151.85 -47.431 re 36.5 584.366 118.3 -37.431 re 306.65 584.366 151.85 -37.431 re 36.5 546.936 118.3 -57.431 re 306.65 546.936 151.85 -57.431 re 36.5 489.505 118.3 -27.431 re 306.65 489.505 151.85 -27.431 re 36.5 462.074 118.3 -27.431 re 306.65 462.074 151.85 -27.431 re 36.5 434.644 118.3 -37.431 re 306.65 434.644 151.85 -37.431 re 36.5 397.213 118.3 -27.431 re 306.65 397.213 151.85 -27.431 re 36.5 369.782 118.3 -17.431 re 306.65 369.782 151.85 -17.431 re 36.5 352.352 118.3 -17.431 re 306.65 352.352 151.85 -17.431 re 36.5 334.921 118.3 -27.431 re 306.65 334.921 151.85 -27.431 re 36.5 307.49 118.3 -17.431 re 306.65 307.49 151.85 -17.431 re 36.5 290.06 118.3 -37.431 re 306.65 290.06 151.85 -37.431 re 36.5 252.629 118.3 -47.431 re 306.65 252.629 151.85 -47.431 re 36.5 205.198 118.3 -17.431 re 306.65 205.198 151.85 -17.431 re 36.5 187.768 118.3 -17.431 re 306.65 187.768 151.85 -17.431 re f .053 .25 .188 .03 k 154.8 631.797 151.85 -47.431 re 154.8 584.366 151.85 -37.431 re 154.8 546.936 151.85 -57.431 re 154.8 489.505 151.85 -27.431 re 154.8 462.074 151.85 -27.431 re 154.8 434.644 151.85 -37.431 re 154.8 397.213 151.85 -27.431 re 154.8 369.782 151.85 -17.431 re 154.8 352.352 151.85 -17.431 re 154.8 334.921 151.85 -27.431 re 154.8 307.49 151.85 -17.431 re 154.8 290.06 151.85 -37.431 re 154.8 252.629 151.85 -47.431 re 154.8 205.198 151.85 -17.431 re 154.8 187.768 151.85 -17.431 re f 0 0 0 0 K 0 J 0 j 2 w 10 M [] 0 d q 1 0 0 1 36.5 649.227 cm 0 0 m 270.15 0 l S 1 0 0 1 270.15 0 cm 0 0 m 151.85 0 l S Q 1 w q 1 0 0 1 154.8 632.297 cm 0 0 m 0 15.931 l S 1 0 0 1 151.85 0 cm 0 0 m 0 15.931 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 36 631.797 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -46.931 cm 0 0 m 0 46.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -36.931 cm 0 0 m 0 36.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -56.93 cm 0 0 m 0 56.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -26.931 cm 0 0 m 0 26.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -26.931 cm 0 0 m 0 26.432 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -36.93 cm 0 0 m 0 36.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -26.931 cm 0 0 m 0 26.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -16.931 cm 0 0 m 0 16.432 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -16.93 cm 0 0 m 0 16.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -26.931 cm 0 0 m 0 26.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -16.931 cm 0 0 m 0 16.432 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -36.93 cm 0 0 m 0 36.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -46.93 cm 0 0 m 0 46.43 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -16.931 cm 0 0 m 0 16.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S 1 0 0 1 .5 -16.931 cm 0 0 m 0 16.431 l S 1 0 0 1 -.5 -.5 cm 0 0 m 118.8 0 l S Q Q q 1 0 0 1 154.8 584.866 cm 0 0 m 0 46.431 l S 1 0 0 1 0 -37.431 cm 0 0 m 0 36.431 l S 1 0 0 1 0 -57.43 cm 0 0 m 0 56.431 l S 1 0 0 1 0 -27.431 cm 0 0 m 0 26.431 l S 1 0 0 1 0 -27.431 cm 0 0 m 0 26.432 l S 1 0 0 1 0 -37.43 cm 0 0 m 0 36.431 l S 1 0 0 1 0 -27.431 cm 0 0 m 0 26.431 l S 1 0 0 1 0 -17.431 cm 0 0 m 0 16.432 l S 1 0 0 1 0 -17.43 cm 0 0 m 0 16.431 l S 1 0 0 1 0 -27.431 cm 0 0 m 0 26.431 l S 1 0 0 1 0 -17.431 cm 0 0 m 0 16.432 l S 1 0 0 1 0 -37.43 cm 0 0 m 0 36.431 l S 1 0 0 1 0 -47.43 cm 0 0 m 0 46.43 l S 1 0 0 1 0 -17.431 cm 0 0 m 0 16.431 l S 1 0 0 1 0 -17.431 cm 0 0 m 0 16.431 l S 1 0 0 1 0 460.96 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -47.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -37.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -57.43 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -27.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -27.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -37.43 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -27.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -17.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -17.43 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -27.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -17.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -37.43 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -47.43 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -17.431 cm 0 0 m 151.85 0 l S 1 0 0 1 0 -17.431 cm 0 0 m 151.85 0 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 306.65 631.797 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 584.866 cm 0 0 m 0 46.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 584.866 cm 0 0 m 0 46.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 547.435 cm 0 0 m 0 36.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 547.435 cm 0 0 m 0 36.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 490.005 cm 0 0 m 0 56.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 490.005 cm 0 0 m 0 56.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 462.574 cm 0 0 m 0 26.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 462.574 cm 0 0 m 0 26.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 435.143 cm 0 0 m 0 26.432 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 435.143 cm 0 0 m 0 26.432 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 397.713 cm 0 0 m 0 36.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 397.713 cm 0 0 m 0 36.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 370.282 cm 0 0 m 0 26.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 370.282 cm 0 0 m 0 26.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 352.851 cm 0 0 m 0 16.432 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 352.851 cm 0 0 m 0 16.432 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 335.421 cm 0 0 m 0 16.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 335.421 cm 0 0 m 0 16.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 307.99 cm 0 0 m 0 26.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 307.99 cm 0 0 m 0 26.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 290.559 cm 0 0 m 0 16.432 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 290.559 cm 0 0 m 0 16.432 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 253.129 cm 0 0 m 0 36.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 253.129 cm 0 0 m 0 36.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 205.699 cm 0 0 m 0 46.43 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 205.699 cm 0 0 m 0 46.43 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 188.268 cm 0 0 m 0 16.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 188.268 cm 0 0 m 0 16.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q q 1 0 0 1 306.65 170.837 cm 0 0 m 0 16.431 l S Q q 36 667.587 423 -497.75 re W n q 1 0 0 1 458.5 170.837 cm 0 0 m 0 16.431 l S 1 0 0 1 -151.85 -.5 cm 0 0 m 152.35 0 l S Q Q BT /F11 1 Tf 10 0 0 10 128.4697 653.2279 Tm 0 0 0 0 k -.015 Tc .022 Tw [(Figure 3Comparison of ISO 27001 and SOC 2 )27.9(Type II Repor)-23.1(t)]TJ 9 0 0 9 87.334 635.7971 Tm -.0096 Tc -.0004 Tw [(Area)-10646.2(ISO 27001/27017)-10792.8(SOC 2 )28.8(Type II)]TJ ET /GS2 gs BT /F12 1 Tf 9 0 0 9 40.498 618.364 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [(Standard)-9669.7(International Standard ISO/IEC 27001,)-9.7( )]TJ 13.144 -1.111 TD (Second Edition 2013-10-01, ISMS)Tj /F13 1 Tf T* -.0097 Tc -.0006 Tw [(Information security management)-9( )]TJ T* -.0093 Tc 0 Tw (systems)Tj /F12 1 Tf 16.872 3.333 TD .0003 Tw [(T)37.5(r).6(ust Ser)-8.3(vices Principles and Criteria for)-9.3( )]TJ 0 -1.111 TD -.0096 Tc .0006 Tw [(Security, A)24(v)7.1(ailability, Pr)9.2(ocess Integrity,)-10.2( )]TJ T* -.0093 Tc .0003 Tw [(Confidentiality and/or Priv)7.8(a)-.7(cy)]TJ -30.017 -3.048 TD [(Go)7.9(verning body)-7164(American National Standards Institute)-10.1( )]TJ 13.144 -1.111 TD [(\(ANSI\) ANSI-ASQ National Accreditation)-9( )]TJ T* -.0096 Tc .0006 Tw (Board \(ANAB\))Tj 16.872 2.2219 TD -.0092 Tc 0 Tw [(AICP)67.9(A)]TJ -30.017 -4.1589 TD -.0094 Tc .0004 Tw [(Purpose)-10( )-9722.5(Assist organization)39.9()54.5(s management in)-9( )]TJ 13.144 -1.111 TD [(establishment and cer)-23.5(t).1(ification of ISMS)-9.8( )]TJ T* .0005 Tw [(that meets specified requirements and is)-9.4( )]TJ T* .0003 Tw [(able t)9.3(o)0( be cer)-23.3(t).2(ified as best pr)19.6(actice)]TJ 16.8721 3.333 TD [(Assist ser)-8.5(v)-.4(ice organization)40()54.4(s)-9( )]TJ 0 -1.111 TD -.0006 Tw [(management in repor)-23.5(t).1(ing t)9.2(o)0( cust)9.1(omers)-9.1( )]TJ T* .0003 Tw [(that it has met established security)-9.1( )]TJ T* [(criteria that ensure that the system is)-9( )]TJ T* [(pr)9.5(otected against unauthorized access)]TJ -30.0171 -1.937 TD [(Applicability)-8414.6(S)-.2(tatement of Applicability \(SO)11.5(A).4(\) of)-9.9( )]TJ 13.144 -1.111 TD -.0091 Tc 0 Tw [(contr)10.3(ols)]TJ 16.872 1.111 TD -.0094 Tc .0004 Tw (System description by management)Tj -30.017 -3.048 TD [(Cer)-23.5(t).1(ificate/repor)-23.5(t).1(ing statement)-9.9( )]TJ 0 -1.111 TD -.0006 Tw [(for contr)9.4(ols)-9.3( )]TJ 13.144 1.111 TD .0003 Tw [(A point in time, i.e., as on a date)-4578.9(Period of time, i.e., for the period ended)-9.6( )]TJ 16.872 -1.111 TD .0005 Tw (XXXX \(date\))Tj -30.017 -1.9371 TD -.0007 Tw [(Objective)-9561.1(E)-.3(stablish, implement, maintain and)-9.7( )]TJ 13.144 -1.111 TD .0004 Tw [(impr)9.5(o)7.9(v)-.5(e the information security)-9.2( )]TJ T* -.0006 Tw (management system \(ISMS\))Tj 16.872 2.222 TD .0003 Tw [(Measure a ser)-8.2(vice organization against)-9.8( )]TJ 0 -1.111 TD (specific security principles and criteria)Tj -30.017 -3.0479 TD [(Repor)-23.4(t).2(ing cycle)-7195(R).3(ecer)-23.4(tified e)6.1(v)-.5(ery three years)-9.1( )-5722.1(A)8.3(t).2(testation pr)9.6(o)8.1(v)-.5(ided e)6(v)-.4(ery year \(or six)-9.7( )]TJ 30.016 -1.111 TD -.0096 Tc 0 Tw (months\))Tj -30.017 -1.937 TD -.0094 Tc .0004 Tw [(A)5.3(u).5(dit frequency)-7081.7(S)-.3(ur)-8.4(veillance audit conducted annually)-2327.8(Continuous monit)9.3(oring during the period)]TJ -.001 -1.937 TD [(Cer)-23.4(t).2(ified/attested by)-5188.9(ISO Accredited Registr)19.6(a).2(r Cer)-23.4(t).2(ification)-2497.6(A)8.4(ttestation by a licensed CP)67.6(A)]TJ -.001 -1.937 TD [(Nature of testing)-6661.8(D).3(esign effectiveness)-8816.9(D).2(esign effectiveness and oper)19.7(ating)-8.7( )]TJ 30.016 -1.111 TD 0 Tw (effectiveness)Tj -30.017 -1.9371 TD .0004 Tw [(Contr)9.5(o)0(ls in repor)-23.5(t)-6424(Details of contr)9.6(ols not pr)9.5(o)8(v)-.6(ided)-4806.6(Details of contr)9.4(ols pr)9.6(o)7.9(v)-.5(ided)]TJ -.001 -1.9369 TD [(F)9.7(o).1(cus)-9.1( )-10589(Organization)38.9()54.5(s ability t)9.2(o).1( maintain an ISMS)-949.7(Technology and the pr)9.7(ocesses behind the)-9.9( )]TJ 30.0159 -1.111 TD [(applicable trust ser)-8.4(v)-.4(ices criteria of the)-9.9( )]TJ T* -.0007 Tw [(specific ser)-8.4(vice)]TJ -30.0169 -1.937 TD .0004 Tw [(Repor)-23.4(t)-10584.1(Single-page cer)-23.4(t).2(ification)-7496.6(A).4( repor)-23.3(t).2( containing the audit)9.3(o)0(r)-7.3()54.5(s opinion,)-9.8( )]TJ 30.016 -1.111 TD [(management)54.3(s)-.1( asser)-23.5(t).2(ion, description of)-10( )]TJ T* [(contr)9.6(ols, user contr)9.5(ol consider)19.6(a)-.8(tions,)-9.8( )]TJ T* [(tests of contr)9.6(ols and results)]TJ -30.017 -1.9371 TD -.0007 Tw [(Difficulty t)9.1(o)0( achie)5.9(v)-.5(e)-5539.8(M).2(oder)19.5(ate)-13200.6(H)-.1(igher)]TJ -.001 -1.9369 TD .0004 Tw [(Structure)-9618.7(I)-1(nformation security fr)19.6(amework)-4780.2(P).5(rinciples and criteria)]TJ ET EMC endstream endobj 350 0 obj <>/ExtGState<>>> endobj 379 0 obj <> endobj 384 0 obj <> endobj 389 0 obj <> endobj 394 0 obj <> endobj 405 0 obj <> endobj 410 0 obj <> endobj 415 0 obj <> endobj 428 0 obj <> endobj 429 0 obj <> endobj 430 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 143 543.7181 Tm -.005 Tc [(attestation system of the International Standar)9.3(d for)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.1122 543.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 531.7181 Tm -.005 Tc [(Assur)19.5(ance Engagements \(ISAE\) 3000, which is used)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.3813 531.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 519.7181 Tm -.005 Tc [(b)5.4(y)0( public audit)9.8(ors. When auditing the annual)]TJ ET EMC /P <>BDC BT 9 0 0 9 317.4084 519.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 507.7181 Tm -.005 Tc [(nancial statements, the audit)9.8(ors ar)9.3(e alr)9.3(eady onsite,)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.4377 507.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 495.7181 Tm -.005 Tc [(and auditing accor)9.3(ding t)9.8(o)0( C5 can be per)-7.3(formed)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.7014 495.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 483.7181 Tm -.005 Tc [(without much additional effor)-24.4(t. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 143 457.7181 Tm .9 .53 .1 0 k [(Priv)7.3(acy Compliance for Cloud )]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 143 439.7181 Tm 0 0 0 1 k [(Priv)7.3(acy has gr)19.5(abbed the attention of boar)9.3(ds of)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.5099 439.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 427.7181 Tm -.005 Tc [(dir)9.3(ect)9.8(ors \(BoDs\) as r)9.3(egions look t)9.8(o)0( implement)]TJ ET EMC /P <>BDC BT 9 0 0 9 324.0696 427.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 415.7181 Tm -.005 Tc [(priv)7.3(acy r)9.3(egulation and compliance standar)9.3(ds)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.9759 415.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 403.7181 Tm -.005 Tc [(similar t)9.8(o)0( GDPR. Priv)7.3(acy is the new buzzwor)9.3(d, and)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.8683 403.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 391.7181 Tm -.005 Tc [(the potential impact is v)6.4(e)0(r)-8.8(y)0( r)9.3(eal. P)6.4(ersonal data ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.019 391.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 379.7181 Tm -.005 Tc [(pr)9.8(ocessed for political and economic r)9.3(easons)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.1082 379.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 367.7181 Tm -.005 Tc (without users consent, as happened in the)Tj ET EMC /P <>BDC BT 9 0 0 9 310.9814 367.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 355.7181 Tm -.005 Tc [(Cambridge Analytica e)6.4(v)6.4(ent.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 251.0609 358.4181 Tm -.0083 Tc (17)Tj ET EMC /P <>BDC BT 9 0 0 9 257.0356 355.7181 Tm -.005 Tc [( In view of the r)9.3(ecent)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.7114 355.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 343.7181 Tm -.005 Tc [(incidents and failur)9.3(e of the EU Saf)11.7(e Harbor and the)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.2919 343.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 331.7181 Tm -.005 Tc [(Priv)7.3(acy Shield, priv)7.3(acy laws ar)9.3(e now changing and)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.855 331.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 319.7181 Tm -.005 Tc [(ma)7.3(y become mor)9.3(e stringent. After GDPR, new)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.6551 319.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 307.7181 Tm -.005 Tc [(priv)7.3(acy laws ar)9.3(e being enacted such as the US)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.1331 307.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 295.7181 Tm -.005 Tc [(California Consumer Priv)7.3(acy Act \(CCP)67.4(A\), US New)]TJ ET EMC /P <>BDC BT 9 0 0 9 336.3688 295.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 283.7181 Tm -.005 Tc [(Y)31.8(ork Priv)7.3(acy Act \(N)13.7(YP)67.4(A\) and the Br)19.5(azilian Gener)19.5(al)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.1103 283.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 271.7181 Tm -.005 Tc [(Data Pr)9.8(otection Law)60.6(. It ma)7.3(y be prudent for)]TJ ET EMC /P <>BDC BT 9 0 0 9 309.3642 271.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 259.7181 Tm -.005 Tc [(or)9.3(ganizations t)9.8(o)0( be mor)9.3(e pr)9.8(oactiv)6.4(e and adopt)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.3216 259.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 247.7181 Tm -.005 Tc [(measur)9.3(es for priv)7.3(acy go)7.3(v)6.4(ernance. )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 223.7181 Tm [(T)48.4(o)0( demonstr)19.5(ate priv)7.3(acy-r)9.3(elated contr)9.8(ols,)]TJ ET EMC /P <>BDC BT 9 0 0 9 301.7813 223.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 211.7181 Tm -.005 Tc [(or)9.3(ganizations can include the priv)7.3(acy criteria as)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.4067 211.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 199.7181 Tm -.005 Tc [(par)-24.4(t of the scope of their SOC 2 r)9.3(epor)-24.4(t.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 295.4751 202.4181 Tm -.0083 Tc (18)Tj ET EMC /P <>BDC BT 9 0 0 9 301.4496 199.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 187.7181 Tm -.005 Tc [(Additionally)52.3(, contr)9.8(ols for any other specic laws can)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.4929 187.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 175.7181 Tm -.005 Tc [(be included as additional subject matter)60.1(. )19.5(The)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.6003 175.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 163.7181 Tm -.005 Tc [(following describes the AICP)67.4(A Priv)7.3(acy Criteria)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.4445 163.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 151.7181 Tm -.005 Tc [(br)9.8(oad r)9.3(equir)9.3(ements. Many of these r)9.3(equir)9.3(ements)]TJ ET EMC /P <>BDC BT 9 0 0 9 335.7053 151.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 139.7181 Tm -.005 Tc [(match t)9.8(o)0( legislation such as GDPR. In the wak)9.8(e of)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.0157 139.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 127.7181 Tm -.005 Tc [(new priv)7.3(acy mandates, or)9.3(ganizations ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 303.962 127.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 115.7181 Tm -.005 Tc [(encour)19.5(aged not only t)9.8(o)0( include priv)7.3(acy criteria in)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.3193 115.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 103.7181 Tm -.005 Tc [(their SOC 2 r)9.3(epor)-24.4(t, but also t)9.8(o)0( demand including)]TJ ET EMC /P <>BDC BT 9 0 0 9 331.6206 103.7181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 91.7181 Tm -.005 Tc [(them in their v)6.4(endors SOC 2 r)9.3(epor)-24.4(t t)9.8(o)0( mitigate risk. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 675.8916 Tm [(SOC 2 Description for Priv)7.3(acy )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 361.5 663.8916 Tm [(A SOC 2 r)9.3(epor)-24.4(t contains a description of ser)-8.8(vices)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.0284 663.8916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 651.8916 Tm -.005 Tc [(that the ser)-8.8(vice pr)9.8(o)7.3(vider pr)9.8(o)7.3(vides. When the)]TJ ET EMC /P <>BDC BT 9 0 0 9 534.1594 651.8916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 639.8916 Tm -.005 Tc [(description includes priv)7.3(acy)52.3(, ser)-8.8(vice or)9.3(ganization)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.4076 639.8916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 627.8916 Tm -.005 Tc [(management discloses the ser)-8.8(vice commitments)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.6023 627.8916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 615.8916 Tm -.005 Tc [(and system r)9.3(equir)9.3(ements identied in the ser)-8.8(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.0205 615.8916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 603.8916 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( priv)7.3(acy notice or in its priv)7.3(acy policy)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.2175 603.8916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 591.8916 Tm -.005 Tc [(that ar)9.3(e r)9.3(ele)6.4(v)7.3(ant t)9.8(o)0( the system being described. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 567.8916 Tm [(When making such disclosur)9.3(es, it ma)7.3(y also be)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.0451 567.8916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 555.8915 Tm -.005 Tc [(helpful t)9.8(o)0( r)9.3(epor)-24.4(t users if ser)-8.8(vice or)9.3(ganization)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.7731 555.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 543.8915 Tm -.005 Tc (management describes the purposes, uses and)Tj ET EMC /P <>BDC BT 9 0 0 9 548.28 543.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 531.8915 Tm -.005 Tc [(disclosur)9.3(es of personal information permitted b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.6977 531.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 519.8915 Tm -.005 Tc [(user entity agr)9.3(eements. )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 495.8915 Tm [(Principal System Requir)9.3(ements )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 361.5 483.8915 Tm [(System r)9.3(equir)9.3(ements ar)9.3(e the specications about)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.3595 483.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 471.8915 Tm -.005 Tc [(how the system should function t)9.8(o)0( do the following: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 453.8915 Tm [(Meet the ser)-8.8(vice or)9.3(ganization)39.1()54.7(s)0( ser)-8.8(vice)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 525.13 453.8915 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 453.8915 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 441.8915 Tm 0 0 0 1 k -.005 Tc [(commitments t)9.8(o)0( user entities and others \(such)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 557.3489 441.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 429.8915 Tm -.005 Tc [(as user entities cust)9.8(omers\) )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 411.8915 Tm [(Meet the ser)-8.8(vice or)9.3(ganization)39.1()54.7(s)0( commitments t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 562.4192 411.8915 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 411.8915 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 399.8915 Tm 0 0 0 1 k -.005 Tc [(v)6.4(endors and business par)-24.4(tners )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 381.8915 Tm [(Comply with r)9.3(ele)6.4(v)7.3(ant laws, r)9.3(egulations and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 540.5562 381.8915 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 381.8915 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 369.8915 Tm 0 0 0 1 k -.005 Tc [(guidelines of industr)-8.8(y gr)9.8(oups, such as business)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 559.1573 369.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 357.8915 Tm -.005 Tc [(or tr)19.5(ade associations )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 339.8915 Tm [(Achie)6.4(v)6.4(e)0( other objectiv)6.4(es of the ser)-8.8(vice)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 524.3566 339.8915 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 339.8915 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 327.8915 Tm 0 0 0 1 k -.005 Tc [(or)9.3(ganization that ar)9.3(e r)9.3(ele)6.4(v)7.3(ant t)9.8(o)0( the trust)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 532.9569 327.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 315.8915 Tm -.005 Tc [(ser)-8.8(vices categories addr)9.3(essed b)5.4(y)0( the description )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 291.8914 Tm [(Requir)9.3(ements ar)9.3(e often specied in the ser)-8.8(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.4094 291.8914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 279.8914 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( system policies and pr)9.8(ocedur)9.3(es,)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.4251 279.8914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 267.8914 Tm -.005 Tc [(system design documentation, contr)19.5(acts with)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.2753 267.8914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 255.8914 Tm -.005 Tc [(cust)9.8(omers, and go)7.3(v)6.4(ernment r)9.3(egulations. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 231.8914 Tm -.02 Tc [(The following ar)9.3(e examples of system r)9.3(equir)9.3(ements:)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.4612 231.8914 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 213.8914 Tm -.005 Tc [(W)15.2(orkfor)9.3(ce member ngerprinting and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 520.4814 213.8914 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 213.8914 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 201.8914 Tm 0 0 0 1 k -.005 Tc [(back)9.8(gr)9.8(ound checks established in go)7.4(v)6.4(ernment)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 556.1116 201.8914 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 189.8914 Tm -.005 Tc [(banking r)9.3(egulations )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 171.8914 Tm [(System edits that r)9.3(estrict the v)7.3(alues accepted for)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 565.8427 171.8914 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 171.8914 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 159.8914 Tm 0 0 0 1 k -.005 Tc [(system input, which ar)9.3(e dened in application)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 552.0228 159.8914 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 147.8914 Tm -.005 Tc (design documents )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 129.8914 Tm [(Maximum acceptable inter)-8.8(v)7.3(als between periodic)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 563.6638 129.8914 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 129.8914 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 117.8914 Tm 0 0 0 1 k -.005 Tc [(r)9.3(e)6.4(view of workfor)9.3(ce member logical access as)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 555.7459 117.8914 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 105.8914 Tm -.005 Tc (documented in the security policy manual )Tj ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm 0 Tc [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (8)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Artifact <>BDC .9 .53 .1 0 k /GS3 gs .19598 560.144 348.304 122.498 re f EMC /P <>BDC BT 14 0 0 14 61.9496 653.0714 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(IN)17.5( VIEW)17.6( OF)17.5( )19.6(THE)17.5( RECEN)14.1(T)37.1( INCIDEN)14.1(T)7.8(S)17.5( AND)]TJ ET EMC /P <>BDC BT 14 0 0 14 337.0142 653.0714 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.9496 635.0714 Tm .0351 Tc -.0175 Tw [(F)83(AIL)26.3(URE)17.5( OF)17.5( )19.6(THE)17.5( EU)17.5( SAFE)17.5( H)-8.8(ARBOR)17.5( AND)17.5( )19.6(THE)]TJ ET EMC /P <>BDC BT 14 0 0 14 331.7446 635.0714 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.9496 617.0714 Tm .0351 Tc -.0175 Tw [(PRIV)36.6(A)5.3(C)0(Y)17.5( SHIELD)67.4(,)35.1( PRIV)36.6(A)5.3(C)0(Y)17.5( L)-9.3(A)33.7(WS)17.5( ARE)17.5( NOW)]TJ ET EMC /P <>BDC BT 14 0 0 14 325.8658 617.0714 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.9496 599.0714 Tm .0351 Tc -.0175 Tw [(CH)-8.8(ANGING)17.6( AND)17.5( M)-8.8(A)45.9(Y)17.5( BECOME)17.5( MORE)]TJ ET EMC /P <>BDC BT 14 0 0 14 286.1216 599.0714 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.9496 581.0714 Tm .0351 Tc [(STRINGEN)14.1(T)124(.)]TJ ET EMC /Figure <>BDC Q q 1 i 122.34 589.27 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 140.444 578.982 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 34.897 678.497 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 39.815 665.129 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 431 0 obj <>/ExtGState<>>> endobj 449 0 obj <> endobj 454 0 obj <> endobj 465 0 obj <> endobj 470 0 obj <> endobj 475 0 obj <> endobj 486 0 obj <> endobj 491 0 obj <> endobj 496 0 obj <> endobj 501 0 obj <> endobj 502 0 obj <> endobj 515 0 obj <> endobj 516 0 obj <> endobj 517 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (9)Tj ET EMC /LBody <>BDC /GS2 gs BT 9 0 0 9 47.9471 675.8916 Tm 0 0 0 1 k -.02 Tc [(Data denition and tagging standar)9.3(ds, including)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 229.6704 675.8916 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 36.9471 675.8916 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 663.8916 Tm 0 0 0 1 k -.02 Tc [(any associated metadata r)9.3(equir)9.3(ements,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 198.9639 663.8916 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 651.8916 Tm -.02 Tc [(established b)5.4(y)0( industr)-8.8(y gr)9.8(oups or other bodies,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 225.7989 651.8916 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 639.8916 Tm -.02 Tc [(such as the Simple Object Access Pr)9.8(ot)9.8(ocol \(SO)10.3(AP\))]TJ ET EMC /LBody <>BDC BT 9 0 0 9 241.905 639.8916 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 621.8916 Tm -.005 Tc [(Business pr)9.8(ocessing rules and standar)9.3(ds)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 210.2364 621.8916 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 36.9471 621.8916 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 609.8916 Tm 0 0 0 1 k -.005 Tc [(established b)5.4(y)0( r)9.3(egulat)9.8(ors \(e.g., security)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 201.7747 609.8916 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 597.8916 Tm -.005 Tc [(r)9.3(equir)9.3(ements under HIP)67.4(AA\) )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 573.8916 Tm (Data )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 36.9471 561.8915 Tm [(Disclosur)9.3(es about the data component include)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.6896 561.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 549.8915 Tm -.005 Tc [(types of data used b)5.4(y)0( the system, tr)19.5(ansaction)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.6524 549.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 537.8915 Tm -.005 Tc [(str)9.3(eams, les, databases, tables, and outputs used)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.7302 537.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 525.8915 Tm -.005 Tc [(or pr)9.8(ocessed b)5.4(y)0( the system. When the description)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.7723 525.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 513.8915 Tm -.005 Tc [(addr)9.3(esses the condentiality or priv)7.3(acy categories,)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.6302 513.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 501.8915 Tm -.005 Tc [(other matters that ma)7.3(y be consider)9.3(ed for disclosur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.5827 501.8915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 489.8915 Tm -.005 Tc (about the data component include the following: )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 471.8915 Tm [(The principal types of data cr)9.3(eated, collected,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 226.413 471.8915 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 36.9471 471.8915 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 459.8915 Tm 0 0 0 1 k -.005 Tc [(pr)9.8(ocessed, tr)19.5(ansmitted, used or st)9.8(or)9.3(ed b)5.4(y)0( the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 225.6548 459.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 447.8915 Tm -.005 Tc [(ser)-8.8(vice or)9.3(ganization and the methods used t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 228.0948 447.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 435.8915 Tm -.005 Tc [(collect, r)9.3(etain, disclose, dispose of or anonymiz)7.8(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 238.4245 435.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 423.8915 Tm -.005 Tc (the data )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 405.8915 Tm [(P)6.4(ersonal information that warr)19.5(ants security)52.3(, data)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 239.9549 405.8915 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 36.9471 405.8915 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 393.8915 Tm 0 0 0 1 k -.005 Tc [(pr)9.8(otection or br)9.3(each disclosur)9.3(es based on laws)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.4604 393.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 381.8915 Tm -.005 Tc (or commitments \(e.g., personally identiable)Tj ET EMC /LBody <>BDC BT 9 0 0 9 223.5245 381.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 369.8915 Tm -.005 Tc [(information [PII], pr)9.8(otected health information)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 227.8193 369.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 357.8915 Tm -.005 Tc [([PHI], pa)7.3(yment car)9.3(d data\) )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 339.8915 Tm -.025 Tc [(Thir)9.3(d-par)-24.4(ty entity information \(e.g., information)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 223.6485 339.8915 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 36.9471 339.8915 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 47.9471 327.8915 Tm 0 0 0 1 k -.025 Tc [(subject t)9.8(o)0( condentiality r)9.3(equir)9.3(ements in contr)19.5(acts\))]TJ ET EMC /LBody <>BDC BT 9 0 0 9 241.7911 327.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 315.8915 Tm -.025 Tc [(that warr)19.5(ants security)52.3(, data pr)9.8(otection or br)9.3(each)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 227.9552 315.8915 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 303.8914 Tm -.025 Tc [(disclosur)9.3(es based on laws or commitments)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 213.1266 303.8914 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 255.4471 526.2246 Tm -.005 Tc [(AICP)86.9(A )29.3(T)31.8(rust Ser)-8.8(vices Criteria \(T)7.8(SC)12.7(\) for Priv)7.3(acy )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 255.4471 514.2246 Tm [(With appr)9.8(o)10.3(ximately 50 points of focus, the )19.5(T)7.8(S)0(C)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.2115 514.2246 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 502.2246 Tm -.005 Tc [(or)9.3(ganiz)7.8(es the priv)7.3(acy criteria as\()]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 383.3059 502.2246 Tm [(gur)9.3(e 4)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 414.1088 502.2246 Tm (\):)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 419.3273 504.9245 Tm -.0083 Tc (19 )Tj ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 266.4471 484.2246 Tm .05 .65 1 .01 k -.005 Tc [(Notice and communication of objectiv)6.4(es)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 427.7486 484.2246 Tm 0 0 0 1 k (The)Tj ET EMC /LBody <>BDC BT 9 0 0 9 449.6906 484.2246 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 484.2246 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 472.2246 Tm 0 0 0 1 k -.005 Tc [(entity pr)9.8(o)7.3(vides notice t)9.8(o)0( data subjects about its)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 453.0936 472.2246 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 460.2246 Tm -.005 Tc [(objectiv)6.4(es r)9.3(elated t)9.8(o)0( priv)7.3(acy)52.3(. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 266.4471 442.2246 Tm .05 .65 1 .01 k (Choice and consent)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 345.4113 442.2246 Tm 0 0 0 1 k (The entity communicates)Tj ET EMC /LBody <>BDC BT 9 0 0 9 452.6525 442.2246 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 442.2246 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 430.2246 Tm 0 0 0 1 k -.005 Tc [(choices a)7.3(v)7.3(ailable r)9.3(egar)9.3(ding the collection, use,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 449.2099 430.2246 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 418.2246 Tm -.005 Tc [(r)9.3(etention, disclosur)9.3(e and disposal of personal)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 445.85 418.2246 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 406.2246 Tm -.005 Tc [(information t)9.8(o)0( data subjects. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 266.4471 388.2246 Tm .05 .65 1 .01 k (Collection)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 306.862 388.2246 Tm 0 0 0 1 k (The entity collects personal)Tj ET EMC /LBody <>BDC BT 9 0 0 9 422.373 388.2246 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 388.2246 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 376.2246 Tm 0 0 0 1 k -.005 Tc [(information t)9.8(o)0( meet its objectiv)6.4(es r)9.3(elated )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 364.2246 Tm [(t)9.8(o)0( priv)7.3(acy)52.3(. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 266.4471 346.2246 Tm .05 .65 1 .01 k -.02 Tc [(Use, r)9.3(etention and disposal)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 371.5082 346.2246 Tm 0 0 0 1 k (The entity limits the)Tj ET EMC /LBody <>BDC BT 9 0 0 9 453.097 346.2246 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 255.4471 346.2246 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 266.4471 334.2246 Tm 0 0 0 1 k -.02 Tc [(use, r)9.3(etention and disposal of personal information)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 460.5374 334.2246 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 322.2246 Tm -.02 Tc [(t)9.8(o)0( meet its objectiv)6.4(es r)9.3(elated t)9.8(o)0( priv)7.3(acy)52.3(.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 416.9286 322.2246 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Figure <>BDC Q q 1 i 36 291.707 422.012 -216.771 re W n 36 291.707 422.034 -216.26 re 419.157 322.225 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .019608 .12941 .20392 0 k /GS3 gs 36.085 75.446 421.927 200.218 re f .90588 .52157 .094118 0 k 36.085 276.956 421.927 14.75 re f 0 0 0 0 K 0 J 0 j 1.991 w 10 M [] 0 d q 1 0 0 1 36.084 276.956 cm 0 0 m 421.997 0 l S 1 0 0 1 -.037 -.222 cm 0 0 m 421.997 0 l S Q BT /F14 1 Tf 9 0 0 9 159.5625 281.5824 Tm 0 0 0 0 k 0 Tc -.0004 Tw [(Figur)9.4(e)-.4( 4SOC 2 With Cloud and Priv)6.6(acy Contr)16.7(ols)]TJ ET 0 0 0 .7 k 124.616 257.905 76.028 .20898 re 124.616 259.264 m 123.922 259.264 123.361 258.702 123.361 258.01 c 123.361 257.316 123.922 256.755 124.616 256.755 c 125.309 256.755 125.871 257.316 125.871 258.01 c 125.871 258.702 125.309 259.264 124.616 259.264 c 200.643 256.755 m 201.336 256.755 201.898 257.316 201.898 258.01 c 201.898 258.702 201.336 259.264 200.643 259.264 c 199.951 259.264 199.389 258.702 199.389 258.01 c 199.389 257.316 199.951 256.755 200.643 256.755 c f 0 0 0 .7 K .5 w 4 M 124.616 257.905 76.028 .20898 re 124.616 259.264 m 123.922 259.264 123.361 258.702 123.361 258.01 c 123.361 257.316 123.922 256.755 124.616 256.755 c 125.309 256.755 125.871 257.316 125.871 258.01 c 125.871 258.702 125.309 259.264 124.616 259.264 c h 200.643 256.755 m 201.336 256.755 201.898 257.316 201.898 258.01 c 201.898 258.702 201.336 259.264 200.643 259.264 c 199.951 259.264 199.389 258.702 199.389 258.01 c 199.389 257.316 199.951 256.755 200.643 256.755 c s 135.096 149.507 65.547 -.20901 re 135.096 148.148 m 134.403 148.148 133.841 148.71 133.841 149.403 c 133.841 150.096 134.403 150.657 135.096 150.657 c 135.789 150.657 136.351 150.096 136.351 149.403 c 136.351 148.71 135.789 148.148 135.096 148.148 c 200.643 150.657 m 201.336 150.657 201.898 150.095 201.898 149.403 c 201.898 148.71 201.336 148.148 200.643 148.148 c 199.95 148.148 199.389 148.71 199.389 149.403 c 199.389 150.095 199.95 150.657 200.643 150.657 c f 135.096 149.507 65.547 -.20901 re 135.096 148.148 m 134.403 148.148 133.841 148.71 133.841 149.403 c 133.841 150.096 134.403 150.657 135.096 150.657 c 135.789 150.657 136.351 150.096 136.351 149.403 c 136.351 148.71 135.789 148.148 135.096 148.148 c h 200.643 150.657 m 201.336 150.657 201.898 150.095 201.898 149.403 c 201.898 148.71 201.336 148.148 200.643 148.148 c 199.95 148.148 199.389 148.71 199.389 149.403 c 199.389 150.095 199.95 150.657 200.643 150.657 c s 170.666 211.188 29.977 -.209 re 170.666 209.829 m 169.974 209.829 169.412 210.39 169.412 211.084 c 169.412 211.777 169.974 212.339 170.666 212.339 c 171.36 212.339 171.921 211.777 171.921 211.084 c 171.921 210.39 171.36 209.829 170.666 209.829 c 200.643 212.339 m 201.336 212.339 201.898 211.777 201.898 211.084 c 201.898 210.39 201.336 209.829 200.643 209.829 c 199.95 209.829 199.389 210.39 199.389 211.084 c 199.389 211.777 199.95 212.339 200.643 212.339 c f 170.666 211.188 29.977 -.209 re 170.666 209.829 m 169.974 209.829 169.412 210.39 169.412 211.084 c 169.412 211.777 169.974 212.339 170.666 212.339 c 171.36 212.339 171.921 211.777 171.921 211.084 c 171.921 210.39 171.36 209.829 170.666 209.829 c h 200.643 212.339 m 201.336 212.339 201.898 211.777 201.898 211.084 c 201.898 210.39 201.336 209.829 200.643 209.829 c 199.95 209.829 199.389 210.39 199.389 211.084 c 199.389 211.777 199.95 212.339 200.643 212.339 c s .035 .023 .023 0 k q 1 0 0 1 49.286 193.969 cm 0 0 m 0 31.486 25.524 57.011 57.011 57.011 c 88.497 57.011 114.021 31.486 114.021 0 c 114.021 -31.486 88.497 -57.011 57.011 -57.011 c 25.524 -57.011 0 -31.486 0 0 c f Q Q q 1 i 436.108 90.385 13.88 16.146 re W n /GS3 gs q 14.875 0 0 -17.646 436.108 107.308 cm /Im10 Do Q Q q 1 i 36 291.707 422.012 -216.771 re W n 36 291.707 422.012 -216.771 re W n 36 291.707 422.034 -216.26 re 419.157 322.225 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .516 .43 .43 .074 K 0 J 1 j 1.26 w 10 M [] 0 d /GS3 gs q 1 0 0 1 45.513 111.113 cm 0 0 m 406.087 0 l S Q .629 .055 0 0 k q 1 0 0 1 167.039 221.426 cm 0 0 m -8.652 25.657 -32.685 42.954 -59.761 43.01 c -59.862 -5.097 l -53.394 -5.111 -47.652 -9.243 -45.585 -15.372 c f Q .699 .156 0 0 k q 1 0 0 1 150.486 149.645 cm 0 0 m 24.089 17.887 32.284 50.243 19.614 77.44 c -16.987 60.389 l -12.41 50.565 -15.37 38.878 -24.071 32.417 c f Q .777 .266 .027 0 k q 1 0 0 1 108.446 119.379 cm 0 0 m 27.723 -.276 52.39 17.546 60.833 43.953 c 16.587 58.102 l 14.349 51.103 7.811 46.378 .462 46.452 c f Q q 62.437 0 0 -62.341 78.872 224.741 cm /Im12 Do Q 0 0 0 0 k q 1 0 0 1 80.194 194.384 cm 0 0 m 0 16.49 13.368 29.857 29.857 29.857 c 46.347 29.857 59.714 16.49 59.714 0 c 59.714 -16.49 46.347 -29.857 29.857 -29.857 c 13.368 -29.857 0 -16.49 0 0 c f Q Q q 1 i 83.691 167.218 52.703 52.704 re W n /GS3 gs q 52.764 0 0 -52.704 83.691 219.922 cm /Im14 Do Q Q q 1 i 36 291.707 422.012 -216.771 re W n 36 291.707 422.012 -216.771 re W n 36 291.707 422.034 -216.26 re 419.157 322.225 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .344 .277 .281 0 k /GS3 gs q 1 0 0 1 85.007 194.384 cm 0 0 m 0 13.832 11.213 25.044 25.044 25.044 c 38.876 25.044 50.089 13.832 50.089 0 c 50.089 -13.832 38.876 -25.044 25.044 -25.044 c 11.213 -25.044 0 -13.832 0 0 c f Q Q q 1 i 87.706 171.234 44.673 44.672 re W n /GS3 gs q 45.084 0 0 -44.673 87.706 215.907 cm /Im16 Do Q Q q 1 i 36 291.707 422.012 -216.771 re W n 36 291.707 422.012 -216.771 re W n 36 291.707 422.034 -216.26 re 419.157 322.225 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n 0 0 0 0 k /GS3 gs q 1 0 0 1 89.031 194.384 cm 0 0 m 0 11.609 9.412 21.021 21.021 21.021 c 32.63 21.021 42.042 11.609 42.042 0 c 42.042 -11.609 32.63 -21.021 21.021 -21.021 c 9.412 -21.021 0 -11.609 0 0 c f Q .535 0 .762 0 k q 1 0 0 1 90.856 194.516 cm 0 0 m 0 10.498 8.51 19.008 19.008 19.008 c 29.506 19.008 38.017 10.498 38.017 0 c 38.017 -10.498 29.506 -19.008 19.008 -19.008 c 8.51 -19.008 0 -10.498 0 0 c f Q BT /F14 1 Tf 10.0389 0 0 10.0389 97.5596 191.3119 Tm 0 0 0 0 k -.0012 Tc -.0001 Tw (SOC 2)Tj 7.5292 0 0 7.5292 111.4302 241.6068 Tm -.0007 Tw (SOC 2+)Tj 0 -1.2 TD -.0008 Tw (Cloud CCM)Tj 4.387 -5.109 TD .0001 Tc -.0007 Tw (SOC 2+)Tj 0 -1.2 TD -.0005 Tc 0 Tw (C5)Tj -2.873 -4.611 TD .0001 Tc -.0007 Tw (SOC 2+)Tj 0 -1.2 TD 0 Tw (Privacy)Tj /F15 1 Tf 8 0 0 8 205.9434 255.3656 Tm 0 0 0 1 k -.0011 Tc -.0004 Tw (CSA, in collaboration with the AICPA, developed a third-party assessment)Tj 0 -1 TD (program of cloud providers officially known as CSA Security Trust and)Tj T* (Assurance Registry \(STAR\) Attestation. STAR Attestation provides a )Tj T* (framework for CPAs performing independent assessments of cloud)Tj T* -.0005 Tw (providers using SOC 2 engagements with the CSAs Cloud Control matrix.)Tj .746 .676 .668 .898 k .024 -1.932 TD .002 Tc .0002 Tw (The C5 is intended primarily for CSPs, their auditors and customers of)Tj 0 -1 TD .0001 Tw (the CSPs. A SOC 2 report proves that a CSP complies with the requirements)Tj T* (of the catalog.)Tj -.024 -5.64 TD -.0011 Tc -.0004 Tw (A SOC 2 report for privacy is based on AICPA SSAE 18 standard and)Tj 0 -1 TD -.0005 Tw (Trust Services Criteria. SOC 2 may be applied selectively for specific)Tj T* -.0004 Tw (privacy mandates as additional subject matter in the scope of)Tj T* -.0009 Tc -.0006 Tw (the engagement.)Tj ET EMC /Artifact <>BDC Q q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .9 .53 .1 0 k /GS3 gs 255.447 542.354 347.392 140.288 re f EMC /P <>BDC BT /F2 1 Tf 14 0 0 14 288.6932 653.0714 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(REQUIREMEN)14.1(T)7.8(S)17.5( ARE)17.5( OF)-9.8(TEN)17.5( SPECIFIED)]TJ ET EMC /P <>BDC BT 14 0 0 14 551.494 653.0714 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 635.0714 Tm .0351 Tc -.0175 Tw [(IN)17.5( )19.6(THE)17.5( SER)9.2(VICE)17.5( ORGANIZ)-6.4(A)63(TIO)]TJ 14.6621 0 TD .0176 Tc 0 Tw [(NS S)-17.5(Y)]TJ 3.0801 0 TD .0351 Tc (STEM)Tj ET EMC /P <>BDC BT 14 0 0 14 551.6455 635.0714 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 617.0714 Tm .0351 Tc -.0175 Tw [(POLICIES)17.5( AND)17.5( PROCEDURES)17.5(,)35.1( SY)7.8(STEM)]TJ ET EMC /P <>BDC BT 14 0 0 14 518.8875 617.0714 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 599.0714 Tm .0351 Tc -.0175 Tw [(DESIGN)17.5( DOCUMEN)14.1(T)38.5(A)63(TION)17.5(,)35.1( CON)14.1(TRA)5.3(C)14.1(T)7.8(S)]TJ ET EMC /P <>BDC BT 14 0 0 14 531.4794 599.0714 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 581.0714 Tm .0351 Tc -.0175 Tw [(WI)14.1(TH)17.5( CUST)13.6(OMERS)17.5(,)35.1( AND)17.5( GO)10.7(VERNMEN)14.1(T)]TJ ET EMC /P <>BDC BT 14 0 0 14 526.9541 581.0714 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.6932 563.0714 Tm .0351 Tc [(REGUL)-9.3(A)63(TIONS)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 367.819 571.48 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 385.923 561.192 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 261.64 678.497 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 266.558 665.129 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 518 0 obj <>/XObject<>/ExtGState<>>> endobj 530 0 obj <> endobj 535 0 obj <> endobj 540 0 obj <> endobj 545 0 obj <> endobj 556 0 obj <> endobj 561 0 obj <> endobj 566 0 obj <> endobj 579 0 obj <> endobj 584 0 obj <> endobj 589 0 obj <> endobj 594 0 obj <> endobj 599 0 obj <> endobj 604 0 obj <> endobj 609 0 obj <> endobj 624 0 obj <> endobj 629 0 obj <> endobj 634 0 obj <> endobj 639 0 obj <> endobj 640 0 obj <> endobj 641 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 154 515.1183 Tm .05 .65 1 .01 k -.005 Tc (Access)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 183.2921 515.1183 Tm 0 0 0 1 k [(The entity pr)9.8(o)7.3(vides data subjects with)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 339.4685 515.1183 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 515.1183 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 503.1183 Tm 0 0 0 1 k -.005 Tc [(access t)9.8(o)0( their personal information for r)9.3(e)6.4(view)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 337.6909 503.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 491.1183 Tm -.005 Tc [(and corr)9.3(ection \(including updates\) t)9.8(o)0( meet its)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 333.7194 491.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 479.1183 Tm -.005 Tc [(objectiv)6.4(es r)9.3(elated t)9.8(o)0( priv)7.3(acy)52.3(. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 154 461.1183 Tm .05 .65 1 .01 k -.02 Tc [(Disclosur)9.3(e and notication)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 257.6063 461.1183 Tm 0 0 0 1 k (The entity discloses)Tj ET EMC /LBody <>BDC BT 9 0 0 9 340.4385 461.1183 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 461.1183 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 449.1183 Tm 0 0 0 1 k -.02 Tc (personal information, with the consent of the data)Tj ET EMC /LBody <>BDC BT 9 0 0 9 343.8668 449.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 437.1183 Tm -.02 Tc [(subjects, t)9.8(o)0( meet its objectiv)6.4(es r)9.3(elated t)9.8(o)0( priv)7.3(acy)52.3(.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 340.5363 437.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 425.1183 Tm -.02 Tc [(Notication of br)9.3(eaches and incidents is pr)9.8(o)7.3(vided)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 342.7769 425.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 413.1183 Tm -.02 Tc [(t)9.8(o)0( aff)11.7(ected data subjects, r)9.3(egulat)9.8(ors and others t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.0341 413.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 401.1183 Tm -.02 Tc [(meet its objectiv)6.4(es r)9.3(elated t)9.8(o)0( priv)7.3(acy)52.3(.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 294.8086 401.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 154 383.1183 Tm .05 .65 1 .01 k -.005 Tc (Quality)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 182.0914 383.1183 Tm 0 0 0 1 k (The entity collects and maintains)Tj ET EMC /LBody <>BDC BT 9 0 0 9 319.4203 383.1183 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 383.1183 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 371.1183 Tm 0 0 0 1 k -.005 Tc [(accur)19.5(ate, up-t)9.8(o-date, complete and r)9.3(ele)6.4(v)7.3(ant)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 324.0018 371.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 359.1183 Tm -.005 Tc [(personal information t)9.8(o)0( meet its objectiv)6.4(es)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 323.1053 359.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 347.1183 Tm -.005 Tc [(r)9.3(elated t)9.8(o)0( priv)7.3(acy)52.3(. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 154 329.1183 Tm .05 .65 1 .01 k -.02 Tc [(Monit)14.7(oring and enfor)9.3(cement)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 264.699 329.1183 Tm 0 0 0 1 k [(The entity monit)9.8(ors)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 345.5756 329.1183 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 329.1183 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 317.1183 Tm 0 0 0 1 k -.02 Tc [(compliance t)9.8(o)0( meet its objectiv)6.4(es r)9.3(elated t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 320.2759 317.1183 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 305.1183 Tm -.02 Tc [(priv)7.3(acy)52.3(, including pr)9.8(ocedur)9.3(es t)9.8(o)0( addr)9.3(ess priv)7.3(acy-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 293.1183 Tm [(r)9.3(elated inquiries, complaints and disputes.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 314.7386 293.1183 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 143 267.1182 Tm .9 .53 .1 0 k -.005 Tc [(Cloud Security and Priv)7.3(acy for User)]TJ ET EMC /P <>BDC BT 11 0 0 11 316.1681 267.1182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 143 253.1183 Tm -.005 Tc [(Or)9.3(ganizations )]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 143 235.1183 Tm 0 0 0 1 k [(T)48.4(o)0( pr)9.8(otect data in the cloud and t)9.8(o)0( maintain)]TJ ET EMC /P <>BDC BT 9 0 0 9 314.9388 235.1183 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 223.1183 Tm -.005 Tc [(continuity of ser)-8.8(vices, cloud users, at a minimum,)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.1556 223.1183 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 211.1183 Tm -.005 Tc (should consider implementing the following)Tj ET EMC /P <>BDC BT 9 0 0 9 315.7187 211.1183 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 199.1183 Tm -.005 Tc [(contr)9.8(ols. Implementing these contr)9.8(ols should help)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.7163 199.1183 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 187.1183 Tm -.005 Tc [(the or)9.3(ganization sta)7.3(y compliant with the laws of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.4524 187.1183 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 175.1183 Tm -.005 Tc (land and manage the risk: )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 157.1183 Tm [(Include cloud security and priv)7.3(acy risk as par)-24.4(t of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.0116 157.1183 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 157.1183 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 145.1183 Tm 0 0 0 1 k -.005 Tc [(the risk management lif)11.7(e cy)6.4(cle. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 127.1183 Tm [(Cr)9.3(eate a secur)9.3(e ar)9.3(chitectur)9.3(e using the concept of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 348.0513 127.1183 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 127.1183 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 115.1183 Tm 0 0 0 1 k -.005 Tc [(security b)5.4(y)0( design. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 97.1183 Tm (Document the data ow and implement data)Tj ET EMC /LBody <>BDC BT 9 0 0 9 329.6958 97.1183 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 143 97.1183 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 154 85.1183 Tm 0 0 0 1 k -.005 Tc [(security contr)9.8(ols. )]TJ ET EMC /P <>BDC BT 7 0 0 7 39.7789 24.9858 Tm 0 Tc [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 11.2754 24.9858 Tm (10)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /LBody <>BDC BT 9 0 0 9 372.5 663.4894 Tm 0 0 0 1 k -.005 Tc [(Implement and r)9.3(e)6.4(view r)9.8(ole-based access)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 533.608 663.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 663.4894 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 651.4894 Tm 0 0 0 1 k -.005 Tc [(contr)9.8(ols \(RBA)5.4(C)12.7(\). )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 633.4894 Tm [(P)6.4(e)0(r)-7.3(form vulner)19.5(ability assessment)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 504.7993 633.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 633.4894 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 621.4894 Tm 0 0 0 1 k -.005 Tc [(\()-9.8(V)36.6(A\)/penetr)19.5(ation testing of the cloud)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 516.9715 621.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 609.4894 Tm -.005 Tc [(applications and envir)9.8(onment. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 591.4894 Tm [(E)12.7(v)7.3(aluate SOC r)9.3(epor)-24.4(ts with r)9.3(ele)6.4(v)7.3(ant contr)9.8(ols of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 553.3664 591.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 591.4894 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 579.4894 Tm 0 0 0 1 k -.005 Tc (the CSPs. )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 561.4894 Tm [(Implement secur)9.3(e access methodology)52.3(, e.g.,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 547.7367 561.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 561.4894 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 549.4894 Tm 0 0 0 1 k -.005 Tc [(T)36.6(r)19.5(anspor)-24.4(t La)7.3(y)6.4(er Security \(TLS\), multifact)9.8(or)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 539.6146 549.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 537.4894 Tm -.005 Tc [(authentication \(MF)83(A\). )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 519.4894 Tm [(Implement r)9.3(esiliency contr)9.8(ols. )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 519.4894 Tm .05 .65 1 .01 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 501.4894 Tm 0 0 0 1 k -.005 Tc [(F)10.3(ollow a Deming Cy)6.4(cle appr)9.8(oach t)9.8(o)0( cloud)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 535.4659 501.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 501.4894 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 489.4894 Tm 0 0 0 1 k -.005 Tc [(security and priv)7.3(acy)52.3(. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 372.5 471.4894 Tm [(P)6.4(e)0(r)-7.3(form periodic internal audits of the hybrid)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 548.7784 471.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F10 1 Tf 12 0 0 12 361.5 471.4894 Tm .05 .65 1 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 372.5 459.4894 Tm 0 0 0 1 k -.005 Tc [(envir)9.8(onment using SOC r)9.3(epor)-24.4(ts for cyberrisk. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 361.5 433.4894 Tm .9 .53 .1 0 k (Conclusion )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 361.5 415.4894 Tm 0 0 0 1 k [(In view of the curr)9.3(ent thr)9.3(eat landscape, specically)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.5051 415.4894 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 403.4894 Tm -.005 Tc [(r)9.3(elating t)9.8(o)0( cloud adoption and the challenges)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.9442 403.4894 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 391.4894 Tm -.005 Tc [(discussed pr)9.3(e)6.4(viously)52.3(, it ma)7.3(y be impor)-24.4(tant for)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.762 391.4894 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 379.4894 Tm -.005 Tc [(or)9.3(ganizations t)9.8(o)0( r)9.3(e)6.4(visit their existing risk mitigation)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.6509 379.4894 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 367.4894 Tm -.005 Tc [(str)19.5(ategies and adopt methods that ma)7.3(y better align)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.4735 367.4894 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 355.4894 Tm -.005 Tc [(with technological changes and curr)9.3(ent laws. )]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 331.4894 Tm [(Data go)7.3(v)6.4(ernance and priv)7.3(acy pr)9.8(ogr)19.5(ams that align)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.7931 331.4894 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 319.4894 Tm -.005 Tc [(with or)9.3(ganizational goals can help dene and)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.5119 319.4894 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 307.4893 Tm -.005 Tc [(adv)7.3(ance the maturity r)9.8(oad map. Continuous)]TJ ET EMC /P <>BDC BT 9 0 0 9 534.1846 307.4893 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 295.4893 Tm -.005 Tc [(monit)9.8(oring and assur)19.5(ance pr)9.8(ogr)19.5(ams can addr)9.3(ess)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.4149 295.4893 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 283.4893 Tm -.005 Tc [(weaknesses and pr)9.8(o)7.4(vide better visibility t)9.8(o)0( the)]TJ ET EMC /P <>BDC BT 9 0 0 9 542.8927 283.4893 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 271.4893 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( stak)9.8(eholders. )]TJ ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 11 0 0 11 361.5 245.4893 Tm .9 .53 .1 0 k (Endnotes )Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 378.8636 227.4893 Tm 0 0 0 1 k [(Bar)-24.4(tunek Gr)9.8(oup, Nine )19.5(T)48.4(op )19.5(Thr)9.3(eats t)9.8(o)0( Cloud)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 550.3123 227.4893 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 366.5 227.4893 Tm .05 .65 1 .01 k (1)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 378.5 215.4893 Tm 0 0 0 1 k -.005 Tc [(Computing Security)52.3(,)83()0( 26 F)10.3(ebruar)-8.8(y 2013,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 532.7746 215.4893 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 378.5 203.4893 Tm -.005 Tc [(https:/)109.4(/bar)-24.4(tunek)9.8(gr)9.8(oup.com/9-t)9.8(op-thr)9.3(eats-t)9.8(o-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 191.4893 Tm (cloud-computing-security/ )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 378.8636 179.4893 Tm [(Columbus, L.; 83% of Enterprise W)15.2(orkloads)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 550.8484 179.4893 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 366.5 179.4893 Tm .05 .65 1 .01 k (2)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 378.5 167.4893 Tm 0 0 0 1 k -.005 Tc [(Will Be in the Cloud b)5.4(y)0( 2020,)83( )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 494.343 167.4893 Tm [(F)10.3(orbes)]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 521.0247 167.4893 Tm (, )Tj ET EMC /LBody <>BDC BT 9 0 0 9 378.5 155.4893 Tm [(7 Januar)-8.8(y 2018, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 443.5664 155.4893 Tm [(https:/)109.4(/www)60.6(.forbes.com/sites/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 143.4893 Tm (louiscolumbus/2018/01/07/83-of-enterprise-)Tj ET EMC /LBody <>BDC BT 9 0 0 9 378.5 131.4893 Tm [(workloads-will-be-in-the-cloud-b)5.4(y-2020/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 119.4893 Tm [(#22f)11.7(c3beb6261 )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 378.8636 107.4893 Tm [(Cr)9.8(o)7.8(z)7.8(desk, SaaS and Cloud Star)-24.4(tup )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 366.5 107.4893 Tm .05 .65 1 .01 k 0 Tc (3)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 378.5 95.4893 Tm 0 0 0 1 k -.005 Tc [(Repor)-24.4(t 2018,)83( 20 No)7.3(v)6.4(ember 2017,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 510.5543 95.4893 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 378.5 83.4893 Tm -.005 Tc [(https:/)109.4(/cr)9.8(o)7.8(z)7.8(desk.com/softwar)9.3(e-r)9.3(esear)9.3(ch/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 71.4893 Tm [(saas-and-cloud-star)-24.4(tup-r)9.3(epor)-24.4(t-2018 )]TJ ET EMC /Artifact <>BDC .9 .53 .1 0 k /GS3 gs 28.5 531.253 320 138.986 re f EMC /P <>BDC BT /F2 1 Tf 14 0 0 14 61.7461 640.6693 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(I)14.1(T)37.1( M)-8.8(A)45.9(Y)17.5( BE)17.5( IMPOR)39(T)38.5(A)0(N)14.1(T)37.1( FOR)]TJ ET EMC /P <>BDC BT 14 0 0 14 245.6739 640.6693 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.7461 622.6693 Tm .0351 Tc -.0371 Tw [(ORGANIZ)-6.4(A)63(TIONS)17.5( T)13.6(O)17.5( )-19.6(REVISI)14.1(T)37.1( THEIR)]TJ ET EMC /P <>BDC BT 14 0 0 14 273.9279 622.6693 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.7461 604.6693 Tm .0351 Tc -.0175 Tw [(EXISTING)17.6( RISK)17.5( MI)14.1(TIGA)63(TION)17.5( STRA)63(TEGIES)]TJ ET EMC /P <>BDC BT 14 0 0 14 310.6778 604.6693 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.7461 586.6693 Tm .0351 Tc -.0175 Tw [(AND)17.5( ADOPT)37.1( ME)-9.8(THODS)17.5( )19.6(TH)-8.8(A)63(T)37.1( M)-8.8(A)45.9(Y)17.5( BE)-9.8(T)-7.8(TER)]TJ ET EMC /P <>BDC BT 14 0 0 14 321.4786 586.6693 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.7461 568.6693 Tm .0351 Tc -.0175 Tw [(ALIGN)17.5( WI)14.1(TH)17.5( )19.6(TECHNOL)31.7(OGICAL)17.5( CH)-8.8(ANGES)]TJ ET EMC /P <>BDC BT 14 0 0 14 311.2247 568.6693 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 37.7461 550.6693 Tm .0351 Tc -.0175 Tw [(AND)17.5( CURREN)14.1(T)37.1( L)-9.3(A)33.7(WS)17.5(.)]TJ ET EMC /Figure <>BDC Q q 1 i 184.284 560.379 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 202.388 550.091 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Figure <>BDC Q q 1 i 34.693 666.095 23 -23.75 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 39.611 652.727 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 642 0 obj <>/ExtGState<>>> endobj 660 0 obj <> endobj 665 0 obj <> endobj 670 0 obj <> endobj 675 0 obj <> endobj 680 0 obj <> endobj 685 0 obj <> endobj 690 0 obj <> endobj 695 0 obj <> endobj 700 0 obj <> endobj 705 0 obj <> endobj 710 0 obj <> endobj 715 0 obj <> endobj 720 0 obj <> endobj 725 0 obj <> endobj 730 0 obj <> endobj 735 0 obj <> endobj 736 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .21 1 .75 .12 k [( V)6.4(OL 6)]TJ ET EMC /P <>BDC BT 7 0 0 7 582.9514 23.0228 Tm (11)Tj ET EMC /LBody <>BDC /GS2 gs BT 9 0 0 9 54.3108 663.4894 Tm 0 0 0 1 k -.005 Tc [(Liu, S.; Public Cloud Softwar)9.3(e-as-a-Ser)-8.8(vice)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 222.8305 663.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 41.9471 663.4894 Tm .05 .65 1 .01 k (4)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 53.9471 651.4894 Tm 0 0 0 1 k -.005 Tc [(\(SaaS\) Re)6.4(v)6.4(enue W)15.2(orldwide F)12.7(r)9.8(om 2016 t)9.8(o)0( 2027)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 237.45 651.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 639.4894 Tm -.005 Tc [(\(in Billion U.S. Dollars\),)83( Statista, 6 December)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 229.5731 639.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 627.4894 Tm -.005 Tc (2018, )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 77.8867 627.4894 Tm [(https:/)109.4(/www)60.6(.statista.com/statistics/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 615.4894 Tm [(477742/public-cloud-softwar)9.3(e-r)9.3(e)6.4(v)6.4(enue-for)9.3(ecast/ )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 54.3108 603.4894 Tm [(IDC, W)15.2(orldwide Public Cloud Ser)-8.8(vice Spending)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 239.2914 603.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 41.9471 603.4894 Tm .05 .65 1 .01 k (5)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 53.9471 591.4894 Tm 0 0 0 1 k -.005 Tc [(F)10.3(o)0(r)9.3(ecast t)9.8(o)0( Reach $210 Billion )19.5(This Y)31.8(ear)60.1(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 213.9446 591.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 579.4894 Tm -.005 Tc [(Accor)9.3(ding t)9.8(o)0( IDC,)83( 28 F)10.3(ebruar)-8.8(y 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 197.6286 579.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 53.9471 567.4894 Tm -.005 Tc [(https:/)109.4(/www)60.6(.idc.com/getdoc.jsp?containerId )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 555.4894 Tm (=prUS44891519 )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 54.3108 543.4894 Tm [(National Institute of Standar)9.3(ds and )19.5(T)48.4(echnology)52.3(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 240.9373 543.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 41.9471 543.4894 Tm .05 .65 1 .01 k (6)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 53.9471 531.4894 Tm 0 0 0 1 k -.005 Tc [(T)36.6(rusted Cloud,)83( Special Publication \(SP\) )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 519.4894 Tm [(1800-19B, USA, No)7.3(v)6.4(ember 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 181.6002 519.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 53.9471 507.4894 Tm -.005 Tc [(https:/)109.4(/www)60.6(.nccoe.nist.go)7.3(v/sites/default/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 495.4894 Tm [(les/libr)19.5(ar)-8.8(y/sp1800/tc-hybrid-nist-sp1800-19b-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 483.4894 Tm [(pr)9.3(eliminar)-8.8(y-dr)19.5(aft.pdf )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 54.3108 471.4894 Tm [(IBM Security)52.3(, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 107.5492 471.4894 Tm [(X)22.5(-)0(F)10.3(o)0(r)9.3(ce )19.5(Thr)9.3(eat Intelligence )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 41.9471 471.4894 Tm .05 .65 1 .01 k 0 Tc (7)Tj ET EMC /LBody <>BDC /GS2 gs BT /F3 1 Tf 9 0 0 9 53.9471 459.4894 Tm 0 0 0 1 k -.005 Tc (Index 2019)Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 96.7791 459.4894 Tm [(, F)10.3(ebruar)-8.8(y 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 159.2483 459.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 53.9471 447.4894 Tm -.005 Tc [(https:/)109.4(/www)60.6(.securindex.com/downloads/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 435.4894 Tm (8b9f94c46a70c60b229b04609c07acff.pdf )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 54.3108 423.4894 Tm [(Cloud Security Alliance, T)48.4(op )19.5(Thr)9.3(eats t)9.8(o)0( Cloud)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.4125 423.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 41.9471 423.4894 Tm .05 .65 1 .01 k (8)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 53.9471 411.4894 Tm 0 0 0 1 k -.005 Tc [(Computing: )19.5(The E)9.3(g)0(r)9.3(egious 11,)83( 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 198.5129 411.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 53.9471 399.4894 Tm -.005 Tc [(https:/)109.4(/cloudsecurity)7.3(alliance.or)9.3(g/download/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 387.4894 Tm [(ar)-24.4(tifacts/t)9.8(op-thr)9.3(eats-t)9.8(o-cloud-computing-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 375.4894 Tm [(egr)9.3(egious-ele)6.4(v)6.4(en/ )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 49.3107 363.4894 Tm [(Haller)60.1(, J.; C. W)16.1(allen; Managing )19.5(Thir)9.3(d P)5.4(a)0(r)-24.4(ty Risk)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.9597 363.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 363.4894 Tm .05 .65 1 .01 k (9)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 53.9471 351.4894 Tm 0 0 0 1 k -.005 Tc [(in Financial Ser)-8.8(vices Or)9.3(ganizations: A)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 201.6694 351.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 339.4894 Tm -.005 Tc [(Resilience-Based Appr)9.8(oach,)83( Carnegie Mellon)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 232.3601 339.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 327.4894 Tm -.005 Tc [(Univ)6.4(ersity)52.3(, Pittsbur)9.3(gh, P)6.4(ennsylv)7.3(ania, USA,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 215.5082 327.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 315.4894 Tm -.02 Tc (September 2016, )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 121.1207 315.4894 Tm [(https:/)109.4(/r)9.3(esour)9.3(ces.sei.cmu.edu/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 236.7512 315.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 303.4894 Tm -.005 Tc [(asset_les/WhiteP)5.4(aper/2016_019_001_ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 291.4894 Tm (473742.pdf )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 54.4744 279.4894 Tm [(Open W)15.2(eb Application Security Pr)9.8(oject,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 207.7909 279.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 36.9471 279.4894 Tm .05 .65 1 .01 k (10)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 53.9471 267.4894 Tm 0 0 0 1 k -.005 Tc [(OW)21(ASP Internet of )19.5(Things Pr)9.8(oject,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 193.9953 267.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 53.9471 255.4894 Tm -.005 Tc [(https:/)109.4(/www)60.6(.owasp.or)9.3(g/index.php/OW)21(ASP_ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 243.4894 Tm [(Internet_of_Things_Pr)9.8(oject )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.9743 663.4894 Tm (Ibid)Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 287.2832 663.4894 Tm (. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 663.4894 Tm .05 .65 1 .01 k 0 Tc (11)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.9743 651.4894 Tm 0 0 0 1 k -.005 Tc [(Cloud Security Alliance, Security Guidance: F)10.3(o)0(r)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 459.2263 651.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 651.4894 Tm .05 .65 1 .01 k (12)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 639.4894 Tm 0 0 0 1 k -.005 Tc [(Critical Ar)9.3(eas of F)10.3(ocus in Cloud Computing)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 442.0412 639.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 627.4894 Tm -.005 Tc [(v4.0,)83( 2017, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 319.3673 627.4894 Tm [(https:/)109.4(/downloads.cloudsecurity )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 615.4894 Tm [(alliance.or)9.3(g/assets/r)9.3(esear)9.3(ch/security-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 603.4894 Tm [(guidance/security-guidance-v4-FIN)-8.8(AL.pdf )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.9743 591.4894 Tm [(Amaz)7.8(on W)15.2(eb Ser)-8.8(vices, Shar)9.3(ed Responsibility)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 453.3252 591.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 591.4894 Tm .05 .65 1 .01 k (13)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 579.4894 Tm 0 0 0 1 k -.005 Tc [(Model,)83( )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 303.5653 579.4894 Tm [(https:/)109.4(/aws.amaz)7.8(on.com/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 567.4894 Tm [(compliance/shar)9.3(ed-r)9.3(esponsibility-model/ )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.9743 555.4894 Tm (Cloud Security Alliance,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 365.3005 555.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 555.4894 Tm .05 .65 1 .01 k (14)Tj ET EMC /LBody <>BDC /GS2 gs BT /F3 1 Tf 9 0 0 9 272.4471 543.4894 Tm 0 0 0 1 k -.005 Tc [(https:/)109.4(/cloudsecurity)7.3(alliance.or)9.3(g/ )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.9743 531.4894 Tm (Cloud Security Alliance, CSA Security )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 531.4894 Tm .05 .65 1 .01 k 0 Tc (15)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 519.4894 Tm 0 0 0 1 k -.005 Tc [(T)36.6(rust Assur)19.5(ance and Risk \(ST)38.6(AR\),)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 406.9031 519.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 272.4471 507.4894 Tm -.005 Tc [(https:/)109.4(/cloudsecurity)7.3(alliance.or)9.3(g/star/ )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.9743 495.4894 Tm [(F)10.3(eder)19.5(al Oce for Information Security)52.3(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 424.4979 495.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 495.4894 Tm .05 .65 1 .01 k (16)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 483.4894 Tm 0 0 0 1 k -.005 Tc [(Compliance Contr)9.8(ols Catalogue \(C5\),)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 424.13 483.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 471.4894 Tm -.005 Tc [(Germany)52.3(, )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 311.5184 471.4894 Tm [(https:/)109.4(/www)60.6(.bsi.bund.de/EN/T)48.4(opics/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 459.4894 Tm [(CloudComputing/Compliance_Contr)9.8(ols_Catalog)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 447.4894 Tm [(ue/Compliance_Contr)9.8(ols_Catalogue_node.html )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.9743 435.4894 Tm [(Wir)9.3(ed)]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 295.245 435.4894 Tm [(, The Cambridge Analytica St)9.8(or)-8.8(y)52.3(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 425.4383 435.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 435.4894 Tm .05 .65 1 .01 k (17)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 423.4894 Tm 0 0 0 1 k -.005 Tc [(Explained,)83( )]TJ ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 317.0656 423.4894 Tm [(https:/)109.4(/www)60.6(.wir)9.3(ed.com/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 411.4894 Tm [(amp-st)9.8(ories/cambridge-analytica-explainer/ )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.9743 399.4894 Tm [(American Institute of Cer)-24.4(tied Public)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 418.2059 399.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 399.4894 Tm .05 .65 1 .01 k (18)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 387.4894 Tm 0 0 0 1 k -.005 Tc [(Accountants, System and Or)9.3(ganization)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 428.7443 387.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 375.4894 Tm -.005 Tc [(Contr)9.8(ols: SOC Suite of Ser)-8.8(vices,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 399.8279 375.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 272.4471 363.4894 Tm -.005 Tc [(https:/)109.4(/www)60.6(.aicpa.or)9.3(g/soc )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.9743 351.4894 Tm [(American Institute of Cer)-24.4(tied Public)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 418.2059 351.4894 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 255.4471 351.4894 Tm .05 .65 1 .01 k (19)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 339.4894 Tm 0 0 0 1 k -.005 Tc [(Accountants, T)36.6(rust Ser)-8.8(vices Criteria,)83( 2017,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 444.6749 339.4894 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 272.4471 327.4894 Tm -.005 Tc [(https:/)109.4(/www)60.6(.aicpa.or)9.3(g/content/dam/aicpa/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 315.4894 Tm [(inter)9.3(estar)9.3(eas/fr)9.3(c/assur)19.5(anceadvisor)-8.8(yser)-8.8(vices/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 303.4894 Tm [(downloadabledocuments/trust-ser)-8.8(vices-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 291.4894 Tm (criteria.pdf)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC Q endstream endobj 737 0 obj <>/ExtGState<>>> endobj 6 0 obj <> endobj 5 0 obj <> endobj 48 0 obj <>stream HJaqäYvffVjt-\D6]Bt Dxh"ZQm"L4S1FW)h~43Y|/?f8g8nRd"AL$5jZK$J +TkmPUEVisuj*PՉE,A%(    -n15?v07?^f Zb:Dτ AHc$CЯ: nsHisPK6hN,> *U 4 N"T,AQ)K9{lRsGqzj.|@  ]#C,L$Adٗ\>Zx+it|>_MPa=bI_&+*zl\O&efvj/hP`e* endstream endobj 49 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''ii""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?f_?͛6l* 2iQi4=}HsvabOȎqW .CYGIW}>͛6J3g?y+ӛ~>^_>_h" 6lyz_\޼?iT/ڿ??vlٳy#s j%z>_ ?ٳgCͅ^v.TW &3r 3@&.0ٳf͛6Aٳf͛6lUٳfŸ11Oׅ~V{'_O11Oׅ~V{'_͆/66l&oqcc Oacc Oa _9=:Wmi?;6lM?߬x~r真/yvlٳf͛ f͛6lٱWf͛$Uy #Uy 4z#vlٳf͛1f͛6lٱWf͛ |]?^[1 <]?^[16r{t:Tvlٰ]YIvgI 1{r_Tٳf{//{mΨ$*I$x`ҟ'>stream Hb`#rrW5:cNܽz֪0])nfBz{u'~?=vճEq _LxI Zuë ?QfB7+vLhc`B {)2y(Cw LxG ? dp "\0B%kmagrMWOv8) |gBSmD'q%Pt0OTFF = p6J@Oʁ bg?'ƄtXEˎO S/1AcĘt]p3Q0DF~6&ޣ@/-Pg1g$c,jQ!>+a|@ID\ ݯUv 6oTh}hSkz iH6d3w|ˋ„| Z\dkCY4F endstream endobj 51 0 obj <>stream HWoe=DBGiiM4Xj $P CJKWQS4`1biU4 hb[J[?I_ژAzQv9kK?Utຍy F֏3f/XPm Jsi*Td(dRbvTáp]B؏AAHߒs$pB| g9 'A=D\]ᐾ[|ڮO\X˪2u]|v<kVPz|{7FUK|?)=#OOc_YVÙj[{YϋC,y7'z"G*pG6l8 syvg8cj&ndhB`/X>\G>Q}x;!K[lƌ!cՂ}tc?gu.^d>v^~s,TF&|ZmlB[|JY!NSUj YMzۨ}?̰qfaX5|Y97lߤ׻ ٨z>stream Hb`hm3.syH+8 vƦ>das+K(| "h"0r/DD>stream H{hSWǿIM۵nI:p[g'i'T`a(p(Qq c׊4} !cgPPW֩s34e7ɽ >=9)03f`@h yMf!FF >Lt8Lx/n9 HLjWHCmR`4fM-g/jYK9xb:V3ki!~WH@_~y)\@:pAJfY*s=(dvgx+\^xMXǥӌhz,ndAu԰w)Xʠ{f 6HS1\S=F/* ER@KZMk%"*nN&k#rmvt#:1zoy^jldb8rf aZ{;*^S= iҼ&~+ ׂ{7[1ïIs˼xGlMWxR cpsIWǢFC_뤎aI^ ,d>KP٘3㵎Iiv endstream endobj 141 0 obj <>stream AdobedC         #"""#'''''''''' k" s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?f͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳ endstream endobj 142 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''k""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?yLʊYXj&qGp/wh q9ZKn(֛fŽWŀƶV2 0 4zj߅k|2Z&ϦsU@ȒI‡y#10r1/N'6Y"{W`Üe$.6$,د渎YɓS"+(o!ښbr=p\a)Z˓!H'9p2.!WlpVlٳQ<8sr#'Ts2H 7?/(ͧfœ\q<\H^4@Ko-W![Ĝh͗=͘,d pő Fuͅwq]:J ke Jq  ֺ#UY 8fECkW0;159||/ ܔE/ ax7:)N.VA)|zo;b29ym̉ǜ%8J+֘ _V&'$L'.vLB:b1p8H{NAcL&m)C!2FE0 Ff6Ȧ;}FnM.ӋFBddI~a=0 39@ 2E4gfNJxc/%RX$*%LJ!s~.\>mt,e;5ֵt@$ .j2II$wj\c ڦ?N㱏Uygp6QNF L(ss!=P՜888wW|\=l i4܃a n< P`@|7RVs(^W< +# H;x*H©4wa N&P߆6;`9e8L@\xc WKHdlqnoe1 E[+e ra] c ):LQ Mi71097r)}&CF "kAJO[,L0W1`Q.; QަX`!( F 16 aǏe+FP9=0J1 ;^_EI}-ÐGGu nDHt͎zr%dDxry{Y;m'^QKu A͵(_ͩOFLR N`v͛6l܈s_&]r\okW  8s lgW,.n}>t֌dK@R6no jxg59xep*$u` 8cqI?rzU޻PaRJkBbTXwn'^ݱY(pL{'0QI܍Wsm ` i)J> MʠAP yk)KƤLZwjC<$I.MzeB":<ίuu,%qx4)&{%*k :(4s3AfiA;Oo-ڻeӀ bNw3Zc* t~|>Y6]F4ak0fژW"[c=qu;O$e*w=*k)m$MI޽?I)^ۋG7þ<=)u4N4 ;L`Z5bѕWޛPTo(HCPִ&~X&- ;"`@j>xG7,NDE;+mר{|С5; {~aK-J\ ֔wǭ=s{3rzokrG&_p8}ˁȜc;5p HAҾIQt$+XQ"ELj@- .VhʍVzzb\&ljFqTtLâd& SQ :8?Y8Nw=)xľXon5qz9.q+A^krEOVpKqM=O|xaRB |GvډDAusr9YYY28˄o8Us&K7p“fMq$ϼx[@Ć:5Z\Q De4Ř7}C v pA0'2饸E?@p6?JbV2m$h;ݶ<5dyN~xނWQ(~I2o tfy |ӐTc7"o˨[)e2PUz6B> LsJ0n!:P!f #wÐPw#,q>[1jEw{d]U>)&Ÿ(@6 rٱ*78`:ai(Yޜ ޶ȡѹ+ k0^D*׹=Ųc+T;,d 2c=\lW1̼p S]BORcm21{Sqjš:,IE5)͈ڟ٫/RpGcդGIe7˛ͮn楛~!S!m_ os؈u'pm@6ژ&cSѨFCMs H닱g$ڧ QE#P$Wݍ1eБR;"8fM.8$9{L^iH#>) Yi[\dLԠVA@|4=e K"V?ji%f,X4ȫ+ҸXjS˧<ҸiiPQ mQV$C9 Tx~߆!(1Hȳ2,p o0W,kQ_E69Nn>?o qlW ܔ3y7 : +[Y93=E &/RH U,\T(c_lA Ccvȓd~T*Qm@~.n F:rA.plG呐mRP}!$\2!V&UIU4PWS &8] OoI\R<@686CcQn^.EOIj,Jn!3ICT"+zBQBE'F2oݪr9FqqqP{pb&5jfA;# 5-op}nt`BYF`iR?X.k{XfG)fmfffXnT,#cM;0AUJZ((N#n)HEZD@,>G9ۧϥcPP2>vm5%So ;Y@4o:]N+UQE| jjdGц1Ag Zkd2Dq  x|!;`"fP]cr%iʔLXNEJB[×\MXH;9ţX•Q qpzGY]J;%՘ާQ) Mr+ yh'#X,ynV%`ViBPǽq"ymc`hryѫ֞: #܀NX*: )t@"Z `C 2wGﴋ;&YWsҤNM䶎kxO(*(#eEUP; \/2 & )ԎUmY=.t廑grc; +s="KfeOHe-+)l93⼏VS|Ji6ǎ^\ȄQfP(vlٱApP P&_[+"b( ٳb||ArgrUٳf<9Ĕ]6l0j1'C5+O-in=gx^jٳb&&dLI~i]6lm(YPF ϯOlWC}.BE@GUU.$ѭ6lrbFo|$kG7ڠ( 7e=kitcp(ڢ~zdvDf<Ƞ͛6_| ,e»ޘn"'+@ dۈ'WB>lh6l*Ijp;zd֛&CEj +:ӥ7Ӑ,]]ܡ.N͛6 )feq_:ҵMv߮364ۧx׶g=*`߯?͎ PQm770&|97.R>M o3I*Av}{홸ߙ'm, ;9w+ \^nF;`z/@d=?f3Pި,ҟf%Kϊ;==*;XNC2& zyS۴}d RP÷OXr?OWހ0nK V}k~U}wۯ݂G( ~ڣ3xH7,D pb֊Y*O &O FyEU~-' Tr] Y)0<JbrqGb0$Ĝʁ x-l%R\P+^2{MII+ (iw830oF:\}ɪVh)j|a|5p.¢` tuvW8D6:f=E?~ W T'.=O|X"F<{|XaÜ6:3YrP~B Y!y9+VnDYcB)㉢MN߀8I7sA߯2 Oܯn5I0CqKHY"n.iCR:F⸄\BVAxjG->GiNص e<$\CL{I!ҕF]%TmQ~,}:z3 Jj* 7($jh+Mj@'I&==ӯ] d$|#Ba 6Yd;POLC ^c؅;o4/4KiR33BTq{Ki|TZ H8 CrNoP+Rv8)WLQH&)cbOJL,]UY ^ö>KP 9.Pe2<@0dFJQC}4US˓ydTTQ@j lGu,V> w~N*;pQLAYDDF`ZA>=l]qUj`ulUHDž.|ro|fƙt4,v+`u8RG  N/yfҡ|q@O:?Z?θiƗ U6'YdRv6)?mּoLJO Ƶ|_=`y\"v͍#dl7Αl+\J!ylٱAIE=dvlٳ/9TcR1PqȘB@ Wf͛*(>cL@4mN,C$@j6l؇x?J+~8$+W#)C$(+ۭHfVk` oOqě/![ˇ}Jٳe=2 * 06c7<8 Gk]6lIf. T> i\/IQ]׉=̜0( -SM=ȥqtf.|3}R48(r6l>VڀKLmvŀ)FGgq^0͛6E5+YD!>&?Xd@_| lG;g>19JRD=Uٳf¨ekX=ALDR O\#,r$N$Qg7ھ,tcHoTz}][f͝B)A+LXܮ<>y@w pe"1um;+NK .hvlٰfW$/mc+(b$NGl?#spf̓yQ]X6_T;l*9Ȉ;ٳfy (}%E}4SQBx|"-˦HRWmK5ɋ*屳#C%vlٰs]4*CAqrЁOP(*)@s#c|+f͇%"&W@@O}֍Qw=YN=+͛6\G$n vVa5·pE$N< 7'!W8(_Q͛6 "5k''UvڂEv!Y Z\CڙwٳfI#ACv$kv۶r Wy%W,kN=vt >` E?P}a&rԏٳf]D 9W.9qN,~& ՂVaDUA*z?Y M6hHytٳgKYOGM}+E*)Ev֞MKPg>(9qY/mYQݻ1W),(gSi&үs꾬sK^ ?+<;O e(rlh^]V|{KW#~X$'2@bOo#Wv Dԥ~/،wrRfc?b4ڟY"'4xe~&)LJGl:4z%6{8xS;`xFza4䕘#u,pY7[f]@1}}艤cUmy7l>  G3@Pwk DW(a?!bsr$=qȹ"07;e* p{Yo) ē@R+ӮHv3gC ?{e9F] !F8q~]4NY;\ƵcUxHƤ(IL|#E53e`=lg=@s䢌M+CߗЀ<>Rx~\\<\v#BQp.w =$*L*74*>Yl% T.o MbJwlL7~@|~49"㺹JmI@7P}`!45"v?~A@A4<:bF>?2Ex9֠TT^Ms~*liC6YwK%(r.@d䋁뿖__aɂsTW3U)iL 2P:_ԿGf~8%n5O"I| #D ׼O[]?|Zd.1'ߏfXh;n):9#@B5%& ^ۓ،ZWcv$zmn/[V?vٚmMjXrj( ߸,uG<^ @uշ!ϣ73rE6;V5m \ߴX?|k,Xr4Q|H_/\Cq;C+5]#ۭpLsh:@ߧ\88dy>=f1UR3|DW@j=^gb QАEuOݜ6v:`E;PP|r-ALu#/PPt~,)@~ۭz.WfKKGzz,ygZ~SM :9sT&twu>f:*x#boyzU"Y*'^LA#h:tJcwm֙/=ŗ)C=&Dקz(^_ NI"{~Zq<Ɏultڈ0<XAu;~tR$hw=I;\!6vaR=+Ūv'&}bO[ֵؚtD%xub{W !0 d;4g.q2 s* OqE!d@Ii8uiO!b-YZ)|PZm`9D@bP~@58C4 5>FmA9;H.*bHW)^5Wl(@ !}%Uj$ւiLJ3p H'i8|q r~xa)=)9{RN !-. tk\FKFmn+ѸƼܛs,xك S6-5NTO#pzf wlV!~+ȝ;`aй@G>fF@`KTx8TL NYx y^}ٳfį~eTe18 d*do (pBd{ݝOďтbfpX}oQ#N§?>6zl#(F2;~?Cf͂-"hbbuxx1Y5jH G t7v0Ev+,ZtrGC{c:{xfDO;i:US@QKz᣶sHW_ʾ~j^Zޥ̗^/*BԀhH]IE^nPOaRz8>>9DQ(yL-mɎDm[s5|ūק76Ko-P$%:qZmV u4۶*xM?L'lGJZQݏ(?ep{;E*Ou[GAJ,sd>("22F|y2r F8څnY#02IegqN|̥T P9 콱e +Ƥ`e45q`? rJ-OWۊ5`?ٰG*ND5}U^nOr2JfpKt5 9\\җJkU,ߋv1Kf4Ƹ.%?D?y-NĶl!>E0W?YZܺlrb%vƳ.bW~3HVFDu0iiVZͿŞ|!ppz)G(щ 0ATx7 $X 4ٺܔKOt+Jp p.inh8a~#jNۊ Ū}B9;@~="MLH dp\8|6?ɣ_ Dd!B?që7^v?Fc>0p/eRxpM)b[>ba _oOA_2uwv_ˋɋh$ ^&Qɺf#E"wWq*9~Xdp.Fݟ(e1]PɼFOŎ[ΪUGR8So%BxW=grHqQ HЯEGi qU2*QժĤ7 ]t5⠵|j1kc/Oؠ!ⵕ*~Ъ;{wNIQΝ+ ;w8 - I:0t%(L F s­ҕ;XI%0I%\%eIdq'ZƑ[\GJVz7*ܷI*ۨ8CHOTѿWd4I)E'[v t)%FnD;1mcq˓y#,8̫W.p.>]7zr ׸8Y.8CxEk%k)vKJ{5d.תqݯ8dF朾l, E/ 8bZ(IpoM?(ةcjB/ˌ4}=FVu1ceӋ &.CQxDpW$tIntn?S]T~ukQKj5İߐUvK}EO|UQcSlj_ uPb ڏc;Fk4aH]&OT}Ӓ%ǖ2&䌲| N^)GSַȵqHԵJ7HZGKqBj)ۦ:Iѕ鄑7 tVCU:QJw:~ 2B@=9zl}'c؂{7*~&X~ l ?䜏_9,ў$GOR:w Ѽyq?N8-?ݶn(ƅv̭! ؃7esLijC ?y0|2DSۧ^2M-Q̒p{7UoJqs/om'ee[ ]}'1a&9xg <^c_Ӕdi˨v^t;p[ 5m4~M>!kw< SBP8mse (/rPVk yH.xev:J(߷Zw8fӬh\j, i4nG`@'zv8:."Hy0:99 mS{]v;c2bc9r4OU-?[bI÷#2vPhJJ"~dSVېjH"܊6mZ]xNLIBL.5GhbU/ٳfxcwXɌUm˩=3HڛPo^ tlowvlٱjYQUAد`H\ZqgLq\QWf͛X\u l͛6-\+JY6l^%]U  )k6h%X$d`~8K Hn"Z(C25z|gŊ0O@9y2MvlٰdA6W^*=j"?GKaB8ߐdj%,2 ߹Q#ٳf'NQ8r2ȇf͛19D'NcO"6l؜)m edoO`_T&h I)ݩmj N=$RPu\|%as4pb2&$616я;vlٳpy*FEz&[DT/qc-"jw3iW~]Pr #x jѬךcZAE$W[0*]M~4@ ?eXmaT24k((Ҩ5il5qS`TJwȍIłG}#EirRʿrâWa*?pO֍Lpms=HsA8r("x8k$ydU3 `#WMcQbonie*^?P["21H~9#Q ۗa?ÿ"'< 6 J@w];?1 )?67',);)hOZ^_ R*X<ոo~ eP^C90?ベ Gjd&{9d:ڱžʽ6FfN>Q.G~{KGQĈ&"FϝNDrD8b~SY-+֝0;)Xs @?EL_Rp0tѪ,9~ӷPGM1vnA  285z݇MQf48J1qu7ue:HɅ ~87Gf+ܜTĭ~6=i)xgL8%^ y1)JWV+(  Zwidef(a] o:ZbH3YOEe"U AW(3t5IoO(!,٘Jb_~1Qɢj}Ѯ](83G DF84$n3_=5ko(&5ߧNbYh?eX׏Xs@oD~pUq(w+}KY g40\H#U!G_=~4I\|2r_UpaR.5bDsiJXݹOz'=0Zپld{ڵ9LpG2#Ȝxyqԣ#~-@;r3 = PNuJCp:rh | y3[Jm}5d}12z¢`fCl޸2׌tß~k2I6A SbQ&y 9`2G.8HǨ9}CNXїַ߸P߅Ά&I9Y?A»co r֤n[r3L^< "0;9̈́XO яbjM$O<֟'jh('dd8E7߆bNJ49Y”挀а :wnjW78bj>TjQA;rP:o(\ ц, @b yzc"L P DE#~erR6™e8zvƉl_́fvz*v҅HĜެԒֵ75^>1E~q<26N*2 Luw/3%wdIHpB^|'@ YfRʒHW6nU 2/ ep JqlYm|.NKF%H2J]ҝ:~{Lsg!(D⇽vlٰX:t[E2\%xJa!v9e"<\R #r_.͛6 \-+i:P@> rU{`Lvǰġ(pLXy#͛6]$Z̑zW"ʴXm`BL bİDg~x8NW\6l\*mk&*;C {jpj^ZIfC~jIePa,΢x2#?ko/Ј۳f͆O4Q#HhM leMacKeWă|a[+@X^G'~Tu8) #Bٳa'NKjΎ~=B2CrܻSdS9(pL<vlٲdI*e$~'O7)P6% \?䞙ͨahG${KCf͋娩35aC9r1œ!.~MVq*Cǰ4pKCy5 B-+d{c]r8è_gʣٳdomgHWdi sաӥ`Zp@i"} 5Ug?g IG7rcލw6l+xqv4nq)@EOQAZTal}% aZ ȗk,Lq@ZowNcLW^Xӳf͆$T S0PY$p[/h RYF%P%Rd+\F;Cf͛K~XICI y WL6Ƒ,}:vO>բ2Xe)@jawgkAXnp!$8D{ٳf­G]Xq}y%R u+#281QytsW/,1Q2/՚)R*}G(7?p GZOt# =mWnc'ᛍ.qqqR$P 9|I̤vF\CA>կ_G|p]R)}*(C#ӓˢ(ʞ6AOX ڟcp8B7X<}rpx[1,ctrYpB$?{lǰH̜FE6љ9sT"K[9Nkr6''2ħ՜/jA6@?qCFRbEl:Q[Wה]ѽFocHY1+,2G)ՎSDd<;/\yfZ'~Gl^RK?#;g?Ip8 XHfa3DeJ&#W }';2Sǩf8rp%qjf=ώ qsjG^U^'.7YtƟ?GROإI?G9&?L?g;|iퟟYm54gftG1Y<c;| ƻe 8uVlmqP7TNۏlT F7q1f#ϫ xIbçg&J`'{5X( ^㋄f0UN4Ih|#jeE(-|u7Ǵ!{s[ѣ|Ǻ,;[3Q]L=Ǽ-0D?uZkJ%<=%G\j% `"Hzs+58KO=SLMYU)olLlgNt#Wz`?ی v4\fҾ߸Q;khͤ(04 qG$%rXЃQ$ vlGӌXĻs$Gႊ$n2w>?ƒ%ڍfb&>$70s;_йn:ˉ" [V,Vbbv+ #a]m\D9`LL1-d= xB> s+p1 FRHćVU@leZ3[ѣ0q,Q 8ؓţ=ZpfcZ󌍾f2ۻӐ)#+_nAHHf5P5b|q bQ\^F|BpbdF#?aʌ9P! 212>eiaޜ=A$G4Hf5Ss\UF~{r M>yPGޟr\W?'ܿ7ݭ >y5qkq[Ƿ ) 7A1O_]_rVp; 2LPrİI`?`Y-V'z1maǿ2a1TE5vd_"N6pL CqAŖ'q'!Q&q^q6SyK P `)ـ{n?oMUXEaڑ?aǸᓃDbjď"%0QvWeEh+y)PJ{eL18?5\w=w2|9:M]GDHu;mB5Ӷ#p F6پbo#c?IoVVt;\]Ӂ`"V oOq*$A ?:;qQYz?1(ȁ?&P'uIS!g " k}1oldO>w+~8kScխ)1OՊ-S:_rVÄ $#Q@+ibǗQ'qWf͛'7#e1wSqEuu `"2D{Z6lRB$(޼u55?Kt608QN "/hգWޝF ?PbD}=͛6qZf׮~Y&!$S2Ē1 7hkZV-Dƽ!$!HȚʞHTWc`ٳdN$[#6REK qZ׾ w|6\];֒oHBaOگwu8c%12?'{f͕kh2(b^0@iP?ܠ xnEY@V]'2OVeÇM `98^vlٱ)m0arKGؖndoƂ3L5v~]"z0Jqh]t7 ٳc ")FGO2#[kw_ҐeSl;O"Es_Q6Vf͐&+U*9%9T*h@"'YAn;ufMJ1$dr_٠˦͂bXaQG]6l'lszc HJ ZV2K"ҿ!')ʔf{O1$o]ٳfή.".q,+P]sjgr:d~vlٰLF` #»˶ r;`C”xԌ$(mWf͛ ڝi+CGsHZN߳MON.4˧VTv=vvx@͛6-bҮ4*榔Ҁa-A-Lq$R;N/|AD¤)f͎$dEcN+f͂{17Ϧ%"(+\GpV) 0ݥ;a{R ۝y"""8=Wf͛ ~#yx|+EpC"DA^*KP>iڵ?9 :}?DpS㰮]Uٳf⵼c ,^(0]Vk#`[rY?X ͢ ,9dny% 1V\\}͛6>ٿЮ$h,ᆑi5 K+=Ip:aRGX^+4!x,nH1qwN͛6fê R@XrnIxKq=Ȋ7*Zmj6q*70-#u>9#$pjsa3xRx1c$s<`@d1 f͛ۛ+FVې#>#rkUŌq֌Rݍ [H7B󏤵t=)98Jp,IsNnj@ Oٳ B!猺1#0XGM-5JL%sR$2a7t82@N  c,g\Q&p}ٲlw7|=iwk@M"w?Cl J_ 1b#Z/6h<:uΛgb$9N@.N>PG]L %\cDgɱ~)`: xȟI~>bW4KjRf=\uÔtTX͝L:kԱ]-.df fH17C$88|Nf5D8cHdzqC|^Yv¯_4idJlHу`X&RjA5?F(B  /.|)x+W,;Tt~ȍ*q1\Ӹxk ŚXpLb23 qJᗫm.cK2>6 9J #˘]iqbM>xZݭI(‡޻d%v$p8H?Gqp\ @Mg"ſO_0&Ҳ,{EsbDvT%#ͱ tq7i$̄1S`Z>uU$%j4xO JQrWOJ3CO]>]6<ډNY$LefYc"OKTV.y;:@H$Hh#$(b8XI⑘ cˑ7#'r|؏ cE[~$m8*<\=EmYM De> %ep.,s∖Ҿ]јU/]jOLLut*" l'`}ݑʄrhG߫ x 1 ѹ$#'3hCE_J2IGT럵9*MVߦdϐd0Ɍ`q3XF&q.&2977rX!&٣cR-jܣ$&4.v]\FdoVG[ (-nyqAOb00 j` OJP1dv9hF?`+ߵzc(' tþ9P N*Z+O%ŽJ\;F$o_S~(挤#9d"=O VI$CˢjkleF&#4iviU[tldPY6{pTMUZ4ūjd9c59\ox~kj399+N>/**1}US ,@8vq $TV-BF)}+~44eq9OgHȴ~ٛ&S$2&O<sY0p9q7!bwUw1(fee_vVb7-FS}1[RUQ0E;¹\DFQbP *b3OIЩ8\s}u=!S/ ^ԛ84-j vAdn$5nd3,P _ 8gtf3v9Fn Q7f O\o#_lLndoYPĂHS\Ǎy*+FYfz\ˊFpň4b9@:{T>/U}^n'j+6zA Ubx]5dz*)f4$jv2CSPyNA:4?ӻ6lIPw^{GxC:)R64oSUڛ.$2I%jce#cBCxc-w!]6lo 1 E}Va0/†*jˍ@O$oN,q822;͛68aU"{ 6BcĒj?fy}1#ǂR6=ƕٳfƽcZ;ƽqQH~ԞB&\l&| 2X |LISS1ðX޾=Uٳfe--: W֪ToM7Vԧ!Zi|Pһ6ly|Dj0%ݕ+L3Ej`x2rR$rE{|`iÎ2 (5vlٲ +:wj*9K#UُjOaffv 6l=c^au,F<;qکl_>9=ٳ`+q26 S%wd3P)Mzm푘4rvR 4%R{'h͛6OF Y@K{u@) /RҝG~;n֐vc$%A pB8'b6l%Pk]%@*@dNiv] 31r'bHۥ+esEoG\LW% z{udnaDUF =bnQPyxGp͛6U#H^©#T1uRi@j`gcqO.ϳ5S 6rb2˘e9 ޵'ۦyo|5LՊ ֿN@ğ["&}?BWv_Gȼ-[$Vd-Z*) O: >8ľ7n鵳c*O1= &Fq1'r:8]5rI+EpH?0BеE5ӵ>(d}Cc:<G=<^SH5cQf㎌vH>@O2q?ě#!?viW{ G!kQ?ī rsg?ixEIb?wջR=q[+ZĆ6w%qr  5ěZ8^TDilQ޲Uyf55H7XiTAԯA 2ƣ*+Z"P~g*=?y.OSKQ-F5hv{%Sjk_n܌};ۨ]4u= kABQo~:C/NOKFF> ^{p2k]<ÏcwÉ)y$l)O| ᘴ$)BH;}8R}u6)JRT{ԁ_6 LIa$/4R"eh鄮| ݊FǐF'Hfib3^z()GS_+ SʔNj>zXf-Hng2byr#FsO 8@̿KeM2'+6+s7+7) 2W%Nڊ~|=O~,bhM )ڻu~= W:s\p#WbKh8˨&f͋T^6̒'Pz4^Ԯl7o_O_~ܜ_n\6l.lE+ST[+֢TO $f?|Kٳc(@5)Pߘ5I;}.1+f́ 0F495*$ Y#އ A :bR*QQ0FyFNd\=]6l&Jҕq#Jx?ͽ6J9qR SlMrC{{^ê(>;6l>>IB2h.HIV33{{uݝ2~gqwQ3tvlٲw)ƌ@i:4Qwna%֏7Wj9i]ǎsK-cij.@ٶ89f͛ʳ",QڔWBR"MC:WsӒ*Ӧ6x#qqQy{6zly@* WC jٳfo.s#ajm$PLJRZYAoj|1fUai]I xNFBW#_=s9 H(͛6#[ؕEq޲X|C|isq~DFlAf͉I2p;6޴-%kV]j cLm)#=#ק]6lKܑ?$ڣ+C@:<qTOS&L5(r1؋&ڻ6ly%)@zF|> !Xrޛl6bHs\rŽ76leSrE`6 c&urč@(:q#hh[5]`L+~ٳfpF@ ?j=NU8ZXe5~.Y]ZzyJ#z|UˌFS#gf͛9p)2%ZC?1pٳbs%.-H"1;"N_E+sa $Fȳ9$. ٳd;wqj佝~"Ymqހ4+us5~;/["c|?I)8ߌ6l}E=~!($^eBEym?3&t^gF7NMc{tNV;)䏖!˭;vq!k kHō$3QOQZ]<,B|^\i><ь#U$ΔDJv6Tg`1`lzt"RWa}ՈUOc +nĴV8_Y=O\~֍&?de*}biYAiw"HB*:#6IbŊ1͇ {q|?5.Hq 9Fapۋ#A;cSz&tcۮ>2I#ĥR!ڕ?It߿./H+N^ W&Ok$NL@n4vbi0΀G3B 88"$ڕ"v+V'-UW?vDA{ҕ>8hJGŚ@ j,1,GӐ~vZkeODµZ'j0bq6kJ7v'zV2!16/Q2)/DBiāԑگ$Twk޸id<E&~v$I9#z1`Z@M츀2]ml'Nj_oehZ$hտ$#DP@cgeYTPK*+kB> Pmlm`kx EϮim^Bˉ7l;&͉gHeX hVN4bG<~x5[G>sLN }HY; aPKT{KUn݁>&,$9F9 *DŽc^[yO|x29.S/@.(NXb+N,$#Vǥtc'((k1CDW!@N5B[);Rr';AȀ lx_eE[1;}b Mwh?5DCZM&Ɖ{JY0;zlh7$JRƄbN[r1Ɏ'`zda / 90XW}85f {,YN,:ax48)=bx[nŌuCN$Ҟ'&'A2񯀩ƢSӯ㏻UAP˒޴ }lHSy +;kV\h{{c@ H1L z$̱],X7teN#r{a6:#]ޠ;{+˽E5& Ҳ8SI:ح8Iߠbg5ЮF[^("Z ex\2m&#e{GUa">|\;GR7 ۯ]|^) *CZO*ua S~$\? qӍX*eUlѲ[kPۓЍUc#W Z~#C>Z**0K73@2"*ݜ`;ɸ":6>),Yb~MA fb8u9jY1gUÊ0)q2'$dh] t1įxBUh#>,N>\fr@ >/s&sf++; ]R)ѻ#\+3N q'6 NIZqsMY`˾)HP~]Tͻ6lf U'sA'ͅ2#O=J ZlEqpq_wqo_/Eˏۚ})S7~SZLR"@ƣ NA<ٳfR72O>5T.ÿ\uKmAe.vdGM)# M0%1mbawuٳfjI WDfW [8 O#PrZsj'$F|\s}A([f͙ɸB!u?.wz! {r6lؔ4f+1['.оg(O?%, Pvdh\I_p=34|Q-P Fھ9)d'8וZ۳f́7ԜYlZ2.л4۸čxEAZ zRicy ~ΜO#@=H5#&mo-GӑrOxiHEHmgWf͛IdR:EA77^Ns-'ϦeG*ȫ$`,TR>9ӔicoWr6l{ n*N?> BT&'j^f EqJrTW"ʆ*_+f͌\NCT0 Zx}ƣ FCrpPf͋ɾ]iY"Z/M5K HkۦU̾YNU> ]6l)RYrªXCʆ`gގiZ_ cF O5vlٰxSnh3K.'DVW*Wtnۨܧ^&͔x#B$bA;@.͛6yN8Ԕ+Wm3-^s&$H;1vlٰ&g 1G F1cg BƟ وxsh7y 9WA7vlٰQ((< pOZ=o׏X !$2\ё&;<3cxM8!%@ߐ%'f͛KO7(K艧6U!Ê,EfK[Ğ'í1fm}ЏOfBCQ0<\di7#̍#uPG;77/-$Bev5lw'e;.`87d?$8")$;>?j<2LsVZ4Z)n198JdOppGk1,ު"t?Wk~N\0vekҿN'X0GRqF`-JC GsHHm%,vzF)qVf2)C[71S*3\lqg}]FK,cz#c2'rJT( 8S^֖ѿOm"T`٣0mڃڡ&6$>PqB3$~R_pC&X\Co,g|?'N!_M!gHLzc#!RIq;]XRQV{+{`sJ_pp<IZI =QЙK6Grp`yOl Q֜9Ì(b5E܉ڇ[ *@mSb24Ȩ"5MqiЖ=s T AY50Ð݇8k/Kt׍w]٧O 9NrH᰷/ <0D_>< =<͛6\Tc$ZnR ǾdxD;{.(ٳf'\+͚-/^>>n6l-1UU!;|%\!gk /Z!M2J\)w"Hvlٰncl~@CKYGIі-`Šb#ٳfOZz?XO`W]jD >F9jL_̧mn!NR۴hH fj|3QҌbǀDDry"9sN"#b$QvlٰnXR:M |z`D-.cբ-,| ({a3Y 1KGx˜a#.r1#oPCf͍t9lb;ٳfĥ%=,~x OL3ry* ?3 ymiEP ׯZfb=GA 93,Rq fQf͙崂1 ֣瀎tZus,\NN=TDp^Cn, &ꝛ6lA"FNGUu!4d$vN/@k"K/ء9b%ej e"[t}Zc͛6Y[8mo`#Z)!x k\&;zzr=yGK?lF)pJO IwhzCJP/?Å:Re/h QzrKn:f͛"Py9), ^c$nnRӮK.m.Gp(z|i 昣MXbn PQ+ſks]]LB ?h)3_G<ښٳb1]Zу$`РaZdg8GGwrB! jVw{y赼3kn8Qho"!r[*6qpG!dѐLGPCf͑Ke3^ `GhF#1IwBE3һSXuO=Mq@fI^BVޘ \hbT"(ݘ"%ԍWf͛5\[HU15,Qǎ3Eo]6lKƥUn2KsLZAz@!YP5 lv=Mpiq Ljٳf[Qң ılE=,)!+RMN -&arQ}uR-> prb(+f̈́S  &bHFqNvĒr)v!E socs"K:#Sb*mnҹ"V||2ĩ=ٳbyk*$UPЩ"qƫئ^$@)LJHՊƙe-ٳ`xy}NaG(8kǾaU3,fY8D>q*1X7/؋޿wٳc2FoDNcPZH@y]ҧxnX*e=ɒF7H@\,6Ǐ( srf=Qx2pݗ2G(HH5 ea3FD7t*,[cb](Vo ?ak!I+%G GóHJte.\fȐs}p뷪Yռ|2wr;]7Pz>ed}Yٙ>nԧe!LHp zxH˫vÞ%R%!"rTҰB-o5Xkf r^z kI3XPVcM$J!I?[bCMdJ-+ ճ2N?T޻,IåY=[oD?{_Rk@Tz jzM|B`I?v>^סdKm(CNĤuv_5PNI"$TDsihzq#"HFxx&rƶGe6AaQ0 u+=ON*(_q5Z6UPQ Q¾;}cjd՘3 ;3{퍪8hW;/R7$DdħA#MuE3΂+Q@KMGs+ADIzuf?){@O_ʪ[ޏ7Yfsq,-wwB2}o-}!fXfy)T9ȏRp89VDw2;G$2eD֥,l%4-`lGy_Cxc}SPv"<{_UK#2pwC%T ppo{c!a$߽m{{ Hr=8WtŎ*T@I{tGQ{D$TܓCŲS+F(nPz3*FVdBĶEU\gyn[ge3"]i_)bSR%Z@UPl1{q?:2fkA~?\CwBX<ni9鍑m $? NR-m^ 5 ց?5T (?Ι 2\9I>;dVg3Ԉ!3b"LqY$JY>*cVXT5|~J0% o7X/ `OԚc9SLit~.:l= .;/,k~N bl0+ӑ|j۩#87!C7RxW2݉ i%[޻b|=D =1iXZNԕ=^GZ"7棴C6q8G׽˽ٳa+V4ZXC$J:##vWf͛ u;1xhiEn(Ά$vW@P24p+#38De].&.LPVٳa~h"eFRO`zҹ!E0%b(X-y ȩFRQe6Ϳap%BO?yJ{vlٱ Ve1GPgj[8MN{ze#G 9e <3_~˳bfO02ٳd9bBWmzZT}]pOWH2`RĐ4IhߐI~ṶkQ$gBF0ѐ^_y6l ?}g2L9Q qUQyt2.LU3ÿu!ٳfjj6X5:w1 >s1j}S[ f^FR*5CgKn/WMWf͛) Z|Thgeo[?lP`zb3@wܮ͛6nUmO->X-#]J6l`zHM++͛6j;[L hjY~$F2).m,! LrRd~NDa_b3NٳaMޙ pUJS >MKJb7x" UUٳfr "RkZ_@)7|2A"W$76lH\v *}=  duFBMJ`i& 7vw5YDwQWf͛ 4 wXRAԖezSe1 P͛6!q6)c1Yw4!0O#ٳ`h$H$dj=vxjΩmAp2iY;mkֿ(]{3B$M7icµ#}1IOs$]otziWpņFM/I\8"WAPGColɱ7-(2}\GÛm'3;10>/*;}?ӏa3*ph, CyR]xarHqpx2 亐Ljm/ᏻe@M&<$n8/%6_e9q?^:ۂ;IVG$v)jՎ[o>rS{`; ̰rHү}ux^ c92c'Pǎ $CԷ?uZU壸41'M\0ONKuJQEO]ǎqEOğ&9P?*?ӤIlɉ+6s3ͦ(12fǟZxƋ{liȯ >4x)I_~q|'kJ?GD춱"7,aZ{| krzqؽBs?qm1'$~Oqq q~_;zHp\[օ8$FeXukRzqCؽisGխ6l̟ҟ{b9"[HG=xDZ8>9z3_w?F4K[CńPqBC%yռrNtI""/W<~'"lCr9\)5#q8VRIpe} ;Cń9@z(^t+E W'ĪKeF٧?ILcǔUTWV'e)\ʂ<h@!fW"!,#oMs# RP!OTTolNKGJ &a?b V#bXo^8 3E4R${$qY1ܥ*" ,-AW&xRǙ"mؔ;w۽vYAk,&Tv#8U@ S%Cs}!#qG\2e уa5$cJԜ9T=klVEfl'O >Hz}lSUO!HNSTj;cN\$㍊9D SR<*qȱ%A)r2LG Br$~Q㉑=Lu 2{ )L 3u,@ܚ V뒄+ZޛS fr50ڣA! pneÈ6cg:SJ;z#Gl*fU?ƯFݛ6l=m F_֌߫D'I2F'b[Ƹ `:5~aÏl@+6lHFU@P( <)i4,QV/AUL&a8FQ Ă6"R۳f́R^/v@ \PvQ0ʆxD`  ٳf>vdAöiaIhUavKO9_p *cϪ6luXf,ܝՉҝ)Ly[$V1FB 9+f͉KUQXo}`yzDc<0mڽ@4֙J'' |9Χǝ>*ٳbt6q]qYJCJ}>iZwOl6,.FvlٱI0SmJc!mТ%rX'1THOM"2F]D |+fͅn 86 Ȕ]W@uqބW'=1":v߲~G4w|$G#N͛6GT/9Ĝ0 k >]־bGѕ%(i`#)F-6l B @Nk#4ʆXc)ٻ(vlٱ"0<0N`6m\6+vlٰi%SjS..jvQQnS|3 VI֮͛6+$lE6n^@5qcdR*CFaq n%]6lY\}j? vZl~*-Nm]B'bx|M0;fr4(͛6,UDW Vʜڧ?XJ ,v=*FԮ#>ZoR)O76IG*S̜M> Q7`n8μÕq%ٳf-3z@AJ q1d+dP;p=Քw eYT;P-ԔQ)k &Xw"&FXWf/B닻b\rHKvlٰBB=[f{|K1dkEbp愲G2!Tˌzte_ٳbmu7r7JN}CY8ݘ8G$ RJ#j}w@Ob9;?<mCu)oF+E<%7ɚ|]֚Q4@ɖ}HĿוe۲]`*oaqo;Z 'k6y#LKZ͆OgO!"e# vHd8'P9'-.HJX4 [qؠe[_m=4nwN?a}]cDҶܝO+)GMĞV2!9UqGU* t/!w -n\(m!|+޸,>#cE3YBGJYMGUHv:8D, ĕԮ-#%=m߮,+KY-hXBO7,_:u}V|3Xp\x,u ] tm^K-83Psr@w}sVPh4C2k~'҂KP#< hPR|w-wzv' /4 Goмʓ\]d8jv2{cCv.G»Ҋ<>X8{uLGKj SɎdRbR#da$C^Rb4CAs21ٹ∢-@;.)]#Q'є/"ŽyP *;NQ(4 4 #^}Z} jE * A;҄};j@mLa22I<'pxy^:md+3ɱ(ið٭B̡(^ ܏儯TkH$AC2M$D*h;oˮ0j";⟮3곷MP DGY+F5M=ԭxȁR68Qwn%xsӖàiu㨵tjXSxMrA@4U}UVNÑ0p2yW7錞(KV@ H34Vb?$QMT>zgFc〃jj;ޫhM;48)i_ᜋAG|:5 b|;Z ^2Hzh⌠*;mgS-69gHWzR.)䎇`i֝Hc":Ҙ,hQ 11pev+LaL #5_7Pu8rEmg,[=ɵp3 IeڋOSuWҸl *0;*3Uں9jptw{OQ1m.͛6z.çS .~vlٱ9\qR8ҹ+f͈a^ v45's}]6l t?: /16l؃-AxRwrƑer.uvlٱ׽).]r1oޮ͛6#({ҘeR1͛6$ц=15?4Lxbl]6lEƴƔ#82e&د6l؏ aCqjcs&A]6lK;(*F63x]6lHL|]4xWf͛jlH8-e9Af́Yw@ iL5xun$1"Ռ(2gDa4]3Yx=b۸]6lh_UkY-nB` YiPTָf5u#wu_\J6l 5;yg "I7kڴÙ .au~\UW*nDPf>|q1"Ff̈́S^U[u"HՐصRd8csdv1)1#7b@sٳfK>dОD{\R (ڹ&p+ƽi҂oWf͛99PEώ+$ȭu>%oH3Z9x|-ҭAo;.>{w]6lܪK,avp  U ij b`vL $$+)+0<&~~? ee"#vlٲl)#Hm$"xl#&ܶ,_ǏҼL|PDz#(3p]m6l%u#l#'p8ˎn *g?PR%A"|"MfcF\DT]6l-9gZ$E.qӃ*)r0 PIo1\0FOWf͛~ba̍84iA@•*pL$H P@`VEywT($-Os*:qC(wؙYLSJ(+7E ̭Fhi#v2N\1nٳ`tYin,(@$u^Gew$\eAFڴa6e%liBbBzփ1{/UcD|$_7޸2כf̈́iSErGpZʔps=t4T& ’rg$ pO#@*INF_h7 rs{ OU, ˎQ|@`;#spתCvlu*zdB]Rf 7 P}HF;я#ZAZwK# %PqbC a*xW7eqd5DyH_Y9;}D,DVޘUU{a؇RJKlXiA\CD~w.x*o Z')n# ơev!xJM𤣁zH۟*#ېf^GL0pɒ5 i>ϒ1gR$#ON c)gp7'4qcAs1(ĩ]W :}{'k%dDTxs$v'ujx]L6!;/ŐcsC.! >v hONpvC?`HVG2ў0&q`zǐ4Ni\大82Rp:o Zer-JeXԳ+ -& R^䍆giN Nq?&3(uSL%9Ld@O3f`s"c22!RKQ3ٕ%n *)D)f0%7o19.„H7uKVbhPOBjq_MN?:V/9ry$Q,jwUqʜC re@R'<0$, ڿ:LleS%EZpmvzW)ɧ26$Go?Sf͈"ra.Yl>̬X Hp#Έ;]6l=_]7jFW"w}=]6lDa+߶\.7'+z@Uvlٰq7Ɛ|175*F8]6l Cxf#^҇"pʻ6lF,V4Xٳb$mQ\WQ\Xٳf Yv++5vlٱ5.WW1ٳf8q&.|A\i\˧&7ٳ`7)ǷL]a1ZrcVsMi.*8bP]6l->@upDTy+fͅ×CZtT.f% CS Jl,ŀx1Wf͛ !&j?TPn\\$gv'yjGǿ/a* xl?- f̈́EOUN<:t)"PP a.{d㧄5|ٳf WTClierqX)f͛@y$SQfpIC3=֝6l !jEKnjjƸ[$Ċ :0jF-|U|ǂ&"#݈YٳbRYNG5+G$dFXbX{`vic\9#f͐8.*:V̪*0PcaO UU=K'٢dEٳe2KQ:(,Tq=}(mh>@uBPm}O Ɉ zl8a|ak,cD-RXI5'4 SAӡ +A"61DC5U0&J }50‡= rp1yp)-ƐϮ%R'UשLM{\&1"ngzdmL#7qGs=CȞA`)l^6-O N'z= Ğ >K$0Ze7e Ucz3aV4p.IavWpā(Pu}BH"ȃJ9A_aiYzkqgũKq˕|yuY{?Qkx2Oǜo1O"DxDPFS(!wzx&]qk٠%JIQqL:@` c{8~k}m-d*@4c.If}g@|a͇rc2 q}^^}۽ISe5sh>7vGn)y|{#eԩ*ʨ|+q3(OChp5B)PA,7*@ mQ"D1QKԡ,w] V {HpK^II`a UCПfC@?N:xP}8ʷ=7 ͌>&/Lx2Dq\)H⡈T<H@f{)Z5̦0^MȎ'#!(G^-ӣ?ӗ~gMۈREfYw,EwW_J}4$;{->N3Nc2rG/#C摫^fH!&OnΟ~gLږe4|#G,GWƢm9`t'O:.$Ә=WaTג\O4PVG?בQa+vrcvZsoEl QW5*jk)˔ DJBFRؚ'㞃M N62e";O_7ӬzF#",$^7O!֝ jzj!r5CzSa[[uG'=Xl-IP5 Ҵ "o =~ #F1߰Ku<5+N.a]@4?<=6r iP0 O"H#=h2Z$uo܀ޝpSaJ읣ugR^| :}9NM>,l26tGdS 2jsQ?0N"R3ڸsg$#K)ɕv$D / Jʦ5zw6;\0r:l:\zUn޵@?1cP#ڦ< u3S]59=j8uyS~e 1 f1RTӯlxOh4 &&Ʌ|+8?οQU49I[CmUwp%֝ У3Wm.LsŸ$){_h}HO.dg"c"I'ݹ/?/֝ Jb:LdR둍KAfrlr/Yz#S9bۄ&LZ p\w * fvxd7):so?~gLF3-mZ D-Faͦ-Ҕ MQ2j(M !{pҢ =izL8@*#'47e]tq;7~==nภ1]6ăL"h]M)"vuR+Jt:1֣+JJkhJ)(/~nvIb>) Q+A#`?Tӭ0%r08W}v$VM#!t˃IXR9*шX(2''_I=M4ϲ4/arn[)Գ˦UoSq!}Kᅕ[zW61Bf͔X(,zSf\z ," $oɦ[[,aе+Y\jC+ƻƘp<|H)BIkҙ_FG f͍#F,F fO[ѡN]S>0+Eٳf+2!` T sB q͛6eĜb zRRҝzK*U}jVEs bFڿWvlٰ;u8yZy$%@9 "V$+osyk͛6u& <\ŏcA~Vu5Z Or_M~ٳfĤ`fprex5P7nũXzW5b Q+f͆"ɕE+ ֥ڕxeƸxvlٰ" _z++UT` A;|lcC͛6Hԝ`8" AQ>Et{Ź%0#n'}9'@إvlٱH5+_l $1BJv=p{G' o kCUPٳ`M2:Jes(qWV͝6l2`h3eiٳfwsc-.[ V84@J6l9+łUA*f ,4vlc uPL/m0b[,PuǨQDbqf]1B(PmUH4ژ.4遊|p-̈́ T +]=02p"@Xv 0FBl>"Mvjp)9tyN>ƒop*$"I.@BcsN4w5 4IHBOT؃$cxCt f21`ؽJ9qXd9sx'ȱI<-GڛW6E?;VڇlW.kkkXbӑj,?0+OlTP~^9'<2e〄a98\1p1pL!19 ;th,oV1˶ O_׊[@]AnFtFZZWr5xǕļ ҠzC@ ǍpxSU#W}ONJ5|ɑrI{?;/xdYK,c+߃|Lj]ڭc$>U25de!z+$Aa?ZIHBƧ$m51uTP  I(R` +C\S/s܊(*(ms Xm̡^aPOF`W|wpl 14ت"k)$oUc Sǭ6a) P 9ot$VhI7>`2#$Mv*M?Pۭ6*0_\aZx4A4_ P) 6u^\=Fġ^td5 w.+Rӵ%ꉦqq,zqR8]/ $H<YIb!V|qzfcCJ}+]Ѹ8ۉ-N9rKӓf Mv4Pň~H%Yd5L9"6_.<YUk ,srv`Ƥؕ1Xf*ET.L.0eʾ1bf1ı!^j;qwUG\ꉩ{ybdT+A<N``8Bht1*Wze4U=F` *7Cn$ӍV5㍀Yq$d5QvxaaFğ ~ ^OM*[oOVejSkuhi{m&m=?rC*_YKp)BVT|Y"px\*su9F)5\VEz{J'7\b0 fQF2Q$%[cn pD^(*@}Z 1`18Iq*]pJ6,8Gd*& opfџ jepFpx<-3_z\I1 Pr6&beZ.`I”*Z}X⇇_Wuϒ 3bLA5͞ 0*wc0GW8ii\IaEyTъ͑8qJP3ŊcJA-+R׭?摑cO2A Ywq14=LS c+n'A˜RC'tVYy$zZPB0+`xDcQ`{ p2xwٲm4VJ?KC~:֤CU6ut/Ma_@ݳiALl!TQ<~T}NQW`+o`/i UUmMf46;*čc-~&,jk; -؜1ڀk6llaF3n~qA !-GOp#Cf́ |8oǟaqCAwӂ RbO m˃tWf͛Ac Y:RWڬr˚֪M> Dci @c8$&*ٳ`Sz:qݍ*^킊a\zh]x2һ6lxbY}f$7ZWjӍ~W_A$f#10"Q"ٳf,NC; FG`.pQM3mEn i\vNi&rHiٳfgRK4kda"JAEo>V{kV\@|/Y'm\tf͛ 㴎ܱBM@QSZ($_o:\E20 # 9+f̀]p4Pps 1rbE+f͐fY鲤 {e~%SP3v'žٳatQ` 2B)Lukͥ]6lG %$݆ m*o2Ǘ*)Gׯ=`FuE Ok)Nf9`h]6l.NHz ]$ɛLzxTE+f̀S|JS&*pVP@ezzzH͛6Con^e;iW ,ǁ$޻5~>X]¿ԃO@ 9Q~b$Eݛ6l>h)RV/wTmߥi^&A=Sxf͛i+ZX2=HՈPr>$ %S683 c͔q ]6lxQU6nIb(]#!.<ޢW7X~ _kˍ/\WYCN% O9bkQ@z`ĝd4$Gnb'Ly"ĊȤ| 1z/ckp 95VU8\a>CƔ\wIBGmgte' רG?>N=LRVa] 7풽9nXPu*ĕ*Pv-l.rcR*^L`hLbc0@]Z펦6Q4eӗxO GJB@ֶ̨G7-r Za58⪕C(-|xc鎦]1` P1\x(Zޘ '*zSLx?le3S㇉c7lep[Hen,Zһ7\Up܉Q&ԡOႸ6I5M"K# 2G$%9ESm1,l%f;Sf(%Z8se )2U"n=V޵ׂ>ӭ[\1BiK-=XhNyOn!KY=0,^_nTmj' ȗ\Zdd%fbɱjZQE |Tp[jhiP: XɑT>a%y.2+nͰkOdtS*s[ wGWUrgWd奛b|q\Kop" ޣ" rn>ؔd۷oPU!P(ǙA;Cc[zA-AVr\m4In(θƂHR$lè¶?tZx2Z($ "c Q/4ZM|Fdę2F>ȖZ&rhv=A(8hUtgGjқk/Sܻ .;5HIS5VC4uʷy<ڔ*{ |2Qb8xc>{Q C꼏K3v TSx~`ќET>o4d T#+<.qy&?a\[%rԯ1W c09v3B@΋!qJ2 p]6lw mOlm6鎊9zPV7xٶ";6l M8LwŤ KCJ|L1 vlٰb \!R{\mHv8 ;&X4C%'cP#6\0 tksP +"͠C4$D.ͪwSm$ӾVq~Tq2=IZ vηy=(LJ@"JS: e +2W3qƃ#J`أvE|`N u Rej_ r#GȡңAkġ |$vq&,a[҂HUKvPNL0\qu눑*r~ 8ZxTjVr˄gl 0RYƍGT210~,#ژ9A/qX/Ŗ 0mzyŕ@xb7) gr3jQ ӂ_  S4e vfz.P9P9Ќұ v<lyyȁN͛6k^}TT:8B=lxriqSf=G!BﮥYit[OUM2){1~\kYں-D5jϊ$5,`]&y]~/GTaN$ak!+i:|䌲a7fɃħr28dQl#՚sHN)uAZ >eIh3|HC4d`^$5(TO}~?<$}rNu^c% ڥqepg!,G7B3"M_"L梨[2L0=8<'dDmDvهH6)JMi2([LJmzҸM,iVA=*} L_ r(:|[ls|\HbrIE3 9{& $$ Fd5Y&I{d++}M̵:DVVfE B $W {6 Z0۾F[y^1.djJqMiL߹03bR4i+r]q Ar( r켳rTĢ(pN8[plANmD$ ok4xPz-ؓT@Pq8 BoIOmz*<28Ѧɚ1%DZK륵ǚbҭi=s=r*q㴖0Lɋ\5À85eg8è w0Go*-UH2В6R2!) Q\V5G- xY]]~\У*Sf)h Q@TWcR.z`v+ciUWz BI=HE)pÈ#br8҃*ǒ ;q,o|nK;indRcr!EN=إJU$aCJwu0!=#20m\4g+m=0 }ٟ61 漓"R&@jf5Fu-ʿ\޸wi)c^ Me s[,je[ ,Abzbf8ԝ/Uҡ`%vR㍆5BZV dLNCPzr2O|ސ B1veǺ>i$21uDZ p:Φ߭ >ggW∳ y(q1'Uo09#elma^8`qB#Z`*q;w PvrD$N>2y$gGw2Na6x4'ȮV&%Jv 4ټ B~gFTM:d:uʐ-؟p GڽrMpΥMoD{R'7WN8?YU=K~vBuuk֛'Ep`k>;  "$Pb,90mϖ2!ι1׮S/hi< л\E;ݛ6Xq_kM:9Ɍ1 S6:D`h,i, \{ qF9f(OXk6lȉc'L8ngH䴶7 |j з AfCiue;^@o\f͛֊æ1lMB xivlٰ!C{hz@zq`VLNHU\֫eDsػ6lFNO'2η$J%kL;WQFXܢz+f̈́vXӦl $͔;8iG1B"ӳfͅ4 @|联cQ D[fͅi $B),71F' / 1͆8 ;q"4p_|W 7C5-1]\Z ͎CU/Ė_fkgt&Eiڙ|/_w8̞OuĹ? \2Dq1]?z„浵)ڙB2"n_y#) 5dwAu Ќzq]KCʽފlVӒ̠W$),q =g຤Vi&T9+K,[֘",Y(RiLY }X vv# z !*7FU&ELh!B,pe'9k9Z p`ۦH(Fee#16 saCV):qPpˎn##ߢ5{`-U{`^s\AxGrfY& Q2$ PybKp S*Mo N9dGፕ\Hy{|遖MmbY0emU:,7 tO\F}@Zv (_llQ`?i0s?WB✇!z ]ʧSLC ]6@ QiÉY~v2",&L Sߝ.5}1KNᠩ%r#ϖ.;mR*Mk#(3jrdU&X6rN@֫GN`ărDPM>H z$ `_61QyZ=5@U;aeLxA֘䎆o9rnye9 fSNv\J#;e-1GP3TڠeH 6J ۖp⬡8נ͊6N<1ikO ^ Ml")>eySK/O#կ9J\GO$yB7щT}4}`tkjӭ6͉]a8d3Kw`GqO"2CcA?OL-Ӥi(U' j;ceOo):NG8utvp϶ci^|w{ k1yxԎ4 Ro(:e!7WLߨmYc/6l˅ؔqLǦclf#\͗m|X}gU "=Kf̀붱wf͝,W1S ;gaXYFrٰEej J [la28x7Gmzs}̀F͗ 5M>KV!Y%VOȋ$d28 :w/̼Cr8պxLZ*}^/w^?c),PEP<|vxUSJS8cOLz^?l@}NYbC,eW+ko$KYei(ƀ=S =O8SgwƙV"0cU&a"0lG^5$ě7%*1mUBvd(#\ m8=zb1)Vi9>lˈsrj<&G,t2BF.F:Zq#*J᭽Y#Iu5쎟FKF͌YL^HL{Hg?W:G?Eq? nA燽qr bx7_Rйte\2凑ҞiB"X#|rT#.#fG~.փn=l;Rw|l/+V}s\:O:}եlns8L4n|#n-ݱjS8:I*j*Gl49XBPRRbrĮի^J/!Lbbr:/ҿF).E钐eߵ5JtQݟ0}lLAm {qd_yW,M P#J6KYs-m~}GvszN8;>Zolm<6q&ǡ XT6}r{߯Ӄ$aKÙyPt ˇ7U1pGlIc=3(ïLXcC3wT#ù, VY%o nO\ARlXBQ>3ٙrp6y7խVkO~}RT~ZtGXyJjp27*sd]\=}q<=]?r6F}?ҏ=Nu6 endstream endobj 503 0 obj <>stream Hb`hm3.syH+8 vƦ>das+K(| "h"0r/DD>stream H{hSWǿIM۵nI:p[g'i'T`a(p(Qq c׊4} !cgPPW֩s34e7ɽ >=9)03f`@h yMf!FF >Lt8Lx/n9 HLjWHCmR`4fM-g/jYK9xb:V3ki!~WH@_~y)\@:pAJfY*s=(dvgx+\^xMXǥӌhz,ndAu԰w)Xʠ{f 6HS1\S=F/* ER@KZMk%"*nN&k#rmvt#:1zoy^jldb8rf aZ{;*^S= iҼ&~+ ׂ{7[1ïIs˼xGlMWxR cpsIWǢFC_뤎aI^ ,d>KP٘3㵎Iiv endstream endobj 505 0 obj <>stream AdobedC         #"""#'''''''''' " s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?lٳNCϺGJ{ ]tKqՉ:%f8C'߀Үc20͛6lٳ`[)(ophl6͛6l CGyKoWO? 6lٰvrmOH!@͛6lٳeMix.f͛ZяSAm2[ۂG6lٳf͛6lNhh6dRx2mN'}{SnrRlٳf͛6lٳf=n.8Q{'f͛6lٳf͛6c-]5 illٳf͛6lٳf.+i'"y Mm8e6lٳf͛6lٱKy'"oӇf͛6lٳf͛jOC)|M]z>%͛6lٳf͛6lOEHALbu*\@:҇3f͛6lٳf͔K9\3 .s?rD 9yf͛6lٳaFz~06lsjTe6lٳf͛j[)D5wgbjOS͛6l3^ G7ĝqO6bf͛)PrboJŘԞsf͛6lR)򍊟l2[vy{h[t~wl:ȿ~"~~Xmpt>Opxƞ͛6lٳf͛6_ߛ͛6lٳg endstream endobj 506 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?f|9f͛6u/&SM|^golV xJ o͏ev>3_E38✺}磱Fr;cSOvl<%>Z=KKGL>hg=t=_]MR|+h?䨲ؓdj-~@]Ӭ4eӭ^ġE|M:s;+g'XDŽ!ݗ3 KYxA5Y4׾Ek%N}o'ښjWGOaeߗ4 -yKC4UQKLwf2.8r}gc5Z}gx>HT͝GK\5hCZZ?.I:XOW..""^b稸oh7g76l/fiaC1R<9?ٳz^I cKOzf̗ 2& YH[e;)iHއulٳf̓ٳf͛6*ٳf͛6*ٳf͛6*ٳfǜy̬CD߃ HO_$WOM e:iipjOM e:vD +yp+KFd#l~%ɺ{Mjn`n. {IY;\pY<CyWƑh:ƓB`rSXnqߛC_5hU[|GqnRi><Û6l٢tN͛6hzEƻZi6. Ri]f_a$jUE7 }93{1lBqGqÌ+?'?Qvlu4O8xb?Εi̺喇e9C g6Gt==;;()8$|2T[9;lٳgt͛6lٳb͛6lٳb͛6lٳb͛6lٳb͛6lٳb͛6l懖N6:g&޲_Nz!_Z3jSϧv`Ks>vL{CTo.?F隆òyt@=q:7}8aG|זM\ہ%gɡ~=GJeR#_q܏|ٳg>g6ly2Ɋ{Ẋrw%FL>[az%kCHmFvNǧDVx#{_U~Oiߣ/K֚G(rwRyWB$1OR`rlٳf{ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳfn{GgoZoᑐ(A('bW6}m=D8>ı\A<"[v/6zU]"Y3gɵ/G[?m{KQ/\UmWEM73aY .e/iZ,\_54<(m؟(%Ygi3c. sO_D>Kn2?ybX֋4GIajTM톹N f5h"kFwh.L3f͛3f͛6lٱWf͛6lٱWf͛6lٱWf͛6lٱWf͛6lٱWf͛6b*͍E7HԻࢧm}"yFE\"G'Pr?_[?o׿O|}ߊg8:U ӝ[<0?i"ܷvajCgU]0 :wevu},ytGÐՊ^'iWJWD|9XS} ni"[%R~3c3iо@H o/Ǹ_#FFR*{6l잽ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳfןОSnVY>?9%!!%Ao9ݏu$N].P@#t~v{;9dË(Qr;"Z}<_R5T,FK3_^h7m}0z|MC\6Vi6lO6lٳ~Sy}r XO "MVhA7>v^Ue Gw>v^UeC60~g/+%lY5~YLj7MN$d4*v#z6EK6؂E«^4T'|h}f z.AAqvjjcr GPs6D<;:o խ~ xǧq~lٳfC{f͛6lثf͛6lثf͛6lثf͛6l6"!߫ݲrŎYrBRF1=rd(K.YBR#%ٳavi[5yY܃(׻6v8yʺ<Ѯ%#n[)gwh1+ U=ݺw>lٳg.͛6lٳb͛6 ӵ&+>fQw'~f~`HFKXUe; v'\lN2a&}/?]IFL37Ϣ_ҏenj:\5rTA sB:~cv4Vc'<ś={<0% V9W.?TgP5|([MK'%鞯^6 KŜo2Ul{_e2d_T򆔭QHhmk3 |{ bԯUo>7aO6惴nωuP12'Ӵ!v>6&9bF\zv;6C"}^+C?v>ʼ_Z^\,(o&"[Sq}:/̗s`}8i]QQ Qsyͺ/|}8So8Kqqqw3JO!ř6y_^k{\ ~_J Q6g\Yur,gk#Plb:r˯7K2ziАgң;}2yϝjMEQgc>*Oocݎ#WW7]LR+v'3TK6lٳyf͛6lٱWf͛+6lثYf͛6lUٳf͛6lUٳfW]W=L::u9sgY#޳ٞG:/ֿgOߵ:G)q?g8l3)CL_Z}C2//{9_ f͛6l!ٳf͛6lUٳf͛6lUٳf͛6lUٳf endstream endobj 507 0 obj <>stream AdobedC         #"""#'''''''''' nn" s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?lٺ4T8>='1q[NSh]AN|ֳi"͛6lج\8HOs֚\0o Pl3f͛8«!H2[{21V#͊nzZZkU8#6lٳfͅdRAu*„uYdKB?6lٳf͛6aHAXQ={Sn~AAf͛6lٳf͉\D&=E}&I 9͛6lٳf͛64 k(;1-tQKb|Nf͛6lٳf͛ f 9Z#V݇<ٳf͛6lٳad]b"p6-=y6lٳf͛6l:]&0NvJeEF;6lٳf͛6[ۻ">}\ni8o6lٳf͔Hyx!8_Ў$:~ CIf͛6Q Z*ۣ6͛-YSB:6 .7͆\C0n+6l='uKR[| 6lٳf"~8[YB?"mc?jiu?/wV {S.~u_|nlٳ endstream endobj 508 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''nn""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?lٳ_ |6l;JѵMnZiV]LiPewc'%G1MGP-iTEQW;i%ivmҪ7b5]굒M*1c~H{?g}vcJZ]4oe|c#c:ǘEሪĵ HA ]~Sn1꺩k7;a@+ѴM'+趑ڭ*+ovO~J\H&k @GkS{//%n4p|Wt& fJ+ؚ8Erǘx'uh轖M@Ţ9\Ho3ܟQ+S[:GP ]dS& k 1J֟B^X,:EYSVjo9ltZYc`9@<ڧhtY@b F "`?ͪJl }OEUV)8גzI,$f%#O(œ=͐mKVK [1U?J\d ^4iyRA>Sकo6hCޖ:ySC.==lO:ySc?꿒~CcMLf[Y9~#9?!Ǧ'Mbcȧaū힎͞E eh.bxfCGE*| gv _-!9S_NyRռv- uLRHهu9{#s);f 2}0-od~iI4Ew '÷=O2C*u> B1<:[`zH5(@[  io?9y[M=6T*F;alٳy56l:1=῿, wMD?ɧ9ѴoTҬ38E@:`9-Jm*R TҬz;v=U-.I71^؟gcZjQiHYss?я9|WgG>p) 0aFM7s{:-瘵=s{ +GVvU.y{Itig '=^W;U (!8cUU@͛= O!QCC k1(HDUUUvٳf͛ 6lٳf͊6lٳf͊6lٰ[40iiBHdF{0^\X,!qO0C,Yb' FB(`afi~eDֳ ٖ&_;alךyӛNn^Z,N9,NWAbhԧeoYue1v.Jxi_>u$RMur:H'e!YҼFK{J04͛6l޻f͛6lٱWf͛6lٱWf͛6lٱWf͛6lٱWf͛6q *Emka*ey1a^#UY')ǥ=H;~D<:ySUQ5崇kYdJ-/h41AzNeT;CL4rƹ4a1_ :y6Vz\с_LڭtY9.TՅ垃_t}NjRr~ß.F\*ITEzZa^ss&v^xGL6ͮp}'pvCaPw$Y`#UL6o(\}oʚ4RBN19f͙ ͛6lٳb͛6lٳb͛6lٳb͛6lٳb͛6liuKK=?1b_vFuI՘{@P=둔Ǝp lc1ߧ52y1/Kl[\~e .!jGGcAr7ڧ2FڗB+y9C?ND)K)e>/Ukq+w^K nmvz GRI:gu{Ў;DŽ^{Ўa?-&+H9MkIW^^G? Y?o2Ǧ-e0d_jY~tFf͛6toBٳf͛6*ٳf͛6*ٳf͛6*ٳf͛6*ٳf>s򶖧.$_y-Ej9 93@Nyݼj`M\pE-~>-O=e;CK _>yhӞv uf/95N~Kdx*Agv*- ?yٕw\3ix:kY⹷sкUe<NzoeNQrӽOsWOUX)JGZ5zL5:ŋ┤~OAٳd?|;,]>$՚f5=ߛ^m]7MYH>~T| >Uo;ɯ3\1ydn #K]~ :\ 뻊\ϛ❡$\åϊX8pNo;&+iZV#<=JX{˧2+u,ߨv6lٳyf͛ZtivhOp(YP+QN͜Gsm٣鶲]WP1ݛ#gB׼UWR+mH' $%:AI]&iFHW4= DG'9t!!^fsA#9~HY4Iot:TI4Ρyϥu$:-fT6_RV/yP|"[/lھ~Cf_9:@_oQvgW [pLIoT"DW6]wWD&/+>S>a6I$i$`'aK\Ƒ i>VHZmH_|toWԗ liDGZ*sK>KO4}Ŏ9KhΞ$i;35æ͋Js?(FJQRH*(ٚ@5o1jJȭc"MoGjZ}6\=ry Yf͛6l^eٳf endstream endobj 509 0 obj <>stream AdobedC         #"""#'''''''''' ^^" s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?lؼF=- =%v')Hr0$,+!E*}fAņP%0Pq@;6lؔNdP}M{b]>(V͇:M \J?f͛6lUu* Ԭq{8 jVB ٳf͛6\@F-ONiUgalٳf͛6l"kp5JlķN E-8g6lٳf͛ & 9Z#Vݗlٳf͛6l+ 'h?6ٳf͛6lĀ*z u17`:`8ehdYe%{\ٳf͛6Aa׾Voͳ}n"GWPjC͛6l؍vїs{LӰ3fz0-FSsf$Rh0 ֩>stream Adobed         #"""#''''''''''     !! !!''''''''''^^""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?lehZu6#$jӼ3pɛ$0Kd#[Dȣ'9'R?`x1);ȏ"c%d"Js#ȁK`dC8RUjIίo}sSE%m/tGKP5λ 6mc[XF"( k駰9.^YQ-^\ƧNJO$ZaqZ2wl4ݓaD]?Li0ba"[J924i̿jk]cO$RV!e[hN;'yRj+߮ď#zWNr72'Ғ΁+vejc`'jCSؽEwÈb>l~ȞK\~ŪB⋁ȦIIӄDй*,~gWWIV,4?i>{|g*jg+ rZ,Hn@ǣw42NFVAgˋVOpˋVOsb5[\'YYM  Go%FfcT|zSR򞒐P~"v~Ny/i˔&8$|&y~ܳ{Pǧ= pcy7}pǧ= pcy5H x<α;*xsߗH>`+!_TAwE x-n̗qHPF]iVs9f͞f͛6lثf͛6lثf͛6lثf͜gɉyjh."dO8z]J8 e;cz$,~Uri?i׊y״ = u<3"cw<>ჷ'Ꭳ]p9x$Lr1 Ǩ-.*j?JF'߶y=ʮсWF P<yO˨b׋R3%^M[)hWjTn,aoV3Fk y+yzϥ\I 'JS"Yѝ36lٳd6lٳf]6lٳf]6lٳf]6lTk 5Ua%j2q=5_l gRY4TCu$GZ`v1MK6O0Hdv1bMK6O0Hd/5s_i:xEsInIjXm._JuY.8DܚivbqsX<[Ǣ=w'MDzrOnFHFڷMSSt۽_PN34:tU){WS(>zU*!8"Hs8OGXj{_k38#0E#Sju^iѯOdWX?:^L]y%ݥ̾2L?M-WNZTK[u *GV>84.JуZOӯuj}?߿D% skJfZY03Y',9WC6l6l endstream endobj 740 0 obj <> endobj 741 0 obj <> endobj 742 0 obj <> endobj 743 0 obj <> endobj 744 0 obj <> endobj 65 0 obj <> endobj 66 0 obj <> endobj 745 0 obj <> endobj 746 0 obj <>stream HTT{PT{]Xv}^׽H#RDteQ B&6&Xc6GQ#Q&F&: Hc5V >G5bB}bAd~3ws~s`2)3NSt=+~bυ&jfZp4hrѹW;[ %'&+uRi˖Wu>t٪i%EϯZsUS\^}KI4 vIPA!ZFh2 B 4e qc^'5 0 3eL>#쳨s||8JliX#`JKC`t`Q[A"*qJk[-x[Eli+}c'S>DtiYxIn+5/4؏f(%{E!nvzvÁA]4( q%ߩ5 h#ӭJB͢ooc6°h\La̠~KiYBKE1eMoB/ 2A.wWqGIlfCvT(OI[w0~ŀpZb C4 }vapk^]aٱP;yM.N_bWEM-lɸZD̖:SP-BjQ2QSlB<㼊KoVF2DVrP!ckU3"G._W9*i FxS/`nw EW0 tcx&:'zs2,K2ָ:P)} f,s(\Ne#e9|m b)i4K4<qmFç8<I`N~<؁X[WVd83Ϟa)f701-n)rt*lrRdGo-_"_ԇ2)+$V ]ȥQq/ hxfz_SdWCiBW1 go<Ѫ@J{nx+ux_2sF2KB:DdBX'1#~U3JSBUzdEw`CTd?H:%%x.d(q鮜LwA l4A69j(x;OJaQq K1gv$.l|w6~vrt\zztW$"E5yIhvPJ xnK*KSu>C囊gӟ3Y.{(Q;F=JʳrJxe\FŤ'4頎Nyh WUF^id$'#[x ®uk.n|{VUs(\m*6 |bd/W ]}*$Oa?Y4zCD=d#Y<4q&+M]{q3>|2YK'‘"o& ?ޜr?ǒU ֟5uoC?-W4qtʛuySw@@N+|ЋpVb_8{U7NԷJXdf8+c'Q4A #h{%ƚ3D!QIĄ<j)q4/VKt{ddll'b(I;xPPfU(pl*eP!-]?Y?vΣ]*Z0s+W?1nrH4p疂c  2RE\ 7+.\x!aˑ TjeJ_(|Pr˱ ;5^nj*iVEXb۫O$Cm^KeM>r2UF[%S)%sx,ykfYhZϠI/Ue>wG}#!$(6lYo;KL&Z SZA "6dDه{Hs9s}\QS!D`a3VfmQV%0d fc&){(Qwa$w uT~a B$dbXVCX?h|-i!NE&yX`TH`Z)TL~4(UL%iLC~P۷Gi:zyngˤXC?`9nvP@vϧ#e6ƢU7ݺuL bA-\^T /r]0,J BoHģ\$O..zdnnS`ox1Ϊ[ܑB.uZY c/&{dȟv,_$=?zOı1&aJVjAsWO司{{''dwOd0|:>VT =d t-AS3t%߱@Zd;ʎ69h8[l6l]h+j%6s^.%O&ɳ $,/C d{#{,h(wNmg3u٩3;.}Iꄩ3h }V4m]/~l5[)<H"rHOx\[H-lqqӀ& W@e:ryG P6wMxCim/\Dp ŷAߎ ^Pp*X'ªqn$!eD]E f'`sG=$0q SQ1r"omۮeA(\F.NgƝӨfsRk|gJY&i<  ?)C|L=&)x$kՃ*v$l]~ϑ`${w*Z\7],7-`$6cWS3Y V%l\!#sC6V'c endstream endobj 747 0 obj <> endobj 748 0 obj <>stream HLU Pgcz@l TA@dD!Q& &ѵ"%ekDXV ;A+M->.B2߫Pjh1ţ}`i|\=1T`v/t$]AGf=I!_֬ʟ6Gywg4Ur4j~7E|HztvLߌ9[L`<3}+qcYhgЗm9$:"h(*/kY؈)BҞ>KsjE#&v5ܴRHkK-u ^VA1&qȈlU'҃Aa0\uԢsΊ+\9 M/S<%[Ši-7QʵȤR|#(W"Ԁ%z杹P³V P2lWhUt5h9UʫO<O@5O,uX0Ƅdj_̰dۅ89Dy n41{IjQת,-uoE%H DHcMI 6G J\A1`/`__d^Z*.ueG3GpfW̞jB:YyѲ*|4K6h;O9FhfC* YJ p"zR)Q3G3ߎO2O7qacP(c4ZW+9|V\/VNr̘&, `3^ 7Mk5ٚHy+>\ ̑.޺0&(4jS"-* M&[yh9d,KIfؕ=sx0'l+uoM9-NptzWfp+pX֨+,ʽwꕸ1 o| %u@txNlh *Z0 h*VF`DVJ}U̞aꏮ_wݳ콿o*}4=iHX*8Z*Z(\B2N`9YX])8y߅`/> aZ֜tj7l̆{x)&\} SdVۡMwymyfw_h!neF*=aS5z07@νc9y' T'V'E8;ЇF/KC0`}HMr1 +RjMup7v\ .iX`[Vdf-We-߼41: u.p7wcK5N8?ic+*6R`wx|!|MZ+~@Zt ء* m:F +ja^88C+L߸o Tn\m{J`TQ.C41K NS 4e2400fG ~u{n*FCה/$0[| r5 Tk1huY>||LH"3cd'{ ),\@DAE= bo& Qܼ80mhxc,,YALĬf2Im6,Z&_26SwA &b<0`Å?SKS 6rUKW]Kg c n~>-n*pj+/?}܃NF8 m '[;]&d9{p~Ѕ`=F|*?ʚ>ɍmm+\JJJ+`tX*ۺ? ڹ],V#ɫ~T=R&[{4 &4H2j5ƦN^x65֜8噐$%+Ix }І [Μq@ ^Jyi*>Q(7N#iYBZhܶ~^MDǝ  {\N/7=)ݖWN ߑ}+be ,ñ2}"RoxNܯwx?{9eБ~bؙNR 芃jSk T9 01'eRt:6b%L\sAB'L/A SN+ax]HU؃8Z٦g;qrX>rN{ grpls'؅胇Kiڿ휨q?Il% endstream endobj 749 0 obj <> endobj 750 0 obj <>stream HTUyPw1#4؍1(GP  \A1@%)xOP ADe#)%lcjVyٞc{U{ih\㣣c$.),-WD2Ln&iѤ+az&r?nI#hӤ ьwFaQy#h|`Gtaa^AGGY <9W0^ 3^L0=Gf$0L3G,3L*sK9uhp\6QYۥ5kΛ;=~ "-LlK:ےʧ<2 Mwd&- w~=kҾϘOUPccmZV X#{Ѐj@ g3 "ౌ<^#98Jf G4u8(e<)9vJ.ӷx6jn5wMyKy[0zB6efK2u&Ҋ5%ɱ{ҽJh 7hr3/:z?uށHC$PO P.T,G<,\1D7<57GpBezi QpoOŅGgp#W0BDUmg@@V8"CF/AtC-9+}J8g +X\ZPS"H,6XEn]@G*X,nҗS[cocR{ruhC:Ơmr~[w1cN[kr?9_kDxB×)ͮwwKg_ڢk|hHhS ǽ|Oq>20f1,[x%]w%h\p\k֨QJDfEoaW!˾n7(s䈒Ҍ9Y!%!exaٰθd2>(}*Tw&/%?GI 6ltZ^Ø{0t˦ҞWlMT>U=PpMnyibK]*/uur]ݮC Ɔ*Hu+weUrŚJv;kzQA hv ĩNrпYD=J&> endobj 752 0 obj <>stream HU}PރkA`cw[D8<4 bQ4*("X~5jԢQQHM4j((e|Kt8;~w}VChF.g,rV8EKV֔׿\ʼF6he_/yct+Hn׮77OCZ ALxi4LK9t.Y[i,z"zEu}cuU0 4!|41-8J BGK h^nTsT=D HZy}C[]KC5S/\Swći} ;?EMkoX2bf+385*pMABoq8<kH]ڐbav [â>M_߮,'쵰Z:Cy))3sixէȓ]*6aH'YhaǟOn -3ء<#V— z"̉"Sơ4X PLæ |r9\yoQwQdN,<+^c3$}~X(B0 ,pT:NW! p9a8( r 4C a8HLlh C1dWO{޵Z]j_k\nd^vRBޭ_c B Ԥ!s_ks.fK:t v׵cQrzrLR7>;/ApD@ث~qcwMpceRlJ":De̒ɉPis8<>vAD+)eyjea`<}r7 F-4o [RQl۶loi@r(wlUbkSjڹqqmrU/8 T2(eTp L1. hyFgJʹMT Wy%e<6NDsy7A< HGCֻ y(.171멥XJb-@)xE3Kz0zVra# 1 HvOA 0`'NdlK{@H$E%cj#'u<oIԸf#(#ўp&=e< W- }䇽W 0h ŹXA #`mA0MUCd&C4|#G}y{!P ;eRWGqn:_CcЦgZ<|c3*émHp'˨ 49DdTS;!<k0N+ߒ00ɸ׸/0-c/"&fRr48GT&60'v.BF8[r/?Sw~o8x7RɡS8<66,z/s ğ6y{ޅR_V^ￃ8q Bٷ>N;*4? hrӲa52e4V9s tm̉i,#믅W*tqPm ;hU&|U'7JjiKAC?eV3wZfqyΨm8Xjg\[ka lh*ͳ/^ÇarbcwI>{@@4#qa!o4 Q,cQVvPNwx4$`<\ iQ1`dO0T3Xjc-ƃ]O{l]_Qa;D['=NXA1^z~`y2:x|*tP߀` G-okp>UrrZUӓr"uŌ!%) (\3q CP_4>msWl譆evw\4Mqbf7{Y <hx;1Ypj*T=xV+ꉤZXՃC&3P؂*Ǫvq'?0-0B=pW+Hh"8vXb?42 TBD}wIq_1+'=%*'z(:ܼ۩hPtǁ(U3x!HaS0<$ '+2)$jh)S]! WWu츞  ~ͼ[qszg[H9DR1 G7E0Xy+[2Sq%~ 1 Nfu=GǒЁݚTn8ȣy8yxNb&vQ.22aup^0x,f1BfZ^ȺQ2RP/Sf9,y1 C R5B/ϰϸ>aWxLвQ[ݸ6&f 8FOɅ5g%3ybꀹ CB0 Qs[-5$O%YD*x܄K!^&mQM`qP]=`R:U_;<< `  +,"lrKP <{t9U`lXUI xvSyvG~dRrm⨅g7׹%h$.!*8S)`:=5B笑-skN6`k2qPoNrX㿍FNt}lHz1kyVO 5"tspvpٍVZpRq  2T F2XDMwno1^F$U8kHzW;/mvP3+~.`l ]@0-!` ,A%Xg=>)W*e1 &0Q#M/Ba6ar)NL "O6`qޗ$(4p}feYkhI_iPh Ծ?ЈdC"1dś[ItNel%3K b~Bل0X߷u˵ gO5jWE0t+b0Xyާ>޳ܶE QpqyXn:ş5SJ¦BBnۅ0^QQW\o*3@# $D Xk$JC6Th1J5JʉXMIDӨܙEs{ܠ<@XM9kz@T]T–VmV>FEYPܵ K}Zk. 0bx'WYDpxy}D <fXG<'خCw/x>M3'"4CX1VoO  L n/j\U>b=m//~]`< /~]):}h{KKѼ9.ﺃ)ߘCdbab5n`az<ݼ΢΢,bݑ~]fCNf@cTA|Pt I1ݴ2SSHw֋@/U`ZܯrW1;&;%s'uZ73y:`wo0P=s㿻ݛ-<湺ɭoinT xupNt`5ԙ99Q= is*Q}pū~cm;&YdGo@]Q%k>wdC9:vP@ˇ>qW%O£h7sd_9 e!'p*op M X S/r-޾N]QqNuHYoY ȊMr:kThQ3J\З>KU|82(|V,w| }LGW+L LN=vؚ C( 2]*BEѠW'H\&9aŐ+,Gz!f&#[es/_|$IhN§P2~7r`Gzg '~Y~F \BX(!?a˿. kG~VS;HTD .31}%q+f>֎hhJ7ĿO*8&{8}aSEWpU)*CK?<-z$zW^&y `4!$ endstream endobj 753 0 obj <> endobj 754 0 obj <>stream HU{T KD**[*PD 6..t~UUyeYhй]ee5/^(Q3L`P0f W1Q $1*&a2u 0vy(Ә %@f-s_ETAU-gn[cL:U]DOYCךM揚Qփ`7wicc?pzwXoE|V +{oP` Z F2\+8Jk5/i_Gȃv'kN'OooD!H9t+Fl*LԍfNn "\E1U{!6[w w+ڷOo;<`C=G-^]rh84*(_t@2m<| 9}ءssOshᙽ SV ΅]&V F^@w œ.r!}vepR{> LV0}h4S^s*ˉ?E kT5-+L$r} T,.{-v z @w0ߑb4gӒ筛Wo?,M5y ɽF %# 2Lc1A׀jcH۬g]m6,LMPYv81 !~6D4fbLV>34$h#ư`DtBO ᤧ< sy=K񱋋Kk& {w?@g1)UV~cߙugzv\`PW(!֙!4څfxh4À 0 :Ӣ7dZ)O! yr9rFY8嶘zhn4-PÙwjz+-e +}8-[x++[Yި=n<϶8koq(t-R'#dwǷ 4#|/+NFvp&=,ICFoa&c H?=0i1M?s?LaשWh+Mq [?1 3D#{R2o( S[g?}B~7ݞ܈A,'}&yxn KNS1 Cqgu b0d)$X],۠ߠNhhIܧ?y$%셒Aez(CY˯h^X(Hi ذԜmB_LE//C/=ua.BqUD4KNP4/4.  (r,o0|%p ?{xztaU!sJ V0x<L$5oS꺴乩Z+”$x_ru˩ӗ[?}}1A#L"ȣ8+)9,)>D|@N!˩'rҦAGBۼ&ćLJgCW8b\[vW Vd񓈚Ό;RGc0ddAHE-Ipm  zgl& hI2>ɥ I6bU(H~+צ'=HW(.17*3-_3 h*,DcFR~KJ|Ju@d/N*o}wg1JIa &=A`,}k:6GəU` >9 9`H=b{p䫅NdT57T_)jG' ipz~q],LdG][~23ywFW^?P?*s>ALLفj4S7Sn;x‡ra6E^?NY[Tj4RV:qP/"nf=//),4+ks]a[ҫWn&?Hz祢KN656W<8Ձ v;1%|w^b ?'>œ{@b!L&,xpAD v =U~٫7&55!ҎQ_~]TzK>,g wF3&"XDe̶g]'ت1P. Kz55Zy0d8pM-N'ĸFn_|ȶ0݃MۈxFl85}\NĉKkhXn`/}(K#>f]&vt2$&x5A!kS= o?dћލv&J?%|+ 4U Iu>_'k-a0CVvK==ȇAH@"H*jMqrkzz7N MtKpnʞQ5ß !P8,G 1vqa&ƍa} ̸^FOrpHuBzmh9Ț&L] HnT qyN|>!4F(!Rd(v>K8,,JVU^))+PvRoK]+#0vpc" ĺ[g(3v[_DUQLY4ULD]}boԵ5VߓvM&[I&zwK06a4G p38mfPXo c!@Ʊ-FM7ق#fh8Ge:=@F^˒r 9+Sh?B=$m˳rdKp硒r5Vd_yoZY,_noH{auu{5lnlr6صO&}w!/7_O_ 8yeөK3@pJuPRǼnܴPy ZQ!5ZLQ;zS` 8=M=u Ʈ3=C}gJxw?3 C Kqm5Okcr>m~g7Hc Io(7&*{Ӌ1 [& -f83qJ}ӕ[m.pYMɠVш>ndtiRK=JcJbTáI H;B@ [k^cKq쒷h' 28'g6K,17Ha@?=7ڪu;qgoΨG ^X?yt02闡 r9ei| DLCf>bh+n%RQʰ\9ظG`9UBf +ƫfWI/<#`Ţ/hD;!( KhIm36w ',V(uw=]9&$&L@ZE endstream endobj 755 0 obj <> endobj 756 0 obj <>stream Hbd`ad`ddqw v,LuIL [f!CG_լr > endobj 758 0 obj <>stream HTOOHQvdijԷl.[ETMY\wNx \P谇$P`E؃N!m 8 bsuZ[Mw=d_O=, :=7*xmUeI43N3vc9Kg4ˏh-E;;.*0W _Қg闂*Zh\TFsAP2EKÂ}KZ4x%r5 aD"t-E!G36v3= ALL~k|K;kvxK/]mAv4?qdx̸7O:340 Q+U쭆!Hr=yi.i&sï LPgWn~Jm?gw!`tZ//$ endstream endobj 759 0 obj <> endobj 760 0 obj <>stream Hbd`ab`ddqwvv,LuIL f!CGLi-sH/'־@iu |7#h`d``_RY_T_XQRZZTl70200)e`:AgS7K7OYl,Wl@ O ;Fߴ4HE 9gi?qP3@@Ւ$H,!P͠TȠ $3eԌΓ+l`C0A2 5F`P= >*(~8*)1| endstream endobj 761 0 obj <> endobj 762 0 obj <>stream HlW}l{pپlw&.Q |&KRCk#!0$!mڦ!HQI=JR%U*UQ{j!I?sUH@vlcC}]Tnf7f~{Pէ\؆5 7lճ}mxoMĵsj x/G{ʯqeSYWuд%پgή]ɶ%{z:u$woiI޶-z;z;v>PTPRJhJWYJ(e!V1^bVs}#?[;:vݵ{UOJUy -]U윳rfͬn}aoJ^0C)7L*%vZE_'V\T1!”!gMRMjtNCVUuʅ0TT̴BE-u{l&IjGRS5 "]Z$Blgۈ^tJI-ai e,-!(׎Uhw.-;bi1-CFOQ-chXytsDcjGpĖLZE#kM.4MA>ćSL)_|q~Ùn.Tq Xc1R0sasgTt#P ^jsxi%d boU>N"0]IV)i3rk+(. zgkvt{18C }=bNC8~7+D, ãJ*#TB2]@; s5d+BTow;|[N_HFy`FMꙧg2$~gZl]Y.hJ$a(G@*Om;T'lw4ap3 ;GMi?:(?@Sׇ "+tgW%0ϥkx,VT~ῲ0ui):T%@ۋN#09 X34{_Xs9 M =0]U ]HV-hLLt%!&Dw1CBi⦔XeJh'~?n"69gg(qwtAp1#<<~]/:jmovK?iL)Nb~ΟE6 J&8"H`!~%0znX E pz77F}{{4=M~H0q i'z%>Yh;(6dhAĎ탡L?ʄ8HK.m !5A'^1hϡ8;[]ץi(:CJ9/kgT(#,㻂[Z^a qV;qNɼ=yh; |8]/DzOC%N vӤzܾ}Aҥ۟&IN)j Rd#ݩMwִ+o9;y#tdm}Qy+n6i7,ƴ)_>qcQsQ f[iZQ{n=>߇sŁ]akȳ󢲸 #d#ֻ^x< B=嬗fDrZ T9^cHꑨ!@ܽ'::̛sQp>NhDww6v/>yM_2sիg8f-SwYܔ bI W{l9oCRT3ӵ^py>w. maJ䛳E׍g v,'YU379[ޙƶ1kC,NjCs1gaTd n%ⲀYMw6uA$ܮOMmIFDZp'Pr+M뢴6ܝh&.\qxqZB{J)S,aE 37ƃ՘ՁO.et MG%kQCj!%c^cJq˙8˹gN^:D٭{YĽ4'5ă!%gXTW>ɍGIxxwlV_6QnY %4}HaZBIu*%·d'MF=MS FqDUW_jc7;[-uF^ub41B7bkhk)XZđWٌZ-D6ϰlr{Pk Qk™^]Vs%+>Q^vCEV1èwiPQ0Q )qIM2`wskN [x[%4'㇮ {5.qr ܼ+ `#Pe?.ee:}c:T4SXzExLC!P胄^ػ!1b; [kdQ6ps]yS˖=vh.kiu(Rآ_aA^Y W68W'߇OWtp(Pk,fo iɹYz3) gl:90cTib5| ^'ŏy=ml<{×o/g "ݍս_v:z]kXaf̰=1qX+7:Oy_U h Wd+3Mb-Z4ݵk a$5`dwЍ+OTkcOLÚd -ɡb[[|#U"\%VCg@OtȫqC~\ !!bѤ. s*[dq7E UM뭊q$I,΋z-x?2y:7]hJ*!E _N#m|;2(kZkd|SbSڠb@Ik& 4$jTȎI1m&JƑ tF&ƟLI3T=kbqk{'gPGqwOXbzGT cǔUp0|c|r V)_l ZaGazhEef0`2cƙEZV^&M9:'\@8qw޽|ng]BMUJ k%+ër[na<&IH<7Nk<hv@ q1Q\T->fcJە|&Iѡ8^,|[1`60ذ4.EoB)Et2z|b0;?Vl3G+*edJQ iE76̉G3QagJI Qc<#(3]a|բfG+E_0uezcܵWMDڬBDNi8W^ytóTѦ btk1&5MfvR|19*жػfGg5IYo LjH;K]1Z&Q&!rCh͟.ǽy6dǴGg'8q+TkW]ħ"鋉JK{/gHێO NyTN:$:$U'!O77| \AN|qc OvY7#~`I1w(=#򦁇[/=InM| _{"0w0qtSfǀ/QClja0 A'5 0ZnYR]}݁*Q>9M'ÿi|6x^i[_.(}S?CP endstream endobj 763 0 obj <> endobj 764 0 obj <>stream HW{pTg?w'nygl]yG)`EJƢ88&3 AjTKbZ[Պ-8-z7< (-eG,̗;֠_hބwXܲjuKs}SKWWtbK?jQ;;隹{͏ryஇ+[dӜeo Ɣ:]yOk)S&vt$n_uDV'ZVt~y@Qؠ(hn 4D UL"8ALk,}V\ R!S+%ow >Zh/)yYKÕwVM^j\s!JK)Z9c8NMSNHQtIGRL 4d+]T*)Iu3rn%cVEQ4{#T\G_dd۵̗#u@r_1_G߅>W"c?/Q>B)i0Dx! 탐7! AN}rRnc!JtyOf^EOYʴ3YN錨ltWCQ i#6c9=_.dͣA(']w |OWMu2샸#&֟GYobvQpMnNo xPDE62y?!pRBN`t!EdyBaz2lX,DWz^\G rYi p1| zbeL4ͩMGb(Gc0e츎4I``ㄘLwe|.:4|1:1'ApW^Qa `<)،Okts"~ ueih0k`L6(tII-Ǡqh~.&wBB kJgL3/_AFLVӰN#ES ́^ ?A& Gka)9σ`=m㋀rZYf)D4GtxT ̕&J&'c@Ue[1o`GE[U0>+y ޳2ԯ|X~i&7 xM@i 7ߗɴV+ &k:T1QBxjYiu|$5C:0jb䋎veX 5*,Yvf: >-;N,> U>nƭ8B2t/+wH7 =ANSRmAI /1i߅zy7W5tGgvLމQ² p3`\E3pVMmfK4JQA˧k56̀ +i`Ke=ttbf|9:`VZ +7! 0nm)q1M 0WCYe,̵t(4c:d N.:dCG8=>dY-ځ{ygs dv:ͳ$eij,Чv$%u} *f(W7!jvNvuc=m{&VKZ_" b焂ɢt`B }?t{x=̀S%,Z#}sOuB; C_z3 IKpn&(M9 q_̗[l\Wq S:㉰[BpFHI TB RP5RƑC!EPT1n !!zIB8uILI܆DZMj;9{[ ^Μ5g^k)֯H d|r5qSQ)lmیQp=oH- k/Yel8KN !N>$[L+hщks_PeX5oM*'C%z?iv"# EM0hAh*Ske e-ro K6.s.^8fsؐ>FpExL?O9flxʓ{Y"r/F /{C+KׄeGY!vTl'|r^KTV=?tdC%>?efٖAQ;_ƶM@A+<@W#Gj5bjմe%֟BjOG7bT= &8)fo7e&(]$߳5 JV8E#2*.?ZИ)^YdE'lMsK.&{*Y 9rOx|oQfRf`1_dK sj榔N{?3qูXpvb[ Y*Ӹ/~z\DH5`ujk;]NJ^MIM#LVa58jnU}֙e/`8o }x;~N/ |T8yz2݆KVG`Z4>Ih[lt[>0@9*C"W2}T aPtFY,]rSFhSw w͹B]1NOo`@BDQLX4Ȇ\/&#&!Gr=SG*oǯLI>W,qސ Y\:} ^G+9p eI=%ow H˂  p-7?b|+c$P+0QN;F\S(}yI۾4ʧ_"5>qPG p§N y9$ށo3s²k'W(ɗ֠k1le$cb1*h&׻˄ ?;> endobj 766 0 obj <>stream HlUmPS|ޫлE^]ZNQ]E* (@H17 HPa@/IZDuwLǵ;uf;ζ;Nets~s<' 6># ?MVQ+yJEJ~cP}?Iz nyݺG;֮{ a6`[m öcX< E8h,}C,00<4 Ixr݈7""|#͑%r9< 7/E!SHy|gWYuuꑨ(SXWb&B˙0# 4%6G4 G$¿ Ho) [# K ( %|I(mFf Lu) ghdA>{Gw8%Hod3tɾDIUZ!'K? h|Ǚ8I P?nٷ J\SWU oUsվ'=}t;*W+d/8j,Adir%CFWp]kMuty* !pt+:V2spuw/V]fϩ ۅwy>}TRs|%o⪜5>F,ɕg Sy`Ƃ̈yc .k8Yo@A ȗ[%B)חsQJͮ;kolubh JVsNx $b,E8 bh u]8pT)Aq^Δw ۄ#"AoC`5]i)I]ʜ:FghoNotvΦk70}^"CGv$Uj6ZvE<Rм9xv36΍w7='vX)njW $?͘%gvtt9'DJtN%2h QlT-RASx!Fx^KhX"PTD̒jV :wH wۂ`ǢsvUєEMx󊻹A2w̵:J"<ۻN>q_V(7j iPJ18_$lQ2NM s{tȺI<>\v":Q[$"NiTf'ϿfP)/eKyee+nɹC %1n|= D{u6sk@%ڹNmר<f%؆S šn ^!ɓï'ټav8+ ^g lO_odkFԚJ.2e NϼrSzdeA7Odz(7wO3 a8~uoCi$ mqD-6moQ1p 2knH'w.y5LeR.@yɰK ثe#n$m).Kg)`_ E=K/aé]BRL+QW a#q*Vdُ X=~ʶ&'>(+! sʞ/J?lƇC\Doh9[{5XjkꪋF0G8]x ゃ8bn 79HGCg5\./a` .ǎ؟V!vN&JKٜ1p?àJ{)]ow -_C[ЏKi 2e,QY251Kv.x:s}{} O;`1NB=Snv:xhuׁ_€=GSW4Ԅ'܎Lg`f&zsSu4%`{uk}3cwENZ#d=ӫ[wڴކxcPݢ>k';~r|l iMŷ5Abw5UՊ{#rrDwD oV(Bn8Uy2 MG1|LGjB2yEYtfdU3I9vk5qxA& eN@} {58zTNbw  %@ _ =qePNnR4͋[`V|i.E7qigۦTy>~ `)z+$|^Y3'KzPd^~ 3j9*~_?o0(@_eh+y@ꦫEpgqqZ7!VCWQ%YxFS/NzѐcQI*)BϏS0@p-NB܅N~i;O-4=8k*U|A6w7T4J HD^EjHVuM5_;@Zf֑fC7}- ς{6t=QuF>&D}l,˩i8 gR9[JpsHk\ 7 y?3 ۯW\]:t+s3+K@b\eΞp\']jZ<{~9ź4swh%8}FuK=",yRӣIGkYKe1Ct!K!F/gr钬 ѱ Ch7ۥ˝VpD{hW=ѧS M)+;Xާ٫WiuM4#] endstream endobj 767 0 obj <> endobj 768 0 obj <>stream Ht{TWǃ2Eaq9ucuZ|- V--D@B#b^*bxX>UA9]N ]Ks_{;3{{ g[6޵iœBm#y#qҽbiqHsŰU'2ͫyco  \L,,0`Z E^+^qeũ36#2󍙵SU'ȯ7TDl?Oʚb| _'L${ΟknιO GH*179rM G$ A7 )  !Q $o!ܿ1@ g؋@)YB čjh&piVQv,awu-$= 6,+Ú!<?FUN>pQPt#YSQE{[)6żv%W ; q9`QCR1(;/m5&+4s΄XR\zbWN-59wow@(T|>c0;zXUdddeNA1xF %`Vb;f5z uXʜ.?z@JYr˱ҏOX"K8F~CQBmR^2RpU [Do(`JVȖ3<շˮ>7; -YGJsۨ1w8lmnk1kFMRL)?+41eb2fmB>5x|Gѿvfȴ( :ؠ.˧էR+Н6OH}_W{ 6^Mdꛛlmzc`}tZQ"ceӡLCjV4>@6R7 2AWKwy&֡ͩڃ.;%M)Uilvn(Hb˚6t2i]WU{lV'z@Y߸=ps $`ϵÙ}Lm4 &A^` *6M?"ťGPq+wHXstjnT@B,n1GSpB§.o9q$TIpZjFjYHȳUla} U zqoKU7d_d{۷Rgy)(b˚7\8pC=J / vBx^!p}y1m? ?%{,>m`T/ vrO!ΩQE`lT C\K]DAp"߰QϽGVLFD}xXǕ2G"V[[ RI]ww]}rbciF4c!լ:X:8L_b9>Qd}Rr2lp[ꎡ_| ;PA4.-jbէe"*"/2ҜKcj2vQOIXR}?ZmwrW?yZ[ٺغoR1%jyL\vi)ARV&MA_Yûa ]~& ߸¨pP8|><2Ehf (LzҒGg+jj-=wzYMCqgč`y};lؠ~5PrQe27d6(u6GpYyY{ʳq|e^KaQ"f%Rá}º"N(vꃆ++&nY z8Y:+J<*nCf=d+i S )Ii %vl'S][|IVaV}_Z+Kd8U;C2-$M)ӎy2x7Ǡ$C]X/'6HJ,7H9Gh؅Ǻ%t(K6N84@yS3j^&UWsPw(PalpPptUr'~AR$W#V(M:\wZ.ZGSh 'Q_4"IыZ\bn4^:f{ )Eʠ 灓j?Rętջݙt&R7ql[cxhf:,J8qVt+9&e~Zu7Sm(@b"BЮWqzX~^h֜\_(4786ǂ3i+_6?lq9ض51lzOn12eԅOfU,Sٲ_;՞`L%5<@̥&1U9!eb+Z[Sm15U?l+*/Ser@<|SgQm/&tnJME(7wNYG/^3.*|he@F֡ I?LݎL, ŧ|9W[V+jOs[i%m;Mjh f4NQ*X28'᛹K6M4ko؄x&'%\bި*ygj̗~l?|Tu!_!?KlY,5I7"~ZC]ay,okAɟ/) ϙσj2Rݛ'z6gS]={;W} {~Nh;|Typջjp×F!O- JSnttmGD?h1I礜UAz)IY[V 4llI\4]7p}P-W3o 5)q*-96A\‰q X/bC`БL>Zd=wj/8hBy@]4Ykפ6Y+3T&qi+h*QapШKCpĩTx4‰o7Nl91Uۮ?п-Sq(mRͧQ]|Z>H $)05R@[[*NV\&8u@]bVWeGXC.#9 =>ȼZS諺E샀{ȓ3"Q;^ЏV#<7LVGUV\}I.߯ a k"Y? vC)m*kVv>`[.Y6A!bpzցa泬Ww(eyJQvNP+#V]޾q·6Gw4 _> Rw!8Su&R(\d2{c[6[tI(NOޫsKHuL"?/ >@,^<C;H,Ȼ *\D|JʻQ=b7\@0Oh.s؝;J`i'PMH|C7OIH' jt3b-6={X%"uf#" endstream endobj 769 0 obj <> endobj 770 0 obj <>stream HtS{L["}jtoAԸ_:x_¦>K|v#{P1:A?suBCQ)nÙ[_m\kdMך7an}$g+@ ]}#6o;) ޷F=0q` |~ s^cto+,Gt'c$2эF<@"A#1Ɨn1IE9qz|HRw;^"~IJ*SK \_r:msY[Vx~&ģLnѰýR+E S<*xɴe{QT}CkdZDEmsUYTNV=|:ypȦn3***IU Leէ(bbȤҏG6}V,9BBFt6CKr?13F]IO\Bff~EpQ;G?:;? kYb☿#/ ״;TZ.9>NHC in$J麓LPsfM A|[7DȐ3;B?3ӢqT& N' ]HM7ա`Kr4NU+s1\PkZu% v"OeM\Ti6ҩbb)xɻZxkW'ҜWvPv< nt^&1a#%,oSugjiIn=0F^w a:Y6eH(˔bN)#j/Z[02 |u kf⬒̈MϺv9$ M;>Dn#Wr:I2gٜkE`>MU³1 C^}/[;ϕs>wb??\4CZ$!n]E- o+Ouq@eMR$_M_f|$fU˲$R kBڔg(b*ԩPk;kӳM4{!FF8ƜƩ;>;[a0Sv<:q h～Fp>ȉ]S>&-b:tuO"d7)[Yr}Db~hCvv#4BG'S@$b| ,CF> c} endstream endobj 771 0 obj <> endobj 772 0 obj <>stream HlW{PT?\v܍3N֘Lc3NUĊ6N1tۉMG'MZ#5.ֈ5nY*wә3߹;sM"0b+W4.[Umcm[v47-i҄P14mPY^qWrg~ɍ“}E+0 )0,[ڶmg sέXֲbM[TRGgdM!*2h&Q=D-ˢh5M'vW6D[b=aSSsK-[;?ΟSX|DOdz~aww;{vn]+ w4=Y, *|:_(mۜMg~`z eQDkYE{^ &exFxA,ɼ4N8&se11Pa̾&sl{x)9OD9Kb4i2ȥT.8122 XV)"sBV6./Hud{ǩ*)M98":fpobnH|lZ'L3]LΰOL%_ap̗/~TK2-gsqeuc{%aw<1܀WRVx|*~$ā2Әm;[NF^ʏYp#g:f+7З~18ID6D5܉⪧|wN4Oى=*Y06Ǻ|lۻ|0>-r&V!\l!:ܮ8'1##0'%,?^l?a23@;*'kpH\܍r `")5 {m|6YTc:~SH=8_%0&:z2i^R1]'4EXɋ3r6nZ;zyq"GS]7'uDe~]>R@ׇ14u}fЫL7$Bq$pJBoCu U@v 0DY΢R|M"E`ybH;$l;ps>EQT~$QV㒅0 62Y@bP|Z8$y(U")kÎ\|j?ֿ2\o)ens{ߎIv TNA>aUWh"~D~Q ت+ӁCs_h1^q!XHYǬ⾱`e^c &Pכ ^-6M˗;w`r΂`po$Иs+y$KN#G#y1DtҟԬ:ҨB`85~dXGՂ"k QSqYBزJj0: ]@:`zL2i <_UӃPGuύdiI̔/At/{+bF:z2 `cYXV,Rַ?Du3 8v G)qyP\SpP1;h{2FA3(xKaTB͟B8rf##O*>p4ډ^ +bqT]! qAS;7cBbYKaAu' ]…b`fhۢTK%bo3}ocreIbURvq `blmQ&Lyeizf}C+70-E gJ"YΏM/Od #e̪ͨ|*@l3jaZdFߔY [=>h-õi*J.9E))/TcS-CBʳlqR)-\GK&C}lf7!oW'.<>07aL( TǺڥæ'~`'STY~eeǐ+7>>&r9*O1_0^!G/*IzM[06jn2(7NaU>(qS.q++NG"RMYC`C-5Kq㰴olԄN>y딵@p)mqiu4D4[Ea7 GG)X/IliGY<||Q=Cwqߏ> TA +G V #5r6%NLLmrQW0z2`N@BpFj9M\5}]P5jDC*ZSx@=YeWEA}HK<Ȇ)-DB֮](On0νp>֨~4o58wI~c ..GAЖgP*dhX8*Ĩ5""C&/Dz"`045&&DcԘ61H2ф/QN"Z[*en3rf9n_z$p^Gq$if[EcfA!4u8O 9h堿4c麅%{ { )P >2*i(,KJB.?x߹~ёx#v`v7;$ U`WnOS2C"$P%h&p7iWFI G(a7-jJP?Yp%,ˠq 4xy;d'I +K*`,^-`pˑ'Fjv~b]&l#0oQf f&l;N~50\ݴ3Q,1&( KqmgVc~ 4ƃy=Syo.ʜə<-:ZPzK 8өEIxzٓNqJUQӂF:^ށv sAJ /Pv2UEje~Y^mĆ` sljmI:k~>Pڏt8os%qZQ_u{*a׀/MW$%98]VD79K){ZU`d )dYa^ DVϾ$]A >G pgXwd_.JV+aSZ!' Ñu Tq1q"Nw3 |·jZE.I8ͿrjK`)h&ZDTrM8r7{39E ͞%8BL/op:f6c [4ߍ(CҪ 5Ieh@PS*7YV<~Ÿ1]\Os3mא<]v059i y LeZ{OWl 1ɺJl~ {J?T&vT G51@{ǟ=G8r\7#?P y ('|>pD _ADbjCۗgtf=++GIJfITl]4~j _&/Ə,Uq ӷV*a׉ċw#ԧ{W\>"߻EsuA .jFAFU($QiA'Û]Rjk0Y_R\aԹ8'݀WY |N0A G ,1?$ NU.m(*H7 ]{bwzL }}Ɨ}ATz!701(ɶ}FD :BKsXňeZ紝NS/x!],Q[HD-.{ۋ/ǃ6$%=Syv}h8YOm?yo5hFZ a>RbJ%% G`| #(̛,/E@6.$7%c.i_t|VQT']efq{ҍ-dHd[$mD;0Xi4{cy<  l 6կ<|qmGyOl^2'#6kIHLl'q3aQO/̈́CL[b5ͲI9\{1ARn|Imp\qpSjb^5$Y SޅдUd?upa_~[d2>DefIb ͤ(.aEI Vb&8>/c'doVlP C-t*CxCJr;/ٝqKݱW2> endobj 774 0 obj <>stream HtW}pTW?o&|,.IHmR[(45cmP@UphqZa0ּT*igY2ByK-TR!҅@PZ)ݐܽ{'ey0`dvҹs-lm> [£~c!gTFdUU!%7Kdh`4Rjej{^B\nϡIvg 8y_)ZͅJ|?)*kF"^жY7*WWU>rԼ 0g o׭{wў`C~}=S*dLLlbcz 3MM7LĔ)TSm$ɴԑofbjyzUvcOQbT[pcf~#2w{f'/9"\)e Yk%v L.2澔Dʖpx^}4 G/[ey|<;mªPL>~'c-9xv.0_9b,P81-1rs#7>gdzd*$# ߉^2׍}I-jf)^?X g%0Unr%`3.?ST _!v"5Q.ۖ]WPP '| B2'e \co*|Hڃl]rCB1}Q yfܷy1BjI42ta6EB"xąuy;ߎtSc6f1(>Oaꘑ̷l6tA (6]7Qx)LEUcmI@`]X4 l׉.,|!=oUY?},b22Y#sb*ap+f##8g:3,_Ǭ64[?yH10z/(Q'pΗu^;L& Y#R ꘑpr..^B!O=L+1-e~eAA<1Ke)WJl0w ^֪;>T]# ০&|/W\ ܔg;1eb֏#I߅iف>5,SR&:?*T5< q!10W JH u\T9 /=.O~b*)PaAY(zkaZ Vy b"C(GNAŻ0lHiSXU /B] ɸ@OFN96(,2&wK ylj"ɈLLIni`>(a|,s$jd&¼ 4MepN4 O ໩ <0/^X1"1-O+3OB.RK|LWƴŀ;HՒ}$H~ *r!1Q6dV:E b?7ICFg /bzQ/%R8B8K:f:61ǴKR'j-(qkBXʖ¾;Th ФjU^QڭtDM:^viq 7 &PMOPc\c:8~fe/\va" PfI(DFKLhPؤVT%Z 1 r R(;òv۝gv~;3=ym6l @}:zl\"RȎ6X\~06HFEAM'vy4;/ 4, ҋG3<ʋWXNkJ,vU'ٍa 0{j6J&^k:0&rxll@7hZj9L&*2By`f $_ cOqZ``E4 _HhaB9<;JbE"Z'|3B6%1/m687X^ˍMTLWELQ@LxMFuT=lWGIx*6dE<(#JMY63$[U_N_A :yZ[%[b'Dc\K=F5([Ֆхɽi`cNuƤ|g+ZP_ڕG6|+;]ȼ`$f+POmʻQA7|)-'5p%Kka̵봣fonNVӅ÷"MVI/B/|je4wXx#@+ڝk@ruϰBkb'X{@>GddCy+쀈+&l0_sF/2QGseȘS-+M탮7?%Vp;+73Xjd57(8J\œf kUSfX91ZAWNƾPnsa 6ZWQDw, >c.<AԿ=)^{HFY975w.h*+z b6CftiR+IQH@~NY5[ g ?TS %CUc>VU,Yc*ԚdÜQR5g)N  yv>Uof2)jma{*͖Tj//ƙڧCs7HNI ~0|CvGQ#̹6ĴCzf?Ӛlկ5N'`o (V^UQ BRֳv} wlUX;#|im}^ dcJ_.m ݔI̼Ik$w\,˿bYW*.Swy5iQ YoHvNuӣ{+-0bpMlԜ BQ'"/ Lu.qX|kY\_{Ķnp\lC6 J3W֌3\K5Te,Fk#WUD-Dx&5> u!'ŧ<4{{ d}qm?e(/w*UikeGPM #LӁٯ9w\uK T6SKY G!%s5U0Ұ3UJJ uBfӘl gW]}+MjnUrZr8׈xrֽÛW ~)+s8=~aq}ºbF@fo]_٣{u Kp)}*BkpL*ejJ" ~A[23/;i&M<2|q#f>LxTmQ5+Ui2:yC贁]8[TQl%ߤ `:cy6Ͼ)>x@N>o%`]MFV`2!Edё$ Xg?mp2^%ӁD<ٔZcz"z܅'.3YRT3pt;w^]OPPmcI PF͋Tf+h?e#Y9n,؛j3keJGŁg.t }ehpIM1 UŹ<%E썈>ӛ۬ { f.uF8cOX~P鼉Zϖ}2S~<_Ɨ'99o BD9jqѫ@F~< |.&nD\qtA869nQe)Z HPK Ž@+QOi\y&LDJ2sk{g3V'Y&qr,k &P:0Jɧ%=:R<Jχ/DfK@D/*I}.'N:Jf_ 3ȲD (p {S)0mo2DG <@8 r&| {~-G Ca1u,V$ dXfϽlLLR͆wBݗ+NIgHRh3հ$Y? ;qByD3ގNJK}nK㥰!#NHG+Tvcr_6Y, vcNxCmz-jm 'F)AX77_%*:eDJB)O&7\75ezv_/W0Ϣ7qZ rtqx #}߄Ehȥ6 F:Ƌs64n wRLY eB\)O1hap׹z׭Nx1 XYy~c@MAz%4x]j&V#U斫bʖ{`|'TbƵ:6II%ׯVq~q_\^5=I#oKAsxF3 WVCG.MGg--# endstream endobj 56 0 obj <> endobj 57 0 obj <> endobj 58 0 obj <> endobj 59 0 obj <> endobj 60 0 obj <> endobj 61 0 obj <> endobj 62 0 obj <> endobj 63 0 obj <> endobj 64 0 obj <> endobj 207 0 obj <> endobj 329 0 obj <> endobj 330 0 obj <> endobj 351 0 obj <> endobj 519 0 obj <> endobj 520 0 obj <> endobj 775 0 obj <> endobj 777 0 obj <> endobj 779 0 obj <> endobj 781 0 obj <> endobj 783 0 obj <> endobj 785 0 obj <> endobj 787 0 obj <> endobj 789 0 obj <> endobj 791 0 obj <> endobj 793 0 obj <> endobj 795 0 obj <> endobj 776 0 obj <>stream HTMo0 ;@hR>ntH#Dg']!A8f~ŏ3t55O,: _=R >\FP*I_iqY=-{ pv 3h0%uO퀐]z8<̳Z'T]4_Kqg듸SU@\E,0 Q/^GW20 \d [ %/׬1=#q$⢈–s1 1  *SRB}$HCFVƴ#quݱ&UXC4Ϳk>{O} W$;["7:nɷ7 endstream endobj 778 0 obj <>stream HTMo0 >v!!H>`:@smH'ch GhZS;^[ _) Oahw lAWWkfAfvhFPPcY!?ٿ"ȰO&}U2WB c˘Q5S9ObQB b!haEVX$%E73b3U\ԏ XWk/Tb*E- E!f JywkVvւ8O$c;\edkq۶~pe ә endstream endobj 780 0 obj <>stream HTMo0 ;@H)BUaZi0QٸV$ȓ7&&\m[ێpǡ?ypck!nxM_UBJޝmz( ag=N|oF# s?ءAAYBM^*Zu쿥!>stream HTn0E|,SeBjEʢ5I=HX,i"˘xM7Au hpu ጗@4ꥅq~ow'wţb<@4\`qLO$~af4QyEߩ"d=c G+:i."K4\Ts>$Xgׁe2pIfbzw_xkhQv#DyrP6EأfKB\I/Tu I`:!quußo63x`|G " endstream endobj 784 0 obj <>stream HTQMo0 Wة*ib>v`QCu ϲ:<L?|s> moӸ8p7'z^O᫇ڂ$:8L;RBSq6mt5z)q\ %4 Y=otI85'[ktTvE h53 " BS*@`\xWw Hgg9ԔJ'VK9 oϔ yʎ;?wpL/ΑaQ-SoK;Zoŷh endstream endobj 786 0 obj <>stream HTMo0 ;i%4>vtH#Dg]!;jl?z ]oi<{pSo!IzWE4㰳u7f}x2 ޞ`qH?H؟ 14 "yjs; ?ٿSCH8 N[{BӸz7LRl}$Kq.gI` ępƼ^pleZx͌ĕL%_]?ꬠEH;) lLK *esَ}]fs{Fǥ7`V endstream endobj 788 0 obj <>stream HTQMo0 WةHk5>F$]!%yy35t77NvF;)3^:iSvK q¾1U;]a iL:3X/L@]Ɩݳ/GCǫE==c8ZIsA cXqnէt,f& ZɀW[<`:(eH"~4c*> p0^>=e gEDO'cC~wY,fuž˓[ endstream endobj 790 0 obj <>stream HTPj0 +tlOm,dE6svnH ==ޓ{EMGq  V`[Wt:G:<4o #{(qx?T{/l;i/!|ǓzBؿy f[6ȚFj~|jMU)ՊM3+vad\_,dqGx{P!k sk endstream endobj 792 0 obj <>stream HTPj0 +tO;h)n,d6svnH ==ޓݷFuz gWJ:]zTx"wql]Li[[ ul+ 9E4`g|wTF K_F)(܀PVЙgθ[mJ!e:ͬ|ÈrŭNjY+'`l endstream endobj 794 0 obj <>stream HTKO0 >w RU 6&ClpRwTiv{x K4_DzkW?8'ox-$)/5C ɻ4㰵U7f}x$_7}o'Ա;9bkhSq̀;?;4G*knжm#L9tJRA8KSPU@5s+&.$.u^w)`J"I^+O2N y|ÿg-=4{hYHN:قwYʖeyY{9yO ԁ+[7:>p~շ@y endstream endobj 796 0 obj <>stream HTMo0 >vR)41UaZib:@mH$O8+'In55/L4¨ABŇ8aJ䝒ox rWowcqh'HaHƽ4=B7w9ld08FoAt jCZ?'XqngEܙ4 i""WE&> endobj 68 0 obj <> endobj 109 0 obj <> endobj 151 0 obj <> endobj 208 0 obj <> endobj 280 0 obj <> endobj 331 0 obj <> endobj 352 0 obj <> endobj 432 0 obj <> endobj 521 0 obj <> endobj 643 0 obj <> endobj 797 0 obj <> endobj 798 0 obj <> endobj 67 0 obj <> endobj 739 0 obj <> endobj 738 0 obj <> endobj 733 0 obj <> endobj 731 0 obj <> endobj 728 0 obj <> endobj 726 0 obj <> endobj 723 0 obj <> endobj 721 0 obj <> endobj 718 0 obj <> endobj 716 0 obj <> endobj 713 0 obj <> endobj 711 0 obj <> endobj 708 0 obj <> endobj 706 0 obj <> endobj 703 0 obj <> endobj 701 0 obj <> endobj 698 0 obj <> endobj 696 0 obj <> endobj 693 0 obj <> endobj 691 0 obj <> endobj 688 0 obj <> endobj 686 0 obj <> endobj 683 0 obj <> endobj 681 0 obj <> endobj 678 0 obj <> endobj 676 0 obj <> endobj 673 0 obj <> endobj 671 0 obj <> endobj 668 0 obj <> endobj 666 0 obj <> endobj 663 0 obj <> endobj 661 0 obj <> endobj 658 0 obj <> endobj 656 0 obj <> endobj 654 0 obj <> endobj 652 0 obj <> endobj 650 0 obj <> endobj 648 0 obj <> endobj 646 0 obj <> endobj 644 0 obj <> endobj 637 0 obj <> endobj 635 0 obj <> endobj 632 0 obj <> endobj 630 0 obj <> endobj 627 0 obj <> endobj 625 0 obj <> endobj 622 0 obj <> endobj 620 0 obj <> endobj 618 0 obj <> endobj 616 0 obj <> endobj 614 0 obj <> endobj 612 0 obj <> endobj 610 0 obj <> endobj 607 0 obj <> endobj 605 0 obj <> endobj 602 0 obj <> endobj 600 0 obj <> endobj 597 0 obj <> endobj 595 0 obj <> endobj 592 0 obj <> endobj 590 0 obj <> endobj 587 0 obj <> endobj 585 0 obj <> endobj 582 0 obj <> endobj 580 0 obj <> endobj 577 0 obj <> endobj 575 0 obj <> endobj 573 0 obj <> endobj 571 0 obj <> endobj 569 0 obj <> endobj 567 0 obj <> endobj 564 0 obj <> endobj 562 0 obj <> endobj 559 0 obj <> endobj 557 0 obj <> endobj 554 0 obj <> endobj 552 0 obj <> endobj 550 0 obj <> endobj 548 0 obj <> endobj 546 0 obj <> endobj 543 0 obj <> endobj 541 0 obj <> endobj 538 0 obj <> endobj 536 0 obj <> endobj 533 0 obj <> endobj 531 0 obj <> endobj 528 0 obj <> endobj 526 0 obj <> endobj 524 0 obj <> endobj 522 0 obj <> endobj 513 0 obj <> endobj 511 0 obj <> endobj 499 0 obj <> endobj 497 0 obj <> endobj 494 0 obj <> endobj 492 0 obj <> endobj 489 0 obj <> endobj 487 0 obj <> endobj 484 0 obj <> endobj 482 0 obj <> endobj 480 0 obj <> endobj 478 0 obj <> endobj 476 0 obj <> endobj 473 0 obj <> endobj 471 0 obj <> endobj 468 0 obj <> endobj 466 0 obj <> endobj 463 0 obj <> endobj 461 0 obj <> endobj 459 0 obj <> endobj 457 0 obj <> endobj 455 0 obj <> endobj 452 0 obj <> endobj 450 0 obj <> endobj 447 0 obj <> endobj 445 0 obj <> endobj 443 0 obj <> endobj 441 0 obj <> endobj 439 0 obj <> endobj 437 0 obj <> endobj 435 0 obj <> endobj 433 0 obj <> endobj 426 0 obj <> endobj 424 0 obj <> endobj 422 0 obj <> endobj 420 0 obj <> endobj 418 0 obj <> endobj 416 0 obj <> endobj 413 0 obj <> endobj 411 0 obj <> endobj 408 0 obj <> endobj 406 0 obj <> endobj 403 0 obj <> endobj 401 0 obj <> endobj 399 0 obj <> endobj 397 0 obj <> endobj 395 0 obj <> endobj 392 0 obj <> endobj 390 0 obj <> endobj 387 0 obj <> endobj 385 0 obj <> endobj 382 0 obj <> endobj 380 0 obj <> endobj 377 0 obj <> endobj 375 0 obj <> endobj 373 0 obj <> endobj 371 0 obj <> endobj 369 0 obj <> endobj 367 0 obj <> endobj 365 0 obj <> endobj 363 0 obj <> endobj 361 0 obj <> endobj 359 0 obj <> endobj 357 0 obj <> endobj 355 0 obj <> endobj 353 0 obj <> endobj 346 0 obj <><><><><><><><><><><>]/Pg 331 0 R>> endobj 344 0 obj <> endobj 342 0 obj <> endobj 340 0 obj <> endobj 338 0 obj <> endobj 336 0 obj <> endobj 334 0 obj <> endobj 332 0 obj <> endobj 324 0 obj <> endobj 322 0 obj <> endobj 320 0 obj <> endobj 318 0 obj <> endobj 316 0 obj <><><>]/Pg 280 0 R>> endobj 314 0 obj <> endobj 312 0 obj <> endobj 310 0 obj <> endobj 308 0 obj <> endobj 306 0 obj <> endobj 304 0 obj <> endobj 302 0 obj <> endobj 300 0 obj <> endobj 297 0 obj <> endobj 295 0 obj <> endobj 292 0 obj <> endobj 290 0 obj <> endobj 287 0 obj <> endobj 285 0 obj <> endobj 283 0 obj <> endobj 281 0 obj <> endobj 275 0 obj <> endobj 273 0 obj <> endobj 271 0 obj <> endobj 269 0 obj <> endobj 266 0 obj <> endobj 264 0 obj <> endobj 261 0 obj <> endobj 259 0 obj <> endobj 256 0 obj <> endobj 254 0 obj <> endobj 251 0 obj <> endobj 249 0 obj <> endobj 247 0 obj <> endobj 245 0 obj <> endobj 243 0 obj <> endobj 241 0 obj <> endobj 239 0 obj <> endobj 237 0 obj <> endobj 235 0 obj <> endobj 233 0 obj <> endobj 231 0 obj <> endobj 229 0 obj <> endobj 227 0 obj <> endobj 225 0 obj <> endobj 223 0 obj <> endobj 221 0 obj <> endobj 219 0 obj <> endobj 217 0 obj <> endobj 215 0 obj <> endobj 213 0 obj <> endobj 211 0 obj <> endobj 209 0 obj <> endobj 201 0 obj <> endobj 199 0 obj <> endobj 196 0 obj <><><><><><><><><><><><><><><><><><><><><>]/Pg 151 0 R>> endobj 194 0 obj <> endobj 191 0 obj <> endobj 189 0 obj <> endobj 186 0 obj <> endobj 184 0 obj <> endobj 182 0 obj <> endobj 180 0 obj <> endobj 178 0 obj <> endobj 176 0 obj <> endobj 174 0 obj <> endobj 172 0 obj <> endobj 170 0 obj <> endobj 168 0 obj <> endobj 166 0 obj <> endobj 164 0 obj <> endobj 162 0 obj <> endobj 160 0 obj <> endobj 158 0 obj <> endobj 156 0 obj <> endobj 154 0 obj <> endobj 152 0 obj <> endobj 145 0 obj <> endobj 143 0 obj <> endobj 138 0 obj <> endobj 136 0 obj <> endobj 134 0 obj <> endobj 132 0 obj <> endobj 130 0 obj <> endobj 128 0 obj <> endobj 126 0 obj <> endobj 124 0 obj <> endobj 122 0 obj <> endobj 120 0 obj <> endobj 118 0 obj <> endobj 116 0 obj <> endobj 114 0 obj <> endobj 112 0 obj <> endobj 110 0 obj <> endobj 103 0 obj <> endobj 101 0 obj <> endobj 99 0 obj <> endobj 97 0 obj <> endobj 95 0 obj <> endobj 93 0 obj <> endobj 91 0 obj <><><><><>]/Pg 68 0 R>> endobj 89 0 obj <> endobj 87 0 obj <> endobj 85 0 obj <> endobj 83 0 obj <> endobj 81 0 obj <> endobj 79 0 obj <> endobj 77 0 obj <> endobj 75 0 obj <> endobj 73 0 obj <> endobj 71 0 obj <> endobj 69 0 obj <> endobj 44 0 obj <> endobj 42 0 obj <> endobj 40 0 obj <> endobj 38 0 obj <> endobj 36 0 obj <> endobj 34 0 obj <> endobj 32 0 obj <> endobj 30 0 obj <><><>]/Pg 7 0 R>> endobj 28 0 obj <> endobj 26 0 obj <> endobj 24 0 obj <> endobj 22 0 obj <> endobj 20 0 obj <> endobj 18 0 obj <> endobj 16 0 obj <> endobj 14 0 obj <> endobj 12 0 obj <> endobj 10 0 obj <> endobj 8 0 obj <> endobj 799 0 obj [10 0 R 10 0 R 10 0 R 14 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 22 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 26 0 R 28 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 34 0 R 34 0 R 34 0 R 38 0 R 38 0 R 38 0 R 38 0 R 38 0 R 38 0 R 38 0 R 38 0 R 38 0 R 38 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 40 0 R 44 0 R 44 0 R 46 0 R 47 0 R] endobj 800 0 obj [71 0 R 71 0 R 30 0 R 30 0 R 30 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 73 0 R 75 0 R 75 0 R 75 0 R 75 0 R 75 0 R 75 0 R 75 0 R 75 0 R 75 0 R 75 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 77 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 79 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 81 0 R 83 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 87 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 95 0 R 95 0 R 95 0 R 99 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 105 0 R 106 0 R] endobj 801 0 obj [112 0 R 112 0 R 116 0 R 116 0 R 116 0 R 120 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 122 0 R 124 0 R 124 0 R 124 0 R 124 0 R 124 0 R 124 0 R 124 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 126 0 R 128 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 130 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 132 0 R 134 0 R 134 0 R 134 0 R 136 0 R 136 0 R 136 0 R 136 0 R 136 0 R 136 0 R 136 0 R 136 0 R 136 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 140 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 147 0 R 148 0 R] endobj 802 0 obj [154 0 R 154 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 156 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 160 0 R 162 0 R 164 0 R 164 0 R 164 0 R 164 0 R 164 0 R 164 0 R 164 0 R 164 0 R 164 0 R 164 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 166 0 R 170 0 R 170 0 R 170 0 R 174 0 R 176 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 180 0 R 180 0 R 180 0 R 186 0 R 186 0 R 186 0 R 188 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 191 0 R 191 0 R 191 0 R 193 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 191 0 R 196 0 R 196 0 R 196 0 R 198 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 201 0 R 201 0 R 201 0 R 201 0 R 201 0 R 201 0 R 201 0 R 201 0 R 201 0 R 201 0 R 201 0 R 203 0 R 204 0 R] endobj 803 0 obj [211 0 R 211 0 R 215 0 R 215 0 R 215 0 R 219 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 196 0 R 221 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 223 0 R 225 0 R 227 0 R 227 0 R 227 0 R 227 0 R 227 0 R 229 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 233 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 235 0 R 237 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 239 0 R 241 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 245 0 R 251 0 R 253 0 R 256 0 R 258 0 R 256 0 R 256 0 R 256 0 R 256 0 R 256 0 R 261 0 R 261 0 R 263 0 R 261 0 R 266 0 R 266 0 R 268 0 R 266 0 R 266 0 R 266 0 R 266 0 R 266 0 R 266 0 R 266 0 R 266 0 R 266 0 R 266 0 R 266 0 R 269 0 R 269 0 R 269 0 R 275 0 R 275 0 R 277 0 R 275 0 R] endobj 804 0 obj [283 0 R 283 0 R 287 0 R 287 0 R 289 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 287 0 R 292 0 R 292 0 R 294 0 R 292 0 R 297 0 R 299 0 R 300 0 R 300 0 R 300 0 R 302 0 R 302 0 R 302 0 R 302 0 R 302 0 R 302 0 R 302 0 R 302 0 R 302 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 304 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 306 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 308 0 R 310 0 R 312 0 R 312 0 R 312 0 R 312 0 R 312 0 R 312 0 R 312 0 R 314 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 316 0 R 320 0 R 320 0 R 320 0 R 324 0 R 326 0 R] endobj 805 0 obj [334 0 R 334 0 R 338 0 R 338 0 R 338 0 R 342 0 R 316 0 R 316 0 R 316 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 344 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 348 0 R] endobj 806 0 obj [355 0 R 355 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 346 0 R 357 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 359 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 361 0 R 363 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 369 0 R 371 0 R 371 0 R 371 0 R 377 0 R 377 0 R 379 0 R 377 0 R 377 0 R 377 0 R 382 0 R 382 0 R 384 0 R 382 0 R 387 0 R 387 0 R 389 0 R 387 0 R 387 0 R 387 0 R 392 0 R 392 0 R 394 0 R 392 0 R 392 0 R 392 0 R 395 0 R 395 0 R 395 0 R 395 0 R 395 0 R 395 0 R 395 0 R 397 0 R 397 0 R 403 0 R 403 0 R 405 0 R 403 0 R 403 0 R 403 0 R 408 0 R 408 0 R 410 0 R 408 0 R 408 0 R 408 0 R 413 0 R 413 0 R 415 0 R 413 0 R 413 0 R 413 0 R 418 0 R 418 0 R 418 0 R 422 0 R 426 0 R 426 0 R 426 0 R 426 0 R 426 0 R 426 0 R 426 0 R 426 0 R 426 0 R 428 0 R 429 0 R] endobj 807 0 obj [435 0 R 435 0 R 439 0 R 439 0 R 439 0 R 443 0 R 447 0 R 447 0 R 449 0 R 447 0 R 447 0 R 447 0 R 447 0 R 447 0 R 447 0 R 452 0 R 452 0 R 454 0 R 452 0 R 452 0 R 452 0 R 455 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 463 0 R 463 0 R 465 0 R 463 0 R 463 0 R 463 0 R 463 0 R 463 0 R 463 0 R 463 0 R 468 0 R 468 0 R 470 0 R 468 0 R 468 0 R 468 0 R 468 0 R 468 0 R 468 0 R 468 0 R 473 0 R 473 0 R 475 0 R 473 0 R 473 0 R 473 0 R 473 0 R 473 0 R 473 0 R 476 0 R 478 0 R 478 0 R 478 0 R 478 0 R 478 0 R 478 0 R 484 0 R 484 0 R 484 0 R 486 0 R 484 0 R 484 0 R 484 0 R 489 0 R 489 0 R 489 0 R 491 0 R 489 0 R 489 0 R 489 0 R 489 0 R 489 0 R 494 0 R 494 0 R 494 0 R 496 0 R 494 0 R 494 0 R 499 0 R 499 0 R 499 0 R 501 0 R 499 0 R 499 0 R 499 0 R 499 0 R 502 0 R 513 0 R 513 0 R 513 0 R 513 0 R 513 0 R 513 0 R 513 0 R 513 0 R 513 0 R 513 0 R 513 0 R 515 0 R 516 0 R] endobj 808 0 obj [524 0 R 524 0 R 528 0 R 528 0 R 528 0 R 530 0 R 528 0 R 528 0 R 528 0 R 528 0 R 528 0 R 533 0 R 533 0 R 533 0 R 535 0 R 533 0 R 533 0 R 533 0 R 533 0 R 533 0 R 533 0 R 533 0 R 533 0 R 533 0 R 533 0 R 538 0 R 538 0 R 538 0 R 540 0 R 538 0 R 538 0 R 538 0 R 538 0 R 538 0 R 543 0 R 543 0 R 543 0 R 545 0 R 543 0 R 543 0 R 543 0 R 543 0 R 543 0 R 546 0 R 546 0 R 546 0 R 548 0 R 548 0 R 548 0 R 548 0 R 548 0 R 548 0 R 548 0 R 548 0 R 548 0 R 548 0 R 548 0 R 554 0 R 554 0 R 556 0 R 554 0 R 559 0 R 559 0 R 561 0 R 559 0 R 564 0 R 564 0 R 566 0 R 564 0 R 569 0 R 569 0 R 569 0 R 573 0 R 577 0 R 577 0 R 579 0 R 577 0 R 582 0 R 582 0 R 584 0 R 582 0 R 582 0 R 582 0 R 587 0 R 587 0 R 589 0 R 587 0 R 592 0 R 592 0 R 594 0 R 592 0 R 592 0 R 592 0 R 597 0 R 599 0 R 602 0 R 602 0 R 604 0 R 602 0 R 607 0 R 607 0 R 609 0 R 607 0 R 610 0 R 612 0 R 612 0 R 612 0 R 612 0 R 612 0 R 612 0 R 612 0 R 612 0 R 612 0 R 612 0 R 612 0 R 614 0 R 614 0 R 614 0 R 614 0 R 614 0 R 614 0 R 614 0 R 614 0 R 614 0 R 614 0 R 614 0 R 616 0 R 622 0 R 622 0 R 624 0 R 622 0 R 622 0 R 622 0 R 622 0 R 627 0 R 627 0 R 629 0 R 627 0 R 627 0 R 627 0 R 627 0 R 627 0 R 627 0 R 627 0 R 627 0 R 632 0 R 634 0 R 632 0 R 632 0 R 632 0 R 632 0 R 637 0 R 637 0 R 637 0 R 637 0 R 637 0 R 637 0 R 637 0 R 637 0 R 637 0 R 637 0 R 637 0 R 639 0 R 640 0 R] endobj 809 0 obj [646 0 R 646 0 R 650 0 R 650 0 R 650 0 R 654 0 R 658 0 R 658 0 R 660 0 R 658 0 R 658 0 R 658 0 R 658 0 R 658 0 R 658 0 R 658 0 R 663 0 R 663 0 R 665 0 R 663 0 R 663 0 R 663 0 R 663 0 R 663 0 R 663 0 R 668 0 R 668 0 R 670 0 R 668 0 R 668 0 R 668 0 R 668 0 R 668 0 R 668 0 R 673 0 R 673 0 R 675 0 R 673 0 R 673 0 R 673 0 R 673 0 R 673 0 R 678 0 R 678 0 R 680 0 R 678 0 R 678 0 R 678 0 R 678 0 R 678 0 R 683 0 R 683 0 R 685 0 R 683 0 R 683 0 R 683 0 R 683 0 R 683 0 R 683 0 R 683 0 R 683 0 R 683 0 R 683 0 R 683 0 R 688 0 R 688 0 R 690 0 R 688 0 R 688 0 R 688 0 R 688 0 R 693 0 R 693 0 R 695 0 R 698 0 R 698 0 R 700 0 R 698 0 R 698 0 R 698 0 R 698 0 R 698 0 R 698 0 R 703 0 R 703 0 R 705 0 R 703 0 R 703 0 R 703 0 R 708 0 R 708 0 R 710 0 R 708 0 R 713 0 R 715 0 R 713 0 R 713 0 R 713 0 R 718 0 R 718 0 R 720 0 R 718 0 R 718 0 R 718 0 R 718 0 R 718 0 R 718 0 R 723 0 R 723 0 R 723 0 R 725 0 R 723 0 R 723 0 R 723 0 R 728 0 R 728 0 R 730 0 R 728 0 R 728 0 R 728 0 R 728 0 R 728 0 R 733 0 R 733 0 R 735 0 R 733 0 R 733 0 R 733 0 R 733 0 R 733 0 R 733 0 R] endobj 810 0 obj <> endobj 4 0 obj <>/K 5 0 R>> endobj 811 0 obj << /Dt (D:20191119124906) /JTM (Distiller) >> endobj 812 0 obj /This endobj 813 0 obj << /CP (Distiller) /Fi 812 0 R >> endobj 814 0 obj << /JTF 0 /MB [ 0.000 0.000 603.000 783.000 ]/W [ 0 10 ]>> endobj 815 0 obj << /Fi [ 813 0 R ]/P [ 814 0 R ]>> endobj 816 0 obj << /Dm [ 603.000 783.000 603.000 783.000 ]>> endobj 817 0 obj << /Me 816 0 R >> endobj 818 0 obj << /D [ 815 0 R ]/MS 817 0 R /Type /JobTicketContents >> endobj 819 0 obj << /A [ 811 0 R ]/Cn [ 818 0 R ]/V 1.100 >> endobj 3 0 obj <> endobj 820 0 obj <>stream 2019-11-19T12:48:59-06:00 2019-11-19T12:48:59-06:00 QuarkXPress(R) 14.02 QuarkXPress(R) 14.02 %%DocumentProcessColors: Cyan Magenta Yellow Black %%EndComments Sally Kennedy Layout 1 endstream endobj 1 0 obj <>/QXPr:DeviceNColorants 2 0 R/Lang(en-US)/ViewerPreferences<>>> endobj 2 0 obj <<>> endobj xref 0 821 0000000000 65535 f 0000426939 00000 n 0000427162 00000 n 0000423237 00000 n 0000422588 00000 n 0000201808 00000 n 0000201299 00000 n 0000385691 00000 n 0000410440 00000 n 0000000000 00000 f 0000410389 00000 n 0000000000 00000 f 0000410343 00000 n 0000000000 00000 f 0000410296 00000 n 0000000000 00000 f 0000409990 00000 n 0000000000 00000 f 0000409857 00000 n 0000000000 00000 f 0000409763 00000 n 0000000000 00000 f 0000409715 00000 n 0000000000 00000 f 0000409627 00000 n 0000000000 00000 f 0000409524 00000 n 0000000000 00000 f 0000409476 00000 n 0000000000 00000 f 0000409290 00000 n 0000000000 00000 f 0000409244 00000 n 0000000000 00000 f 0000409186 00000 n 0000000000 00000 f 0000409132 00000 n 0000000000 00000 f 0000409046 00000 n 0000000000 00000 f 0000408912 00000 n 0000000000 00000 f 0000408866 00000 n 0000000000 00000 f 0000408812 00000 n 0000000000 00000 f 0000000016 00000 n 0000000079 00000 n 0000201867 00000 n 0000202449 00000 n 0000204870 00000 n 0000205596 00000 n 0000207328 00000 n 0000207910 00000 n 0000000142 00000 n 0000016979 00000 n 0000370992 00000 n 0000371623 00000 n 0000372462 00000 n 0000373093 00000 n 0000373722 00000 n 0000374248 00000 n 0000374458 00000 n 0000375111 00000 n 0000375817 00000 n 0000312717 00000 n 0000312876 00000 n 0000388239 00000 n 0000385913 00000 n 0000408766 00000 n 0000000000 00000 f 0000408715 00000 n 0000000000 00000 f 0000408610 00000 n 0000000000 00000 f 0000408533 00000 n 0000000000 00000 f 0000408405 00000 n 0000000000 00000 f 0000408289 00000 n 0000000000 00000 f 0000408188 00000 n 0000000000 00000 f 0000408138 00000 n 0000000000 00000 f 0000408047 00000 n 0000000000 00000 f 0000407997 00000 n 0000000000 00000 f 0000407894 00000 n 0000000000 00000 f 0000407603 00000 n 0000000000 00000 f 0000407557 00000 n 0000000000 00000 f 0000407498 00000 n 0000000000 00000 f 0000407452 00000 n 0000000000 00000 f 0000407402 00000 n 0000000000 00000 f 0000407354 00000 n 0000000000 00000 f 0000407253 00000 n 0000000000 00000 f 0000017246 00000 n 0000017311 00000 n 0000017376 00000 n 0000036579 00000 n 0000386138 00000 n 0000407205 00000 n 0000000000 00000 f 0000407151 00000 n 0000000000 00000 f 0000407103 00000 n 0000000000 00000 f 0000407047 00000 n 0000000000 00000 f 0000406999 00000 n 0000000000 00000 f 0000406948 00000 n 0000000000 00000 f 0000406897 00000 n 0000000000 00000 f 0000406827 00000 n 0000000000 00000 f 0000406727 00000 n 0000000000 00000 f 0000406676 00000 n 0000000000 00000 f 0000406561 00000 n 0000000000 00000 f 0000406369 00000 n 0000000000 00000 f 0000406308 00000 n 0000000000 00000 f 0000406223 00000 n 0000000000 00000 f 0000406118 00000 n 0000000000 00000 f 0000036695 00000 n 0000209143 00000 n 0000213289 00000 n 0000406070 00000 n 0000000000 00000 f 0000405980 00000 n 0000000000 00000 f 0000036761 00000 n 0000036827 00000 n 0000036893 00000 n 0000053399 00000 n 0000386364 00000 n 0000405932 00000 n 0000000000 00000 f 0000405878 00000 n 0000000000 00000 f 0000405827 00000 n 0000000000 00000 f 0000405721 00000 n 0000000000 00000 f 0000405570 00000 n 0000000000 00000 f 0000405519 00000 n 0000000000 00000 f 0000405440 00000 n 0000000000 00000 f 0000404905 00000 n 0000000000 00000 f 0000404857 00000 n 0000000000 00000 f 0000404798 00000 n 0000000000 00000 f 0000404750 00000 n 0000000000 00000 f 0000404698 00000 n 0000000000 00000 f 0000404646 00000 n 0000000000 00000 f 0000404581 00000 n 0000000000 00000 f 0000404522 00000 n 0000000000 00000 f 0000404459 00000 n 0000000000 00000 f 0000404403 00000 n 0000000000 00000 f 0000404279 00000 n 0000000000 00000 f 0000053565 00000 n 0000404223 00000 n 0000000000 00000 f 0000404069 00000 n 0000000000 00000 f 0000053620 00000 n 0000404013 00000 n 0000000000 00000 f 0000403239 00000 n 0000000000 00000 f 0000053675 00000 n 0000403191 00000 n 0000000000 00000 f 0000403097 00000 n 0000000000 00000 f 0000053730 00000 n 0000053796 00000 n 0000053862 00000 n 0000073508 00000 n 0000375987 00000 n 0000386590 00000 n 0000403049 00000 n 0000000000 00000 f 0000402995 00000 n 0000000000 00000 f 0000402947 00000 n 0000000000 00000 f 0000402891 00000 n 0000000000 00000 f 0000402843 00000 n 0000000000 00000 f 0000402792 00000 n 0000000000 00000 f 0000402740 00000 n 0000000000 00000 f 0000402633 00000 n 0000000000 00000 f 0000402581 00000 n 0000000000 00000 f 0000402516 00000 n 0000000000 00000 f 0000402464 00000 n 0000000000 00000 f 0000402345 00000 n 0000000000 00000 f 0000402293 00000 n 0000000000 00000 f 0000402192 00000 n 0000000000 00000 f 0000402140 00000 n 0000000000 00000 f 0000402030 00000 n 0000000000 00000 f 0000401977 00000 n 0000000000 00000 f 0000401867 00000 n 0000000000 00000 f 0000401814 00000 n 0000000000 00000 f 0000401743 00000 n 0000000000 00000 f 0000401687 00000 n 0000000000 00000 f 0000401630 00000 n 0000000000 00000 f 0000073646 00000 n 0000401574 00000 n 0000000000 00000 f 0000401496 00000 n 0000000000 00000 f 0000073701 00000 n 0000401440 00000 n 0000000000 00000 f 0000401374 00000 n 0000000000 00000 f 0000073756 00000 n 0000401318 00000 n 0000000000 00000 f 0000401212 00000 n 0000000000 00000 f 0000073811 00000 n 0000401150 00000 n 0000000000 00000 f 0000401079 00000 n 0000000000 00000 f 0000401023 00000 n 0000000000 00000 f 0000400957 00000 n 0000000000 00000 f 0000073866 00000 n 0000073921 00000 n 0000091610 00000 n 0000386816 00000 n 0000400909 00000 n 0000000000 00000 f 0000400855 00000 n 0000000000 00000 f 0000400799 00000 n 0000000000 00000 f 0000400716 00000 n 0000000000 00000 f 0000091748 00000 n 0000400660 00000 n 0000000000 00000 f 0000400597 00000 n 0000000000 00000 f 0000091801 00000 n 0000400541 00000 n 0000000000 00000 f 0000400485 00000 n 0000000000 00000 f 0000091855 00000 n 0000400426 00000 n 0000000000 00000 f 0000400349 00000 n 0000000000 00000 f 0000400236 00000 n 0000000000 00000 f 0000400159 00000 n 0000000000 00000 f 0000400076 00000 n 0000000000 00000 f 0000400024 00000 n 0000000000 00000 f 0000399953 00000 n 0000000000 00000 f 0000399901 00000 n 0000000000 00000 f 0000399679 00000 n 0000000000 00000 f 0000399631 00000 n 0000000000 00000 f 0000399569 00000 n 0000000000 00000 f 0000399521 00000 n 0000000000 00000 f 0000399468 00000 n 0000000000 00000 f 0000091909 00000 n 0000091975 00000 n 0000108278 00000 n 0000376158 00000 n 0000376798 00000 n 0000387042 00000 n 0000399420 00000 n 0000000000 00000 f 0000399366 00000 n 0000000000 00000 f 0000399318 00000 n 0000000000 00000 f 0000399262 00000 n 0000000000 00000 f 0000399214 00000 n 0000000000 00000 f 0000399163 00000 n 0000000000 00000 f 0000399069 00000 n 0000000000 00000 f 0000398651 00000 n 0000000000 00000 f 0000108440 00000 n 0000108505 00000 n 0000123669 00000 n 0000377477 00000 n 0000387268 00000 n 0000398603 00000 n 0000000000 00000 f 0000398549 00000 n 0000000000 00000 f 0000398497 00000 n 0000000000 00000 f 0000398342 00000 n 0000000000 00000 f 0000398220 00000 n 0000000000 00000 f 0000398168 00000 n 0000000000 00000 f 0000398079 00000 n 0000000000 00000 f 0000398002 00000 n 0000000000 00000 f 0000397950 00000 n 0000000000 00000 f 0000397891 00000 n 0000000000 00000 f 0000397820 00000 n 0000000000 00000 f 0000397764 00000 n 0000000000 00000 f 0000397690 00000 n 0000000000 00000 f 0000123811 00000 n 0000397634 00000 n 0000000000 00000 f 0000397568 00000 n 0000000000 00000 f 0000123866 00000 n 0000397512 00000 n 0000000000 00000 f 0000397438 00000 n 0000000000 00000 f 0000123921 00000 n 0000397382 00000 n 0000000000 00000 f 0000397308 00000 n 0000000000 00000 f 0000123976 00000 n 0000397230 00000 n 0000000000 00000 f 0000397172 00000 n 0000000000 00000 f 0000397093 00000 n 0000000000 00000 f 0000397037 00000 n 0000000000 00000 f 0000396963 00000 n 0000000000 00000 f 0000124031 00000 n 0000396907 00000 n 0000000000 00000 f 0000396833 00000 n 0000000000 00000 f 0000124086 00000 n 0000396777 00000 n 0000000000 00000 f 0000396703 00000 n 0000000000 00000 f 0000124141 00000 n 0000396655 00000 n 0000000000 00000 f 0000396593 00000 n 0000000000 00000 f 0000396545 00000 n 0000000000 00000 f 0000396492 00000 n 0000000000 00000 f 0000396444 00000 n 0000000000 00000 f 0000396358 00000 n 0000000000 00000 f 0000124196 00000 n 0000124262 00000 n 0000124328 00000 n 0000142926 00000 n 0000387494 00000 n 0000396310 00000 n 0000000000 00000 f 0000396256 00000 n 0000000000 00000 f 0000396208 00000 n 0000000000 00000 f 0000396152 00000 n 0000000000 00000 f 0000396104 00000 n 0000000000 00000 f 0000396053 00000 n 0000000000 00000 f 0000395997 00000 n 0000000000 00000 f 0000395922 00000 n 0000000000 00000 f 0000143064 00000 n 0000395866 00000 n 0000000000 00000 f 0000395797 00000 n 0000000000 00000 f 0000143117 00000 n 0000395745 00000 n 0000000000 00000 f 0000395656 00000 n 0000000000 00000 f 0000395593 00000 n 0000000000 00000 f 0000395537 00000 n 0000000000 00000 f 0000395456 00000 n 0000000000 00000 f 0000143171 00000 n 0000395400 00000 n 0000000000 00000 f 0000395319 00000 n 0000000000 00000 f 0000143225 00000 n 0000395263 00000 n 0000000000 00000 f 0000395185 00000 n 0000000000 00000 f 0000143279 00000 n 0000395133 00000 n 0000000000 00000 f 0000395065 00000 n 0000000000 00000 f 0000394962 00000 n 0000000000 00000 f 0000394906 00000 n 0000000000 00000 f 0000394834 00000 n 0000000000 00000 f 0000143333 00000 n 0000394778 00000 n 0000000000 00000 f 0000394700 00000 n 0000000000 00000 f 0000143387 00000 n 0000394644 00000 n 0000000000 00000 f 0000394575 00000 n 0000000000 00000 f 0000143441 00000 n 0000394519 00000 n 0000000000 00000 f 0000394443 00000 n 0000000000 00000 f 0000143495 00000 n 0000143549 00000 n 0000292373 00000 n 0000292956 00000 n 0000294191 00000 n 0000295413 00000 n 0000301095 00000 n 0000302182 00000 n 0000307042 00000 n 0000308022 00000 n 0000394395 00000 n 0000000000 00000 f 0000394301 00000 n 0000000000 00000 f 0000143615 00000 n 0000143681 00000 n 0000143747 00000 n 0000164967 00000 n 0000377856 00000 n 0000378507 00000 n 0000387720 00000 n 0000394253 00000 n 0000000000 00000 f 0000394199 00000 n 0000000000 00000 f 0000394143 00000 n 0000000000 00000 f 0000394072 00000 n 0000000000 00000 f 0000165258 00000 n 0000394016 00000 n 0000000000 00000 f 0000393923 00000 n 0000000000 00000 f 0000165311 00000 n 0000393867 00000 n 0000000000 00000 f 0000393789 00000 n 0000000000 00000 f 0000165365 00000 n 0000393733 00000 n 0000000000 00000 f 0000393655 00000 n 0000000000 00000 f 0000165419 00000 n 0000393596 00000 n 0000000000 00000 f 0000393513 00000 n 0000000000 00000 f 0000393394 00000 n 0000000000 00000 f 0000393338 00000 n 0000000000 00000 f 0000393275 00000 n 0000000000 00000 f 0000165473 00000 n 0000393219 00000 n 0000000000 00000 f 0000393156 00000 n 0000000000 00000 f 0000165527 00000 n 0000393100 00000 n 0000000000 00000 f 0000393037 00000 n 0000000000 00000 f 0000165581 00000 n 0000392989 00000 n 0000000000 00000 f 0000392930 00000 n 0000000000 00000 f 0000392882 00000 n 0000000000 00000 f 0000392830 00000 n 0000000000 00000 f 0000392774 00000 n 0000000000 00000 f 0000392711 00000 n 0000000000 00000 f 0000165635 00000 n 0000392655 00000 n 0000000000 00000 f 0000392586 00000 n 0000000000 00000 f 0000165689 00000 n 0000392530 00000 n 0000000000 00000 f 0000392467 00000 n 0000000000 00000 f 0000165743 00000 n 0000392411 00000 n 0000000000 00000 f 0000392342 00000 n 0000000000 00000 f 0000165797 00000 n 0000392286 00000 n 0000000000 00000 f 0000392230 00000 n 0000000000 00000 f 0000165851 00000 n 0000392174 00000 n 0000000000 00000 f 0000392111 00000 n 0000000000 00000 f 0000165905 00000 n 0000392055 00000 n 0000000000 00000 f 0000391990 00000 n 0000000000 00000 f 0000165959 00000 n 0000391937 00000 n 0000000000 00000 f 0000391843 00000 n 0000000000 00000 f 0000391749 00000 n 0000000000 00000 f 0000391696 00000 n 0000000000 00000 f 0000391505 00000 n 0000000000 00000 f 0000391449 00000 n 0000000000 00000 f 0000391371 00000 n 0000000000 00000 f 0000166014 00000 n 0000391315 00000 n 0000000000 00000 f 0000391221 00000 n 0000000000 00000 f 0000166069 00000 n 0000391165 00000 n 0000000000 00000 f 0000391091 00000 n 0000000000 00000 f 0000166124 00000 n 0000391043 00000 n 0000000000 00000 f 0000390949 00000 n 0000000000 00000 f 0000166179 00000 n 0000166245 00000 n 0000166311 00000 n 0000185583 00000 n 0000387947 00000 n 0000390901 00000 n 0000000000 00000 f 0000390847 00000 n 0000000000 00000 f 0000390799 00000 n 0000000000 00000 f 0000390743 00000 n 0000000000 00000 f 0000390695 00000 n 0000000000 00000 f 0000390644 00000 n 0000000000 00000 f 0000390588 00000 n 0000000000 00000 f 0000390510 00000 n 0000000000 00000 f 0000185711 00000 n 0000390454 00000 n 0000000000 00000 f 0000390376 00000 n 0000000000 00000 f 0000185764 00000 n 0000390320 00000 n 0000000000 00000 f 0000390242 00000 n 0000000000 00000 f 0000185818 00000 n 0000390186 00000 n 0000000000 00000 f 0000390111 00000 n 0000000000 00000 f 0000185872 00000 n 0000390055 00000 n 0000000000 00000 f 0000389980 00000 n 0000000000 00000 f 0000185926 00000 n 0000389924 00000 n 0000000000 00000 f 0000389831 00000 n 0000000000 00000 f 0000185980 00000 n 0000389775 00000 n 0000000000 00000 f 0000389703 00000 n 0000000000 00000 f 0000186034 00000 n 0000389647 00000 n 0000000000 00000 f 0000389587 00000 n 0000000000 00000 f 0000186088 00000 n 0000389531 00000 n 0000000000 00000 f 0000389453 00000 n 0000000000 00000 f 0000186142 00000 n 0000389397 00000 n 0000000000 00000 f 0000389328 00000 n 0000000000 00000 f 0000186196 00000 n 0000389272 00000 n 0000000000 00000 f 0000389209 00000 n 0000000000 00000 f 0000186250 00000 n 0000389153 00000 n 0000000000 00000 f 0000389087 00000 n 0000000000 00000 f 0000186304 00000 n 0000389031 00000 n 0000000000 00000 f 0000388947 00000 n 0000000000 00000 f 0000186358 00000 n 0000388891 00000 n 0000000000 00000 f 0000388813 00000 n 0000000000 00000 f 0000186413 00000 n 0000388757 00000 n 0000000000 00000 f 0000388675 00000 n 0000000000 00000 f 0000186468 00000 n 0000388619 00000 n 0000000000 00000 f 0000388533 00000 n 0000000000 00000 f 0000186523 00000 n 0000186578 00000 n 0000201183 00000 n 0000388448 00000 n 0000388378 00000 n 0000312171 00000 n 0000312348 00000 n 0000312441 00000 n 0000312533 00000 n 0000312625 00000 n 0000313037 00000 n 0000313409 00000 n 0000317051 00000 n 0000317403 00000 n 0000321328 00000 n 0000321568 00000 n 0000323616 00000 n 0000324165 00000 n 0000330170 00000 n 0000330606 00000 n 0000335764 00000 n 0000335960 00000 n 0000336270 00000 n 0000336476 00000 n 0000337001 00000 n 0000337215 00000 n 0000337658 00000 n 0000337956 00000 n 0000343140 00000 n 0000343459 00000 n 0000348433 00000 n 0000348763 00000 n 0000352035 00000 n 0000352439 00000 n 0000356471 00000 n 0000356713 00000 n 0000358387 00000 n 0000358680 00000 n 0000363449 00000 n 0000363841 00000 n 0000379203 00000 n 0000381567 00000 n 0000379479 00000 n 0000381990 00000 n 0000379907 00000 n 0000382381 00000 n 0000380230 00000 n 0000382787 00000 n 0000380486 00000 n 0000383184 00000 n 0000380621 00000 n 0000383550 00000 n 0000380808 00000 n 0000383941 00000 n 0000380992 00000 n 0000384315 00000 n 0000381052 00000 n 0000384604 00000 n 0000381112 00000 n 0000384893 00000 n 0000381299 00000 n 0000385298 00000 n 0000388175 00000 n 0000388201 00000 n 0000410485 00000 n 0000411491 00000 n 0000412722 00000 n 0000413888 00000 n 0000415259 00000 n 0000416582 00000 n 0000417497 00000 n 0000417780 00000 n 0000419111 00000 n 0000420050 00000 n 0000421381 00000 n 0000422448 00000 n 0000422738 00000 n 0000422801 00000 n 0000422825 00000 n 0000422876 00000 n 0000422952 00000 n 0000423004 00000 n 0000423066 00000 n 0000423101 00000 n 0000423176 00000 n 0000423524 00000 n trailer << /Size 821 /Root 1 0 R /Info 3 0 R /ID[<2ad1f5d6cf6dd37ce333896839b79ac8><2ad1f5d6cf6dd37ce333896839b79ac8>] >> startxref 427182 %%EOF