%PDF-1.4 % 35 0 obj <> endobj 59 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 9 0 0 9 143.8953 576.626 Tm 0 0 0 1 k -.005 Tc 0 Tw [(Ransomwar)9.3(e can be dened as a malwar)9.3(e deplo)7.3(y)6.4(e)0(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.8789 576.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 564.626 Tm -.005 Tc [(for the specic purpose of denying access t)9.8(o)0( a)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.084 564.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 552.626 Tm -.005 Tc [(victim)39.1()54.7(s)0( systems and/or les until something of)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.2055 552.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 540.626 Tm -.005 Tc [(v)7.3(alue is ex)9.8(changed. )19.5(The primar)-8.8(y motiv)7.3(ating fact)9.8(or)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.5175 540.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 528.626 Tm -.005 Tc [(for most r)19.5(ansomwar)9.3(e attacks is clearly in the name,)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.6653 528.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 516.626 Tm -.005 Tc [(a r)19.5(ansom. P)5.4(a)0(r)-24.4(t)0( 1 of this ar)-24.4(ticle series r)9.3(e)6.4(viewed)]TJ ET EMC /P <>BDC BT 9 0 0 9 326.5659 516.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 504.626 Tm -.005 Tc [(se)6.4(v)6.4(e)0(r)19.5(al pr)9.8(ominent examples of the damage caused)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.5732 504.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 492.626 Tm -.005 Tc [(b)5.4(y)0( r)9.3(ecent r)19.5(ansomwar)9.3(es attacks, the most common)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.3262 492.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 480.626 Tm -.005 Tc [(attack v)6.4(ect)9.8(ors used t)9.8(o)0( inltr)19.5(ate systems, and the)]TJ ET EMC /P <>BDC BT 9 0 0 9 334.9891 480.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 468.626 Tm -.005 Tc [(mone)6.4(y tr)19.5(ail fr)9.8(om pr)9.3(e-attack t)9.8(o)0( pa)7.3(y)7.3(out. By knowing)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.5682 468.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 456.626 Tm -.005 Tc [(the common thr)9.3(ead that runs thr)9.8(ough r)19.5(ansomwar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.2582 456.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 444.626 Tm -.005 Tc [(attacks, a gener)19.5(al risk pr)9.8(ole can be built. )]TJ ET EMC /P <>BDC BT 9 0 0 9 311.209 444.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 420.626 Tm -.02 Tc [(The r)9.3(esear)9.3(ch and de)6.4(v)6.4(elopment arm of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 303.4774 420.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 408.626 Tm -.02 Tc [(cybersecurity industr)-8.8(y is r)9.3(eacting t)9.8(o)0( the pr)9.8(oblem of)]TJ ET EMC /P <>BDC BT 9 0 0 9 336.8609 408.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 396.626 Tm -.02 Tc [(r)19.5(ansomwar)9.3(e. Decr)-8.8(yption t)9.8(ools ar)9.3(e a)7.3(v)7.3(ailable for some)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.8543 396.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 384.626 Tm -.02 Tc [(r)19.5(ansomwar)9.3(e families \(e.g., F)10.3(o)0(r)-24.4(tuneCr)-8.8(ypt,)]TJ ET EMC /P <>BDC BT 9 0 0 9 298.3403 384.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 372.626 Tm -.02 Tc [(W)16.1(annaCr)-8.8(yF)16.6(ak)9.8(e, JSWORM, I)-8.8(AMSooRR)23.5(Y)103(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 292.7446 372.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 360.626 Tm -.02 Tc (ZERO&UCKS\).)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 197.9152 363.596 Tm 0 Tc (1)Tj ET EMC /P <>BDC BT 9 0 0 9 200.7675 360.626 Tm -.02 Tc [( Howe)6.4(v)6.4(e)0(r)60.1(,)0( ther)9.3(e ar)9.3(e many others that)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.2659 360.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 348.626 Tm -.02 Tc [(do not ha)7.3(v)6.4(e)0( decr)-8.8(yption t)9.8(ools, and new v)7.3(ariants ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 334.6632 348.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 336.626 Tm -.02 Tc [(alwa)7.3(ys on the horiz)7.8(on. What can enterprises, which)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.5083 336.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 324.626 Tm -.02 Tc [(ar)9.3(e in the cr)9.8(osshairs of this arms r)19.5(ace between)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.2217 324.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 312.626 Tm -.02 Tc [(hack)9.8(ers and def)11.7(enders, do? )19.5(The following ar)9.3(e the t)9.8(o)0(p)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.105 312.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 300.6259 Tm -.02 Tc [(10 most impactful steps that enterprises can tak)9.8(e t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.2285 300.6259 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 288.6259 Tm -.02 Tc [(a)7.3(v)7.3(oid becoming the next r)19.5(ansomwar)9.3(e victim. )]TJ ET EMC /P <>BDC BT 9 0 0 9 317.0045 288.6259 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 143.8953 262.626 Tm .05 .65 1 0 k -.005 Tc [(1. Restrict Macr)17.6(os)]TJ ET EMC /P <>BDC BT 11 0 0 11 233.5752 262.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 143.8953 244.626 Tm 0 0 0 1 k -.005 Tc [(It was noted in par)-24.4(t 1 that the most common)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.654 244.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 232.626 Tm -.005 Tc [(softwar)9.3(e vulner)19.5(ability is macr)9.8(os embedded in)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.7555 232.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 220.626 Tm -.005 Tc [(trusted applications such as the Micr)9.8(osoft Oce)]TJ ET EMC /P <>BDC BT 9 0 0 9 335.8525 220.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 208.626 Tm -.005 Tc [(Suite. )19.5(The newest v)6.4(ersions of Oce pr)9.8(ogr)19.5(ams ha)7.3(v)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.2841 208.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 196.626 Tm -.005 Tc [(options t)9.8(o)0( disallow embedded macr)9.8(os that ar)9.3(e not)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.5135 196.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143.8953 184.626 Tm -.005 Tc [(digitally signed. )19.5(This option should be enabled b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 337.3655 184.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 576.626 Tm -.005 Tc [(default acr)9.8(oss the boar)9.3(d, allowing only macr)9.8(os fr)9.8(om)]TJ ET EMC /P <>BDC BT 9 0 0 9 567.4001 576.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 564.626 Tm -.005 Tc (trusted people or enterprises. )Tj ET EMC /P <>BDC BT 9 0 0 9 480.5981 564.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 362.3953 538.626 Tm .05 .65 1 0 k -.005 Tc [(2. Pr)17.6(o)7.3(vide Email A)16.1(war)9.3(eness )29.3(T)31.8(r)14.7(aining)]TJ ET EMC /P <>BDC BT 11 0 0 11 540.8434 538.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 362.3953 520.626 Tm 0 0 0 1 k -.005 Tc [(In lar)9.3(ge-scale envir)9.8(onments, it is not f)11.7(easible for)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.7536 520.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 508.626 Tm -.005 Tc [(members of the cybersecurity team t)9.8(o)0( maintain a)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.4795 508.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 496.626 Tm -.005 Tc [(one-on-one r)9.3(elationship with e)6.4(v)6.4(e)0(r)-8.8(y)0( user)60.1(. Howe)6.4(v)6.4(e)0(r)60.1(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.6093 496.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 484.626 Tm -.005 Tc [(the)6.4(y can educate the user community about pr)9.8(oper)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.3822 484.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 472.626 Tm -.005 Tc [(email beha)7.3(vior and why it should be a priority for)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.2902 472.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 460.626 Tm -.005 Tc [(e)6.4(v)6.4(e)0(r)-8.8(ybody)52.3(. Users ar)9.3(e often consider)9.3(ed the weak)9.8(est)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.8231 460.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 448.626 Tm -.005 Tc [(link in an enterprise)39.1()54.7(s)0( security system, but with)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.6693 448.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 436.626 Tm -.005 Tc [(pr)9.8(oper tr)19.5(aining, testing and follow-up, the)6.4(y can)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.0726 436.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 424.626 Tm -.005 Tc [(become the str)9.8(ongest. )19.5(This positiv)6.4(e tr)19.5(ansformation)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.47 424.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 412.626 Tm -.005 Tc [(is possible with a good tr)19.5(aining pr)9.8(ogr)19.5(am that)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.2003 412.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 400.626 Tm -.005 Tc [(empowers users with the knowledge the)6.4(y need t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.2407 400.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 388.626 Tm -.005 Tc [(succeed, encour)19.5(ages users t)9.8(o)0( implement what the)6.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.8676 388.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 376.626 Tm -.005 Tc [(ha)7.3(v)6.4(e)0( learned and r)9.3(egularly e)6.4(v)7.3(aluates users)]TJ ET EMC /P <>BDC BT 9 0 0 9 531.549 376.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 364.626 Tm -.005 Tc [(knowledge via liv)6.4(e tests.)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.3988 364.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 340.626 Tm -.005 Tc [(A good security awar)9.3(eness tr)19.5(aining pr)9.8(ogr)19.5(am should)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.4774 340.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 328.626 Tm -.005 Tc [(star)-24.4(t with email fundamentals and then expand on)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.4642 328.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 316.626 Tm -.005 Tc [(them t)9.8(o)0( k)9.8(eep users engaged. Some of the basics of)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.2665 316.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.3953 304.626 Tm -.005 Tc [(email that all staff should know ar)9.3(e:)]TJ ET EMC /P <>BDC BT 9 0 0 9 502.9205 304.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 362.3953 286.626 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 366.8503 286.626 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.0334 286.626 Tm -.005 Tc (Do not click on links or download attachments)Tj ET EMC /P <>BDC BT 9 0 0 9 551.6104 286.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.0204 274.626 Tm -.005 Tc [(fr)9.8(om par)-24.4(ties that ar)9.3(e not completely trusted.)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.23 274.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 362.3953 256.626 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 366.8503 256.626 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.0334 256.626 Tm -.005 Tc [(Look at the email headers. \(F)12.7(r)9.8(o)0(m)50.8()0( elds ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.3892 256.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.0204 244.626 Tm -.005 Tc [(usually giv)6.4(eawa)7.3(ys.\) Does something about the)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.0685 244.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.0204 232.626 Tm -.005 Tc (domain seem off? Is it .net when it should be)Tj ET EMC /P <>BDC BT 9 0 0 9 545.4887 232.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.0204 220.626 Tm -.005 Tc [(.com? Is it misspelled? Is the fr)9.8(om)50.8( eld)]TJ ET EMC /P <>BDC BT 9 0 0 9 528.7268 220.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.0204 208.626 Tm -.005 Tc (completely absent? Quickly delete these emails)Tj ET EMC /P <>BDC BT 9 0 0 9 555.6699 208.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.0204 196.626 Tm -.005 Tc (without opening them.)Tj ET EMC /P <>BDC BT 9 0 0 9 457.4473 196.626 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F5 1 Tf 30 0 0 30 144.8954 670.7944 Tm 0 .35 .9 0 k -.02 Tc [(A)24.4(v)7.3(oid Ha)7.3(ving t)9.8(o)0( Run Somewher)9.3(e)]TJ ET EMC /P <>BDC BT 30 0 0 30 555.1302 670.7944 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 30 0 0 30 144.8954 636.7944 Tm -.02 Tc [(F)12.7(r)9.8(om Ransomwar)9.3(e, P)5.4(a)0(r)-24.4(t)0( 2)]TJ ET EMC /P <>BDC BT 30 0 0 30 474.047 636.7944 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 18 0 0 18 144.8954 609.7946 Tm -.02 Tc [(T)48.4(op 10 Steps t)9.8(o)0( Sta)7.3(y Pr)9.8(otected)]TJ ET EMC /Artifact <>BDC 0 0 0 0 k 35.948 692.116 58.529 54.884 re f EMC /Figure <>BDC Q q 1 i 35.948 747 58.5 -54.759 re W n .047059 .65098 .98824 .003922 k /GS3 gs q 1 0 0 1 35.948 747 cm 0 0 m 0 -54.884 l 9.375 -54.884 l 9.375 -9.9448 l 49.977 -9.9448 l 49.977 0 l 0 0 l f Q Q /GS3 gs BT /F6 1 Tf 9 0 0 9 55.0893 721.6074 Tm .047059 .65098 .98824 .003922 k .0249 Tc 0 Tw (FEATURE)Tj ET EMC /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .05 .65 1 0 k 1.088 55.094 566.807 114.209 re f EMC /P <>BDC BT /F1 1 Tf 11 0 0 11 35.9482 152.3408 Tm 0 0 0 0 k -.02 Tc [(Sy)6.4(ed Ishaq, CISA, CRISC, CCISO)]TJ ET EMC /P <>BDC BT 11 0 0 11 187.7587 152.3408 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 35.9482 141.5408 Tm [(Has 15 y)6.4(ears of information security experience ser)-8.8(ving F)10.3(o)0(r)-24.4(tune 50 and go)7.4(v)6.4(ernment or)9.3(ganizations. He advises chief information)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.4609 141.5408 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35.9482 130.7408 Tm [(security ocers \(CISOs\) on behalf of Contr)9.8(olP)6.4(oints, a high-gr)9.8(owth cyberrisk consulting rm. He can be r)9.3(eached at)]TJ ET EMC /P <>BDC BT 9 0 0 9 487.6753 130.7408 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35.9482 119.9407 Tm [(sy)6.4(ed@contr)9.8(olpoints.com.)]TJ ET EMC /P <>BDC BT 9 0 0 9 138.121 119.9407 Tm ( )Tj ET EMC /P <>BDC BT /F1 1 Tf 11 0 0 11 35.9482 95.9407 Tm -.02 Tc [(F)16.6(aizan Mahmood, CISSP)197.3(, PMP)]TJ ET EMC /P <>BDC BT 11 0 0 11 178.6591 95.9407 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 35.9482 85.1408 Tm [(Is a former CISO with mor)9.3(e than 10 y)6.4(ears of hands-on experience, much of that time spent as a data center and cloud ar)9.3(chitect. )]TJ ET EMC /P <>BDC BT 9 0 0 9 544.4087 85.1408 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35.9482 74.3408 Tm [(He is curr)9.3(ently a senior member of the Security )19.5(T)48.4(est and E)12.7(v)7.3(aluation team at the US F)10.3(eder)19.5(al Communications Commission \(FCC)12.7(\).)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.3776 74.3408 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35.9482 63.5407 Tm [(He can be r)9.3(eached at mahmoofx@gmail.com.)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.8662 63.5407 Tm ( )Tj ET EMC /P <>BDC /GS2 gs BT 7 0 0 7 488.5717 23.0961 Tm 0 0 0 1 k [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 510.0125 23.0961 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.9212 23.0961 Tm 0 .35 .9 0 k [( V)6.4(OL 2)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9829 23.0961 Tm (1)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 570.222 31.363 cm 0 0 m 0 -39.377 l S Q EMC /P <>BDC BT 7 0 0 7 36 23.0961 Tm 0 0 0 1 k [( 2020 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 143.4848 23.0961 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC Q endstream endobj 60 0 obj <>/ExtGState<>>> endobj 117 0 obj <> endobj 121 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2020 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm 0 .35 .9 0 k [( V)6.4(OL 2)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (2)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 144 518.25 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 148.455 518.25 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.4623 518.25 Tm -.005 Tc [(Think twice befor)9.3(e clicking on hyperlinks in emails)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.948 518.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 506.25 Tm -.005 Tc [(and instant messenger)60.1(, e)6.4(v)6.4(en fr)9.8(om trusted)]TJ ET EMC /P <>BDC BT 9 0 0 9 314.416 506.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 494.25 Tm -.005 Tc [(senders. Domain names and displa)7.3(y names can)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.3475 494.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 482.25 Tm -.005 Tc [(easily be spoof)11.7(ed. Ho)7.3(v)6.4(er o)7.3(v)6.4(er links t)9.8(o)0( ascer)-24.4(tain)]TJ ET EMC /P <>BDC BT 9 0 0 9 336.5651 482.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 470.25 Tm -.005 Tc [(their cr)9.3(edibility befor)9.3(e clicking on them.)]TJ ET EMC /P <>BDC BT 9 0 0 9 305.6468 470.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 144 452.25 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 148.455 452.25 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.6381 452.25 Tm -.005 Tc (Immediately turn off the Internet connection if a)Tj ET EMC /P <>BDC BT 9 0 0 9 338.8094 452.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 440.25 Tm -.005 Tc [(suspicious pr)9.8(ocess is detected. )19.5(This is par)-24.4(ticularly)]TJ ET EMC /P <>BDC BT 9 0 0 9 349.2742 440.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 428.25 Tm -.005 Tc [(eff)11.7(ectiv)6.4(e in the early stages of a r)19.5(ansomwar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 327.6165 428.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 416.25 Tm -.005 Tc [(attack because the malwar)9.3(e will be pr)9.3(e)6.4(v)6.4(ented)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.4476 416.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 404.25 Tm -.005 Tc [(fr)9.8(om establishing a connection with its command)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.9791 404.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 392.25 Tm -.005 Tc [(and contr)9.8(ol ser)-8.8(v)6.4(er and, thus, will be unable t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 327.856 392.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 150.625 380.25 Tm -.005 Tc [(complete the encr)-8.8(yption r)9.8(outine.)]TJ ET EMC /P <>BDC BT 9 0 0 9 278.354 380.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 144 270.2499 Tm .05 .65 1 0 k -.005 Tc [(3. Enable Network Le)6.4(v)6.4(el A)5.4(uthentication)]TJ ET EMC /P <>BDC BT 11 0 0 11 336.2371 270.2499 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 144 252.25 Tm 0 0 0 1 k -.005 Tc [(Network Le)6.4(v)6.4(el A)5.4(uthentication \(NL)-9.3(A\) is a technology)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.1601 252.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 240.25 Tm -.005 Tc [(used in RDP t)9.8(o)0( pr)9.8(otect a network fr)9.8(om becoming)]TJ ET EMC /P <>BDC BT 9 0 0 9 335.8791 240.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 228.25 Tm -.005 Tc [(accessible t)9.8(o)0( unauthenticated users. It r)9.3(equir)9.3(es)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.6212 228.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 216.25 Tm -.005 Tc [(r)9.3(emote users t)9.8(o)0( authenticate themselv)6.4(es \(i.e., pass)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.1156 216.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 204.25 Tm -.005 Tc [(on their cr)9.3(edentials via a client-side secur)9.3(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 316.5123 204.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 192.25 Tm -.005 Tc [(connection\) befor)9.3(e the)6.4(y can establish a session)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.2306 192.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 180.25 Tm -.005 Tc [(with a ser)-8.8(v)6.4(er t)9.8(o)0( use its r)9.3(esour)9.3(ces. )]TJ ET EMC /P <>BDC BT 9 0 0 9 278.4002 180.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 156.25 Tm -.005 Tc [(If NL)-9.3(A is not enabled, a user can dir)9.3(ectly)]TJ ET EMC /P <>BDC BT 9 0 0 9 302.0233 156.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 144.25 Tm -.005 Tc [(authenticate against a ser)-8.8(v)6.4(er and possibly deplete)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.7899 144.25 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 132.2499 Tm -.005 Tc [(its r)9.3(esour)9.3(ces. Without NL)-9.3(A, the ser)-8.8(v)6.4(er also allows)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.0742 132.2499 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 120.2499 Tm -.005 Tc [(clients ont)9.8(o the network without rst identifying or)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.9416 120.2499 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 108.2499 Tm -.005 Tc (authenticating them.)Tj ET EMC /P <>BDC BT 9 0 0 9 225.6077 108.2499 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 700.6097 Tm -.005 Tc [(With Windows, this is a simple t)9.8(oggle switch in)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.3273 700.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 688.6097 Tm -.005 Tc [(r)9.3(emote settings. It should be turned on immediately)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.8041 688.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 676.6097 Tm -.005 Tc [(if it is not alr)9.3(eady set. )]TJ ET EMC /P <>BDC BT 9 0 0 9 448.7509 676.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 362.5 650.6097 Tm .05 .65 1 0 k -.005 Tc [(4. Use Str)17.6(ong P)5.4(asswor)9.3(ds)]TJ ET EMC /P <>BDC BT 11 0 0 11 485.0715 650.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 362.5 632.6097 Tm 0 0 0 1 k -.005 Tc [(The amount of time it tak)9.8(es for someone t)9.8(o)0( cr)19.5(ack a)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.5175 632.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 620.6097 Tm -.005 Tc [(passwor)9.3(d can be the diff)11.7(er)9.3(ence between immunity)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.6071 620.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 608.6097 Tm -.005 Tc [(and inf)11.7(ection. )19.5(The diff)11.7(er)9.3(ence between scenario A, a)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.1429 608.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 596.6097 Tm -.005 Tc [(10-char)19.5(acter alphanumeric passwor)9.3(d that includes)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.5244 596.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 584.6097 Tm -.005 Tc [(a special char)19.5(acter and is truly no)7.3(v)6.4(el \(i.e., not)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.25 584.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 572.6097 Tm -.005 Tc [(subject t)9.8(o)0( common dictionar)-8.8(y attacks\), and)]TJ ET EMC /P <>BDC BT 9 0 0 9 533.5618 572.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 560.6097 Tm -.005 Tc [(scenario B, a 6-char)19.5(acter alphanumeric passwor)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.1291 560.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 548.6097 Tm -.005 Tc [(that includes no special char)19.5(acters and is truly)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.2759 548.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 536.6097 Tm -.005 Tc [(no)7.3(v)6.4(el, is signicant. F)10.3(or those with a curious mind,)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.5076 536.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 524.6097 Tm -.005 Tc [(the time r)9.3(equir)9.3(ed t)9.8(o)0( cr)19.5(ack each type of passwor)9.3(d is: )]TJ ET EMC /P <>BDC BT 9 0 0 9 568.1399 524.6097 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 362.5 506.6098 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 366.955 506.6098 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.1381 506.6098 Tm -.005 Tc [(Scenario A: 4,687.6 hours \(195.32 da)7.3(ys\))]TJ ET EMC /P <>BDC BT 9 0 0 9 526.4043 506.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 362.5 488.6098 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 366.955 488.6098 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.1381 488.6098 Tm -.005 Tc (Scenario B: 0.2 hour \(12 minutes\))Tj ET EMC /P <>BDC BT 9 0 0 9 500.8517 488.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 464.6098 Tm -.005 Tc [(Raising the minimum passwor)9.3(d length fr)9.8(om 10 t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.3322 464.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 452.6098 Tm -.005 Tc [(12 char)19.5(acters \(scenario C)12.7(\))0( or longer is e)6.4(v)6.4(en better)60.1(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.4506 452.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 440.6098 Tm -.005 Tc [(as each additional char)19.5(acter mak)9.8(es the passwor)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.4386 440.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 428.6098 Tm -.005 Tc [(exponentially less susceptible t)9.8(o)0( a brute-for)9.3(ce)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.2379 428.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 416.6098 Tm -.005 Tc [(attack. )19.5(This assumes that common wor)9.3(ds and)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.6644 416.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 404.6098 Tm -.005 Tc [(phr)19.5(ases ar)9.3(e not emplo)7.3(y)6.4(ed; other)-8.3(wise, the passwor)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.9184 404.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 392.6098 Tm -.005 Tc [(would be susceptible t)9.8(o)0( a dictionar)-8.8(y attack.)]TJ ET EMC /P <>BDC BT 9 0 0 9 533.3841 392.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 362.5 374.6098 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 366.955 374.6098 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.1381 374.6098 Tm -.005 Tc [(Scenario C \(12 char)19.5(acters\): 7,556,404.5 hours)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.1486 374.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 369.125 362.6098 Tm -.005 Tc [(\(314,850.19 da)7.3(ys\))]TJ ET EMC /P <>BDC BT 9 0 0 9 440.1626 362.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 338.6098 Tm -.005 Tc [(It goes without sa)7.3(ying that all default passwor)9.3(ds)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.4223 338.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 326.6098 Tm -.005 Tc [(should be changed acr)9.8(oss all access points t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.7693 326.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 314.6098 Tm -.005 Tc [(pr)9.3(e)6.4(v)6.4(ent brute-for)9.3(ce attacks.)]TJ ET EMC /P <>BDC BT 9 0 0 9 471.2927 314.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 362.5 288.6098 Tm .05 .65 1 0 k -.005 Tc [(5. Implement Multifact)14.7(or A)5.4(uthentication)]TJ ET EMC /P <>BDC BT 11 0 0 11 558.6729 288.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 362.5 270.6098 Tm 0 0 0 1 k -.005 Tc [(Despite the sense of security a long passwor)9.3(d ma)7.3(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.9496 270.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 258.6098 Tm -.005 Tc [(off)11.7(er)60.1(, if someone wants t)9.8(o)0( get in, it is just a matter)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.3761 258.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 246.6098 Tm -.005 Tc [(of ha)7.3(ving a computer and time. With ar)-24.4(ticial)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.4607 246.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 234.6098 Tm -.005 Tc (intelligence, 5G and quantum computing right)Tj ET EMC /P <>BDC BT 9 0 0 9 542.0062 234.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 222.6098 Tm -.005 Tc [(ar)9.8(ound the corner)60.1(, e)6.4(v)6.4(en computers and time will)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.4469 222.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 210.6098 Tm -.005 Tc [(soon become irr)9.3(ele)6.4(v)7.3(ant. Until then, multifact)9.8(or)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.4596 210.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 198.6098 Tm -.005 Tc [(authentication \(MF)83(A\) off)11.7(ers a saf)11.7(ety net. )19.5(Think of it)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.9764 198.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 186.6098 Tm -.005 Tc [(as a moat ar)9.8(ound a castle wall. It for)-24.4(ties alr)9.3(eady)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.4305 186.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 174.6098 Tm -.005 Tc [(for)-24.4(tied def)11.7(enses. No matter what type of phone or)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.4691 174.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 162.6098 Tm -.005 Tc [(de)6.4(vice an enterprise utiliz)7.8(es, ther)9.3(e is a v)6.4(e)0(r)-8.8(y)0( str)9.8(ong)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.0588 162.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 150.6098 Tm -.005 Tc [(lik)9.8(elihood that ther)9.3(e is a soft-t)9.8(ok)9.8(en application in)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.7355 150.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 138.6098 Tm -.005 Tc [(the mark)9.8(etplace that will allow easy multifact)9.8(or)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.6816 138.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 126.6098 Tm -.005 Tc [(integr)19.5(ation. A)8.3(t)0( a minimum, MF)83(A should be )]TJ ET EMC /P <>BDC BT 9 0 0 9 529.5991 126.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 114.6098 Tm -.005 Tc [(r)9.3(equir)9.3(ed for externally initiated access or access )]TJ ET EMC /P <>BDC BT 9 0 0 9 555.4198 114.6098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 102.6098 Tm -.005 Tc [(t)9.8(o)0( sensitiv)6.4(e materials. )]TJ ET EMC /P <>BDC BT 9 0 0 9 451.2929 102.6098 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 143.268 288.476 205.5 83.569 re f EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 151.9996 330.6146 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC BT /F2 1 Tf 14 0 0 14 165.9068 352.6143 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [( )19.6(THERE)17.5( IS)17.5( NEVER)17.5( A)17.5( GOOD)]TJ ET EMC /P <>BDC BT 14 0 0 14 336.8326 352.6143 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.2457 334.6143 Tm .0351 Tc -.0175 Tw [(REASON)17.5( FOR)17.5( AN)]TJ ET EMC /P <>BDC BT 14 0 0 14 263.063 334.6143 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.2457 316.6143 Tm .0351 Tc -.0175 Tw [(EN)14.1(TERPRISE)17.5( )19.6(T)13.6(O)17.5( H)-8.8(A)42.4(VE)17.5( RDP)]TJ ET EMC /P <>BDC BT 14 0 0 14 331.5934 316.6143 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 152.2457 298.6143 Tm .0351 Tc -.0371 Tw [(OPEN)17.5( T)13.6(O)17.5( THE)17.5( )-19.6(IN)14.1(TERNE)-9.8(T)124(.)35.1( )]TJ ET EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 321.2985 274.6145 Tm 0 .89 .21 .07 k 0 Tc 0 Tw ()Tj ET EMC /Figure <>BDC Q q 1 i -60.906 939.552 750 -421.75 re W n -60.906 939.552 750 -421.875 re W n -.73495 707.36 349.503 -172.501 re 334.564 274.615 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS3 gs q 352.023 0 0 -175.021 -1.9267 708.55 cm /Im2 Do Q EMC Q endstream endobj 122 0 obj <>/XObject<>/ExtGState<>>> endobj 161 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2020 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm 0 .35 .9 0 k [( V)6.4(OL 2)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (3)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 36 699.1097 Tm .05 .65 1 0 k -.005 Tc [(6. Secur)9.3(e RDP)]TJ ET EMC /P <>BDC BT 11 0 0 11 105.9903 699.1097 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 36 681.1097 Tm 0 0 0 1 k -.005 Tc [(Remote Deskt)9.8(op Pr)9.8(ot)9.8(ocol \(RDP\) should be cut off)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.297 681.1097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 669.1097 Tm -.005 Tc [(fr)9.8(om the world. )19.5(Ther)9.3(e is ne)6.4(v)6.4(er a good r)9.3(eason for an)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.4056 669.1097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 657.1097 Tm -.005 Tc [(enterprise t)9.8(o)0( ha)7.3(v)6.4(e)0( RDP open t)9.8(o)0( the Internet.)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.53 657.1097 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 645.1098 Tm -.005 Tc [(Whether thr)9.8(ough social engineering or brute for)9.3(ce,)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.3637 645.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 633.1098 Tm -.005 Tc [(bad act)9.8(ors ar)9.3(e activ)6.4(ely looking for exposed and)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.9938 633.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 621.1098 Tm -.005 Tc [(vulner)19.5(able RDPs. )19.5(The)6.4(y do so b)5.4(y)0( scanning lar)9.3(ge)]TJ ET EMC /P <>BDC BT 9 0 0 9 219.3063 621.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 609.1098 Tm -.005 Tc [(swaths of Internet Pr)9.8(ot)9.8(ocol \(IP\) r)19.5(anges t)9.8(o)0( see)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.9241 609.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 597.1098 Tm -.005 Tc [(whether P)6.4(o)0(r)-24.4(t)0( 3389 is open, and when it is, the)6.4(y can)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.4105 597.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 585.1098 Tm -.005 Tc [(tar)9.3(get malicious beha)7.3(vior)60.1(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 139.9598 585.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 561.1098 Tm -.02 Tc [(The thr)9.3(eat monit)9.8(oring company Aler)-24.4(tLogic r)9.3(e)6.4(viewed)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.7197 561.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 549.1098 Tm -.02 Tc [(130,000 attacks against its 4,000 cust)9.8(omers and)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.476 549.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 537.1098 Tm -.02 Tc [(disco)7.3(v)6.4(e)0(r)9.3(ed that 65 per)9.3(cent of incidents occurr)9.3(ed on)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.1338 537.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 525.1098 Tm -.02 Tc [(only thr)9.3(ee por)-24.4(ts: 22 \(SSH\), 80 \(H)14.2(T)-7.8(TP\) and 443)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.23 525.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 513.1098 Tm -.02 Tc [(\(H)14.2(T)-7.8(TPS\). \(Although each is used for communication,)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.42 513.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 501.1098 Tm -.02 Tc [(SSH should not be open t)9.8(o)0( the world, and 80 should)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.7135 501.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 489.1098 Tm -.02 Tc [(r)9.3(edir)9.3(ect t)9.8(o)0( 443 wher)9.3(e)6.4(v)6.4(er possible.\) F)10.3(our)-24.4(th on the list)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.8966 489.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 477.1098 Tm -.02 Tc [(was P)6.4(o)0(r)-24.4(t)0( 3389 \(RDP\).)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 118.252 480.0798 Tm 0 Tc (2)Tj ET EMC /P <>BDC BT 9 0 0 9 121.1042 477.1098 Tm -.02 Tc [( Enterprises would be wise t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.4631 477.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 465.1098 Tm -.02 Tc [(k)9.8(eep their RDPs out of the path of the st)9.8(orm b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.0758 465.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 453.1098 Tm -.02 Tc [(cutting their por)-24.4(ts off t)9.8(o)0( the world. )]TJ ET EMC /P <>BDC BT 9 0 0 9 168.0325 453.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 429.1098 Tm -.02 Tc [(Or)9.3(ganizations should also limit RDP t)9.8(o)0( users who)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.6208 429.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 417.1098 Tm -.02 Tc [(truly need it. Although this ma)7.3(y be easier said than)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.5767 417.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 405.1098 Tm -.02 Tc [(done in cer)-24.4(tain envir)9.8(onments, security pr)9.8(of)11.7(essionals)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.6255 405.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 393.1098 Tm -.02 Tc [(need t)9.8(o)0( sell this idea t)9.8(o)0( k)9.8(e)6.4(y business stak)9.8(eholders.)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.6183 393.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 381.1098 Tm -.02 Tc [(Giving e)6.4(v)6.4(e)0(r)-8.8(y)7.3(one full access is alwa)7.3(ys the path of least)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.4007 381.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 369.1098 Tm -.02 Tc [(r)9.3(esistance, but just lik)9.8(e an open Any/Any r)9.3(ewall that)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.7485 369.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 357.1098 Tm -.02 Tc [(allows e)6.4(v)6.4(e)0(r)-8.8(ything t)9.8(o)0( work, it surr)9.3(enders its security)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.6429 357.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 345.1098 Tm -.02 Tc (purpose as a consequence. Instead, allow personnel)Tj ET EMC /P <>BDC BT 9 0 0 9 235.504 345.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 333.1098 Tm -.02 Tc [(with legitimate claims t)9.8(o)0( RDP t)9.8(o)0( mak)9.8(e those claims,)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.619 333.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 321.1098 Tm -.02 Tc [(cr)9.3(eate a pr)9.8(ocess in which true needs ar)9.3(e judged)]TJ ET EMC /P <>BDC BT 9 0 0 9 217.565 321.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 309.1098 Tm -.02 Tc [(against wants, and continuously monit)9.8(or t)9.8(o)0( determine)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.1163 309.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 297.1098 Tm -.02 Tc [(whether access needs ha)7.3(v)6.4(e)0( changed as the)]TJ ET EMC /P <>BDC BT 9 0 0 9 202.4332 297.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 285.1098 Tm -.02 Tc [(enterprise matur)9.3(es and shifts.)]TJ ET EMC /P <>BDC BT 9 0 0 9 150.3077 285.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 261.1098 Tm -.005 Tc [(Not all administr)19.5(at)9.8(ors r)9.3(equir)9.3(e RDP)158.2(, e)6.4(v)6.4(en though it is)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.2805 261.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 249.1098 Tm -.005 Tc [(gr)19.5(anted as a default setting. )19.5(The administr)19.5(at)9.8(or)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.544 249.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 237.1098 Tm -.005 Tc [(account should be r)9.3(emo)7.3(v)6.4(ed fr)9.8(om the RDP access)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.7453 237.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 225.1098 Tm -.005 Tc [(gr)9.8(oup and only specic authoriz)7.8(ed users should be)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.2432 225.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 213.1098 Tm -.005 Tc [(allocated t)9.8(o)0( a r)9.3(emote deskt)9.8(op users gr)9.8(oup.)]TJ ET EMC /P <>BDC BT 9 0 0 9 211.5642 213.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 201.1098 Tm -.005 Tc [(Accounts within the domain administr)19.5(at)9.8(or gr)9.8(oup)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.5255 201.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 189.1098 Tm -.005 Tc [(ha)7.3(v)6.4(e)0( full contr)9.8(ol of the domain b)5.4(y)0( default, and any)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.1893 189.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 177.1098 Tm -.005 Tc [(compr)9.8(omise her)9.3(e lets an attack)9.8(er hold the k)9.8(e)6.4(ys t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.7105 177.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 165.1098 Tm -.005 Tc [(the kingdom.)83( It goes without sa)7.3(ying that the)]TJ ET EMC /P <>BDC BT 9 0 0 9 211.1106 165.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 153.1098 Tm -.005 Tc [(number of domain administr)19.5(at)9.8(ors should be limited)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.4448 153.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 141.1098 Tm -.005 Tc [(t)9.8(o)0( the absolute minimum, and the)6.4(y should r)9.3(efr)19.5(ain)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.9096 141.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 129.1098 Tm -.005 Tc [(fr)9.8(om accessing the RDP ser)-8.8(v)6.4(er or other externally)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.9873 129.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 117.1098 Tm -.005 Tc [(exposed systems via these accounts t)9.8(o)0( a)7.3(v)7.3(oid)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.0766 117.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 105.1098 Tm -.005 Tc [(inadv)6.4(er)-24.4(tently making cr)9.3(edentials accessible.)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.7775 105.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 81.1098 Tm -.005 Tc [(If, for some r)9.3(eason, an enterprise must enable RDP)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.9959 81.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36 69.1098 Tm -.005 Tc [(t)9.8(o)0( the whole Internet, perhaps for a tempor)19.5(ar)-8.8(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 216.1193 69.1098 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 569.0945 Tm -.005 Tc [(scenario, change the listening por)-24.4(t fr)9.8(om the)]TJ ET EMC /P <>BDC BT 9 0 0 9 425.0476 569.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 557.0945 Tm -.005 Tc [(standar)9.3(d 3389 t)9.8(o)0( something within the dynamic)]TJ ET EMC /P <>BDC BT 9 0 0 9 441.6579 557.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 545.0945 Tm -.005 Tc [(r)19.5(ange. It must be pointed out that this acts only as a)]TJ ET EMC /P <>BDC BT 9 0 0 9 457.8951 545.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 533.0945 Tm -.005 Tc [(camouage, helping t)9.8(o)0( hide the open RDP ser)-8.8(v)6.4(e)0(r)]TJ ET EMC /P <>BDC BT 9 0 0 9 444.6848 533.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 521.0945 Tm -.005 Tc [(fr)9.8(om common Internet Pr)9.8(ot)9.8(ocol \(IP\) scanners. )19.5(The)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.4037 521.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 509.0945 Tm -.005 Tc [(r)9.3(esidual risk will not be static, though, because as)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.4313 509.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 497.0945 Tm -.005 Tc [(the incentiv)6.4(es for exploitation matur)9.3(e, so do the)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.955 497.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 485.0945 Tm -.005 Tc [(scanners. Opening RDP on a diff)11.7(er)9.3(ent listening por)-24.4(t)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.1649 485.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 473.0945 Tm -.005 Tc [(off)11.7(ers only tempor)19.5(ar)-8.8(y pr)9.8(otection.)]TJ ET EMC /P <>BDC BT 9 0 0 9 383.0474 473.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 449.0945 Tm -.005 Tc [(RDP ser)-8.8(v)6.4(ers should be placed behind a r)9.3(ewall)]TJ ET EMC /P <>BDC BT 9 0 0 9 437.571 449.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 437.0945 Tm -.005 Tc [(within a demilitariz)7.8(ed z)7.8(one \(DMZ\) or other r)9.3(estricted)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.8499 437.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 425.0945 Tm -.005 Tc [(ar)9.3(ea of the network. )19.5(That wa)7.3(y)52.3(,)0( in the e)6.4(v)6.4(ent of a)]TJ ET EMC /P <>BDC BT 9 0 0 9 436.399 425.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 413.0945 Tm -.005 Tc [(successful attack, its scope will be r)9.3(educed and)]TJ ET EMC /P <>BDC BT 9 0 0 9 441.4482 413.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 401.0945 Tm -.005 Tc [(conned t)9.8(o)0( the RDP ser)-8.8(v)6.4(er alone. If this is not)]TJ ET EMC /P <>BDC BT 9 0 0 9 432.9327 401.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 389.0945 Tm -.005 Tc [(f)11.7(easible \(e.g., because RDP needs t)9.8(o)0( be exposed t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.7967 389.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 377.0945 Tm -.005 Tc [(allow external users ont)9.8(o the network\), the quantity)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.7463 377.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 365.0945 Tm -.005 Tc [(and types of ser)-8.8(vices r)9.3(eachable within the internal)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.6473 365.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 353.0945 Tm -.005 Tc [(network should be minimiz)7.8(ed. Computers running)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.8351 353.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 341.0945 Tm -.005 Tc [(RDP ser)-8.8(vices on the network should be placed)]TJ ET EMC /P <>BDC BT 9 0 0 9 435.8273 341.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 329.0945 Tm -.005 Tc [(behind vir)-24.4(tual priv)7.3(ate networks \()-9.8(VPNs\) t)9.8(o)0( allow)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.4346 329.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 317.0945 Tm -.005 Tc [(access t)9.8(o)0( only trusted users.)]TJ ET EMC /P <>BDC BT 9 0 0 9 366.7962 317.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 293.0945 Tm -.005 Tc [(Finally)52.3(, a block or timeout should be imposed on IP)]TJ ET EMC /P <>BDC BT 9 0 0 9 453.4598 293.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 281.0945 Tm -.005 Tc [(addr)9.3(esses with t)9.8(oo many failed logon attempts. A)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.3715 281.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 269.0945 Tm -.005 Tc [(high number is a str)9.8(ong indication of a brute-for)9.3(ce)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.5989 269.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 257.0945 Tm -.005 Tc (attack, and limiting the number of attempts per user)Tj ET EMC /P <>BDC BT 9 0 0 9 458.152 257.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 245.0945 Tm -.005 Tc [(can pr)9.3(e)6.4(v)6.4(ent such attacks. It is best t)9.8(o)0( log both)]TJ ET EMC /P <>BDC BT 9 0 0 9 434.9268 245.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 233.0945 Tm -.005 Tc (failed and successful logons.)Tj ET EMC /P <>BDC BT 9 0 0 9 368.8659 233.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 253.5 207.0945 Tm .05 .65 1 0 k -.005 Tc [(7. P)5.4(atch in a )29.3(Timely Manner)]TJ ET EMC /P <>BDC BT 11 0 0 11 389.854 207.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 253.5 189.0944 Tm 0 0 0 1 k -.005 Tc [(Many I)14.2(T)19.5( pr)9.8(of)11.7(essionals fondly r)9.3(emember P)5.4(atch)]TJ ET EMC /P <>BDC BT 9 0 0 9 435.4198 189.0944 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 177.0944 Tm -.005 Tc [(T)46.4(uesda)7.3(y)52.3(,)0( when major I)14.2(T)19.6( v)6.4(endors pushed patches)]TJ ET EMC /P <>BDC BT 9 0 0 9 445.0505 177.0944 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 165.0944 Tm -.005 Tc [(e)6.4(v)6.4(e)0(r)-8.8(y)0( second and four)-24.4(th )19.5(T)46.4(uesda)7.3(y of the month. But)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.8857 165.0944 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 153.0944 Tm -.005 Tc [(the time dela)7.3(y between a vulner)19.5(ability being)]TJ ET EMC /P <>BDC BT 9 0 0 9 425.1882 153.0944 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 141.0944 Tm -.005 Tc [(identied and a potential x being r)9.3(eleased on)]TJ ET EMC /P <>BDC BT 9 0 0 9 434.485 141.0944 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 129.0945 Tm -.005 Tc [(P)5.4(atch )19.5(T)46.4(uesda)7.3(y left e)6.4(v)6.4(e)0(r)-8.8(y)7.3(one at risk during that)]TJ ET EMC /P <>BDC BT 9 0 0 9 435.6881 129.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 117.0945 Tm -.005 Tc [(inter)-8.8(v)7.3(al. Micr)9.8(osoft)54.7(s new policy of continually)]TJ ET EMC /P <>BDC BT 9 0 0 9 430.5333 117.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 105.0945 Tm -.005 Tc [(r)9.3(eleasing patches has made e)6.4(v)6.4(e)0(r)-8.8(y)7.3(one a lot saf)11.7(er)]TJ ET EMC /P <>BDC BT 9 0 0 9 443.9674 105.0945 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 93.0945 Tm -.005 Tc [(and helped close the dr)9.3(eaded vulner)19.5(ability window)60.6(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 453.5926 93.0945 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 253.5 589.275 348.448 118.085 re f EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 264.4985 666.681 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC BT /F2 1 Tf 14 0 0 14 278.4057 688.6807 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [( GIVING)17.6( EVER)23.4(Y)14.1(ONE)17.5( FULL)17.5( A)5.3(CCESS)17.5( IS)]TJ ET EMC /P <>BDC BT 14 0 0 14 518.8395 688.6807 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.7446 670.6807 Tm .0351 Tc -.0175 Tw [(AL)69.8(W)21(A)45.9(Y)7.8(S)17.5( )19.6(THE)17.5( P)67.3(A)63(TH)17.5( OF)17.5( LEAST)37.1( RESIST)38.5(ANCE)17.5(,)]TJ ET EMC /P <>BDC BT 14 0 0 14 552.107 670.6807 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.7446 652.6807 Tm .0351 Tc -.0175 Tw [(BUT)37.1( JUST)37.1( LIKE)17.5( AN)17.5( OPEN)17.5( AN)13.6(Y)17.5(/)17.5(A)0(N)13.6(Y)17.5( FIREW)21(ALL)]TJ ET EMC /P <>BDC BT 14 0 0 14 568.0758 652.6807 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.7446 634.6807 Tm .0351 Tc -.0175 Tw [(TH)-8.8(A)63(T)37.1( ALL)31.7(OWS)17.5( EVER)23.4(Y)-8.3(THING)17.6( )19.6(T)13.6(O)17.6( WORK)17.6(,)35.1( I)14.1(T)]TJ ET EMC /P <>BDC BT 14 0 0 14 539.194 634.6807 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.7446 616.6807 Tm .0351 Tc -.0175 Tw [(SURRENDERS)17.5( I)14.1(T)7.8(S)17.5( SECURI)14.1(T)-7.8(Y)17.5( PURPOSE)17.5( AS)17.5( A)]TJ ET EMC /P <>BDC BT 14 0 0 14 555.2447 616.6807 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 264.7446 598.6807 Tm .0351 Tc [(CONSEQUENCE)17.5(.)35.1( )]TJ ET EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 375.7534 574.6809 Tm 0 .89 .21 .07 k 0 Tc ()Tj ET EMC Q endstream endobj 162 0 obj <>/ExtGState<>>> endobj 206 0 obj <> endobj 224 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2020 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 522.0879 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 61.2198 24.9858 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm 0 .35 .9 0 k [( V)6.4(OL 2)]TJ ET EMC /P <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (4)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /P <>BDC BT 9 0 0 9 144 697.0227 Tm 0 0 0 1 k -.005 Tc [(But unfor)-24.4(tunately)52.3(, enterprises ar)9.3(e not taking)]TJ ET EMC /P <>BDC BT 9 0 0 9 316.3552 697.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 685.0227 Tm -.005 Tc [(adv)7.3(antage of these continually r)9.3(eleasing patches.)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.1762 685.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 673.0227 Tm -.005 Tc [(F)10.3(or example, Micr)9.8(osoft emphasiz)7.8(ed the impor)-24.4(tance)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.584 673.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 661.0227 Tm -.005 Tc (of installing the critical security update for)Tj ET EMC /P <>BDC BT 9 0 0 9 309.7711 661.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 649.0227 Tm -.005 Tc [(EternalBlue \(the vulner)19.5(ability that power)9.3(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 310.205 649.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 637.0227 Tm -.005 Tc [(W)16.1(annaCr)-8.8(y\), but the scale of the global attack made)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.0771 637.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 625.0227 Tm -.005 Tc [(it clear that a signicant pr)9.8(opor)-24.4(tion of victims had)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.2629 625.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 613.0227 Tm -.005 Tc [(not applied the patch. W)16.1(annaCr)-8.8(y t)9.8(ook only a da)7.3(y t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.7016 613.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 601.0227 Tm -.005 Tc [(spr)9.3(ead ar)9.8(ound the ear)-24.4(th, inf)11.7(ecting mor)9.3(e than)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.3226 601.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 589.0227 Tm -.005 Tc (230,000 computer systems in 150 countries and)Tj ET EMC /P <>BDC BT 9 0 0 9 334.3024 589.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 577.0227 Tm -.005 Tc [(costing appr)9.8(o)10.3(ximately US$4 billion in nancial)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.3673 577.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 565.0227 Tm -.005 Tc (losses.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 172.0606 567.9927 Tm 0 Tc (3)Tj ET EMC /P <>BDC BT 9 0 0 9 175.0478 565.0227 Tm -.005 Tc [( W)16.1(annaCr)-8.8(y exploited a known weakness in)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.4654 565.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 553.0227 Tm -.005 Tc [(Windows computers for which Micr)9.8(osoft had)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.6635 553.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 541.0227 Tm -.005 Tc [(r)9.3(eleased a x months prior t)9.8(o)0( the attack.)]TJ ET EMC /P <>BDC BT 9 0 0 9 303.0967 541.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 529.0227 Tm -.005 Tc [(Enterprises should k)9.8(eep up-t)9.8(o-date on all patches,)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.0233 529.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 517.0226 Tm -.005 Tc [(especially security patches, and mak)9.8(e sur)9.3(e t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.5032 517.0226 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 505.0227 Tm -.005 Tc [(test all patches quickly and thor)9.8(oughly befor)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.0602 505.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 493.0227 Tm -.005 Tc (applying them.)Tj ET EMC /P <>BDC BT 9 0 0 9 202.1559 493.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 469.0227 Tm -.005 Tc [(Enterprises should de)6.4(v)6.4(elop a r)9.3(eliable patching)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.0511 469.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 457.0227 Tm -.005 Tc [(str)19.5(ategy that, in addition t)9.8(o)0( patching Windows)]TJ ET EMC /P <>BDC BT 9 0 0 9 324.2467 457.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 445.0227 Tm -.005 Tc [(oper)19.5(ating systems, prioritiz)7.8(es the timely patching of)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.8426 445.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 433.0227 Tm -.005 Tc [(Ja)7.3(v)7.3(a, Flash and Adobe Reader)60.1(. )19.5(These ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 305.7267 433.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 421.0227 Tm -.005 Tc [(commonly exploited b)5.4(y)0( r)19.5(ansomwar)9.3(e. A)5.4(u)0(t)9.8(omatic)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.4984 421.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 409.0227 Tm -.005 Tc [(updating should be enabled whene)6.4(v)6.4(er possible for)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.0381 409.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 397.0227 Tm -.005 Tc [(de)6.4(vices and applications connected t)9.8(o)0( the network.)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.5713 397.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F8 1 Tf 9 0 0 9 144 373.0227 Tm -.005 Tc [(Contr)17.6(ol Legacy and Shadow I)14.2(T)29.3( )]TJ ET EMC /P <>BDC BT 9 0 0 9 266.8456 373.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 144 361.0227 Tm -.005 Tc [(The majority of malwar)9.3(e and most activ)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 305.1554 361.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 349.0227 Tm -.005 Tc [(r)19.5(ansomwar)9.3(e families r)9.3(ely on vulner)19.5(abilities in)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.2805 349.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 337.0227 Tm -.005 Tc [(obsolete deskt)9.8(op oper)19.5(ating systems because the)6.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.0128 337.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 325.0227 Tm -.005 Tc [(mak)9.8(e later)19.5(al mo)7.3(v)6.4(ement frictionless. When har)9.3(dwar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 349.1299 325.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 313.0227 Tm -.005 Tc [(and softwar)9.3(e ar)9.3(e no longer suppor)-24.4(ted b)5.4(y)0( the v)6.4(endor)60.1(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.8861 313.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 301.0227 Tm -.005 Tc [(enterprises should upgr)19.5(ade it, r)9.3(eplace it or air-gap it.)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.3667 301.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 289.0227 Tm -.005 Tc [(This r)9.3(equir)9.3(es an enterprise t)9.8(o)0( maintain a complete)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.1371 289.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 277.0227 Tm -.005 Tc [(inv)6.4(ent)9.8(or)-8.8(y of all I)14.2(T)19.5( assets, because if it cannot be)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.2943 277.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 265.0227 Tm -.005 Tc [(seen, it cannot be pr)9.8(otected.)]TJ ET EMC /P <>BDC BT 9 0 0 9 255.7801 265.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 144 239.0227 Tm .05 .65 1 0 k -.005 Tc [(8. Use Endpoint Pr)17.6(otection)]TJ ET EMC /P <>BDC BT 11 0 0 11 274.4363 239.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 144 221.0227 Tm 0 0 0 1 k -.005 Tc [(Emplo)7.3(ying endpoint pr)9.8(otection and k)9.8(eeping)]TJ ET EMC /P <>BDC BT 9 0 0 9 314.8872 221.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 209.0227 Tm -.005 Tc [(softwar)9.3(e up-t)9.8(o-date ar)9.3(e critical. Many antivirus)]TJ ET EMC /P <>BDC BT 9 0 0 9 326.8506 209.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 197.0227 Tm -.005 Tc [(packages now off)11.7(er r)19.5(ansomwar)9.3(e-spotting f)11.7(eatur)9.3(es)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.441 197.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 185.0227 Tm -.005 Tc [(or add-ons that can identify suspicious beha)7.3(vior)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.8931 185.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 173.0227 Tm -.005 Tc [(common t)9.8(o)0( all r)19.5(ansomwar)9.3(e: le encr)-8.8(yption. Some)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.7596 173.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 161.0227 Tm -.005 Tc [(security packages e)6.4(v)6.4(en mak)9.8(e copies of the les)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.3636 161.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 149.0227 Tm -.005 Tc [(that ar)9.3(e thr)9.3(eatened b)5.4(y)0( r)19.5(ansomwar)9.3(e. In addition,)]TJ ET EMC /P <>BDC BT 9 0 0 9 329.6949 149.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 137.0227 Tm -.005 Tc [(content scanning and email ltering can be used t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.1737 137.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 125.0227 Tm -.005 Tc [(pr)9.3(e)6.4(v)6.4(ent attack emails fr)9.8(om arriving in the inbo)10.3(x.)]TJ ET EMC /P <>BDC BT 9 0 0 9 331.3101 125.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 144 99.0227 Tm .05 .65 1 0 k -.005 Tc [(9. Implement F)16.6(ail-Saf)11.7(e Backups)]TJ ET EMC /P <>BDC BT 11 0 0 11 299.9977 99.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 144 81.0227 Tm 0 0 0 1 k -.005 Tc [(Sometimes bad things happen. If ther)9.3(e is)]TJ ET EMC /P <>BDC BT 9 0 0 9 305.7212 81.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144 69.0227 Tm -.005 Tc [(something wor)-24.4(th pr)9.8(otecting, someone somewher)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.8806 69.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 697.0227 Tm -.005 Tc [(is lik)9.8(ely t)9.8(o)0( come after it. One of the best pr)9.8(otections)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.5978 697.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 685.0227 Tm -.005 Tc [(against a r)19.5(ansomwar)9.3(e attack is r)9.3(egular)60.1(, viable)]TJ ET EMC /P <>BDC BT 9 0 0 9 542.3469 685.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 673.0227 Tm -.005 Tc [(backups. It is not possible t)9.8(o)0( per)-7.3(form full backups)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.5946 673.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 661.0227 Tm -.005 Tc [(of e)6.4(v)6.4(e)0(r)-8.8(ything e)6.4(v)6.4(e)0(r)-8.8(y)0( second, but it is possible t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.3955 661.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 649.0227 Tm -.005 Tc [(identify the most critical data and ensur)9.3(e that)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.1461 649.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 637.0227 Tm -.005 Tc [(backups ar)9.3(e scheduled accor)9.3(dingly)52.3(. St)9.8(or)9.3(e at least)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.6455 637.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 625.0227 Tm -.005 Tc [(one cop)5.4(y of backups oine t)9.8(o)0( air-gap it fr)9.8(om a)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.0206 625.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 613.0227 Tm -.005 Tc [(network st)9.8(or)19.5(age attack. Critical backups should be)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.9554 613.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 601.0227 Tm -.005 Tc [(tested periodically t)9.8(o)0( v)7.3(alidate r)9.3(eco)7.3(v)6.4(e)0(r)19.5(ability)52.3(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 536.5485 601.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 362.5 575.0227 Tm .05 .65 1 0 k -.025 Tc [(10. Ha)7.3(v)6.4(e)0( a Modern Incident Response Plan)]TJ ET EMC /P <>BDC BT 11 0 0 11 563.7576 575.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 362.5 557.0227 Tm 0 0 0 1 k -.005 Tc [(A)8.3(t)0( a US conf)11.7(er)9.3(ence of ma)7.3(y)7.3(ors in July 2019, mor)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.2551 557.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 545.0227 Tm -.005 Tc [(than 14,000 ma)7.3(y)7.3(ors signed a r)9.3(esolution agr)9.3(eeing)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.3693 545.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 533.0227 Tm -.005 Tc [(not t)9.8(o)0( pa)7.3(y r)19.5(ansoms.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 440.892 535.9927 Tm 0 Tc (4)Tj ET EMC /P <>BDC BT 9 0 0 9 443.8793 533.0227 Tm -.005 Tc ( But if a violation occurs and)Tj ET EMC /P <>BDC BT 9 0 0 9 555.7241 533.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 521.0227 Tm -.005 Tc [(critical lif)11.7(e-sa)7.3(ving ser)-8.8(vices ar)9.3(e not a)7.3(v)7.3(ailable,)]TJ ET EMC /P <>BDC BT 9 0 0 9 534.9137 521.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 509.0227 Tm -.005 Tc [(emotions must be tak)9.8(en out of the equation, and)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.776 509.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 497.0227 Tm -.005 Tc [(har)9.3(d decisions must be made. )]TJ ET EMC /P <>BDC BT 9 0 0 9 483.7723 497.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 362.5 345.0227 Tm .05 .65 1 0 k -.005 Tc [(T)101.6(o)0( P)5.4(a)7.3(y or Not t)14.7(o)0( P)5.4(a)7.3(y? )]TJ ET EMC /P <>BDC BT 11 0 0 11 469.5665 345.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 362.5 327.0227 Tm 0 0 0 1 k -.005 Tc [(What should an enterprise do if it is attack)9.8(ed? It is)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.7883 327.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 315.0227 Tm -.005 Tc [(not a simple task t)9.8(o)0( r)9.3(eco)7.3(v)6.4(er les encr)-8.8(ypted b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.0457 315.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 303.0227 Tm -.005 Tc [(r)19.5(ansomwar)9.3(e, and in many cases, it is impossible.)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.0405 303.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 291.0227 Tm -.005 Tc [(Ther)9.3(efor)9.3(e, a modern and r)9.3(ehearsed incident)]TJ ET EMC /P <>BDC BT 9 0 0 9 534.7132 291.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 279.0227 Tm -.005 Tc [(r)9.3(esponse plan \(IRP\) is critical t)9.8(o)0( pr)9.3(e)6.4(v)6.4(enting a)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.3336 279.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 267.0227 Tm -.005 Tc [(r)19.5(ansomwar)9.3(e attack and r)9.3(esponding eff)11.7(ectiv)6.4(ely t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.9933 267.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 255.0227 Tm -.005 Tc [(one. A 2019 r)9.3(epor)-24.4(t b)5.4(y)0( the P)6.4(onemon Institute)]TJ ET EMC /P <>BDC BT 9 0 0 9 536.7865 255.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 243.0227 Tm -.005 Tc (concluded that the formation of an incident)Tj ET EMC /P <>BDC BT 9 0 0 9 533.1389 243.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 231.0227 Tm -.005 Tc [(r)9.3(esponse team and the existence of a tested IRP)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.3893 231.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 219.0227 Tm -.005 Tc [(could sa)7.3(v)6.4(e)0( enterprises an a)7.3(v)6.4(er)19.5(age of US$680,000 in)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.337 219.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 207.0227 Tm -.005 Tc [(the e)6.4(v)6.4(ent of an incident and contain the attack in)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.0585 207.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 195.0227 Tm -.005 Tc [(less than 30 da)7.3(ys, which could sa)7.3(v)6.4(e)0( mor)9.3(e than)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.657 195.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 183.0227 Tm -.005 Tc (US$1 million.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 414.5179 185.9927 Tm 0 Tc (5)Tj ET EMC /P <>BDC BT 9 0 0 9 417.505 183.0227 Tm -.005 Tc [( )19.5(The city of Baltimor)9.3(e, Mar)-8.8(yland, USA,)]TJ ET EMC /P <>BDC BT 9 0 0 9 564.5945 183.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 171.0227 Tm -.005 Tc [(ma)7.3(y ha)7.3(v)6.4(e)0( a)7.3(v)7.3(oided losing US$18 million had it)]TJ ET EMC /P <>BDC BT 9 0 0 9 540.578 171.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 159.0227 Tm -.005 Tc [(simply formaliz)7.8(ed an IRP and tested it r)9.8(outinely)52.3(.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 549.7573 161.9927 Tm 0 Tc (6)Tj ET EMC /P <>BDC BT 9 0 0 9 552.7446 159.0227 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 554.9276 159.0227 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 135.0227 Tm -.005 Tc (One component of a modern IRP is a cost-benet)Tj ET EMC /P <>BDC BT 9 0 0 9 556.5279 135.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 123.0227 Tm -.005 Tc [(calculus of time, effor)-24.4(t and cost in determining)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.6909 123.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 111.0227 Tm -.005 Tc [(whether t)9.8(o)0( pa)7.3(y a r)19.5(ansom. Modern IRPs should)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.2441 111.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 99.0227 Tm -.005 Tc (consider the following:)Tj ET EMC /P <>BDC BT 9 0 0 9 452.0103 99.0227 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 362.782 367.869 206.152 118.085 re f EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 367.0482 444.7026 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC BT /F2 1 Tf 14 0 0 14 380.9554 466.7023 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [( I)14.1(T)37.1( IS)17.5( NO)13.2(T)37.1( A)17.6( SIMPLE)17.5( )19.6(T)38.5(ASK)]TJ ET EMC /P <>BDC BT 14 0 0 14 553.4604 466.7023 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 367.2943 448.7023 Tm .0351 Tc -.0175 Tw [(T)13.6(O)17.6( RECO)10.7(VER)17.5( FILES)]TJ ET EMC /P <>BDC BT 14 0 0 14 494.6479 448.7023 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 367.2943 430.7023 Tm .0351 Tc -.0175 Tw [(ENCR)23.4(YPTED)17.5( B)26.8(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 470.7493 430.7023 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 367.2943 412.7023 Tm .0351 Tc -.0175 Tw [(RANSOMW)21(ARE)17.5(,)35.1( AND)17.5( IN)]TJ ET EMC /P <>BDC BT 14 0 0 14 521.9163 412.7023 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 367.2943 394.7023 Tm .0351 Tc -.0175 Tw [(M)-8.8(A)0(N)13.6(Y)17.5( CASES)17.5(,)35.1( I)14.1(T)37.1( IS)]TJ ET EMC /P <>BDC BT 14 0 0 14 492.8842 394.7023 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 367.2943 376.7023 Tm .0351 Tc [(IMPOSSIBLE)17.5(.)35.1( )]TJ ET EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 458.2328 352.7025 Tm 0 .89 .21 .07 k 0 Tc ()Tj ET EMC /Artifact <>BDC 0 .35 .9 0 k .34998 464.917 130.102 238.856 re f EMC /Figure <>BDC Q q 1 i -56.06 466.112 272.018 -172.676 re W n .34998 464.917 130.101 -128 re W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS3 gs q 131.564 0 0 -129.381 -.31567 465.608 cm /Im4 Do Q EMC /P <>BDC Q q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS3 gs BT /F1 1 Tf 13 0 0 13 36.4518 694.0227 Tm 0 0 0 0 k 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 13 0 0 13 36.4518 681.0227 Tm [(Enjo)7.3(ying)]TJ ET EMC /P <>BDC BT 13 0 0 13 86.3508 681.0227 Tm ( )Tj ET EMC /P <>BDC BT 13 0 0 13 36.4518 668.0227 Tm [(this ar)-24.4(ticle?)]TJ ET EMC /P <>BDC BT 13 0 0 13 105.0763 668.0227 Tm ( )Tj ET EMC /P <>BDC BT 13 0 0 13 36.4518 655.0227 Tm ( )Tj ET EMC /P <>BDC BT /F4 1 Tf 10 0 0 10 36.4518 643.0227 Tm ()Tj ET EMC /P <>BDC BT /F8 1 Tf 10 0 0 10 42.4423 643.0227 Tm ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.4227 643.0227 Tm -.02 Tc (Read )Tj ET EMC /P <>BDC BT /F9 1 Tf 10 0 0 10 71.5743 643.0227 Tm (Phishing)Tj ET EMC /P <>BDC BT 10 0 0 10 108.1874 643.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 631.0227 Tm -.02 Tc [(Def)11.7(ense and)]TJ ET EMC /P <>BDC BT 10 0 0 10 99.8733 631.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 619.0227 Tm -.02 Tc [(Go)7.3(v)6.4(ernance.)]TJ ET EMC /P <>BDC BT 10 0 0 10 100.0979 619.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 607.0227 Tm -.02 Tc [(www)60.6(.isaca.or)9.3(g/)]TJ ET EMC /P <>BDC BT 10 0 0 10 112.8769 607.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 595.0227 Tm -.02 Tc (phishing)Tj ET EMC /P <>BDC BT /F8 1 Tf 10 0 0 10 83.1977 595.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F4 1 Tf 10 0 0 10 36.4518 583.0227 Tm ()Tj ET EMC /P <>BDC BT /F8 1 Tf 10 0 0 10 42.8422 583.0227 Tm -.02 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.4227 583.0227 Tm [(Learn mor)9.3(e)]TJ ET EMC /P <>BDC BT 10 0 0 10 96.3606 583.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 571.0227 Tm -.02 Tc (about, discuss)Tj ET EMC /P <>BDC BT 10 0 0 10 109.3026 571.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 559.0227 Tm -.02 Tc [(and collabor)14.7(ate)]TJ ET EMC /P <>BDC BT 10 0 0 10 113.673 559.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 547.0227 Tm -.02 Tc (on information)Tj ET EMC /P <>BDC BT 10 0 0 10 110.3867 547.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 535.0227 Tm -.02 Tc (and cybersecurity)Tj ET EMC /P <>BDC BT 10 0 0 10 123.2292 535.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 523.0227 Tm -.02 Tc [(in ISA)10.3(CA)58.6()113.3(s)0( Online)]TJ ET EMC /P <>BDC BT 10 0 0 10 119.7282 523.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 511.0227 Tm -.02 Tc [(F)10.3(orums. )]TJ ET EMC /P <>BDC BT 10 0 0 10 85.0289 511.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F9 1 Tf 10 0 0 10 47.3268 499.0227 Tm -.02 Tc [(https:/)121.1(/engage.)]TJ ET EMC /P <>BDC BT 10 0 0 10 111.1633 499.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 487.0227 Tm -.02 Tc [(isaca.or)9.3(g/)]TJ ET EMC /P <>BDC BT 10 0 0 10 89.756 487.0227 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 10 0 0 10 47.3268 475.0227 Tm -.02 Tc (onlineforums)Tj ET EMC Q endstream endobj 225 0 obj <>/XObject<>/ExtGState<>>> endobj 273 0 obj <>stream /P <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F2 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2020 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 7 0 0 7 144.4321 23.0228 Tm [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F2 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA )]TJ ET EMC /P <>BDC BT 7 0 0 7 509.9464 23.0228 Tm [(JOURN)-8.8(AL)]TJ ET EMC /P <>BDC /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm 0 .35 .9 0 k [( V)6.4(OL 2)]TJ ET EMC /P <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (5)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 35.2679 699.6915 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 39.7229 699.6915 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 41.906 699.6915 Tm 0 .89 .21 .07 k -.005 Tc (Data criticality)Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 99.6071 699.6915 Tm 0 0 0 1 k [(How impor)-24.4(tant ar)9.3(e the data in)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.2445 699.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 687.6915 Tm -.005 Tc [(question, and ar)9.3(e the)6.4(y wor)-24.4(th r)9.3(eco)7.3(v)6.4(ering?)]TJ ET EMC /P <>BDC BT 9 0 0 9 201.2674 687.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 35.2679 669.6915 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 39.7229 669.6915 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 41.906 669.6915 Tm 0 .89 .21 .07 k -.005 Tc (Business impact)Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 108.2301 669.6915 Tm 0 0 0 1 k (How long can the business)Tj ET EMC /P <>BDC BT 9 0 0 9 221.7315 669.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 657.6915 Tm -.005 Tc [(oper)19.5(ate without the data befor)9.3(e pr)9.8(ots or)]TJ ET EMC /P <>BDC BT 9 0 0 9 203.8767 657.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 645.6915 Tm -.005 Tc [(r)9.3(eputation ar)9.3(e adv)6.4(ersely impacted? Some)]TJ ET EMC /P <>BDC BT 9 0 0 9 205.3028 645.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 633.6916 Tm -.005 Tc [(attack)9.8(ers r)9.3(esor)-24.4(t t)9.8(o)0( publicly naming victims who)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.4404 633.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 621.6916 Tm -.005 Tc [(r)9.3(efuse t)9.8(o)0( pa)7.3(y the r)19.5(ansom and/or publish their)]TJ ET EMC /P <>BDC BT 9 0 0 9 219.6138 621.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 609.6916 Tm -.005 Tc [(st)9.8(olen data little b)5.4(y)0( little until pa)7.3(yment is made or)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.1358 609.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 597.6916 Tm -.005 Tc [(until all of the data ha)7.3(v)6.4(e)0( been r)9.3(eleased. What)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.4922 597.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 585.6916 Tm -.005 Tc [(business impact will this ha)7.3(v)6.4(e)0( in the form of)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.3686 585.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 573.6916 Tm -.005 Tc [(r)9.3(egulat)9.8(or)-8.8(y nes, data br)9.3(each notication costs,)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.2476 573.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 561.6915 Tm -.005 Tc [(tarnished br)19.5(and image, loss of business and tr)19.5(ade)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.3567 561.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 549.6915 Tm -.005 Tc [(secr)9.3(ets, and potential lawsuits for the disclosur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.6429 549.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 537.6915 Tm -.005 Tc (of personally identiable information \(PII\)?)Tj ET EMC /P <>BDC BT 9 0 0 9 209.692 537.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 35.2679 513.6915 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 39.7229 513.6915 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 41.906 513.6915 Tm 0 .89 .21 .07 k -.005 Tc [(F)10.3(easibility of r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 130.0101 513.6915 Tm 0 0 0 1 k [(Ar)9.3(e ther)9.3(e any viable)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.3325 513.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 501.6916 Tm -.005 Tc [(backups of the data, and if so, ar)9.3(e the)6.4(y also)]TJ ET EMC /P <>BDC BT 9 0 0 9 212.4155 501.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 489.6916 Tm -.005 Tc [(encr)-8.8(ypted? It is saf)11.7(e t)9.8(o)0( assume that the attack)9.8(ers)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.4001 489.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 477.6916 Tm -.005 Tc [(ha)7.3(v)6.4(e)0( been inside the network for weeks and will)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.7279 477.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 465.6916 Tm -.005 Tc [(ha)7.3(v)6.4(e)0( estimated how much time, effor)-24.4(t and mone)6.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.5424 465.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 453.6916 Tm -.005 Tc [(it will tak)9.8(e the victim t)9.8(o)0( r)9.3(est)9.8(or)9.3(e data fr)9.8(om backups)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.9029 453.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 441.6916 Tm -.005 Tc [(when deriving their r)19.5(ansom amount.)]TJ ET EMC /P <>BDC BT 9 0 0 9 183.801 441.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 35.2679 417.6916 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 39.7229 417.6916 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 41.906 417.6916 Tm 0 .89 .21 .07 k -.005 Tc [(Reco)7.3(v)6.4(e)0(r)-8.8(y)0( effor)-24.4(t)]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 103.9807 417.6916 Tm 0 0 0 1 k [(Lar)9.3(ge v)7.3(olumes of data tak)9.8(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.2325 417.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 405.6916 Tm -.005 Tc [(longer and r)9.3(equir)9.3(e mor)9.3(e effor)-24.4(t t)9.8(o)0( r)9.3(eco)7.3(v)6.4(e)0(r)60.1(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 203.7176 405.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 393.6916 Tm -.005 Tc [(Dispar)19.5(ate locations can complicate r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 216.7991 393.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 381.6916 Tm -.005 Tc [(effor)-24.4(ts, especially if the attack)9.8(er is still lurking)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.107 381.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 369.6916 Tm -.005 Tc [(somewher)9.3(e on the network. If a fr)9.3(esh image of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.3254 369.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 357.6916 Tm -.005 Tc [(inf)11.7(ected oper)19.5(ating system must be loaded ont)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.1215 357.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 345.6916 Tm -.005 Tc [(computers befor)9.3(e data can be r)9.3(est)9.8(or)9.3(ed, this will)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.4325 345.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 333.6916 Tm -.005 Tc [(add t)9.8(o)0( the r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)0( time. If the enterprise must)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.2069 333.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 321.6916 Tm -.005 Tc [(r)9.3(esor)-24.4(t t)9.8(o)0( pen-and-paper pr)9.8(ocesses t)9.8(o)0( log)]TJ ET EMC /P <>BDC BT 9 0 0 9 202.0805 321.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 309.6916 Tm -.005 Tc [(tr)19.5(ansactions during a lock)9.8(down, the time t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 211.9212 309.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 297.6916 Tm -.005 Tc [(tediously input these data once systems ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.4322 297.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 285.6916 Tm -.005 Tc [(r)9.3(est)9.8(or)9.3(ed must be consider)9.3(ed.)]TJ ET EMC /P <>BDC BT 9 0 0 9 157.3785 285.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 35.2679 261.6916 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 39.7229 261.6916 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.9191 261.6916 Tm -.005 Tc [(Impact of r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 116.9634 261.6916 Tm 0 0 0 1 k [(Estimate the eff)11.7(ect of lost)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.1648 261.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 249.6916 Tm -.005 Tc [(ser)-8.8(vices on cust)9.8(omers and emplo)7.3(y)6.4(ees. )19.5(This )]TJ ET EMC /P <>BDC BT 9 0 0 9 216.9231 249.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 237.6916 Tm -.005 Tc [(ma)7.3(y include lost r)9.3(e)6.4(v)6.4(enue and damage t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 201.208 237.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 225.6916 Tm -.005 Tc [(r)9.3(eputation. If r)9.3(eco)7.3(v)6.4(e)0(r)-8.8(y)0( effor)-24.4(ts ar)9.3(e pr)9.8(olonged, these)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.3995 225.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 213.6916 Tm -.005 Tc [(costs can skyr)9.8(ock)9.8(et.)]TJ ET EMC /P <>BDC BT 9 0 0 9 122.8985 213.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 9 0 0 9 35.2679 189.6916 Tm 0 .89 .21 .07 k ()Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 39.7229 189.6916 Tm 0 0 0 1 k ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 41.906 189.6916 Tm 0 .89 .21 .07 k -.005 Tc [(P)5.4(a)7.3(ying the attack)9.8(er)]TJ ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 119.3662 189.6916 Tm 0 0 0 1 k [(Can the r)19.5(ansom amount be)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.5586 189.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 177.6916 Tm -.005 Tc [(negotiated down? Will the insur)9.3(er pa)7.3(y par)-24.4(t or all of)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.2281 177.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 165.6916 Tm -.005 Tc [(the r)19.5(ansom? Can the insur)9.3(er)-7.8()54.7(s)0( pa)7.3(yment be quickly)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.0569 165.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 153.6916 Tm -.005 Tc [(conv)6.4(er)-24.4(ted int)9.8(o cr)-8.8(ypt)9.8(ocurr)9.3(ency? Is it known wher)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.7454 153.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 141.6916 Tm -.005 Tc [(Bitcoins can be bought and a wallet acquir)9.3(ed? Is)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.9769 141.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 129.6916 Tm -.005 Tc [(the attack)9.8(er lik)9.8(ely t)9.8(o)0( pr)9.8(o)7.3(vide the decr)-8.8(yption k)9.8(e)6.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.4344 129.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 117.6916 Tm -.005 Tc [(upon r)9.3(eceiving pa)7.3(yment? Ar)9.3(e ther)9.3(e any indications)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.0619 117.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 105.6916 Tm -.005 Tc [(that the decr)-8.8(yption k)9.8(e)6.4(y will not work? Will the)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.9613 105.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 93.6916 Tm -.005 Tc [(criminals launch futur)9.3(e attacks against the)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.0094 93.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 81.6916 Tm -.005 Tc [(enterprise? Which f)11.7(eder)19.5(al, state and local law)]TJ ET EMC /P <>BDC BT 9 0 0 9 219.8282 81.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 41.8929 69.6916 Tm -.005 Tc [(enfor)9.3(cement agencies must be contacted befor)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.1772 69.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 260.125 699.6915 Tm -.005 Tc [(pr)9.8(oceeding? Can the enterprise)39.1()54.7(s)0( r)9.3(eputation)]TJ ET EMC /P <>BDC BT 9 0 0 9 430.9662 699.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 260.125 687.6915 Tm -.005 Tc [(be def)11.7(ended against the ensuing political and)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.9753 687.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 260.125 675.6915 Tm -.005 Tc [(public pr)9.3(essur)9.3(e?)]TJ ET EMC /P <>BDC BT 9 0 0 9 324.7739 675.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 651.6915 Tm -.005 Tc [(Although r)19.5(ansomwar)9.3(e is dr)19.5(awing headlines and)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.4988 651.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 639.6915 Tm -.005 Tc [(driving f)11.7(ear)60.1(, focused security measur)9.3(es can)]TJ ET EMC /P <>BDC BT 9 0 0 9 424.5434 639.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 627.6916 Tm -.005 Tc [(substantially enhance an enterprise)39.1()54.7(s)0( r)19.5(ansomwar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.435 627.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 615.6916 Tm -.005 Tc [(r)9.3(eadiness and ensur)9.3(e that cust)9.8(omers continue t)9.8(o)0( be)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.5542 615.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 603.6916 Tm -.005 Tc [(ser)-8.8(v)6.4(ed uninterrupted. )]TJ ET EMC /P <>BDC BT 9 0 0 9 339.6847 603.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 11 0 0 11 253.5 451.6916 Tm .05 .65 1 0 k -.005 Tc (Endnotes)Tj ET EMC /P <>BDC BT 11 0 0 11 299.3053 451.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 427.6916 Tm (1)Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 258.6186 427.6916 Tm ( )Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 260.8016 427.6916 Tm 0 0 0 1 k -.005 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.1677 427.6916 Tm [(Emsisoft, F)12.7(r)9.3(ee Ransomwar)9.3(e Decr)-8.8(yption )]TJ ET EMC /P <>BDC BT 9 0 0 9 425.8318 427.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 415.6916 Tm -.005 Tc [(T)48.4(ools,)83( Emsisoft, 18 Oct)9.8(ober 2019,)]TJ ET EMC /P <>BDC BT 9 0 0 9 400.0325 415.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 265.125 403.6916 Tm -.005 Tc [(https:/)109.4(/www)60.6(.emsisoft.com/r)19.5(ansomwar)9.3(e-)]TJ ET EMC /P <>BDC BT 9 0 0 9 265.125 391.6916 Tm [(decr)-8.8(yption-t)9.8(ools/fr)9.3(ee-download)]TJ ET EMC /P <>BDC BT 9 0 0 9 386.9893 391.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 253.5 379.6916 Tm .05 .65 1 0 k (2)Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 258.6186 379.6916 Tm 0 0 0 1 k -.005 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.1677 379.6916 Tm [(Ilascu, I.; Most Cyber A)8.3(ttacks F)10.3(ocus on Just)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.2167 379.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 367.6916 Tm -.005 Tc [(Thr)9.3(ee P)6.4(o)0(r)-24.4(ts,)83( Bleeping Computer)60.1(, 17 September)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.0612 367.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 355.6916 Tm -.005 Tc (2019, )Tj ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 289.0645 355.6916 Tm [(https:/)109.4(/www)60.6(.bleepingcomputer)60.1(.com/)]TJ ET EMC /P <>BDC BT 9 0 0 9 431.6022 355.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 343.6916 Tm -.005 Tc (news/security/most-cyber-attacks-focus-on-just-)Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 331.6916 Tm [(thr)9.3(ee-tcp-por)-24.4(ts/)]TJ ET EMC /P <>BDC BT 9 0 0 9 326.0254 331.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 253.5 319.6915 Tm .05 .65 1 0 k (3)Tj ET EMC /P <>BDC BT 9 0 0 9 258.6186 319.6915 Tm 0 .89 .21 .07 k ( )Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 260.8148 319.6915 Tm 0 0 0 1 k -.005 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.1809 319.6915 Tm [(Cooper)60.1(, C.; W)16.1(annaCr)-8.8(y: Lessons Learned )]TJ ET EMC /P <>BDC BT 9 0 0 9 427.0658 319.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 307.6915 Tm -.005 Tc [(1 Y)31.8(ear Later)60.1(,)83()0( Symantec, 15 Ma)7.3(y 2018,)]TJ ET EMC /P <>BDC BT 9 0 0 9 414.4611 307.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 265.125 295.6915 Tm -.005 Tc [(https:/)109.4(/www)60.6(.symantec.com/blogs/f)11.7(eatur)9.3(e-)]TJ ET EMC /P <>BDC BT 9 0 0 9 265.125 283.6915 Tm [(st)9.8(ories/wannacr)-8.8(y-lessons-learned-1-y)6.4(ear-later)]TJ ET EMC /P <>BDC BT 9 0 0 9 442.0286 283.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 253.5 271.6915 Tm .05 .65 1 0 k (4)Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 258.6186 271.6915 Tm ( )Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 260.8016 271.6915 Tm 0 0 0 1 k -.005 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.1677 271.6915 Tm [(Secur)9.3(eW)15.2(orld, Ma)7.3(y)7.3(ors: W)15.2(e)39.1()0(r)9.3(e)0( Done P)5.4(a)7.3(ying)]TJ ET EMC /P <>BDC BT 9 0 0 9 431.178 271.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 259.6915 Tm -.005 Tc [(Ransoms t)9.8(o)0( Hack)9.8(ers,)83( 12 July 2019,)]TJ ET EMC /P <>BDC BT 9 0 0 9 407.8187 259.6915 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 265.125 247.6915 Tm -.005 Tc [(https:/)109.4(/www)60.6(.secur)9.3(eworldexpo.com/industr)-8.8(y-)]TJ ET EMC /P <>BDC BT 9 0 0 9 265.125 235.6916 Tm [(news/ma)7.3(y)7.3(ors-r)9.3(efuse-t)9.8(o-pa)7.3(y-r)19.5(ansom)]TJ ET EMC /P <>BDC BT 9 0 0 9 403.0494 235.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 253.5 223.6916 Tm .05 .65 1 0 k (5)Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 258.6186 223.6916 Tm 0 0 0 1 k -.005 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.1677 223.6916 Tm [(P)6.4(onemon Institute; )]TJ ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 341.9337 223.6916 Tm (2019 Cost of a )Tj ET EMC /P <>BDC BT 9 0 0 9 400.9586 223.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 211.6916 Tm -.005 Tc [(Data Br)9.3(each )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 314.573 211.6916 Tm [(Repor)-24.4(t, 2019,)]TJ ET EMC /P <>BDC BT 9 0 0 9 366.6611 211.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 265.125 199.6916 Tm -.005 Tc [(https:/)109.4(/databr)9.3(eachcalculat)9.8(or)60.1(.mybluemix.net/)]TJ ET EMC /P <>BDC BT 9 0 0 9 437.7811 199.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 187.6916 Tm -.005 Tc (?_ga=2.175324322.1495375045.1572557631-)Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 175.6916 Tm (835423134.1572557631&cm_mc_uid=38498281)Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 163.6916 Tm (627215725576306&cm_mc_sid_50200000=)Tj ET EMC /P <>BDC BT 9 0 0 9 435.8997 163.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 151.6916 Tm -.005 Tc (83112451572557630645&cm_mc_sid_52640000)Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 139.6916 Tm (=73429421572557630657)Tj ET EMC /P <>BDC BT 9 0 0 9 367.9792 139.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F1 1 Tf 9 0 0 9 253.5 127.6916 Tm .05 .65 1 0 k (6)Tj ET EMC /P <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 258.6186 127.6916 Tm 0 0 0 1 k -.005 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.1677 127.6916 Tm [(Duncan, I.; Baltimor)9.3(e Estimates Cost of)]TJ ET EMC /P <>BDC BT 9 0 0 9 421.9758 127.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 115.6916 Tm -.005 Tc [(Ransomwar)9.3(e A)8.3(ttack at $18.2 Million as)]TJ ET EMC /P <>BDC BT 9 0 0 9 419.5457 115.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 103.6916 Tm -.005 Tc [(Go)7.3(v)6.4(ernment Begins t)9.8(o)0( Rest)9.8(or)9.3(e Email Accounts,)83()]TJ ET EMC /P <>BDC BT 9 0 0 9 453.3752 103.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 265.125 91.6916 Tm -.005 Tc [(The Baltimor)9.3(e Sun)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 336.2768 91.6916 Tm [(, 29 Ma)7.3(y 2019,)]TJ ET EMC /P <>BDC BT 9 0 0 9 393.132 91.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 265.125 79.6916 Tm -.005 Tc [(https:/)109.4(/www)60.6(.baltimor)9.3(esun.com/mar)-8.8(yland/)]TJ ET EMC /P <>BDC BT 9 0 0 9 428.6193 79.6916 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 265.125 67.6916 Tm -.005 Tc [(baltimor)9.3(e-city/bs-md-ci-r)19.5(ansomwar)9.3(e-email-)]TJ ET EMC /P <>BDC BT 9 0 0 9 265.125 55.6916 Tm [(20190529-st)9.8(or)-8.8(y)52.3(.html)]TJ ET EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 252.848 471.933 206.152 120.294 re f EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 257.1144 550.9761 Tm 0 .89 .21 .07 k 0 Tc ()Tj ET EMC /P <>BDC BT /F2 1 Tf 14 0 0 14 271.0216 572.9758 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [( FOCUSED)17.5( SECURI)14.1(T)-7.8(Y)]TJ ET EMC /P <>BDC BT 14 0 0 14 409.8868 572.9758 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 257.3605 554.9758 Tm .0351 Tc -.0175 Tw [(MEASURES)17.5( CAN)]TJ ET EMC /P <>BDC BT 14 0 0 14 365.7989 554.9758 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 257.3605 536.9758 Tm .0351 Tc -.0175 Tw [(SUBST)38.5(AN)14.1(TI)-8.8(ALL)116.7(Y)17.5( ENH)-8.8(ANCE)]TJ ET EMC /P <>BDC BT 14 0 0 14 439.0392 536.9758 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 257.3605 518.9758 Tm .0351 Tc -.0175 Tw [(AN)17.5( EN)14.1(TERPRISE)17.5()17.5(S)]TJ ET EMC /P <>BDC BT 14 0 0 14 377.3858 518.9758 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 14 0 0 14 257.3605 500.9758 Tm .0351 Tc [(RANSOMW)21(ARE)]TJ ET EMC /P <>BDC BT 14 0 0 14 357.7599 500.9758 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 14 0 0 14 257.1144 482.9758 Tm .0351 Tc -.0175 Tw [( READINESS)17.5(.)35.1( )]TJ ET EMC /P <>BDC BT /F7 1 Tf 47 0 0 47 345.4073 458.9759 Tm 0 .89 .21 .07 k 0 Tc 0 Tw ()Tj ET EMC Q endstream endobj 274 0 obj <>/ExtGState<>>> endobj 6 0 obj <> endobj 5 0 obj <> endobj 119 0 obj <>stream AdobedC         #"""#'''''''''' `" s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?f͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6l endstream endobj 120 0 obj <>stream HOqIӤ=ɃNkUMVmSNIf˥I\%!% @iRY4 r#YЀW P1`.166 :؆eꃷ~<^1/η1ZA<7_gF'`޽8^"?{q!8p# 0]5V!3mgyi^q[)Q,B[WH!#|zU?gm)sMȉ[~k财 OMxu#z}ݱ۶+5ߛOt߆']Av.R#Cǎ 66T03gۂr<\3X{|H.9ıiԶN]xQkUDed'R>$Sczd;.V-N3j,`ڐϙZ}맳7n}q`oetɽ:=q维<Ɏ+IS8K ]ոމN.YB(nYYBZOgkEzaGwV'w2"QU@wWJ7 e-}Zόf| ||&;u;mܹVa#o5gdg[s-&j4g; ү-Y+#n˴g^'i!/y/ZO ކKyo뾿=_,6W7_h=L3l36]]Lm<ו_^֕^_nھ9t`e5_mƌcۿњ}R+c7R5uh6[{Ȱ|~Z [}J*b;EWYƶK{뭿iHvPQ, [˭u/yO=oåtorO3/O h߿L3B{2ۥ\V毳Klң^e2&6_w֥B[nKUk=~oCCt7]{Ȁ.7Ԁ鴵Q6#%u_9%uؿ#lFjdwge_oD?4]ߵW_/_יlk {7L+3]'u_rw-KK_6ݿ7S&{/iw3j589yȰض{x蝹L>~mYB>>+Y?^=/QػK)__79o_ 8 >8mKz] y/6x#'t(J U_]ui//ѕLkǸj~mh \E]6C[K ]f?cm9+|ׄbHkv3M傿d'5Lg=v_xKo2q+i 3믐ލ7\+.篑\2h~{i?+>_j/wnrߘ{8,ou` ŏX0 \̈́ށsxW_v/ՙ2\D%%mMlSwhl& *y/i/D_SIe#뮿_p֙YO%iMr[oAMw{ыvf{;Lh;mmwgvZJݪVqwa* ( $@bB 3HHHIK ol`c w7`\~Ϣ Hcc>o0o2ӛ׍ 4];0֗/ϙYp^ţ:?~o_ e7X/o6f704ܕ |2Z 2K.ߨ9m۴9f݄8Al,ӳ,(o6/>e1=}u/-x٫=>ڭ(B2o[L hj%  ƶբJFm%ng*zKoJ_-?֦4R+kbr07|\R;JL =#Kh`G2<޾.bi_w^/i/e^tmo.¨Eo󯁿\1͜tgAYmEίl:l-_|cwNiH[ҿ}]g=K>95T,xC\VI_)n wW6~00վfػf~c)ҕ+j]s_򗼑b?W_[ۯoDw]c !_kûEpKTs]WX.a|V{&Dй`;D޳}Fl݂8Y/>&p>%<_ުKx[+sq*^ /w%kjW_0SIWWoto: ;Yvxt5rdE[G?ƺF޷Duڛx)m ߭tSefeyBSU%cv;:B:{ "ߒ=Y橿:WCSܿ&.Y_mF7?n`mum4'Qc3'a^Ϟz=6|?8) _w+xj2Ӄ;J/4 H/A#Yf#YL< 擟+o^ַ-KoDJBuG߸wu7ɽL$vKޏKh--l~m7ES"P]tCjŵk`=Ixt\*jv([_w%]85{II_ZK v..4?!=3_ck6ew(/-ۚ% )WYsgߥbwg=[qbєm_/;;e}ҵ)=lhaʪK5r6i~{<lGuw/޹LXwTae5nV+63x0_:&o`UQ=cT}QQ(%3{?dGΊΚ2鮊D4 wg=173-v|ƋdRx 7͹G.UopqNrh^R)2XPnV6YhnF=oBqΊp䏱#uo_k \Wǹjqm4|`phVuu;3b֦0 gT}Cݏ$\~W_?kk{;x5_+h;IΓފWvջ<_mkN`1EWp«d诿Ul[-`+^׳l!ϏCX+d[ HKwV"TT^ۥYWsvG<wݖ,K6)qM_{8Or'#5{0?=̉J]}vV(cnʬ_M͟ϾUK}keMK֥ zkXXj߁{KEJfEIϘ~ 5W!l*PEy6iH?RD{6~-hl`7ۿ;ke;α˻`׻^Ƕ/ݿ]C먇Mշv>(sl[fп*21טtTo=?˟-3wa3<9فŹB i+ֿ! q!Yk{9co,a]E_XFqIpԵ?P^Tv{}jŅ~]k5/\vSzxٿ3kh9m gb+|Yzv˺`%^#W#ۿ-^S_ck_k%=jڨE Goݚhi{Ev697 umk?E/~߿Gh!KoytgG}C5:,kT/ڿj0+y_An=_Ey|8Fu2_p05_]aNZVM).k:I]'_OkEoe}/ebM3tD 3/y?K'j/:;>5S07aŸyxcD  Y{綨HK޻74Ec*-1Z읺@2r>{e5/noaźc֊7NkhyWlIV,q2b,_FKcjk~_~⪘{K2S^>C/.(-yKC{Î>Wc3Ӿ.Zsc8+tIt\:.΃8oT1ԌuҤ&VZMM(U) !!b0*V3cb !Arrr,rvgwYe92uxA@y8Mh3V2#w}'m]i/wTz;ASwzO}Ӏ.Сa^ۗ3w?O%*-|UG㯇^k[m/^My/{;Q{ZiDoiдFr=XWu//{[_pKdAdK`h@DoH^kw*?=,+<}-1T4.I d{(!7XM'g\+Ḩϸ}Al]&_c%wXVJZ 9iG=#%mLh܈ &6"'ln@g.9iZ/zRfjBƲEK<TcMum"c3yKz毛<ݫjƁnJY Ϊ--sԽ " h^O5]l(Tuj#z5Ho1=_ =S;:X_=S_z.P.1}vTwb}+CЯ8@(Օ'ˋP@ma'kG㕉iIg4NH Pky/|gZLc)G*k˅^Xg6EDA`{T4/6 |4%DA"Ivv,/m}p?S%"1>*x+(+kKrx{oW`+{ԏM%=SyTE⼡Ƕ.]wGX9dݿHK:[͖+CqW3ƮEVz7௓1 }bN! wcv/m˶26U߂fUl/\k޲߿ڷkeG!ܿ7[b!8WSuXs_r^nB$(DwwC-MUFkBu(ث. :gi{ܿ%/v/mDz&xB|kzA|ҳځ;:`wQ_rBG(d7qګ>0cAi_.OHrP`Uar^:ɒSsp׷ZvɬWw$':U,=]>U7ؼadg 8SwQB5nst_YKY n5 jعK:/|*]7s4wl;h7=I#l}z7ƲɭKkk@{>ٿn,ڿlΎ/i/޿punc"7#dg܍F䴵n ԒPw ڷzVr__ܱ4X?ye=6 +I l-zw"ŖTUHKS$O}>tQV_Gۿ]ߞ1^i?/$& f ~Π|-O# b߽jY%ɭF5K+lօ<- =.}ʈp(ON}~ GMVπ 5z Έ? .ӣ?~Ӈ [Ρq"{(>d oE 1b/`>ŕ) FtsǾ{~̜,ICi>u4v!ڿׄ\ZiB+^0u%]/XK6F;gKhh&dreLqb}?s'tV뤭 ]uV[S5޻{nl/СpC:ߙH|u/xPx}Q@.lcwbТ^n3Bgía:v6]ߞ`\/6tOGs(_W~81 ǵ3YhN`M>  <7/63k9w!֒l[ { ٬6{}kn˺5kZWz$^Pދo%/a+_i{_Kr{76s|?ǘK{RxѦԣ$;R.<{'BUiA,{ Qs`Zl V>Kj V伨97XٚKۋ4呅+JElڻiOwݵd2q-&Ij;%+*is3 YMɮj1ĺOuHδ[?X uRkl70g{ۄ^ Y4?XoTSU%tolC\}qjndlCSm<&!\"?.*]>cۿYg7U2ث\ܫ_1q˄)`B~%Fj,v,{wͣp0RWəiK[nJ!az; βKkg[o[7~+XUα_tel-_p,H՜,|kUYdpkkr_ߠl\@=c=PE{}S@ _ 2K_l-2Ll+c)#n-p߈Re@;gB>/շՓp=v=zo[lV&s \LKI]QMLTϗ[g+Cd|7G gqUۿ҆km˸(еǯ}ΰlZ|+OYx;Vmٿ{ >hF'>p&sh=iޣݩT6Z_s_rbg Tٵܺ/{[^q}kq_z[RBn_zb֕%]=򗼏m);DaNf:tNg &c)˾skewqU=ߔO<~ksk9cO^0,Ik]2s7ߥ}FG]W#sOd03( \`&Jt5HUk9lrۺ/_w.z@?4o[~ZeR '|7x<3⽃G=B'9<gKg`Zixs@hoolZKg_KIKZSvb>x0ܘ#~+/i//i//v_^_^{u6,\҈o8M^ʥٍ7($ypB${W[m&zz}M#z—pz+H!˱/mk@rR_(ciUK-ohOsO_F\P=UC)g$/KR6rk|}뭩Mvx8 3.ˮYtqA{_0̶_x;ژ/m/4^Uc).egK_]8dDT~096J?q}w>BaliWW`mѡTw1gp@bgS7߀輳n#U3}e#蔖_f&X*;DA\Vrl3҈沯. ywf_[zŲ 每Fle(pw l%H.igW㯇~(|G0q!O:C^ftaQ}eGdF`pw,g#餽\zu+eozSHZ_TYgZ>Ua uBg?CkW {h C%l ղIH/m-(߰V.o.ıQPF޳]zwS_l wvЏ^ӢQCF**ۄoзbFM]GwϢE;ޘDt4? ?VU%n4VVY3KlM*z$7\C筕$Nid}xOO]]qC5;Õ筩Lo|Ւd-M_2'u}8ׅ#{|Et`"p]n%!N!^IvKivb3/֯$Z{ TS!4e]$?݇;WhjqyNayvW[s"K`y%Pyezv ls %Fca^,L,\o.?2v/;-P^D,Jo:nݬFIJRٿᵅuE$+ [t5dߡof9 Zfx;REVm)"ETÖf_CkvɵpZ!\]It-^j{70\lηh @@0n _Ӷ lL`^ hK0 JSW+qҴ%bhv$ݿզe k^ ߿hߓyK筪 9_ZDKj*=9];%-Lc ~^T<{E ?YnKm _ zww޿se߾(d1O_ڰ<%SfL 'MzEJjg[.K1;&.e#w~.}^F;IKl_>gkG_bXkm|UN ݹ.2/\nM۳h/ٵx'yY ^x<\iGmK4\$ 5b_a*[4lѱݻLc--{EgG/>EOߐizYiz&ykl85iG֊<6w[y5e9CL7e_sN "9|Uբk Q-'B| |G/ U, 8<ޝ٧_ڱkmY970m#Lyf{Ɠ+U'H3hpjK|ڪ eYD̷R|z;M?~A?iMcPs|jȇE]uxRzukjq՘{5'2^\q7H^tvtN¤%&pX_XJP_>SG/iGpi8kgEZޓkeotq[*FsIJs h1i.*5왪h-K*0V׭;6\z͚}x?/.QGvUp4VƯV[9Ao}^f8އjS_M‰O,W^@V՜ַ&OggK_ kW^l鷞_6I "]}EsiZ'5B:QWr5z Ƙu*Y,ɚ+MHf%k#2Shu?4mykWi+!GIRl i7\Z$C7I 3շZc4RDՍQYKbl[!ɱ寭%YoQtq=#޿-|g_/avxAo9r6H.vƀdMMWࡕc=ܺuXٿfxќ9o}X7~Q_;t~K{j>8&aOW?o{sK6/p/,= P~f2~ͨyvilzOճB>go^m{soKi̧>qmg&ޅy_eEy̿Er]Bd0'w#o /Oܶl#ۿ S$ѭ2ǯ@_틟A$| $coh$ UV_z2&*֚ԕmIL:kmnך*WlgywKeQ]TY {Qw}[y5el/y";//w MvW`vIf ,OF{q1#K>4 ֪|Uv_S9B]^a7]A֌DK0В7_t5P!:_f?WNn׵ww];Zw?AP (AAXzmH8"c:;;]e+WT:_ %w BؽqRoBɓMP r.Ŝ%K\ܡJ޿/y6Sa'`qSo f>D[M}r'K8KFiElŮ;KڋϠ2~=[߿ֺ/O-޸ʫO1aO7/ml [/K?,/alO*ڡ T }`1}u-U*wLhl 9K_gkߐіLf_6kdQZa'G_l}x\o m-8M_l/dv{( 2ZZl۵\%%,F J;~w&9fƊo߱U`/7#{;E=W7quF%?_.֣-3\w,3E5hqe -[G]̝ov >M6\EWȨ"3hܘ]6kWN׽uu_l:m]N$wn`s.ܳG /X{a}n]o.ȃG͖oE}53}ӊ~ !07Q"ts\eۻ\=,vnrHLc,/)[Dښ˟7Zb/ym 3z2(.%.Vp -kq`/?WW,\^_g[2m^w[uG)SsC;38g5O+:[(!Jmϩl:z{<\1s f| ڶW^(Z#8%o䀢l__}!m/8/x}!흩!A&i'2al׍R;:\r7QU^N%ƫ"2>o % ʺbXM &{7KuyE|׌Zn*hSyUh`N'taI֘*/m`4̟ U&!4gQ#Km7fN;pt2:_,)*SUҤp|,AR{, %'hbTذ4{k:v+Ϡ>9;M:bwט4Yl?sˬCpQgE ru_L_8f9?}/}QA`K.K?zp>Lז ׵Cm8郿Z_l+W݋s8_NK$Zb/}pu6q W_c(A-rVW}7Zg>c7ҝEW'ϣݭo? j /^"ߝ^_Vb\}WLn􋮒/imxsVpO&^(:=Mt-t%}#ߜWcwNp\8^r5!l][߰7ZіGMr_|_)Ol,%c%sԡ:3Zxs+-GћzQ»|(N9] eΗ][9_' * >p}Yj١ {}Pu/y6g{j3f7@Dƴ4 !T,=(t%ۋ oJeڿ!d/u Î򜈾ʖlxG)spj&Kq;+IjlJɌB] Z>3 QdLɋ g$qR>Z.Q/myZ+hE"2vWi\M.!bB2GIc[M{V{OÐљ-Dam9فi&֢OlFHoAx Oi0Z@Z[mL|^Cv{855.:ֈߢE1Jm}t5Gojc{p(KYTـB] (b{Q VНzY)2Gڍ ed2 (bݺv_8g7|6%mw߰`VK@s(݂P|3|E /=a/<`BK82_|1] i稿M0;<ɰIwғ_6[#Z~4M ǃTqFȍl3B'h+P\ };5_E_|Ln1~NtǏ/Cu=DKn~2 @sO= sηL8g ' /Kuc߬&Hbﰌ1@~FQq/]"}%㶍oWsgG dfQ?,]XuQqÌ֠V o5T2u6yK>cCx> WO߀eBG S5ek,#ˊ Mdq"kpuA[I"Ni3.Z^}8z,AZt9崿%Ch>1Kt Pz߀V.Z3o[~^q+lGYy\K-oUV3{Cr6̟7פG3S4-:?RsZ/R5y+c LfR--@NyX%篨֠f #??/>Ib&3_Y, g9< =wm.khoh3;a` |[j1'xu5wҍff>9xkC_!X+6tMiCaղΞ]hgVy<_b=(8bM&봙vc"6Ӵ`+\FĪQ&:RmNfLۙN'jԎ`񊂰]v+OϳwdwwϾˢ|FGVn|/g/ UϨ^BqJ{կ-){@!8+GkoZOX>{?;Z~F:!Vx)C:f}O RÄ]iϡ.XL]K,/@ƺ 5&Dp#cJUX.^,#77q4_Կ Mpn// 4Bd)xe*@]VkVKY߿bkuR+T >poVUϴLRX,41kG/ݿ^p74:wQLe܌.SUm>}n*ho9V83Ūb}m:"e'nUbm+c'ֲgnF^~Ƹ!}%EYO۠gc= 2!v(y{Mui3,jpfƸ AnEݐ67@{EVu˛,ʰy!$~1fFwA&n5Ke_sGp[wڡT*r g/qvE ]R;d|}+:,1[;b?16૫5faP~[~XRvAP 5+FWs:|߿>v_ZwJOd"ekmEg{v'g*Q:]f&)Uo_, !ZqN7i&+SX:m+56/ݾ9Cl/ +S{[y]{!uRsP4W m 11ܘxRzaY $(@ aR7ɺͬi.\ K &%wu̹:yPSm#O9>77KhVWM|_Mlߪ`Zi $,0<<ë?Ν#7x ZZUG_~ۊm]1;]E؁,y@vʳK r egNڈl=nj,lYg u_Qcb=[SnmtX?̶Xj=713ju!ZDՉQ^_3%1X7O-hxveyX+Tw?eCUi+>yd٤y~FB:MiH'݄zISXoԞw{|I_^o-_T,ug;}lry5mxy .tkf`bǻ}7 %ee/[S8wn$#`Ru]j/a4'IwiislV eY;Tl0}.aYL[,Bx7M订k,]ou߿Rl`Cpۦ ho`}@üYfebGN P\spxm] 5)Ӿtlۿ#z5YňjRM2|(/ۿ9Z:/=1`q7(b\(#xe$9!]aoڋ9t߿qH9Z>r[v~z+/ @Vx[VKG<\b˴Xf ]{`5>_<#z=5M1 7а3Q{'\C9Zau?Wlٿ_lǷ$,@HӨ4u<~q/NO磎=3vTTLH a !((j) uˌ(.uܗ Hس@IBnH.gxK@M}zwZ_wAwZ[]8_Rvz |zp_;LkLt 5/L~|.I>@NIsf;&/DU3̚ 3q,2N_-'r@xZp˃Waz-C ֛*∹Leq]jaj+zt? ł;;'xގ`MY{ԕriڳGGIٔicͿ~=;7 `6~wlwwb| 8G5^3Hal8g0Iy9=?/ac<|YZ*uRW`/C~Z6@L)^^GiHĕMl֗$21m~cL! U^dqF5&AC!~^|[;wyf{qb~}%ρZy{JldƑv{ՒA ZKĮ^g*Dž^230y+X33kŁFַ?>^]R,ĵ^ӁΚc\7>s,3'Y2#3x'Gf7CgM0u> .#Wp\PoaZHOQLi{>8Z_d" R^޵l1 o9Eh:?_j0,Zw 񴰄[#3lj3Cm޽,J_RԿf?m|,Zzi9PcBu Sk]q6ť%T+icҼhml[P՗_fKHh}|]^c>!3ִw}/'¤6A70bK[L{䶮ryw!rdr,,jr.7|) NA\w5;YLnZfUY5o?n),=b ,p;7`S 'oŠ!6bSMƒnJ֦ j,;M),EC\}ѵuoN/O_yA|<-FdCY6"?J_} k:h7Sn慶yiωUn^Vb^\SJ/ĶMWE1a3ZfQ5 YD͓B^u]=WO:KL{nN] xMޱ-ϧ:_V/ke}_밿 e{~_/]c ui/1)5V >L&tZGf`qKYA=oe݋pY1߃EHi1 œ7x\XADݬ+*2mh֜fuBXTsa'iu~qţ[WRiɚEh.+k,8 8C 'ʋڪ RWT^}ow Ka^%K c# `<18w3`#!%d{1^NXD|@kV U&<ԢAb*Y$a{/LwdEEN %嶡xv̕r1M;4ؼ&s$g޿ _5 ߿}e?HļyT-YX޹ɓC˙,A8&r2';i׏Fξl{%*,73ʹ'8r2K֘v }!>p<_n*d^X佤oMX4:XlnBz`QGC׶N5w{5yq^vjv/c/vvg^vjݝ]u* ZS@jxlVQDqT $! H>ɓyɓ7 ÏA1:w:ؿ/ٿ nzYRWS1-5Bpݱ<Lk.%߹ F+ttOnU/jv޿w?7?݂ԂV?yۿ`-؝Q_sLnK/km3ݿبT۞Cm8PWg_}o3Uvf{eN&Q]\H ݿc(+` %X I;)hP&iH!PK[;mn@ʟOVZO ~ƯJ;c|6*r!Ͱcr:CQ=2.ye6>="Blʆ6w) v -]@-6XD1eh!u}K67#,#]׸oRWYQW_UY)RbϽ5t]ωٿ2'7TT&8D˺:V_AX@;PJZ!ЄR-kU=?YRQ!egKi/VvLl`_^_7/tk//ؿ 7]/pkE,v=-ّuU`,_^_U^_˞fPf܉,ۿq}'XgaN_uΛcضVPHkoԐ ןXߧ=IXVۿpetoglD,߉qkuۛܡ@/kL 7dDQ. gGU`-?/_go>k/uѽRs?Km_Y_c h<9&4ˋYo__l_W!oW1Q37a7MWY 7/mUy՛boJ,CU_m? Զre%<,N5 ;n/k ޓΏѴ]P",C/" V sƳ MY{YY7hemuUo,vnM[967嶁=^vb7:C0-N\/~~\0.bhc`0ɛraxokoboiu]rwUQr-zZcבFhSWk2jGg&a:o K u/k0߄3MEPBws&Х*J.$[Jd}/)u.A)Ʋګ4>{\VIpnz{Z}͛t-55_F} nbg[1la/(t*g(围ǰi޿QLX 6pe۾PKÚ gL@IČCh*, I}Xe%;H17`;/mؿoe҅8bW맸! %nXEȧ169Yl;[~7=o vDYO+Z|T޿hQJMqsz}UIDBoF΋7f8DM,zyۿId7Kky&jlԎ{eԄ>37x eá,͡>,:6B!ʔbn;&SJIY^0F{-sKZh'S|S_W L?%ksד+d]^/L~9]ue(Ν u+bZgB_LL.\Zˠ.X2dVk6i,Myd1B& ӛ8ZO)g@ÒG6w`_~ڏtGg$sXL}C~vNf:8;:dt$8t*a\-_MK߉:Rh>, pT4ݢ ঎ᶍןD;>~Da^N]K'MwBritaKoɮ1;J&gr$v.|Pjg&~ώɸl |o;I{odx6ˀC>ShoăSJ1r^ΌʙB5bH2f^5 8X@'deP,hC[ayK-,fT>7YIY~GR% $<)xi+Vol XǡapPNߺrɒ޿/t u"5w/kۋqյWo(\Q 4\7|<]B_M|]T?V?F e28S/@]bh>]܈|0 \zrrŒ;{jonlvw?[s.fYʦM=O'=:Λ%Ky{/ '5ntsYOٓfl$P}kΑ -C"+o%v#"ȎD~S/3-?L:.m{v6tp&|@&O3bn7tYݜ)Ppyfg$,) U4yR锺fgBEjkK$ 2l&L2Ydph'S .[9t6~RE 7gGV.>|󜔛̚{Jk-"C3ͫ,Mh# 67z"88X.dd)-![9t0hŪkkcԭ#O}Y{ _UmFX־|xI * ժTV;yOύjr# <[|q?ђw*j^+ j|ȁK]ݍ]%xWWk-i(lel{}B9^x0f=BRyhwӖ4&7ͭBbd|`A~ЯD,o["fqKىEa^m8mfBb95ܝO:Ľ3BV6Ҿ)uU}[ 'I{믜?SH+ŦuAAA_P,g8ؿA& HmM)UgJKn{NWK_I\wqC5dFpLӢ4UeoLb51YdJK__wWn䮴1 s;S뎷jD|'Q;g5Q'vު"~('|rh: ڧ.&gm_q΃8GflnvNwkZ펮ݭNu=B%ʡ mj,%**ʺ[]PTBI< _~yBv$ϓIxG/YezGag^_%3p +wSݿ.ֹzW0fLqn]s̹IhqNi)@Qo-6V`I7ߵEK:]wv4;QqM_9oN/뭻ǣ).<H;*؎ӥA\_6<UrI؏Ev7cg{7b5 }9 W\3O<̥[Χ󔃦eغG;be ǥk\N mJZmtt\[}9֫nٱjGAܳ[q>~E߱ͻNj*;2ؽ*%eײi{149f$W}_w~ 8>ҽ$0-*Yd+; ^(weLRȓhsK9zoCǂ,Y ku_ lS }jsW6j^O콰-%<,WSd1d6t>>p.Tyk(b;BlrKfCYgzκx}x{ڿ誒_uIM޿!<:ʧ[~,_[@ k-Ģjw%l`ܿݍl _jHq犻3%>Ev+>hUL9'mlPN,(Xm1_Ws-0SnjW5烥8o\F_ZWd'IOPi3Fv{P Y:rnfў %&ajJd8JZ+:C[?M~뒿f&?78{WtgGGgqi{r"ڮɂ`n6[ko,їtPUWZZbB>2sBTYL+U@2R4̥]_-SvA R_I!>{ZQwbzKo˧ZWigWWl?lgr_}, m΢KJ; ۿ/n'[t kw}kיRu7sRklS(z~겿}޾;f 4KK=iFu_a -E;3݊6}fE/3%[~ؿ!|rw96\UodrFl)wOC3{u߯]lhy9+L?D'txNN%mߧxN$洭7\L #dbVUs B>BsYL+b'`uM7[$SN] 0f޴_ =9 m|]c8o%'Ō8ؗFqI__$YHkB9DVAKzn,pCJNAt+Z_Wi,Fhda27Ts'7pA7rH^MדMjʧM 3dCUgw ʋCԊ|ȡ?_#s'4.[Zl@ 6XP8U࢔2:O}J_ցD+h)ƥt[lqtL}mQ7\.Sv%(Jkb[pq]5D(JȢ{iccz1Zreo땫V*\鞺^it9bF} Bu9Bs뙭*i},TYW_c:\!2~ۑ1?yΑ3OHUEI},D{4Y+ c4' ?H&>]wrHl-b|&tTK @W)Wv5_ɔwJwܫv1Uj%PݢXŭj= q+d_uܨˎz=/kｺ+m-d mW74io}s\+鴫oh} .B_l/OGod=ǜy枝I" lYkqaچ\^>՗bt \3@_nLUQu4 wk0??'( ygp8켐ו֑㣖'Ѥ]민s*3;ϣ_7V\(/۞/ck )+ RuuE9Pՙ|X \-8*=Mmqpb>Ds5. En6j/c[ |g*nZD]k8`Bx۵4_6o%R{k!Rw)!/O/kgᨿ|>E2j/W$&9{>/w:1qؾ\ /l=SD8[밿fɾԏ1KJl;Zl! |yAwa mNjµO"i"c5_a59Oo]oKWh6oE*^qL1v|R!ؿٽxw.b7o'Ws9ZudMkwx#U˄:Us&7_Iϵѐ;L0"!OCwMs%TY(cv_2ջ%ԝf>ڹ`m1j=_N)<]}4 Pb__c"͉em@0tQh.M=Bw$@|+)6$<k: PեญDY{#y09B dZO_O{2䫾(t';⯤ nKGagJusp[ iκUkI֊|HN!Oռem*ɶߘoSiѶ} ﮆ˻~h_uV|/-U疇ԕ֖ª5_Gع^ud>_j/u ~C nr!dܺX*BY[g/% q^3Bltw7_/mw,ݿB@$x6͋+ibh|ĞbW8+hcw1Z?&d!~>ٿNqmf.bklm p//\k?WOűU?[_w_lǷ`/iHpt |G`{݌Li߮4{ҝXbB8Co8n{(_ŧlh:8v^=euUm |wK|_b%*3L[W+wUk>E=Kٿ|ۿV`w> X7M> l7(™bCt K=Bګ1VHWNnaƌGqcc3;*鹜Lp<竩M6_j,cFFUy$ߍJNLkdrBV"DvLn_pY&鹒b_w܎: wery\i]9}xL4ܕ;_5v󓯙Qy]C=uOۿwa u]9'k}{'nsjĪ]YL WЮ(mo-r6W*odo/,+lʤBE0xǽ39Z pO%8/58:" ]+ws~ ;|[/sꏮ3D_Zs&e$ΰ_{ݨ./53P+ÆBB]O4l }Pf:IG,`9OO/&mu!zZMׯ;{#!O2J4zr~M"__c"-;/ӠjDClReL8R=Cp&f⯯9(f2`ʳ$~-I4WJ-QVˠ~ٺm Y&żj$j%EG8UTCwb:8LɌvjÌmԎ4xDPX.]JD0VSQP9j]. {r,˲>><;B1] k?Fɴ)t<ں92"Qc;Zr؞ۙݿ(, $~;I#ӋO\ۭN̘ m,&(T恵*CÕeXja2R){ 6n 5c Ec ^[ sXC=O G_I<}IJIۋ≹fS2evk-T'Ipł.ޯH/[d>zw5ŲIWhߍfO"ǭO%nnB(/}*kWÀ;9ig; ~%an]/mdE/5/q6t:︿KG`1>A eG3|^$zzDg*ypp<"|ۿ?6fp P5dm|/1x?Mߨ"[``ՒMg$Wvu7=.;gL߉@k`/Yeeí+p:(la!BWpZi֎ѵϢy勄Mmm>gHd!K{slwם8l7Y /K1۷Cyi:zVUhm//x;[ Ih&AVi3⯫9_Φ3lxnkWƓ&XIݮ-Odž Mg_mm-e};Yx uy[5׭`5G/fb0yij3é3_/kTH iɾ054R r>䯪]$jÆ5_ϡ}O7fe["ӋCn^.hM)Qr[)+Kx_YSRIU]TQSQIKOz u#/ڋ9yBd! ]_+=ǀisײ6Wد ^NF _ܼocm%ם缺ձtvAr(zu}zw5Ē|;vmi*^}t,{e$&>Mq$iDni5y֮CYqVe R3|ulsK_n*+[Mb#.VlQec=O,_|^K"5%ѡmc2IiHUWoPO* +^_Tۿ< +/5a?F a,{L6ips^l=<xX'XG im5# Kuda&$&h/JMvk%#C֎@?pxl9_K  ٽ_ϳڿyN45kͻWҪLd Vɳd}y7eN_zbS7"޿<s{.Yj-@szO_?}q!7Z9Ya;8|È9iE?C&\ze nqmg"lf˞+%8ߏ~`y^qH?#$c@E6kw0%F.ޠ\Àgo٫_(AOr&虹۷ܻ{6JڪIIuvD[};gI;49\D?8d̷]φq䧯6pY~Ϟ1tAbLdh4"* bT y J QGPvyvمw_sxTotsa y<ʂ5'XT3|'O6u,8Fݺ[es2V~ ҀMȖ%l7#u%#Jn  o-m X"Iۆ] D]"c Q"L3cA?5b\fM/UDf2%2$yGe~t/_H{HWjѿ:wGr/&`48g1{Ֆ)"Dy%ɍ=Sg3ĢE_sYｵ2Yv.Opg12DwĿت3}#/u7>ԺIm,ܓy&M>OC|XϲeJzlqQ'ӛ?w0s v\L8e}׵cw)tD9ؖ1..ۨ@Ԝ=~8rysY9Ug3d]}qV 7a?Ŀ*薂ݿo Ep꼻n4u¼v儩S_Zi:.Ltc_75~#:BHnnHޥXE{ ~1MZj7\v–nfGj{(0u!z[ysWB@:}q4omS&} M k+_[u7R< C'C:M 4z L k/u//Y^'6SD E9К,cgzbSpTݠ):m,3_JHO:yG+=DPuɧտcCwTygUm#Trb˿Q.Qϟe S_-{Tsyu,[/V4w(F)aB$o\]a:q;=Jk!d!e@Ag?=FSh+_ڽ,wn/ػ?lOXX>'$cY4ƭ5Tw' |B׊-N׿N"l pDʿn 6~doLN@74u\"tkʟɿlRɄ=lIvϧ\н?]V(ƴ4޿ ;]w?1ڿiߙWCR{0MPWU/)봚H`\zRr \(ѿמՍ'сR^zm`J]W L7TM僚U,1Elh^By_ ʅ'׆yEJ}n0úwʿY1c /6HM:_!uT,VgAҹ#d76/ 8+@' C:/߿?Y"R+tɏaL }NbYv̟Q&|`Ly^LD#];UeL__}_޳,p͹3TQϕK/ԩm1:rFʿw% 68_`OT,.:QkvfA_ C,5ԻR|ɽDx鯦uû(>y]D!=u6 q.L8D:j28ڱ]ujڙ8vvlv[ .!ƭ("("("(z.H+IH3ɓa$Py>uUcѳ\4ȥ.$iȾ B7Ljn`+V⯃`GA=e>%}b%/$^̓z4z5hg!r֝aru-GpBݸ/|b1>%פd|ŒB&Tld,Y׭rqqʲ9(FYYLneHz4_ZBuX~XU5g!pUb)T[ǭo(8R֞#{]C w5%;SQdxüZC;׻vUx%7j -dRKmӶQloO*tvY {߬](!l'4p\D![slۊ/ 8f2,[ ŋ5h-[Qgmn' 8.ijn&lgѓJ@hGȝ 2{S>C'~# 4oM`Fc&Xxπ}`It&Ͽ 4)ZO 2>q;6],#UXhoCk$t:՘B^ i*-%>-/#=|[KWjȢ7Jd83O.U*YEyT_N|T-,|\&Xw:اˡmN{K_WJ#ug/$THs @˽t(:/ 8̛Gc߸o_ޑ//bڰc0/y 뺕WbU޳1;yM7kBcqshK:+:p ځk^_xMs2^gz/k@`',B{$12/r?ňN˽qt wJ_`7CC>|h^+P?>M[{ukC$SB UmI نҪHeYiaz/察m+}_?f2{P} ?cL_~3o!s?ΐw;ӤI$Pݗ_CَFw~? ݝۏfd +VC[ue {6]S&7X8Sd7}&\Z,)d\,MkIV2g=>F,+s_ ޙcC3>r>~wOaE> RHxn>[)T7ކ"7/޿\M.AHNJ^Oc-\G^KZr&^lxokPNF!~.:~/}K:L[]nxpc+*Ӈ̝p?|8?%6.Xw7<뺑o3m'۞V 2Dk 1Y2Ѫ3=V=S8^׌)'5+3D}*L{!ު+vhEdڮCgݐY`0]Qu@lӧUZZ_ֵ__bѥ:fی$VCzX{]o LPWM4υ[4-f_oτ#ɼ~8uiOJm}n. ok%#45d *"4ųxB-"A`qt˽+bm+Ư* /c8`yKG_U;_g}tJ-5,iWGAga ﺖ:q`њF;+h7],g BؾSz8o;JXKяRx~ ŏw<`w|=+KKnV ۿ{k\;|h-LK[v6+_\I`}hL'w.P"Ӂ…./y<z}t7/Ս/ܷ!R$.eߢkA 7Te&jSgH±p/_ؼlLkwqDpv394M`E[߷N5~o^,kG/SxO?e8< oTkY_q>vdϖ/p""';L KSp~ߕͿd W%c#o5}G nk5(*/tjcH Za~x>G֩CsYk_{l! ?\= ~I^Ka.;^Z풓k/c9[VWd`dK^wffA ])*Sf/2V֗+PQummylZܿW Wc߿\r*ٹ>@yj/eB]mgټ[nI1 2-AFGT&;Ń";ޞ6ݭ bްk=g^$@^{O-@b3SYfݿסpl\64̮&7-"W_U_p\߼㯯>s[%먿 n(=쨿AWr\3p>s0?R^x75=g67Rq֯pbL~)YM|5E=/ߺle/15Mҝ;MKkŢF>"٦oL"ϼ^L*w_Ϋ\,&1fN7}; &MȌDTp5&5gŞ>-wTUkE}Zقsp{~>{aX!p)Doa9 7ca??QBnuTWI,Xg 1ZM@7n)۳m;{mܿ7gۿh2yl˵e)kۿ+]χWbnLmWۿmbwWټ5|=ĨZ~H\e_n>tA]*U篻7'BNvhϷ.>pEG/Vf&g-?t]{_O&Ou3ֆן7Ri#\tm{GW1gUʪC41}-;2LhEnݾtRd~֗+E֞)D ɯU}9Sr"\~-+ _)P$/~{'K`FkݭA/WUۨ9}'C?TjŰ}X!ʧT~:[`=3U-ӜX_ܽ@ΟS Ppߡ_~kuETZ;OW;_b1ek͔vR&Z[޿!xiwTE>{a?VsYk*~ۿCag^ZEP/믽8ư7gK:mjSSh̎),ۿb>%.ӴfC}UTQ].KmJUJ-3\H2; b'2fr?~1Vʩ3@L>?+/;C6[7\{n5O_⛘AӇ]ߝG,%_~#ra=4#nٹ͎.GJ6ǤUϚ݇־WzK,KܴdepnԔ?Xvw߿:}C.2pჍ&2ǯ]$+Z|%2Yʭ?G荷+d}'}O7}^Z'X.sPB؝dK{riL&t%BX;4g;|2~؄',_ ɪc}Vks(+Y6K'F8VʇLt ]Y^ v?E><ۭ'tI2an_cJ۽`+&>2~E* pUq6Uηŝ\ΰ%CH%˜%Tv:Aކ"ڿDFVvvNtrO: {{S~o}>l:>qɂOby>c+#z/AX4:޹Mp9xL!8'48+\V6Tə3$h,6ܪ'tU=or2u~JN)V <Nb+=5wkuC!3]i&L*1\ Nyr܂+ũV:Hʇ8Ul#=d['GLdʄFA%N3:hU1[[;`!7z8ԒQ7uя}vN$Fӳ3zjz25>;&熬]3ӕŻ2.l!qzr:(v5yL5m& k*fp./yk**2~jjjKVwoUOwՅw5z鳆_@=P}[ 󨮷~zXwSN_+Zl>vg $ե-Zi&^# ˑfҭLɟCrg<i!+mflV$g0ےt/*ڨE2>h"` ~?5Z.^n'-dT<oZ\,YΪ-Nֹrޛv`;svYyݜM yk ϕ_97h!"o#+,ǔ7Ԍm3T90) ;)m2/}]G4ڙo37'2m Y{_T';;wdmK=|XxCC_4-IR}Zpyטq{M,B@WphkV?i/ɀRp7x=_v(8FYbKE' A"&ٜ8eTE=/}]koټ):Nʏ?`mⷓyyyMi"gG*E >~;_y"hŁ^YCA M{Ŝ]9ӆس[6?$c W5!;3UOuruf8}.{. cMV H,=cBJi #z2r>ݷ Yܿ`jMͶ_r?7% ٢qm< kWVLKM>Q?[_7/WJ=:&ʳ|®q"{ZX~ΒzZual@qp\W[ngu?^f'Wg=k' R;e0 t?)_<p Z2Û@C?#ܒRXo9ZϮZȽUJ;y{:+hrZB%_ڳlrZ/vT,_p/~|$v枳{/hX]$ Ӭ@ ioлF<;#)wn cx=PTaOr߽?0q ?*v;p|W3d]Sµ-/0򷠄2`oaN_`c$ wo~p0Tk~XΌo}[t/i+&c҃yubw>V<9Ori_{uZ"bYk J.fgMƍ/)X7OrW:R׿ @B 2jʼrZpk!]X|NU~usVլK @_Vr-a #QGIZ}2\w8=Vv5B"x7rx?%]dV=aOJT/_z?G7D(yB[\-څ&C{)n~M&SE_佁ϡ~В S ݦr7_okg7ޝFy t4?iZ/ t->y=8cB ?gס|_[Wf4h(ƿE=F.ZX~D-qًlkƨv[Ŀ7'YM=r,89ޡc7c|@A1֧ԙrш*^B_Ҹ_ߵ CRFmHۀ'^v92/8!w2ܽ{YCIRO;k#\F;ߝ3HU:4)-Pgm,\aקu[S(t3{Nm5x7}ܥO?I&<'?0a瞵`Wbx񀟡x +^_E ͎߯Eڄ,C˿\s_Wx)R]/uYլC߀wBi%Kz< s]Ҟ y6`X@Sҥ{~t^ֆ\KK)0Mw \% Kbvmؿj`MMy ,&{ӯ;HEofKHr/Y7B;eI2>yo=_/ "9ўKRU, V^Τ4 nz˟/?pc,o%kMֈCWdo 4/z1Կ!¯sMտ#ɺ$F˶dy}+kky&I2٦`]3ɡ96\Goip}jN:(XxTn ¿:Q`K6^%˶"wUp^ܻYZD9?{&\ꨮ_6>Q\ݰc‘v5;&ҕy 2ׅZ^&שׁvv W~տ1yIITM xa\E(wuE! 3hז{]÷տO__1"_Я ѶW6Lzx=¾Jkg[0&Zv5s3_=K. } xO@[W/a~0>M‘jY#hdC:MF5j%ޖݢcǿ=)&T2FCkmĮ%L #!mϟE_t{- UoQJ{5x2i/`hh։iҺj蘶[IRFmksq;6 QA8IsqαϱObI/I_8qk'@bzI'}q.eBWOm7߉vIobVKsjttȀ~2E-n]ԙ!,OYIU^69(Nٲln!hb]߆Y31g>߱:vԩNyގR{^Fm>7w1-Ly2k U![}rzV_fӣ&R#_:mx/]v׳h/j-h+*iy钽BEktY?I\Pk̈<)bY:55[:Ao[(תD1_]DV;<Yr>dt 7-ۿw-dn{# T-%K}KcE Kc=wo9M{gR6me<򪘙WΊ~:8Vw]t=sԘz eC ۯ;c v$b2q nCE%Y 7>9ny'Wlpc!{;܆ƈඍBjß]akv QԄ.nTܠ?v1ڣG/+CC>o};AQɽpӋ~V-!e h;m%.H]}ZpUQZ"]nvj>'oV'NI'ZȤƨPШ%g!~*tSIm& %/_llV`,8aҾ%X_|>/m-.ҦT;ͩRb/o"l&ޛK;.p V7X[B=Y6zx !lVh[#ny i[xWWsWB*93U`&b,/؏X.0iG_غrFNZߊQf/<3mwPz$ތ\5Tv箙Wx6=⹪ 6`6M T1mEmhAVN4J_I&vl'vdž$@56kǏ#eiGdiQҤq~vOz|u$Oν\۹!)מ3~d@\ZgX{]1oR"k'_t*ޯQ2CM#ĎEGOK4K=RunS >8{Ԛ K˹!ߑoKd ^=gKJ2ATKF%So{|}5zu͵+/.*Ǘ>f ߿ւ^LK/NaϷ".,'%CTK΍xyђ W)EE,pVkQmkR&2!˔*ݫTDu_3 z=uF]bυDY_s9g{:ޥLkYk^_ˤdo;,TY~'#O1%|}J_/LSӼѿ\[f8 q] LzHuƂ {D;A|Rc\nv6;6mx Li'y՛sc֣ݾNOwum2ifkπ=5-V)U砿&^I5Ol"]l(A>p/q^ng%s5H}Zqc9o}Կs>Q?KU]_|e[|"v-R}u~2_ֵv]4׼=aRYOFyLY;,5=V{77K[F7_s$ cRp?z ;.Fׂ<ߒYw_z˂痞xYп)8?P'wmdǥKoU;*./LEяd>r1߬eu!&/QuíX0lᎨkDe5,g9##|ER :CBB6@7d),i9Iw3O3'w \\.WŗH:J R2"Koo܅̿]ӿyY _] Bܛ|ߕ3_~,kԦ|箶wZ.4ҿo ߍldԿ_kRX d__J{BGCB̿ك3]ڽU'ϸZyG xHs<ϑ15P>8'JW%ym~8PUSPmĥR1_Aos>nETi>Rw)MRyV_?o::]V%ȶ(06eeYkMK*"7ujݹ\k =<Qj-EZHMEKT :w*R~[?_7A v\d;̔o {6++ȿu-i)bTOd܋(W <p' y>&\<=LyE=J ʃ¦S2V̗[p@ -tZLy :SھtB PLgZ;WɖdKM2_3"˺He[v&8_Gg\ mvu:η}iAoLRJyqjjҿF%;bEs:i(scvy2h%9ʸKTI~{x-_tbײh|@hkDEi;C%FwRf|:eʤþJq7'5RCyfk6 ~S<@8l3\I˦[8m-ktoWg~3b]:IS~eڿ֥%@%z ߸GdHV~T.1Ugn1¿M7s;>z>cTXZ`9xc}l|K@dZ8hs /9cbܖՒ;cϕs8xFX5BE╊wޟʒC||%CV-;jMŹS;Q\ )d=7rkn{ݧ4iԎz=Ízf[=jnz8KoS͆)oڠ{ ᷺+͉`c?™PʳWFXJ'͝Ltp&pށHKwY.vN蓩HZS Չ6 ~'efAH$*iWZ /bnaX {猴VE5QSAFulx[_]K1_p݂ڸY^tWmgԒl׿xH:aWƽlO/FVfxsƹ4;{{&"],KH>/g./q.$f` Z7' @wp |1%emLsZlK.kf;/z]v sAdFXkc$1\6fqn]Zc3}m/!!,|>&6ӿk/hS+X>]s:YJ{kQtP>JxAj& =T ѳNK.b s v a:oݠf c {g]:@=j.О%˺*gVx ayNncMJt1a_sl5V޸ՉԿ0l_FcsYrȺQ$8Ծ# ˬ_s_[=j;l(XVs !9dip^Ec,slBN tK餹s#זL; !sk롽K7[}]Wƥ $_wib6ibٿy~_ߝ5QE_WO;tP׿<]z7r/_׶:~h*~tlW/wOJ. YOu=ʮ|Wwz+c>' ߗ4іKh2U啻ϥWz1%`k/t,͛ӿoJR۾/fOۆ['SМ^d C\;:Nd@{7_'f/&+U%>uB$ظ;wJ{x. A%yu i ao|ط>s+XؽT·cq3`zXYFuv5 7)ꢟuÑt&rcM}Ou:i/3wnxOJZ흿|{*cnG~eok+!;W{3ѳMiEc}0<Gww5\8j3=Ϲl Jv@%>z.&0uigY'&QW;kzfmٱGNn%u./0cpO4-G _B;iKC//01h] 4[x% o.^f/qo>UYm]smcImM6͌NBOgo[E9]z hVP_h,̛п6=.bugz6Ͽ5DelehuD9f߂ET"*)Ҏ߽~B:_s_X %1]r͟}sy]6ve!JMܶܵ(KG[A[WcESCyd:~ͿصWJ`G 1PàD#oՕ=qݥ//)oͅ{q׹Ej/B#=~~gCaᦳ[֟w= {z3# sja\/8hG R >E. I endstream endobj 208 0 obj <>stream AdobedC         #"""#'''''''''' " s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?f͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛? endstream endobj 209 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?K͘z$~iar^i")dIkYތb=[NXbc(8Ŕ3or'E IRQTj0fck)mѣl1*3b9P@U~?Ls-zV,uo H jR6F _ NF$A|G1V돭IͤqjQǧAC3ŨJq둾>&ft-7!4FIyZi*BEzc()E0bj ױ]V)@*wt NN]wrpj &&8jxC&[$z~,`Yb;9΋QV=M6:=؀pP#1R:8Ө9lwvѢ,U)lB+xpM=XM8-(ڸZ|@A+ |7?sM ޛdw덪呾4$B߻N1U)c@1wɚ` Lbзg cd $Tl1/Nqx9[R0bM1Yk0-OqV|}9?/cO||*x}8ᓌv% 9<*g&C{ Lɷ4-O;a)b+b,Es4Yq6ma} [-( $Ж ă `YW04ls 0D PF⒞-パ Pzt--+ICV#rpXUMAT&z+kLtnѸu4#Zt>FToA@ȳLBg8o|u=pf~ ҔvG|X(SRpg`9Ȃzru13=GayQ/nAZd6ʺz{~IWZ|G[;Fs0ikח[䓋ӐGCLP1۹e`:lt]9j5R7eQ3$G`{Ob9Q/hk$"Hp$Iμ瓭> #3'Eyf!Nr=>{aړ*<+oFsa ;KymQ=\OĒU3{'z<T=d:/f9qJ 5_)Q NN)[ <<6}ᅐ S e?~f {w$8`}MV)Om{!>'kzC!&)}IP|i2i &槮$@}D[ t߾pwêX ;W~Wf>SVץȗdG#yzㄲiE9Ԧ/jP O/SĪ fO/<¨* `s iF{R߽psċP4Zb%#-ۗ&'S \_ Ϸӏ d#}*׃",LW9+5s~?č1NYR ? P W|/bdj(>Ic+J޻c 1B ?s ӾKUޕQZWlhK@NRNl6c| TB+cRt;OWނ1`?fQ'\K8!I)ˍhy4U' _somxZ16l)Љ[L͹lO9bv- R7N]92{'mYnH$a[ss2cφ@-Kscc1"E5Tn0մ7&?%"YPu_zrs<p=u.Zi6n1>ӷe\亦wܛD]}_NW>`jCkU{wzm\{g;:_ezJC;w7jZ{!Rgt%i2:klzIJO{g<=WZڣ#?:?Y/ݪ۲V X+'Lw8Mkp`}C FI[Mץ<1eGL9֫>dp{DCb<ɑk{1i#/ e:Je&ɽVFm hZΣxan=[ىvt<hVN?X $TV@jdD֭4t"/u8q1> 4r,qYEӄK??~KO\w$vyvG"]zduuI_[6րt= 2qUZmQL u]k\{@d@1[E & +\ ܃B IR*%d09e)ްZC\79-L| 4zfA5DoχA^O?P+Пמ [JN'gk[|=p;b' yl*1%m) $pt ~#R7 J%7 L[xX$;A8Sˇq#:uю K|l~x<$V$YC]}9s8y8Rz>xj#ZõFھ&ϗ@L( )s%Zc /l&mfOfˋ!;>—>@Կ,֌Oooւ } 7cj2zia_|FG$f^O7c\wUf NfRL-|[qIYĞAOLeYGj:͍xlǠd͕&lRFsO;\B4?Ftz ~{I}4O ,}@N}^Ysͥ?%r S\o\@6?n@^w6l052h]WWzh!^6N:ٔ" *jua}d{gjg#FFG=ű@Nà͆\_{pV}G8d1:0YI4¾'ȽJ99$9SG!Ձ*?V!FǤ@Hp<=\jFM*klf's-|BK`ңmЌ.4gum:C(˻v/B'˨ٳe RSurMk$P+ưB7̭s4|',UF{\:}<#xֽmi9K+Ѻc| +ꋪ[bѴLZ2?cA }SH>ŠCR }"x@6)G,b')qA`&Pze6bn];Ē>u9I ۱W#I u m^`pOL1fOKt)ŭ\q4ۚ W0k ^%^A8rg4zx j͗5ofFloS͑땥C) :sc=yex0$gn!UJ|Dti#f?͖cG[Zz#3(Y;.Y` oT&/7~@>2e4iR,nL1'Qd:_,~;r ~9xw"ݰop F DDGx(=gw6lصk@*ƔZ3#NGpևTKffz9dF;t w?1rq@y͛6~ANڸU?gsM7tù % L㈾FX̼(hf̓!AZ Bne' lb|uϫ03~N·Au" )e=H3^MrDR|=G: txɫ^({{B=8 KR)QpV2 [{Z#;`0$ n$( !lP+naz_a呜Iܗl3"NJjwsy)y$5=v94 5XDZe`Fv)Ѯ>`nR-6M)r&ڄ^zjh#V63TD!_"vrkqLHaM O$yC95;G8eL17"ߐtO(_IwZ II d:N9\]zfչ(5K{k7T9VjdZ;7\i 44nTT&clr֤.*=I#)>qsr.ncof,Pd7q}ukSY,Ŏ1%Lqfӎj6dP7'Li(]Iw-ۛbY'3u'$~XT:J^[q& >99V9Ot͹Ր b,_7c=`HHs~X ?U2B+e|+%R( :F:yf"WAÕ&e#WW%QHPwUyAuv2ڳǺ LD20<&_Mkݝ8 _2C'sȓ)ZU#o7/.lKTX u>S_. q>+}@rG e>..cyH{ o˥!uK`3@j>xW|9t"eԩ8oL9^d&;AJ5٧!,g;d8OtPe)#]>glj_=iaqݱ=_:0b$Y `IݺtfS>I'\2bs9?!)i$q;G6-l2]jptCŀɕ Zfb΢~Plg]Zȇ\>GP7mMiEX|΍쭕40F`4S}shhsMcSiҁؤͷLNO J/6lmOY]yI͊|>fE0ZjYݨdkھ<)mf ċQ@wxVꦄxaSZͥH'^Be=**E;tݙjy;@<3Mؒ/of\BH3qxãTEFM?KѼ<:\RĻ]|s,#]G?Nl.=?I˃!_$^hᯬ ufU>yg7FJQiS2 m#M܃Bp=Ġze;Q*en{fYxaGs]c2ۤZK6lL+` Ќ!%l>n pH2~d>n #ɿy.͛6 Mkr?e:pJ9dݘ֘.eU< Ljp|GR\ja#XXz#)s*#I৭=#6P 5:u? |aPǦ7W!SعvǤk5(c\K^IC njcyE=ij:/.rꖤuP? B07QgH2;rr5jrڄN>9XN8Onp4c#x;/qKC8w=ԖҬ~rdh3hז@it{zd<2*IHtya%ͻA;zzaJ;vɉ&I xǗO͏ 080zBl(iedn+e\\&p7򅈱4%7sMT+;2YNGCr]co'pGӀ@8=%5@=ʌ+Z$=ĩag9,L$H_wP&LںWPZ69H.^;¹`u+oC@'DҤMs=q%f_+ [.dkRC Dxa38uE]A҇cv+z)#c S ٩l3W5ӹ{)H/٦侀]v V$Q8p$Gf&Faar ǫ5 6l"-Owɜ }%@C,@%>5ɼj^gO豚~Fg@lu, _l?4 վC:-!Ҵ}(kHFʟx%j;i1'be/V=vjj9=}{UT{b-Ivø͵΍fnd4n#rI5;aPm(r+mSO|X2YSr}Y56I^"^oO&mDg"L#%{{5ެQ쪎cm.qXۂpzqO.0l M{JSqTeŗ ŨSENX"u 0>1P猴!s '$玛]S#ڄtHcrQru | `Ə_XU@ 0{vcOa`$nlٰHݠ=dCBPAc^ }i.}ckYw5KsK@q=1y@?;57@&l~Y[Tm_oDޘ'06sE;e BčGԎ'Nz_\,6^\هNٞ͛LAUF§SpJ (;wNP፰A)PͲރ9XkSjc< $H3 a _.;8s.G M`x;\ضh=Q:@qJd(o/71@w. 7;:" ؤ8 3g5W{[Y\ =qT <1>g{yO0ݛVy+U,֥G^8?Vi=j{gixs=.ID*.9pcri7bDUi8<$4!7'bR=O"wŗDjmGڰ %$Ϊl 2'&þB5[R5EZmQ+ Ha jBi%!^,>zH*1b<1m{`CN(w^kd}3|cB'9V~;. [6lyuIr|yr/&${ cvu#!"TTk]- 8`Ԋ7c]jlqͱ= -Zq@)PPR@CŴK GrH#T)&vwf=q20/-aPJ :0eaB >{ĮAGv7drqJ*y2ǰ¨TOor[yU&25k攔0V),:+.]Kql6LS^ĞsrCh&A$r sb&O,j>Z݅vLM_3PG߮G~gbC>O+.4YEx,:W^{B.,eT),NVS09=e|,gvkR*xxu2 U+CS|8dc1H(1lٳbïA D4鎍>Gڽsbgq}$ܽ޽磶ːGŒϠ)2#>j(M2pn% r4?-)vʙO"q5Lahd&'lB?JGny9 @5ٰ hA&FRr!i} a_^_QTMkp;+!Ϝcoslr V LlªQxf:ubB@/pJqGw)aQcAOQ,اirN5c>ENE( zzЏKyM݌7xha4,V<^UX?b=yc 5!)2 צN*C@GGI)Ktc)@lO5 TN H >$/xS&V֍}'aד(4uD#"20RǐcqF1%Nh zJG3\˿!\LBv7!G4=AD۞55MD"{x.1gv>v#tˎ > 1<F058{G`Ӡ˲nBWd#CX,v6l VQWt`ḫ |q:vNZ ,[[PEH Z!B~cnMhWU (m~lm7^O =U؜&Ii7!ȼLRǐC%&Bwƃ[j@#cZ{ 鞋ٰb}!â9l{ζg,\m)XU]ǶQm25w[N?QCf (Mw9O:Ng;WTQ㏽'j#Jz.N#EC~JVlè{,FO.l)!(srUAO|u̚nN w*gt`i1]$QW1_UO/=A\VW GceqolӸڵ[;U=|Iw^qC72hZUtT|>GۢF# 0)2C3#ӇD_N"ZkZ$\}ΟLK);9͡ƹmBN Mr)e48#f5Dy'T[]A+NHJDwիls2{)ì9qDC/`idHxo4J8u=48u/1y.=j_J]zt$ܟgE.$t]XA&Cȋ~~M.ÛSˆGq˄Y?m`>N2S!!~L07<"zνI۾FmoZd'n]Z;b;e;r'ՏMI˗RyZCɍMz夔$K6Ij>c'?'?s 7P.o׶O<Ŧu%8aSۖn;71OSS~_s?/@R^GUdkDicG)i\\5v&wk5ޙ{] L\9EkO?%Gq{{v,Pbo PKe ]BV{dm|Cc y(K+MGír-5ޤıa` ԥ֙cXbETe1'&b dhsmO,kqk1gBBu;8ʽnN<tSov泰{[{;TjF2{]'S?{zSvu0D QA+)V*zC.ֳe?}D\%ȡ+)99݀V57o;C12UHvك4t~Ԍn'#77΃:D6fkHxS q#:f!<Q#]Fcٓ|,- f,(/mjt51#'|ܖPSQw__{?•!>%BHa:&@xas۶h`}ls>=ffOl٨? bƀoYj69|n+++`xMUW`rC 19GlXWncԌI'N vS=@ 6$#Gm#@Qv fLNH{x1 aqRAxbKF~&rcmBy +E)E)6jq 5UzE?=Pn~NNvDZb]MqxB&p8 @ E0>Z>%ʅ M>(ޛo/PMaw5hS2ro{f8 3TSN9/j+.M.><ؾ\!ޛ&]?LV4&y+zBDVW'۠רSoj&S͞Uռ*E$'ҙ~$zx0O/F1!Ǘ+:i5rC&L"f;[m/☒J<(ws"iE?ݟâ_&eը9`7'9o=t7*6;wE,_ZVgϭZdjJ"\j)^ϴmhV'@'q8H#OLCsWLy3=r * #c8m}j.C+CE+(PY#|;֘ZU܀ ?v*w9NA߶X5TrԩSg SfY9S#R>"Ӿ[7s$ A#5)5);,%&䐃-zy1j߹j DJ[RKnd؜gs'"?z^R Y}qrcJ Jx@«*y8R^&V(ڦhc.R'=H,#/"`!a/n?g|'A윗AK"~KY FT@F]OGb@3,Irjw% X878»g]+ڹ)ZN؇|R6ͼ%c`G@)EIB7eLṨYEX+I 6AH>.r=L 2q܈1*%T}ˌ>wZ)q YyqwMp͊?lN1͹/l؇>ٰEP*|1+e_ M{K`pi ɰ-:CίJ._IwXހW2TՎ#,1 `vŸTY1\ \+ۮ+'qNEi'T[p:`Y.ciLJ i9 KǞ`o5z,=pi k*AU 90<ȸyu"y`x#+oq^75>s[Fv=71Mq6zAh6̵eouQLIQ=#6oJ#z Dru ]Jma# FISM>{Gڀ߰ eZȢlJq3'lvfIU$$/zRb,'yz[x9^=pEIQ$|p1558Qr;{!.zaw %$ k'd=s(<&9{pHnSu1b@. Lg1X@ܚfMԝV1i`yArK08FOCl`-8&3VR̯Ҙ_AD$S>ʘ{47DwR}ŇY685ܫ)S!WC# v9`)o|ťFW;av41\YܥFwbC|8E#zcQZwGbDAP]̄$\Z lv8P[G {r_VKz`\j7S0w8Ɣɉ@D)J"f)9r1z8PVjț dd \$ѧ26#FǮ6ٲy>'686@ YS!~N&'ȬQP'\(V1ț:x}OU}߁x[qxJbW@T~Eg*N1*)ZdTL:?l N("-{ İY:KXKb?K5PO }E\-Vz?ʕVcՎ&]Sw=:6W-T۹Y1f ^7 N j@pǝv?V"T+ܞWs'8v 9CU"ZvAĖ(Ww ` 81tݗKv}(n͛68dQ#Q@E-<Z0ͦ-.3 # yD;]'cbq3|6lkHR\1G= Dr7Q@GΞMzNhИec8{m28Esviq#ίiv_f@,YDge< a#= ث[D ZRE.auL dMk*hHܡY/H?sOAҤKۑre HG4<$k٭γ42Ch{>򦎗)@{VX&hHe4v Ǣ7mw-.qagF(,>YC8|7Ad H0ڀ6aFQ szd-,zE `б~8{0i  3V^;Sq~^#bGA:ThhhXb_VߎlF~_3d )2XI A|"Pueqbp1ۊcJ eni0;c)hrv696W;}y :cPi>;W0S{a%1= -SNWa3 O4$ #"z}ء w㖭_*Wlm|rk[Q3)l*jP(;mƎe#$Yyj h  Ȅ]0DVeNVFQXca|xQyav[qJƧ%Ƒ@*k㒲v?#:HbjK9%khLC!.9:wgg>z {}5B(i!n`1,}vN:UԀnºvuvzjWm-H#%Td ' ./+3nIr4<~g! bH }(mL%wU 8!acaIpC+4ȀGE$D!l})ˀeٱd4 <χl[ˆpA kg  w8k W:}ch.s2gyGӌIzF">6"]2û9cSkw!!1kS'.90$6)e-4v;=f=J|C:7&ڜ)QjAnF8t_m>Yr/T C&;2C\3yNe E2.t&rq':\P#\m̟ r 6DzG-˭Ň6l#fʰ Id*+/ iC0\QNoq5P>X'LiF  @eW镌r9rb$(@XPrrF#UƵs5G.#$wmaS D,pLRlA8S6ePx1 \QdAޙSaM*~`FjuZ #EQQ6)߾l6ݑTe S|C\ :edSCc#e8⥫⽎TW;ڙb둨a(kR k~یm5=Cǯ|4p {wSG2ᨯ|M|_F&)Ӿjvޘ>k].*p@(0Sҟle}ec(q]ȦkW S"Cs )msNDP7fgͼȦX o)эʨǞ4;ӮI0Ӗ@{`H Ew$N/ž jvOg_ǯop6s7z k_k{Lcd„7 46"IIBGќ?lmk!Vm3ܾ7~r~4 !M /Nq[m۰ Pj.q4Sgq鱓$9 At8N}#qeMa㎄B7-V22~РĮFCDz* Y tR~&s,&v#!|Sϓ92Na GL+_vR+]NN\Gm:?pjot`PAsdbm8lzH(Sz ]JNt' "Kzo' `?3r5vx#"bISAJBƣ_ʒ$ Aek!M2G2o|0)~8Ey?N>m^`w[ћi7:5N| }~G:.3ZoB?t,JP+AM2^ MfVrӫL{ 3> endobj 276 0 obj <> endobj 277 0 obj <> endobj 278 0 obj <> endobj 279 0 obj <> endobj 67 0 obj <> endobj 68 0 obj <> endobj 280 0 obj <> endobj 281 0 obj <>stream HTUkPWa4҈m #,y-"aD@ DC$Y-RbdY.,Q !U1F4Q1%>@]c<=sw{Gj{9ιRys2N3Z ,U K>,lȼJ@_wTb3q﫱4DA8(0&5K͵Xm%WT"TeyY݊ea9ee:gRg,,,* J/ADAAoTAz"bX&" eVbRb 5P媪UT^^wNS9IFe-jKR}4M2Ly-C1%2Y{qxRp9iAG}yt,)h[~J(C & = ;Ž qzAhԆJ; XTgM}P[Z-Vjm.d%r\AqC$= gWQ$` S0s\~OH(r),0r!Ipz,0~4HR,tģOŨ&;}q3Զ☞Оsq;M( 8Wb ]y*4ȣ U(n`]lPW(F,lHљ]7@ <_<8s<<+P؅OULl!Z]R+}`gd=12}yvU_!+|޹(6@hw~I ߏ40xKJ>w8xotd^bdQJY%6]YAL2"YoB5QH*H# c daOج1!7݂ҙ+"-2c1(V8fFڽ݃#0gPvևL7u `$rL fס\'MFᅖf{!KHc[6:D1]0\\mhנ4x܎ JsH^e=xG ݢJM\:Lj0%*,N>,힋<]S?)bvԡ7j}Cc%VtEil\qSyKhV{?"4}ݡUl,iKjmURX12/Ӭ~sqXl8_p&6Iʙ Ώɇ_tהt~U3LbF^F7dTw6;ә|G8toh#:\-P |xֶ o f* endstream endobj 282 0 obj <> endobj 283 0 obj <>stream HLU{T;:35J@DPy&T9*4<E"Vc5Jjjsֈ-G $1BZ5ZDwv,?߹ν]t:t92{YyxkYq8It(*dW!{m5RO\WB/d|CNz+ 1'g/7.}#L0) Z;`"t31WZ+myLΞQ1s-̃|{R I8V(weӡ{0Va7@7$@&07}<: v }O.I~3b @J j61;XZӺ~[Tޖo7zOkgIJprEr`^G.V; U9&GC#4cƢ v tݿYګvn߼/B;NE/HNQՐHUW qx=LNtRIB6{_i^)C{pȘHC'v9:)@-c8xڎ!=H_Y1苓Eܱ(ҥ!A>m"LC 4,0m*iF]_𻚀#!H)*ɯ̖?9Rb*9N] t,H+cPkQFo4&j>VR|WǬK ˔?GHQqkZL%Yd.?"6RD$ v >ӫ`x4I8GsM,J͎x3U`@ %*K1gΌw`[uOs;uP㎣KFt*^<I@7^ї7:{c*kw$M{ Qǐf6\42@ pשK9Jyj^1Ms-NUYz{38!u /PmJ6)?}kTӎi ) Tɱ#fѫG'>rs㬷Yo3;rUu9e+78. &.%FHW ?8ہWh`AHEx}mEOX3atRK B)ok).w\YXxC|]ݸ7cq`8F51y zpzQ$K/.YbmI;ia)7pp|}Ȫ"~cP*%+^cqne2|@L0lF4Q[RdX42m~z ު#0*+!SB>U|;Ci <(@- -np1ZziN_X\\ZxWgAqD|'_x)Da_ s 䛘g-0a $*nP}!Axws/ pn0~5G<a16L[cmE\tj*?S\&9; {:Dv@DFllcv/˕쉂^XǕ/۟F'2㲋zoMgŵP5[xfT7G2~ZΣ fF/őAueIe4?~C6wQyACq->GЧ-Yѵu@RRIiFX]| xt?hy^[miEV0 ,Q 2d)s]{cZ&yɢoiШܽ2npq%ۙᤰj xNߘ-*ʼI$)}!6YB%RH(K8 $s =۷P%ze= VZyV}c#]Q[[7q=o%0~:S[$sd̺a! aH mPre=E|泏^b(/a@p#Ѯ=?SwVg52CKL'lz].O1} 6ᙆ T ŦGxp}*A n3 Re&@o2䦧Fza2|X p$P O# ǜJ~ ȣ'٣ q50r>0j_؀,[TVл %s.DA:Vφa@lN37JEp;`-&n3& qx|K{g:YUg vRq9 :#f7)7ur]ՔlU{K@ I ƩMtّ\Z[9)u[SkdFߐ XŌq!~:B"j4Vz<>l}<qrk 秺RL-uGfam??wuTdⶴ 8jz[{5{;8])w̹^`OK?l8[r$#8q9VS<_C9Rm!dg˧x`ߔs^q~oBst9crh;ٞߦה^oωJlb3[l[ o_bk,ea.(@'= endstream endobj 284 0 obj <> endobj 285 0 obj <>stream H|TiXSWܛbD;ސXE6#"X "" B\+. \brAyHݪ": T2H~Iؙ,''#+>|w,P}Lz~z^Qz[F b:Ax|X@QB"4MYBjE -\7cNO1N& T[ ʒZF Dd:HZ0,F/Yseh}hCOY8"{=^[2?D_ ?0_/Ic [4 m`u|{}֟cGNbwd WPowHoZO8戀d󣀁';C;lZ]1Xs䐼fphBI=K GRBXKRf^VGVb$~訂C#)ZPKaݟHi*Hhy\7/H~:8TW&8C0l*ҡ{l\@£8>8 .|^kKiv1Q)_Bg;@-B(=jǏ` cԨR1}z;O6B2iL\2KpvZaϪIv5SOϕ6$tG wj$ rĦ^:`IvCu>V޶@HE>f]Mb/D;ܼn=KIȐ2__K#|,jITŔsg9 vfF5V @AUJ,< J|Xc ##VrԜSm ?*55tv^IIe37L/F3.r@p%//i0q9 g~*SVqoviVYk\3?Ie5`CB&u$j_7M7"9u+9iwb$|6p:,؆4rj*HEׯ6-KW`I,H~~jĮE?=4oq2NcP!=_Y3c1K {x^/ M MXH'7:@"F]ۀ)$#\Wjc1URx$+j9lR8C\ 0<@cڥ>@V)-Oۈ^/f´~1L39!qf`5DzHEa=cLHg=>~͝%r~6o >S߰t^m?9mӈR-ZN4 )ҧukO5Ձ7o[A(uBr3G+>ۣDV?[}4pR]WUb( +$8_tc/MTY+ޓгj Sn_Z{E[DU/v55⦢M]E xy|Ω4|SQ}Q^5xv.?h`Jo9`s-Llˊş0vM\g❓}>!J< 38>tծ1\2\~bokVɧqG!Ыƒ_Ԝ=Pke8t>+6ϙܟ)}V;,~KP+NR_ϕۉ#p-H>-* 鰓(N7}yʑNO#g%l=oռ?E}ɀ]}Pweƾa[~9g]6R%%88. ,kbfҎljU|e޽f=5'H:`Qݳz|I*P˶lV?)Jih6;> endobj 287 0 obj <>stream HU{TY ff "AEE1P@A%9FEklB1b_ф{Sl15G8fj4{]`L&SpvjԜԨܲeUeY%KVy퉺bu5r/9K6 uoV(DaNG|Lqie+ޜcSʖ93X4̙RZU:s**V-R|$ !L!Ra*}t!W! {/\ƱyB4Sc?>}f_sX ,i-`{,%ϲfy7!'n䱙dj1.tIFǟ*DԂ'[L0a=zM9O}3g|ziu_ )}N7i* d wDXac4ppgS[BПB~=m[9%L#7]wذM2Z/K*eZAAڇ (DI{U0 kQʰ&k*D;Kd>C'nM?9y>(r= Dv~A~#$R)~HtWAE@n l<^ Q|{?sDwOBæRBdxm~Z% >Ԓr)T- [Cƾ[t`LRe~6wFƢcMq jk̿ϳ̻mCek̉ߛ[W*[Џ#]]}j-O˱mzW%\(_!Kݣ4._"<Q yjQG"Ɠc//eOSH28 w &ݍmg9m{3}C9SUNG`]&o&J>US|ERѬc-&7$W1j3V8]js[~X,z UbIjEu_( l/ŷd/7{t 0W0(WF )V2Nrʤ,m bxQF}څHh˖M͚mц#2_sxJ)d*Y%ќWߺPqJ8#$kkNmY;ˢg.a84Qa8i}^~V8ogg[P:O [)[fM*8^kw&c ett #]CA;8bE T {2,9)*()d3yǘPrt"o%s)y @",V&!XHW M(b"o "-2 endstream endobj 288 0 obj <> endobj 289 0 obj <>stream HUkPW{yLw3(8*2H(, $ ].IDVD" B4]7|j3Lv٪VWWu{{P(93oe5Jm[\~yEMUI+$$|Mr)YvaJ TAe0!R(LmVO2L\?{xJzh>|UyumyY0 CA$"YA bAX BIDAP(dʊYQ@P|xeZu{owNOO@yTLT~"߳lr 5:S_3a Ġ⠋c_ I Y2ʅ. =S:ղs؛jVVwņhJ45ZN%p{O-G=+Y@/aég),zO >Onf9lw?';(hvaQHiAS8K~,FG13ǽs(b18D10v QP]]w~J*?f9:pᙝKz58.$a0HDA6WّqX A",ͼLY G!'=#MB5e!y|z sh"DKan2MC AGEv4D*33PvoSɴdX-,ų&%戨J"S!JXm`:q#I?-R:S>8Wh涌aXr`&%Y,Hj7CNY:B\y4(`\ \\ }eHj.}.q؃~Wǀ?ZVUI7cdcXc{}#y9c ț1kq55h)Ҝ2]x&I_H,k O6D=f[jږ} ]|ݺܡVnrܶ^W_`f #q~)8FBŸZ 6Fw%4nq[eN`!2)C91xq2 8!۠y<pc+䰜XI;ZpR0f\`h,$́aDrS +̕h!W 4"Y8ITѽ}DK.&qs,@GCAӫxL0}31'\ ޵Q^]Gu׏?0RM"Daq?<HSda&u;Uhߓp>̅P ,=j)9nS^D3P\BLy_7e]<B\AQ8tN=0SV .p dp)dAJwageG2{žG 6}Eϐ pY(Wc?Fm䒄bd@lU3(_M\P8NFFֽQ7DQW@f/~Bs?zH۔TIƵuMh eMqFBrof?98ٮɰAeo 94x,,&Fkbf՗pwگg]ެdثgEޢ=VZXMq[.]sM>(_; O`=.x PpEL-AO>(`zE`0F*<īh!˙3+ivBWo[:(8Vޥ 8࿋NTčFu0ܾE{7Ve[oUa2Toy6%.?@Qpmp"]A^[Y$'oQ9NKb =#&dRc dہ`jkind=/AGZԮAOQOe!wޅAv*܃A:?0] TD3Uj.C/(/Y`TCC D4`3oaۋ߃U%GtOUQ`ˑ O!W!H'zW3!N>`c*hV@hFan^'-oAӬzwOMX`E Fr@6m   Ƃcʺ,{9ϞX:Q?b YJEtk~U t~Omk5͋RբqO.9/ 2!FbG:Ko嶛s_kJ<%J S.\W@{SUiWV,n'ZJtnᨗvw +IuɆ@fg1f7 x}XA}\s(&Q G9ԮW-&I yv+xV5"^2~b rnÀn.msKK>$ ul-.·<0:we&ʙuI+p*84*8,uW 'hoLr{ТS&a,[~ZXX;.m()2[/^_D,X\nw`,Lg,LƁDTT`5}@ضp!HF 8fŽ(*R$)ܗ҈ .\`r,a& > Md2fy82,3,pM] )+\¾AD*k\/p =ߺhR&l\>WܖQ'ĕM 6)EPCߎ]3w쩖S-]z%FnGCUv^ioH0>@?L;CGgR tN!#i$W d`LPuqiљNJd媶?W}PTWFać{}0 Q60@H"KnIc$JCզ~PD~QPu(ihK,$"U$Mr۳,hlfix3o0DƆfț]Tb2:8h p\}ə/AM}h\iM8 J6*T"U@iV7m),M+Q@|UCo N*7%|E-HßLhߧj,ǬDnnJVћ9$eeMH5g >W/63$M6)+d߻L`} UjbNf(1: 9Jf[͓΁ 0Ns8lEBlHLJp:zVy uɻ{.[쮆KNDq'Xb$࡚܄bM9Ʊx"Σn׳ZIs2xQp$' _ 89O2?6ZH'ao'tOFO؞dCQA6f|q;.a-#:M(K@HNdMePV{o YՀLWj<\/7VOi$孠z Kfi?]d -1!DI/KHL Bvy#%A_&=c=Ŧ)y|BqFod6*(4 %,m;~O>2a/q׏\V]`U싙GqIJ(蛀rܘ?=Wok KvsucTzwE1(\cc0cXFK;հ[F|AV^ B'בM|YO<ђ~ha0݁S>p`7 G`缩IPq tĞA3 1Prq<1^ ?@J>=oo?J=mO E"$ǬDJ`98ro[6'gH &Ё\/x~%sୁ'}i 092W'\E/xp~&ҧЋ)3!ފ\B^41 64 gF+,&/4*£R%C%Ew о ,l{DMBN΀<8p@6I2˲ u_Ei d܈]5Zܷ ml]6QG67 [,)-A2e%#X+ yl8SN]Sݫw~wrZ ?spRpn.6R C+?ÛIOo:e endstream endobj 290 0 obj <> endobj 291 0 obj <>stream HUkTSgM &FU@qPy bDZd tD0cj].BkY⣮VTQgMNҙǬ[8{sI%2'T*%/X43peoKK3/$ Rtuzy~R^QLH޽ʑ܉ؤj'}=I,MI))w ) ]TRRX\5?wAqRʂB~K*D.($$_d$J*/$KV9KDl%auR4@'ImN^NwfӜʶ0*` yBT/ td6C#D ƍeuq '㠵g(u T]I.Uͮq/!,nX~y:r{*DuY{'Jʣ;.4wQ J` zꑋ^zmkV&B&LW 7ŖIeBFi\kGG}wOӺ]t)z|XlǙul-Fr3儅uB4͊Oكgßj9:־ ?ѭ9ƂN)t/\j~z*\Ae:Ie~ZQc5?g YQ(P!;jf5A{kIuR(-я&Ր\,ѣhL;vbZf-qRf"8.$Sk@$@CkF$' 4g| )fאBi#ͦzf˜Ӭ؆C0?tƑZTB"MK\QQ[YX_ۛܛ|Kyy+7Aj{+Li^szᗵO?pFl4;$7S!N]B*r#7H#Wem_YlKGff{DD#D9?q`WPAL耛 brϢr3՚D3gnRՇ2n+դ{;!fA\c8$E*\3MfN4!a$UG~ "PJ1#1/k6qذiJjhy6BD! dnkD`(9\ 2:|NH>3jԻԞ#Wu:Z}s,k/,w3Oq;2.DjVg}w5qA:#i6A(  EOQ,ĤNtDg +#8 q֝o)EWvw/ɇ־UV{~+]Ŋno1:)uh/*4]Ja W I ؀Y~[p$Wcq9.S@.7bcg筌ΈΘ̭Ip!'a~ 9q:]޽v>UoţOvzCq'!'Xt %u&\D0w-fu WWffh~kVG$$l - (B8 ,̍ɗp$ %#)LI"̓Z^Sm#/b7󃝿sX$a^8EoKN)Oi8^I#v<=7Osg$g$ozO4DjF0XN_4c:Jq[Ѥ]F搅xoZ^f  RBC=#nC٘-*IF[oԞQ7qP8JpJ- Pc:^%x{m06ڻڞ=]Ci `T~7d$' h+\]E\Q崸ʴ1Y|Y$TpXX%^N9jHTb[ yAAiQ))9+ؒ)e_Fu_K}Xorr͵f}&G$z)Rt U7=/@Pk=_5Wfi×/]*K- MRKg-kR '1$P=ν{z/i\tIӬjv s>Z,A}"Kk}RpT>V4] xB̴SETnyKsATP(%g[-A,',*bQvن_ ڌ֑Y)q0h55ί>cQ4nd!zG\+ATvC*DZ4[OX#^xh Іl],<3.*'gK!a p `$*sfZ!S!g, ؚQ'0\~ תSN6]\RYIUw RÑ$z::b-F #DHAܥT;޴ x:GSP`(.k G e՚zzZ"~xX%0ef4xzHl^cb-7 R@`>axz#p;p+l"iΪ`y#[~or{Z7.G=+f5t&&I<#X&m{HlTm03*pVL[0Œ-#euhWvлnVݬ])])w6?SOkeϢ?~/d~w?߁9?pw]X~_*^߁lm-[:ޗP[kw%]:?z ;1lD~5U 6 endstream endobj 292 0 obj <> endobj 293 0 obj <>stream Hbd`ab`ddurwK-/vLIuIXf!CG_ Ne.>V M3gFxؿ/^*#cfs~AeQfzFBtr.0QK,HS,V+3s* 2Ӌ 2*scu3K2RSRSJsS@UVO @Pΐ t?3#|@φb?Ȱ"k52,g6GjD߲}{W٭>-EǧK^*Q>gH endstream endobj 294 0 obj <> endobj 295 0 obj <>stream Hbd`ad`ddur v,LuIL [f!CG_լr > endobj 297 0 obj <>stream HTOMHTQWWןcg:T&0bA+I$q($EHDLsQPT$FpQ @EAΙ{L9g9WZn^mGbG?5\1t2'(s6Y)^,J3iPOTҚF"" [ - {hUj9>=/[ۥ!:E ?3 ~,(kK/rܙԢk|M;owO7ѿK)\mAz<7vx̸7O:320 )!Va1 @"}!H;]}ϲI3[50Ae_rsgzz٭u36 u91!MUp endstream endobj 61 0 obj <> endobj 62 0 obj <> endobj 63 0 obj <> endobj 64 0 obj <> endobj 65 0 obj <> endobj 66 0 obj <> endobj 123 0 obj <> endobj 226 0 obj <> endobj 227 0 obj <> endobj 298 0 obj <> endobj 300 0 obj <> endobj 302 0 obj <> endobj 304 0 obj <> endobj 306 0 obj <> endobj 308 0 obj <> endobj 310 0 obj <> endobj 312 0 obj <> endobj 299 0 obj <>stream HTQMk0 Wу#-(֮wQ'=On 8~~{%;<\3| =u㪀}w Aj0߶ƃ$ql@k!)ac|=| ]av?Doan *=bZG:As>U{c1wE*+AtPIq "efmB/Rn'V&ՎU&),su$a"e&=V%{HzE5{EDN<{-jhUlqx>stream HTRMo0 +|C$u>nF=NX!Uʁu?vN+_a r-gow Ź/N i`ݣrOGCoWs: Niʞj5P,)bƩ՟'u&馔^EbxMd>),JjҞUX"9-{HdJM8?EbGD.6D|P &ɖ!\b%kT2\b *Hg#7gwkxOS]voo -^ endstream endobj 303 0 obj <>stream HTMo ;@>I(RժRN"-?YEJ`g~'8W.LezP8Oihdog}(o9hgȠi`Ig5 ?Η2FS,xlcUR\Z>stream HTPN0 +|ܴCڈBa%nDM{ dK{œ,닅,o >d[kk endstream endobj 307 0 obj <>stream HTKo0 | ;: !M&nw4B~v̺ _a Տ355BWE4pU7 N!<|߁z}o;Xr/}v =5ԟpN1Fk4vUP55cV*έl|$qLX 7I`2ąpRsm!01GWƨ2.Ґq9H˔[fE.}3v02EgeQ"."ț˺V_ koF7`+Ù endstream endobj 309 0 obj <>stream HTOk0 :$ #cút lo?$xzg{_tKqv k X*w=)"::4M!ќyg+ > [asq/)PCNG1+hDhFƆF\?e"7/8zaIrOO*~n endstream endobj 311 0 obj <>stream HTMo0 ;44UaZi0 i(Cu;?m7z9Mgkpmg!I4jʁuf;!<2kmaqLNpq {İBMʽT={t:4YP*-B[(6E!ܘGdpɌOY JxŬ5Fx,y2Γ5;<LXsg$$!&G.)9EUiIYZisHB\qcxvV40eogvฝF v#v endstream endobj 313 0 obj <>stream HTQMo0 WةUPbaZ`Q~Nº b=^gvTgucq^ p"iơB0Fi+N?۠uKAbg,Ig9 ?e5?c HDQ_cy`\[)- QDTzgc lُ~' S+%5u yE"ٶ 8oZ2ߋ7k]s[] endstream endobj 8 0 obj <> endobj 70 0 obj <> endobj 124 0 obj <> endobj 163 0 obj <> endobj 228 0 obj <> endobj 314 0 obj <> endobj 315 0 obj <> endobj 69 0 obj <> endobj 271 0 obj <> endobj 269 0 obj <> endobj 267 0 obj <> endobj 265 0 obj <> endobj 263 0 obj <> endobj 261 0 obj <> endobj 259 0 obj <> endobj 257 0 obj <> endobj 255 0 obj <> endobj 253 0 obj <> endobj 251 0 obj <> endobj 249 0 obj <> endobj 247 0 obj <> endobj 245 0 obj <> endobj 243 0 obj <> endobj 241 0 obj <> endobj 239 0 obj <> endobj 237 0 obj <> endobj 235 0 obj <> endobj 233 0 obj <> endobj 231 0 obj <> endobj 229 0 obj <> endobj 222 0 obj <> endobj 220 0 obj <> endobj 218 0 obj <> endobj 216 0 obj <> endobj 214 0 obj <> endobj 212 0 obj <> endobj 210 0 obj <> endobj 204 0 obj <> endobj 202 0 obj <> endobj 200 0 obj <> endobj 198 0 obj <> endobj 196 0 obj <> endobj 194 0 obj <> endobj 192 0 obj <> endobj 190 0 obj <> endobj 188 0 obj <> endobj 186 0 obj <> endobj 184 0 obj <> endobj 182 0 obj <> endobj 180 0 obj <> endobj 178 0 obj <> endobj 176 0 obj <> endobj 174 0 obj <> endobj 172 0 obj <> endobj 170 0 obj <> endobj 168 0 obj <> endobj 166 0 obj <> endobj 164 0 obj <> endobj 159 0 obj <> endobj 157 0 obj <> endobj 155 0 obj <> endobj 153 0 obj <> endobj 151 0 obj <> endobj 149 0 obj <> endobj 147 0 obj <> endobj 145 0 obj <> endobj 143 0 obj <> endobj 141 0 obj <> endobj 139 0 obj <> endobj 137 0 obj <> endobj 135 0 obj <> endobj 133 0 obj <> endobj 131 0 obj <> endobj 129 0 obj <> endobj 127 0 obj <> endobj 125 0 obj <> endobj 115 0 obj <> endobj 113 0 obj <> endobj 111 0 obj <> endobj 109 0 obj <> endobj 107 0 obj <> endobj 105 0 obj <> endobj 103 0 obj <> endobj 101 0 obj <> endobj 99 0 obj <> endobj 97 0 obj <> endobj 95 0 obj <> endobj 93 0 obj <> endobj 91 0 obj <> endobj 89 0 obj <> endobj 87 0 obj <> endobj 85 0 obj <> endobj 83 0 obj <> endobj 81 0 obj <> endobj 79 0 obj <> endobj 77 0 obj <> endobj 75 0 obj <> endobj 73 0 obj <> endobj 71 0 obj <> endobj 57 0 obj <> endobj 55 0 obj <> endobj 53 0 obj <> endobj 51 0 obj <> endobj 49 0 obj <> endobj 47 0 obj <> endobj 45 0 obj <> endobj 43 0 obj <> endobj 41 0 obj <> endobj 39 0 obj <> endobj 37 0 obj <> endobj 33 0 obj <> endobj 31 0 obj <> endobj 29 0 obj <> endobj 27 0 obj <> endobj 25 0 obj <> endobj 23 0 obj <> endobj 21 0 obj <> endobj 19 0 obj <> endobj 17 0 obj <> endobj 15 0 obj <> endobj 13 0 obj <> endobj 11 0 obj <> endobj 9 0 obj <> endobj 316 0 obj [11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 11 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 13 0 R 15 0 R 15 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 17 0 R 19 0 R 19 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 21 0 R 23 0 R 23 0 R 23 0 R 23 0 R 23 0 R 23 0 R 23 0 R 23 0 R 25 0 R 25 0 R 25 0 R 25 0 R 25 0 R 25 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 27 0 R 31 0 R 31 0 R 31 0 R 31 0 R 33 0 R 35 0 R 39 0 R 39 0 R 41 0 R 41 0 R 41 0 R 41 0 R 41 0 R 41 0 R 43 0 R 43 0 R 45 0 R 45 0 R 45 0 R 45 0 R 45 0 R 45 0 R 49 0 R 49 0 R 49 0 R 53 0 R 57 0 R 57 0 R] endobj 317 0 obj [73 0 R 73 0 R 77 0 R 77 0 R 77 0 R 81 0 R 83 0 R 83 0 R 83 0 R 83 0 R 83 0 R 83 0 R 83 0 R 83 0 R 83 0 R 83 0 R 83 0 R 83 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 87 0 R 87 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 89 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 91 0 R 93 0 R 93 0 R 93 0 R 93 0 R 93 0 R 93 0 R 95 0 R 95 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 97 0 R 99 0 R 99 0 R 99 0 R 99 0 R 101 0 R 101 0 R 101 0 R 101 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 103 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 107 0 R 107 0 R 107 0 R 107 0 R 107 0 R 107 0 R 109 0 R 109 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 111 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 117 0 R] endobj 318 0 obj [127 0 R 127 0 R 131 0 R 131 0 R 131 0 R 135 0 R 137 0 R 137 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 139 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 141 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 145 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 147 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 149 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 151 0 R 153 0 R 153 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 155 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R 159 0 R] endobj 319 0 obj [166 0 R 166 0 R 170 0 R 170 0 R 170 0 R 174 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 176 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 178 0 R 180 0 R 180 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 182 0 R 184 0 R 184 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 186 0 R 188 0 R 188 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 190 0 R 192 0 R 192 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 194 0 R 196 0 R 196 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 198 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 200 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 204 0 R 206 0 R 212 0 R 214 0 R 214 0 R 216 0 R 216 0 R 218 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 220 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R 222 0 R] endobj 320 0 obj [231 0 R 231 0 R 235 0 R 235 0 R 235 0 R 239 0 R 241 0 R 241 0 R 241 0 R 241 0 R 241 0 R 241 0 R 241 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 243 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 245 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 247 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 249 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 251 0 R 253 0 R 253 0 R 253 0 R 253 0 R 253 0 R 253 0 R 253 0 R 253 0 R 253 0 R 253 0 R 255 0 R 255 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 261 0 R 261 0 R 261 0 R 261 0 R 261 0 R 261 0 R 261 0 R 261 0 R 261 0 R 261 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 265 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R] endobj 321 0 obj <> endobj 4 0 obj <>/K 5 0 R>> endobj 322 0 obj << /Dt (D:20200218131003) /JTM (Distiller) >> endobj 323 0 obj /This endobj 324 0 obj << /CP (Distiller) /Fi 323 0 R >> endobj 325 0 obj << /JTF 0 /MB [ 0.000 0.000 603.000 783.000 ]/W [ 0 4 ]>> endobj 326 0 obj << /Fi [ 324 0 R ]/P [ 325 0 R ]>> endobj 327 0 obj << /Dm [ 603.000 783.000 603.000 783.000 ]>> endobj 328 0 obj << /Me 327 0 R >> endobj 329 0 obj << /D [ 326 0 R ]/MS 328 0 R /Type /JobTicketContents >> endobj 330 0 obj << /A [ 322 0 R ]/Cn [ 329 0 R ]/V 1.100 >> endobj 3 0 obj <> endobj 331 0 obj <>stream http://www.aiim.org/pdfua/ns/id/ pdfuaid PDF/UA ID Schema internal Part of PDF/UA standard part Open Choice of Integer 1 QuarkXPress(R) 14.32 2020-02-18T13:10:00-06:00 2020-02-18T13:10:00-06:00 QuarkXPress(R) 14.32 %%DocumentProcessColors: Cyan Magenta Yellow Black %%EndComments Layout 1 Sally Kennedy endstream endobj 1 0 obj <>/Lang(en-US)/ViewerPreferences<>/QXPr:DeviceNColorants 2 0 R>> endobj 118 0 obj <> endobj 207 0 obj <> endobj 2 0 obj <<>> endobj 36 0 obj <> endobj xref 0 332 0000000000 65535 f 0000252832 00000 n 0000253187 00000 n 0000247922 00000 n 0000247275 00000 n 0000102203 00000 n 0000101965 00000 n 0000000000 00000 f 0000228935 00000 n 0000239047 00000 n 0000000000 00000 f 0000238940 00000 n 0000000000 00000 f 0000238817 00000 n 0000000000 00000 f 0000238766 00000 n 0000000000 00000 f 0000238673 00000 n 0000000000 00000 f 0000238622 00000 n 0000000000 00000 f 0000238493 00000 n 0000000000 00000 f 0000238418 00000 n 0000000000 00000 f 0000238349 00000 n 0000000000 00000 f 0000238248 00000 n 0000000000 00000 f 0000238194 00000 n 0000000000 00000 f 0000238132 00000 n 0000000000 00000 f 0000238083 00000 n 0000000000 00000 f 0000000016 00000 n 0000253207 00000 n 0000238015 00000 n 0000000000 00000 f 0000237961 00000 n 0000000000 00000 f 0000237891 00000 n 0000000000 00000 f 0000237837 00000 n 0000000000 00000 f 0000237767 00000 n 0000000000 00000 f 0000237721 00000 n 0000000000 00000 f 0000237663 00000 n 0000000000 00000 f 0000237617 00000 n 0000000000 00000 f 0000237568 00000 n 0000000000 00000 f 0000237522 00000 n 0000000000 00000 f 0000237468 00000 n 0000000000 00000 f 0000000088 00000 n 0000016846 00000 n 0000220383 00000 n 0000220912 00000 n 0000221751 00000 n 0000222278 00000 n 0000222448 00000 n 0000222974 00000 n 0000194152 00000 n 0000194311 00000 n 0000230124 00000 n 0000229157 00000 n 0000237422 00000 n 0000000000 00000 f 0000237371 00000 n 0000000000 00000 f 0000237325 00000 n 0000000000 00000 f 0000237272 00000 n 0000000000 00000 f 0000237226 00000 n 0000000000 00000 f 0000237178 00000 n 0000000000 00000 f 0000237100 00000 n 0000000000 00000 f 0000237006 00000 n 0000000000 00000 f 0000236954 00000 n 0000000000 00000 f 0000236866 00000 n 0000000000 00000 f 0000236790 00000 n 0000000000 00000 f 0000236726 00000 n 0000000000 00000 f 0000236674 00000 n 0000000000 00000 f 0000236568 00000 n 0000000000 00000 f 0000236510 00000 n 0000000000 00000 f 0000236451 00000 n 0000000000 00000 f 0000236352 00000 n 0000000000 00000 f 0000236281 00000 n 0000000000 00000 f 0000236210 00000 n 0000000000 00000 f 0000236155 00000 n 0000000000 00000 f 0000235988 00000 n 0000000000 00000 f 0000235940 00000 n 0000000000 00000 f 0000235855 00000 n 0000000000 00000 f 0000016991 00000 n 0000253054 00000 n 0000102262 00000 n 0000103592 00000 n 0000017066 00000 n 0000034100 00000 n 0000223184 00000 n 0000229382 00000 n 0000235807 00000 n 0000000000 00000 f 0000235753 00000 n 0000000000 00000 f 0000235705 00000 n 0000000000 00000 f 0000235649 00000 n 0000000000 00000 f 0000235601 00000 n 0000000000 00000 f 0000235550 00000 n 0000000000 00000 f 0000235498 00000 n 0000000000 00000 f 0000235398 00000 n 0000000000 00000 f 0000235284 00000 n 0000000000 00000 f 0000235158 00000 n 0000000000 00000 f 0000235024 00000 n 0000000000 00000 f 0000234888 00000 n 0000000000 00000 f 0000234744 00000 n 0000000000 00000 f 0000234648 00000 n 0000000000 00000 f 0000234592 00000 n 0000000000 00000 f 0000234472 00000 n 0000000000 00000 f 0000234424 00000 n 0000000000 00000 f 0000234322 00000 n 0000000000 00000 f 0000034287 00000 n 0000054566 00000 n 0000229608 00000 n 0000234274 00000 n 0000000000 00000 f 0000234220 00000 n 0000000000 00000 f 0000234172 00000 n 0000000000 00000 f 0000234116 00000 n 0000000000 00000 f 0000234068 00000 n 0000000000 00000 f 0000234017 00000 n 0000000000 00000 f 0000233859 00000 n 0000000000 00000 f 0000233769 00000 n 0000000000 00000 f 0000233715 00000 n 0000000000 00000 f 0000233613 00000 n 0000000000 00000 f 0000233559 00000 n 0000000000 00000 f 0000233457 00000 n 0000000000 00000 f 0000233403 00000 n 0000000000 00000 f 0000233267 00000 n 0000000000 00000 f 0000233211 00000 n 0000000000 00000 f 0000233107 00000 n 0000000000 00000 f 0000233051 00000 n 0000000000 00000 f 0000232867 00000 n 0000000000 00000 f 0000232787 00000 n 0000000000 00000 f 0000232739 00000 n 0000000000 00000 f 0000232637 00000 n 0000000000 00000 f 0000054693 00000 n 0000253120 00000 n 0000169213 00000 n 0000170738 00000 n 0000232548 00000 n 0000000000 00000 f 0000232495 00000 n 0000000000 00000 f 0000232437 00000 n 0000000000 00000 f 0000232379 00000 n 0000000000 00000 f 0000232326 00000 n 0000000000 00000 f 0000232224 00000 n 0000000000 00000 f 0000232090 00000 n 0000000000 00000 f 0000054769 00000 n 0000078439 00000 n 0000223362 00000 n 0000223982 00000 n 0000229834 00000 n 0000232042 00000 n 0000000000 00000 f 0000231988 00000 n 0000000000 00000 f 0000231940 00000 n 0000000000 00000 f 0000231884 00000 n 0000000000 00000 f 0000231836 00000 n 0000000000 00000 f 0000231785 00000 n 0000000000 00000 f 0000231720 00000 n 0000000000 00000 f 0000231591 00000 n 0000000000 00000 f 0000231492 00000 n 0000000000 00000 f 0000231363 00000 n 0000000000 00000 f 0000231276 00000 n 0000000000 00000 f 0000231107 00000 n 0000000000 00000 f 0000231019 00000 n 0000000000 00000 f 0000230963 00000 n 0000000000 00000 f 0000230875 00000 n 0000000000 00000 f 0000230779 00000 n 0000000000 00000 f 0000230691 00000 n 0000000000 00000 f 0000230603 00000 n 0000000000 00000 f 0000230487 00000 n 0000000000 00000 f 0000230379 00000 n 0000000000 00000 f 0000230331 00000 n 0000000000 00000 f 0000230229 00000 n 0000000000 00000 f 0000078648 00000 n 0000101828 00000 n 0000193606 00000 n 0000193783 00000 n 0000193876 00000 n 0000193968 00000 n 0000194060 00000 n 0000194472 00000 n 0000194756 00000 n 0000197285 00000 n 0000197650 00000 n 0000201814 00000 n 0000202088 00000 n 0000204554 00000 n 0000204826 00000 n 0000207254 00000 n 0000207796 00000 n 0000213756 00000 n 0000214143 00000 n 0000218538 00000 n 0000218757 00000 n 0000219146 00000 n 0000219342 00000 n 0000219652 00000 n 0000219858 00000 n 0000224508 00000 n 0000226083 00000 n 0000224757 00000 n 0000226455 00000 n 0000225177 00000 n 0000226853 00000 n 0000225435 00000 n 0000227223 00000 n 0000225495 00000 n 0000227513 00000 n 0000225665 00000 n 0000227895 00000 n 0000225745 00000 n 0000228185 00000 n 0000225933 00000 n 0000228573 00000 n 0000230060 00000 n 0000230086 00000 n 0000239556 00000 n 0000240653 00000 n 0000241892 00000 n 0000243455 00000 n 0000245362 00000 n 0000247197 00000 n 0000247424 00000 n 0000247487 00000 n 0000247511 00000 n 0000247562 00000 n 0000247637 00000 n 0000247689 00000 n 0000247751 00000 n 0000247786 00000 n 0000247861 00000 n 0000248209 00000 n trailer << /Size 332 /Root 1 0 R /Info 3 0 R /ID[<1e2a0f7688ec158ccb7a15c7e015931d><1e2a0f7688ec158ccb7a15c7e015931d>] >> startxref 253271 %%EOF