diff --git a/AuditGlue/AuditGlue Personae.md b/AuditGlue/AuditGlue Personae.md
new file mode 100644
index 0000000..8a49b81
--- /dev/null
+++ b/AuditGlue/AuditGlue Personae.md
@@ -0,0 +1,5 @@
+- Client/business owner: User, owner of the company, tech person, made responsible for ISO 27001
+- Auditor
+- Expert (Support role)
+- Content Editor
+- Administrator
diff --git a/Corpus/Attachments/Canvas Cyclus.png b/AuditGlue/Canvas Cyclus.png
similarity index 100%
rename from Corpus/Attachments/Canvas Cyclus.png
rename to AuditGlue/Canvas Cyclus.png
diff --git a/Corpus/Sparks/iso27diy/ISO27DIY benefits.md b/AuditGlue/ISO27DIY benefits.md
similarity index 100%
rename from Corpus/Sparks/iso27diy/ISO27DIY benefits.md
rename to AuditGlue/ISO27DIY benefits.md
diff --git a/Corpus/Sparks/iso27diy/Idea Validation.md b/AuditGlue/Idea Validation.md
similarity index 100%
rename from Corpus/Sparks/iso27diy/Idea Validation.md
rename to AuditGlue/Idea Validation.md
diff --git a/Corpus/Sparks/iso27diy/List of possible partners.md b/AuditGlue/List of possible partners.md
similarity index 78%
rename from Corpus/Sparks/iso27diy/List of possible partners.md
rename to AuditGlue/List of possible partners.md
index 29d1eed..2997dae 100644
--- a/Corpus/Sparks/iso27diy/List of possible partners.md
+++ b/AuditGlue/List of possible partners.md
@@ -1,4 +1,4 @@
-- [The Art of Service](../The%20Art%20of%20Service.md) offers topical InfoSec Kanban boards
+- [The Art of Service](../Corpus/Sparks/The%20Art%20of%20Service.md) offers topical InfoSec Kanban boards
- 'Certificeringsadvies' offers independent external audits, they were employed by Networking4all
- [Muddassir via Gumroad](https://community.gumroad.com/c/share-your-wins/boring-fields-like-supply-chains-can-be-creative-enough-to-sell-digital-products?login_token=RyhWoyqXw2kT5de2eNp6RYjL6U4NY1aKLPmS#comment_wrapper_4014940). Runs a site on SCM and has offered to cross post content.
diff --git a/AuditGlue/Modules, Screens and Content.md b/AuditGlue/Modules, Screens and Content.md
new file mode 100644
index 0000000..dfff751
--- /dev/null
+++ b/AuditGlue/Modules, Screens and Content.md
@@ -0,0 +1,22 @@
+
+See also [Three user modes for AuditGlue](Three%20user%20modes%20for%20AuditGlue.md)
+
+# Guided implementation mode
+
+The 'guided implementation mode' will (roughly) resemble the structure and sequence of the [📼 ISO27DIY Video Series](../Corpus/Standards/ISO27x/legacy/iso27DIY%20mk%20I/📼%20ISO27DIY%20Video%20Series.md). This will be the reference for now.
+
+
+
+# Operational mode
+Here's the ISMS tool structure created in cooperation with Nedap: [Nedap ISMS tool structure](../Clients/Nedap%20ISMS%20tool%20structure.md).
+
+There's also this [ISO 27001 structure diagram](../Corpus/Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO%2027001%20structure%20diagram.md).
+
+See also the ISMS Tool and Overzicht beveiliging Excel sheets created for NHC:
+- 
+- 
+
+
+
+# Audit mode
+
diff --git a/Corpus/Sparks/Most Challenging Clauses in ISO 27001.md b/AuditGlue/Most Challenging Clauses in ISO 27001.md
similarity index 100%
rename from Corpus/Sparks/Most Challenging Clauses in ISO 27001.md
rename to AuditGlue/Most Challenging Clauses in ISO 27001.md
diff --git a/Corpus/Sparks/Personae and Roles.md b/AuditGlue/Personae and Roles.md
similarity index 100%
rename from Corpus/Sparks/Personae and Roles.md
rename to AuditGlue/Personae and Roles.md
diff --git a/Corpus/Sparks/Possible Colabs.md b/AuditGlue/Possible Colabs.md
similarity index 67%
rename from Corpus/Sparks/Possible Colabs.md
rename to AuditGlue/Possible Colabs.md
index c5facf1..8b26302 100644
--- a/Corpus/Sparks/Possible Colabs.md
+++ b/AuditGlue/Possible Colabs.md
@@ -3,4 +3,4 @@ Phil Odence of Black Duck / Synopsis
https://twitter.com/podence
https://www.linkedin.com/in/podence/
Connectie van Richard ten Cate (The Red Button), die volgens mij sales voor Black Duck heeft gedaan.
-Zie ook [Software due diligence](Software%20due%20diligence.md).
\ No newline at end of file
+Zie ook [Software due diligence](../Corpus/Information%20Security/Software%20due%20diligence.md).
\ No newline at end of file
diff --git a/Corpus/Sparks/Scale up.md b/AuditGlue/Scale up markt NL.md
similarity index 91%
rename from Corpus/Sparks/Scale up.md
rename to AuditGlue/Scale up markt NL.md
index bdf1619..a204395 100644
--- a/Corpus/Sparks/Scale up.md
+++ b/AuditGlue/Scale up markt NL.md
@@ -1,3 +1,4 @@
+# Top 250 van NL groeiers
[NLgroeit](https://www.nlgroeit.nl/) heeft in oktober samen met de Erasmus universiteit een top 250 van NL groeiers [gepubliceerd](https://ece.nl/app/uploads/Top-250-Insight_report-EN.pdf).
diff --git a/Corpus/Sparks/No local installs.md b/AuditGlue/System alternative/No local installs.md
similarity index 100%
rename from Corpus/Sparks/No local installs.md
rename to AuditGlue/System alternative/No local installs.md
diff --git a/Corpus/Sparks/SQL vs NoSQL.md b/AuditGlue/System alternative/SQL vs NoSQL.md
similarity index 100%
rename from Corpus/Sparks/SQL vs NoSQL.md
rename to AuditGlue/System alternative/SQL vs NoSQL.md
diff --git a/Corpus/Sparks/Source text.md b/AuditGlue/System alternative/Source text.md
similarity index 100%
rename from Corpus/Sparks/Source text.md
rename to AuditGlue/System alternative/Source text.md
diff --git a/Corpus/Sparks/SupaBase Edge Functions.md b/AuditGlue/System alternative/SupaBase Edge Functions.md
similarity index 100%
rename from Corpus/Sparks/SupaBase Edge Functions.md
rename to AuditGlue/System alternative/SupaBase Edge Functions.md
diff --git a/Corpus/Sparks/SupaBase edge functions portability.md b/AuditGlue/System alternative/SupaBase edge functions portability.md
similarity index 100%
rename from Corpus/Sparks/SupaBase edge functions portability.md
rename to AuditGlue/System alternative/SupaBase edge functions portability.md
diff --git a/Corpus/Sparks/TypeDB structure for ISO27DIY.md b/AuditGlue/System alternative/TypeDB structure for ISO27DIY.md
similarity index 100%
rename from Corpus/Sparks/TypeDB structure for ISO27DIY.md
rename to AuditGlue/System alternative/TypeDB structure for ISO27DIY.md
diff --git a/Corpus/Sparks/When to use JSON data types.md b/AuditGlue/System alternative/When to use JSON types in Supabase.md
similarity index 96%
rename from Corpus/Sparks/When to use JSON data types.md
rename to AuditGlue/System alternative/When to use JSON types in Supabase.md
index a0546aa..1936209 100644
--- a/Corpus/Sparks/When to use JSON data types.md
+++ b/AuditGlue/System alternative/When to use JSON types in Supabase.md
@@ -1,9 +1,5 @@
----
-tags:
- - dbms
- - dev
- - design
----
+# When to use JSON types in Supabase
+
Use JSON/JSONB columns in Supabase when you have these specific scenarios:
**Semi-structured data with varying schemas** - Perfect for user preferences, product attributes that differ by category, or configuration settings where each record might have different fields. For example, storing product metadata where electronics have different attributes than clothing.
diff --git a/Corpus/Sparks/postgreSQL and JSON.md b/AuditGlue/System alternative/postgreSQL and JSON.md
similarity index 95%
rename from Corpus/Sparks/postgreSQL and JSON.md
rename to AuditGlue/System alternative/postgreSQL and JSON.md
index c82047a..f80fc71 100644
--- a/Corpus/Sparks/postgreSQL and JSON.md
+++ b/AuditGlue/System alternative/postgreSQL and JSON.md
@@ -1,8 +1,3 @@
----
-tags:
- - SupaBase
- - json
----
PostgreSQL has excellent JSON support with dedicated JSON and JSONB data types. JSONB is particularly powerful as it stores JSON in a binary format that’s faster to query. PostgreSQL offers extensive JSON operators and functions, GIN indexing for JSON fields, and the ability to mix relational and JSON data in the same database.
Supabase has excellent JSONB support since it’s built on PostgreSQL, which has one of the best JSON implementations among relational databases.
diff --git a/Corpus/Sparks/slot_config_erd.mermaid b/AuditGlue/System alternative/slot_config_erd.mermaid
similarity index 100%
rename from Corpus/Sparks/slot_config_erd.mermaid
rename to AuditGlue/System alternative/slot_config_erd.mermaid
diff --git a/Corpus/Sparks/slot_config_schema.sql b/AuditGlue/System alternative/slot_config_schema.sql
similarity index 100%
rename from Corpus/Sparks/slot_config_schema.sql
rename to AuditGlue/System alternative/slot_config_schema.sql
diff --git a/Corpus/Sparks/slot_manager_implementation.py b/AuditGlue/System alternative/slot_manager_implementation.py
similarity index 100%
rename from Corpus/Sparks/slot_manager_implementation.py
rename to AuditGlue/System alternative/slot_manager_implementation.py
diff --git a/Corpus/Sparks/Three user modes for AuditGlue.md b/AuditGlue/Three user modes for AuditGlue.md
similarity index 100%
rename from Corpus/Sparks/Three user modes for AuditGlue.md
rename to AuditGlue/Three user modes for AuditGlue.md
diff --git a/AuditGlue/iso27DIY content modules.canvas b/AuditGlue/iso27DIY content modules.canvas
index 1c8bb71..b74c1d6 100644
--- a/AuditGlue/iso27DIY content modules.canvas
+++ b/AuditGlue/iso27DIY content modules.canvas
@@ -429,7 +429,7 @@
"width":340,
"height":80
},
- {"id":"6c394a4088d586b3","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":382,"y":620,"width":278,"height":200},
+ {"id":"6c394a4088d586b3","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":382,"y":620,"width":278,"height":200},
{
"id":"1e6b25bf6dcb833e",
"type":"text",
@@ -470,8 +470,8 @@
"width":1068,
"height":60
},
- {"id":"ddfc9917c2c7fc66","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":-408,"y":620,"width":278,"height":200},
- {"id":"27d02011ccccb4c0","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":-19,"y":620,"width":278,"height":200}
+ {"id":"ddfc9917c2c7fc66","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":-408,"y":620,"width":278,"height":200},
+ {"id":"27d02011ccccb4c0","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":-19,"y":620,"width":278,"height":200}
],
"edges":[],
"metadata":{
diff --git a/AuditGlue/iso27DIY-MoC.md b/AuditGlue/iso27DIY-MoC.md
new file mode 100644
index 0000000..396af38
--- /dev/null
+++ b/AuditGlue/iso27DIY-MoC.md
@@ -0,0 +1,59 @@
+---
+tags:
+- project/iso27DIY
+- type/MoC
+---
+## Marketing source material
+[ISO27DIY Solution and Components](../marketing/branding/ISO27DIY%20Solution%20and%20Components.md)
+[Value Proposition Canvas for iso27DIY](../marketing/branding/Value%20Proposition%20Canvas%20for%20iso27DIY.md)
+[Brand Values](../marketing/branding/Brand%20Values.md)
+[FUD with Certification](../marketing/branding/FUD%20with%20Certification.md)
+[PRD Product Requirements Document for iso27DYI](PRD%20Product%20Requirements%20Document%20for%20iso27DYI.md)
+
+[iso27DIY Functional Diagram](System%20alternative/iso27DIY%20Functional%20Diagram.canvas)
+[iso27DIY content modules](iso27DIY%20content%20modules.canvas)
+
+## Marketing
+
+[Pricing](../Corpus/Various/The%20Psychology%20Behind%20SaaS%20Pricing.md)
+[[Pricing Tiers for iso27DIY|Tiers]]
+[[SEO guide for Carrd|Website SEO]]
+[Idea Validation](Idea%20Validation.md)
+
+## Method
+[Samenhang tussen ISMS producten](../Corpus/ISMS/Samenhang%20tussen%20ISMS%20producten.md)
+[ISO 27001 2023 Processen en Artefacten](../Corpus/Standards/ISO27x/OST/ISO%2027001%202023%20Processen%20en%20Artefacten.md)
+[Advised Documents for ISO 27001](../iso27DIY-gis/reference/Advised%20Documents%20for%20ISO%2027001.md)
+[Examples of Proof for auditors](../Sparks/Examples%20of%20Proof%20for%20auditors.md)
+[About ISO27DIY Policy Cards](../💡Permanent%20ideas/About%20ISO27DIY%20Policy%20Cards.md)
+
+## Design
+[Modules Canvas](iso27DIY%20content%20modules.canvas)
+[About the flow](../Sparks/About%20iso27diy/About%20the%20flow.md)
+[UI ideas](System%20alternative/iso27DIY%20UI%20ideas.md)
+
+### Agents
+[Create a proactive conversational agent](../Corpus/Various/Create%20a%20proactive%20conversational%20agent.md)
+[Create an interview agent](../Corpus/Various/Create%20an%20interview%20agent.md)
+ [Agent Design Intent Card](System%20alternative/Agent%20Design%20Intent%20Card.md)
+[Create a threat analysis chatbot](../Corpus/Various/Create%20a%20threat%20analysis%20chatbot.md)
+[Instruct an LLM on available tools](../Corpus/Various/Instruct%20an%20LLM%20on%20available%20tools.md)
+[LLM Prompt types](../Corpus/Various/LLM%20Prompt%20types.md)
+
+## Content
+[ISO27DIY Videos list](../🧱%20Projects/iso27DIY%20mk%20I/ISO27DIY%20Videos%20list.md)
+
+## Platform
+[Design Document for ISO 27001 Certification Support Online Service](../Corpus/Various/Design%20Document%20for%20ISO%2027001%20Certification%20Support%20Online%20Service.md)
+[Personae and Roles](Personae%20and%20Roles.md)
+[TypeDB structure for ISO27DIY](System%20alternative/TypeDB%20structure%20for%20ISO27DIY.md)
+[Client segregation in SaaS](../Corpus/Information%20Security/Client%20segregation%20in%20SaaS.md)
+[Building functionality in Supabase](../Corpus/Various/Building%20functionality%20in%20Supabase.md)
+[SupaBase edge functions portability](System%20alternative/SupaBase%20edge%20functions%20portability.md)
+[Connect LLM to Supabase to create content](../Corpus/Various/Connect%20LLM%20to%20Supabase%20to%20create%20content.md)
+[Application architecture](../Corpus/Various/Application%20architecture.md)
+[iso27DYI architecture with LLM](System%20alternative/iso27DYI%20architecture%20with%20LLM.md)
+[iso27DIY stack deployment](System%20alternative/iso27DIY%20stack%20deployment.md)
+[SurveyJS](../Corpus/Standards/SurveyJS.md)
+[WeWeb Security Pre-Launch Checklist](../Corpus/ISMS/Policy%20examples/WeWeb%20Security%20Pre-Launch%20Checklist.md)
+
diff --git a/Canvas Method/Canvas Cyclus.png b/Canvas Method/Canvas Cyclus.png
new file mode 100644
index 0000000..7c0dace
Binary files /dev/null and b/Canvas Method/Canvas Cyclus.png differ
diff --git a/Corpus/Attachments/C1-example2.png b/Clients/C1-example2.png
similarity index 100%
rename from Corpus/Attachments/C1-example2.png
rename to Clients/C1-example2.png
diff --git a/Clients/DAK/BIA Workshop DAK.md b/Clients/DAK/BIA Workshop DAK.md
index 3c7746e..386c1af 100644
--- a/Clients/DAK/BIA Workshop DAK.md
+++ b/Clients/DAK/BIA Workshop DAK.md
@@ -10,7 +10,7 @@ Gebaseerd op:
Resultaten:
- [BIA resultaat in MIRO](BIA%20resultaat%20MIRO.pdf)
-- [Maximum Down Time systemen per proces](../../Corpus/Attachments/BIA%20resultaten.numbers)
+- [Maximum Down Time systemen per proces](../Humankind/BIA%20resultaten%20Humankind.numbers)
- [Rapportage in Word](250128%20Business%20Impact%20Analyse%20DAK.docx)
## Deelnemers
diff --git a/Clients/DAK/IRP Workshop DAK.md b/Clients/DAK/IRP Workshop DAK.md
index c55e96a..77301ac 100644
--- a/Clients/DAK/IRP Workshop DAK.md
+++ b/Clients/DAK/IRP Workshop DAK.md
@@ -35,7 +35,7 @@ Voorstelrondje (voor deelnemers die er in de vorige workshop ([BIA](BIA%20Worksh
In de workshop van vorige week hebben we gekeken hoe lang systemen gemist konden worden, voordat de verschillende bedrijfsprocessen hiervan schade ondervonden (en het dus meer werd dan 'erg onhandig').
-Daarvan wil ik de resultaten nu met jullie delen: [Maximum Down Time systemen per proces](../../Corpus/Attachments/BIA%20resultaten.numbers).
+Daarvan wil ik de resultaten nu met jullie delen: [Maximum Down Time systemen per proces](../Humankind/BIA%20resultaten%20Humankind.numbers).
In deze sessie gaan we voor de kwetsbaarste processen kijken welke noodmaatregelen we kunnen inzetten als de meest kritische systemen uitvallen, hoe we die noodmaatregelen kunnen voorbereiden, wie we daarvoor nodig hebben, en hoe we gaan communiceren met de verschillende stakeholders over die noodmaatregelen.
diff --git a/Clients/DAK/Pentest DAK rapport Vitaen.md b/Clients/DAK/Pentest DAK rapport Vitaen.md
index 2fa8329..3b04c5c 100644
--- a/Clients/DAK/Pentest DAK rapport Vitaen.md
+++ b/Clients/DAK/Pentest DAK rapport Vitaen.md
@@ -51,7 +51,7 @@ Kwetsbaarheden gescoord volgens het Common Vulnerability Scoring System ([CVSS v
Voor het gebruik van de SA_VEEAM backup software is een Domain Administrator account aangemaakt. Dit geeft directe toegang geeft tot de volledige Active Directory-omgeving. Een aanvaller kan hiermee back-ups manipuleren, verwijderen of zelfs de volledige Active Directory overnemen. Het principe van least privilege lijkt niet te zijn toegepast
Volgens Vitaen is dit 'in de meeste gevallen niet noodzakelijk en verhoogt het aanvalsoppervlak aanzienlijk':
->Aangezien dit account vatbaar is voor een [Kerberoasting](../../Corpus/Sparks/Information%20Security/Kerberoasting.md) aanval, is het mogelijk gebleken de wachtwoord hash te bemachtigen. Het bleek echter niet mogelijk in de korte tijd dat de opdracht plaatsvond, om hiervan het wachtwoord te brute-forcen.
+>Aangezien dit account vatbaar is voor een [Kerberoasting](../../Corpus/Information%20Security/Kerberoasting.md) aanval, is het mogelijk gebleken de wachtwoord hash te bemachtigen. Het bleek echter niet mogelijk in de korte tijd dat de opdracht plaatsvond, om hiervan het wachtwoord te brute-forcen.
**Oplossingsrichting**
> Vitaen adviseert om het principe van least privilege toe te passen: service accounts mogen alleen de rechten krijgen die strikt noodzakelijk zijn voor hun functionaliteit. Waar mogelijk moeten alternatieve oplossingen zoals Managed Service Accounts (MSA) of Group Managed Service Accounts (gMSA) worden gebruikt, die automatisch wachtwoorden roteren en minder risicovol zijn. Daarnaast moet het gebruik van service accounts met verhoogde rechten actief worden gemonitord en gelogd, zodat afwijkend gedrag direct wordt opgemerkt.
diff --git a/Clients/Gastenhuis/Canvas Cyclus.png b/Clients/Gastenhuis/Canvas Cyclus.png
new file mode 100644
index 0000000..7c0dace
Binary files /dev/null and b/Clients/Gastenhuis/Canvas Cyclus.png differ
diff --git a/Clients/Gastenhuis/Gastenhuis Projectaanpak.canvas b/Clients/Gastenhuis/Gastenhuis Projectaanpak.canvas
index 7533b63..77e287e 100644
--- a/Clients/Gastenhuis/Gastenhuis Projectaanpak.canvas
+++ b/Clients/Gastenhuis/Gastenhuis Projectaanpak.canvas
@@ -459,9 +459,9 @@
"width":1068,
"height":60
},
- {"id":"ddfc9917c2c7fc66","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":-408,"y":620,"width":278,"height":200},
- {"id":"27d02011ccccb4c0","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":-19,"y":620,"width":278,"height":200},
- {"id":"6c394a4088d586b3","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":382,"y":620,"width":278,"height":200}
+ {"id":"ddfc9917c2c7fc66","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":-408,"y":620,"width":278,"height":200},
+ {"id":"27d02011ccccb4c0","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":-19,"y":620,"width":278,"height":200},
+ {"id":"6c394a4088d586b3","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":382,"y":620,"width":278,"height":200}
],
"edges":[],
"metadata":{
diff --git a/Corpus/Attachments/BIA resultaten.numbers b/Clients/Humankind/BIA resultaten Humankind.numbers
similarity index 100%
rename from Corpus/Attachments/BIA resultaten.numbers
rename to Clients/Humankind/BIA resultaten Humankind.numbers
diff --git a/Clients/Humankind/Benoemde risico's Humankind.md b/Clients/Humankind/Benoemde risico's Humankind.md
index 87436ec..d38117f 100644
--- a/Clients/Humankind/Benoemde risico's Humankind.md
+++ b/Clients/Humankind/Benoemde risico's Humankind.md
@@ -1,7 +1,7 @@
In gesprekken benoemde risico's
Opnemen in Risico Register
-Zie [Risk Register Format](../../Corpus/Sparks/Risk%20Register%20Format.md)
+Zie [Risk Register Format](../../Corpus/Information%20Security/Risks/Risk%20Register%20Format.md)
- Belangrijkste risico’s zitten bij email en gebruik van Teams (gastaccounts, policies, etc.), daarover komen de meeste incidentmeldingen. – 80% van de attack vectors lopen via mail.
diff --git a/Clients/Humankind/Big RASCI matrix Humankind.md b/Clients/Humankind/Big RASCI matrix Humankind.md
index 6b8e260..3571b84 100644
--- a/Clients/Humankind/Big RASCI matrix Humankind.md
+++ b/Clients/Humankind/Big RASCI matrix Humankind.md
@@ -6,7 +6,7 @@
| Opstellen van beleid | | | | | |
| Goedkeuren van beleid | | | | | |
| Vertalen van beleid | | | | | |
-Voor legenda zie [RASCI Matrix](../../Corpus/Sparks/RASCI%20Matrix.md)
+Voor legenda zie [RASCI Matrix](../../Corpus/ISMS/RASCI%20Matrix.md)
**Management**
- eindverantwoordelijk voor IB
diff --git a/Corpus/Attachments/Ubeeo ATS PvE 240315.xlsx b/Clients/Humankind/Humankind Ubeeo ATS PvE 240315.xlsx
similarity index 100%
rename from Corpus/Attachments/Ubeeo ATS PvE 240315.xlsx
rename to Clients/Humankind/Humankind Ubeeo ATS PvE 240315.xlsx
diff --git a/Clients/Humankind/Lijst Eisen aan leveranciers HK.md b/Clients/Humankind/Lijst Eisen aan leveranciers HK.md
index d3c5958..985be7c 100644
--- a/Clients/Humankind/Lijst Eisen aan leveranciers HK.md
+++ b/Clients/Humankind/Lijst Eisen aan leveranciers HK.md
@@ -1,5 +1,5 @@
Deze tekst is gebaseerd op:
-- [Programma van Eisen Ubeoo ATS](../../Corpus/Attachments/Ubeeo%20ATS%20PvE%20240315.xlsx)
+- [Programma van Eisen Ubeoo ATS](Humankind%20Ubeeo%20ATS%20PvE%20240315.xlsx)
- [Eisen aan leveranciers en samenwerking uit de Architectuurprincipes Humankind](Eisen%20aan%20leveranciers%20en%20samenwerking%20uit%20de%20Architectuurprincipes%20Humankind.md)
# Basislijst Eisen en Wensen ICT leveranciers
diff --git a/Clients/Humankind/Ubeoo ATS vendor selection Humankind.md b/Clients/Humankind/Ubeoo ATS vendor selection Humankind.md
index f92cef8..1026e55 100644
--- a/Clients/Humankind/Ubeoo ATS vendor selection Humankind.md
+++ b/Clients/Humankind/Ubeoo ATS vendor selection Humankind.md
@@ -1,4 +1,4 @@
-- [Programma van Eisen](../../Corpus/Attachments/Ubeeo%20ATS%20PvE%20240315.xlsx)
+- [Programma van Eisen](Humankind%20Ubeeo%20ATS%20PvE%20240315.xlsx)
- [](Ubeeo%20ATS%20SLA%20Service%20Level%20Agreement.pdf)

\ No newline at end of file
diff --git a/Clients/Humankind/Wachtwoordbeleid voor Humankind.md b/Clients/Humankind/Wachtwoordbeleid voor Humankind.md
index 9c0bd86..a48534a 100644
--- a/Clients/Humankind/Wachtwoordbeleid voor Humankind.md
+++ b/Clients/Humankind/Wachtwoordbeleid voor Humankind.md
@@ -1,7 +1,7 @@
# Wachtwoordbeleid voor Humankind
-Gebaseerd op [Sterke wachtwoorden in 2024](../../Corpus/Sparks/Sterke%20wachtwoorden%20in%202024.md).
+Gebaseerd op [Sterke wachtwoorden in 2024](../../Corpus/Information%20Security/Sterke%20wachtwoorden%20in%202024.md).
**Mail 'Sterke wachtwoorden in 2024' d.d. 13 februari 2025**
diff --git a/Clients/Junis/Veiligheidseisen aan Leveranciers Junis.md b/Clients/Junis/Veiligheidseisen aan Leveranciers Junis.md
index e6ce751..7c0c5a5 100644
--- a/Clients/Junis/Veiligheidseisen aan Leveranciers Junis.md
+++ b/Clients/Junis/Veiligheidseisen aan Leveranciers Junis.md
@@ -1,5 +1,5 @@
Gebaseerd op:
-- [Dropbox Supplier Security Requirements](../../Corpus/Literature%20notes/Dropbox%20Supplier%20Security%20Requirements.md)
+- [Dropbox Supplier Security Requirements](../../Corpus/ISMS/Policy%20examples/Dropbox%20Supplier%20Security%20Requirements.md)
- Beveiligingsbeleid clouddiensten CIP versie 2.2.
- Security Technical IT Checklist ([STITCH](https://www.surf.nl/files/2022-03/stitch-1.1-2022_0.pdf)) van SURF.nl
diff --git a/Corpus/Sparks/Nedap ISMS tool structure.md b/Clients/Nedap ISMS tool structure.md
similarity index 56%
rename from Corpus/Sparks/Nedap ISMS tool structure.md
rename to Clients/Nedap ISMS tool structure.md
index 1a438e3..4a51a9f 100644
--- a/Corpus/Sparks/Nedap ISMS tool structure.md
+++ b/Clients/Nedap ISMS tool structure.md
@@ -12,13 +12,13 @@ Doelstellingen/KPI's
- Methode risicoanalyse en -management (RAM)
- Risicoanalyse en -management (RAM)
- Maatregelen
- - Implementation planning; for inspiration, see [Topical InfoSec Kanban’s](../Literature%20notes/Topical%20InfoSec%20Kanban’s.md)
+ - Implementation planning; for inspiration, see [Collection of Kanban boards on information security topics](../Corpus/Information%20Security/Collection%20of%20Kanban%20boards%20on%20information%20security%20topics.md)
- Monitoren en meten
### STRUCTUUR ISMS
- Rollen
- ISMS planning
- - for inspiration, see [Topical InfoSec Kanban’s](../Literature%20notes/Topical%20InfoSec%20Kanban’s.md)
+ - for inspiration, see [Collection of Kanban boards on information security topics](../Corpus/Information%20Security/Collection%20of%20Kanban%20boards%20on%20information%20security%20topics.md)
Interne audit planning
diff --git a/Corpus/Sparks/Organize your notes with Claude Code.md b/Content Factory/Organize your notes with Claude Code.md
similarity index 100%
rename from Corpus/Sparks/Organize your notes with Claude Code.md
rename to Content Factory/Organize your notes with Claude Code.md
diff --git a/Content Factory/Scratch file/Data classification - how to make labels stick.md b/Content Factory/Scratch file/Data classification - how to make labels stick.md
new file mode 100644
index 0000000..66f47f1
--- /dev/null
+++ b/Content Factory/Scratch file/Data classification - how to make labels stick.md
@@ -0,0 +1,6 @@
+# Data classification: how to make labels stick?
+
+Data travels; how to make labels stick?
+
+Links to the [Privacy in ISO 27001](../../Corpus/Standards/ISO27x/Privacy%20in%20ISO%2027001.md) issue of [Data Provenance](../../Corpus/Standards/AVG/Data%20Provenance.md) .
+
diff --git a/Content Factory/Scratch file/Hoe dwing je verantwoordelijkheid af.md b/Content Factory/Scratch file/Hoe dwing je verantwoordelijkheid af.md
new file mode 100644
index 0000000..6be9ea2
--- /dev/null
+++ b/Content Factory/Scratch file/Hoe dwing je verantwoordelijkheid af.md
@@ -0,0 +1,10 @@
+# Hoe dwing je verantwoordelijkheid af?
+
+Een universiteit biedt onderzoeksafdelingen de mogelijkheid om vrijelijk hun applicaties en databases op te tuigen binnen hun eigen Kubernetes containers. Daarbij zijn ze zelf verantwoordelijk voor de informatiebeveiliging daarvan.
+
+Het is vervolgens aan de IT afdeling om de containers te ‘deployen’. Daarbij ontdekken ze dat veel containers / applicaties / databases onveilig geconfigureerd zijn, oude versies van software met bekende kwetsbaarheden herbergen, etc.
+
+Mijn stelling is dat er voor het succesvolle delegeren van de verantwoordelijk voor informatiebeveiliging in ieder geval nodig is: een prikkel om het ook goed te doen (bijv. niet in beheer nemen, kosten in rekening brengen, kwaliteit van de beveiliging als KPI van de afdeling), en kennis en resources het uit te voeren (of financiele middelen om het te laten doen).
+
+Is er literatuur beschikbaar over deze kwestie? Zijn er andere succesvoorwaarden bekend?
+
diff --git a/Corpus/Sparks/Measures vs Workability.md b/Content Factory/Scratch file/Least privilege, need-to-know - principles vs practice.md
similarity index 99%
rename from Corpus/Sparks/Measures vs Workability.md
rename to Content Factory/Scratch file/Least privilege, need-to-know - principles vs practice.md
index c80ab02..e8ec205 100644
--- a/Corpus/Sparks/Measures vs Workability.md
+++ b/Content Factory/Scratch file/Least privilege, need-to-know - principles vs practice.md
@@ -1,4 +1,4 @@
-# Measures vs Workability: least privilege, need-to-know
+# Least privilege, need-to-know: principles vs practice
*Hypothesis: security frameworks promote least privilege and need-to-know for access control, while common data‑classification schemes and real‑world practices frequently result in minimal or inconsistent protective measures until incidents or regulations force stricter controls.*
diff --git a/Corpus/Sparks/Perverse prikkels in de normindustrie.md b/Content Factory/Scratch file/Perverse prikkels in de normindustrie.md
similarity index 93%
rename from Corpus/Sparks/Perverse prikkels in de normindustrie.md
rename to Content Factory/Scratch file/Perverse prikkels in de normindustrie.md
index 9f09c7f..3241e05 100644
--- a/Corpus/Sparks/Perverse prikkels in de normindustrie.md
+++ b/Content Factory/Scratch file/Perverse prikkels in de normindustrie.md
@@ -1,3 +1,5 @@
+# Perverse prikkels in de normindustrie
+
- Nodeloos complex geformuleerde norm, vereist consultants om hem begrijpbaar te maken
- Consultants zijn er niet bij gebaat om de eenvoud te laten zien (want minder uren)
- Bestaande software vereist diepgaande domeinkennis om het te implementeren en te bedienen. Wordt veelal verkocht via ‘partner kanalen’ (ISO 27001 consultants).
diff --git a/Corpus/Sparks/Privacy protection in Databases.md b/Content Factory/Scratch file/Privacy protection in Databases.md
similarity index 78%
rename from Corpus/Sparks/Privacy protection in Databases.md
rename to Content Factory/Scratch file/Privacy protection in Databases.md
index 9f58510..8c842b0 100644
--- a/Corpus/Sparks/Privacy protection in Databases.md
+++ b/Content Factory/Scratch file/Privacy protection in Databases.md
@@ -1,3 +1,5 @@
+# Privacy protection in Databases
+
[A deep dive into privacy-protecting databases by VentureBeat](https://venturebeat.com/business/a-deep-dive-into-privacy-protecting-databases/amp/)
[Differential privacy](https://en.wikipedia.org/wiki/Differential_privacy?wprov=sfti1)
\ No newline at end of file
diff --git a/Corpus/Sparks/Toegevoegde waarde van ISO27DIY 1.md b/Content Factory/Scratch file/Toegevoegde waarde van ISO27DIY.md
similarity index 100%
rename from Corpus/Sparks/Toegevoegde waarde van ISO27DIY 1.md
rename to Content Factory/Scratch file/Toegevoegde waarde van ISO27DIY.md
diff --git a/Corpus/Sparks/Voordelen van processvolwassenheid.md b/Content Factory/Scratch file/Voordelen van processvolwassenheid.md
similarity index 95%
rename from Corpus/Sparks/Voordelen van processvolwassenheid.md
rename to Content Factory/Scratch file/Voordelen van processvolwassenheid.md
index b8ad6de..95b145e 100644
--- a/Corpus/Sparks/Voordelen van processvolwassenheid.md
+++ b/Content Factory/Scratch file/Voordelen van processvolwassenheid.md
@@ -1,3 +1,5 @@
+# Voordelen van processvolwassenheid
+
Het CMM (Capability Maturity Model) streeft naar hogere procesvolwassenheid omdat volwassener processen een aantal concrete voordelen opleveren:
**Voorspelbaarheid** — je weet wat een proces oplevert, hoe lang het duurt en wat het kost. Verrassingen nemen af naarmate processen herhaalbaarder worden.
diff --git a/Corpus/Sparks/Planning for Disruption.md b/Content Factory/Scratch file/Weerbaarheid - bereid je voor op verstoring.md
similarity index 96%
rename from Corpus/Sparks/Planning for Disruption.md
rename to Content Factory/Scratch file/Weerbaarheid - bereid je voor op verstoring.md
index 003d229..f855951 100644
--- a/Corpus/Sparks/Planning for Disruption.md
+++ b/Content Factory/Scratch file/Weerbaarheid - bereid je voor op verstoring.md
@@ -1,9 +1,7 @@
----
-tags:
- - disruption
- - Continuïteit
- - resilience
----
+# Weerbaarheid: bereid je voor op verstoring
+
+*Engels: Planning for Disruption*
+
De digitale weerbaarheid van een organisatie is een belangrijke factor in de bedrijfszekerheid. Die weerbaarheid bereik je enerzijds door je te beschermen tegen dreigingen, en anderzijds door de capaciteiten te bouwen waarmee je adequaat kunt reageren op incidenten en kunt herstellen van een aanval of storing. Goed beleid voor digitale weerbaarheid is een verplichting vanuit onder andere de NIS 2 en de ISO 27001 / NEN 7510.
Dit document richt zich op het plannen voor, en het herstellen van, incidenten en verstoringen. Het beschrijft de vier bouwstenen om het opbouwen van weerbaarheid planmatig aan te pakken. Dit zijn:
diff --git a/Corpus/Attachments/2023-scf-risk-management-ecosystem.jpg b/Corpus/Attachments/2023-scf-risk-management-ecosystem.jpg
deleted file mode 100644
index e0f354a..0000000
Binary files a/Corpus/Attachments/2023-scf-risk-management-ecosystem.jpg and /dev/null differ
diff --git a/Corpus/Attachments/3-circular-arrows-yellow.svg b/Corpus/Attachments/3-circular-arrows-yellow.svg
deleted file mode 100644
index 12c6dce..0000000
--- a/Corpus/Attachments/3-circular-arrows-yellow.svg
+++ /dev/null
@@ -1,48 +0,0 @@
-
-
-
diff --git a/Corpus/Attachments/CleanShot 2025-07-01 at 13.59.22.png b/Corpus/Attachments/CleanShot 2025-07-01 at 13.59.22.png
deleted file mode 100644
index 2e42b48..0000000
Binary files a/Corpus/Attachments/CleanShot 2025-07-01 at 13.59.22.png and /dev/null differ
diff --git a/Corpus/Attachments/File-Characteristics_of_Capability_Maturity_Model.svg.html b/Corpus/Attachments/File-Characteristics_of_Capability_Maturity_Model.svg.html
deleted file mode 100644
index c3e79ce..0000000
--- a/Corpus/Attachments/File-Characteristics_of_Capability_Maturity_Model.svg.html
+++ /dev/null
@@ -1,395 +0,0 @@
-
-
-
Warnings: * Use of NASA logos, insignia and emblems is restricted per U.S. law 14 CFR 1221.
-
The NASA website hosts a large number of images from the Soviet/Russian space agency, and other non-American space agencies. These are not necessarily in the public domain.
The SOHO (ESA & NASA) joint project implies that all materials created by its probe are copyrighted and require permission for commercial non-educational use. [2]
2009-12-26 11:59 Conan 800×600× (17026 bytes) SVG version of http://en.wikipedia.org/wiki/File:Characteristics_of_the_Maturity_levels.jpg which is snapshot from http://software.gsfc.nasa.gov/docs/What%20is%20CMMI.ppt
-
File history
-
-
Click on a date/time to view the file as it appeared at that time.
-
{{BotMoveToCommons|en.wikipedia|year={{subst:CURRENTYEAR}}|month={{subst:CURRENTMONTHNAME}}|day={{subst:CURRENTDAY}}}} {{Information |Description={{en|''no original description''}} |Source=Transferred from [http://en.wikipedia.org en.wikipedia]; transfer
-
-
-
-
File usage
-
-
The following pages on the English Wikipedia use this file (pages on other projects are not listed):
This file contains additional information, probably added from the digital camera or scanner used to create or digitize it.
-
-If the file has been modified from its original state, some details may not fully reflect the modified file.
-
Width
800
Height
600
-
-
-
-
-
-
-
-
-
-
-
Navigation menu
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
\ No newline at end of file
diff --git a/Corpus/Attachments/IMG_4782.png b/Corpus/Attachments/IMG_4782.png
deleted file mode 100644
index 021bf31..0000000
Binary files a/Corpus/Attachments/IMG_4782.png and /dev/null differ
diff --git a/Corpus/Attachments/Secure Controls Framework (SCF) - 2022.1 1.xlsx b/Corpus/Attachments/Secure Controls Framework (SCF) - 2022.1 1.xlsx
deleted file mode 100644
index bd2e40b..0000000
Binary files a/Corpus/Attachments/Secure Controls Framework (SCF) - 2022.1 1.xlsx and /dev/null differ
diff --git a/Corpus/Attachments/YouTube-icon-small.png b/Corpus/Attachments/YouTube-icon-small.png
deleted file mode 100644
index d1b7f38..0000000
Binary files a/Corpus/Attachments/YouTube-icon-small.png and /dev/null differ
diff --git a/Corpus/Attachments/noun-administrator-7846189.png b/Corpus/Attachments/noun-administrator-7846189.png
deleted file mode 100644
index 5131589..0000000
Binary files a/Corpus/Attachments/noun-administrator-7846189.png and /dev/null differ
diff --git a/Corpus/Attachments/noun-manager-8036683.png b/Corpus/Attachments/noun-manager-8036683.png
deleted file mode 100644
index de32c41..0000000
Binary files a/Corpus/Attachments/noun-manager-8036683.png and /dev/null differ
diff --git a/Corpus/Sparks/ISMS/AI Threat Modeling.md b/Corpus/ISMS/AI Threat Modeling.md
similarity index 72%
rename from Corpus/Sparks/ISMS/AI Threat Modeling.md
rename to Corpus/ISMS/AI Threat Modeling.md
index b5e57c9..71c055d 100644
--- a/Corpus/Sparks/ISMS/AI Threat Modeling.md
+++ b/Corpus/ISMS/AI Threat Modeling.md
@@ -1,6 +1,6 @@
# Using AI for Threat Modeling
-[Create a threat analysis chatbot](../../Various/Create%20a%20threat%20analysis%20chatbot.md)
+[Create a threat analysis chatbot](../Various/Create%20a%20threat%20analysis%20chatbot.md)
[PLOT4AI](https://plot4.ai) (Privacy Library Of Threats 4 Artificial Intelligence): A threat modeling library to help you build responsible AI
diff --git a/Corpus/Sparks/ISMS/About dealing with threats.md b/Corpus/ISMS/About dealing with threats.md
similarity index 100%
rename from Corpus/Sparks/ISMS/About dealing with threats.md
rename to Corpus/ISMS/About dealing with threats.md
diff --git a/Corpus/Sparks/ISMS/About implementation and proof.md b/Corpus/ISMS/About implementation and proof.md
similarity index 100%
rename from Corpus/Sparks/ISMS/About implementation and proof.md
rename to Corpus/ISMS/About implementation and proof.md
diff --git a/Corpus/Sparks/ISMS/About policies controls and risks.md b/Corpus/ISMS/About policies controls and risks.md
similarity index 100%
rename from Corpus/Sparks/ISMS/About policies controls and risks.md
rename to Corpus/ISMS/About policies controls and risks.md
diff --git a/Corpus/Sparks/ISMS/About the Statement of Applicability.md b/Corpus/ISMS/About the Statement of Applicability.md
similarity index 100%
rename from Corpus/Sparks/ISMS/About the Statement of Applicability.md
rename to Corpus/ISMS/About the Statement of Applicability.md
diff --git a/Corpus/Sparks/ISMS/Access Control Models.md b/Corpus/ISMS/Access Control Models.md
similarity index 97%
rename from Corpus/Sparks/ISMS/Access Control Models.md
rename to Corpus/ISMS/Access Control Models.md
index 4f6d157..07aa635 100644
--- a/Corpus/Sparks/ISMS/Access Control Models.md
+++ b/Corpus/ISMS/Access Control Models.md
@@ -1,11 +1,11 @@
See also:
- [Authorization vs Access Control](Authorization%20vs%20Access%20Control.md)
- [Identity and Access Management (IAM)](../Information%20Security/Identity%20and%20Access%20Management%20(IAM).md)
-- [RBAC Access levels](../../Literature%20notes/RBAC%20Access%20levels.md)
+- [RBAC Access levels](RBAC%20Access%20levels.md)
- [CRUD Matrices](../Information%20Security/CRUD%20Matrices.md)
-Source: [](../../Attachments/Certified%20Ethical%20Hacker%20Exam%20Guide%202021.pdf)
+Source: [](../Information%20Security/Certified%20Ethical%20Hacker%20Exam%20Guide%202021.pdf)
- Mandatory Access Control (MAC):
- Every object gets a label
diff --git a/Corpus/Sparks/ISMS/Access Control in ISO 27001.md b/Corpus/ISMS/Access Control in ISO 27001.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Access Control in ISO 27001.md
rename to Corpus/ISMS/Access Control in ISO 27001.md
diff --git a/Corpus/ISMS/Access Control.md b/Corpus/ISMS/Access Control.md
new file mode 100644
index 0000000..1de5f55
--- /dev/null
+++ b/Corpus/ISMS/Access Control.md
@@ -0,0 +1,13 @@
+# Access Control
+
+While [authorization](../Standards/ISO27x/Authorization.md) is primarily concerned with establishing the policies and rules that dictate access (i.e. *what* a person or system is allowed to do), **access control** is the _system_ or _process_ that enforces those defined permissions.
+
+See:
+- [Gedachten over rechtenstructuren](../Information%20Security/Gedachten%20over%20rechtenstructuren.md)
+- [Authorization vs Access Control](Authorization%20vs%20Access%20Control.md)
+- [Access Control Models](Access%20Control%20Models.md)
+- [ISO 27001 A 9 Access control](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%209%20Access%20control.md)
+- [a-5.15-Access-control](../Standards/ISO27x/OST/27002/EN/a-5.15-Access-control.md)
+
+
+
diff --git a/Corpus/Literature notes/NIST Asset Types.md b/Corpus/ISMS/Asset Types in NIST.md
similarity index 98%
rename from Corpus/Literature notes/NIST Asset Types.md
rename to Corpus/ISMS/Asset Types in NIST.md
index febf8a8..94b3e80 100644
--- a/Corpus/Literature notes/NIST Asset Types.md
+++ b/Corpus/ISMS/Asset Types in NIST.md
@@ -1,3 +1,5 @@
+# Asset Types in NIST
+
Asked ChatGPT on 3 april 2024
The National Institute of Standards and Technology (NIST) defines several categories or types of assets under its guidelines for managing and protecting information systems. They include:
diff --git a/Corpus/Sparks/ISMS/Asset classes.png b/Corpus/ISMS/Asset classes.png
similarity index 100%
rename from Corpus/Sparks/ISMS/Asset classes.png
rename to Corpus/ISMS/Asset classes.png
diff --git a/Corpus/Literature notes/Asset lifecycle.md b/Corpus/ISMS/Asset lifecycle.md
similarity index 84%
rename from Corpus/Literature notes/Asset lifecycle.md
rename to Corpus/ISMS/Asset lifecycle.md
index e6badfe..9bc8787 100644
--- a/Corpus/Literature notes/Asset lifecycle.md
+++ b/Corpus/ISMS/Asset lifecycle.md
@@ -1,7 +1,4 @@
----
-aliases:
- - Secure data lifecyle
----
+# Asset lifecycle
## Asset mgt implementation
Source: Defensive Security Handbook: Best Practices for Securing Infrastructure by Lee Brotherston, Amanda Berlin
@@ -16,7 +13,7 @@ Each department or person involved in each step should understand when and how a
Track changes, monitor and report
-
+
diff --git a/Corpus/Sparks/ISMS/Assets Ownership and Risk Overview.md b/Corpus/ISMS/Assets Ownership and Risk Overview.md
similarity index 94%
rename from Corpus/Sparks/ISMS/Assets Ownership and Risk Overview.md
rename to Corpus/ISMS/Assets Ownership and Risk Overview.md
index fb9fedc..5b5d4a3 100644
--- a/Corpus/Sparks/ISMS/Assets Ownership and Risk Overview.md
+++ b/Corpus/ISMS/Assets Ownership and Risk Overview.md
@@ -60,7 +60,7 @@ ISO 27001 explicitly requires asset ownership in two controls:
When asset or process ownership is unclear, it can be determined by mapping the situation to one of four scenarios:
-
+
@@ -91,12 +91,12 @@ First, determine whether the asset/process is actually needed. The three institu
The source files reference the following related notes in the vault:
-- [Vulnerability 1](../Vulnerability%201.md)
-- [Threat](../../Literature%20notes/Threat.md)
-- [Risks](../Risks.md)
-- [Risk ownership](../Risk%20ownership.md)
+- [Vulnerability](../Information%20Security/Risks/Vulnerability.md)
+- [Threats MoC](../Information%20Security/Risks/Threats%20MoC.md)
+- [Risks definitions](../Information%20Security/Risks/Risks%20definitions.md)
+- [Risk ownership](../Information%20Security/Risks/Risk%20ownership.md)
- [Control ownership](Control%20ownership.md)
-- [Asset lifecycle](../../Literature%20notes/Asset%20lifecycle.md)
+- [Asset lifecycle](Asset%20lifecycle.md)
- [How to develop an Asset Inventory](How%20to%20develop%20an%20Asset%20Inventory.md)
diff --git a/Corpus/Sparks/ISMS/Authorization vs Access Control.md b/Corpus/ISMS/Authorization vs Access Control.md
similarity index 82%
rename from Corpus/Sparks/ISMS/Authorization vs Access Control.md
rename to Corpus/ISMS/Authorization vs Access Control.md
index 3de4934..e4cf7ea 100644
--- a/Corpus/Sparks/ISMS/Authorization vs Access Control.md
+++ b/Corpus/ISMS/Authorization vs Access Control.md
@@ -6,7 +6,7 @@ tags:
# Authorization vs. Access Control
-[Authorization](../../Standards/ISO27x/Authorization.md) defines _what_ a user (or system) is allowed to do, [access control ](Access%20Control.md) is the _system_ or _process_ that enforces those defined permissions.
+[Authorization](../Standards/ISO27x/Authorization.md) defines _what_ a user (or system) is allowed to do, [access control ](Access%20Control.md) is the _system_ or _process_ that enforces those defined permissions.
## Authorization
@@ -23,8 +23,8 @@ tags:
- **What it is:** Access control is the **mechanism or system that enforces the authorization policies**. It's the technical implementation that actually grants or denies access to a resource based on the authorized permissions.
- **The "How":** It answers the question, "How is the 'what' actually applied and managed?"
- **Enforcement:** Access control is the act of putting those policies into practice. It involves:
- - Checking a user's identity ([Authentication](../../Standards/ISO27x/Authentication.md)).
- - Consulting the pre-defined [Authorization](../../Standards/ISO27x/Authorization.md)authorization rules.
+ - Checking a user's identity ([Authentication](../Standards/ISO27x/Authentication.md)).
+ - Consulting the pre-defined [Authorization](../Standards/ISO27x/Authorization.md)authorization rules.
- Granting or denying access to specific resources (files, applications, data, network segments, physical locations, etc.) or actions (read, write, delete, execute).
- **Examples:**
- An Access Control List (ACL) on a file system that specifies which users or groups can read, write, or execute a particular file.
diff --git a/Corpus/Sparks/ISMS/Basic ISMS governance model.md b/Corpus/ISMS/Basic ISMS governance model.md
similarity index 94%
rename from Corpus/Sparks/ISMS/Basic ISMS governance model.md
rename to Corpus/ISMS/Basic ISMS governance model.md
index 963e6fd..9601bc3 100644
--- a/Corpus/Sparks/ISMS/Basic ISMS governance model.md
+++ b/Corpus/ISMS/Basic ISMS governance model.md
@@ -2,7 +2,7 @@
A straightforward governance structure for your Information Security Management System based on ISO 27001 and ISO 27002.
-*Based on [Governance model for Policies and Controls](../../Standards/ISO27x/Governance%20model%20for%20Policies%20and%20Controls.md), which contains the references to the Standard.*
+*Based on [Governance model for Policies and Controls](../Standards/ISO27x/Governance%20model%20for%20Policies%20and%20Controls.md), which contains the references to the Standard.*
## Policy Lifecycle: Who Does What
### Key Players
diff --git a/Corpus/Sparks/ISMS/Belang van een BCP.md b/Corpus/ISMS/Belang van een BCP.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Belang van een BCP.md
rename to Corpus/ISMS/Belang van een BCP.md
diff --git a/Corpus/Sparks/ISMS/Business Impact Analysis (BIA).md b/Corpus/ISMS/Business Impact Analysis (BIA).md
similarity index 50%
rename from Corpus/Sparks/ISMS/Business Impact Analysis (BIA).md
rename to Corpus/ISMS/Business Impact Analysis (BIA).md
index d82896f..0e8b081 100644
--- a/Corpus/Sparks/ISMS/Business Impact Analysis (BIA).md
+++ b/Corpus/ISMS/Business Impact Analysis (BIA).md
@@ -8,17 +8,17 @@ A Business Impact Analysis (BIA) examines the potential impacts of disruptions,
The outcomes help to prioritize business activities and resources to enable the resumption of product and service delivery after a (major) disruption[^1].
Guidelines and tooling:
-- [Guidelines for business impact analysis ISO 22317](../../Standards/ISO27x/ISO%2022317%20Guidelines%20for%20business%20impact%20analysis.md)
-- [Assessing reputational risks](../../Various/Assessing%20reputational%20risks.md)
-- [BIA Workshop](../../Standards/ISO27x/Implementation%20Products/BIA%20Workshop.md)
-- [TLP impact matrix](../../Literature%20notes/Traffic%20Light%20Protocol%20TLP.md)
+- [Guidelines for business impact analysis ISO 22317](../Standards/ISO27x/ISO%2022317%20Guidelines%20for%20business%20impact%20analysis.md)
+- [Assessing reputational risks](../Various/Assessing%20reputational%20risks.md)
+- [BIA Workshop](../Standards/ISO27x/Implementation%20Products/BIA%20Workshop.md)
+- [TLP impact matrix](Data%20classification/Traffic%20Light%20Protocol%20TLP.md)
- Afhankelijkheid tussen systemen/voorzieningen?
- Resource Breakdown Structure (RBS)
- Fishbone Diagram (Ishikawa/Cause and Effect): Useful for identifying root causes of dependencies and resource constraints in processes.
ISO 27001 Controls:
-- [5.29:](../../MoCs/ISO_27002_2022_5.29_MoC%20Information%20security%20during%20disruption.md) Information security during disruption
-- [5.30:](../../MoCs/ISO_27002_2022_5.30_MoC%20ICT%20readiness%20for%20business%20continuity.md) ICT readiness for business continuity
-- [5.9:](../../MoCs/ISO_27002_2022_5.9_MoC%20Inventory%20of%20information%20and%20other%20associated%20assets.md) Inventory of information and other associated assets – regarding assets marked Critical on the Availability aspect
+- [5.29:](../MoCs/ISO_27002_2022_5.29_MoC%20Information%20security%20during%20disruption.md) Information security during disruption
+- [5.30:](../Information%20Security/ICT%20readiness%20for%20business%20continuity.md) ICT readiness for business continuity
+- [5.9:](../MoCs/ISO_27002_2022_5.9_MoC%20Inventory%20of%20information%20and%20other%20associated%20assets.md) Inventory of information and other associated assets – regarding assets marked Critical on the Availability aspect
[^1]: See [Disaster Recovery Planning](Disaster%20Recovery%20Planning.md)
\ No newline at end of file
diff --git a/Corpus/Sparks/ISMS/Challenges in auditing a one man company.md b/Corpus/ISMS/Challenges in auditing a one man company.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Challenges in auditing a one man company.md
rename to Corpus/ISMS/Challenges in auditing a one man company.md
diff --git a/Corpus/Sparks/ISMS/Classificatie van risico's.md b/Corpus/ISMS/Classificatie van risico's.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Classificatie van risico's.md
rename to Corpus/ISMS/Classificatie van risico's.md
diff --git a/Corpus/Sparks/ISMS/Classifying Integrity.md b/Corpus/ISMS/Classifying Integrity.md
similarity index 94%
rename from Corpus/Sparks/ISMS/Classifying Integrity.md
rename to Corpus/ISMS/Classifying Integrity.md
index d879754..8bd5a0e 100644
--- a/Corpus/Sparks/ISMS/Classifying Integrity.md
+++ b/Corpus/ISMS/Classifying Integrity.md
@@ -1,6 +1,6 @@
# Classifying Integrity
-See also: [Business Impact Analysis (BIA)](Business%20Impact%20Analysis%20(BIA).md), [A 8.2 Information Classification](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md#ISO%2027001%20A%208.2%20Information%20classification)
+See also: [Business Impact Analysis (BIA)](Business%20Impact%20Analysis%20(BIA).md), [A 8.2 Information Classification](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md#ISO%2027001%20A%208.2%20Information%20classification)
Prompt to Perplexity AI on 2025-06-10: `In the field of information security, we identify and implement risk mitigating measures to safeguard the confidentiality, integrity, and availability of information. To establish levels of confidentiality, we use the instrument of data classification to establish levels of availability we can use business impact analysis. What instruments do we have to classify the necessity of integrity of information`
diff --git a/Corpus/Literature notes/Context analysis.md b/Corpus/ISMS/Context analysis.md
similarity index 100%
rename from Corpus/Literature notes/Context analysis.md
rename to Corpus/ISMS/Context analysis.md
diff --git a/Corpus/Sparks/ISMS/Control ownership.md b/Corpus/ISMS/Control ownership.md
similarity index 73%
rename from Corpus/Sparks/ISMS/Control ownership.md
rename to Corpus/ISMS/Control ownership.md
index 03798f7..b37d2a3 100644
--- a/Corpus/Sparks/ISMS/Control ownership.md
+++ b/Corpus/ISMS/Control ownership.md
@@ -1,6 +1,6 @@
# Control ownership
-See also [Risk ownership](../Risk%20ownership.md), [Asset ownership](Asset%20ownership.md)
+See also [Risk ownership](../Information%20Security/Risks/Risk%20ownership.md), [Asset ownership](Asset%20ownership.md)
Principe:
> Control ownership can best be assigned to the individual or team that has both the resources and the skills to effectively implement the control. (And does not have conflicting interests)
diff --git a/Corpus/Literature notes/Cyber Security Governance Principles.md b/Corpus/ISMS/Cyber Security Governance Principles.md
similarity index 100%
rename from Corpus/Literature notes/Cyber Security Governance Principles.md
rename to Corpus/ISMS/Cyber Security Governance Principles.md
diff --git a/Corpus/Literature notes/Cyber Security Governance Principles.pdf b/Corpus/ISMS/Cyber Security Governance Principles.pdf
similarity index 100%
rename from Corpus/Literature notes/Cyber Security Governance Principles.pdf
rename to Corpus/ISMS/Cyber Security Governance Principles.pdf
diff --git a/Corpus/Sparks/ISMS/Data breach procedure.md b/Corpus/ISMS/Data breach procedure.md
similarity index 58%
rename from Corpus/Sparks/ISMS/Data breach procedure.md
rename to Corpus/ISMS/Data breach procedure.md
index 7045421..9e214bc 100644
--- a/Corpus/Sparks/ISMS/Data breach procedure.md
+++ b/Corpus/ISMS/Data breach procedure.md
@@ -7,4 +7,4 @@ Previous work:
Relevant ISO 27001 clauses/controls:
-- [ISO 27001 A 16.1 Management of information security incidents and improvements](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2016.1%20Management%20of%20information%20security%20incidents%20and%20improvements.md)
+- [ISO 27001 A 16.1 Management of information security incidents and improvements](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2016.1%20Management%20of%20information%20security%20incidents%20and%20improvements.md)
diff --git a/Corpus/Sparks/ISMS/Data classification/Data Classification.md b/Corpus/ISMS/Data classification/Data Classification.md
similarity index 85%
rename from Corpus/Sparks/ISMS/Data classification/Data Classification.md
rename to Corpus/ISMS/Data classification/Data Classification.md
index 3d9ccf0..a206d67 100644
--- a/Corpus/Sparks/ISMS/Data classification/Data Classification.md
+++ b/Corpus/ISMS/Data classification/Data Classification.md
@@ -2,7 +2,7 @@
**Definition:**
"A *data classification* identifies the value of the data to the organization. Classification labels, the method by which they are assigned, and the required protection associated with the different labels, are identified in a policy."
-Source: [CISSP_OSG_Chapter_5](../../../Standards/CISSP/CISSP_OSG_Chapter_5.md#Defining%20data%20Classifications)
+Source: [CISSP_OSG_Chapter_5](../../Standards/CISSP/CISSP_OSG_Chapter_5.md#Defining%20data%20Classifications)
Classification criteria should be risk based, for instance on potential damage to the organization, the privacy of individuals, national security, economic interests, or other critical concerns.
@@ -54,11 +54,11 @@ It does not solve the classification labeling problem if you have a single manda
See also:
-[Datatags System](../../../Literature%20notes/Datatags%20System.md)
-[Def_Sec_Handbook_Chapter_2](../../../Literature%20notes/Def_Sec_Handbook_Chapter_2.md#Information%20classification)
-[ISO 27002:2022 NL A5.12](../../../Standards/ISO27x/OST/27002/NL/a-5.12-Classificeren-van-informatie.md)
-[Designing an information management scheme](../../../Literature%20notes/Designing%20an%20information%20management%20scheme.md)
-[Key Topics for a policy on handling classified information](../../Policy%20examples/Key%20Topics%20for%20a%20policy%20on%20handling%20classified%20information.md)
-[Traffic Light Protocol (TLP)](../../../Literature%20notes/Traffic%20Light%20Protocol%20TLP.md)
+[Datatags privacy oriented data classification system](Datatags%20privacy%20oriented%20data%20classification%20system.md)
+[Def_Sec_Handbook_Chapter_2](../../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_2.md#Information%20classification)
+[ISO 27002:2022 NL A5.12](../../Standards/ISO27x/OST/27002/NL/a-5.12-Classificeren-van-informatie.md)
+[Designing an information management scheme](../Designing%20an%20information%20management%20scheme.md)
+[Key Topics for a policy on handling classified information](../Policy%20examples/Key%20Topics%20for%20a%20policy%20on%20handling%20classified%20information.md)
+[Traffic Light Protocol (TLP)](Traffic%20Light%20Protocol%20TLP.md)
diff --git a/Corpus/Literature notes/Datatags classification.jpg b/Corpus/ISMS/Data classification/Datatags classification table.jpg
similarity index 100%
rename from Corpus/Literature notes/Datatags classification.jpg
rename to Corpus/ISMS/Data classification/Datatags classification table.jpg
diff --git a/Corpus/Literature notes/Datatags System.md b/Corpus/ISMS/Data classification/Datatags privacy oriented data classification system.md
similarity index 89%
rename from Corpus/Literature notes/Datatags System.md
rename to Corpus/ISMS/Data classification/Datatags privacy oriented data classification system.md
index 354d353..ad787c0 100644
--- a/Corpus/Literature notes/Datatags System.md
+++ b/Corpus/ISMS/Data classification/Datatags privacy oriented data classification system.md
@@ -3,12 +3,12 @@
Science. 2015101601. October 16, 2015. http://techscience.org/a/2015101601; PDF version attached: [](techsci-datatags-sweeneycrosasbarsinai.pdf).
Related:
-- [ISO 27001 A 8.2 Information classification](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md)
-- [Privacy 1](../Sparks/Privacy%201.md)
+- [ISO 27001 A 8.2 Information classification](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md)
+- [Privacy in ISO 27001](../../Standards/ISO27x/Privacy%20in%20ISO%2027001.md)
-Sweeney at all have developed a privacy oriented data classification system with six levels:
+Sweeney et all have developed a privacy oriented data classification system with six levels:
-
+
*"Definitions for each of six datatags are introduced for demonstration purposes".*
The classification is based on a five level scheme designed and adopted by Harvard University for storing and transmitting research data.
diff --git a/Corpus/ISMS/Data classification/Examples of TLP document classification for different industries.md b/Corpus/ISMS/Data classification/Examples of TLP document classification for different industries.md
new file mode 100644
index 0000000..3575a5e
--- /dev/null
+++ b/Corpus/ISMS/Data classification/Examples of TLP document classification for different industries.md
@@ -0,0 +1,12 @@
+# Examples of TLP document classification for different industries
+
+- [for information security](FIRST%20TLP%20labeled%20document%20examples%20for%20information%20security.md)
+- [for a commercial services organization](FIRST%20TLP%20labeled%20document%20examples%20commercial.md)
+- [for a childcare organization](FIRST%20TLP%20labeled%20document%20examples%20childcare.md)
+- [for a hospital](FIRST%20TLP%20labeled%20document%20examples%20hospital.md)
+- [for a national government organization](FIRST%20TLP%20labeled%20document%20examples%20national%20government.md)
+
+
+
+
+
diff --git a/Corpus/Literature notes/Examples of measures for different TLP classifications.md b/Corpus/ISMS/Data classification/Examples of measures for different TLP classifications.md
similarity index 100%
rename from Corpus/Literature notes/Examples of measures for different TLP classifications.md
rename to Corpus/ISMS/Data classification/Examples of measures for different TLP classifications.md
diff --git a/Corpus/Sparks/ISMS/Data classification/FIRST TLP labeled document examples childcare.md b/Corpus/ISMS/Data classification/FIRST TLP labeled document examples childcare.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Data classification/FIRST TLP labeled document examples childcare.md
rename to Corpus/ISMS/Data classification/FIRST TLP labeled document examples childcare.md
diff --git a/Corpus/Sparks/ISMS/Data classification/FIRST TLP labeled document examples commercial.md b/Corpus/ISMS/Data classification/FIRST TLP labeled document examples commercial.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Data classification/FIRST TLP labeled document examples commercial.md
rename to Corpus/ISMS/Data classification/FIRST TLP labeled document examples commercial.md
diff --git a/Corpus/Sparks/ISMS/Data classification/FIRST TLP labeled document examples for information security.md b/Corpus/ISMS/Data classification/FIRST TLP labeled document examples for information security.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Data classification/FIRST TLP labeled document examples for information security.md
rename to Corpus/ISMS/Data classification/FIRST TLP labeled document examples for information security.md
diff --git a/Corpus/Sparks/ISMS/Data classification/FIRST TLP labeled document examples hospital.md b/Corpus/ISMS/Data classification/FIRST TLP labeled document examples hospital.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Data classification/FIRST TLP labeled document examples hospital.md
rename to Corpus/ISMS/Data classification/FIRST TLP labeled document examples hospital.md
diff --git a/Corpus/Literature notes/FIRST TLP labeled document examples national government.md b/Corpus/ISMS/Data classification/FIRST TLP labeled document examples national government.md
similarity index 100%
rename from Corpus/Literature notes/FIRST TLP labeled document examples national government.md
rename to Corpus/ISMS/Data classification/FIRST TLP labeled document examples national government.md
diff --git a/Corpus/Literature notes/Traffic Light Protocol TLP.md b/Corpus/ISMS/Data classification/Traffic Light Protocol TLP.md
similarity index 94%
rename from Corpus/Literature notes/Traffic Light Protocol TLP.md
rename to Corpus/ISMS/Data classification/Traffic Light Protocol TLP.md
index c1f0f6a..7c820c5 100644
--- a/Corpus/Literature notes/Traffic Light Protocol TLP.md
+++ b/Corpus/ISMS/Data classification/Traffic Light Protocol TLP.md
@@ -5,14 +5,14 @@ or: the FIRST TLP protocol
TLP provides a simple and intuitive schema for indicating when and how sensitive information can be shared, facilitating more frequent and effective collaboration. It employs four colors to indicate expected sharing boundaries to be applied by the recipient(s). ([source](https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage))
-
+
[Examples of TLP document classification for different industries](Examples%20of%20TLP%20document%20classification%20for%20different%20industries.md)
[Examples of measures for different TLP classifications](Examples%20of%20measures%20for%20different%20TLP%20classifications.md)
[Voorbeelden van maatregelen bij verschillende TLP classificaties](Voorbeelden%20van%20maatregelen%20bij%20verschillende%20TLP%20classificaties.md)
-[Dataclassificatie volgens TLP](../Standards/ISO27x/Implementation%20Products/Dataclassificatie%20volgens%20TLP.md)
+[Dataclassificatie volgens TLP](../../Standards/ISO27x/Implementation%20Products/Dataclassificatie%20volgens%20TLP.md)
diff --git a/Corpus/Literature notes/Voorbeelden van maatregelen bij verschillende TLP classificaties.md b/Corpus/ISMS/Data classification/Voorbeelden van maatregelen bij verschillende TLP classificaties.md
similarity index 90%
rename from Corpus/Literature notes/Voorbeelden van maatregelen bij verschillende TLP classificaties.md
rename to Corpus/ISMS/Data classification/Voorbeelden van maatregelen bij verschillende TLP classificaties.md
index 4ee0148..d647d9d 100644
--- a/Corpus/Literature notes/Voorbeelden van maatregelen bij verschillende TLP classificaties.md
+++ b/Corpus/ISMS/Data classification/Voorbeelden van maatregelen bij verschillende TLP classificaties.md
@@ -67,4 +67,4 @@
* Documenten worden gelabeld met TLP:RED
-[^1]: Controls [5.19](../Standards/ISO27x/OST/27002/NL/a-5.19-Informatiebeveiliging-in-leveranciersrelaties.md), [[ISO_27002_2022_NL_BT 6.6 Vertrouwelijkheids- of geheimhoudingsovereenkomsten|6.6]], [[ISO_27002_2022_NL_BT 7.2 Fysieke toegangsbeveiliging |7.2]]
+[^1]: Controls [5.19](../../Standards/ISO27x/OST/27002/NL/a-5.19-Informatiebeveiliging-in-leveranciersrelaties.md), [[ISO_27002_2022_NL_BT 6.6 Vertrouwelijkheids- of geheimhoudingsovereenkomsten|6.6]], [[ISO_27002_2022_NL_BT 7.2 Fysieke toegangsbeveiliging |7.2]]
diff --git a/Corpus/Literature notes/techsci-datatags-sweeneycrosasbarsinai.pdf b/Corpus/ISMS/Data classification/techsci-datatags-sweeneycrosasbarsinai.pdf
similarity index 100%
rename from Corpus/Literature notes/techsci-datatags-sweeneycrosasbarsinai.pdf
rename to Corpus/ISMS/Data classification/techsci-datatags-sweeneycrosasbarsinai.pdf
diff --git a/Corpus/Literature notes/Designing an information management scheme.md b/Corpus/ISMS/Designing an information management scheme.md
similarity index 98%
rename from Corpus/Literature notes/Designing an information management scheme.md
rename to Corpus/ISMS/Designing an information management scheme.md
index a1ed119..138141b 100644
--- a/Corpus/Literature notes/Designing an information management scheme.md
+++ b/Corpus/ISMS/Designing an information management scheme.md
@@ -1,3 +1,5 @@
+# Designing an information management scheme
+
Related: [ISO_27002_2022_5.12_PE Classification of information](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.12_PE%20Classification%20of%20information.md)
Source: [ISMS Alliance](https://ismsalliance.com/trends/iso-27001-isms-risk-management/designing-an-information-management-scheme/)
diff --git a/Corpus/ISMS/Disaster Recovery Planning.md b/Corpus/ISMS/Disaster Recovery Planning.md
new file mode 100644
index 0000000..8bbadc1
--- /dev/null
+++ b/Corpus/ISMS/Disaster Recovery Planning.md
@@ -0,0 +1,9 @@
+# Disaster Recovery Planning
+
+See also:
+- [a-5.30-ICT-readiness-for-business-continuity](../Standards/ISO27x/OST/27002/EN/a-5.30-ICT-readiness-for-business-continuity.md)
+- [Business Continuity Planning (BCP)](../📚️%20Literature%20notes/BCP_Bedrijfscontinuïteitsplanning.md)
+- [SANS Incident Response step 5 Recovery](../Standards/SANS/SANS%20Incident%20Response%20step%205%20Recovery.md)
+- [Checklist for auditing Business Continuity and Disaster Recovery](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Business%20Continuity%20and%20Disaster%20Recovery.md)
+- [CISSP_OSG_Chapter_18](../Standards/CISSP/CISSP_OSG_Chapter_18.md)
+- [Def_Sec_Handbook_Chapter_6](../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_6.md)
diff --git a/Corpus/Literature notes/Typologie Starreveld.md b/Corpus/ISMS/Functiescheiding Typologie Starreveld.md
similarity index 91%
rename from Corpus/Literature notes/Typologie Starreveld.md
rename to Corpus/ISMS/Functiescheiding Typologie Starreveld.md
index b6633f3..1325e0b 100644
--- a/Corpus/Literature notes/Typologie Starreveld.md
+++ b/Corpus/ISMS/Functiescheiding Typologie Starreveld.md
@@ -1,3 +1,4 @@
+# Functiescheiding: Typologie Starreveld
Voor fysieke assets zou de Typologie Starreveld gebruikt kunnen worden
https://www.typologiestarreveld.nl/controletechnische-functiescheiding/
diff --git a/Corpus/Sparks/ISMS/How to develop an Asset Inventory.md b/Corpus/ISMS/How to develop an Asset Inventory.md
similarity index 71%
rename from Corpus/Sparks/ISMS/How to develop an Asset Inventory.md
rename to Corpus/ISMS/How to develop an Asset Inventory.md
index 2a1de51..2a224f0 100644
--- a/Corpus/Sparks/ISMS/How to develop an Asset Inventory.md
+++ b/Corpus/ISMS/How to develop an Asset Inventory.md
@@ -3,11 +3,11 @@
https://www.isms.online/iso-27001/how-to-develop-an-asset-inventory-for-iso-27001/
Relevant ISO 27001 clauses/controls:
-- [ISO 27001 A 8.1.1 Inventory of assets](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.1%20Inventory%20of%20assets.md)
-- [ISO 27001 C 6.1.2 Information security risk assessment](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20C%206.1.2%20Information%20security%20risk%20assessment.md)
+- [ISO 27001 A 8.1.1 Inventory of assets](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.1%20Inventory%20of%20assets.md)
+- [ISO 27001 C 6.1.2 Information security risk assessment](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20C%206.1.2%20Information%20security%20risk%20assessment.md)
See also:
-- [Assets, Vulnerabilities, Threats, Risks](../../Literature%20notes/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
+- [Assets, Vulnerabilities, Threats, Risks](../Information%20Security/Risks/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
# 3D Asset Inventory
diff --git a/Corpus/Attachments/ISACA Implementing Segregation of Duties.pdf b/Corpus/ISMS/ISACA Implementing Segregation of Duties.pdf
similarity index 100%
rename from Corpus/Attachments/ISACA Implementing Segregation of Duties.pdf
rename to Corpus/ISMS/ISACA Implementing Segregation of Duties.pdf
diff --git a/Corpus/Sparks/ISMS/ISMS audit flags.md b/Corpus/ISMS/ISMS audit flags.md
similarity index 96%
rename from Corpus/Sparks/ISMS/ISMS audit flags.md
rename to Corpus/ISMS/ISMS audit flags.md
index d3a4d6f..24eb670 100644
--- a/Corpus/Sparks/ISMS/ISMS audit flags.md
+++ b/Corpus/ISMS/ISMS audit flags.md
@@ -6,5 +6,5 @@ The guideline does not prescribe how to audit, nor does it address the content o
Intended primarily for internal auditors and certification auditors working with ISO/IEC 27001-based ISMSs, it is also relevant to those assessing information service providers such as cloud and managed security vendors. The guidance draws on four decades of practitioner experience and is offered as a supplement to — not a replacement for — formal audit checklists and professional judgement.
-
+
diff --git a/Corpus/Sparks/ISMS/ISMS diagram.jpg b/Corpus/ISMS/ISMS diagram.jpg
similarity index 100%
rename from Corpus/Sparks/ISMS/ISMS diagram.jpg
rename to Corpus/ISMS/ISMS diagram.jpg
diff --git a/Corpus/Attachments/screenshot.png b/Corpus/ISMS/ISMS mandatory documents.png
similarity index 100%
rename from Corpus/Attachments/screenshot.png
rename to Corpus/ISMS/ISMS mandatory documents.png
diff --git a/Corpus/Attachments/ISMS-in-Context-transparant.png b/Corpus/ISMS/ISMS-in-Context-transparant.png
similarity index 100%
rename from Corpus/Attachments/ISMS-in-Context-transparant.png
rename to Corpus/ISMS/ISMS-in-Context-transparant.png
diff --git a/Corpus/Sparks/ISMS/Ideas about enforcement.md b/Corpus/ISMS/Ideas about enforcement.md
similarity index 95%
rename from Corpus/Sparks/ISMS/Ideas about enforcement.md
rename to Corpus/ISMS/Ideas about enforcement.md
index 8f6cfd5..93771b1 100644
--- a/Corpus/Sparks/ISMS/Ideas about enforcement.md
+++ b/Corpus/ISMS/Ideas about enforcement.md
@@ -11,4 +11,4 @@ There's also a link here to different stakeholders with different interests. Thi
Related:
- [Labeling of information in the digital domain](Labeling%20of%20information%20in%20the%20digital%20domain.md).
-- [Stakeholder Analysis](../Stakeholder%20Analysis.md)
\ No newline at end of file
+- [Stakeholder Analysis](Stakeholder%20Analysis.md)
\ No newline at end of file
diff --git a/Corpus/Sparks/ISMS/Ideas on Risk Ownership.md b/Corpus/ISMS/Ideas on Risk Ownership.md
similarity index 100%
rename from Corpus/Sparks/ISMS/Ideas on Risk Ownership.md
rename to Corpus/ISMS/Ideas on Risk Ownership.md
diff --git a/Corpus/Literature notes/ISACA Implementing Segregation of Duties 1.pdf b/Corpus/ISMS/Implementing Segregation of Duties ISACA PDF.pdf
similarity index 100%
rename from Corpus/Literature notes/ISACA Implementing Segregation of Duties 1.pdf
rename to Corpus/ISMS/Implementing Segregation of Duties ISACA PDF.pdf
diff --git a/Corpus/Literature notes/Implementing Segregation of Duties ISACA.md b/Corpus/ISMS/Implementing Segregation of Duties ISACA.md
similarity index 93%
rename from Corpus/Literature notes/Implementing Segregation of Duties ISACA.md
rename to Corpus/ISMS/Implementing Segregation of Duties ISACA.md
index 5d3f5c3..20e4410 100644
--- a/Corpus/Literature notes/Implementing Segregation of Duties ISACA.md
+++ b/Corpus/ISMS/Implementing Segregation of Duties ISACA.md
@@ -5,7 +5,7 @@ Article in ISACA Journal
Retrieved: July 13, 2022
See also:
-- [Roles and Responsibilities](../Sparks/Roles%20and%20Responsibilities.md)
+- [Roles and Responsibilities](Roles%20and%20Responsibilities.md)
- [a-5.3-Segregation-of-duties](../Standards/ISO27x/OST/27002/EN/a-5.3-Segregation-of-duties.md)
- [ISO_27002_2022_5.3_PE Segregation of duties](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.3_PE%20Segregation%20of%20duties.md)
@@ -13,7 +13,7 @@ The most widely adopted SoD model requires separation between authorization (AUT
Ideally, these duties are performed by different persons (or parties).
-
+
This model is consistent with the COBIT 5 view of SoD issues (DSS06.03).
@@ -39,5 +39,5 @@ For defining role-based privileges, as used in Role-based Access Control (RBAC)
### Downloaded copy of document in Attachments folder
-
+
diff --git a/Corpus/Sparks/ISMS/Informatie_classificatie_matrix.xlsx b/Corpus/ISMS/Informatie_classificatie_matrix.xlsx
similarity index 100%
rename from Corpus/Sparks/ISMS/Informatie_classificatie_matrix.xlsx
rename to Corpus/ISMS/Informatie_classificatie_matrix.xlsx
diff --git a/Corpus/Sparks/ISMS/KPIs in Incident Response.md b/Corpus/ISMS/KPIs in Incident Response.md
similarity index 88%
rename from Corpus/Sparks/ISMS/KPIs in Incident Response.md
rename to Corpus/ISMS/KPIs in Incident Response.md
index e8143db..58ac0cf 100644
--- a/Corpus/Sparks/ISMS/KPIs in Incident Response.md
+++ b/Corpus/ISMS/KPIs in Incident Response.md
@@ -2,7 +2,7 @@
tags:
- metrics
Related:
- - "[ISO_27002_2022_5.24_PE Information security incident management planning and preparation](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.24_PE%20Information%20security%20incident%20management%20planning%20and%20preparation.md)"
+ - "[ISO_27002_2022_5.24_PE Information security incident management planning and preparation](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.24_PE%20Information%20security%20incident%20management%20planning%20and%20preparation.md)"
---
# KPIs in Incident Response
diff --git a/Corpus/Sparks/ISMS/Labeling of information in the digital domain.md b/Corpus/ISMS/Labeling of information in the digital domain.md
similarity index 74%
rename from Corpus/Sparks/ISMS/Labeling of information in the digital domain.md
rename to Corpus/ISMS/Labeling of information in the digital domain.md
index 383b21a..0a3e25e 100644
--- a/Corpus/Sparks/ISMS/Labeling of information in the digital domain.md
+++ b/Corpus/ISMS/Labeling of information in the digital domain.md
@@ -1,4 +1,4 @@
-[ISO 27001 A 8.2.2 Labelling of information](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.2%20Labelling%20of%20information.md) makes procedures for information labelling in accordance with the classification scheme mandatory.
+[ISO 27001 A 8.2.2 Labelling of information](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.2%20Labelling%20of%20information.md) makes procedures for information labelling in accordance with the classification scheme mandatory.
For physical assets it’s straightforward: a ‘restricted area’ sign on the door to the server room, a ‘classified’ mark on a folder, a ‘privacy sensitive’ sticker on a backup tape, etc.
@@ -13,11 +13,11 @@ Labeling of digital information assets ‘close to the source’ – e.g. assign
Looking at it that way, any metadata that helps ensure the acceptable use and proper handling of information assets could be identified as ‘labeling’. A data dictionary that contains classification information could also be considered to use labeling.
Related:
-- [ISO 27001 A 8.2.1 Classification of information](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.1%20Classification%20of%20information.md)
-- [ISO 27001 A 8.1.3 Acceptable use of assets](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.3%20Acceptable%20use%20of%20assets.md)
+- [ISO 27001 A 8.2.1 Classification of information](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.1%20Classification%20of%20information.md)
+- [ISO 27001 A 8.1.3 Acceptable use of assets](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.3%20Acceptable%20use%20of%20assets.md)
- [[Enforcement tooling]]
-[ISO 27001 A 8.2.2 Labelling of information](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.2%20Labelling%20of%20information.md) makes procedures for information labelling in accordance with the classification scheme mandatory.
+[ISO 27001 A 8.2.2 Labelling of information](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.2%20Labelling%20of%20information.md) makes procedures for information labelling in accordance with the classification scheme mandatory.
For physical assets it’s straightforward: a ‘restricted area’ sign on the door to the server room, a ‘classified’ mark on a folder, a ‘privacy sensitive’ sticker on a backup tape, etc.
@@ -32,6 +32,6 @@ Labeling of digital information assets ‘close to the source’ – e.g. assign
Looking at it that way, any metadata that helps ensure the acceptable use and proper handling of information assets could be identified as ‘labeling’. A data dictionary that contains classification information could also be considered to use labeling.
Related:
-- [ISO 27001 A 8.2.1 Classification of information](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.1%20Classification%20of%20information.md)
-- [ISO 27001 A 8.1.3 Acceptable use of assets](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.3%20Acceptable%20use%20of%20assets.md)
+- [ISO 27001 A 8.2.1 Classification of information](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.1%20Classification%20of%20information.md)
+- [ISO 27001 A 8.1.3 Acceptable use of assets](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.3%20Acceptable%20use%20of%20assets.md)
- [[Enforcement tooling]]
\ No newline at end of file
diff --git a/Corpus/Sparks/New Mandatory.md b/Corpus/ISMS/Mandatory documentation in ISO 27001.md
similarity index 100%
rename from Corpus/Sparks/New Mandatory.md
rename to Corpus/ISMS/Mandatory documentation in ISO 27001.md
diff --git a/Corpus/Literature notes/InfoSec Metrics.md b/Corpus/ISMS/Metrics for Information Security.md
similarity index 83%
rename from Corpus/Literature notes/InfoSec Metrics.md
rename to Corpus/ISMS/Metrics for Information Security.md
index a921757..5e01a2a 100644
--- a/Corpus/Literature notes/InfoSec Metrics.md
+++ b/Corpus/ISMS/Metrics for Information Security.md
@@ -1,9 +1,7 @@
----
-tags:
- - metrics
----
-[Security Metrics by Andrew Jaquith 2007](Security%20Metrics%20by%20Andrew%20Jaquith%202007.md)
-[Security Metrics that Count – for Twilio](Security%20Metrics%20that%20Count%20–%20for%20Twilio.md)
+# Metrics for Information Security
+
+[Security Metrics by Andrew Jaquith 2007](../Literature/Jaquith%20-%20Security%20Metrics/Security%20Metrics%20by%20Andrew%20Jaquith%202007.md)
+[Security Metrics that Count – for Twilio](../Literature/Jaquith%20-%20Security%20Metrics/Security%20Metrics%20that%20Count%20–%20for%20Twilio.md)
[Austin Songer's List of Information Security Metrics to Track](https://songer.pro/list-of-information-security-metrics-to-track/)
@@ -24,7 +22,7 @@ W. Krag Brotby and Gary Hinson (PRAGMATIC Security Metrics, 2013) state metrics
- Independent: Measured dispassionately and objectively, based on verifiable evidence; and
- Cost-effective: Generate more value than they cost to gather, analyze, present and use.
-
+
Standards and Frameworks:
- [ISO 27004](../Standards/ISO27x/ISO%2027004.md)
diff --git a/Corpus/Sparks/NHC ISMS tool_template nieuw.xlsx b/Corpus/ISMS/NHC ISMS tool_template nieuw.xlsx
similarity index 100%
rename from Corpus/Sparks/NHC ISMS tool_template nieuw.xlsx
rename to Corpus/ISMS/NHC ISMS tool_template nieuw.xlsx
diff --git a/Corpus/Attachments/ISO 27001 Implementatie dashboard Annex A.xlsx b/Corpus/ISMS/NHC ISO 27001 Implementatie dashboard Annex A.xlsx
similarity index 100%
rename from Corpus/Attachments/ISO 27001 Implementatie dashboard Annex A.xlsx
rename to Corpus/ISMS/NHC ISO 27001 Implementatie dashboard Annex A.xlsx
diff --git a/Corpus/Sparks/Overzicht beveiliging nieuw.xlsx b/Corpus/ISMS/NHC Overzicht beveiliging nieuw.xlsx
similarity index 100%
rename from Corpus/Sparks/Overzicht beveiliging nieuw.xlsx
rename to Corpus/ISMS/NHC Overzicht beveiliging nieuw.xlsx
diff --git a/Corpus/Sparks/Policy examples/Cloud Service Approval Process.md b/Corpus/ISMS/Policy examples/Cloud Service Approval Process.md
similarity index 100%
rename from Corpus/Sparks/Policy examples/Cloud Service Approval Process.md
rename to Corpus/ISMS/Policy examples/Cloud Service Approval Process.md
diff --git a/Corpus/Sparks/Policy examples/Cloud Service Employee Guidelines.md b/Corpus/ISMS/Policy examples/Cloud Service Employee Guidelines.md
similarity index 100%
rename from Corpus/Sparks/Policy examples/Cloud Service Employee Guidelines.md
rename to Corpus/ISMS/Policy examples/Cloud Service Employee Guidelines.md
diff --git a/Corpus/Sparks/Policy examples/Cloud Service Risk Assessment Guide.md b/Corpus/ISMS/Policy examples/Cloud Service Risk Assessment Guide.md
similarity index 100%
rename from Corpus/Sparks/Policy examples/Cloud Service Risk Assessment Guide.md
rename to Corpus/ISMS/Policy examples/Cloud Service Risk Assessment Guide.md
diff --git a/Corpus/Sparks/Policy examples/Cloud Service Risk Mitigation Roadmap.md b/Corpus/ISMS/Policy examples/Cloud Service Risk Mitigation Roadmap.md
similarity index 100%
rename from Corpus/Sparks/Policy examples/Cloud Service Risk Mitigation Roadmap.md
rename to Corpus/ISMS/Policy examples/Cloud Service Risk Mitigation Roadmap.md
diff --git a/Corpus/Literature notes/Policies.md b/Corpus/ISMS/Policy examples/Drafting Policies.md
similarity index 54%
rename from Corpus/Literature notes/Policies.md
rename to Corpus/ISMS/Policy examples/Drafting Policies.md
index 9cf39de..8ec997a 100644
--- a/Corpus/Literature notes/Policies.md
+++ b/Corpus/ISMS/Policy examples/Drafting Policies.md
@@ -1,4 +1,6 @@
-[ISO_27002_2022_5.1_PE Policies for information security](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.1_PE%20Policies%20for%20information%20security.md)
-[Def_Sec_Handbook_Chapter_3](Def_Sec_Handbook_Chapter_3.md)
+# Drafting Policies
+
+[ISO_27002_2022_5.1_PE Policies for information security](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.1_PE%20Policies%20for%20information%20security.md)
+[Def_Sec_Handbook_Chapter_3](../../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_3.md)
[DoD Cybersecurity Policy Chart webpage](https://csiac.org/resources/the-dod-cybersecurity-policy-chart/)
[DoD Cybersecurity Policy Chart download](https://csiac.org/wp-content/uploads/2022/11/2022-11-21-csiac-dod-cybersecurity-policy-chart.pdf)
diff --git a/Corpus/Literature notes/Draft Vendor and Product checklist.md b/Corpus/ISMS/Policy examples/Drafting a Vendor and Product checklist.md
similarity index 77%
rename from Corpus/Literature notes/Draft Vendor and Product checklist.md
rename to Corpus/ISMS/Policy examples/Drafting a Vendor and Product checklist.md
index 2094a8d..ab1e827 100644
--- a/Corpus/Literature notes/Draft Vendor and Product checklist.md
+++ b/Corpus/ISMS/Policy examples/Drafting a Vendor and Product checklist.md
@@ -1,9 +1,11 @@
+# Drafting a Vendor and Product checklist
+
Related: [Vendor security MoC](..//Vendor%20security%20MoC.md)
ESCROW
BOM
-From [ISO_27002_2022_5.19_PE Information security in supplier relationships](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.19_PE%20Information%20security%20in%20supplier%20relationships.md) (selection)
+From [ISO_27002_2022_5.19_PE Information security in supplier relationships](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.19_PE%20Information%20security%20in%20supplier%20relationships.md) (selection)
- criteria and procedures for vendor selection, taking the sensitivity of products, services and the information they'll be working with into account.
- checking that the vendor has implemented adequate controls for information security, personnel security and physical security
- processes and procedures the vendor needs to implement for implementing and terminating the product/service in your organization
@@ -12,7 +14,7 @@ From [ISO_27002_2022_5.19_PE Information security in supplier relationships](../
- the ownership of what has been developed during the relationship
- continuation of non-disclosure/confidentiallity agreements
-From [ISO_27002_2022_5.21_PE Managing information security in the ICT supply chain](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.21_PE%20Managing%20information%20security%20in%20the%20ICT%20supply%20chain.md) (selection)
+From [ISO_27002_2022_5.21_PE Managing information security in the ICT supply chain](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.21_PE%20Managing%20information%20security%20in%20the%20ICT%20supply%20chain.md) (selection)
- require that suppliers demand the same level of security for sub-contractors and product or component suppliers, as you demand of them
- request a 'bill of materials' for third party software components they use
diff --git a/Corpus/Literature notes/Dropbox Supplier Security Requirements.md b/Corpus/ISMS/Policy examples/Dropbox Supplier Security Requirements.md
similarity index 100%
rename from Corpus/Literature notes/Dropbox Supplier Security Requirements.md
rename to Corpus/ISMS/Policy examples/Dropbox Supplier Security Requirements.md
diff --git a/Corpus/Literature notes/Example introduction for an Internal Privacy Policy.md b/Corpus/ISMS/Policy examples/Example introduction for an Internal Privacy Policy.md
similarity index 100%
rename from Corpus/Literature notes/Example introduction for an Internal Privacy Policy.md
rename to Corpus/ISMS/Policy examples/Example introduction for an Internal Privacy Policy.md
diff --git a/Corpus/Sparks/Policy examples/Key Topics for a policy on handling classified information.md b/Corpus/ISMS/Policy examples/Key Topics for a policy on handling classified information.md
similarity index 100%
rename from Corpus/Sparks/Policy examples/Key Topics for a policy on handling classified information.md
rename to Corpus/ISMS/Policy examples/Key Topics for a policy on handling classified information.md
diff --git a/Corpus/Sparks/Shadow IT Policy for Responsible Technology Adoption.md b/Corpus/ISMS/Policy examples/Shadow IT Policy for Responsible Technology Adoption.md
similarity index 100%
rename from Corpus/Sparks/Shadow IT Policy for Responsible Technology Adoption.md
rename to Corpus/ISMS/Policy examples/Shadow IT Policy for Responsible Technology Adoption.md
diff --git a/Corpus/Sparks/Voorbeeld van een release script.md b/Corpus/ISMS/Policy examples/Voorbeeld van een release script.md
similarity index 91%
rename from Corpus/Sparks/Voorbeeld van een release script.md
rename to Corpus/ISMS/Policy examples/Voorbeeld van een release script.md
index 75819b9..d133e4f 100644
--- a/Corpus/Sparks/Voorbeeld van een release script.md
+++ b/Corpus/ISMS/Policy examples/Voorbeeld van een release script.md
@@ -1,4 +1,6 @@
-*Voorbeeld van een artefact voor [A8.25 Secure development life cycle](../MoCs/ISO_27002_2022_8.25_MoC%20Secure%20development%20life%20cycle.md)*
+*Voorbeeld van een artefact voor [A8.25 Secure development life cycle](../../MoCs/ISO_27002_2022_8.25_MoC%20Secure%20development%20life%20cycle.md)*
+
+Bron: Normity
Omdat we werken met Kanban bepalen we zelf wanneer we een release gaan laten plaatsvinden. Dit doen we eventueel in overleg met de stakeholders en wordt per release bepaald. Gemiddeld genomen doen we dit eenmaal per 4 weken met regelmatige tussentijdse kleinere releases. De PO bepaalt uiteindelijk wanneer de release plaatsvindt. Hotfixes volgen deze procedure niet, maar hebben een eigen release proces. Omdat deze over het algemeen zeer klein zijn, wordt dit van geval tot geval bepaald.
diff --git a/Corpus/Sparks/Vulnerability Disclosure Policy.md b/Corpus/ISMS/Policy examples/Vulnerability Disclosure Policy.md
similarity index 51%
rename from Corpus/Sparks/Vulnerability Disclosure Policy.md
rename to Corpus/ISMS/Policy examples/Vulnerability Disclosure Policy.md
index e3d01b1..875cfde 100644
--- a/Corpus/Sparks/Vulnerability Disclosure Policy.md
+++ b/Corpus/ISMS/Policy examples/Vulnerability Disclosure Policy.md
@@ -1,5 +1,5 @@
Having a permissive vulnerability disclosure policy (VDP) encourages security research, and is a key characteristic of a good, mature security program. It encourages transparency.
-For you as a vendor, it enhances [Vendor security MoC](Vendor%20security%20MoC.md) towards your customers.
-As a customer, you may check for a VDP when creatingyour [Examples of vendor selection questionnaires](Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md).
+For you as a vendor, it enhances [Vendor security MoC](../Vendor%20security%20MoC.md) towards your customers.
+As a customer, you may check for a VDP when creatingyour [Examples of vendor selection questionnaires](../../Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md).
diff --git a/Corpus/Sparks/weweb_security_checklist.md b/Corpus/ISMS/Policy examples/WeWeb Security Pre-Launch Checklist.md
similarity index 98%
rename from Corpus/Sparks/weweb_security_checklist.md
rename to Corpus/ISMS/Policy examples/WeWeb Security Pre-Launch Checklist.md
index 1582763..291440d 100644
--- a/Corpus/Sparks/weweb_security_checklist.md
+++ b/Corpus/ISMS/Policy examples/WeWeb Security Pre-Launch Checklist.md
@@ -1,11 +1,3 @@
----
-tags:
- - iso27DIY
- - appsec
- - LLMgenerated
- - WeWeb
----
-
# WeWeb Security Pre-Launch Checklist
I've created a comprehensive security checklist that expands on each of your original items. The key principle throughout is that **security must be enforced server-side** - WeWeb (being a frontend no-code platform) can only provide the user interface, while your backend APIs and database must handle all the actual security enforcement.
diff --git a/Corpus/ISMS/Qualifying vs quantifying risks.md b/Corpus/ISMS/Qualifying vs quantifying risks.md
new file mode 100644
index 0000000..0c12d6c
--- /dev/null
+++ b/Corpus/ISMS/Qualifying vs quantifying risks.md
@@ -0,0 +1,13 @@
+# Qualifying vs quantifying risks
+
+**Qualifying risks** (qualitative risk assessment) involves describing and categorizing risks using descriptive scales or labels—such as rating likelihood as "low, medium, high" and impact as "minor, moderate, severe"—focusing on understanding the nature and relative severity of risks without precise numerical values.
+
+**Quantifying risks** (quantitative risk assessment) involves measuring risks using specific numerical values—such as calculating the probability as a percentage (e.g., 15% chance per year) and impact in monetary terms (e.g., €50,000 loss)—providing precise, measurable data that can be used for detailed cost-benefit analysis and statistical modeling.
+
+Clause 6.1.2 writes we should "assess the potential consequences" and "realistic likelihood" of risks occurring, but the standard doesn't say anything about *how* these should be established (just that that the chosen method must produce "consistent, valid and comparable results").
+
+The core _requirements_ in ISO/IEC 27001 remain method-agnostic as long as the steps above are met and results are consistent and comparable.
+
+The organization must set its own criteria for determining risk levels and risk acceptance criteria. The organization defines these elements based on its specific needs, size, structure, objectives, and risks.
+
+The standard does not say anything about if qualitative or quantitative risk assessment should be applied.
diff --git a/Corpus/Sparks/RASCI Matrix.md b/Corpus/ISMS/RASCI Matrix.md
similarity index 99%
rename from Corpus/Sparks/RASCI Matrix.md
rename to Corpus/ISMS/RASCI Matrix.md
index 5db8c49..bbd3f7b 100644
--- a/Corpus/Sparks/RASCI Matrix.md
+++ b/Corpus/ISMS/RASCI Matrix.md
@@ -1,3 +1,5 @@
+# RASCI matrix
+
See also:
- [a-5.2-Information-security-roles-and-responsibilities](../Standards/ISO27x/OST/27002/EN/a-5.2-Information-security-roles-and-responsibilities.md)
- [a-5.3-Segregation-of-duties](../Standards/ISO27x/OST/27002/EN/a-5.3-Segregation-of-duties.md)
diff --git a/Corpus/Literature notes/RBAC Access levels.md b/Corpus/ISMS/RBAC Access levels.md
similarity index 99%
rename from Corpus/Literature notes/RBAC Access levels.md
rename to Corpus/ISMS/RBAC Access levels.md
index 2f660a9..ea9d9da 100644
--- a/Corpus/Literature notes/RBAC Access levels.md
+++ b/Corpus/ISMS/RBAC Access levels.md
@@ -1,3 +1,5 @@
+# RBAC Access levels
+
In a Role-Based Access Control (RBAC) matrix, access levels are defined to specify what actions users can perform based on their assigned roles. The specific access levels may vary depending on the organization's needs and the complexity of its systems, but generally, the following access levels are commonly identified:
**No Access:**
diff --git a/Corpus/Sparks/Pasted image 20260514155842.png b/Corpus/ISMS/RUMC ownership diagram.png
similarity index 100%
rename from Corpus/Sparks/Pasted image 20260514155842.png
rename to Corpus/ISMS/RUMC ownership diagram.png
diff --git a/Corpus/Sparks/Reputation Risk Analysis.jpeg b/Corpus/ISMS/Reputation Risk Analysis.jpeg
similarity index 100%
rename from Corpus/Sparks/Reputation Risk Analysis.jpeg
rename to Corpus/ISMS/Reputation Risk Analysis.jpeg
diff --git a/Corpus/Literature notes/Responsibility assignment matrices.md b/Corpus/ISMS/Responsibility assignment matrices.md
similarity index 96%
rename from Corpus/Literature notes/Responsibility assignment matrices.md
rename to Corpus/ISMS/Responsibility assignment matrices.md
index 4eb7057..45f6d61 100644
--- a/Corpus/Literature notes/Responsibility assignment matrices.md
+++ b/Corpus/ISMS/Responsibility assignment matrices.md
@@ -1,4 +1,4 @@
-
+# Responsibility assignment matrices
## RACI model
- Responsible – works to perform the activity
- Accountable – final approving authority, only one per task, must also ensure ensures the prerequisites of the task are met
diff --git a/Corpus/ISMS/Risk analysis methods.md b/Corpus/ISMS/Risk analysis methods.md
new file mode 100644
index 0000000..89f0274
--- /dev/null
+++ b/Corpus/ISMS/Risk analysis methods.md
@@ -0,0 +1,18 @@
+# Risk analysis methods
+
+
+See also under [Threat](../📚️%20Literature%20notes/Threat.md)
+
+[Open Group Risk Analysis Standard (O-RA)](https://pubs.opengroup.org/security/o-ra/)
+[Open Group FAIR \ ISO 27005 Cookbook for Risk Assessment](../Standards/ISO27x/FAIR%20ISO%2027005%20Cookbook.pdf)
+
+[SURF Toolkit risicobeoordeling](../Standards/SURF%20Toolkit%20risicobeoordeling.md)
+
+[](../Information%20Security/Risks/Risk_Assessment_Process.gif)
+
+Related:
+- [Assets, Vulnerabilities, Threats, Risks](../Information%20Security/Risks/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
+- [Risk identification](../Information%20Security/Risks/Risk%20identification.md)
+- [Def_Sec_Handbook_Chapter_1](../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_1.md)
+- [Evaluating and Quantifying Cyber Risks using FAIR](https://www.protiviti.com/US-en/technology-consulting/cybersecurity/fair)
+- [Factor Analysis of Information Risk (FAIR)](../Information%20Security/Risks/Factor%20Analysis%20of%20Information%20Risk%20(FAIR).md)
\ No newline at end of file
diff --git a/Corpus/ISMS/Roles and Responsibilities.md b/Corpus/ISMS/Roles and Responsibilities.md
new file mode 100644
index 0000000..6b5e782
--- /dev/null
+++ b/Corpus/ISMS/Roles and Responsibilities.md
@@ -0,0 +1,11 @@
+See also:
+- [Roles in Information security management](../Information%20Security/Roles%20in%20Information%20security%20management.md)
+- [Roles in Identity and Access Management (IAM)](../Information%20Security/Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)
+- [Segregation of Duties](Segregation%20of%20Duties.md)
+- [RASCI Matrix](RASCI%20Matrix.md)
+- [a-5.2-Information-security-roles-and-responsibilities](../Standards/ISO27x/OST/27002/EN/a-5.2-Information-security-roles-and-responsibilities.md)
+- [a-5.3-Segregation-of-duties](../Standards/ISO27x/OST/27002/EN/a-5.3-Segregation-of-duties.md)
+
+
+# Ownership
+See: [Asset ownership](Asset%20ownership.md), [Control ownership](Control%20ownership.md), [Risk ownership](../Information%20Security/Risks/Risk%20ownership.md)
diff --git a/Corpus/Attachments/SOD matrix.jpg b/Corpus/ISMS/SOD functions diagram.jpg
similarity index 100%
rename from Corpus/Attachments/SOD matrix.jpg
rename to Corpus/ISMS/SOD functions diagram.jpg
diff --git a/Corpus/Literature notes/SOD risk scenario matrix.jpg b/Corpus/ISMS/SOD risk scenario matrix.jpg
similarity index 100%
rename from Corpus/Literature notes/SOD risk scenario matrix.jpg
rename to Corpus/ISMS/SOD risk scenario matrix.jpg
diff --git a/Corpus/Sparks/SWOT Analyses confrontation matrix preview.png b/Corpus/ISMS/SWOT Analyses confrontation matrix preview.png
similarity index 100%
rename from Corpus/Sparks/SWOT Analyses confrontation matrix preview.png
rename to Corpus/ISMS/SWOT Analyses confrontation matrix preview.png
diff --git a/Corpus/Sparks/SWOT Analyses template.md b/Corpus/ISMS/SWOT Analyses template.md
similarity index 100%
rename from Corpus/Sparks/SWOT Analyses template.md
rename to Corpus/ISMS/SWOT Analyses template.md
diff --git a/Corpus/Sparks/SWOT confrontatiematrix.xlsx b/Corpus/ISMS/SWOT confrontatiematrix.xlsx
similarity index 100%
rename from Corpus/Sparks/SWOT confrontatiematrix.xlsx
rename to Corpus/ISMS/SWOT confrontatiematrix.xlsx
diff --git a/Corpus/Sparks/Samenhang tussen producten.md b/Corpus/ISMS/Samenhang tussen ISMS producten.md
similarity index 97%
rename from Corpus/Sparks/Samenhang tussen producten.md
rename to Corpus/ISMS/Samenhang tussen ISMS producten.md
index 09dc7f3..49cdb84 100644
--- a/Corpus/Sparks/Samenhang tussen producten.md
+++ b/Corpus/ISMS/Samenhang tussen ISMS producten.md
@@ -1,8 +1,6 @@
----
-tags:
-- project/iso27DIY
----
-- [ ] Verdere samenhang destilleren uit HK beleidsdocumenten
+# Samenhang tussen ISMS producten
+
+- [ ] Verdere samenhang destilleren uit Humankind beleidsdocumenten
Risico is de schade die kan ontstaan doordat de BVI van informatie gecompromitteerd wordt.
Dit kan door een dreiging die gebruik maakt van een kwetsbaarheid.
@@ -94,7 +92,7 @@ graph TD
Strategie --> Informatiebeveiligingsbeleid
```
-
+
I’d put ‘policies and documentation’ on the right, business processes on the left, context, strategy and planning at the top, and controls at the bottom. RM/PDCA cycles at the center.
diff --git a/Corpus/Sparks/SecAware ISMS audit flags.docx b/Corpus/ISMS/SecAware ISMS audit flags.docx
similarity index 100%
rename from Corpus/Sparks/SecAware ISMS audit flags.docx
rename to Corpus/ISMS/SecAware ISMS audit flags.docx
diff --git a/Corpus/Literature notes/Segregation of Duties in Auditing.md b/Corpus/ISMS/Segregation of Duties in Auditing.md
similarity index 100%
rename from Corpus/Literature notes/Segregation of Duties in Auditing.md
rename to Corpus/ISMS/Segregation of Duties in Auditing.md
diff --git a/Corpus/Literature notes/SOD functions.jpg b/Corpus/ISMS/Segregation of Duties matrix.jpg
similarity index 100%
rename from Corpus/Literature notes/SOD functions.jpg
rename to Corpus/ISMS/Segregation of Duties matrix.jpg
diff --git a/Corpus/Literature notes/Segregation of Duties.md b/Corpus/ISMS/Segregation of Duties.md
similarity index 92%
rename from Corpus/Literature notes/Segregation of Duties.md
rename to Corpus/ISMS/Segregation of Duties.md
index 350f29a..a7c6e85 100644
--- a/Corpus/Literature notes/Segregation of Duties.md
+++ b/Corpus/ISMS/Segregation of Duties.md
@@ -4,8 +4,8 @@
- [Segregation of Duties in Auditing](Segregation%20of%20Duties%20in%20Auditing.md)
- [a-5.3-Segregation-of-duties](../Standards/ISO27x/OST/27002/EN/a-5.3-Segregation-of-duties.md)
- [ISO_27002_2022_5.3_PE Segregation of duties](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.3_PE%20Segregation%20of%20duties.md)
-- [Typologie Starreveld](Typologie%20Starreveld.md)
-- [Trias Politica](../Sparks/Trias%20Politica.md)
+- [Functiescheiding Typologie Starreveld](Functiescheiding%20Typologie%20Starreveld.md)
+- [Trias Politica](../Various/Trias%20Politica.md)
Segregation of Duties ensures no single person has enough authority or access to compromise the system or data on their own.
diff --git a/Corpus/Literature notes/Setting up a Successful Security Program.md b/Corpus/ISMS/Setting up a Successful Security Program.md
similarity index 99%
rename from Corpus/Literature notes/Setting up a Successful Security Program.md
rename to Corpus/ISMS/Setting up a Successful Security Program.md
index cca3405..72c44eb 100644
--- a/Corpus/Literature notes/Setting up a Successful Security Program.md
+++ b/Corpus/ISMS/Setting up a Successful Security Program.md
@@ -1,3 +1,5 @@
+# Secrets of Successful Security Programs
+
The original source consists of 2 blogposts, titled 'Secrets of Successful Security Programs' [Part 1](https://www.philvenables.com/post/secrets-of-successful-security-programs-part-1) and [Part 2](https://www.philvenables.com/post/secrets-of-successful-security-programs-part-2).
Publication date Januray 15 and January 29, 2022
@@ -11,7 +13,7 @@ Relevant ISO 27001 clauses/controls:
-# Secrets of Successful Security Programs
+
A successful security program has two distinct elements:
diff --git a/Corpus/Sparks/ISMS/Sources for the Context sessions.md b/Corpus/ISMS/Sources for the Context sessions.md
similarity index 58%
rename from Corpus/Sparks/ISMS/Sources for the Context sessions.md
rename to Corpus/ISMS/Sources for the Context sessions.md
index 1df6171..786c9b0 100644
--- a/Corpus/Sparks/ISMS/Sources for the Context sessions.md
+++ b/Corpus/ISMS/Sources for the Context sessions.md
@@ -2,17 +2,17 @@
## PECB Lead Auditor Training
-[PECB 27001 LA S05 E01a - Context of the organization](../../Standards/ISO27x/PECB-Lead-Auditor-Training/PECB%2027001%20LA%20S05%20E01a%20-%20Context%20of%20the%20organization.md)
+[PECB 27001 LA S05 E01a - Context of the organization](../Standards/ISO27x/PECB-Lead-Auditor-Training/PECB%2027001%20LA%20S05%20E01a%20-%20Context%20of%20the%20organization.md)
## Sparks
[The ISMS in its context](The%20ISMS%20in%20its%20context.md)
-[Context analysis](../../Literature%20notes/Context%20analysis.md)
+[Context analysis](Context%20analysis.md)
## Mark I content
-[ISO27DIY Video A.4 Context and Scope - Internal issues](../../Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO27DIY%20Video%20A.4%20Context%20and%20Scope%20-%20Internal%20issues.md)
+[ISO27DIY Video A.4 Context and Scope - Internal issues](../Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO27DIY%20Video%20A.4%20Context%20and%20Scope%20-%20Internal%20issues.md)
-[ISO27DIY Video A.2 Context and Scope - Stakeholders](../../Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO27DIY%20Video%20A.2%20Context%20and%20Scope%20-%20Stakeholders.md)
-[ISO27DIY Video A.3 Context and Scope - Regulations and Contracts](../../Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO27DIY%20Video%20A.3%20Context%20and%20Scope%20-%20Regulations%20and%20Contracts.md)
+[ISO27DIY Video A.2 Context and Scope - Stakeholders](../Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO27DIY%20Video%20A.2%20Context%20and%20Scope%20-%20Stakeholders.md)
+[ISO27DIY Video A.3 Context and Scope - Regulations and Contracts](../Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO27DIY%20Video%20A.3%20Context%20and%20Scope%20-%20Regulations%20and%20Contracts.md)
## Standard
[ISO_27001_2022_4.1_MoC Understanding the organization and its context](../../Corpus/Standards/MoCs/ISO_27001_2022_4.1_MoC%20Understanding%20the%20organization%20and%20its%20context.md)
@@ -27,12 +27,12 @@ Functiehuis (4.1)
Organogram (4.1)
Bedrijfsprocessen (4.1)
SWOT (4.1)
-- [SWOT Analyses template](../SWOT%20Analyses%20template.md)
+- [SWOT Analyses template](SWOT%20Analyses%20template.md)
DESTEP (4.2)
Stakeholder analyse (4.2)
Wet- en regelgeving (4.2, A5.31-A5.34)
## Further research
- [ ] Assets?
-- [ ] Impactbepaling uit [Dataclassificatie Humankind](../../../Clients/Humankind/Dataclassificatie%20Humankind.md)
+- [ ] Impactbepaling uit [Dataclassificatie Humankind](../../Clients/Humankind/Dataclassificatie%20Humankind.md)
diff --git a/Corpus/Sparks/Stakeholder Analysis.md b/Corpus/ISMS/Stakeholder Analysis.md
similarity index 100%
rename from Corpus/Sparks/Stakeholder Analysis.md
rename to Corpus/ISMS/Stakeholder Analysis.md
diff --git a/Corpus/Literature notes/Three-tier-information-handling-scheme.png b/Corpus/ISMS/Three-tier-information-handling-scheme.png
similarity index 100%
rename from Corpus/Literature notes/Three-tier-information-handling-scheme.png
rename to Corpus/ISMS/Three-tier-information-handling-scheme.png
diff --git a/Corpus/Literature notes/Transfer in Risk Treatment.md b/Corpus/ISMS/Transfer in Risk Treatment.md
similarity index 100%
rename from Corpus/Literature notes/Transfer in Risk Treatment.md
rename to Corpus/ISMS/Transfer in Risk Treatment.md
diff --git a/Corpus/Sparks/Triggers for Reviews of Policies.md b/Corpus/ISMS/Triggers for Reviews of Policies.md
similarity index 100%
rename from Corpus/Sparks/Triggers for Reviews of Policies.md
rename to Corpus/ISMS/Triggers for Reviews of Policies.md
diff --git a/Corpus/Literature notes/Types_of_Priviledge_Accounts.jpeg b/Corpus/ISMS/Types_of_Priviledge_Accounts.jpeg
similarity index 100%
rename from Corpus/Literature notes/Types_of_Priviledge_Accounts.jpeg
rename to Corpus/ISMS/Types_of_Priviledge_Accounts.jpeg
diff --git a/Corpus/Sparks/Using a Kanban board for ISMS implementation.md b/Corpus/ISMS/Using a Kanban board for ISMS implementation.md
similarity index 100%
rename from Corpus/Sparks/Using a Kanban board for ISMS implementation.md
rename to Corpus/ISMS/Using a Kanban board for ISMS implementation.md
diff --git a/Corpus/Sparks/Vendor security MoC.md b/Corpus/ISMS/Vendor security MoC.md
similarity index 74%
rename from Corpus/Sparks/Vendor security MoC.md
rename to Corpus/ISMS/Vendor security MoC.md
index 367cd5f..82c1dad 100644
--- a/Corpus/Sparks/Vendor security MoC.md
+++ b/Corpus/ISMS/Vendor security MoC.md
@@ -18,17 +18,17 @@
- [Contracting and Procurement](../Standards/CISSP/CISSP_OSG8_D1_C4.md)
See also:
-- [Examples of vendor selection questionnaires](Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md)
-- [Draft Vendor and Product checklist](../Literature%20notes/Draft%20Vendor%20and%20Product%20checklist.md)
+- [Examples of vendor selection questionnaires](../Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md)
+- [Drafting a Vendor and Product checklist](Policy%20examples/Drafting%20a%20Vendor%20and%20Product%20checklist.md)
- [Veiligheidseisen aan Leveranciers Junis](../../Clients/Junis/Veiligheidseisen%20aan%20Leveranciers%20Junis.md)
-- [Vulnerability Disclosure Policy](Vulnerability%20Disclosure%20Policy.md)
-- [Software due diligence](Software%20due%20diligence.md)
-- [Checklist for security product vendors assessment](../Literature%20notes/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20security%20product%20vendors%20assessment.md)
-- [Checklist for auditing Vendor Management](../Literature%20notes/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Vendor%20Management.md)
-- [Treating vendors as a risk](../Literature%20notes/Treating%20vendors%20as%20a%20risk.md)
+- [Vulnerability Disclosure Policy](Policy%20examples/Vulnerability%20Disclosure%20Policy.md)
+- [Software due diligence](../Information%20Security/Software%20due%20diligence.md)
+- [Checklist for security product vendors assessment](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20security%20product%20vendors%20assessment.md)
+- [Checklist for auditing Vendor Management](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Vendor%20Management.md)
+- [Treating vendors as a risk](../Information%20Security/Risks/Treating%20vendors%20as%20a%20risk.md)
Examples:
-- [Dropbox Supplier Security Requirements](../Literature%20notes/Dropbox%20Supplier%20Security%20Requirements.md)
+- [Dropbox Supplier Security Requirements](Policy%20examples/Dropbox%20Supplier%20Security%20Requirements.md)
- [Veiligheidseisen aan Leveranciers Junis](../../Clients/Junis/Veiligheidseisen%20aan%20Leveranciers%20Junis.md)
- [Ubeoo ATS vendor selection Humankind](../../Clients/Humankind/Ubeoo%20ATS%20vendor%20selection%20Humankind.md)
- [Selectie en implementatie van Technologie bij Humankind](../../Clients/Humankind/Selectie%20en%20implementatie%20van%20Technologie%20bij%20Humankind.md)
diff --git a/Corpus/Attachments/Verplichte documentatie ISO 27001-2017 H4-10 en Annex A van KIWA.docx b/Corpus/ISMS/Verplichte documentatie ISO 27001-2017 H4-10 en Annex A van KIWA.docx
similarity index 100%
rename from Corpus/Attachments/Verplichte documentatie ISO 27001-2017 H4-10 en Annex A van KIWA.docx
rename to Corpus/ISMS/Verplichte documentatie ISO 27001-2017 H4-10 en Annex A van KIWA.docx
diff --git a/Corpus/Sparks/rumc-eigenaarschap.png b/Corpus/ISMS/rumc-eigenaarschap.png
similarity index 100%
rename from Corpus/Sparks/rumc-eigenaarschap.png
rename to Corpus/ISMS/rumc-eigenaarschap.png
diff --git a/Corpus/Sparks/template risicobeoordeling.xlsx b/Corpus/ISMS/template risicobeoordeling.xlsx
similarity index 100%
rename from Corpus/Sparks/template risicobeoordeling.xlsx
rename to Corpus/ISMS/template risicobeoordeling.xlsx
diff --git a/Corpus/Literature notes/(ISC)² meeting on Secure Software Development.md b/Corpus/Information Security/(ISC)² meeting on Secure Software Development.md
similarity index 95%
rename from Corpus/Literature notes/(ISC)² meeting on Secure Software Development.md
rename to Corpus/Information Security/(ISC)² meeting on Secure Software Development.md
index 421ce62..02b8ce0 100644
--- a/Corpus/Literature notes/(ISC)² meeting on Secure Software Development.md
+++ b/Corpus/Information Security/(ISC)² meeting on Secure Software Development.md
@@ -31,7 +31,7 @@ Key building blocks of successful secure software development:
- Collaboration between security experts and developer
- Tailored training, based on principles
- Provide standard software bv uil ding blocks and frameworks
-- [Threat modeling](Security%20Threat%20Modeling.md) and situational Testing against these threats
+- [Threat modeling](Risks/Security%20Threat%20Modeling.md) and situational Testing against these threats
- Automated testing
- Manual verification against checklists
- Privacy and Maintainability
diff --git a/Corpus/Literature notes/Agile Development for Application Security Managers.md b/Corpus/Information Security/Agile Development for Application Security Managers.md
similarity index 96%
rename from Corpus/Literature notes/Agile Development for Application Security Managers.md
rename to Corpus/Information Security/Agile Development for Application Security Managers.md
index cf6cc72..a06bb15 100644
--- a/Corpus/Literature notes/Agile Development for Application Security Managers.md
+++ b/Corpus/Information Security/Agile Development for Application Security Managers.md
@@ -1,4 +1,7 @@
-[](Agile-development-for-Application-security-managers2.pdf)
+# Agile Development for Application Security Managers
+
+
+
Downloaded from: [Quotium.com](http://www.quotium.com/content/uploads/2014/02/Agile-development-for-Application-security-managers2.pdf) on February 11, 2022
diff --git a/Corpus/Literature notes/Agile-development-for-Application-security-managers2.pdf b/Corpus/Information Security/Agile-development-for-Application-security-managers2.pdf
similarity index 100%
rename from Corpus/Literature notes/Agile-development-for-Application-security-managers2.pdf
rename to Corpus/Information Security/Agile-development-for-Application-security-managers2.pdf
diff --git a/Corpus/Information Security/Applying Zero Trust Principles to Enterprise Mobility.md b/Corpus/Information Security/Applying Zero Trust Principles to Enterprise Mobility.md
new file mode 100644
index 0000000..d82ccad
--- /dev/null
+++ b/Corpus/Information Security/Applying Zero Trust Principles to Enterprise Mobility.md
@@ -0,0 +1,9 @@
+# Applying Zero Trust Principles to Enterprise Mobility
+
+
+
+
+Source: https://www.cisa.gov/sites/default/files/publications/Zero_Trust_Principles_Enterprise_Mobility_For_Public_Comment_508C.pdf
+
+Related:
+[ISO 27001 A 6.2.1 Mobile device policy](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%206.2.1%20Mobile%20device%20policy.md)
diff --git a/Corpus/Information Security/Applying_Zero_Trust_Principles_Enterprise_Mobility_For_Public_Comment_508C.pdf b/Corpus/Information Security/Applying_Zero_Trust_Principles_Enterprise_Mobility_For_Public_Comment_508C.pdf
new file mode 100644
index 0000000..a8dcc51
Binary files /dev/null and b/Corpus/Information Security/Applying_Zero_Trust_Principles_Enterprise_Mobility_For_Public_Comment_508C.pdf differ
diff --git a/Corpus/Information Security/Authentication Methods Used for Network Security.md b/Corpus/Information Security/Authentication Methods Used for Network Security.md
new file mode 100644
index 0000000..c9d9ca9
--- /dev/null
+++ b/Corpus/Information Security/Authentication Methods Used for Network Security.md
@@ -0,0 +1,179 @@
+# Authentication Methods Used for Network Security
+
+Source: https://www.sailpoint.com/identity-library/authentication-methods-used-for-network-security/
+
+While just one facet of cybersecurity, [authentication](https://www.sailpoint.com/identity-library/authentication) methods are the first line of defense. This is the process of determining whether a user is who they say they are. [Not to be confused](https://www.sailpoint.com/identity-library/difference-between-authentication-and-authorization/) with the step it precedes—authorization—authentication is purely the means of confirming digital identification, so users have the level of permissions to access or perform a task they are attempting.
+
+There are many authentication methods, ranging from [passwords](https://www.sailpoint.com/identity-library/password-management-best-practices/) to fingerprints, to confirm the identity of a user before allowing access. Doing so adds a layer of protection and prevents security lapses like [data breaches](https://www.sailpoint.com/identity-library/how-compromised-credentials-lead-to-data-breaches/), though it’s often the combination of different types of authentication that provides secure system reinforcement against possible threats.
+
+## Definition of authentication
+
+In the context of [cybersecurity](https://www.sailpoint.com/identity-library/cybersecurity), authentication is the process of verifying and confirming the [identity](https://www.sailpoint.com/identity-library/digital-identity) of a user, device, or system before granting access to resources or information. It is a front-line defensive security measure used to ensure that individuals or entities can only access [sensitive data](https://www.sailpoint.com/identity-library/sensitive-data) or perform specific actions for which they are authorized.
+
+The primary objective of authentication is to prevent [unauthorized access](https://www.sailpoint.com/identity-library/unauthorized-access) and protect assets (e.g., applications, data, and systems) from malicious activities, such as identity theft, data breaches, and [ransomware](https://www.sailpoint.com/identity-library/ransomware-mitigation) attacks. The systems used to implement and enforce authentication policies also support [compliance](https://www.sailpoint.com/identity-library/compliance-management) efforts.
+
+## Importance of authentication in cybersecurity
+
+Authentication is used to protect nearly every digital asset in an organization’s environment. It plays a critical role in protecting data, maintaining system and , and ensuring compliance with internal policies and [external regulations](https://www.sailpoint.com/identity-library/what-is-regulatory-compliance). The following are several of the most commonly cited reasons why authentication is an important part of an organization’s overall security posture.
+
+### Prevents unauthorized access
+
+Authentication ensures that only authorized users can access systems, applications, and data. This is fundamental to protecting digital assets from being accessed by unauthorized individuals or malicious actors.
+
+### Protects sensitive data
+
+Most organizations create, store, and handle sensitive data such as [personally identifiable information](https://www.sailpoint.com/identity-library/personally-identifiable-information) (PII) collected by human resources departments, financial information used by accounting teams, and intellectual property created and used by various groups in an organization.
+
+Authentication mechanisms help safeguard this information from unauthorized access and potential [breaches](https://www.sailpoint.com/identity-library/security-breach) by verifying identities before granting access.
+
+### Mitigates security risks
+
+By verifying the identity of users and entities, authentication reduces the risk of [cyber attacks](https://www.sailpoint.com/identity-library/cyber-attack) that can result in identity theft, financial loss, operational disruption, and data breaches. It defends against these and other threats with strong [access controls](https://www.sailpoint.com/identity-library/what-are-the-different-types-of-access-control-systems) administered through a layered approach.
+
+### Supports accountability
+
+Authentication tools can create logs that detail all access instances. They can track which individual or entity accessed what resources and when tracing specific actions back to particular users or devices. This plays a vital role in monitoring for potential issues, auditing and investigations, and reporting in the wake of a security incident.
+
+### Supports compliance
+
+Authentication is a requirement for compliance with many regulations and standards, such as [General Data Protection Regulation](https://www.sailpoint.com/identity-library/gdpr-compliance-identity-governance-guide) (GDPR), [Health Insurance Portability and Accountability Act](https://www.sailpoint.com/identity-library/hipaa) (HIPAA), [Payment Card Industry Data Security Standard](https://www.sailpoint.com/identity-library/pci-dss-compliance) (PCI DSS), [Sarbanes-Oxley Act](https://www.sailpoint.com/identity-library/sox)(SOX), [Federal Information Security Management Act](https://www.sailpoint.com/identity-library/fisma-compliance-checklist) (FISMA), [Gramm-Leach-Bliley Act](https://www.sailpoint.com/identity-library/gramm-leach-bliley-act) (GLBA), ISO/IEC 27001, and many international security and privacy laws. These mandate that organizations implement and maintain robust authentication measures to protect sensitive data and ensure privacy.
+
+### Enhances trust
+
+Strong authentication mechanisms ensure compliance with laws and standards and build trust among users, customers, and partners. The use of robust authentication demonstrates that the organization takes security seriously and is committed to protecting its data.
+
+### Reduces social engineering risks
+
+[Social engineering](https://www.sailpoint.com/identity-library/social-engineering) is the use of psychological manipulation as an attack vector for perpetrating malicious activities. Deception is used to trick individuals into breaking personal and organizational security protocols to support criminal activities.
+
+Using advanced authentication methods, such as [multi-factor authentication](https://www.sailpoint.com/identity-library/what-is-multi-factor-authentication) (MFA), prevents cyber attackers from gaining unauthorized access to applications, systems, or data from a single point of failure, such as [compromised credentials](https://www.sailpoint.com/identity-library/how-compromised-credentials-lead-to-data-breaches). Layered approaches to authentication make it exponentially more difficult for attackers to gain access successfully because even if one layer of authentication has been compromised, others are still in place. These additional verification steps have proven to be highly effective in thwarting unauthorized access.
+
+### Supports identity management
+
+Authentication plays a critical role in [identity and access management](https://www.sailpoint.com/identity-library/identity-and-access-management-security-checklist)(IAM). It helps organizations manage user identities and control access to resources by ensuring that only authorized users can access systems and data. Identity management systems (IDMS) use authentication methods (e.g., multi-factor authentication) to verify users' identities before granting access. Identity service providers (IdPs) are often used to support authentication systems, such as MFA and [single sign-on](https://www.sailpoint.com/identity-library/what-is-user-provisioning-and-single-sign-on)(SSO).
+
+## Types of authentication
+
+Based on their associated factors, there are three primary types of authentication: knowledge, possession, and inherence. Each has its pros and cons, but when used in conjunction, these types of authentication provide powerful protection from unauthorized access.
+
+### Knowledge-based authentication (something you know)
+
+[Knowledge-based authentication](https://www.sailpoint.com/identity-library/what-is-knowledge-based-authentication) uses information that a user knows, such as a username and password combination or personal information, to verify their identity before they are allowed to proceed. The level of security offered by knowledge-based authentication depends on the type used. There are two types of knowledge-based authentication—static and dynamic.
+
+Static knowledge-based authentication uses pre-selected information stored in the authentication system. In addition to credentials, examples of static authentication factors are security questions, such as first pet, favorite color, or mother's maiden name. Static verification offers the benefit of simplicity, but the common nature of the questions asked makes it easier for cyber attackers to find the answers.
+
+Dynamic knowledge-based authentication generates random questions to authenticate users. It increases security by making it harder to research answers in advance. Because dynamic knowledge-based authentication generates questions on the fly, cyber attackers cannot predict the information that they need to circumvent security systems. These questions come from various data sources, such as collected credit history, financial information, and public records.
+
+### Possession-based authentication (something you have)
+
+With possession-based authentication, a user’s identity is verified using physical possession of a specific object or device. These devices include a hardware token, a smart card, a USB key, and mobile devices, usually smartphones. The device is registered to an individual user and linked to the user’s identity, creating a unique connection between the user and the device.
+
+Once set up, the device can be used as part of authentication processes. When a user attempts to log in to a resource, they are prompted to present the object or a unique identifier associated with the object. For instance, a token or smartphone could present a unique security code, and a scanner could be used to capture a person’s fingerprint. Possession factors offer enhanced protection because it is difficult for cyber attackers to get the device or spoof it.
+
+### Inherence-based authentication (something you are)
+
+Inherence-based authentication verifies a user’s identity with their inherently unique biological traits that are nearly impossible to replicate or fake, such as a user’s fingerprint, voice, or iris. This is a very secure authentication method, but it has limitations.
+
+One of the biggest concerns about inherence-based authentication is [privacy](https://www.sailpoint.com/identity-library/data-privacy), as this approach requires the collection and storage of an individual’s characteristics. Other drawbacks of inherence-based authentication are related to its implementation. This type of authentication requires specialized devices that can capture and process the data, and these systems can be costly and complex to support.
+
+## Authentication methods
+
+Authentication keeps invalid users out of databases, networks, and other resources. These types of authentication use factors, a category of credential for verification, to confirm user identity. Here are just a few authentication methods.
+
+### Single-factor / primary authentication
+
+Historically the most common form of authentication, single-factor authentication is also the least secure, as it only requires one factor to gain full system access. It could be a username and password, pin-number or another simple code. While user-friendly, single-factor authentication systems are relatively easy to infiltrate by [phishing](https://www.sailpoint.com/identity-library/spear-phishing-vs-phishing), key logging, or mere guessing. As there is no other authentication gate to get through, this approach is highly vulnerable to attack.
+
+### Two-factor authentication (2FA)
+
+By adding a second factor for verification, [two-factor authentication](https://www.sailpoint.com/identity-library/two-factor-authentication)reinforces security efforts. It is an added layer that essentially double-checks that a user is, in reality, the user they’re attempting to log in as—making it much harder to break. With this method, users enter their primary authentication credentials (like the username / password mentioned above) and then must input a secondary piece of identifying information.
+
+The secondary factor is usually more difficult, as it often requires something the valid user would have access to, unrelated to the given system. Possible secondary factors are a one-time password from an authenticator app, a phone number, or device that can receive a push notification or SMS code, or a [biometric](https://www.sailpoint.com/identity-library/biometric-authentication) like fingerprint (Touch ID) or facial (Face ID) or voice recognition.
+
+2FA significantly minimizes the risk of system or resource compromise, as it’s unlikely an invalid user would know or have access to both authentication factors. While two-factor authentication is now more widely adopted for this reason, it does cause some user inconvenience, which is still something to consider in implementation.
+
+### Single sign-on (SSO)
+
+With SSO, users only have to log in to one application and, in doing so, gain access to many other applications. This method is more convenient for users, as it removes the obligation to retain multiple sets of credentials and creates a more seamless experience during operative sessions.
+
+Organizations can accomplish this by identifying a central domain (most ideally, an IAM system) and then creating secure SSO links between resources. This process allows domain-monitored user authentication and, with single sign-off, can ensure that when valid users end their session, they successfully log out of all linked resources and applications.
+
+### Multi-factor authentication (MFA)
+
+Multi-factor authentication is a high-assurance method, as it uses more system-irrelevant factors to legitimize users. Like 2FA, MFA uses factors like biometrics, device-based confirmation, additional passwords, and even location or behavior-based information (e.g., keystroke pattern or typing speed) to confirm user identity. However, the difference is that while 2FA always utilizes only two factors, MFA could use two or three, with the ability to vary between sessions, adding an elusive element for invalid users.
+
+## Common authentication factors
+
+Each authentication factor belongs to a specific category of security controls. Security analysts choose factors in each category based on their requirements, availability, cost, ease of implementation, and other criteria. By blending factors from different categories, the overall security posture is significantly enhanced, as it is difficult for a bad actor to acquire or spoof many of these factors. The following are the main categories of authentication factors.
+
+### Passwords
+
+[Passwords](https://www.sailpoint.com/identity-library/password-management-best-practices) are a form of knowledge-based authentication. Users are required to enter their credentials, a username and password combination, to verify their identity. The credentials are validated by checking them against a database of users’ credentials.
+
+Credentials are either issued by an IT or security team or established when a user first attempts to access a service. Credentials for sensitive systems and data are usually issued by IT or security teams, whereas credentials for accounts (e.g., banks, stores, or services) are often set up by the user.
+
+Beyond protecting the database where credentials are stored, the security of passwords as authentication is predicated on the establishment and enforcement of [password policies](https://www.sailpoint.com/identity-library/password-policy). A key among these is the use of strong passwords.
+
+CISA (the federal government’s [Cybersecurity and Infrastructure Security Agency](https://www.cisa.gov/)) recommends strong passwords be long, ideally at least 16 characters. CISA also recommends making them random by combining a string of capital and lowercase letters, numbers, and symbols or using a passphrase (e.g., SharkIceCardPurple). Another CISA recommendation for strong passwords is to make them unique, using different passwords for each account.
+
+### PINs
+
+The PIN (personal identification number) factor uses a numeric code or password to authenticate the identity of a user. PINs are often used as part of possession authentication. They are dynamically generated and presented on devices for users to enter as part of an authentication process. Common uses for PINs as knowledge-based authentication are for ATMs and mobile devices (e.g., smartphones and tablets).
+
+### Security tokens
+
+Security tokens are used for possession-based authentication. They can be hardware-based or software-based. Examples of hardware-based security tokens are USB tokens, smart cards, portable devices that display time-restricted codes, NFC (near-field communication) tokens for contactless authentication, and Bluetooth tokens that pair with a device when in proximity to authenticate. Software-based tokens include mobile authentication apps, one-time codes sent via text messages or email, push notifications that require users to validate a login attempt and browser extensions that generate and manage [one-time passwords](https://www.sailpoint.com/identity-library/one-time-password) for web-based authentication.
+
+### Biometrics
+
+Biometrics is considered a stronger authentication factor than passwords or PINs because it leverages physical or behavioral characteristics that are unique to individuals to verify their identity. These are difficult to forge or steal.
+
+Types of biometric factors include fingerprints, facial recognition, hand geometry, iris recognition, retinal scans, voice recognition, gait analysis, vein patterns, DNA matching, and ear shape recognition. Users present their biometrics during the authentication process, and they compare them to the records that they have provided.
+
+Biometrics are used for a number of access control use cases. These range from facial recognition to access a smartphone or fingerprint recognition to access a computer system to retinal and hand geometry scans to gain entry to a secured building or area or voice recognition to access account information from a phone.
+
+### Location
+
+Geolocation can be used as an authentication factor by internet protocol (IP) addresses, global positioning system (GPS) coordinates, and network information to determine whether a user’s access request originates from an expected or trusted location. With location-based authentication, a baseline of normal login locations is established, and anomalies are flagged and trigger further authentication.
+
+### Behavior
+
+Behavioral authentication is different from other types in that it supports continuous identity verification. It establishes user behavior baselines and monitors activity to detect deviations in how users interact with devices and applications. For example, keystroke analysis detects the unique timing patterns of how a user types, including the speed and pressure of key presses. Mouse movement can also be tracked and analyzed, such as the way a user typically navigates a screen. Behavior analytics tools can even track how a user holds and moves their device, including grip strength and angle.
+
+## What are the most common authentication protocols?
+
+Authentication protocols are the designated rules for interaction and verification that endpoints (laptops, desktops, phones, servers, etc.) or systems use to communicate. For as many different applications that users need access to, there are just as many standards and protocols.
+
+Selecting the right authentication protocol for the organization is essential for ensuring secure operations and use compatibility. Here are a few of the most commonly used authentication protocols.
+
+### Password authentication protocol (PAP)
+
+While common, PAP is the least secure protocol for validating users, due mostly to its lack of encryption. It is essentially a routine log in process that requires a username and password combination to access a given system, which validates the provided credentials. It’s now most often used as a last option when communicating between a server and desktop or remote device.
+
+### Challenge handshake authentication protocol (CHAP)
+
+CHAP is an identity verification protocol that verifies a user to a given network with a higher standard of encryption using a three-way exchange of a “secret.” First, the local router sends a “challenge” to the remote host, which then sends a response with an MD5 hash function. The router matches against its expected response (hash value), and depending on whether the router determines a match, it establishes an authenticated connection—the “handshake”—or denies access. It is inherently more secure than PAP, as the router can send a challenge at any point during a session, and PAP only operates on the initial authentication approval.
+
+### Extensible authentication protocol (EAP)
+
+This protocol supports many types of authentication, from one-time passwords to smart cards. When used for wireless communications, EAP is the highest level of security as it allows a given access point and remote device to perform mutual authentication with built-in encryption. It connects users to the access point that requests credentials, confirms identity via an authentication server, and then makes another request for an additional form of user identification to again confirm via the server—completing the process with all messages transmitted, encrypted.
+
+### Kerberos
+
+[Kerberos](https://www.sailpoint.com/identity-library/kerberos-authentication-protocol) is a protocol that is used for network authentication. It uses cryptographic keys to create tickets. Once a ticket is issued, it is used to validate the identity of clients and servers during a network session in lieu of passwords. It is often used in large environments to support SSO.
+
+### LDAP
+
+[LDAP](https://www.sailpoint.com/identity-library/lightweight-directory-access-protocol) (Lightweight Directory Access Protocol) is an open, standard protocol used for managing and maintaining directory information, such as authentication servers. Because applications can quickly query user information for authentication, it is widely used to manage organizations’ user credentials.
+
+### OAuth 2.0
+
+[OAuth](https://www.sailpoint.com/identity-library/oauth) (Open Authorization) 2.0 is an industry-standard authorization framework that allows a website or application to access resources hosted by other web apps on behalf of a user. Access is limited to authorized actions for each user. The broad appeal of OAuth 2.0 is that the client app can perform actions on behalf of a user, and the user never has to share their credentials because the exchange is handled through application programming interfaces (APIs) and passed authentication tokens.
+
+### RADIUS
+
+RADIUS (Remote Authentication Dial-In User Service) is a network protocol that provides centralized authentication and accounting. It allows [remote users](https://www.sailpoint.com/identity-library/remote-access-security) to access virtual private network (VPN) servers, which accept requests from remote users and establish secure connections to a private network.
+
+### SAML
+
+[SAML](https://www.sailpoint.com/identity-library/security-assertion-markup-language) (Security Assertion Markup Language) is an open, standard, XML-based protocol for exchanging authentication and authorization data between identity providers (IdPs) and service providers. It enables single sign-on authentication across service providers.
\ No newline at end of file
diff --git a/Corpus/MoCs/ISO_27002_2022_5.17_MoC Authentication information.md b/Corpus/Information Security/Authentication information.md
similarity index 51%
rename from Corpus/MoCs/ISO_27002_2022_5.17_MoC Authentication information.md
rename to Corpus/Information Security/Authentication information.md
index 585c6c1..04a3f28 100644
--- a/Corpus/MoCs/ISO_27002_2022_5.17_MoC Authentication information.md
+++ b/Corpus/Information Security/Authentication information.md
@@ -1,17 +1,9 @@
-# About Control 5.17: Authentication information
+# Authentication information
-Managing authentication information, including advising personnel on how to handle authentication information.
-
-[Original Text](../ISO-27002-OST/ISO27002-EN-2022/a-5.17-Authentication-information.md)
-[[ISO_27002_2022_5.17_PE Authentication information \|Plain English]]
ISO 27002:2013: 09.2.4, 09.3.1, 09.4.3
+ISO 27002:2022: 5.17 (Managing authentication information, including advising personnel on how to handle authentication information.)
-[Brontekst](../ISO-27002-OST/ISO27002-NL-2022/a-5.17-Beheren-van-authenticatie-informatie.md)
-[Normaal Nederlands](../ISO-27002-OST/ISO27002-NL-2022/ISO_27002_2022_NL_5.17_NN%20Beheren%20van%20authenticatie-informatie.md)
-
-
-
-[Sterke wachtwoorden in 2024](../Sparks/Sterke%20wachtwoorden%20in%202024.md)
+[Sterke wachtwoorden in 2024](Sterke%20wachtwoorden%20in%202024.md)
**NCSC over authenticeren**
- [Authenticatie als onderdeel van Digitale Weerbaarheid](https://www.ncsc.nl/wat-kun-je-zelf-doen/weerbaarheid/beschermen/authenticatie)
diff --git a/Corpus/Literature notes/BCP_Bedrijfscontinuïteitsplanning.md b/Corpus/Information Security/BCP_Bedrijfscontinuïteitsplanning.md
similarity index 91%
rename from Corpus/Literature notes/BCP_Bedrijfscontinuïteitsplanning.md
rename to Corpus/Information Security/BCP_Bedrijfscontinuïteitsplanning.md
index ff8ce04..ea119c9 100644
--- a/Corpus/Literature notes/BCP_Bedrijfscontinuïteitsplanning.md
+++ b/Corpus/Information Security/BCP_Bedrijfscontinuïteitsplanning.md
@@ -1,4 +1,5 @@
# Bedrijfscontinuïteitsplanning
+
*In het Engels: Business Continuity Planning (BCP)*
Producten:
@@ -14,10 +15,10 @@ Producten:
Bedrijfscontinuïteitsplanning is een continu proces, met als doel het implementeren en onderhouden van beleid, procedures en processen om de impact van verstoringen te beheersen. Met andere woorden: bedrijfscontinuïteitsplanning richt zich op de continuïteit van bedrijfsprocessen, zo nodig met andere middelen.
-Belangrijke onderdelen van Bedrijfscontinuïteitsplanning zijn de Bedrijfsimpact Analyse ([BIA](../Sparks/ISMS/Business%20Impact%20Analysis%20(BIA).md)) en het Herstelplan ('Disaster Recovery Plan' / [DRP](..//Disaster%20Recovery%20Planning.md)).
+Belangrijke onderdelen van Bedrijfscontinuïteitsplanning zijn de Bedrijfsimpact Analyse ([BIA](../ISMS/Business%20Impact%20Analysis%20(BIA).md)) en het Herstelplan ('Disaster Recovery Plan' / [DRP](..//Disaster%20Recovery%20Planning.md)).
De BIA richt zich op het identificeren van de impact van verstoringen op de bedrijfsprocessen, en het Herstelplan richt zich op het herstel van de normale bedrijfsprocessen na een verstoring en de eventuele inzet van alternatieve middelen of werkwijzen .
-Zie ook: [Het belang van een Bedrijfscontinuïteitsplan](../Sparks/ISMS/Belang%20van%20een%20BCP.md) / [The importance of having a business continuity plan](../Sparks/Information%20Security/Importance%20of%20a%20BCP.md).
+Zie ook: [Het belang van een Bedrijfscontinuïteitsplan](../ISMS/Belang%20van%20een%20BCP.md) / [The importance of having a business continuity plan](Importance%20of%20a%20BCP.md).
## Aanpak
@@ -34,7 +35,7 @@ Het proces (Beleid) volgens welke dit hele plan tot stand komt en beoordeeld/her
## Analyse
-Zie: [Business Impact Analysis (BIA)](../Sparks/ISMS/Business%20Impact%20Analysis%20(BIA).md)
+Zie: [Business Impact Analysis (BIA)](../ISMS/Business%20Impact%20Analysis%20(BIA).md)
Stappen:
- Bepalen bedrijfskritische processen (prioriteiten bepalen) en informatie-assets
@@ -142,8 +143,8 @@ Scenario's opstellen o.b.v. risicoanalyse
See also:
- [Disaster Recovery Planning](..//Disaster%20Recovery%20Planning.md)
-- [Checklist for auditing Business Continuity and Disaster Recovery](Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Business%20Continuity%20and%20Disaster%20Recovery.md)
-- [Ransomware Playbook](../Sparks/Ransomware%20Playbook.md)
+- [Checklist for auditing Business Continuity and Disaster Recovery](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Business%20Continuity%20and%20Disaster%20Recovery.md)
+- [Ransomware Playbook](Ransomware%20Playbook.md)
ISO controls:
- 5.29:
diff --git a/Corpus/Literature notes/CASSM Consumer Authentication Strength Maturity Model.md b/Corpus/Information Security/CASSM Consumer Authentication Strength Maturity Model.md
similarity index 100%
rename from Corpus/Literature notes/CASSM Consumer Authentication Strength Maturity Model.md
rename to Corpus/Information Security/CASSM Consumer Authentication Strength Maturity Model.md
diff --git a/Corpus/Sparks/Information Security/CRUD Matrices.md b/Corpus/Information Security/CRUD Matrices.md
similarity index 100%
rename from Corpus/Sparks/Information Security/CRUD Matrices.md
rename to Corpus/Information Security/CRUD Matrices.md
diff --git a/Corpus/Attachments/Certified Ethical Hacker Exam Guide 2021.pdf b/Corpus/Information Security/Certified Ethical Hacker Exam Guide 2021.pdf
similarity index 100%
rename from Corpus/Attachments/Certified Ethical Hacker Exam Guide 2021.pdf
rename to Corpus/Information Security/Certified Ethical Hacker Exam Guide 2021.pdf
diff --git a/Corpus/Sparks/Information Security/Client segregation in SaaS.md b/Corpus/Information Security/Client segregation in SaaS.md
similarity index 100%
rename from Corpus/Sparks/Information Security/Client segregation in SaaS.md
rename to Corpus/Information Security/Client segregation in SaaS.md
diff --git a/Corpus/Literature notes/Topical InfoSec Kanban’s.md b/Corpus/Information Security/Collection of Kanban boards on information security topics.md
similarity index 94%
rename from Corpus/Literature notes/Topical InfoSec Kanban’s.md
rename to Corpus/Information Security/Collection of Kanban boards on information security topics.md
index 01f55e8..b55deb2 100644
--- a/Corpus/Literature notes/Topical InfoSec Kanban’s.md
+++ b/Corpus/Information Security/Collection of Kanban boards on information security topics.md
@@ -1,3 +1,5 @@
+# Collection of Kanban boards on information security topics
+
The planning function of AuditGlue may take the form of a (series of) Kanban boards.
For inspiration, below is a collection of Kanban boards on information security topics, published by [The Art of Service](../Sparks/The%20Art%20of%20Service.md). Offering Kanban's in cooperation with them should be considered.
@@ -30,7 +32,7 @@ Note that these boards where created with Airtable.com.
### Related notes:
- [📼 ISO27DIY Video Series](../Standards/ISO27x/legacy/iso27DIY%20mk%20I/📼%20ISO27DIY%20Video%20Series.md)
- [ISO27DIY Additional resources](../Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO27DIY%20Additional%20resources.md)
-- [List of possible partners](../Sparks/iso27diy/List%20of%20possible%20partners.md)
+- [List of possible partners](../../AuditGlue/List%20of%20possible%20partners.md)
- [ISO27DIY Workshop Overview template](../Standards/ISO27x/legacy/iso27DIY%20mk%20I/📒%20Templates/ISO27DIY%20Workshop%20Overview%20template.md)
- [Advised Documents for ISO 27001](../../../iso27DIY-gis/reference/Advised%20Documents%20for%20ISO%2027001.md)
- [💾 AuditGlue software](../Standards/ISO27x/legacy/iso27DIY%20mk%20I/💾%20AuditGlue%20software.md)
diff --git a/Corpus/Information Security/Cracking passwords in 2024.md b/Corpus/Information Security/Cracking passwords in 2024.md
new file mode 100644
index 0000000..4b8d86b
--- /dev/null
+++ b/Corpus/Information Security/Cracking passwords in 2024.md
@@ -0,0 +1,9 @@
+# Cracking passwords in 2024
+
+
+
+
+
+
+
+
diff --git a/Corpus/Sparks/Information Security/Customer Managed Keys.md b/Corpus/Information Security/Customer Managed Keys.md
similarity index 96%
rename from Corpus/Sparks/Information Security/Customer Managed Keys.md
rename to Corpus/Information Security/Customer Managed Keys.md
index 8541469..37a189c 100644
--- a/Corpus/Sparks/Information Security/Customer Managed Keys.md
+++ b/Corpus/Information Security/Customer Managed Keys.md
@@ -5,7 +5,7 @@ Asked Gemini, 30 juni 2025.
Prompt: `What is meant by 'Bring your own encryption key?`
Related:
-- [a-8.24-Use-of-cryptography](../../Standards/ISO27x/OST/27002/EN/a-8.24-Use-of-cryptography.md)
+- [a-8.24-Use-of-cryptography](../Standards/ISO27x/OST/27002/EN/a-8.24-Use-of-cryptography.md)
'Bring Your Own Encryption Key' (BYOK), also sometimes referred to as 'Bring Your Own Encryption' (BYOE) or 'Customer Managed Keys' (CMK), is a cloud computing security model that allows organizations to use and manage their own encryption keys for data stored in cloud environments, rather than relying on the cloud service provider to generate and manage the keys.
diff --git a/Corpus/Information Security/Data Governance.md b/Corpus/Information Security/Data Governance.md
new file mode 100644
index 0000000..3dfd6f8
--- /dev/null
+++ b/Corpus/Information Security/Data Governance.md
@@ -0,0 +1,3 @@
+[Checklist for auditing Data Governance](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Data%20Governance.md)
+[Data security lifecycle](Data%20security%20lifecycle.md)
+
diff --git a/Corpus/Literature notes/Data security lifecycle.md b/Corpus/Information Security/Data security lifecycle.md
similarity index 100%
rename from Corpus/Literature notes/Data security lifecycle.md
rename to Corpus/Information Security/Data security lifecycle.md
diff --git a/Corpus/Sparks/Information Security/Dealing with a reported application vulnerability.md b/Corpus/Information Security/Dealing with a reported application vulnerability.md
similarity index 73%
rename from Corpus/Sparks/Information Security/Dealing with a reported application vulnerability.md
rename to Corpus/Information Security/Dealing with a reported application vulnerability.md
index 818899d..46f4ae4 100644
--- a/Corpus/Sparks/Information Security/Dealing with a reported application vulnerability.md
+++ b/Corpus/Information Security/Dealing with a reported application vulnerability.md
@@ -33,16 +33,16 @@ Do an impact analyses and identify a treatment:
## Relevant ISO 27001 controls
-The main control of interest here is [ISO 27001 A 12.6.1 Management of technical vulnerabilities](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2012.6.1%20Management%20of%20technical%20vulnerabilities.md), which ensures timely awareness of vulnerabilities through [ISO 27001 A 6.1.4 Contact with special interest groups](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%206.1.4%20Contact%20with%20special%20interest%20groups.md), evaluation of an organization’s exposure, and having set [ISO 27001 A 16.1.1 Responsibilities and procedures](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2016.1.1%20Responsibilities%20and%20procedures.md) to enable a quick and effective response.
+The main control of interest here is [ISO 27001 A 12.6.1 Management of technical vulnerabilities](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2012.6.1%20Management%20of%20technical%20vulnerabilities.md), which ensures timely awareness of vulnerabilities through [ISO 27001 A 6.1.4 Contact with special interest groups](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%206.1.4%20Contact%20with%20special%20interest%20groups.md), evaluation of an organization’s exposure, and having set [ISO 27001 A 16.1.1 Responsibilities and procedures](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2016.1.1%20Responsibilities%20and%20procedures.md) to enable a quick and effective response.
Stopping the gap:
- [[ISO 27001 A 13.1.1 Network controls]]
- [[ISO 27001 A 13.1.2 Security of network services]]
-- [ISO 27001 A 12.5.1 Installation of software on operational systems](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2012.5.1%20Installation%20of%20software%20on%20operational%20systems.md)
+- [ISO 27001 A 12.5.1 Installation of software on operational systems](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2012.5.1%20Installation%20of%20software%20on%20operational%20systems.md)
Preventative measures:
-- [ISO 27001 A 12.6.2 Restrictions on software installation](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2012.6.2%20Restrictions%20on%20software%20installation.md)
+- [ISO 27001 A 12.6.2 Restrictions on software installation](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2012.6.2%20Restrictions%20on%20software%20installation.md)
- [[ISO 27001 A 14.1.1 Information security requirements analysis and specification]]
- [[ISO 27001 14.2.1 Secure development policy]]
- [[ISO 27001 A 14.2.7 Outsourced development]]
-- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md) of systems
+- [ISO 27001 A 18 Compliance](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md) of systems
diff --git a/Corpus/Sparks/Ransomware.md b/Corpus/Information Security/Dealing with ransomware attacks.md
similarity index 95%
rename from Corpus/Sparks/Ransomware.md
rename to Corpus/Information Security/Dealing with ransomware attacks.md
index beb16b7..28c2022 100644
--- a/Corpus/Sparks/Ransomware.md
+++ b/Corpus/Information Security/Dealing with ransomware attacks.md
@@ -1,3 +1,5 @@
+# Dealing with ransomware attacks
+
See also:
[a-8.7-Protection-against-malware](../Standards/ISO27x/OST/27002/EN/a-8.7-Protection-against-malware.md)
diff --git a/Corpus/Sparks/Information Security/Examples of Risk Avoidance.md b/Corpus/Information Security/Examples of Risk Avoidance.md
similarity index 100%
rename from Corpus/Sparks/Information Security/Examples of Risk Avoidance.md
rename to Corpus/Information Security/Examples of Risk Avoidance.md
diff --git a/Corpus/Information Security/Examples of vendor selection questionnaires.md b/Corpus/Information Security/Examples of vendor selection questionnaires.md
new file mode 100644
index 0000000..5e9922c
--- /dev/null
+++ b/Corpus/Information Security/Examples of vendor selection questionnaires.md
@@ -0,0 +1,7 @@
+# Examples of vendor selection questionnaires
+
+- [Dropbox](../ISMS/Policy%20examples/Dropbox%20Supplier%20Security%20Requirements.md)
+- [Google](https://vsaq-demo.withgoogle.com)
+
+Related:
+- [Vendor security MoC](../ISMS/Vendor%20security%20MoC.md)
\ No newline at end of file
diff --git a/Corpus/Sparks/Information Security/Frameworks for defining roles and responsibilities in IT.md b/Corpus/Information Security/Frameworks for defining roles and responsibilities in IT.md
similarity index 100%
rename from Corpus/Sparks/Information Security/Frameworks for defining roles and responsibilities in IT.md
rename to Corpus/Information Security/Frameworks for defining roles and responsibilities in IT.md
diff --git a/Corpus/Sparks/Information Security/Gedachten over rechtenstructuren.md b/Corpus/Information Security/Gedachten over rechtenstructuren.md
similarity index 100%
rename from Corpus/Sparks/Information Security/Gedachten over rechtenstructuren.md
rename to Corpus/Information Security/Gedachten over rechtenstructuren.md
diff --git a/Corpus/Information Security/ICT readiness for business continuity.md b/Corpus/Information Security/ICT readiness for business continuity.md
new file mode 100644
index 0000000..a49126b
--- /dev/null
+++ b/Corpus/Information Security/ICT readiness for business continuity.md
@@ -0,0 +1,8 @@
+# ICT readiness for business continuity
+
+See:
+- [BCP_Bedrijfscontinuïteitsplanning](../📚️%20Literature%20notes/BCP_Bedrijfscontinuïteitsplanning.md)
+- [Business Impact Analysis (BIA)](../ISMS/Business%20Impact%20Analysis%20(BIA).md)
+- [Disaster Recovery Planning](../ISMS/Disaster%20Recovery%20Planning.md)
+- [a-5.30-ICT-readiness-for-business-continuity](../Standards/ISO27x/OST/27002/EN/a-5.30-ICT-readiness-for-business-continuity.md)
+
diff --git a/Corpus/Sparks/Information Security/Identification.md b/Corpus/Information Security/Identification.md
similarity index 59%
rename from Corpus/Sparks/Information Security/Identification.md
rename to Corpus/Information Security/Identification.md
index 1ca1952..c02b29e 100644
--- a/Corpus/Sparks/Information Security/Identification.md
+++ b/Corpus/Information Security/Identification.md
@@ -3,14 +3,14 @@
Identification is the claim of a subject of its identity.
See also:
-- [Authentication](../../Standards/ISO27x/Authentication.md)
-- [Authorization](../../Standards/ISO27x/Authorization.md)
+- [Authentication](../Standards/ISO27x/Authentication.md)
+- [Authorization](../Standards/ISO27x/Authorization.md)
- [Identity and Access Management (IAM)](Identity%20and%20Access%20Management%20(IAM).md)
# Identification
Identification is the claim of a subject of its identity.
See also:
-- [Authentication](../../Standards/ISO27x/Authentication.md)
-- [Authorization](../../Standards/ISO27x/Authorization.md)
+- [Authentication](../Standards/ISO27x/Authentication.md)
+- [Authorization](../Standards/ISO27x/Authorization.md)
- [Identity and Access Management (IAM)](Identity%20and%20Access%20Management%20(IAM).md)
diff --git a/Corpus/Sparks/Information Security/Identifying and Managing Preventable Risks.md b/Corpus/Information Security/Identifying and Managing Preventable Risks.md
similarity index 89%
rename from Corpus/Sparks/Information Security/Identifying and Managing Preventable Risks.md
rename to Corpus/Information Security/Identifying and Managing Preventable Risks.md
index ad7b090..73c6045 100644
--- a/Corpus/Sparks/Information Security/Identifying and Managing Preventable Risks.md
+++ b/Corpus/Information Security/Identifying and Managing Preventable Risks.md
@@ -1,4 +1,4 @@
-Sidebar from [Managing Risks - A New Framework](../../Literature%20notes/Managing%20Risks%20-%20A%20New%20Framework.md)
+Sidebar from [Managing Risks - A New Framework](Risks/Managing%20Risks%20-%20A%20New%20Framework.md)
Companies cannot anticipate every circumstance or conflict of interest that an employee might encounter. Thus, the first line of defense against preventable risk events is to provide guidelines clarifying the company’s goals and values.
diff --git a/Corpus/Sparks/Information Security/Identity and Access Management (IAM).md b/Corpus/Information Security/Identity and Access Management (IAM).md
similarity index 69%
rename from Corpus/Sparks/Information Security/Identity and Access Management (IAM).md
rename to Corpus/Information Security/Identity and Access Management (IAM).md
index bfcc210..c00f387 100644
--- a/Corpus/Sparks/Information Security/Identity and Access Management (IAM).md
+++ b/Corpus/Information Security/Identity and Access Management (IAM).md
@@ -8,10 +8,10 @@ An _allow policy_, also known as an _IAM policy_, defines and enforces what ro
See:
- [Identification](Identification.md) – "This is who I am"
-- [Authentication](../../Standards/ISO27x/Authentication.md) – "This is how I prove it"
-- [Authorization](../../Standards/ISO27x/Authorization.md) – "... then this is what you get access to"
-- [CISSP_Domain_5_1](../../Standards/CISSP/CISSP_Domain_5_1.md), [CISSP_Domain_5_2](../../Standards/CISSP/CISSP_Domain_5_2.md)
-- [Roles in Identity and Access Management (IAM)](../../Literature%20notes/Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)
+- [Authentication](../Standards/ISO27x/Authentication.md) – "This is how I prove it"
+- [Authorization](../Standards/ISO27x/Authorization.md) – "... then this is what you get access to"
+- [CISSP_Domain_5_1](../Standards/CISSP/CISSP_Domain_5_1.md), [CISSP_Domain_5_2](../Standards/CISSP/CISSP_Domain_5_2.md)
+- [Roles in Identity and Access Management (IAM)](Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)
## How IAM works
@@ -23,7 +23,7 @@ An _allow policy_, also known as an _IAM policy_, defines and enforces what ro
See:
- [Identification](Identification.md) – "This is who I am"
-- [Authentication](../../Standards/ISO27x/Authentication.md) – "This is how I prove it"
-- [Authorization](../../Standards/ISO27x/Authorization.md) – "... then this is what you get access to"
-- [CISSP_Domain_5_1](../../Standards/CISSP/CISSP_Domain_5_1.md), [CISSP_Domain_5_2](../../Standards/CISSP/CISSP_Domain_5_2.md)
-- [Roles in Identity and Access Management (IAM)](../../Literature%20notes/Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)
\ No newline at end of file
+- [Authentication](../Standards/ISO27x/Authentication.md) – "This is how I prove it"
+- [Authorization](../Standards/ISO27x/Authorization.md) – "... then this is what you get access to"
+- [CISSP_Domain_5_1](../Standards/CISSP/CISSP_Domain_5_1.md), [CISSP_Domain_5_2](../Standards/CISSP/CISSP_Domain_5_2.md)
+- [Roles in Identity and Access Management (IAM)](Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)
\ No newline at end of file
diff --git a/Corpus/Information Security/Impact categories.md b/Corpus/Information Security/Impact categories.md
new file mode 100644
index 0000000..96b9276
--- /dev/null
+++ b/Corpus/Information Security/Impact categories.md
@@ -0,0 +1,17 @@
+# Impact Categories
+
+Impact Categories are the types of business consequences that matter most to an organization's leadership, because they affect the organization's ability to achieve its objectives.
+
+Below is a list of examples of Impact Categories:
+
+- **Operational**: Disruption of day-to-day processes, workforce capability, system functionality, and the organization's ability to deliver products or services
+- **Financial**: Direct financial losses, increased costs, reduced revenue, market value decline, or threats to financial stability
+- **Strategic**: Inability to achieve long-level organizational goals, loss of competitive position, or forced changes to business direction
+- **Compliance**: Legal penalties, regulatory sanctions, loss of licenses or certifications, or mandatory remediation costs
+- **Reputational**: Loss of customer trust, damage to brand value, negative media attention, or erosion of stakeholder confidence
+- **Health and Safety**: Physical harm to employees, customers, or the public, or creation of unsafe conditions
+- **Environmental**: Environmental damage, pollution incidents, or failure to meet sustainability commitments
+- **Competitive Advantage**: Loss of proprietary knowledge, patents, trade secrets, or strategic business intelligence
+- **National Security**: Consequences for critical infrastructure, public safety, or national interests
+
+You can expand and adapt this list as you see fit. Engage your management in a dialogue about areas of impact, and aim to establish the categories that are most important to them. This will help in weighing priorities later on.
\ No newline at end of file
diff --git a/Corpus/Sparks/Information Security/Importance of a BCP.md b/Corpus/Information Security/Importance of a BCP.md
similarity index 100%
rename from Corpus/Sparks/Information Security/Importance of a BCP.md
rename to Corpus/Information Security/Importance of a BCP.md
diff --git a/Corpus/Sparks/Information Security/Incident Response Planning.md b/Corpus/Information Security/Incident Response Planning.md
similarity index 74%
rename from Corpus/Sparks/Information Security/Incident Response Planning.md
rename to Corpus/Information Security/Incident Response Planning.md
index d27e8cb..6d0caad 100644
--- a/Corpus/Sparks/Information Security/Incident Response Planning.md
+++ b/Corpus/Information Security/Incident Response Planning.md
@@ -1,15 +1,15 @@
-[SANS Incident Response Plan](../../Standards/SANS/SANS%20Incident%20Response%20Plan.md)
+[SANS Incident Response Plan](../Standards/SANS/SANS%20Incident%20Response%20Plan.md)
-[Checklist for auditing Incident Response Plan](../../Literature%20notes/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Incident%20Response%20Plan.md)
+[Checklist for auditing Incident Response Plan](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Incident%20Response%20Plan.md)
See also:
-- [Ransomware Playbook](../Ransomware%20Playbook.md)
-- [a-5.30-ICT-readiness-for-business-continuity](../../Standards/ISO27x/OST/27002/EN/a-5.30-ICT-readiness-for-business-continuity.md)
+- [Ransomware Playbook](Ransomware%20Playbook.md)
+- [a-5.30-ICT-readiness-for-business-continuity](../Standards/ISO27x/OST/27002/EN/a-5.30-ICT-readiness-for-business-continuity.md)
- [BCP_Bedrijfscontinuïteitsplanning](../📚️%20Literature%20notes/BCP_Bedrijfscontinuïteitsplanning.md)
-ISO 27002 5.24 Planning and preparation [PE](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.24_PE%20Information%20security%20incident%20management%20planning%20and%20preparation.md)/ [OT](../../Standards/ISO27x/OST/27002/EN/a-5.24-Information-security-incident-management-planning-and-preparation.md)
+ISO 27002 5.24 Planning and preparation [PE](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.24_PE%20Information%20security%20incident%20management%20planning%20and%20preparation.md)/ [OT](../Standards/ISO27x/OST/27002/EN/a-5.24-Information-security-incident-management-planning-and-preparation.md)
CISSP Incident Response Steps[^1]:
@@ -26,7 +26,7 @@ CISSP Incident Response Steps[^1]:
- Remediation
- root cause analysis
- Lessons Learned
- - ISO 27002 5.27 [PE](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.27_PE%20Learning%20from%20information%20security%20incidents.md) / [OT](../../Standards/ISO27x/OST/27002/EN/a-5.27-Learning-from-information-security-incidents.md)
+ - ISO 27002 5.27 [PE](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.27_PE%20Learning%20from%20information%20security%20incidents.md) / [OT](../Standards/ISO27x/OST/27002/EN/a-5.27-Learning-from-information-security-incidents.md)
- prevent from re-occurring
- improve incident response
diff --git a/Corpus/Sparks/Information Security/Incident Response playbooks.md b/Corpus/Information Security/Incident Response playbooks.md
similarity index 100%
rename from Corpus/Sparks/Information Security/Incident Response playbooks.md
rename to Corpus/Information Security/Incident Response playbooks.md
diff --git a/Corpus/Sparks/Information Security/Kerberoasting.md b/Corpus/Information Security/Kerberoasting.md
similarity index 100%
rename from Corpus/Sparks/Information Security/Kerberoasting.md
rename to Corpus/Information Security/Kerberoasting.md
diff --git a/Corpus/Literature notes/Maturity Models.md b/Corpus/Information Security/Maturity Models.md
similarity index 95%
rename from Corpus/Literature notes/Maturity Models.md
rename to Corpus/Information Security/Maturity Models.md
index 08c7aae..e69ff56 100644
--- a/Corpus/Literature notes/Maturity Models.md
+++ b/Corpus/Information Security/Maturity Models.md
@@ -1,3 +1,4 @@
+# Maturity Models
- [CMMI Process Maturity](../Standards/other/CMMI%20Process%20Maturity.md)
- [SP-CMM Security & Privacy maturity](../Standards/other/SP-CMM%20Security%20&%20Privacy%20maturity.md)
diff --git a/Corpus/Sparks/Operational Technology.md b/Corpus/Information Security/OT Security.md
similarity index 100%
rename from Corpus/Sparks/Operational Technology.md
rename to Corpus/Information Security/OT Security.md
diff --git a/Corpus/Sparks/PEST analysis How To.md b/Corpus/Information Security/PEST analysis How To.md
similarity index 100%
rename from Corpus/Sparks/PEST analysis How To.md
rename to Corpus/Information Security/PEST analysis How To.md
diff --git a/Corpus/Sparks/Passwordless Authentication.md b/Corpus/Information Security/Passwordless Authentication.md
similarity index 100%
rename from Corpus/Sparks/Passwordless Authentication.md
rename to Corpus/Information Security/Passwordless Authentication.md
diff --git a/Corpus/Sparks/Multi-factor authentication.md b/Corpus/Information Security/Phishing-Resistant MFA.md
similarity index 100%
rename from Corpus/Sparks/Multi-factor authentication.md
rename to Corpus/Information Security/Phishing-Resistant MFA.md
diff --git a/Corpus/Sparks/Prioritisering Support.md b/Corpus/Information Security/Prioritisering Support.md
similarity index 100%
rename from Corpus/Sparks/Prioritisering Support.md
rename to Corpus/Information Security/Prioritisering Support.md
diff --git a/Corpus/Literature notes/Privileged Access Management.md b/Corpus/Information Security/Privileged Access Management.md
similarity index 98%
rename from Corpus/Literature notes/Privileged Access Management.md
rename to Corpus/Information Security/Privileged Access Management.md
index d9d3cee..4d881e8 100644
--- a/Corpus/Literature notes/Privileged Access Management.md
+++ b/Corpus/Information Security/Privileged Access Management.md
@@ -2,7 +2,7 @@
Related:
- "[a-8.2-Privileged-access-rights](../Standards/ISO27x/OST/27002/EN/a-8.2-Privileged-access-rights.md)"
---
-
+
## What is Privileged Access Management?
September 24, 2020 • 2 minute read
diff --git a/Corpus/Sparks/Ransomware Playbook.md b/Corpus/Information Security/Ransomware Playbook.md
similarity index 99%
rename from Corpus/Sparks/Ransomware Playbook.md
rename to Corpus/Information Security/Ransomware Playbook.md
index 3ac0fc6..57d894f 100644
--- a/Corpus/Sparks/Ransomware Playbook.md
+++ b/Corpus/Information Security/Ransomware Playbook.md
@@ -5,7 +5,7 @@ Also see:
See also:
- [a-5.30-ICT-readiness-for-business-continuity](../Standards/ISO27x/OST/27002/EN/a-5.30-ICT-readiness-for-business-continuity.md)
- [BCP_Bedrijfscontinuïteitsplanning](../📚️%20Literature%20notes/BCP_Bedrijfscontinuïteitsplanning.md)
-- [Disaster Recovery Planning](ISMS/Disaster%20Recovery%20Planning.md)
+- [Disaster Recovery Planning](../ISMS/Disaster%20Recovery%20Planning.md)
3 Phases:
- Prevention
diff --git a/Corpus/Literature notes/BAD-pyramid-miessler.png b/Corpus/Information Security/Red Blue Purple-pyramid-miessler.png
similarity index 100%
rename from Corpus/Literature notes/BAD-pyramid-miessler.png
rename to Corpus/Information Security/Red Blue Purple-pyramid-miessler.png
diff --git a/Corpus/Literature notes/Red, Blue, and Purple Teams.md b/Corpus/Information Security/Red, Blue, and Purple Teams.md
similarity index 95%
rename from Corpus/Literature notes/Red, Blue, and Purple Teams.md
rename to Corpus/Information Security/Red, Blue, and Purple Teams.md
index b227835..bf6aa9e 100644
--- a/Corpus/Literature notes/Red, Blue, and Purple Teams.md
+++ b/Corpus/Information Security/Red, Blue, and Purple Teams.md
@@ -1,4 +1,5 @@
# Red, Blue, and Purple Teams
+
By Daniel Miessler
[Source](https://danielmiessler.com/study/red-blue-purple-teams/), retrieved December 23, 2021
@@ -6,7 +7,7 @@ By Daniel Miessler
- **Blue Team** is the internal security team that defends against attackers. Should be distinguished from standard security operations teams, as most do not have a mentality of constant vigilance against attack.
- **Purple team** integrates the defensive tactics and controls from the Blue Team with the threats and vulnerabilities found by the Red Team. Exists to ensure and maximize the effectiveness of both. Not a team as such, but rather a permanent dynamic between Red and Blue.
-
+
Related:
[ISO 27001 A.14.2.8 System security testing](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A.14.2.8%20System%20security%20testing.md)
diff --git a/Corpus/Literature notes/Assets, Vulnerabilities, Threats, Risks.md b/Corpus/Information Security/Risks/Assets, Vulnerabilities, Threats, Risks.md
similarity index 86%
rename from Corpus/Literature notes/Assets, Vulnerabilities, Threats, Risks.md
rename to Corpus/Information Security/Risks/Assets, Vulnerabilities, Threats, Risks.md
index b6a14ae..0f98dbe 100644
--- a/Corpus/Literature notes/Assets, Vulnerabilities, Threats, Risks.md
+++ b/Corpus/Information Security/Risks/Assets, Vulnerabilities, Threats, Risks.md
@@ -9,9 +9,9 @@ A risk occurs when there's a chance of an asset being compromised, through the e
Adapted from source: [Vigilant Software](https://www.vigilantsoftware.co.uk/blog/risk-terminology-understanding-assets-threats-and-vulnerabilities), retrieved December 8, 2021.
[About Assets](../Sparks/About%20Assets.md)
-[Vulnerability 1](../Sparks/Vulnerability%201.md)
-[Threat](Threat.md)
-[Risks](../Sparks/Risks.md)
+[Vulnerability](Vulnerability.md)
+[Threats MoC](Threats%20MoC.md)
+[Risks definitions](Risks%20definitions.md)
diff --git a/Corpus/Literature notes/Attack Surface Analysis.md b/Corpus/Information Security/Risks/Attack Surface Analysis.md
similarity index 96%
rename from Corpus/Literature notes/Attack Surface Analysis.md
rename to Corpus/Information Security/Risks/Attack Surface Analysis.md
index 1016037..fa576e9 100644
--- a/Corpus/Literature notes/Attack Surface Analysis.md
+++ b/Corpus/Information Security/Risks/Attack Surface Analysis.md
@@ -1,3 +1,5 @@
+# Attack Surface Analysis
+
NIST Definition of Attack Surface: "The set of points on the boundary of a system, a system element, or an environment where an attacker can try to enter, cause an effect on, or extract data from, that system, system element, or environment." ([source](https://csrc.nist.gov/glossary/term/attack_surface))
diff --git a/Corpus/Literature notes/Benefits of threat intelligence across the three layers.md b/Corpus/Information Security/Risks/Benefits of threat intelligence across the three layers.md
similarity index 90%
rename from Corpus/Literature notes/Benefits of threat intelligence across the three layers.md
rename to Corpus/Information Security/Risks/Benefits of threat intelligence across the three layers.md
index 4abbb3f..4217fe7 100644
--- a/Corpus/Literature notes/Benefits of threat intelligence across the three layers.md
+++ b/Corpus/Information Security/Risks/Benefits of threat intelligence across the three layers.md
@@ -3,7 +3,7 @@ Source: [Recorded Future website](https://www.recordedfuture.com/iso-27002-threa
Published: February 4, 2022
Retrieved: March 7, 2022
-Jake Munroe lists some uses of threat intelligence on the three layers as identified in [a-5.7-Threat-intelligence](../Standards/ISO27x/OST/27002/EN/a-5.7-Threat-intelligence.md):
+Jake Munroe lists some uses of threat intelligence on the three layers as identified in [a-5.7-Threat-intelligence](../../Standards/ISO27x/OST/27002/EN/a-5.7-Threat-intelligence.md):
Strategic:
- setting priorities and making informed security architecture and budget decisions
diff --git a/Corpus/Sparks/Information Security/CRF-Threat-Taxonomy-v2024.pdf b/Corpus/Information Security/Risks/CRF-Threat-Taxonomy-v2024.pdf
similarity index 100%
rename from Corpus/Sparks/Information Security/CRF-Threat-Taxonomy-v2024.pdf
rename to Corpus/Information Security/Risks/CRF-Threat-Taxonomy-v2024.pdf
diff --git a/Corpus/Literature notes/Factor Analysis of Information Risk (FAIR).md b/Corpus/Information Security/Risks/Factor Analysis of Information Risk (FAIR).md
similarity index 85%
rename from Corpus/Literature notes/Factor Analysis of Information Risk (FAIR).md
rename to Corpus/Information Security/Risks/Factor Analysis of Information Risk (FAIR).md
index 3690157..8c1b07d 100644
--- a/Corpus/Literature notes/Factor Analysis of Information Risk (FAIR).md
+++ b/Corpus/Information Security/Risks/Factor Analysis of Information Risk (FAIR).md
@@ -5,5 +5,5 @@ FAIR principles can be applied "to clarify organizational risk appetite and tole
[Source](https://www.fairinstitute.org/blog/cyber-risk-management-establishing-a-blueprint-with-fair)
Related:
-- [Risk appetite 1](../Sparks/Risk%20appetite%201.md)
+- [Risk appetite definitions](Risk%20appetite%20definitions.md)
- [Risk tolerance](..//Risk%20tolerance.md)
diff --git a/Corpus/Literature notes/Managing Risks - A New Framework.md b/Corpus/Information Security/Risks/Managing Risks - A New Framework.md
similarity index 97%
rename from Corpus/Literature notes/Managing Risks - A New Framework.md
rename to Corpus/Information Security/Risks/Managing Risks - A New Framework.md
index 4bc9205..a5980ac 100644
--- a/Corpus/Literature notes/Managing Risks - A New Framework.md
+++ b/Corpus/Information Security/Risks/Managing Risks - A New Framework.md
@@ -1,7 +1,3 @@
----
-Related:
- - "[Risk management](../Sparks/Risk%20management.md)"
----
# Managing Risks: A New Framework
by Robert S. Kaplan and Anette Mikes, June 2012
@@ -40,7 +36,7 @@ Rules about what to do and what not to do won’t help here. In fact, they usual
## Managing the different Risk Categories
### Managing Preventable Risks
-See: [Identifying and Managing Preventable Risks](../Sparks/Information%20Security/Identifying%20and%20Managing%20Preventable%20Risks.md)
+See: [Identifying and Managing Preventable Risks](../Identifying%20and%20Managing%20Preventable%20Risks.md)
### Managing Strategy Risks
Over the past 10 years of study, we’ve come across three distinct approaches to managing strategy risks. all three encourage employees to challenge existing assumptions and debate risk information. Which model is appropriate for a given firm depends largely on the context in which an organization operates.
diff --git a/Corpus/Sparks/OWASP Top 10 Web Application Security Risks.md b/Corpus/Information Security/Risks/OWASP Top 10 Web Application Security Risks.md
similarity index 100%
rename from Corpus/Sparks/OWASP Top 10 Web Application Security Risks.md
rename to Corpus/Information Security/Risks/OWASP Top 10 Web Application Security Risks.md
diff --git a/Corpus/Sparks/Open Group Risk Taxonomy Standard 3.01.pdf b/Corpus/Information Security/Risks/Open Group Risk Taxonomy Standard 3.01.pdf
similarity index 100%
rename from Corpus/Sparks/Open Group Risk Taxonomy Standard 3.01.pdf
rename to Corpus/Information Security/Risks/Open Group Risk Taxonomy Standard 3.01.pdf
diff --git a/Corpus/Literature notes/RAVIB dreigingen en maatregelen 2017.xlsx b/Corpus/Information Security/Risks/RAVIB dreigingen en maatregelen 2017.xlsx
similarity index 100%
rename from Corpus/Literature notes/RAVIB dreigingen en maatregelen 2017.xlsx
rename to Corpus/Information Security/Risks/RAVIB dreigingen en maatregelen 2017.xlsx
diff --git a/Corpus/Sparks/Risico's uit de praktijk.md b/Corpus/Information Security/Risks/Risico's uit de praktijk.md
similarity index 98%
rename from Corpus/Sparks/Risico's uit de praktijk.md
rename to Corpus/Information Security/Risks/Risico's uit de praktijk.md
index a534cf5..087b384 100644
--- a/Corpus/Sparks/Risico's uit de praktijk.md
+++ b/Corpus/Information Security/Risks/Risico's uit de praktijk.md
@@ -6,7 +6,7 @@ Search terms: Human Risk Human Error Breaches Incidents
## Voorbeelden van incidenten door menselijk handelen
-[Als Word file, geanonimiseerd](Voorbeelden%20van%20incidenten%20door%20menselijk%20handelen.docx)
+[Als Word file, geanonimiseerd](../Voorbeelden%20van%20incidenten%20door%20menselijk%20handelen.docx)
March 2025: Google lets Chromecast SSL certificate expire.
https://www.pcworld.com/article/2632196/some-older-chromecasts-are-suddenly-untrusted-cant-cast-anymore.html
diff --git a/Corpus/Sparks/Risk Register Format.md b/Corpus/Information Security/Risks/Risk Register Format.md
similarity index 94%
rename from Corpus/Sparks/Risk Register Format.md
rename to Corpus/Information Security/Risks/Risk Register Format.md
index f89d7b2..8090d72 100644
--- a/Corpus/Sparks/Risk Register Format.md
+++ b/Corpus/Information Security/Risks/Risk Register Format.md
@@ -1,6 +1,6 @@
-According to ChatGPT on October 8, 2024
+# Risk Register Format
-*Prompt: what would be the elements in an information security risk register? Make it compliant with ISO 27002*
+According to ChatGPT on October 8, 2024 – Prompt: `what would be the elements in an information security risk register? Make it compliant with ISO 27002`
An information security risk register compliant with ISO/IEC 27002 is a key tool for managing and documenting risks associated with information security within an organization. ISO/IEC 27002 provides guidelines for organizational information security standards and information security management practices. Below are the elements typically found in a risk register aligned with these guidelines:
diff --git a/Corpus/Sparks/Risk Register Template Hyperproof.xlsx b/Corpus/Information Security/Risks/Risk Register Template Hyperproof.xlsx
similarity index 100%
rename from Corpus/Sparks/Risk Register Template Hyperproof.xlsx
rename to Corpus/Information Security/Risks/Risk Register Template Hyperproof.xlsx
diff --git a/Corpus/Sparks/Risk appetite 1.md b/Corpus/Information Security/Risks/Risk appetite definitions.md
similarity index 74%
rename from Corpus/Sparks/Risk appetite 1.md
rename to Corpus/Information Security/Risks/Risk appetite definitions.md
index 16b25ae..d7d5b6c 100644
--- a/Corpus/Sparks/Risk appetite 1.md
+++ b/Corpus/Information Security/Risks/Risk appetite definitions.md
@@ -1,3 +1,5 @@
+# Risk appetite definitions
+
Risk appetite is "The types and amount of risk, on a broad level, an organization is willing to accept in its pursuit of value." – [NIST](https://csrc.nist.gov/glossary/term/risk_appetite)
According to the PMBOK® Guide [(source)](http://cybersecurity-materiality.com/):
@@ -10,6 +12,6 @@ Articulate the risk appetite to:
- help guide risk and reward decision-making
- help to embed the right risk culture
-See [Topical InfoSec Kanban’s](../Literature%20notes/Topical%20InfoSec%20Kanban’s.md) for inspiration.
+See [Collection of Kanban boards on information security topics](../Collection%20of%20Kanban%20boards%20on%20information%20security%20topics.md) for inspiration.
See also [Risk tolerance](..//Risk%20tolerance.md)
\ No newline at end of file
diff --git a/Corpus/Information Security/Risks/Risk identification.md b/Corpus/Information Security/Risks/Risk identification.md
new file mode 100644
index 0000000..5b00d22
--- /dev/null
+++ b/Corpus/Information Security/Risks/Risk identification.md
@@ -0,0 +1,7 @@
+# Three Risk Identification Questions
+
+Three Risk Identification Questions You Should Be Asking – according to this FAIR institute [blogpost](https://www.fairinstitute.org/blog/3-risk-identification-questions-you-should-be-asking):
+
+1. Where are we experiencing loss today?
+2. What keeps you up at night?
+3. What are our most valuable assets, and what could happen to them that would lead to loss for our organization?
diff --git a/Corpus/Sparks/Risk inventories.md b/Corpus/Information Security/Risks/Risk inventories.md
similarity index 61%
rename from Corpus/Sparks/Risk inventories.md
rename to Corpus/Information Security/Risks/Risk inventories.md
index 4b86c91..c0a19f2 100644
--- a/Corpus/Sparks/Risk inventories.md
+++ b/Corpus/Information Security/Risks/Risk inventories.md
@@ -1,8 +1,10 @@
+# Risk Inventories
+
See also:
- [Threat Catalogues](../📚️%20Literature%20notes/Threat%20Catalogues.md)
-- [Software vulnerability databases](../Literature%20notes/Software%20vulnerability%20databases.md)
+- [Software vulnerability databases](Software%20vulnerability%20databases.md)
-[NEN7510 Risicos](../Standards/ISO27x/OST/7510/NEN7510%20Risicos.md)
+[NEN7510 Risicos](../../Standards/ISO27x/OST/7510/NEN7510%20Risicos.md)
Zie ook:
- map Risk and Threat modelling op icloud drive
@@ -10,18 +12,18 @@ Zie ook:
- Bijlage 2-4 van BC 5701 Risicomanagement (cursusmap)
[CSIAC evaluation of threat taxonomies](https://csiac.org/articles/evaluation-of-comprehensive-taxonomies-for-information-technology-threats/)
-[SCF Risk Categories for Establishing a Risk Catalog](../Standards/other/SCF%20Risk%20Categories%20for%20Establishing%20a%20Risk%20Catalog.md)
-[SCF Threat Categories for Establishing a Threat Catalog](../Standards/other/SCF%20Threat%20Categories%20for%20Establishing%20a%20Threat%20Catalog.md)
+[SCF Risk Categories for Establishing a Risk Catalog](../../Standards/other/SCF%20Risk%20Categories%20for%20Establishing%20a%20Risk%20Catalog.md)
+[SCF Threat Categories for Establishing a Threat Catalog](../../Standards/other/SCF%20Threat%20Categories%20for%20Establishing%20a%20Threat%20Catalog.md)
[](Taxonomy%20of%20Operational%20Cyber%20Security%20Risks.pdf)
-[CRF Threat Taxonomy 2024](Information%20Security/CRF-Threat-Taxonomy-v2024.pdf)
+[CRF Threat Taxonomy 2024](CRF-Threat-Taxonomy-v2024.pdf)
[Enisa Threat Taxonomy](https://www.enisa.europa.eu/topics/cyber-threats/threats-and-trends/enisa-threat-landscape/threat-taxonomy)
[MITRE ATT&CK](https://attack.mitre.org)
[MITRE D3FEND](https://d3fend.mitre.org)
[](Open%20Group%20Risk%20Taxonomy%20Standard%203.01.pdf)
-[OWASP Top 10 CI-CD Security Risks](../Standards/other/OWASP%20Top%2010%20CI-CD%20Security%20Risks.md)
+[OWASP Top 10 CI-CD Security Risks](../../Standards/other/OWASP%20Top%2010%20CI-CD%20Security%20Risks.md)
[Splunk Top 50 Security threats](https://www.splunk.com/pdfs/ebooks/top-50-security-threats.pdf)
-[Austin Songer's risk catalogue](https://songer.pro/risk-catalogue/), seemingly based on SCF's [SCF's SP-RMM Risk Management Model](SP-RMM%20Risk%20Management%20Model.pdf), which is also used in the [Risk Register Template Hyperproof](Risk%20Register%20Template%20Hyperproof.xlsx).
+[Austin Songer's risk catalogue](https://songer.pro/risk-catalogue/), seemingly based on SCF's [SCF's SP-RMM Risk Management Model](../../Standards/SP-RMM%20Risk%20Management%20Model.pdf), which is also used in the [Risk Register Template Hyperproof](Risk%20Register%20Template%20Hyperproof.xlsx).
[Risks of using personal email accounts in the workplace](Risks%20of%20using%20personal%20email%20accounts%20in%20the%20workplace.md)
diff --git a/Corpus/Sparks/Risk management.md b/Corpus/Information Security/Risks/Risk management.md
similarity index 99%
rename from Corpus/Sparks/Risk management.md
rename to Corpus/Information Security/Risks/Risk management.md
index adb6c6a..d287ba0 100644
--- a/Corpus/Sparks/Risk management.md
+++ b/Corpus/Information Security/Risks/Risk management.md
@@ -1,4 +1,5 @@
# Risk Management
+
#security/isms/risk_mgt
https://nvlpubs.nist.gov/nistpubs/ir/2020/NIST.IR.8286.pdf
diff --git a/Corpus/Sparks/Risk ownership.md b/Corpus/Information Security/Risks/Risk ownership.md
similarity index 91%
rename from Corpus/Sparks/Risk ownership.md
rename to Corpus/Information Security/Risks/Risk ownership.md
index f30455e..020e1f4 100644
--- a/Corpus/Sparks/Risk ownership.md
+++ b/Corpus/Information Security/Risks/Risk ownership.md
@@ -1,6 +1,6 @@
# Risk Ownership
-See also [Asset ownership](Asset%20ownership.md), [Control ownership](ISMS/Control%20ownership.md)
+See also [Asset ownership](Asset%20ownership.md), [Control ownership](../../ISMS/Control%20ownership.md)
**ISO 27001 explicit mention of risk ownership:**
- C 6.1.2 c2: Risks should have an owner
@@ -19,4 +19,4 @@ Risk ownership can be separated from asset ownership, when the asset owner has n
The risk ownership can then be assigned to a third party, for example a compliance officer.
-See also [Transfer in Risk Treatment](../Literature%20notes/Transfer%20in%20Risk%20Treatment.md).
\ No newline at end of file
+See also [Transfer in Risk Treatment](../../ISMS/Transfer%20in%20Risk%20Treatment.md).
\ No newline at end of file
diff --git a/Corpus/Sparks/Risk prioritization.md b/Corpus/Information Security/Risks/Risk prioritization.md
similarity index 100%
rename from Corpus/Sparks/Risk prioritization.md
rename to Corpus/Information Security/Risks/Risk prioritization.md
diff --git a/Corpus/Sparks/Risk tolerance.md b/Corpus/Information Security/Risks/Risk tolerance.md
similarity index 88%
rename from Corpus/Sparks/Risk tolerance.md
rename to Corpus/Information Security/Risks/Risk tolerance.md
index 8927e58..99edae5 100644
--- a/Corpus/Sparks/Risk tolerance.md
+++ b/Corpus/Information Security/Risks/Risk tolerance.md
@@ -6,5 +6,5 @@ NIST gives [several definitions](https://csrc.nist.gov/glossary/term/risk_tolera
"The level of risk or the degree of uncertainty that is acceptable to an organization."
-See also [Risk appetite 1](Risk%20appetite%201.md)
+See also [Risk appetite definitions](Risk%20appetite%20definitions.md)
diff --git a/Corpus/Sparks/Risk treatment.md b/Corpus/Information Security/Risks/Risk treatment.md
similarity index 90%
rename from Corpus/Sparks/Risk treatment.md
rename to Corpus/Information Security/Risks/Risk treatment.md
index e0f1e30..9ef92cb 100644
--- a/Corpus/Sparks/Risk treatment.md
+++ b/Corpus/Information Security/Risks/Risk treatment.md
@@ -15,5 +15,5 @@ PMP Concepts ([source](https://www.pmlearningsolutions.com/blog/announcement-ppm
* Transfer – shift the impact to a 3rd party
* Mitigate – decrease the probability or impact
-See also [Examples of Risk Avoidance](Information%20Security/Examples%20of%20Risk%20Avoidance.md).
+See also [Examples of Risk Avoidance](../Examples%20of%20Risk%20Avoidance.md).
diff --git a/Corpus/Sparks/Risk-Based Authentication.md b/Corpus/Information Security/Risks/Risk-Based Authentication.md
similarity index 59%
rename from Corpus/Sparks/Risk-Based Authentication.md
rename to Corpus/Information Security/Risks/Risk-Based Authentication.md
index 2dc78b2..249e838 100644
--- a/Corpus/Sparks/Risk-Based Authentication.md
+++ b/Corpus/Information Security/Risks/Risk-Based Authentication.md
@@ -1,3 +1,3 @@
-Related: [a-5.17-Authentication-information](../Standards/ISO27x/OST/27002/EN/a-5.17-Authentication-information.md)
+Related: [a-5.17-Authentication-information](../../Standards/ISO27x/OST/27002/EN/a-5.17-Authentication-information.md)
Risk-Based Authentication (RBA) takes the normal user patterns into account (like location, devices, etc.) and requests extra authentication when abnormal activities occur.
diff --git a/Corpus/Sparks/Risk_Assessment_Process.gif b/Corpus/Information Security/Risks/Risk_Assessment_Process.gif
similarity index 100%
rename from Corpus/Sparks/Risk_Assessment_Process.gif
rename to Corpus/Information Security/Risks/Risk_Assessment_Process.gif
diff --git a/Corpus/Sparks/Risks.md b/Corpus/Information Security/Risks/Risks definitions.md
similarity index 85%
rename from Corpus/Sparks/Risks.md
rename to Corpus/Information Security/Risks/Risks definitions.md
index d7aac35..dd8092b 100644
--- a/Corpus/Sparks/Risks.md
+++ b/Corpus/Information Security/Risks/Risks definitions.md
@@ -1,13 +1,15 @@
+# Risk definitions
+
[Assets, Vulnerabilities, Threats, Risks](Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
-[Vulnerability 1](Vulnerability%201.md)
-[Information security concepts MoC](../Information%20security%20concepts%20MoC.md)
+[Vulnerability](Vulnerability.md)
+[_Information security concepts MoC](../_Information%20security%20concepts%20MoC.md)
[Assets, Vulnerabilities, Threats, Risks](../📚️%20Literature%20notes/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
See also slide decks made for workshop sessions. Those for Kaliber, Nedap and Networking4AL are the most recent.
-See also [Risk appetite 1](Risk%20appetite%201.md)
-See also [Classificatie van risico's](ISMS/Classificatie%20van%20risico's.md)
+See also [Risk appetite definitions](Risk%20appetite%20definitions.md)
+See also [Classificatie van risico's](../../ISMS/Classificatie%20van%20risico's.md)
## Definitions
[Source](http://cybersecurity-materiality.com/)
diff --git a/Corpus/Sparks/Risks of using personal email accounts in the workplace.md b/Corpus/Information Security/Risks/Risks of using personal email accounts in the workplace.md
similarity index 100%
rename from Corpus/Sparks/Risks of using personal email accounts in the workplace.md
rename to Corpus/Information Security/Risks/Risks of using personal email accounts in the workplace.md
diff --git a/Corpus/Sparks/Risks vs Threats vs Vulnerabilities SCF diagram.jpg b/Corpus/Information Security/Risks/Risks vs Threats vs Vulnerabilities SCF diagram.jpg
similarity index 100%
rename from Corpus/Sparks/Risks vs Threats vs Vulnerabilities SCF diagram.jpg
rename to Corpus/Information Security/Risks/Risks vs Threats vs Vulnerabilities SCF diagram.jpg
diff --git a/Corpus/Sparks/Risks vs Threats vs Vulnerabilities.md b/Corpus/Information Security/Risks/Risks vs Threats vs Vulnerabilities.md
similarity index 100%
rename from Corpus/Sparks/Risks vs Threats vs Vulnerabilities.md
rename to Corpus/Information Security/Risks/Risks vs Threats vs Vulnerabilities.md
diff --git a/Corpus/Attachments/SANS Creating a threat profile.pdf b/Corpus/Information Security/Risks/SANS Creating a threat profile.pdf
similarity index 100%
rename from Corpus/Attachments/SANS Creating a threat profile.pdf
rename to Corpus/Information Security/Risks/SANS Creating a threat profile.pdf
diff --git a/Corpus/Information Security/Risks/Security Threat Modeling.md b/Corpus/Information Security/Risks/Security Threat Modeling.md
new file mode 100644
index 0000000..a70de90
--- /dev/null
+++ b/Corpus/Information Security/Risks/Security Threat Modeling.md
@@ -0,0 +1,11 @@
+# Security Threat Modeling
+
+[CISSP_OSG_Chapter_14](../../Standards/CISSP/CISSP_OSG_Chapter_14.md#Understanding%20access%20control%20attacks)
+
+https://insights.sei.cmu.edu/blog/threat-modeling-12-available-methods/
+
+Related:
+ - [Create a threat analysis chatbot](../../Various/Create%20a%20threat%20analysis%20chatbot.md)
+
+
+
\ No newline at end of file
diff --git a/Corpus/Sparks/Shadow IT risks.md b/Corpus/Information Security/Risks/Shadow IT risks.md
similarity index 88%
rename from Corpus/Sparks/Shadow IT risks.md
rename to Corpus/Information Security/Risks/Shadow IT risks.md
index 204747f..29ed965 100644
--- a/Corpus/Sparks/Shadow IT risks.md
+++ b/Corpus/Information Security/Risks/Shadow IT risks.md
@@ -1,12 +1,12 @@
See also:
-- [Cloud Service Risk Mitigation Roadmap](Policy%20examples/Cloud%20Service%20Risk%20Mitigation%20Roadmap.md)
-- [Shadow IT Policy for Responsible Technology Adoption](Shadow%20IT%20Policy%20for%20Responsible%20Technology%20Adoption.md)
-- [Cloud Service Risk Assessment Guide](Policy%20examples/Cloud%20Service%20Risk%20Assessment%20Guide.md)
-- [Cloud Service Approval Process](Policy%20examples/Cloud%20Service%20Approval%20Process.md)
-- [Cloud Service Employee Guidelines](Policy%20examples/Cloud%20Service%20Employee%20Guidelines.md)
-- [Surveys on Shadow IT usage](Surveys%20on%20Shadow%20IT%20usage.md)
+- [Cloud Service Risk Mitigation Roadmap](../../ISMS/Policy%20examples/Cloud%20Service%20Risk%20Mitigation%20Roadmap.md)
+- [Shadow IT Policy for Responsible Technology Adoption](../../ISMS/Policy%20examples/Shadow%20IT%20Policy%20for%20Responsible%20Technology%20Adoption.md)
+- [Cloud Service Risk Assessment Guide](../../ISMS/Policy%20examples/Cloud%20Service%20Risk%20Assessment%20Guide.md)
+- [Cloud Service Approval Process](../../ISMS/Policy%20examples/Cloud%20Service%20Approval%20Process.md)
+- [Cloud Service Employee Guidelines](../../ISMS/Policy%20examples/Cloud%20Service%20Employee%20Guidelines.md)
+- [Surveys on Shadow IT usage](../Surveys%20on%20Shadow%20IT%20usage.md)
-- [Dutch versions WiP](../../Clients/Humankind/Beleid%20voor%20Gebruik%20van%20SaaS%20HK.md)
+- [Dutch versions WiP](../../../Clients/Humankind/Beleid%20voor%20Gebruik%20van%20SaaS%20HK.md)
# Risks of Uncontrolled Cloud Software Usage
diff --git a/Corpus/Literature notes/Software vulnerability databases.md b/Corpus/Information Security/Risks/Software vulnerability databases.md
similarity index 100%
rename from Corpus/Literature notes/Software vulnerability databases.md
rename to Corpus/Information Security/Risks/Software vulnerability databases.md
diff --git a/Corpus/Attachments/TLP_Impact_matrix_NL.xlsx b/Corpus/Information Security/Risks/TLP_Impact_matrix_NL.xlsx
similarity index 100%
rename from Corpus/Attachments/TLP_Impact_matrix_NL.xlsx
rename to Corpus/Information Security/Risks/TLP_Impact_matrix_NL.xlsx
diff --git a/Corpus/Literature notes/Table 1 for Managing Risks - A New Framework 1.png b/Corpus/Information Security/Risks/Table 1 for Managing Risks - A New Framework 1.png
similarity index 100%
rename from Corpus/Literature notes/Table 1 for Managing Risks - A New Framework 1.png
rename to Corpus/Information Security/Risks/Table 1 for Managing Risks - A New Framework 1.png
diff --git a/Corpus/Attachments/Table 1 for Managing Risks - A New Framework.png b/Corpus/Information Security/Risks/Table 1 for Managing Risks - A New Framework.png
similarity index 100%
rename from Corpus/Attachments/Table 1 for Managing Risks - A New Framework.png
rename to Corpus/Information Security/Risks/Table 1 for Managing Risks - A New Framework.png
diff --git a/Corpus/Sparks/Taxonomy of Operational Cyber Security Risks.pdf b/Corpus/Information Security/Risks/Taxonomy of Operational Cyber Security Risks.pdf
similarity index 100%
rename from Corpus/Sparks/Taxonomy of Operational Cyber Security Risks.pdf
rename to Corpus/Information Security/Risks/Taxonomy of Operational Cyber Security Risks.pdf
diff --git a/Corpus/Literature notes/Threat Catalogues.md b/Corpus/Information Security/Risks/Threat Catalogues.md
similarity index 70%
rename from Corpus/Literature notes/Threat Catalogues.md
rename to Corpus/Information Security/Risks/Threat Catalogues.md
index 012f5f1..473f323 100644
--- a/Corpus/Literature notes/Threat Catalogues.md
+++ b/Corpus/Information Security/Risks/Threat Catalogues.md
@@ -1,4 +1,4 @@
-See also [Risk inventories](../Sparks/Risk%20inventories.md)
+See also [Risk inventories](Risk%20inventories.md)
https://cs4e.pages.labranet.jamk.fi/ooc/30-Cyber_Attack/01-Threats_and_Attacks/
@@ -10,8 +10,8 @@ Austin Songer has published a [threat catalogue](https://songer.pro/threat-catal
[Bron: VNG](https://www.informatiebeveiligingsdienst.nl/product/handreiking-diepgaande-risicoanalyse-methode-gemeenten/)
MAPGOOD = Mensen, Apparatuur, Programmatuur, Gegevens, Organisatie, Omgeving en Diensten
-
-
+
+
**RAVIB**
[Bron](https://www.ravib.nl/files/Offline%2520dreigingsanalyse.ods)
@@ -24,5 +24,5 @@ LINDDUN GO
OWASP
RISMAN
-Data Maturity Models, zie [Data maturity model NL overheid](../Standards/Data%20maturity%20model%20NL%20overheid.md)
+Data Maturity Models, zie [Data maturity model NL overheid](../../Standards/Data%20maturity%20model%20NL%20overheid.md)
diff --git a/Corpus/Literature notes/Threat scenario elements.jpeg b/Corpus/Information Security/Risks/Threat scenario elements.jpeg
similarity index 100%
rename from Corpus/Literature notes/Threat scenario elements.jpeg
rename to Corpus/Information Security/Risks/Threat scenario elements.jpeg
diff --git a/Corpus/Information Security/Risks/Threats MoC.md b/Corpus/Information Security/Risks/Threats MoC.md
new file mode 100644
index 0000000..18f112a
--- /dev/null
+++ b/Corpus/Information Security/Risks/Threats MoC.md
@@ -0,0 +1,12 @@
+# Threats MoC
+
+[Risks vs Threats vs Vulnerabilities](Risks%20vs%20Threats%20vs%20Vulnerabilities.md)
+
+[Threat Intelligence](../Threat%20Intelligence.md)
+[Threat intelligence sources](../Threat%20intelligence%20sources.md)
+[Threat Modeling](Security%20Threat%20Modeling.md)
+[Threat Catalogues](Threat%20Catalogues.md)
+ [SCF Threat Categories for Establishing a Threat Catalog](../../Standards/other/SCF%20Threat%20Categories%20for%20Establishing%20a%20Threat%20Catalog.md)
+[Privacy Threat Modeling](../../Various/Privacy%20Threat%20Modeling.md)
+[Security Threat Modeling](Security%20Threat%20Modeling.md)
+
diff --git a/Corpus/Attachments/Toreon-Threat-Modeling-Playbook-v1.pdf b/Corpus/Information Security/Risks/Toreon-Threat-Modeling-Playbook-v1.pdf
similarity index 100%
rename from Corpus/Attachments/Toreon-Threat-Modeling-Playbook-v1.pdf
rename to Corpus/Information Security/Risks/Toreon-Threat-Modeling-Playbook-v1.pdf
diff --git a/Corpus/Literature notes/Treating vendors as a risk.md b/Corpus/Information Security/Risks/Treating vendors as a risk.md
similarity index 85%
rename from Corpus/Literature notes/Treating vendors as a risk.md
rename to Corpus/Information Security/Risks/Treating vendors as a risk.md
index 0b11374..b6bb420 100644
--- a/Corpus/Literature notes/Treating vendors as a risk.md
+++ b/Corpus/Information Security/Risks/Treating vendors as a risk.md
@@ -10,6 +10,6 @@ Assume a breach will happen and take preventive measures to reduce the impact, b
Related:
- [Awareness](../Sparks/Awareness.md)
-- [Vendor security MoC](../Sparks/Vendor%20security%20MoC.md)
-- [Risk analysis](../Sparks/Risk%20analysis.md)
+- [Vendor security MoC](../../ISMS/Vendor%20security%20MoC.md)
+- [Risk analysis methods](../../ISMS/Risk%20analysis%20methods.md)
diff --git a/Corpus/Sparks/Vulnerability 1.md b/Corpus/Information Security/Risks/Vulnerability.md
similarity index 53%
rename from Corpus/Sparks/Vulnerability 1.md
rename to Corpus/Information Security/Risks/Vulnerability.md
index 93d1376..f0428f2 100644
--- a/Corpus/Sparks/Vulnerability 1.md
+++ b/Corpus/Information Security/Risks/Vulnerability.md
@@ -7,12 +7,12 @@ See also:
- [Assets](..//Assets.md)
- [Risks](..//Risks.md)
- [Threat](../📚️%20Literature%20notes/Threat.md)
-- [Vulnerability Disclosure Policy](Vulnerability%20Disclosure%20Policy.md)
-- [Dealing with a reported application vulnerability](Information%20Security/Dealing%20with%20a%20reported%20application%20vulnerability.md)
-- [Software vulnerability databases](../Literature%20notes/Software%20vulnerability%20databases.md)
+- [Vulnerability Disclosure Policy](../../ISMS/Policy%20examples/Vulnerability%20Disclosure%20Policy.md)
+- [Dealing with a reported application vulnerability](../Dealing%20with%20a%20reported%20application%20vulnerability.md)
+- [Software vulnerability databases](Software%20vulnerability%20databases.md)
- (https://www.google.nl/search?q=software+vulnerability+databases)
- [API Endpoint Vulnerabilities](https://www.reblaze.com/blog/api-security/how-hackers-attack-your-mobile-apps-part-3-api-endpoint-vulnerabilities/)
- [NSA and CISA publish hardening guides](https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/2716980/nsa-cisa-release-kubernetes-hardening-guidance/utm_source/nsa-cisa-release-kubernetes-hardening-guidance/)
-- [ISO 27001 A 12.6 Technical vulnerability management](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2012.6%20Technical%20vulnerability%20management.md)
-- [a-8.8-Management-of-technical-vulnerabilities](../Standards/ISO27x/OST/27002/EN/a-8.8-Management-of-technical-vulnerabilities.md)
+- [ISO 27001 A 12.6 Technical vulnerability management](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2012.6%20Technical%20vulnerability%20management.md)
+- [a-8.8-Management-of-technical-vulnerabilities](../../Standards/ISO27x/OST/27002/EN/a-8.8-Management-of-technical-vulnerabilities.md)
diff --git a/Corpus/Attachments/risk-matrix-example.numbers b/Corpus/Information Security/Risks/risk-matrix-example.numbers
similarity index 100%
rename from Corpus/Attachments/risk-matrix-example.numbers
rename to Corpus/Information Security/Risks/risk-matrix-example.numbers
diff --git a/Corpus/Literature notes/Roles in Identity and Access Management (IAM).md b/Corpus/Information Security/Roles in Identity and Access Management (IAM).md
similarity index 97%
rename from Corpus/Literature notes/Roles in Identity and Access Management (IAM).md
rename to Corpus/Information Security/Roles in Identity and Access Management (IAM).md
index ee59795..385f332 100644
--- a/Corpus/Literature notes/Roles in Identity and Access Management (IAM).md
+++ b/Corpus/Information Security/Roles in Identity and Access Management (IAM).md
@@ -1,4 +1,6 @@
-See also: [Access Control Models](../Sparks/ISMS/Access%20Control%20Models.md)
+# Roles in Identity and Access Management (IAM)
+
+See also: [Access Control Models](../ISMS/Access%20Control%20Models.md)
## Rollen in autorisatiebeheer
diff --git a/Corpus/Literature notes/Roles in Information security management.md b/Corpus/Information Security/Roles in Information security management.md
similarity index 94%
rename from Corpus/Literature notes/Roles in Information security management.md
rename to Corpus/Information Security/Roles in Information security management.md
index 32cb0e5..9b8aa4f 100644
--- a/Corpus/Literature notes/Roles in Information security management.md
+++ b/Corpus/Information Security/Roles in Information security management.md
@@ -10,10 +10,10 @@ For examples of defined roles, see:
Related:
- [Asset ownership](../Sparks/Asset%20ownership.md)
-- [Control ownership](../Sparks/ISMS/Control%20ownership.md)
-- [Risk ownership](../Sparks/Risk%20ownership.md)
-- [Segregation of Duties](Segregation%20of%20Duties.md)
-- [Access Control Models](../Sparks/ISMS/Access%20Control%20Models.md)
+- [Control ownership](../ISMS/Control%20ownership.md)
+- [Risk ownership](Risks/Risk%20ownership.md)
+- [Segregation of Duties](../ISMS/Segregation%20of%20Duties.md)
+- [Access Control Models](../ISMS/Access%20Control%20Models.md)
**Roles according to CISSP (p. 23 ev.):**
* Senior Manager: decides on policies, ultimately responsible.
diff --git a/Corpus/Sparks/Safeguard information in Transit.md b/Corpus/Information Security/Safeguard information in Transit.md
similarity index 99%
rename from Corpus/Sparks/Safeguard information in Transit.md
rename to Corpus/Information Security/Safeguard information in Transit.md
index 9ecde8a..95fbcc1 100644
--- a/Corpus/Sparks/Safeguard information in Transit.md
+++ b/Corpus/Information Security/Safeguard information in Transit.md
@@ -1,15 +1,7 @@
----
-tags:
- - measures
- - in_transit
- - "#infosec"
----
-
+# Safeguard information in transit
https://gemini.google.com/app/5252e842a604bd7a
-# Safeguard information in transit
-
Measures to safeguard information in transit are crucial to prevent unauthorized access, modification, or eavesdropping while data is being transferred between locations or systems.1 Here's a breakdown of key measures:
### 1. Encryption
diff --git a/Corpus/Literature notes/Scrum Roles, Artifacts and Events.md b/Corpus/Information Security/Scrum Roles, Artifacts and Events.md
similarity index 100%
rename from Corpus/Literature notes/Scrum Roles, Artifacts and Events.md
rename to Corpus/Information Security/Scrum Roles, Artifacts and Events.md
diff --git a/Corpus/Sparks/Migration and information security according to ChatGPT.md b/Corpus/Information Security/Securely migrating SaaS applications.md
similarity index 98%
rename from Corpus/Sparks/Migration and information security according to ChatGPT.md
rename to Corpus/Information Security/Securely migrating SaaS applications.md
index a3b9b63..c7a8f1b 100644
--- a/Corpus/Sparks/Migration and information security according to ChatGPT.md
+++ b/Corpus/Information Security/Securely migrating SaaS applications.md
@@ -1,3 +1,4 @@
+# Securely migrating SaaS applications
## Migration steps
*Prompt: what are the steps in migrating from one SaaS application to another?*
diff --git a/Corpus/Sparks/Service management system block diagram.png b/Corpus/Information Security/Service management system block diagram.png
similarity index 100%
rename from Corpus/Sparks/Service management system block diagram.png
rename to Corpus/Information Security/Service management system block diagram.png
diff --git a/Corpus/Literature notes/Seven Dimensions of Security Culture.md b/Corpus/Information Security/Seven Dimensions of Security Culture.md
similarity index 100%
rename from Corpus/Literature notes/Seven Dimensions of Security Culture.md
rename to Corpus/Information Security/Seven Dimensions of Security Culture.md
diff --git a/Corpus/Literature notes/Single Sign On (SSO).md b/Corpus/Information Security/Single Sign On (SSO).md
similarity index 97%
rename from Corpus/Literature notes/Single Sign On (SSO).md
rename to Corpus/Information Security/Single Sign On (SSO).md
index 604eb9d..61c1f7a 100644
--- a/Corpus/Literature notes/Single Sign On (SSO).md
+++ b/Corpus/Information Security/Single Sign On (SSO).md
@@ -20,7 +20,7 @@ For both users and IT administrators, securely handling thousands of accounts an
## SSO’s challenges
-- **Extra-strong passwords must be enforced.** If an SSO account is cracked, others under the same authentication can also be endangered. -> combine with [Multi-factor authentication](../Sparks/Multi-factor%20authentication.md)
+- **Extra-strong passwords must be enforced.** If an SSO account is cracked, others under the same authentication can also be endangered. -> combine with [Phishing-Resistant MFA](Phishing-Resistant%20MFA.md)
- **When SSO is down, access to all connected sites is stopped.** This is a big reason to exercise great care in choosing an SSO system. It must be exceptionally reliable and plans should be in place for dealing with breakdowns.
- **What’s more, when your identity provider goes down, your SSO does too.** The provider’s vulnerability to any kind of interruption becomes your vulnerability as well, and it is probably beyond your control. Once again, the choice of vendors is critical.
- **If a hacker breaches your identity provider user account, all your linked systems could be open to attack.** This can be a classic single point of failure and should be headed off in the planning process. On the plus side, high-quality identity providers have top-notch security.
diff --git a/Corpus/Sparks/Software due diligence.md b/Corpus/Information Security/Software due diligence.md
similarity index 100%
rename from Corpus/Sparks/Software due diligence.md
rename to Corpus/Information Security/Software due diligence.md
diff --git a/Corpus/Sparks/Sterke wachtwoorden in 2024.md b/Corpus/Information Security/Sterke wachtwoorden in 2024.md
similarity index 76%
rename from Corpus/Sparks/Sterke wachtwoorden in 2024.md
rename to Corpus/Information Security/Sterke wachtwoorden in 2024.md
index a3f08f1..5f9c046 100644
--- a/Corpus/Sparks/Sterke wachtwoorden in 2024.md
+++ b/Corpus/Information Security/Sterke wachtwoorden in 2024.md
@@ -1,6 +1,6 @@
# Sterke wachtwoorden in 2024
-[Cracking passwords in 2024](Information%20Security/Cracking%20passwords%20in%202024.md), HOW MUCH TIME DOES IT TAKE?
+[Cracking passwords in 2024](Cracking%20passwords%20in%202024.md), HOW MUCH TIME DOES IT TAKE?
**Three Random Words**
[NCSC Three Random Words](https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/three-random-words)
diff --git a/Corpus/Sparks/Surveys on Shadow IT usage.md b/Corpus/Information Security/Surveys on Shadow IT usage.md
similarity index 100%
rename from Corpus/Sparks/Surveys on Shadow IT usage.md
rename to Corpus/Information Security/Surveys on Shadow IT usage.md
diff --git a/Corpus/Sparks/Threat Intelligence.md b/Corpus/Information Security/Threat Intelligence.md
similarity index 71%
rename from Corpus/Sparks/Threat Intelligence.md
rename to Corpus/Information Security/Threat Intelligence.md
index 4ad675c..92b9e58 100644
--- a/Corpus/Sparks/Threat Intelligence.md
+++ b/Corpus/Information Security/Threat Intelligence.md
@@ -1,7 +1,7 @@
Primary ISO 27001 control: [5.7 Threat intelligence](../MoCs/ISO_27002_2022_5.7_MoC%20Threat%20intelligence.md)
Applied in:
-- [Clause 6.1.2](../MoCs/ISO_27001_2022_6.1.2_MoC%20Information%20security%20risk%20assessment.md) Information security risk assessment
+- [Clause 6.1.2](../ISMS/Qualifying%20vs%20quantifying%20risks.md) Information security risk assessment
Relevant to:
- asset management
diff --git a/Corpus/Sparks/Threat intelligence sources.md b/Corpus/Information Security/Threat intelligence sources.md
similarity index 100%
rename from Corpus/Sparks/Threat intelligence sources.md
rename to Corpus/Information Security/Threat intelligence sources.md
diff --git a/Corpus/Sparks/Time for brute force on passwords EN.png b/Corpus/Information Security/Time for brute force on passwords EN.png
similarity index 100%
rename from Corpus/Sparks/Time for brute force on passwords EN.png
rename to Corpus/Information Security/Time for brute force on passwords EN.png
diff --git a/Corpus/Sparks/Time for brute force on passwords NL.png b/Corpus/Information Security/Time for brute force on passwords NL.png
similarity index 100%
rename from Corpus/Sparks/Time for brute force on passwords NL.png
rename to Corpus/Information Security/Time for brute force on passwords NL.png
diff --git a/Corpus/Literature notes/Types of SSO.md b/Corpus/Information Security/Types of SSO.md
similarity index 100%
rename from Corpus/Literature notes/Types of SSO.md
rename to Corpus/Information Security/Types of SSO.md
diff --git a/Corpus/Sparks/Unified Architecture Method.md b/Corpus/Information Security/Unified Architecture Method.md
similarity index 100%
rename from Corpus/Sparks/Unified Architecture Method.md
rename to Corpus/Information Security/Unified Architecture Method.md
diff --git a/Corpus/Sparks/Voorbeelden van incidenten door menselijk handelen.docx b/Corpus/Information Security/Voorbeelden van incidenten door menselijk handelen.docx
similarity index 100%
rename from Corpus/Sparks/Voorbeelden van incidenten door menselijk handelen.docx
rename to Corpus/Information Security/Voorbeelden van incidenten door menselijk handelen.docx
diff --git a/Corpus/Sparks/Zero Trust Course ISC2.md b/Corpus/Information Security/Zero Trust Course ISC2.md
similarity index 100%
rename from Corpus/Sparks/Zero Trust Course ISC2.md
rename to Corpus/Information Security/Zero Trust Course ISC2.md
diff --git a/Corpus/Literature notes/Zero Trust.md b/Corpus/Information Security/Zero Trust.md
similarity index 75%
rename from Corpus/Literature notes/Zero Trust.md
rename to Corpus/Information Security/Zero Trust.md
index 5496d73..4716687 100644
--- a/Corpus/Literature notes/Zero Trust.md
+++ b/Corpus/Information Security/Zero Trust.md
@@ -10,5 +10,5 @@ Zero trust is an approach to cybersecurity that assumes that no one is trusted b
Zero trust can consist of monitoring all network communications, avoiding default configurations, tracking all devices, and implementing multifactor authentication.
Related:
-- [Zero Trust and ISO 27001](../Sparks/Zero%20Trust%20and%20ISO%2027001.md)
-- [Checklist for auditing Zero Trust approach](Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Zero%20Trust%20approach.md)
\ No newline at end of file
+- [Zero Trust and ISO 27001](../Standards/ISO27x/Zero%20Trust%20and%20ISO%2027001.md)
+- [Checklist for auditing Zero Trust approach](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Zero%20Trust%20approach.md)
\ No newline at end of file
diff --git a/Corpus/InfoSec-concepts-MoC-Suggestions-for-improvement.md b/Corpus/Information Security/_InfoSec-concepts-MoC-Suggestions-for-improvement.md
similarity index 100%
rename from Corpus/InfoSec-concepts-MoC-Suggestions-for-improvement.md
rename to Corpus/Information Security/_InfoSec-concepts-MoC-Suggestions-for-improvement.md
diff --git a/Corpus/Information security concepts MoC.md b/Corpus/Information Security/_Information security concepts MoC.md
similarity index 75%
rename from Corpus/Information security concepts MoC.md
rename to Corpus/Information Security/_Information security concepts MoC.md
index 180ab37..f2be12f 100644
--- a/Corpus/Information security concepts MoC.md
+++ b/Corpus/Information Security/_Information security concepts MoC.md
@@ -5,7 +5,7 @@ Related:
tags:
- type/MoC
---
-[[InfoSec-concepts-MoC-Suggestions-for-improvement]]
+[[_InfoSec-concepts-MoC-Suggestions-for-improvement]]
[Assets](/Assets.md)
[NIST Asset Types](📚️%20Literature%20notes/NIST%20Asset%20Types.md)
@@ -15,45 +15,45 @@ tags:
[Assets, Vulnerabilities, Threats, Risks](📚️%20Literature%20notes/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
[Assets, Vulnerabilities, Threats, Risks](/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
[Attack Surface Analysis](📚️%20Literature%20notes/Attack%20Surface%20Analysis.md)
-[Authentication](Standards/ISO27x/Authentication.md)
+[Authentication](../Standards/ISO27x/Authentication.md)
[Multi-factor authentication](/Multi-factor%20authentication.md) (MFA)
[Passwordless Authentication](/Passwordless%20Authentication.md)
[Risk-Based Authentication](/Risk-Based%20Authentication.md)
[Single Sign On (SSO)](📚️%20Literature%20notes/Single%20Sign%20On%20(SSO).md)
[Tokens](/Tokens.md)
-[Authorization](Standards/ISO27x/Authorization.md)
+[Authorization](../Standards/ISO27x/Authorization.md)
[Access Control](/Access%20Control.md)
[Awareness](/Awareness.md)
[BCP_Bedrijfscontinuïteitsplanning](📚️%20Literature%20notes/BCP_Bedrijfscontinuïteitsplanning.md)
[Business Impact Analysis (BIA)](/Business%20Impact%20Analysis%20(BIA).md)
[Disaster Recovery Planning](/Disaster%20Recovery%20Planning.md)
-[Change management MoC](MoCs/Change%20management%20MoC.md)
+[Change management Change Management in ISO 27002](../Standards/ISO27x/Change%20management%20Change%20Management%20in%20ISO%2027002.md)
[Classification](/Classification.md)
[Compliance](/Compliance.md)
[Data Breach](💡Permanent%20ideas/Data%20Breach.md)
[Data Governance](📚️%20Literature%20notes/Data%20Governance.md)
Frameworks
- [ISO 27k family](../../iso27DIY-gis/reference/Examples/ISO%2027k%20family.md)
- [NIST articles list](Standards/NIST/NIST%20articles%20list.md)
+ [ISO 27k family](../../../iso27DIY-gis/reference/Examples/ISO%2027k%20family.md)
+ [NIST articles list](../Standards/NIST/NIST%20articles%20list.md)
[Governance](/Governance.md)
[[Hardening]]
-[Identity and Access Management (IAM)](Sparks/Information%20Security/Identity%20and%20Access%20Management%20(IAM).md)
- [Identification](Sparks/Information%20Security/Identification.md)
- [Authentication](Standards/ISO27x/Authentication.md)
- [Authorization](Standards/ISO27x/Authorization.md)
+[Identity and Access Management (IAM)](Identity%20and%20Access%20Management%20(IAM).md)
+ [Identification](Identification.md)
+ [Authentication](../Standards/ISO27x/Authentication.md)
+ [Authorization](../Standards/ISO27x/Authorization.md)
Impact
- [Change management MoC](MoCs/Change%20management%20MoC.md)
+ [Change management Change Management in ISO 27002](../Standards/ISO27x/Change%20management%20Change%20Management%20in%20ISO%2027002.md)
[Impact of Disruption](Sparks/Impact%20of%20Disruption.md)
[Incidents](/Incidents.md)
[Maturity Models](📚️%20Literature%20notes/Maturity%20Models.md)
[Metrics](📚️%20Literature%20notes/InfoSec%20Metrics.md)
-[Operational Technology](Sparks/Operational%20Technology.md) or OT Security
+[OT Security](OT%20Security.md) or OT Security
[Policies](📚️%20Literature%20notes/Policies.md)
[[Posture Management]]
[Ransomware](/Ransomware.md)
[Risks](/Risks.md)
[Risk analysis](/Risk%20analysis.md)
- [Risk appetite 1](Sparks/Risk%20appetite%201.md)
+ [Risk appetite definitions](Risks/Risk%20appetite%20definitions.md)
[Risk inventories](/Risk%20inventories.md)
[Risk management](/Risk%20management.md)
[Risk ownership](/Risk%20ownership.md)
@@ -70,7 +70,7 @@ Impact
[AI Threat Modeling](/AI%20Threat%20Modeling.md)
[Threat Catalogues](📚️%20Literature%20notes/Threat%20Catalogues.md)
[Vendor security MoC](/Vendor%20security%20MoC.md) or Supply chain security
-[Vulnerability 1](Sparks/Vulnerability%201.md)
+[Vulnerability](Risks/Vulnerability.md)
[Bug bounty program](/Bug%20bounty%20program.md)
[Zero Trust](📚️%20Literature%20notes/Zero%20Trust.md)
diff --git a/Corpus/Literature notes/single-sign-on-info.jpg b/Corpus/Information Security/single-sign-on-info.jpg
similarity index 100%
rename from Corpus/Literature notes/single-sign-on-info.jpg
rename to Corpus/Information Security/single-sign-on-info.jpg
diff --git a/Corpus/Literature notes/Applying Zero Trust Principles to Enterprise Mobility.md b/Corpus/Literature notes/Applying Zero Trust Principles to Enterprise Mobility.md
deleted file mode 100644
index c011c86..0000000
--- a/Corpus/Literature notes/Applying Zero Trust Principles to Enterprise Mobility.md
+++ /dev/null
@@ -1,6 +0,0 @@
-# Applying Zero Trust Principles to Enterprise Mobility
-
-https://www.cisa.gov/sites/default/files/publications/Zero_Trust_Principles_Enterprise_Mobility_For_Public_Comment_508C.pdf
-
-Related:
-[ISO 27001 A 6.2.1 Mobile device policy](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%206.2.1%20Mobile%20device%20policy.md)
diff --git a/Corpus/Literature notes/Authentication Methods Used for Network Security.md b/Corpus/Literature notes/Authentication Methods Used for Network Security.md
deleted file mode 100644
index 9b9b454..0000000
--- a/Corpus/Literature notes/Authentication Methods Used for Network Security.md
+++ /dev/null
@@ -1,2 +0,0 @@
-# Authentication Methods Used for Network Security
-https://www.sailpoint.com/identity-library/authentication-methods-used-for-network-security/
\ No newline at end of file
diff --git a/Corpus/Literature notes/Data Governance.md b/Corpus/Literature notes/Data Governance.md
deleted file mode 100644
index 1eb465d..0000000
--- a/Corpus/Literature notes/Data Governance.md
+++ /dev/null
@@ -1,3 +0,0 @@
-[Checklist for auditing Data Governance](Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Data%20Governance.md)
-[Data security lifecycle](Data%20security%20lifecycle.md)
-
diff --git a/Corpus/Literature notes/Examples of TLP document classification for different industries.md b/Corpus/Literature notes/Examples of TLP document classification for different industries.md
deleted file mode 100644
index 19dd18d..0000000
--- a/Corpus/Literature notes/Examples of TLP document classification for different industries.md
+++ /dev/null
@@ -1,12 +0,0 @@
-# Examples of TLP document classification for different industries
-
-- [for information security](../Sparks/ISMS/Data%20classification/FIRST%20TLP%20labeled%20document%20examples%20for%20information%20security.md)
-- [for a commercial services organization](../Sparks/ISMS/Data%20classification/FIRST%20TLP%20labeled%20document%20examples%20commercial.md)
-- [for a childcare organization](../Sparks/ISMS/Data%20classification/FIRST%20TLP%20labeled%20document%20examples%20childcare.md)
-- [for a hospital](../Sparks/ISMS/Data%20classification/FIRST%20TLP%20labeled%20document%20examples%20hospital.md)
-- [for a national government organization](FIRST%20TLP%20labeled%20document%20examples%20national%20government.md)
-
-
-
-
-
diff --git a/Corpus/Literature notes/NSA Network Security Guidance.md b/Corpus/Literature notes/NSA Network Security Guidance.md
deleted file mode 100644
index 13adcce..0000000
--- a/Corpus/Literature notes/NSA Network Security Guidance.md
+++ /dev/null
@@ -1,4 +0,0 @@
-https://media.defense.gov/2022/Mar/01/2002947139/-1/-1/0/CTR_NSA_NETWORK_INFRASTRUCTURE_SECURITY_GUIDANCE_20220301.PDF
-
-Related:
-- [ISO 27001 A.13.1 Network security management](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A.13.1%20Network%20security%20management.md)
diff --git a/Corpus/Literature notes/Scratch.md b/Corpus/Literature notes/Scratch.md
deleted file mode 100644
index fd40910..0000000
--- a/Corpus/Literature notes/Scratch.md
+++ /dev/null
@@ -1,4 +0,0 @@
-
-
-
-
diff --git a/Corpus/Literature notes/Secure SDLC.md b/Corpus/Literature notes/Secure SDLC.md
deleted file mode 100644
index d2c9371..0000000
--- a/Corpus/Literature notes/Secure SDLC.md
+++ /dev/null
@@ -1,5 +0,0 @@
-https://hackernoon.com/what-is-secure-sdlc
-
-related to [a-8.25-Secure-development-life-cycle](../Standards/ISO27x/OST/27002/EN/a-8.25-Secure-development-life-cycle.md)
-
-
diff --git a/Corpus/Literature notes/Security Threat Modeling.md b/Corpus/Literature notes/Security Threat Modeling.md
deleted file mode 100644
index ffc2027..0000000
--- a/Corpus/Literature notes/Security Threat Modeling.md
+++ /dev/null
@@ -1,9 +0,0 @@
-[CISSP_OSG_Chapter_14](../Standards/CISSP/CISSP_OSG_Chapter_14.md#Understanding%20access%20control%20attacks)
-
-https://insights.sei.cmu.edu/blog/threat-modeling-12-available-methods/
-
-Related:
- - [Create a threat analysis chatbot](../Various/Create%20a%20threat%20analysis%20chatbot.md)
-
-
-
\ No newline at end of file
diff --git a/Corpus/Literature notes/Security in Development.md b/Corpus/Literature notes/Security in Development.md
deleted file mode 100644
index e5a9574..0000000
--- a/Corpus/Literature notes/Security in Development.md
+++ /dev/null
@@ -1,10 +0,0 @@
-[OWASP Top 10 CI-CD Security Risks](../Standards/other/OWASP%20Top%2010%20CI-CD%20Security%20Risks.md)
-
-[a-8.25-Secure-development-life-cycle](../Standards/ISO27x/OST/27002/EN/a-8.25-Secure-development-life-cycle.md)
-[a-8.26-Application-security-requirements](../Standards/ISO27x/OST/27002/EN/a-8.26-Application-security-requirements.md)
-[a-8.27-Secure-system-architecture-and-engineering-principles](../Standards/ISO27x/OST/27002/EN/a-8.27-Secure-system-architecture-and-engineering-principles.md)
-[a-8.28-Secure-coding](../Standards/ISO27x/OST/27002/EN/a-8.28-Secure-coding.md)
-
-
-NSA has released guidance asking companies to switch to memory-safe languages [PDF](https://media.defense.gov/2022/Nov/10/2003112742/-1/-1/0/CSI_SOFTWARE_MEMORY_SAFETY.PDF)
-[Memory safety Wikipedia](https://en.wikipedia.org/wiki/Memory_safety?wprov=sfti1)
\ No newline at end of file
diff --git a/Corpus/Literature notes/Threat.md b/Corpus/Literature notes/Threat.md
deleted file mode 100644
index da9049c..0000000
--- a/Corpus/Literature notes/Threat.md
+++ /dev/null
@@ -1,10 +0,0 @@
-[Risks vs Threats vs Vulnerabilities](../Sparks/Risks%20vs%20Threats%20vs%20Vulnerabilities.md)
-
-[Threat Intelligence](../Sparks/Threat%20Intelligence.md)
-[Threat intelligence sources](../Sparks/Threat%20intelligence%20sources.md)
-[Threat Modeling](Security%20Threat%20Modeling.md)
-[Threat Catalogues](Threat%20Catalogues.md)
- [SCF Threat Categories for Establishing a Threat Catalog](../Standards/other/SCF%20Threat%20Categories%20for%20Establishing%20a%20Threat%20Catalog.md)
-[Privacy Threat Modeling](Privacy%20Threat%20Modeling.md)
-[Security Threat Modeling](Security%20Threat%20Modeling.md)
-
diff --git a/Corpus/Literature notes/wet- en regelgeving kinderopvang.md b/Corpus/Literature notes/wet- en regelgeving kinderopvang.md
deleted file mode 100644
index 1f9efef..0000000
--- a/Corpus/Literature notes/wet- en regelgeving kinderopvang.md
+++ /dev/null
@@ -1,2 +0,0 @@
-en wordt niet voldaan aan de uit de wet Innovatie en Kwaliteit Kinderopvang (IKK)
-beroepskracht-kindratio (BKR.
\ No newline at end of file
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for Insider Threat Prevention.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for Insider Threat Prevention.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for Insider Threat Prevention.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for Insider Threat Prevention.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Access Management.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Access Management.md
similarity index 99%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Access Management.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Access Management.md
index da5f7ef..3faa76f 100644
--- a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Access Management.md
+++ b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Access Management.md
@@ -9,7 +9,7 @@ Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md)
Related:
-- [Identity and Access Management (IAM)](../../Sparks/Information%20Security/Identity%20and%20Access%20Management%20(IAM).md)
+- [Identity and Access Management (IAM)](../../Information%20Security/Identity%20and%20Access%20Management%20(IAM).md)
## Organized by Key Themes: Identity, Access, Cloud, Security, Management, Data, Network, Risk, Development, Project:
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity Planning.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity Planning.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity Planning.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity Planning.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity and Disaster Recovery.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity and Disaster Recovery.md
similarity index 99%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity and Disaster Recovery.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity and Disaster Recovery.md
index 02b2d60..0edc263 100644
--- a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity and Disaster Recovery.md
+++ b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Business Continuity and Disaster Recovery.md
@@ -9,7 +9,7 @@ Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md)
Related:
-- [BCP_Bedrijfscontinuïteitsplanning](../BCP_Bedrijfscontinuïteitsplanning.md)
+- [BCP_Bedrijfscontinuïteitsplanning](../../Information%20Security/BCP_Bedrijfscontinuïteitsplanning.md)
# Does your organization have a plan or framework for business continuity management or disaster recovery management?
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cloud Security – organized by themes.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cloud Security – organized by themes.md
similarity index 99%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cloud Security – organized by themes.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cloud Security – organized by themes.md
index 74f9085..9aaed7f 100644
--- a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cloud Security – organized by themes.md
+++ b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cloud Security – organized by themes.md
@@ -12,7 +12,7 @@ All of them – just to link this note somewhere:
Related:
- [Vendor security MoC](../..//Vendor%20security%20MoC.md)
-- [ISO 27k family](../../../../iso27DIY-gis/reference/examples/ISO%2027k%20family.md): ISO 27017, ISO 27018
+- [ISO 27k family](../../../../iso27DIY-gis/reference/Examples/ISO%2027k%20family.md): ISO 27017, ISO 27018
## Organized By Key Themes: Security, Management, Risk, Cloud, Data, Software, Development, Technology, Network and Project:
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Configuration Management.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Configuration Management.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Configuration Management.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Configuration Management.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cyber Operations.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cyber Operations.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cyber Operations.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cyber Operations.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cyber Threat Intelligence.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cyber Threat Intelligence.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cyber Threat Intelligence.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cyber Threat Intelligence.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cybersecurity.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cybersecurity.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Cybersecurity.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Cybersecurity.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing DLP technologies.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing DLP technologies.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing DLP technologies.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing DLP technologies.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Data Governance.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Data Governance.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Data Governance.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Data Governance.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing DevOps IoT.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing DevOps IoT.md
similarity index 99%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing DevOps IoT.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing DevOps IoT.md
index ca1d694..d800f68 100644
--- a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing DevOps IoT.md
+++ b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing DevOps IoT.md
@@ -9,7 +9,7 @@ Relevant ISO 27001 clauses/controls:
- [ISO 27001 A.14.2 Security in development and support processes](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A.14.2%20Security%20in%20development%20and%20support%20processes.md)
Related:
-- [Operational Technology](../../Sparks/Operational%20Technology.md)
+- [OT Security](../../Information%20Security/OT%20Security.md)
- [DevSecOps and ISO 27k](../../Various/Business%20processes/DevSecOps%20and%20ISO%2027k.md)
## DevOps IoT: Ask This;
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing GRC.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing GRC.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing GRC.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing GRC.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing ISO 27001.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing ISO 27001.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing ISO 27001.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing ISO 27001.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing IT Security.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing IT Security.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing IT Security.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing IT Security.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Incident Response Plan.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Incident Response Plan.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Incident Response Plan.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Incident Response Plan.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Network Security.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Network Security.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Network Security.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Network Security.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Security Operations.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Security Operations.md
similarity index 99%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Security Operations.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Security Operations.md
index d8f29a8..3c692fb 100644
--- a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Security Operations.md
+++ b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Security Operations.md
@@ -124,7 +124,7 @@ Administer and maintain security systems in the cybersecurity security operation
How do you identify which assets are being compromised and what type of data is involved?
-Warrant that your organization is involved in network security environment (Security Operations Center, Security Incident Response Team, or Cyber Security Incident Response) investigating targeted intrusions through complex network segments or Be certain that your company is involved in [Operational Technology](../../Sparks/Operational%20Technology.md) engineering and security concepts.
+Warrant that your organization is involved in network security environment (Security Operations Center, Security Incident Response Team, or Cyber Security Incident Response) investigating targeted intrusions through complex network segments or Be certain that your company is involved in [OT Security](../../Information%20Security/OT%20Security.md) engineering and security concepts.
Have external information aggregators been evaluated for value in API security operations?
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Threat Intelligence.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Threat Intelligence.md
similarity index 99%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Threat Intelligence.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Threat Intelligence.md
index df6a461..6a83a34 100644
--- a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Threat Intelligence.md
+++ b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Threat Intelligence.md
@@ -398,7 +398,7 @@ Serve on a team of Cyber threat analysts responsible for the 24x7 analyses and r
-Do you actively share [Operational Technology](../../Sparks/Operational%20Technology.md) threat related intelligence with your peers?
+Do you actively share [OT Security](../../Information%20Security/OT%20Security.md) threat related intelligence with your peers?
Maintain and drive the development of new reports of Cyber Threat Intelligence analysis to peers, management and (internal) customer teams for purposes of situational awareness and making threat intelligence actionable.
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Threat Management.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Threat Management.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Threat Management.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Threat Management.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Threat Modeling.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Threat Modeling.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Threat Modeling.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Threat Modeling.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Vendor Management.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Vendor Management.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Vendor Management.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Vendor Management.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Zero Trust approach.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Zero Trust approach.md
similarity index 99%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Zero Trust approach.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Zero Trust approach.md
index 74af564..b7f0601 100644
--- a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing Zero Trust approach.md
+++ b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing Zero Trust approach.md
@@ -6,7 +6,7 @@ Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md)
Related:
-- [Zero Trust](../Zero%20Trust.md)
+- [Zero Trust](../../Information%20Security/Zero%20Trust.md)
1. Does your organization have a hybrid cloud/colocation design, and does a Zero Trust software defined perimeter security option secure your organizations new expanded perimeter?
2. As more of your organization moves to a hybrid cloud model, how does the Zero Trust model and identity and access management technologies ensure that data is protected?
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing the ISMS process.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing the ISMS process.md
similarity index 100%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for auditing the ISMS process.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for auditing the ISMS process.md
diff --git a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for security product vendors assessment.md b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for security product vendors assessment.md
similarity index 98%
rename from Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for security product vendors assessment.md
rename to Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for security product vendors assessment.md
index d36271f..840da91 100644
--- a/Corpus/Literature notes/Checklists Gerardus Blokdyk/Checklist for security product vendors assessment.md
+++ b/Corpus/Literature/Checklists Gerardus Blokdyk/Checklist for security product vendors assessment.md
@@ -10,7 +10,7 @@ Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md)
Related:
-- [Examples of vendor selection questionnaires](../../Sparks/Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md)
+- [Examples of vendor selection questionnaires](../../Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md)
# Assessing Security Product Vendors? Ask this:
1. When a faulty product is to be returned, what processes does the vendor have in place to ensure that no customer data exists on disks or storage before it is sent to one of return centers?
diff --git a/Corpus/Literature notes/Def_Sec_Handbook.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_1.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_1.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_1.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_1.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_10.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_10.md
similarity index 71%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_10.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_10.md
index 899cd3d..464eebc 100644
--- a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_10.md
+++ b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_10.md
@@ -1,6 +1,6 @@
# Chapter 10: Password Management and Multifactor Authentication
-See also: [Identity and Access Management (IAM)](../Sparks/Information%20Security/Identity%20and%20Access%20Management%20(IAM).md), [Roles in Identity and Access Management (IAM)](Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)
+See also: [Identity and Access Management (IAM)](../../Information%20Security/Identity%20and%20Access%20Management%20(IAM).md), [Roles in Identity and Access Management (IAM)](../../Information%20Security/Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)
## Password practices
Password complexity and brute force cracking:
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_11.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_11.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_11.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_11.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_2.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_2.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_2.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_2.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_3.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_3.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_3.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_3.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_4.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_4.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_4.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_4.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_5.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_5.md
similarity index 88%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_5.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_5.md
index c12f8c6..611c7fa 100644
--- a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_5.md
+++ b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_5.md
@@ -1,7 +1,7 @@
# Chapter 5: Incident Response
See also:
-- [SANS Incident Response Plan](../Standards/SANS/SANS%20Incident%20Response%20Plan.md)
+- [SANS Incident Response Plan](../../Standards/SANS/SANS%20Incident%20Response%20Plan.md)
- ISO 27002 5.26
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_6.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_6.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_6.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_6.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_7.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_7.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_7.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_7.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_8.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_8.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_8.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_8.md
diff --git a/Corpus/Literature notes/Def_Sec_Handbook_Chapter_9.md b/Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_9.md
similarity index 100%
rename from Corpus/Literature notes/Def_Sec_Handbook_Chapter_9.md
rename to Corpus/Literature/Defensive Security Handbook/Def_Sec_Handbook_Chapter_9.md
diff --git a/Corpus/Literature notes/Jaquith_2007_1_Defining_Security_Metrics.md b/Corpus/Literature/Jaquith - Security Metrics/Jaquith_2007_1_Defining_Security_Metrics.md
similarity index 100%
rename from Corpus/Literature notes/Jaquith_2007_1_Defining_Security_Metrics.md
rename to Corpus/Literature/Jaquith - Security Metrics/Jaquith_2007_1_Defining_Security_Metrics.md
diff --git a/Corpus/Literature notes/Jaquith_2007_2_Diagnosing_Problems_and_Measuring_Technical_Security.md b/Corpus/Literature/Jaquith - Security Metrics/Jaquith_2007_2_Diagnosing_Problems_and_Measuring_Technical_Security.md
similarity index 100%
rename from Corpus/Literature notes/Jaquith_2007_2_Diagnosing_Problems_and_Measuring_Technical_Security.md
rename to Corpus/Literature/Jaquith - Security Metrics/Jaquith_2007_2_Diagnosing_Problems_and_Measuring_Technical_Security.md
diff --git a/Corpus/Literature notes/Jaquith_2007_3_Measuring_Program_Effectiveness.md b/Corpus/Literature/Jaquith - Security Metrics/Jaquith_2007_3_Measuring_Program_Effectiveness.md
similarity index 100%
rename from Corpus/Literature notes/Jaquith_2007_3_Measuring_Program_Effectiveness.md
rename to Corpus/Literature/Jaquith - Security Metrics/Jaquith_2007_3_Measuring_Program_Effectiveness.md
diff --git a/Corpus/Literature/Jaquith - Security Metrics/Security Metrics - Andrew Jaquith.pdf b/Corpus/Literature/Jaquith - Security Metrics/Security Metrics - Andrew Jaquith.pdf
new file mode 100644
index 0000000..1d21fc4
--- /dev/null
+++ b/Corpus/Literature/Jaquith - Security Metrics/Security Metrics - Andrew Jaquith.pdf
@@ -0,0 +1,52899 @@
+%PDF-1.4
+%
+1 0 obj
+<<
+/Metadata 2 0 R
+/PageLabels
+<<
+/Nums [0
+<<
+/S /A
+/P ()
+/St 3
+>> 1
+<<
+/S /r
+/P ()
+>> 2
+<<
+/S /r
+/P ()
+/St 2
+>> 3
+<<
+/S /r
+/P ()
+/St 3
+>> 4
+<<
+/S /r
+/P ()
+/St 4
+>> 5
+<<
+/S /r
+/P ()
+/St 5
+>> 6
+<<
+/S /r
+/P ()
+/St 6
+>> 7
+<<
+/S /r
+/P ()
+/St 7
+>> 8
+<<
+/S /r
+/P ()
+/St 8
+>> 9
+<<
+/S /r
+/P ()
+/St 9
+>> 10
+<<
+/S /r
+/P ()
+/St 10
+>> 11
+<<
+/S /r
+/P ()
+/St 11
+>> 12
+<<
+/S /r
+/P ()
+/St 12
+>> 13
+<<
+/S /r
+/P ()
+/St 13
+>> 14
+<<
+/S /r
+/P ()
+/St 14
+>> 15
+<<
+/S /r
+/P ()
+/St 15
+>> 16
+<<
+/S /r
+/P ()
+/St 16
+>> 17
+<<
+/S /r
+/P ()
+/St 17
+>> 18
+<<
+/S /r
+/P ()
+/St 18
+>> 19
+<<
+/S /r
+/P ()
+/St 19
+>> 20
+<<
+/S /r
+/P ()
+/St 20
+>> 21
+<<
+/S /r
+/P ()
+/St 21
+>> 22
+<<
+/S /r
+/P ()
+/St 22
+>> 23
+<<
+/S /r
+/P ()
+/St 23
+>> 24
+<<
+/S /r
+/P ()
+/St 24
+>> 25
+<<
+/S /r
+/P ()
+/St 25
+>> 26
+<<
+/S /r
+/P ()
+/St 26
+>> 27
+<<
+/S /r
+/P ()
+/St 27
+>> 28
+<<
+/S /r
+/P ()
+/St 28
+>> 29
+<<
+/S /D
+/P ()
+>> 30
+<<
+/S /D
+/P ()
+/St 2
+>> 31
+<<
+/S /D
+/P ()
+/St 3
+>> 32
+<<
+/S /D
+/P ()
+/St 4
+>> 33
+<<
+/S /D
+/P ()
+/St 5
+>> 34
+<<
+/S /D
+/P ()
+/St 6
+>> 35
+<<
+/S /D
+/P ()
+/St 7
+>> 36
+<<
+/S /D
+/P ()
+/St 8
+>> 37
+<<
+/S /D
+/P ()
+/St 9
+>> 38
+<<
+/S /D
+/P ()
+/St 10
+>> 39
+<<
+/S /D
+/P ()
+/St 11
+>> 40
+<<
+/S /D
+/P ()
+/St 12
+>> 41
+<<
+/S /D
+/P ()
+/St 13
+>> 42
+<<
+/S /D
+/P ()
+/St 14
+>> 43
+<<
+/S /D
+/P ()
+/St 15
+>> 44
+<<
+/S /D
+/P ()
+/St 16
+>> 45
+<<
+/S /D
+/P ()
+/St 17
+>> 46
+<<
+/S /D
+/P ()
+/St 18
+>> 47
+<<
+/S /D
+/P ()
+/St 19
+>> 48
+<<
+/S /D
+/P ()
+/St 20
+>> 49
+<<
+/S /D
+/P ()
+/St 21
+>> 50
+<<
+/S /D
+/P ()
+/St 22
+>> 51
+<<
+/S /D
+/P ()
+/St 23
+>> 52
+<<
+/S /D
+/P ()
+/St 24
+>> 53
+<<
+/S /D
+/P ()
+/St 25
+>> 54
+<<
+/S /D
+/P ()
+/St 26
+>> 55
+<<
+/S /D
+/P ()
+/St 27
+>> 56
+<<
+/S /D
+/P ()
+/St 28
+>> 57
+<<
+/S /D
+/P ()
+/St 29
+>> 58
+<<
+/S /D
+/P ()
+/St 30
+>> 59
+<<
+/S /D
+/P ()
+/St 31
+>> 60
+<<
+/S /D
+/P ()
+/St 32
+>> 61
+<<
+/S /D
+/P ()
+/St 33
+>> 62
+<<
+/S /D
+/P ()
+/St 34
+>> 63
+<<
+/S /D
+/P ()
+/St 35
+>> 64
+<<
+/S /D
+/P ()
+/St 36
+>> 65
+<<
+/S /D
+/P ()
+/St 37
+>> 66
+<<
+/S /D
+/P ()
+/St 38
+>> 67
+<<
+/S /D
+/P ()
+/St 39
+>> 68
+<<
+/S /D
+/P ()
+/St 40
+>> 69
+<<
+/S /D
+/P ()
+/St 41
+>> 70
+<<
+/S /D
+/P ()
+/St 42
+>> 71
+<<
+/S /D
+/P ()
+/St 43
+>> 72
+<<
+/S /D
+/P ()
+/St 44
+>> 73
+<<
+/S /D
+/P ()
+/St 45
+>> 74
+<<
+/S /D
+/P ()
+/St 46
+>> 75
+<<
+/S /D
+/P ()
+/St 47
+>> 76
+<<
+/S /D
+/P ()
+/St 48
+>> 77
+<<
+/S /D
+/P ()
+/St 49
+>> 78
+<<
+/S /D
+/P ()
+/St 50
+>> 79
+<<
+/S /D
+/P ()
+/St 51
+>> 80
+<<
+/S /D
+/P ()
+/St 52
+>> 81
+<<
+/S /D
+/P ()
+/St 53
+>> 82
+<<
+/S /D
+/P ()
+/St 54
+>> 83
+<<
+/S /D
+/P ()
+/St 55
+>> 84
+<<
+/S /D
+/P ()
+/St 56
+>> 85
+<<
+/S /D
+/P ()
+/St 57
+>> 86
+<<
+/S /D
+/P ()
+/St 58
+>> 87
+<<
+/S /D
+/P ()
+/St 59
+>> 88
+<<
+/S /D
+/P ()
+/St 60
+>> 89
+<<
+/S /D
+/P ()
+/St 61
+>> 90
+<<
+/S /D
+/P ()
+/St 62
+>> 91
+<<
+/S /D
+/P ()
+/St 63
+>> 92
+<<
+/S /D
+/P ()
+/St 64
+>> 93
+<<
+/S /D
+/P ()
+/St 65
+>> 94
+<<
+/S /D
+/P ()
+/St 66
+>> 95
+<<
+/S /D
+/P ()
+/St 67
+>> 96
+<<
+/S /D
+/P ()
+/St 68
+>> 97
+<<
+/S /D
+/P ()
+/St 69
+>> 98
+<<
+/S /D
+/P ()
+/St 70
+>> 99
+<<
+/S /D
+/P ()
+/St 71
+>> 100
+<<
+/S /D
+/P ()
+/St 72
+>> 101
+<<
+/S /D
+/P ()
+/St 73
+>> 102
+<<
+/S /D
+/P ()
+/St 74
+>> 103
+<<
+/S /D
+/P ()
+/St 75
+>> 104
+<<
+/S /D
+/P ()
+/St 76
+>> 105
+<<
+/S /D
+/P ()
+/St 77
+>> 106
+<<
+/S /D
+/P ()
+/St 78
+>> 107
+<<
+/S /D
+/P ()
+/St 79
+>> 108
+<<
+/S /D
+/P ()
+/St 80
+>> 109
+<<
+/S /D
+/P ()
+/St 81
+>> 110
+<<
+/S /D
+/P ()
+/St 82
+>> 111
+<<
+/S /D
+/P ()
+/St 83
+>> 112
+<<
+/S /D
+/P ()
+/St 84
+>> 113
+<<
+/S /D
+/P ()
+/St 85
+>> 114
+<<
+/S /D
+/P ()
+/St 86
+>> 115
+<<
+/S /D
+/P ()
+/St 87
+>> 116
+<<
+/S /D
+/P ()
+/St 88
+>> 117
+<<
+/S /D
+/P ()
+/St 89
+>> 118
+<<
+/S /D
+/P ()
+/St 90
+>> 119
+<<
+/S /D
+/P ()
+/St 91
+>> 120
+<<
+/S /D
+/P ()
+/St 92
+>> 121
+<<
+/S /D
+/P ()
+/St 93
+>> 122
+<<
+/S /D
+/P ()
+/St 94
+>> 123
+<<
+/S /D
+/P ()
+/St 95
+>> 124
+<<
+/S /D
+/P ()
+/St 96
+>> 125
+<<
+/S /D
+/P ()
+/St 97
+>> 126
+<<
+/S /D
+/P ()
+/St 98
+>> 127
+<<
+/S /D
+/P ()
+/St 99
+>> 128
+<<
+/S /D
+/P ()
+/St 100
+>> 129
+<<
+/S /D
+/P ()
+/St 101
+>> 130
+<<
+/S /D
+/P ()
+/St 102
+>> 131
+<<
+/S /D
+/P ()
+/St 103
+>> 132
+<<
+/S /D
+/P ()
+/St 104
+>> 133
+<<
+/S /D
+/P ()
+/St 105
+>> 134
+<<
+/S /D
+/P ()
+/St 106
+>> 135
+<<
+/S /D
+/P ()
+/St 107
+>> 136
+<<
+/S /D
+/P ()
+/St 108
+>> 137
+<<
+/S /D
+/P ()
+/St 109
+>> 138
+<<
+/S /D
+/P ()
+/St 110
+>> 139
+<<
+/S /D
+/P ()
+/St 111
+>> 140
+<<
+/S /D
+/P ()
+/St 112
+>> 141
+<<
+/S /D
+/P ()
+/St 113
+>> 142
+<<
+/S /D
+/P ()
+/St 114
+>> 143
+<<
+/S /D
+/P ()
+/St 115
+>> 144
+<<
+/S /D
+/P ()
+/St 116
+>> 145
+<<
+/S /D
+/P ()
+/St 117
+>> 146
+<<
+/S /D
+/P ()
+/St 118
+>> 147
+<<
+/S /D
+/P ()
+/St 119
+>> 148
+<<
+/S /D
+/P ()
+/St 120
+>> 149
+<<
+/S /D
+/P ()
+/St 121
+>> 150
+<<
+/S /D
+/P ()
+/St 122
+>> 151
+<<
+/S /D
+/P ()
+/St 123
+>> 152
+<<
+/S /D
+/P ()
+/St 124
+>> 153
+<<
+/S /D
+/P ()
+/St 125
+>> 154
+<<
+/S /D
+/P ()
+/St 126
+>> 155
+<<
+/S /D
+/P ()
+/St 127
+>> 156
+<<
+/S /D
+/P ()
+/St 128
+>> 157
+<<
+/S /D
+/P ()
+/St 129
+>> 158
+<<
+/S /D
+/P ()
+/St 130
+>> 159
+<<
+/S /D
+/P ()
+/St 131
+>> 160
+<<
+/S /D
+/P ()
+/St 132
+>> 161
+<<
+/S /D
+/P ()
+/St 133
+>> 162
+<<
+/S /D
+/P ()
+/St 134
+>> 163
+<<
+/S /D
+/P ()
+/St 135
+>> 164
+<<
+/S /D
+/P ()
+/St 136
+>> 165
+<<
+/S /D
+/P ()
+/St 137
+>> 166
+<<
+/S /D
+/P ()
+/St 138
+>> 167
+<<
+/S /D
+/P ()
+/St 139
+>> 168
+<<
+/S /D
+/P ()
+/St 140
+>> 169
+<<
+/S /D
+/P ()
+/St 141
+>> 170
+<<
+/S /D
+/P ()
+/St 142
+>> 171
+<<
+/S /D
+/P ()
+/St 143
+>> 172
+<<
+/S /D
+/P ()
+/St 144
+>> 173
+<<
+/S /D
+/P ()
+/St 145
+>> 174
+<<
+/S /D
+/P ()
+/St 146
+>> 175
+<<
+/S /D
+/P ()
+/St 147
+>> 176
+<<
+/S /D
+/P ()
+/St 148
+>> 177
+<<
+/S /D
+/P ()
+/St 149
+>> 178
+<<
+/S /D
+/P ()
+/St 150
+>> 179
+<<
+/S /D
+/P ()
+/St 151
+>> 180
+<<
+/S /D
+/P ()
+/St 152
+>> 181
+<<
+/S /D
+/P ()
+/St 153
+>> 182
+<<
+/S /D
+/P ()
+/St 154
+>> 183
+<<
+/S /D
+/P ()
+/St 155
+>> 184
+<<
+/S /D
+/P ()
+/St 156
+>> 185
+<<
+/S /D
+/P ()
+/St 157
+>> 186
+<<
+/S /D
+/P ()
+/St 158
+>> 187
+<<
+/S /D
+/P ()
+/St 159
+>> 188
+<<
+/S /D
+/P ()
+/St 160
+>> 189
+<<
+/S /D
+/P ()
+/St 161
+>> 190
+<<
+/S /D
+/P ()
+/St 162
+>> 191
+<<
+/S /D
+/P ()
+/St 163
+>> 192
+<<
+/S /D
+/P ()
+/St 164
+>> 193
+<<
+/S /D
+/P ()
+/St 165
+>> 194
+<<
+/S /D
+/P ()
+/St 166
+>> 195
+<<
+/S /D
+/P ()
+/St 167
+>> 196
+<<
+/S /D
+/P ()
+/St 168
+>> 197
+<<
+/S /D
+/P ()
+/St 169
+>> 198
+<<
+/S /D
+/P ()
+/St 170
+>> 199
+<<
+/S /D
+/P ()
+/St 171
+>> 200
+<<
+/S /D
+/P ()
+/St 172
+>> 201
+<<
+/S /D
+/P ()
+/St 173
+>> 202
+<<
+/S /D
+/P ()
+/St 174
+>> 203
+<<
+/S /D
+/P ()
+/St 175
+>> 204
+<<
+/S /D
+/P ()
+/St 176
+>> 205
+<<
+/S /D
+/P ()
+/St 177
+>> 206
+<<
+/S /D
+/P ()
+/St 178
+>> 207
+<<
+/S /D
+/P ()
+/St 179
+>> 208
+<<
+/S /D
+/P ()
+/St 180
+>> 209
+<<
+/S /D
+/P ()
+/St 181
+>> 210
+<<
+/S /D
+/P ()
+/St 182
+>> 211
+<<
+/S /D
+/P ()
+/St 183
+>> 212
+<<
+/S /D
+/P ()
+/St 184
+>> 213
+<<
+/S /D
+/P ()
+/St 185
+>> 214
+<<
+/S /D
+/P ()
+/St 186
+>> 215
+<<
+/S /D
+/P ()
+/St 187
+>> 216
+<<
+/S /D
+/P ()
+/St 188
+>> 217
+<<
+/S /D
+/P ()
+/St 189
+>> 218
+<<
+/S /D
+/P ()
+/St 190
+>> 219
+<<
+/S /D
+/P ()
+/St 191
+>> 220
+<<
+/S /D
+/P ()
+/St 192
+>> 221
+<<
+/S /D
+/P ()
+/St 193
+>> 222
+<<
+/S /D
+/P ()
+/St 194
+>> 223
+<<
+/S /D
+/P ()
+/St 195
+>> 224
+<<
+/S /D
+/P ()
+/St 196
+>> 225
+<<
+/S /D
+/P ()
+/St 197
+>> 226
+<<
+/S /D
+/P ()
+/St 198
+>> 227
+<<
+/S /D
+/P ()
+/St 199
+>> 228
+<<
+/S /D
+/P ()
+/St 200
+>> 229
+<<
+/S /D
+/P ()
+/St 201
+>> 230
+<<
+/S /D
+/P ()
+/St 202
+>> 231
+<<
+/S /D
+/P ()
+/St 203
+>> 232
+<<
+/S /D
+/P ()
+/St 204
+>> 233
+<<
+/S /D
+/P ()
+/St 205
+>> 234
+<<
+/S /D
+/P ()
+/St 206
+>> 235
+<<
+/S /D
+/P ()
+/St 207
+>> 236
+<<
+/S /D
+/P ()
+/St 208
+>> 237
+<<
+/S /D
+/P ()
+/St 209
+>> 238
+<<
+/S /D
+/P ()
+/St 210
+>> 239
+<<
+/S /D
+/P ()
+/St 211
+>> 240
+<<
+/S /D
+/P ()
+/St 212
+>> 241
+<<
+/S /D
+/P ()
+/St 213
+>> 242
+<<
+/S /D
+/P ()
+/St 214
+>> 243
+<<
+/S /D
+/P ()
+/St 215
+>> 244
+<<
+/S /D
+/P ()
+/St 216
+>> 245
+<<
+/S /D
+/P ()
+/St 217
+>> 246
+<<
+/S /D
+/P ()
+/St 218
+>> 247
+<<
+/S /D
+/P ()
+/St 219
+>> 248
+<<
+/S /D
+/P ()
+/St 220
+>> 249
+<<
+/S /D
+/P ()
+/St 221
+>> 250
+<<
+/S /D
+/P ()
+/St 222
+>> 251
+<<
+/S /D
+/P ()
+/St 223
+>> 252
+<<
+/S /D
+/P ()
+/St 224
+>> 253
+<<
+/S /D
+/P ()
+/St 225
+>> 254
+<<
+/S /D
+/P ()
+/St 226
+>> 255
+<<
+/S /D
+/P ()
+/St 227
+>> 256
+<<
+/S /D
+/P ()
+/St 228
+>> 257
+<<
+/S /D
+/P ()
+/St 229
+>> 258
+<<
+/S /D
+/P ()
+/St 230
+>> 259
+<<
+/S /D
+/P ()
+/St 231
+>> 260
+<<
+/S /D
+/P ()
+/St 232
+>> 261
+<<
+/S /D
+/P ()
+/St 233
+>> 262
+<<
+/S /D
+/P ()
+/St 234
+>> 263
+<<
+/S /D
+/P ()
+/St 235
+>> 264
+<<
+/S /D
+/P ()
+/St 236
+>> 265
+<<
+/S /D
+/P ()
+/St 237
+>> 266
+<<
+/S /D
+/P ()
+/St 238
+>> 267
+<<
+/S /D
+/P ()
+/St 239
+>> 268
+<<
+/S /D
+/P ()
+/St 240
+>> 269
+<<
+/S /D
+/P ()
+/St 241
+>> 270
+<<
+/S /D
+/P ()
+/St 242
+>> 271
+<<
+/S /D
+/P ()
+/St 243
+>> 272
+<<
+/S /D
+/P ()
+/St 244
+>> 273
+<<
+/S /D
+/P ()
+/St 245
+>> 274
+<<
+/S /D
+/P ()
+/St 246
+>> 275
+<<
+/S /D
+/P ()
+/St 247
+>> 276
+<<
+/S /D
+/P ()
+/St 248
+>> 277
+<<
+/S /D
+/P ()
+/St 249
+>> 278
+<<
+/S /D
+/P ()
+/St 250
+>> 279
+<<
+/S /D
+/P ()
+/St 251
+>> 280
+<<
+/S /D
+/P ()
+/St 252
+>> 281
+<<
+/S /D
+/P ()
+/St 253
+>> 282
+<<
+/S /D
+/P ()
+/St 254
+>> 283
+<<
+/S /D
+/P ()
+/St 255
+>> 284
+<<
+/S /D
+/P ()
+/St 256
+>> 285
+<<
+/S /D
+/P ()
+/St 257
+>> 286
+<<
+/S /D
+/P ()
+/St 258
+>> 287
+<<
+/S /D
+/P ()
+/St 259
+>> 288
+<<
+/S /D
+/P ()
+/St 260
+>> 289
+<<
+/S /D
+/P ()
+/St 261
+>> 290
+<<
+/S /D
+/P ()
+/St 262
+>> 291
+<<
+/S /D
+/P ()
+/St 263
+>> 292
+<<
+/S /D
+/P ()
+/St 264
+>> 293
+<<
+/S /D
+/P ()
+/St 265
+>> 294
+<<
+/S /D
+/P ()
+/St 266
+>> 295
+<<
+/S /D
+/P ()
+/St 267
+>> 296
+<<
+/S /D
+/P ()
+/St 268
+>> 297
+<<
+/S /D
+/P ()
+/St 269
+>> 298
+<<
+/S /D
+/P ()
+/St 270
+>> 299
+<<
+/S /D
+/P ()
+/St 271
+>> 300
+<<
+/S /D
+/P ()
+/St 272
+>> 301
+<<
+/S /D
+/P ()
+/St 273
+>> 302
+<<
+/S /D
+/P ()
+/St 274
+>> 303
+<<
+/S /D
+/P ()
+/St 275
+>> 304
+<<
+/S /D
+/P ()
+/St 276
+>> 305
+<<
+/S /D
+/P ()
+/St 277
+>> 306
+<<
+/S /D
+/P ()
+/St 278
+>> 307
+<<
+/S /D
+/P ()
+/St 279
+>> 308
+<<
+/S /D
+/P ()
+/St 280
+>> 309
+<<
+/S /D
+/P ()
+/St 281
+>> 310
+<<
+/S /D
+/P ()
+/St 282
+>> 311
+<<
+/S /D
+/P ()
+/St 283
+>> 312
+<<
+/S /D
+/P ()
+/St 284
+>> 313
+<<
+/S /D
+/P ()
+/St 285
+>> 314
+<<
+/S /D
+/P ()
+/St 286
+>> 315
+<<
+/S /D
+/P ()
+/St 287
+>> 316
+<<
+/S /D
+/P ()
+/St 288
+>> 317
+<<
+/S /D
+/P ()
+/St 289
+>> 318
+<<
+/S /D
+/P ()
+/St 290
+>> 319
+<<
+/S /D
+/P ()
+/St 291
+>> 320
+<<
+/S /D
+/P ()
+/St 292
+>> 321
+<<
+/S /D
+/P ()
+/St 293
+>> 322
+<<
+/S /D
+/P ()
+/St 294
+>> 323
+<<
+/S /D
+/P ()
+/St 295
+>> 324
+<<
+/S /D
+/P ()
+/St 296
+>> 325
+<<
+/S /D
+/P ()
+/St 297
+>> 326
+<<
+/S /D
+/P ()
+/St 298
+>> 327
+<<
+/S /D
+/P ()
+/St 299
+>> 328
+<<
+/S /D
+/P ()
+/St 300
+>> 329
+<<
+/S /D
+/P ()
+/St 301
+>> 330
+<<
+/S /D
+/P ()
+/St 302
+>> 331
+<<
+/S /D
+/P ()
+/St 303
+>> 332
+<<
+/S /D
+/P ()
+/St 304
+>> 333
+<<
+/S /D
+/P ()
+/St 305
+>>]
+>>
+/Type /Catalog
+/Pages 3 0 R
+/Outlines 4 0 R
+>>
+endobj
+2 0 obj
+<<
+/Subtype /XML
+/Type /Metadata
+/Filter /FlateDecode
+/Length 579
+>>
+stream
+xTn0SX pXI&X1i+bnlV88ոxNҮtՄ@*:|/':m+ΕC3u#-cu4aL=菏V>~44DB"HslTg7WmQ yY6=]Sznr1\;xeVjaVff|v?8WqJzS?C^N_5Omhe1y)ұrڔ;i\FK͈:2*#>yr`$WmL@p٤&Wn, I-:N^Yo.IaIA^N
+a]0|bΖcT0DX@hB>
+as =*8
uE5v
+fWGTɟSw8>6iS]E9fnLU[
ALyfl!@ATUS w
G]>[$x.DL4ɗGU7rnKϣ}%:ջUߞ|'S>3w~tV:sӷ?GfS/$k
+endstream
+endobj
+3 0 obj
+<<
+/Kids [5 0 R 6 0 R 7 0 R 8 0 R]
+/Type /Pages
+/Count 335
+>>
+endobj
+4 0 obj
+<<
+/Last 9 0 R
+/First 9 0 R
+/Count 15
+>>
+endobj
+10 0 obj
+<<
+/Kids [11 0 R 12 0 R 13 0 R 14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R 21 0 R 22 0 R 23 0 R 24 0 R 25 0 R 26 0 R 27 0 R 28 0 R 29 0 R 30 0 R 31 0 R 32 0 R 33 0 R 34 0 R 35 0 R 36 0 R 37 0 R 38 0 R 39 0 R 40 0 R 41 0 R 42 0 R 43 0 R 44 0 R 45 0 R 46 0 R 47 0 R 48 0 R 49 0 R 50 0 R 51 0 R 52 0 R 53 0 R 54 0 R 55 0 R 56 0 R 57 0 R 58 0 R 59 0 R 60 0 R 61 0 R 62 0 R 63 0 R 64 0 R 65 0 R 66 0 R 67 0 R 68 0 R 69 0 R 70 0 R 71 0 R 72 0 R 73 0 R 74 0 R 75 0 R 76 0 R 77 0 R 78 0 R 79 0 R 80 0 R 81 0 R 82 0 R 83 0 R 84 0 R 85 0 R 86 0 R 87 0 R 88 0 R 89 0 R 90 0 R 91 0 R 92 0 R 93 0 R 94 0 R 95 0 R 96 0 R 97 0 R 98 0 R 99 0 R 100 0 R 101 0 R 102 0 R 103 0 R 104 0 R 105 0 R 106 0 R 107 0 R 108 0 R 109 0 R 110 0 R 111 0 R 112 0 R 113 0 R 114 0 R 115 0 R 116 0 R 117 0 R 118 0 R 119 0 R 120 0 R 121 0 R 122 0 R 123 0 R 124 0 R 125 0 R 126 0 R 127 0 R 128 0 R 129 0 R 130 0 R 131 0 R 132 0 R 133 0 R 134 0 R 135 0 R 136 0 R 137 0 R 138 0 R 139 0 R 140 0 R 141 0 R 142 0 R 143 0 R 144 0 R 145 0 R 146 0 R 147 0 R 148 0 R 149 0 R 150 0 R 151 0 R 152 0 R 153 0 R 154 0 R 155 0 R 156 0 R 157 0 R 158 0 R 159 0 R 160 0 R 161 0 R 162 0 R 163 0 R 164 0 R 165 0 R 166 0 R 167 0 R 168 0 R 169 0 R 170 0 R 171 0 R 172 0 R 173 0 R 174 0 R 175 0 R 176 0 R 177 0 R 178 0 R 179 0 R 180 0 R 181 0 R 182 0 R 183 0 R 184 0 R 185 0 R 186 0 R 187 0 R 188 0 R 189 0 R 190 0 R 191 0 R 192 0 R 193 0 R 194 0 R 195 0 R 196 0 R 197 0 R 198 0 R 199 0 R 200 0 R 201 0 R 202 0 R 203 0 R 204 0 R 205 0 R 206 0 R 207 0 R 208 0 R 209 0 R 210 0 R 211 0 R 212 0 R 213 0 R 214 0 R 215 0 R 216 0 R 217 0 R 218 0 R 219 0 R 220 0 R 221 0 R 222 0 R 223 0 R 224 0 R 225 0 R 226 0 R 227 0 R 228 0 R 229 0 R 230 0 R 231 0 R 232 0 R 233 0 R 234 0 R 235 0 R 236 0 R 237 0 R 238 0 R 239 0 R 240 0 R 241 0 R 242 0 R 243 0 R 244 0 R 245 0 R 246 0 R 247 0 R 248 0 R 249 0 R 250 0 R 251 0 R 252 0 R 253 0 R 254 0 R 255 0 R 256 0 R 257 0 R 258 0 R 259 0 R 260 0 R 261 0 R 262 0 R 263 0 R 264 0 R 265 0 R 266 0 R 267 0 R 268 0 R 269 0 R 270 0 R 271 0 R 272 0 R 273 0 R 274 0 R 275 0 R 276 0 R 277 0 R 278 0 R 279 0 R 280 0 R 281 0 R 282 0 R 283 0 R 284 0 R 285 0 R 286 0 R 287 0 R 288 0 R 289 0 R 290 0 R 291 0 R 292 0 R 293 0 R 294 0 R 295 0 R 296 0 R 297 0 R 298 0 R 299 0 R 300 0 R 301 0 R 302 0 R 303 0 R 304 0 R 305 0 R 306 0 R 307 0 R 308 0 R 309 0 R 310 0 R 311 0 R 312 0 R 313 0 R 314 0 R 315 0 R 316 0 R 317 0 R 318 0 R 319 0 R 320 0 R 321 0 R 322 0 R 323 0 R 324 0 R 325 0 R 326 0 R 327 0 R 328 0 R 329 0 R 330 0 R 331 0 R 332 0 R 333 0 R 334 0 R 335 0 R 336 0 R 337 0 R 338 0 R 339 0 R 340 0 R 341 0 R 342 0 R 343 0 R 344 0 R 345 0 R]
+/Type /Pages
+/Count 335
+>>
+endobj
+11 0 obj
+<<
+/Annots [346 0 R]
+/Resources
+<<
+/Font
+<<
+/FGUZLL0 347 0 R
+>>
+/ProcSet [/PDF /ImageC /Text]
+/XObject 348 0 R
+/ExtGState 349 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [351 0 R 352 0 R 353 0 R 354 0 R 355 0 R]
+/MediaBox [0 0 252 335.16]
+/CropBox [0 0 252.0 335.16]
+>>
+endobj
+12 0 obj
+<<
+/Annots [356 0 R 357 0 R]
+/Resources
+<<
+/Font 358 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 359 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [360 0 R 361 0 R 362 0 R 363 0 R 364 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+13 0 obj
+<<
+/Annots [365 0 R]
+/Resources
+<<
+/Font 366 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 367 0 R
+/ColorSpace 368 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [369 0 R 370 0 R 371 0 R 372 0 R 373 0 R]
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+14 0 obj
+<<
+/Annots [374 0 R]
+/Resources
+<<
+/Font 375 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 376 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [377 0 R 378 0 R 379 0 R 380 0 R 381 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+15 0 obj
+<<
+/Annots [382 0 R]
+/Resources
+<<
+/Font 383 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 384 0 R
+/ColorSpace 385 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [386 0 R 387 0 R 388 0 R 389 0 R 390 0 R]
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+16 0 obj
+<<
+/Annots [391 0 R]
+/Resources
+<<
+/Font 392 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 393 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [394 0 R 395 0 R 396 0 R 397 0 R 398 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+17 0 obj
+<<
+/Annots [399 0 R 400 0 R 401 0 R]
+/Resources
+<<
+/Font 402 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 403 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [404 0 R 405 0 R 406 0 R 407 0 R 408 0 R]
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+18 0 obj
+<<
+/Annots [409 0 R]
+/Resources
+<<
+/Font 410 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 411 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [412 0 R 413 0 R 414 0 R 415 0 R 416 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+19 0 obj
+<<
+/Annots [417 0 R]
+/Resources
+<<
+/Font 418 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 419 0 R
+/ColorSpace 420 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [421 0 R 422 0 R 423 0 R 424 0 R 425 0 R]
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+20 0 obj
+<<
+/Annots [426 0 R 427 0 R 428 0 R 429 0 R 430 0 R 431 0 R 432 0 R 433 0 R 434 0 R 435 0 R 436 0 R 437 0 R 438 0 R 439 0 R 440 0 R 441 0 R 442 0 R 443 0 R 444 0 R 445 0 R 446 0 R 447 0 R 448 0 R]
+/Resources
+<<
+/Font 449 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 450 0 R
+>>
+/Type /Page
+/Parent 350 0 R
+/Contents [451 0 R 452 0 R 453 0 R 454 0 R 455 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+21 0 obj
+<<
+/Annots [456 0 R 457 0 R 458 0 R 459 0 R 460 0 R 461 0 R 462 0 R 463 0 R 464 0 R 465 0 R 466 0 R 467 0 R 468 0 R 469 0 R 470 0 R 471 0 R 472 0 R 473 0 R 474 0 R 475 0 R 476 0 R 477 0 R 478 0 R 479 0 R 480 0 R 481 0 R 482 0 R 483 0 R 484 0 R 485 0 R 486 0 R 487 0 R 488 0 R]
+/Resources
+<<
+/Font 489 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 490 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 491 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+22 0 obj
+<<
+/Annots [492 0 R 493 0 R 494 0 R 495 0 R 496 0 R 497 0 R 498 0 R 499 0 R 500 0 R 501 0 R 502 0 R 503 0 R 504 0 R 505 0 R 506 0 R 507 0 R 508 0 R 509 0 R 510 0 R 511 0 R 512 0 R 513 0 R 514 0 R 515 0 R 516 0 R 517 0 R 518 0 R 519 0 R 520 0 R 521 0 R 522 0 R 523 0 R 524 0 R 525 0 R 526 0 R 527 0 R 528 0 R 529 0 R]
+/Resources
+<<
+/Font 530 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 531 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 532 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+23 0 obj
+<<
+/Annots [533 0 R 534 0 R 535 0 R 536 0 R 537 0 R 538 0 R 539 0 R 540 0 R 541 0 R 542 0 R 543 0 R 544 0 R 545 0 R 546 0 R 547 0 R 548 0 R 549 0 R 550 0 R 551 0 R 552 0 R 553 0 R 554 0 R 555 0 R 556 0 R 557 0 R 558 0 R 559 0 R 560 0 R 561 0 R 562 0 R 563 0 R 564 0 R 565 0 R 566 0 R 567 0 R 568 0 R]
+/Resources
+<<
+/Font 569 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 570 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 571 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+24 0 obj
+<<
+/Annots [572 0 R 573 0 R 574 0 R 575 0 R 576 0 R 577 0 R 578 0 R 579 0 R 580 0 R 581 0 R 582 0 R 583 0 R 584 0 R 585 0 R 586 0 R 587 0 R 588 0 R 589 0 R 590 0 R 591 0 R 592 0 R 593 0 R 594 0 R 595 0 R 596 0 R 597 0 R 598 0 R 599 0 R 600 0 R 601 0 R 602 0 R 603 0 R 604 0 R 605 0 R 606 0 R 607 0 R 608 0 R]
+/Resources
+<<
+/Font 609 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 610 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 611 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+25 0 obj
+<<
+/Annots [612 0 R 613 0 R 614 0 R 615 0 R 616 0 R 617 0 R 618 0 R 619 0 R 620 0 R]
+/Resources
+<<
+/Font 621 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 622 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 623 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+26 0 obj
+<<
+/Annots [624 0 R]
+/Resources
+<<
+/Font 625 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 626 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 627 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+27 0 obj
+<<
+/Resources
+<<
+/Font 628 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 629 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 630 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+28 0 obj
+<<
+/Resources
+<<
+/Font 631 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 632 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 633 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+29 0 obj
+<<
+/Resources
+<<
+/Font 634 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 635 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 636 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+30 0 obj
+<<
+/Annots [637 0 R 638 0 R]
+/Resources
+<<
+/Font 639 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 640 0 R
+>>
+/Type /Page
+/Parent 641 0 R
+/Contents [642 0 R 643 0 R 644 0 R 645 0 R 646 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+31 0 obj
+<<
+/Resources
+<<
+/Font 647 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 648 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 649 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+32 0 obj
+<<
+/Resources
+<<
+/Font 650 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 651 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 652 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+33 0 obj
+<<
+/Resources
+<<
+/Font 653 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 654 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 655 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+34 0 obj
+<<
+/Resources
+<<
+/Font 656 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 657 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 658 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+35 0 obj
+<<
+/Resources
+<<
+/Font 659 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 660 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 661 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+36 0 obj
+<<
+/Annots [662 0 R]
+/Resources
+<<
+/Font 663 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 664 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 665 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+37 0 obj
+<<
+/Resources
+<<
+/Font 666 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 667 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 668 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+38 0 obj
+<<
+/Resources
+<<
+/Font 669 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 670 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 671 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+39 0 obj
+<<
+/Annots [672 0 R]
+/Resources
+<<
+/Font 673 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 674 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 675 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+40 0 obj
+<<
+/Annots [676 0 R 677 0 R 678 0 R 679 0 R]
+/Resources
+<<
+/Font 680 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 681 0 R
+>>
+/Type /Page
+/Parent 682 0 R
+/Contents [683 0 R 684 0 R 685 0 R 686 0 R 687 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+41 0 obj
+<<
+/Resources
+<<
+/Font 688 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 689 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 690 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+42 0 obj
+<<
+/Resources
+<<
+/Font 691 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 692 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 693 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+43 0 obj
+<<
+/Resources
+<<
+/Font 694 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 695 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 696 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+44 0 obj
+<<
+/Annots [697 0 R]
+/Resources
+<<
+/Font 698 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 699 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 700 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+45 0 obj
+<<
+/Resources
+<<
+/Font 701 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 702 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 703 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+46 0 obj
+<<
+/Annots [704 0 R]
+/Resources
+<<
+/Font 705 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 706 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 707 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+47 0 obj
+<<
+/Resources
+<<
+/Font 708 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 709 0 R
+/ColorSpace 710 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 711 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+48 0 obj
+<<
+/Annots [712 0 R 713 0 R]
+/Resources
+<<
+/Font 714 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 715 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 716 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+49 0 obj
+<<
+/Resources
+<<
+/Font 717 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 718 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 719 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+50 0 obj
+<<
+/Annots [720 0 R 721 0 R]
+/Resources
+<<
+/Font 722 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 723 0 R
+>>
+/Type /Page
+/Parent 724 0 R
+/Contents [725 0 R 726 0 R 727 0 R 728 0 R 729 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+51 0 obj
+<<
+/Annots [730 0 R]
+/Resources
+<<
+/Font 731 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 732 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 733 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+52 0 obj
+<<
+/Annots [734 0 R 735 0 R]
+/Resources
+<<
+/Font 736 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 737 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 738 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+53 0 obj
+<<
+/Annots [739 0 R]
+/Resources
+<<
+/Font 740 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 741 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 742 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+54 0 obj
+<<
+/Annots [743 0 R]
+/Resources
+<<
+/Font 744 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 745 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 746 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+55 0 obj
+<<
+/Annots [747 0 R]
+/Resources
+<<
+/Font 748 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 749 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 750 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+56 0 obj
+<<
+/Annots [751 0 R 752 0 R 753 0 R 754 0 R]
+/Resources
+<<
+/Font 755 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 756 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 757 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+57 0 obj
+<<
+/Annots [758 0 R]
+/Resources
+<<
+/Font 759 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 760 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 761 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+58 0 obj
+<<
+/Annots [762 0 R 763 0 R 764 0 R]
+/Resources
+<<
+/Font 765 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 766 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 767 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+59 0 obj
+<<
+/Resources
+<<
+/Font 768 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 769 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 770 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+60 0 obj
+<<
+/Annots [771 0 R 772 0 R]
+/Resources
+<<
+/Font 773 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 774 0 R
+>>
+/Type /Page
+/Parent 775 0 R
+/Contents [776 0 R 777 0 R 778 0 R 779 0 R 780 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+61 0 obj
+<<
+/Resources
+<<
+/Font 781 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 782 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 783 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+62 0 obj
+<<
+/Annots [784 0 R 785 0 R]
+/Resources
+<<
+/Font 786 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 787 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 788 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+63 0 obj
+<<
+/Annots [789 0 R]
+/Resources
+<<
+/Font 790 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 791 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 792 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+64 0 obj
+<<
+/Annots [793 0 R 794 0 R]
+/Resources
+<<
+/Font 795 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 796 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 797 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+65 0 obj
+<<
+/Annots [798 0 R 799 0 R]
+/Resources
+<<
+/Font 800 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 801 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 802 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+66 0 obj
+<<
+/Annots [803 0 R 804 0 R]
+/Resources
+<<
+/Font 805 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 806 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 807 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+67 0 obj
+<<
+/Annots [808 0 R 809 0 R]
+/Resources
+<<
+/Font 810 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 811 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 812 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+68 0 obj
+<<
+/Resources
+<<
+/Font 813 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 814 0 R
+/ExtGState 815 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 816 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+69 0 obj
+<<
+/Resources
+<<
+/Font 817 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 818 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 819 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+70 0 obj
+<<
+/Annots [820 0 R 821 0 R 822 0 R 823 0 R]
+/Resources
+<<
+/Font 824 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 825 0 R
+>>
+/Type /Page
+/Parent 826 0 R
+/Contents [827 0 R 828 0 R 829 0 R 830 0 R 831 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+71 0 obj
+<<
+/Annots [832 0 R]
+/Resources
+<<
+/Font 833 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 834 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 835 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+72 0 obj
+<<
+/Annots [836 0 R 837 0 R]
+/Resources
+<<
+/Font 838 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 839 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 840 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+73 0 obj
+<<
+/Resources
+<<
+/Font 841 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 842 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 843 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+74 0 obj
+<<
+/Resources
+<<
+/Font 844 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 845 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 846 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+75 0 obj
+<<
+/Annots [847 0 R]
+/Resources
+<<
+/Font 848 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 849 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 850 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+76 0 obj
+<<
+/Resources
+<<
+/Font 851 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 852 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 853 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+77 0 obj
+<<
+/Resources
+<<
+/Font 854 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 855 0 R
+/ColorSpace 856 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 857 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+78 0 obj
+<<
+/Annots [858 0 R]
+/Resources
+<<
+/Font 859 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 860 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 861 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+79 0 obj
+<<
+/Resources
+<<
+/Font 862 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 863 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 864 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+80 0 obj
+<<
+/Annots [865 0 R 866 0 R]
+/Resources
+<<
+/Font 867 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 868 0 R
+>>
+/Type /Page
+/Parent 869 0 R
+/Contents [870 0 R 871 0 R 872 0 R 873 0 R 874 0 R]
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+81 0 obj
+<<
+/Resources
+<<
+/Font 875 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 876 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 877 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+82 0 obj
+<<
+/Resources
+<<
+/Font 878 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 879 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 880 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+83 0 obj
+<<
+/Annots [881 0 R]
+/Resources
+<<
+/Font 882 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 883 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 884 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+84 0 obj
+<<
+/Resources
+<<
+/Font 885 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 886 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 887 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+85 0 obj
+<<
+/Annots [888 0 R]
+/Resources
+<<
+/Font 889 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 890 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 891 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+86 0 obj
+<<
+/Resources
+<<
+/Font 892 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 893 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 894 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+87 0 obj
+<<
+/Resources
+<<
+/Font 895 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 896 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 897 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+88 0 obj
+<<
+/Annots [898 0 R 899 0 R 900 0 R]
+/Resources
+<<
+/Font 901 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 902 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 903 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+89 0 obj
+<<
+/Annots [904 0 R 905 0 R]
+/Resources
+<<
+/Font 906 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 907 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 908 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+90 0 obj
+<<
+/Annots [909 0 R 910 0 R 911 0 R]
+/Resources
+<<
+/Font 912 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 913 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 914 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+91 0 obj
+<<
+/Annots [915 0 R]
+/Resources
+<<
+/Font 916 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 917 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 918 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+92 0 obj
+<<
+/Resources
+<<
+/Font 919 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 920 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 921 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+93 0 obj
+<<
+/Annots [922 0 R 923 0 R]
+/Resources
+<<
+/Font 924 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 925 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 926 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+94 0 obj
+<<
+/Resources
+<<
+/Font 927 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 928 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 929 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+95 0 obj
+<<
+/Resources
+<<
+/Font 930 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 931 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 932 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+96 0 obj
+<<
+/Resources
+<<
+/Font 933 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 934 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 935 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+97 0 obj
+<<
+/Annots [936 0 R]
+/Resources
+<<
+/Font 937 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 938 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 939 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+98 0 obj
+<<
+/Annots [940 0 R 941 0 R]
+/Resources
+<<
+/Font 942 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 943 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 944 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+99 0 obj
+<<
+/Resources
+<<
+/Font 945 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 946 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 947 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+100 0 obj
+<<
+/Annots [948 0 R]
+/Resources
+<<
+/Font 949 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 950 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 951 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+101 0 obj
+<<
+/Annots [952 0 R]
+/Resources
+<<
+/Font 953 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 954 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 955 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+102 0 obj
+<<
+/Resources
+<<
+/Font 956 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 957 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 958 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+103 0 obj
+<<
+/Resources
+<<
+/Font 959 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 960 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 961 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+104 0 obj
+<<
+/Annots [962 0 R]
+/Resources
+<<
+/Font 963 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 964 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 965 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+105 0 obj
+<<
+/Resources
+<<
+/Font 966 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 967 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 968 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+106 0 obj
+<<
+/Annots [969 0 R]
+/Resources
+<<
+/Font 970 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 971 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 972 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+107 0 obj
+<<
+/Annots [973 0 R]
+/Resources
+<<
+/Font 974 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 975 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 976 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+108 0 obj
+<<
+/Annots [977 0 R]
+/Resources
+<<
+/Font 978 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 979 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 980 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+109 0 obj
+<<
+/Annots [981 0 R 982 0 R]
+/Resources
+<<
+/Font 983 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 984 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 985 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+110 0 obj
+<<
+/Annots [986 0 R]
+/Resources
+<<
+/Font 987 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 988 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 989 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+111 0 obj
+<<
+/Annots [990 0 R]
+/Resources
+<<
+/Font 991 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 992 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 993 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+112 0 obj
+<<
+/Annots [994 0 R]
+/Resources
+<<
+/Font 995 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 996 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 997 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+113 0 obj
+<<
+/Resources
+<<
+/Font 998 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 999 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1000 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+114 0 obj
+<<
+/Annots [1001 0 R]
+/Resources
+<<
+/Font 1002 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1003 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1004 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+115 0 obj
+<<
+/Annots [1005 0 R]
+/Resources
+<<
+/Font 1006 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1007 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1008 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+116 0 obj
+<<
+/Annots [1009 0 R]
+/Resources
+<<
+/Font 1010 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1011 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1012 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+117 0 obj
+<<
+/Resources
+<<
+/Font 1013 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1014 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1015 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+118 0 obj
+<<
+/Resources
+<<
+/Font 1016 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1017 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1018 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+119 0 obj
+<<
+/Resources
+<<
+/Font 1019 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1020 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1021 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+120 0 obj
+<<
+/Resources
+<<
+/Font 1022 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1023 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1024 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+121 0 obj
+<<
+/Resources
+<<
+/Font 1025 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1026 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1027 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+122 0 obj
+<<
+/Annots [1028 0 R 1029 0 R 1030 0 R 1031 0 R 1032 0 R]
+/Resources
+<<
+/Font 1033 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1034 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1035 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+123 0 obj
+<<
+/Resources
+<<
+/Font 1036 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1037 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1038 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+124 0 obj
+<<
+/Resources
+<<
+/Font 1039 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1040 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1041 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+125 0 obj
+<<
+/Annots [1042 0 R 1043 0 R 1044 0 R 1045 0 R]
+/Resources
+<<
+/Font 1046 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1047 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1048 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+126 0 obj
+<<
+/Annots [1049 0 R 1050 0 R 1051 0 R]
+/Resources
+<<
+/Font 1052 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1053 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1054 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+127 0 obj
+<<
+/Resources
+<<
+/Font 1055 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1056 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1057 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+128 0 obj
+<<
+/Annots [1058 0 R]
+/Resources
+<<
+/Font 1059 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1060 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1061 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+129 0 obj
+<<
+/Resources
+<<
+/Font 1062 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1063 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1064 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+130 0 obj
+<<
+/Annots [1065 0 R 1066 0 R]
+/Resources
+<<
+/Font 1067 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1068 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1069 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+131 0 obj
+<<
+/Resources
+<<
+/Font 1070 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1071 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1072 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+132 0 obj
+<<
+/Resources
+<<
+/Font 1073 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1074 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1075 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+133 0 obj
+<<
+/Resources
+<<
+/Font 1076 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1077 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1078 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+134 0 obj
+<<
+/Annots [1079 0 R]
+/Resources
+<<
+/Font 1080 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1081 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1082 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+135 0 obj
+<<
+/Resources
+<<
+/Font 1083 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1084 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1085 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+136 0 obj
+<<
+/Resources
+<<
+/Font 1086 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1087 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1088 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+137 0 obj
+<<
+/Annots [1089 0 R]
+/Resources
+<<
+/Font 1090 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1091 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1092 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+138 0 obj
+<<
+/Annots [1093 0 R]
+/Resources
+<<
+/Font 1094 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1095 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1096 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+139 0 obj
+<<
+/Resources
+<<
+/Font 1097 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1098 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1099 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+140 0 obj
+<<
+/Annots [1100 0 R]
+/Resources
+<<
+/Font 1101 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1102 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1103 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+141 0 obj
+<<
+/Annots [1104 0 R]
+/Resources
+<<
+/Font 1105 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1106 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1107 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+142 0 obj
+<<
+/Resources
+<<
+/Font 1108 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1109 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1110 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+143 0 obj
+<<
+/Annots [1111 0 R 1112 0 R]
+/Resources
+<<
+/Font 1113 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1114 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1115 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+144 0 obj
+<<
+/Resources
+<<
+/Font 1116 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1117 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1118 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+145 0 obj
+<<
+/Resources
+<<
+/Font 1119 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1120 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1121 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+146 0 obj
+<<
+/Annots [1122 0 R]
+/Resources
+<<
+/Font 1123 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1124 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1125 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+147 0 obj
+<<
+/Resources
+<<
+/Font 1126 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1127 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1128 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+148 0 obj
+<<
+/Resources
+<<
+/Font 1129 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1130 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1131 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+149 0 obj
+<<
+/Resources
+<<
+/Font 1132 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1133 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1134 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+150 0 obj
+<<
+/Annots [1135 0 R]
+/Resources
+<<
+/Font 1136 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1137 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1138 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+151 0 obj
+<<
+/Annots [1139 0 R]
+/Resources
+<<
+/Font 1140 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1141 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1142 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+152 0 obj
+<<
+/Resources
+<<
+/Font 1143 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1144 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1145 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+153 0 obj
+<<
+/Annots [1146 0 R 1147 0 R 1148 0 R]
+/Resources
+<<
+/Font 1149 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1150 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1151 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+154 0 obj
+<<
+/Resources
+<<
+/Font 1152 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1153 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1154 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+155 0 obj
+<<
+/Resources
+<<
+/Font 1155 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1156 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1157 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+156 0 obj
+<<
+/Annots [1158 0 R]
+/Resources
+<<
+/Font 1159 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1160 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1161 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+157 0 obj
+<<
+/Resources
+<<
+/Font 1162 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1163 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1164 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+158 0 obj
+<<
+/Resources
+<<
+/Font 1165 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1166 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1167 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+159 0 obj
+<<
+/Annots [1168 0 R]
+/Resources
+<<
+/Font 1169 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1170 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1171 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+160 0 obj
+<<
+/Resources
+<<
+/Font 1172 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1173 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1174 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+161 0 obj
+<<
+/Annots [1175 0 R 1176 0 R 1177 0 R]
+/Resources
+<<
+/Font 1178 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1179 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1180 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+162 0 obj
+<<
+/Annots [1181 0 R 1182 0 R]
+/Resources
+<<
+/Font 1183 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1184 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1185 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+163 0 obj
+<<
+/Resources
+<<
+/Font 1186 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1187 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1188 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+164 0 obj
+<<
+/Resources
+<<
+/Font 1189 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1190 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1191 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+165 0 obj
+<<
+/Annots [1192 0 R]
+/Resources
+<<
+/Font 1193 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1194 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1195 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+166 0 obj
+<<
+/Annots [1196 0 R]
+/Resources
+<<
+/Font 1197 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1198 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1199 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+167 0 obj
+<<
+/Annots [1200 0 R]
+/Resources
+<<
+/Font 1201 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1202 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1203 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+168 0 obj
+<<
+/Annots [1204 0 R]
+/Resources
+<<
+/Font 1205 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1206 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1207 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+169 0 obj
+<<
+/Annots [1208 0 R]
+/Resources
+<<
+/Font 1209 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1210 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1211 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+170 0 obj
+<<
+/Resources
+<<
+/Font 1212 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1213 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1214 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+171 0 obj
+<<
+/Resources
+<<
+/Font 1215 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1216 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1217 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+172 0 obj
+<<
+/Annots [1218 0 R]
+/Resources
+<<
+/Font 1219 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1220 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1221 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+173 0 obj
+<<
+/Resources
+<<
+/Font 1222 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1223 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1224 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+174 0 obj
+<<
+/Annots [1225 0 R]
+/Resources
+<<
+/Font 1226 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1227 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1228 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+175 0 obj
+<<
+/Annots [1229 0 R]
+/Resources
+<<
+/Font 1230 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1231 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1232 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+176 0 obj
+<<
+/Annots [1233 0 R]
+/Resources
+<<
+/Font 1234 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1235 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1236 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+177 0 obj
+<<
+/Resources
+<<
+/Font 1237 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1238 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1239 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+178 0 obj
+<<
+/Resources
+<<
+/Font 1240 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1241 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1242 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+179 0 obj
+<<
+/Annots [1243 0 R 1244 0 R]
+/Resources
+<<
+/Font 1245 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1246 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1247 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+180 0 obj
+<<
+/Resources
+<<
+/Font 1248 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1249 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1250 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+181 0 obj
+<<
+/Annots [1251 0 R]
+/Resources
+<<
+/Font 1252 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1253 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1254 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+182 0 obj
+<<
+/Annots [1255 0 R]
+/Resources
+<<
+/Font 1256 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1257 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1258 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+183 0 obj
+<<
+/Resources
+<<
+/Font 1259 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1260 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1261 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+184 0 obj
+<<
+/Annots [1262 0 R]
+/Resources
+<<
+/Font 1263 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1264 0 R
+/ExtGState 1265 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1266 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+185 0 obj
+<<
+/Resources
+<<
+/Font 1267 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1268 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1269 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+186 0 obj
+<<
+/Annots [1270 0 R]
+/Resources
+<<
+/Font 1271 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1272 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1273 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+187 0 obj
+<<
+/Resources
+<<
+/Font 1274 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1275 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1276 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+188 0 obj
+<<
+/Resources
+<<
+/Font 1277 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1278 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1279 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+189 0 obj
+<<
+/Annots [1280 0 R]
+/Resources
+<<
+/Font 1281 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1282 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1283 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+190 0 obj
+<<
+/Annots [1284 0 R]
+/Resources
+<<
+/Font 1285 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1286 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1287 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+191 0 obj
+<<
+/Annots [1288 0 R 1289 0 R 1290 0 R 1291 0 R]
+/Resources
+<<
+/Font 1292 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1293 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1294 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+192 0 obj
+<<
+/Annots [1295 0 R]
+/Resources
+<<
+/Font 1296 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1297 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1298 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+193 0 obj
+<<
+/Resources
+<<
+/Font 1299 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1300 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1301 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+194 0 obj
+<<
+/Resources
+<<
+/Font 1302 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1303 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1304 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+195 0 obj
+<<
+/Annots [1305 0 R]
+/Resources
+<<
+/Font 1306 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1307 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1308 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+196 0 obj
+<<
+/Annots [1309 0 R]
+/Resources
+<<
+/Font 1310 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1311 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1312 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+197 0 obj
+<<
+/Resources
+<<
+/Font 1313 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1314 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1315 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+198 0 obj
+<<
+/Annots [1316 0 R 1317 0 R]
+/Resources
+<<
+/Font 1318 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1319 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1320 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+199 0 obj
+<<
+/Annots [1321 0 R]
+/Resources
+<<
+/Font 1322 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1323 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1324 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+200 0 obj
+<<
+/Annots [1325 0 R 1326 0 R]
+/Resources
+<<
+/Font 1327 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1328 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1329 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+201 0 obj
+<<
+/Annots [1330 0 R 1331 0 R]
+/Resources
+<<
+/Font 1332 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1333 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1334 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+202 0 obj
+<<
+/Annots [1335 0 R]
+/Resources
+<<
+/Font 1336 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1337 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1338 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+203 0 obj
+<<
+/Annots [1339 0 R]
+/Resources
+<<
+/Font 1340 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1341 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1342 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+204 0 obj
+<<
+/Annots [1343 0 R]
+/Resources
+<<
+/Font 1344 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1345 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1346 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+205 0 obj
+<<
+/Resources
+<<
+/Font 1347 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1348 0 R
+/ExtGState 1349 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1350 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+206 0 obj
+<<
+/Resources
+<<
+/Font 1351 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1352 0 R
+/ExtGState 1353 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1354 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+207 0 obj
+<<
+/Annots [1355 0 R]
+/Resources
+<<
+/Font 1356 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1357 0 R
+/ExtGState 1358 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1359 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+208 0 obj
+<<
+/Resources
+<<
+/Font 1360 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1361 0 R
+/ExtGState 1362 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1363 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+209 0 obj
+<<
+/Annots [1364 0 R]
+/Resources
+<<
+/Font 1365 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1366 0 R
+/ExtGState 1367 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1368 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+210 0 obj
+<<
+/Resources
+<<
+/Font 1369 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1370 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1371 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+211 0 obj
+<<
+/Annots [1372 0 R 1373 0 R]
+/Resources
+<<
+/Font 1374 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1375 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1376 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+212 0 obj
+<<
+/Annots [1377 0 R 1378 0 R]
+/Resources
+<<
+/Font 1379 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1380 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1381 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+213 0 obj
+<<
+/Annots [1382 0 R]
+/Resources
+<<
+/Font 1383 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1384 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1385 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+214 0 obj
+<<
+/Annots [1386 0 R]
+/Resources
+<<
+/Font 1387 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1388 0 R
+/ExtGState 1389 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1390 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+215 0 obj
+<<
+/Resources
+<<
+/Font 1391 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1392 0 R
+/ExtGState 1393 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1394 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+216 0 obj
+<<
+/Annots [1395 0 R]
+/Resources
+<<
+/Font 1396 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1397 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1398 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+217 0 obj
+<<
+/Resources
+<<
+/Font 1399 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1400 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1401 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+218 0 obj
+<<
+/Resources
+<<
+/Font 1402 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1403 0 R
+/ExtGState 1404 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1405 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+219 0 obj
+<<
+/Annots [1406 0 R]
+/Resources
+<<
+/Font 1407 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1408 0 R
+/ExtGState 1409 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1410 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+220 0 obj
+<<
+/Annots [1411 0 R]
+/Resources
+<<
+/Font 1412 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1413 0 R
+/ExtGState 1414 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1415 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+221 0 obj
+<<
+/Annots [1416 0 R]
+/Resources
+<<
+/Font 1417 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1418 0 R
+/ExtGState 1419 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1420 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+222 0 obj
+<<
+/Annots [1421 0 R]
+/Resources
+<<
+/Font 1422 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1423 0 R
+/ExtGState 1424 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1425 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+223 0 obj
+<<
+/Resources
+<<
+/Font 1426 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1427 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1428 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+224 0 obj
+<<
+/Annots [1429 0 R]
+/Resources
+<<
+/Font 1430 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1431 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1432 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+225 0 obj
+<<
+/Resources
+<<
+/Font 1433 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1434 0 R
+/ExtGState 1435 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1436 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+226 0 obj
+<<
+/Resources
+<<
+/Font 1437 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1438 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1439 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+227 0 obj
+<<
+/Annots [1440 0 R]
+/Resources
+<<
+/Font 1441 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1442 0 R
+/ExtGState 1443 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1444 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+228 0 obj
+<<
+/Annots [1445 0 R 1446 0 R]
+/Resources
+<<
+/Font 1447 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1448 0 R
+/ExtGState 1449 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1450 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+229 0 obj
+<<
+/Resources
+<<
+/Font 1451 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1452 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1453 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+230 0 obj
+<<
+/Annots [1454 0 R]
+/Resources
+<<
+/Font 1455 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1456 0 R
+/ExtGState 1457 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1458 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+231 0 obj
+<<
+/Resources
+<<
+/Font 1459 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1460 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1461 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+232 0 obj
+<<
+/Resources
+<<
+/Font 1462 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1463 0 R
+/ExtGState 1464 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1465 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+233 0 obj
+<<
+/Annots [1466 0 R]
+/Resources
+<<
+/Font 1467 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1468 0 R
+/ExtGState 1469 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1470 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+234 0 obj
+<<
+/Resources
+<<
+/Font 1471 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1472 0 R
+/ExtGState 1473 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1474 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+235 0 obj
+<<
+/Annots [1475 0 R]
+/Resources
+<<
+/Font 1476 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1477 0 R
+/ExtGState 1478 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1479 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+236 0 obj
+<<
+/Resources
+<<
+/Font 1480 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1481 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1482 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+237 0 obj
+<<
+/Resources
+<<
+/Font 1483 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1484 0 R
+/ExtGState 1485 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1486 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+238 0 obj
+<<
+/Annots [1487 0 R 1488 0 R 1489 0 R]
+/Resources
+<<
+/Font 1490 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1491 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1492 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+239 0 obj
+<<
+/Annots [1493 0 R 1494 0 R]
+/Resources
+<<
+/Font 1495 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1496 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1497 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+240 0 obj
+<<
+/Resources
+<<
+/Font 1498 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1499 0 R
+/ExtGState 1500 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1501 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+241 0 obj
+<<
+/Annots [1502 0 R 1503 0 R]
+/Resources
+<<
+/Font 1504 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1505 0 R
+/ExtGState 1506 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1507 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+242 0 obj
+<<
+/Annots [1508 0 R 1509 0 R 1510 0 R 1511 0 R]
+/Resources
+<<
+/Font 1512 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1513 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1514 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+243 0 obj
+<<
+/Resources
+<<
+/Font 1515 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1516 0 R
+/ExtGState 1517 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1518 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+244 0 obj
+<<
+/Resources
+<<
+/Font 1519 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1520 0 R
+/ExtGState 1521 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1522 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+245 0 obj
+<<
+/Resources
+<<
+/Font 1523 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1524 0 R
+/ExtGState 1525 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1526 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+246 0 obj
+<<
+/Annots [1527 0 R]
+/Resources
+<<
+/Font 1528 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1529 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1530 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+247 0 obj
+<<
+/Resources
+<<
+/Font 1531 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1532 0 R
+/ExtGState 1533 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1534 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+248 0 obj
+<<
+/Resources
+<<
+/Font 1535 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1536 0 R
+/ExtGState 1537 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1538 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+249 0 obj
+<<
+/Annots [1539 0 R]
+/Resources
+<<
+/Font 1540 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1541 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1542 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+250 0 obj
+<<
+/Resources
+<<
+/Font 1543 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1544 0 R
+/ExtGState 1545 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1546 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+251 0 obj
+<<
+/Resources
+<<
+/Font 1547 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1548 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1549 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+252 0 obj
+<<
+/Resources
+<<
+/Font 1550 0 R
+/ProcSet [/PDF /ImageC /Text]
+/XObject 1551 0 R
+/ExtGState 1552 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1553 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+253 0 obj
+<<
+/Annots [1554 0 R]
+/Resources
+<<
+/Font 1555 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1556 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1557 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+254 0 obj
+<<
+/Resources
+<<
+/Font 1558 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1559 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1560 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+255 0 obj
+<<
+/Resources
+<<
+/Font 1561 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1562 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1563 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+256 0 obj
+<<
+/Annots [1564 0 R]
+/Resources
+<<
+/Font 1565 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1566 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1567 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+257 0 obj
+<<
+/Annots [1568 0 R]
+/Resources
+<<
+/Font 1569 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1570 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1571 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+258 0 obj
+<<
+/Annots [1572 0 R 1573 0 R]
+/Resources
+<<
+/Font 1574 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1575 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1576 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+259 0 obj
+<<
+/Resources
+<<
+/Font 1577 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1578 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1579 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+260 0 obj
+<<
+/Annots [1580 0 R]
+/Resources
+<<
+/Font 1581 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1582 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1583 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+261 0 obj
+<<
+/Annots [1584 0 R 1585 0 R]
+/Resources
+<<
+/Font 1586 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1587 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1588 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+262 0 obj
+<<
+/Annots [1589 0 R]
+/Resources
+<<
+/Font 1590 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1591 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1592 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+263 0 obj
+<<
+/Annots [1593 0 R 1594 0 R]
+/Resources
+<<
+/Font 1595 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1596 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1597 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+264 0 obj
+<<
+/Annots [1598 0 R 1599 0 R]
+/Resources
+<<
+/Font 1600 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1601 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1602 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+265 0 obj
+<<
+/Resources
+<<
+/Font 1603 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1604 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1605 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+266 0 obj
+<<
+/Annots [1606 0 R]
+/Resources
+<<
+/Font 1607 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1608 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1609 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+267 0 obj
+<<
+/Resources
+<<
+/Font 1610 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1611 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1612 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+268 0 obj
+<<
+/Resources
+<<
+/Font 1613 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1614 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1615 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+269 0 obj
+<<
+/Annots [1616 0 R]
+/Resources
+<<
+/Font 1617 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1618 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1619 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+270 0 obj
+<<
+/Resources
+<<
+/Font 1620 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1621 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1622 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+271 0 obj
+<<
+/Annots [1623 0 R]
+/Resources
+<<
+/Font 1624 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1625 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1626 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+272 0 obj
+<<
+/Annots [1627 0 R]
+/Resources
+<<
+/Font 1628 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1629 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1630 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+273 0 obj
+<<
+/Annots [1631 0 R 1632 0 R 1633 0 R 1634 0 R 1635 0 R]
+/Resources
+<<
+/Font 1636 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1637 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1638 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+274 0 obj
+<<
+/Annots [1639 0 R]
+/Resources
+<<
+/Font 1640 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1641 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1642 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+275 0 obj
+<<
+/Annots [1643 0 R]
+/Resources
+<<
+/Font 1644 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1645 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1646 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+276 0 obj
+<<
+/Annots [1647 0 R]
+/Resources
+<<
+/Font 1648 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1649 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1650 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+277 0 obj
+<<
+/Resources
+<<
+/Font 1651 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1652 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1653 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+278 0 obj
+<<
+/Resources
+<<
+/Font 1654 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1655 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1656 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+279 0 obj
+<<
+/Resources
+<<
+/Font 1657 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1658 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1659 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+280 0 obj
+<<
+/Annots [1660 0 R]
+/Resources
+<<
+/Font 1661 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1662 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1663 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+281 0 obj
+<<
+/Annots [1664 0 R 1665 0 R]
+/Resources
+<<
+/Font 1666 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1667 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1668 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+282 0 obj
+<<
+/Annots [1669 0 R]
+/Resources
+<<
+/Font 1670 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1671 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1672 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+283 0 obj
+<<
+/Annots [1673 0 R]
+/Resources
+<<
+/Font 1674 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1675 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1676 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+284 0 obj
+<<
+/Resources
+<<
+/Font 1677 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1678 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1679 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+285 0 obj
+<<
+/Annots [1680 0 R]
+/Resources
+<<
+/Font 1681 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1682 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1683 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+286 0 obj
+<<
+/Resources
+<<
+/Font 1684 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1685 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1686 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+287 0 obj
+<<
+/Resources
+<<
+/Font 1687 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1688 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1689 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+288 0 obj
+<<
+/Annots [1690 0 R]
+/Resources
+<<
+/Font 1691 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1692 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1693 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+289 0 obj
+<<
+/Resources
+<<
+/Font 1694 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1695 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1696 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+290 0 obj
+<<
+/Annots [1697 0 R]
+/Resources
+<<
+/Font 1698 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1699 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1700 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+291 0 obj
+<<
+/Resources
+<<
+/Font 1701 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1702 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1703 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+292 0 obj
+<<
+/Annots [1704 0 R 1705 0 R]
+/Resources
+<<
+/Font 1706 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1707 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1708 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+293 0 obj
+<<
+/Annots [1709 0 R]
+/Resources
+<<
+/Font 1710 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1711 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1712 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+294 0 obj
+<<
+/Annots [1713 0 R 1714 0 R]
+/Resources
+<<
+/Font 1715 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1716 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1717 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+295 0 obj
+<<
+/Annots [1718 0 R]
+/Resources
+<<
+/Font 1719 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1720 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1721 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+296 0 obj
+<<
+/Annots [1722 0 R]
+/Resources
+<<
+/Font 1723 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1724 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1725 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+297 0 obj
+<<
+/Resources
+<<
+/Font 1726 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1727 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1728 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+298 0 obj
+<<
+/Annots [1729 0 R]
+/Resources
+<<
+/Font 1730 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1731 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1732 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+299 0 obj
+<<
+/Annots [1733 0 R]
+/Resources
+<<
+/Font 1734 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1735 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1736 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+300 0 obj
+<<
+/Resources
+<<
+/Font 1737 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1738 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1739 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+301 0 obj
+<<
+/Annots [1740 0 R 1741 0 R]
+/Resources
+<<
+/Font 1742 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1743 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1744 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+302 0 obj
+<<
+/Resources
+<<
+/Font 1745 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1746 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1747 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+303 0 obj
+<<
+/Annots [1748 0 R]
+/Resources
+<<
+/Font 1749 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1750 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1751 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+304 0 obj
+<<
+/Annots [1752 0 R]
+/Resources
+<<
+/Font 1753 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1754 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1755 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+305 0 obj
+<<
+/Resources
+<<
+/Font 1756 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1757 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1758 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+306 0 obj
+<<
+/Annots [1759 0 R]
+/Resources
+<<
+/Font 1760 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1761 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1762 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+307 0 obj
+<<
+/Annots [1763 0 R]
+/Resources
+<<
+/Font 1764 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1765 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1766 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+308 0 obj
+<<
+/Resources
+<<
+/Font 1767 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1768 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1769 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+309 0 obj
+<<
+/Annots [1770 0 R]
+/Resources
+<<
+/Font 1771 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1772 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1773 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+310 0 obj
+<<
+/Resources
+<<
+/Font 1774 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1775 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1776 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+311 0 obj
+<<
+/Resources
+<<
+/Font 1777 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1778 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1779 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+312 0 obj
+<<
+/Annots [1780 0 R]
+/Resources
+<<
+/Font 1781 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1782 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1783 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+313 0 obj
+<<
+/Resources
+<<
+/Font 1784 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1785 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1786 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+314 0 obj
+<<
+/Resources
+<<
+/Font 1787 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1788 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1789 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+315 0 obj
+<<
+/Annots [1790 0 R]
+/Resources
+<<
+/Font 1791 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1792 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1793 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+316 0 obj
+<<
+/Annots [1794 0 R 1795 0 R 1796 0 R 1797 0 R 1798 0 R 1799 0 R]
+/Resources
+<<
+/Font 1800 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1801 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1802 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+317 0 obj
+<<
+/Annots [1803 0 R 1804 0 R 1805 0 R 1806 0 R]
+/Resources
+<<
+/Font 1807 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1808 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1809 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+318 0 obj
+<<
+/Resources
+<<
+/Font 1810 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1811 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1812 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+319 0 obj
+<<
+/Resources
+<<
+/Font 1813 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1814 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1815 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+320 0 obj
+<<
+/Annots [1816 0 R 1817 0 R]
+/Resources
+<<
+/Font 1818 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1819 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1820 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+321 0 obj
+<<
+/Resources
+<<
+/Font 1821 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1822 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1823 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+322 0 obj
+<<
+/Resources
+<<
+/Font 1824 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1825 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1826 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+323 0 obj
+<<
+/Resources
+<<
+/Font 1827 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1828 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1829 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+324 0 obj
+<<
+/Resources
+<<
+/Font 1830 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1831 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1832 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+325 0 obj
+<<
+/Resources
+<<
+/Font 1833 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1834 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1835 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+326 0 obj
+<<
+/Annots [1836 0 R]
+/Resources
+<<
+/Font 1837 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1838 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1839 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+327 0 obj
+<<
+/Resources
+<<
+/Font 1840 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1841 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1842 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+328 0 obj
+<<
+/Annots [1843 0 R 1844 0 R 1845 0 R]
+/Resources
+<<
+/Font 1846 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1847 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1848 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+329 0 obj
+<<
+/Annots [1849 0 R 1850 0 R 1851 0 R]
+/Resources
+<<
+/Font 1852 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1853 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1854 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+330 0 obj
+<<
+/Resources
+<<
+/Font 1855 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1856 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1857 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+331 0 obj
+<<
+/Resources
+<<
+/Font 1858 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1859 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1860 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+332 0 obj
+<<
+/Annots [1861 0 R 1862 0 R]
+/Resources
+<<
+/Font 1863 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1864 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1865 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+333 0 obj
+<<
+/Resources
+<<
+/Font 1866 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1867 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1868 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+334 0 obj
+<<
+/Annots [1869 0 R]
+/Resources
+<<
+/Font 1870 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1871 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1872 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+335 0 obj
+<<
+/Annots [1873 0 R]
+/Resources
+<<
+/Font 1874 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1875 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1876 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+336 0 obj
+<<
+/Resources
+<<
+/Font 1877 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1878 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1879 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+337 0 obj
+<<
+/Annots [1880 0 R]
+/Resources
+<<
+/Font 1881 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1882 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1883 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+338 0 obj
+<<
+/Resources
+<<
+/Font 1884 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1885 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1886 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+339 0 obj
+<<
+/Resources
+<<
+/Font 1887 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 1888 0 R
+/ColorSpace 1889 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 1890 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+340 0 obj
+<<
+/Annots [1891 0 R 1892 0 R 1893 0 R 1894 0 R 1895 0 R 1896 0 R 1897 0 R 1898 0 R 1899 0 R 1900 0 R 1901 0 R 1902 0 R 1903 0 R 1904 0 R 1905 0 R 1906 0 R 1907 0 R 1908 0 R 1909 0 R 1910 0 R 1911 0 R 1912 0 R 1913 0 R 1914 0 R 1915 0 R 1916 0 R 1917 0 R 1918 0 R 1919 0 R 1920 0 R 1921 0 R 1922 0 R 1923 0 R 1924 0 R 1925 0 R 1926 0 R 1927 0 R 1928 0 R 1929 0 R 1930 0 R 1931 0 R 1932 0 R 1933 0 R 1934 0 R 1935 0 R 1936 0 R 1937 0 R 1938 0 R 1939 0 R 1940 0 R 1941 0 R 1942 0 R 1943 0 R 1944 0 R 1945 0 R 1946 0 R 1947 0 R 1948 0 R 1949 0 R 1950 0 R 1951 0 R 1952 0 R 1953 0 R 1954 0 R 1955 0 R 1956 0 R 1957 0 R 1958 0 R 1959 0 R 1960 0 R 1961 0 R 1962 0 R 1963 0 R 1964 0 R 1965 0 R 1966 0 R 1967 0 R 1968 0 R 1969 0 R 1970 0 R 1971 0 R 1972 0 R 1973 0 R 1974 0 R 1975 0 R 1976 0 R 1977 0 R 1978 0 R 1979 0 R 1980 0 R 1981 0 R 1982 0 R 1983 0 R 1984 0 R 1985 0 R 1986 0 R 1987 0 R 1988 0 R 1989 0 R 1990 0 R 1991 0 R 1992 0 R 1993 0 R 1994 0 R 1995 0 R 1996 0 R 1997 0 R 1998 0 R 1999 0 R 2000 0 R 2001 0 R 2002 0 R 2003 0 R 2004 0 R 2005 0 R]
+/Resources
+<<
+/Font 2006 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 2007 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 2008 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+341 0 obj
+<<
+/Annots [2009 0 R 2010 0 R 2011 0 R 2012 0 R 2013 0 R 2014 0 R 2015 0 R 2016 0 R 2017 0 R 2018 0 R 2019 0 R 2020 0 R 2021 0 R 2022 0 R 2023 0 R 2024 0 R 2025 0 R 2026 0 R 2027 0 R 2028 0 R 2029 0 R 2030 0 R 2031 0 R 2032 0 R 2033 0 R 2034 0 R 2035 0 R 2036 0 R 2037 0 R 2038 0 R 2039 0 R 2040 0 R 2041 0 R 2042 0 R 2043 0 R 2044 0 R 2045 0 R 2046 0 R 2047 0 R 2048 0 R 2049 0 R 2050 0 R 2051 0 R 2052 0 R 2053 0 R 2054 0 R 2055 0 R 2056 0 R 2057 0 R 2058 0 R 2059 0 R 2060 0 R 2061 0 R 2062 0 R 2063 0 R 2064 0 R 2065 0 R 2066 0 R 2067 0 R 2068 0 R 2069 0 R 2070 0 R 2071 0 R 2072 0 R 2073 0 R 2074 0 R 2075 0 R 2076 0 R 2077 0 R 2078 0 R 2079 0 R 2080 0 R 2081 0 R 2082 0 R 2083 0 R 2084 0 R 2085 0 R 2086 0 R 2087 0 R 2088 0 R 2089 0 R 2090 0 R 2091 0 R 2092 0 R 2093 0 R 2094 0 R 2095 0 R 2096 0 R 2097 0 R 2098 0 R 2099 0 R 2100 0 R 2101 0 R 2102 0 R 2103 0 R 2104 0 R 2105 0 R 2106 0 R 2107 0 R 2108 0 R 2109 0 R 2110 0 R 2111 0 R 2112 0 R 2113 0 R 2114 0 R 2115 0 R 2116 0 R 2117 0 R 2118 0 R 2119 0 R 2120 0 R 2121 0 R 2122 0 R 2123 0 R 2124 0 R 2125 0 R 2126 0 R 2127 0 R 2128 0 R 2129 0 R 2130 0 R 2131 0 R 2132 0 R 2133 0 R 2134 0 R 2135 0 R 2136 0 R 2137 0 R 2138 0 R 2139 0 R 2140 0 R 2141 0 R 2142 0 R 2143 0 R 2144 0 R 2145 0 R 2146 0 R 2147 0 R 2148 0 R 2149 0 R 2150 0 R 2151 0 R 2152 0 R 2153 0 R 2154 0 R 2155 0 R 2156 0 R 2157 0 R 2158 0 R 2159 0 R 2160 0 R 2161 0 R 2162 0 R 2163 0 R 2164 0 R 2165 0 R 2166 0 R 2167 0 R 2168 0 R]
+/Resources
+<<
+/Font 2169 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 2170 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 2171 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+342 0 obj
+<<
+/Annots [2172 0 R 2173 0 R 2174 0 R 2175 0 R 2176 0 R 2177 0 R 2178 0 R 2179 0 R 2180 0 R 2181 0 R 2182 0 R 2183 0 R 2184 0 R 2185 0 R 2186 0 R 2187 0 R 2188 0 R 2189 0 R 2190 0 R 2191 0 R 2192 0 R 2193 0 R 2194 0 R 2195 0 R 2196 0 R 2197 0 R 2198 0 R 2199 0 R 2200 0 R 2201 0 R 2202 0 R 2203 0 R 2204 0 R 2205 0 R 2206 0 R 2207 0 R 2208 0 R 2209 0 R 2210 0 R 2211 0 R 2212 0 R 2213 0 R 2214 0 R 2215 0 R 2216 0 R 2217 0 R 2218 0 R 2219 0 R 2220 0 R 2221 0 R 2222 0 R 2223 0 R 2224 0 R 2225 0 R 2226 0 R 2227 0 R 2228 0 R 2229 0 R 2230 0 R 2231 0 R 2232 0 R 2233 0 R 2234 0 R 2235 0 R 2236 0 R 2237 0 R 2238 0 R 2239 0 R 2240 0 R 2241 0 R 2242 0 R 2243 0 R 2244 0 R 2245 0 R 2246 0 R 2247 0 R 2248 0 R 2249 0 R 2250 0 R 2251 0 R 2252 0 R 2253 0 R 2254 0 R 2255 0 R 2256 0 R 2257 0 R 2258 0 R 2259 0 R 2260 0 R 2261 0 R 2262 0 R 2263 0 R 2264 0 R 2265 0 R 2266 0 R 2267 0 R 2268 0 R 2269 0 R 2270 0 R 2271 0 R 2272 0 R 2273 0 R 2274 0 R 2275 0 R 2276 0 R 2277 0 R 2278 0 R 2279 0 R 2280 0 R 2281 0 R 2282 0 R 2283 0 R 2284 0 R 2285 0 R 2286 0 R 2287 0 R 2288 0 R 2289 0 R 2290 0 R 2291 0 R 2292 0 R 2293 0 R 2294 0 R 2295 0 R 2296 0 R 2297 0 R 2298 0 R 2299 0 R 2300 0 R 2301 0 R 2302 0 R 2303 0 R 2304 0 R 2305 0 R 2306 0 R 2307 0 R 2308 0 R 2309 0 R 2310 0 R 2311 0 R 2312 0 R 2313 0 R 2314 0 R 2315 0 R 2316 0 R 2317 0 R 2318 0 R 2319 0 R 2320 0 R 2321 0 R 2322 0 R 2323 0 R 2324 0 R 2325 0 R 2326 0 R 2327 0 R 2328 0 R 2329 0 R 2330 0 R 2331 0 R 2332 0 R 2333 0 R 2334 0 R]
+/Resources
+<<
+/Font 2335 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 2336 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 2337 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+343 0 obj
+<<
+/Annots [2338 0 R 2339 0 R 2340 0 R 2341 0 R 2342 0 R 2343 0 R 2344 0 R 2345 0 R 2346 0 R 2347 0 R 2348 0 R 2349 0 R 2350 0 R 2351 0 R 2352 0 R 2353 0 R 2354 0 R 2355 0 R 2356 0 R 2357 0 R 2358 0 R 2359 0 R 2360 0 R 2361 0 R 2362 0 R 2363 0 R 2364 0 R 2365 0 R 2366 0 R 2367 0 R 2368 0 R 2369 0 R 2370 0 R 2371 0 R 2372 0 R 2373 0 R 2374 0 R 2375 0 R 2376 0 R 2377 0 R 2378 0 R 2379 0 R 2380 0 R 2381 0 R 2382 0 R 2383 0 R 2384 0 R 2385 0 R 2386 0 R 2387 0 R 2388 0 R 2389 0 R 2390 0 R 2391 0 R 2392 0 R 2393 0 R 2394 0 R 2395 0 R 2396 0 R 2397 0 R 2398 0 R 2399 0 R 2400 0 R 2401 0 R 2402 0 R 2403 0 R 2404 0 R 2405 0 R 2406 0 R 2407 0 R 2408 0 R 2409 0 R 2410 0 R 2411 0 R 2412 0 R 2413 0 R 2414 0 R 2415 0 R 2416 0 R 2417 0 R 2418 0 R 2419 0 R 2420 0 R 2421 0 R 2422 0 R 2423 0 R 2424 0 R 2425 0 R 2426 0 R 2427 0 R 2428 0 R 2429 0 R 2430 0 R 2431 0 R 2432 0 R 2433 0 R 2434 0 R 2435 0 R 2436 0 R 2437 0 R 2438 0 R 2439 0 R 2440 0 R 2441 0 R 2442 0 R 2443 0 R 2444 0 R 2445 0 R 2446 0 R 2447 0 R 2448 0 R 2449 0 R 2450 0 R 2451 0 R 2452 0 R 2453 0 R 2454 0 R 2455 0 R 2456 0 R 2457 0 R 2458 0 R 2459 0 R 2460 0 R 2461 0 R 2462 0 R 2463 0 R 2464 0 R 2465 0 R 2466 0 R 2467 0 R 2468 0 R 2469 0 R 2470 0 R 2471 0 R 2472 0 R 2473 0 R 2474 0 R 2475 0 R 2476 0 R 2477 0 R 2478 0 R 2479 0 R 2480 0 R]
+/Resources
+<<
+/Font 2481 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 2482 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 2483 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+344 0 obj
+<<
+/Annots [2484 0 R 2485 0 R 2486 0 R 2487 0 R 2488 0 R 2489 0 R 2490 0 R 2491 0 R 2492 0 R 2493 0 R 2494 0 R 2495 0 R 2496 0 R 2497 0 R 2498 0 R 2499 0 R 2500 0 R 2501 0 R 2502 0 R 2503 0 R 2504 0 R 2505 0 R 2506 0 R 2507 0 R 2508 0 R 2509 0 R 2510 0 R 2511 0 R 2512 0 R 2513 0 R 2514 0 R 2515 0 R 2516 0 R 2517 0 R 2518 0 R 2519 0 R 2520 0 R 2521 0 R 2522 0 R 2523 0 R 2524 0 R 2525 0 R 2526 0 R 2527 0 R 2528 0 R 2529 0 R 2530 0 R 2531 0 R 2532 0 R 2533 0 R 2534 0 R 2535 0 R 2536 0 R 2537 0 R 2538 0 R 2539 0 R 2540 0 R 2541 0 R 2542 0 R 2543 0 R 2544 0 R 2545 0 R 2546 0 R 2547 0 R 2548 0 R 2549 0 R 2550 0 R 2551 0 R 2552 0 R 2553 0 R 2554 0 R 2555 0 R 2556 0 R 2557 0 R 2558 0 R 2559 0 R 2560 0 R 2561 0 R 2562 0 R 2563 0 R 2564 0 R 2565 0 R 2566 0 R 2567 0 R 2568 0 R 2569 0 R 2570 0 R 2571 0 R 2572 0 R 2573 0 R 2574 0 R 2575 0 R 2576 0 R 2577 0 R 2578 0 R 2579 0 R 2580 0 R 2581 0 R 2582 0 R 2583 0 R 2584 0 R 2585 0 R 2586 0 R 2587 0 R 2588 0 R 2589 0 R 2590 0 R 2591 0 R 2592 0 R 2593 0 R 2594 0 R 2595 0 R 2596 0 R 2597 0 R 2598 0 R 2599 0 R 2600 0 R 2601 0 R 2602 0 R 2603 0 R 2604 0 R 2605 0 R 2606 0 R 2607 0 R 2608 0 R 2609 0 R 2610 0 R 2611 0 R 2612 0 R 2613 0 R 2614 0 R 2615 0 R 2616 0 R 2617 0 R]
+/Resources
+<<
+/Font 2618 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 2619 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 2620 0 R
+/MediaBox [0 0 463.01 660]
+/CropBox [0 0 462.71991 660.0]
+>>
+endobj
+345 0 obj
+<<
+/Annots [2621 0 R 2622 0 R 2623 0 R 2624 0 R 2625 0 R 2626 0 R 2627 0 R 2628 0 R 2629 0 R 2630 0 R 2631 0 R 2632 0 R 2633 0 R 2634 0 R 2635 0 R 2636 0 R 2637 0 R 2638 0 R 2639 0 R 2640 0 R 2641 0 R 2642 0 R 2643 0 R 2644 0 R 2645 0 R 2646 0 R 2647 0 R 2648 0 R 2649 0 R 2650 0 R 2651 0 R 2652 0 R 2653 0 R 2654 0 R 2655 0 R 2656 0 R 2657 0 R 2658 0 R 2659 0 R 2660 0 R 2661 0 R 2662 0 R 2663 0 R 2664 0 R 2665 0 R 2666 0 R 2667 0 R 2668 0 R 2669 0 R 2670 0 R 2671 0 R 2672 0 R 2673 0 R 2674 0 R 2675 0 R 2676 0 R 2677 0 R 2678 0 R 2679 0 R 2680 0 R 2681 0 R 2682 0 R 2683 0 R 2684 0 R 2685 0 R 2686 0 R 2687 0 R 2688 0 R 2689 0 R 2690 0 R 2691 0 R 2692 0 R 2693 0 R 2694 0 R 2695 0 R 2696 0 R 2697 0 R 2698 0 R 2699 0 R 2700 0 R 2701 0 R 2702 0 R 2703 0 R 2704 0 R 2705 0 R 2706 0 R 2707 0 R 2708 0 R 2709 0 R 2710 0 R 2711 0 R 2712 0 R 2713 0 R 2714 0 R 2715 0 R 2716 0 R 2717 0 R 2718 0 R 2719 0 R 2720 0 R 2721 0 R 2722 0 R 2723 0 R 2724 0 R 2725 0 R 2726 0 R 2727 0 R 2728 0 R 2729 0 R 2730 0 R 2731 0 R 2732 0 R 2733 0 R 2734 0 R 2735 0 R 2736 0 R 2737 0 R 2738 0 R 2739 0 R 2740 0 R 2741 0 R 2742 0 R 2743 0 R 2744 0 R 2745 0 R 2746 0 R 2747 0 R 2748 0 R 2749 0 R 2750 0 R 2751 0 R 2752 0 R 2753 0 R 2754 0 R 2755 0 R 2756 0 R 2757 0 R 2758 0 R 2759 0 R 2760 0 R 2761 0 R 2762 0 R 2763 0 R 2764 0 R 2765 0 R 2766 0 R 2767 0 R 2768 0 R]
+/Resources
+<<
+/Font 2769 0 R
+/ProcSet [/PDF /Text]
+/ExtGState 2770 0 R
+>>
+/Type /Page
+/Parent 10 0 R
+/Contents 2771 0 R
+/MediaBox [0 0 463.08 660]
+/CropBox [0 0 462.72 660.0]
+>>
+endobj
+346 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/C [0 0 0]
+/Rect [73 3 178 17]
+/A
+<<
+/URI (http://www.allitebooks.org)
+/S /URI
+>>
+/BS
+<<
+/Type /Border
+>>
+>>
+endobj
+347 0 obj
+<<
+/Encoding /WinAnsiEncoding
+/Subtype /Type1
+/Type /Font
+/BaseFont /Times-Roman
+>>
+endobj
+348 0 obj
+<<
+/R358 2772 0 R
+>>
+endobj
+349 0 obj
+<<
+/R357 2773 0 R
+>>
+endobj
+351 0 obj
+<<
+/Filter /FlateDecode
+/Length 10
+>>
+stream
+x+T
+endstream
+endobj
+352 0 obj
+<<
+/Filter /FlateDecode
+/Length 72
+>>
+stream
+x+T03T0 A(˥dlj^U`djT066532t
B%+P(
+endstream
+endobj
+353 0 obj
+<<
+/Filter /FlateDecode
+/Length 10
+>>
+stream
+xT r
+endstream
+endobj
+354 0 obj
+<<
+/Filter /FlateDecode
+/Length 74
+>>
+stream
+xs
+Qws1P04RISp
Q(Tp6T0 ¢t(#0T07V0UQPRT A
+endstream
+endobj
+355 0 obj
+<<
+/Filter /FlateDecode
+/Length 8
+>>
+stream
+x
+endstream
+endobj
+350 0 obj
+<<
+/Kids [11 0 R 12 0 R 13 0 R 14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R]
+/Parent 5 0 R
+/Type /Pages
+/Count 10
+>>
+endobj
+9 0 obj
+<<
+/Title (Security metrics)
+/Parent 4 0 R
+/Last 2774 0 R
+/Dest [11 0 R /Fit]
+/First 2775 0 R
+/Count 14
+>>
+endobj
+2774 0 obj
+<<
+/Title (Index)
+/Parent 9 0 R
+/Last 2776 0 R
+/Prev 2777 0 R
+/Dest [340 0 R /XYZ -58.7121 665.0 1]
+/First 2778 0 R
+/Count -17
+>>
+endobj
+2775 0 obj
+<<
+/Title (Contents)
+/Parent 9 0 R
+/Next 2779 0 R
+/Dest [20 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+426 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 398.198 426.013 409.808]
+/Dest [26 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+427 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 381.198 426.011 392.808]
+/Dest [30 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+428 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 364.198 426.012 375.808]
+/Dest [36 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+429 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 347.198 426.007 358.808]
+/Dest [39 0 R /XYZ -59.0 665.0 1]
+>>
+endobj
+430 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [37.0079 323.198 426.023 334.808]
+/Dest [40 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+431 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 310.448 426.072 320.006]
+/Dest [40 0 R /XYZ -58.7121 633.0 1]
+>>
+endobj
+432 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 297.448 426.016 307.006]
+/Dest [44 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+433 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 284.45 426.012 294.008]
+/Dest [46 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+434 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [37.0079 260.198 426.015 271.808]
+/Dest [48 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+435 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 247.448 426.024 257.006]
+/Dest [50 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+436 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 234.448 426.049 244.006]
+/Dest [51 0 R /XYZ -59.0 665.0 1]
+>>
+endobj
+437 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 221.45 425.995 231.008]
+/Dest [52 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+438 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 208.45 426.033 218.008]
+/Dest [52 0 R /XYZ -58.7121 633.0 1]
+>>
+endobj
+439 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 195.451 426.004 205.008]
+/Dest [54 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+440 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 182.452 426.009 192.01]
+/Dest [55 0 R /XYZ -59.0 665.0 1]
+>>
+endobj
+441 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 169.452 426.02 179.01]
+/Dest [56 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+442 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 156.453 426.007 166.011]
+/Dest [56 0 R /XYZ -58.7121 633.0 1]
+>>
+endobj
+443 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 143.454 426.012 153.012]
+/Dest [57 0 R /XYZ -59.0 665.0 1]
+>>
+endobj
+444 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [109.008 130.455 425.962 140.013]
+/Dest [58 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+445 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 117.456 426.015 127.014]
+/Dest [60 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+446 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 104.456 426.03 114.014]
+/Dest [62 0 R /XYZ -58.7121 665.0 1]
+>>
+endobj
+447 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/Rect [130.608 91.4572 426.019 101.015]
+/Dest [62 0 R /XYZ -58.7121 454.0 1]
+>>
+endobj
+448 0 obj
+<<
+/Border [0 0 0]
+/Subtype /Link
+/Type /Annot
+/C [0 0 0]
+/Rect [178 3 283 17]
+/A
+<<
+/URI (http://www.allitebooks.org)
+/S /URI
+>>
+/BS
+<<
+/Type /Border
+>>
+>>
+endobj
+449 0 obj
+<<
+/R365 2780 0 R
+/FGUZLL0 347 0 R
+/R403 2781 0 R
+/R401 2782 0 R
+>>
+endobj
+450 0 obj
+<<
+/R357 2773 0 R
+>>
+endobj
+451 0 obj
+<<
+/Filter /FlateDecode
+/Length 10
+>>
+stream
+x+T
+endstream
+endobj
+452 0 obj
+<<
+/Filter /FlateDecode
+/Length 2108
+>>
+stream
+xYKocOK K$FhK.-G89_kf1:S]]UWUԯL W~Vgwկ+5"V-s6~f`wД+?DPz
FHZ]c+Bf\aa
6㇛[i,\@KRB[Z2f/}}w$`t;bZl|I{}w-2v{vc|b#K
3::Fhm6lй+A%zȥ2^]ͯf!O Ӛ|)8FwOG8]J.|zS(_(57ex)2%^V<F7#$"叏qPQ9
L4Hg!d\WO#P R>_L擵Zzu0IBl
9uX
+d䯦͎s5Wv: TAl~ƙ i.r0R8RcFEǧD
+'[uD7Ua7Ud0|H9/rCdSJHHB2Do>nOGvi={5Fvu?f,h]#H@Zfε* XTesA]7ӶǠ