ࡱ>  za@ }{bjbjFF {,,D"Q'nnn@D< 2s4 f(Kd14 \X$٪R+آu"uuآSu\\u\fV] \[nYDbt ˧0Y8٭٭]]٭]eX|S"eeeآآ6nL"XnLSTATE OF MICHIGAN  EMBED MSPhotoEd.3   FORMTEXT Department or Agency  FORMTEXT Title of Application Information Technology Project Security Plan & Assessment Prepared by:  FORMTEXT       Date:  FORMTEXT       Initiation & PlanningRequirements DefinitionFunctional DesignSystem DesignConstructionTestingImplementationOperations/ MaintenanceDisposalLifecycle Stage FORMCHECKBOX  FORMCHECKBOX  FORMCHECKBOX  FORMCHECKBOX  FORMCHECKBOX  FORMCHECKBOX  FORMCHECKBOX  FORMCHECKBOX  FORMCHECKBOX  OES USE ONLYCIATotal Score FORMTEXT       FORMTEXT       FORMTEXT       FORMTEXT        Table of Contents  TOC \o "1-3" \h \z \u  HYPERLINK \l "_Toc225063487" 1.0 Introduction  PAGEREF _Toc225063487 \h 4  HYPERLINK \l "_Toc225063488" 1.1 Resource Roles and Responsibilities  PAGEREF _Toc225063488 \h 4  HYPERLINK \l "_Toc225063489" 2.0 Current Status  PAGEREF _Toc225063489 \h 4  HYPERLINK \l "_Toc225063490" 3.0 SEM Initiation and Planning Stage  PAGEREF _Toc225063490 \h 4  HYPERLINK \l "_Toc225063491" 3.1 Purpose  PAGEREF _Toc225063491 \h 4  HYPERLINK \l "_Toc225063492" 3.2 Laws, Regulations, MDIT and/or Agency Security Policies, Standards and Procedures  PAGEREF _Toc225063492 \h 5  HYPERLINK \l "_Toc225063493" 3.3 Data classification  PAGEREF _Toc225063493 \h 5  HYPERLINK \l "_Toc225063494" 3.4 System and Information Security Level (Low, Moderate, High)  PAGEREF _Toc225063494 \h 6  HYPERLINK \l "_Toc225063495" 4.0 SEM IT Business/Security Requirements Stage  PAGEREF _Toc225063495 \h 6  HYPERLINK \l "_Toc225063496" 5.0 & 6.0 SEM Functional and System Design Stage  PAGEREF _Toc225063496 \h 7  HYPERLINK \l "_Toc225063497" 5.1/6.1 Describe the function of the system/application and the information processed for each server utilized in this project.  PAGEREF _Toc225063497 \h 7  HYPERLINK \l "_Toc225063498" 5.2/6.2 Other Systems or Applications serviced by this hardware  PAGEREF _Toc225063498 \h 7  HYPERLINK \l "_Toc225063499" 5.3/6.3 Hardware this system/application will be utilizing  PAGEREF _Toc225063499 \h 7  HYPERLINK \l "_Toc225063500" 5.4/6.4 Security Control Groups Implemented in the Project  PAGEREF _Toc225063500 \h 7  HYPERLINK \l "_Toc225063501" 5.5/6.5 Infrastructure/Network Diagram  PAGEREF _Toc225063501 \h 11  HYPERLINK \l "_Toc225063502" 5.6/6.6 Data Flow Diagram  PAGEREF _Toc225063502 \h 15  HYPERLINK \l "_Toc225063503" 7.0 SEM Construction Stage  PAGEREF _Toc225063503 \h 17  HYPERLINK \l "_Toc225063504" 8.0 SEM Testing Stage  PAGEREF _Toc225063504 \h 17  HYPERLINK \l "_Toc225063505" 9.0 SEM Implementation Stage  PAGEREF _Toc225063505 \h 17  HYPERLINK \l "_Toc225063506" 9.1 Security Analysis (To be completed by OES Security Liaison)  PAGEREF _Toc225063506 \h 17  HYPERLINK \l "_Toc225063507" 9.2 Sponsors and Stakeholders  PAGEREF _Toc225063507 \h 18  HYPERLINK \l "_Toc225063508" 9.3 Approvals  PAGEREF _Toc225063508 \h 18  HYPERLINK \l "_Toc225063509" Appendix A - System and Information Security Level Matrix  PAGEREF _Toc225063509 \h 19  HYPERLINK \l "_Toc225063510" Appendix B - System Security Control Requirements  PAGEREF _Toc225063510 \h 22  HYPERLINK \l "_Toc225063511" Appendix C Acronyms  PAGEREF _Toc225063511 \h 37  HYPERLINK \l "_Toc225063512" Appendix D - Laws, Regulations, MDIT and/or Agency Security Policies, Standards & Procedures  PAGEREF _Toc225063512 \h 38  HYPERLINK \l "_Toc225063513" Appendix E - Security Analysis (To be completed by OES Security Liaison)  PAGEREF _Toc225063513 \h 40  TOC \o "1-3" \h \z \u  HYPERLINK \l "_Toc223487148" 1.0 Introduction  PAGEREF _Toc223487148 \h 3  HYPERLINK \l "_Toc223487149" 1.1 Resource Roles and Responsibilities  PAGEREF _Toc223487149 \h 3  HYPERLINK \l "_Toc223487150" 2.0 Current Status  PAGEREF _Toc223487150 \h 3  HYPERLINK \l "_Toc223487151" 3.0 SEM Initiation and Planning Stage  PAGEREF _Toc223487151 \h 3  HYPERLINK \l "_Toc223487152" 3.1 Purpose  PAGEREF _Toc223487152 \h 3  HYPERLINK \l "_Toc223487153" 3.2 Laws, Regulations, MDIT and/or Agency Security Policies, Standards and Procedures  PAGEREF _Toc223487153 \h 3  HYPERLINK \l "_Toc223487154" 3.3 Data classification  PAGEREF _Toc223487154 \h 3  HYPERLINK \l "_Toc223487155" 3.4 System and Information Security Level (Low, Moderate, High)  PAGEREF _Toc223487155 \h 3  HYPERLINK \l "_Toc223487156" 4.0 SEM IT Business/Security Requirements Stage  PAGEREF _Toc223487156 \h 4  HYPERLINK \l "_Toc223487157" 5.0 & 6.0 SEM Functional and System Design Stage  PAGEREF _Toc223487157 \h 4  HYPERLINK \l "_Toc223487158" 5.1/6.1 Describe the function of the system/application and the information processed for each server utilized in this project.  PAGEREF _Toc223487158 \h 4  HYPERLINK \l "_Toc223487159" 5.2/6.2 Other Systems or Applications serviced by this hardware  PAGEREF _Toc223487159 \h 4  HYPERLINK \l "_Toc223487160" 5.3/6.3 Hardware this system/application will be utilizing  PAGEREF _Toc223487160 \h 4  HYPERLINK \l "_Toc223487161" 5.4/6.4 Security Control Groups Implemented in the Project  PAGEREF _Toc223487161 \h 4  HYPERLINK \l "_Toc223487162" 5.5/6.5 Infrastructure/Network Diagram  PAGEREF _Toc223487162 \h 7  HYPERLINK \l "_Toc223487163" 5.6/6.6 Data Flow Diagram  PAGEREF _Toc223487163 \h 7  HYPERLINK \l "_Toc223487164" 7.0 SEM Construction Stage  PAGEREF _Toc223487164 \h 8  HYPERLINK \l "_Toc223487165" 8.0 SEM Testing Stage  PAGEREF _Toc223487165 \h 8  HYPERLINK \l "_Toc223487166" 9.0 SEM Implementation Stage  PAGEREF _Toc223487166 \h 8  HYPERLINK \l "_Toc223487167" 9.1 Security Analysis (To be completed by OES Security Liaison)  PAGEREF _Toc223487167 \h 8  HYPERLINK \l "_Toc223487168" 9.2 Sponsors and Stakeholders  PAGEREF _Toc223487168 \h 8  HYPERLINK \l "_Toc223487169" 9.3 Approvals  PAGEREF _Toc223487169 \h 8  HYPERLINK \l "_Toc223487170" Appendix A System and Information Security Level Matrix  PAGEREF _Toc223487170 \h 9  HYPERLINK \l "_Toc223487171" Appendix B  PAGEREF _Toc223487171 \h 12  HYPERLINK \l "_Toc223487172" System Security Control Requirements  PAGEREF _Toc223487172 \h 12  HYPERLINK \l "_Toc223487173" Appendix C Acronyms  PAGEREF _Toc223487173 \h 26  HYPERLINK \l "_Toc223487174" Appendix D  PAGEREF _Toc223487174 \h 27  HYPERLINK \l "_Toc223487175" Appendix E Security Analysis (To be completed by OES Security Liaison)  PAGEREF _Toc223487175 \h 29  Revision History NameDateReason for ChangeVersion 1.0 Introduction Including security early in the life cycle of a project will usually result in less expensive and more effective security than adding it to an operational system. This document presents a guide for incorporating security into the Systems Engineering Methodology (SEM) of the State Unified Information Technology Environment (SUITE) Model. This document will help agencies select and acquire cost-effective security controls by explaining how to include information system security requirements within the appropriate stages of the SEM. SEM includes the following stages: Initiation & Planning, Requirements Definition, Functional Design, System Design, Construction, Technical Testing, and Implementation. Each of these stages identifies minimum security needed to effectively incorporate security into a system during its development. This document serves as documentation of the structured process of planning adequate, cost-effective security protection for a system. This document contains detailed technical information about the system, its security requirements, and the controls implemented to provide protection against its risks and vulnerabilities. This document, at a minimum, is marked, and should be handled and controlled as a sensitive document. This document is submitted to obtain a formal security sign off from the sponsors. The lack of sign-off may prevent the security elements of this project from proceeding to production. 1.1 Resource Roles and Responsibilities Insert Matrix  MACROBUTTON [1] "Click HERE and Type"  Or  FORMCHECKBOX Completed DIT Form PMM-02, Project Charter 2.0 Current Status This section documents the current status of the software/project. If the application is new and has never existed before, this section can be skipped.  MACROBUTTON [1] "Click HERE and Type"  3.0 SEM Initiation and Planning Stage This is the first stage in the SEM lifecycle of the project. This stage involves the establishment of a need for a new system or enhancements to an existing system, the data that is being collected or handled, and which policies or standards need to be addressed in the design phase. This stage will also classify the data handled by the project based on Federal NIST Guidelines. 3.1 Purpose This section documents the purpose of the application/project, including the business problem to be solved or reason for changes that need to be made to the current status of the application/project.  MACROBUTTON [1] "Click HERE and Type"  3.2 Laws, Regulations, MDIT and/or Agency Security Policies, Standards and Procedures The State of Michigan information is a valuable asset that must be protected from unauthorized disclosure, modification, use, or destruction. Prudent steps must be taken to ensure that its integrity, confidentiality, and availability are not compromised. Laws, regulations, policies, standards and procedures have been developed to provide a secure environment for developing, implementing, and supporting information technology and systems. The system must comply with all applicable laws, both state and federal, and any additional regulations and guidelines established by the agency or MDIT. Below is a list of some of the applicable laws, regulations, policies, standards and procedures many systems must comply with. This is not an all inclusive list and short explanations are supplied in Appendix D: Identity Theft Protection Act (Senate Bill No. 309), Public Act 566 of 2006, amending Act 452 of 2004 Social Security Number Privacy Act (Senate Bill No. 795, Public Act 454 of Public Acts 2004) 1305 SOM Enterprise Information Technology Policy 1310.03 Active Directory Password Standard 1315.00 Policy for Storage of Sensitive Information on Mobile Devices & Portable Media 1315.10 Standard for Electronic Data Encryption 1325 Information Technology Security Awareness Policy 1335 Information Technology Access Control Policy 1340 Information Technology Information Security Policy 1345 Information Technology Network and Infrastructure Policy 1350.11 Security Operational Guidelines for Servers 1350.20 Authorization Access to Data Sources 1350.40 Access Control Criteria for Data Sources 1350.90 Secure Disposal of Installed & Removable Digital Media 1355 Project Management Methodology Policy 1360 Systems Engineering Methodology Policy 1390 Information Technology Continuity of Business Policy 1410.21 Procurement and Usage of State Wireless Devices Usage of PDAs, Blackberrys, phones, and pagers 1420.00 Wireless Usage and deployment of wireless LANs and equipment.  MACROBUTTON [1] "Click HERE and Type"  3.3 Data classification Does this project collect Social Security Numbers, Drivers License Numbers, Credit Card Numbers, or other potentially sensitive information?  MACROBUTTON [1] "Click HERE and Type"  Does the hardware supporting this project also support other projects that handle sensitive information?  MACROBUTTON [1] "Click HERE and Type"  3.4 System and Information Security Level (Low, Moderate, High) The System and Information Security Level Matrix (see Appendix A for guidelines pertaining to data classification) is used to determine the overall security level categorization of your information, application, and the interconnectivity of other systems used by your application. This categorization will determine the appropriate security controls that need to be implemented. Your Security Liaison can assist you. (This system categorization is based on FIPS Publication 199 and NIST 800-60 ver. 2.0) Category Application/Data (Classification of data handled by this project/application)Systems* (Classification of data handled by other applications that are also installed on this server hardware)Overall Security LevelConfidentiality Integrity Availability  Based on the System and Information Security Level Matrix, the Overall Security Level categorization of your application system has been rated a  FORMTEXT Enter Overall Security Level rating level in regards to Confidentiality, Integrity, and Availability risk. * This rating is based on the most sensitive information. 4.0 SEM IT Business/Security Requirements Stage The primary goal of this stage is to identify the security requirements for the project. These security requirements become the initial baseline for product design and a reference for determining whether the completed product performs as the system owner requested and expected. All system security requirements, (e.g., software, hardware, performance, functional, infrastructure, etc.) should be evaluated and included in the requirements gathering process. NIST Special Publication 800-53 was selected as a baseline of minimum security controls to protect the system, information, and apply tailoring guidance as necessary. These detailed security controls are contained in Appendix B of this document. The required security controls for your application are based on the previous sections Data Classification (Section 3.3)/System and Information Categorization (Section 3.4) Overall Security Level (Low, Moderate, High). If your application is determined to be Low, you need only to implement the controls in the Low columns of Appendix B. If your application is determined to be Moderate, you must implement all controls in the Low and Moderate columns of Appendix B. If your application is determined to be High, you must implement all controls in the Low, Moderate, and High columns of Appendix B. The detailed NIST security controls in Appendix B are rolled together into higher level groups and for speed of documentation these security control groups can be checked off as the project design proceeds through the Functional & System Design Stages (Stage 5 & 6) and the appropriate SUITE SEM templates are completed. If SEM templates are completed and on file with the project manager, place a check mark in the associated box for that template indicating the documentation for that security group in the DIT-0170 can be obtained from those templates and it need not be duplicated here. Any control groups not implemented may be flagged as a risk by the Security Liaison in the final Risk Analysis Section (Section 9) and additional controls may be recommended before implementation.  MACROBUTTON [1] "Click HERE and Type"  5.0 & 6.0 SEM Functional and System Design Stage During this stage, the overall structure of the product is defined from a Functional & System viewpoint. The Functional & System design describes the logical system flow, data organization, system inputs and outputs, processing rules, operational characteristics of the product from the users point of view and documents that the Security Control Groups have been implemented in the design. 5.1/6.1 Describe the function of the system/application and the information processed for each server utilized in this project. List each server name and then describe how each server will be utilized in the project.  MACROBUTTON [1] "Click HERE and Type"   FORMCHECKBOX Completed SEM-501 (Functional Design Document) 5.2/6.2 Other Systems or Applications serviced by this hardware  FORMCHECKBOX Other Information Security Assessments (DIT-0170) are reviewed and updated for other systems or applications serviced by this same hardware (Section 3.2 & 3.3) to now include this projects information. 5.3/6.3 Hardware this system/application will be utilizing  FORMCHECKBOX Solutions Engineering form for hosting the hardware is completed 5.4/6.4 Security Control Groups Implemented in the Project Check the Security Control Groups being implemented for this project to provide for the protection of the Agencys assets. These Security Control Groups are a high level representation of the most critical of the detailed Security Controls that are listed in Appendix B. The detailed controls should be reviewed to ensure that each control within the group is implemented in accordance with the Overall Security Level of this application/project. Access Control: (See Appendix B for individual control details.) Organizations must limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems) and to the types of transactions and functions that authorized users are permitted to exercise.  FORMCHECKBOX Process in place for management of accounts which includes separation of duties. FORMCHECKBOX Follows M1 guidelines including unique IDs for every user. FORMCHECKBOX Utilizes Role based controls and least privilege. Awareness & Training: (See Appendix B for individual control details.) Organizations must: (i) ensure that managers and users of organizational information systems are made aware of the security risks associated with their activities and of the applicable laws, Executive Orders, directives, policies, standards, instructions, regulations, or procedures related to the security of organizational information systems; and (ii) ensure that organizational personnel are adequately trained to carry out their assigned information security-related duties and responsibilities.  FORMCHECKBOX Personnel and system users receive appropriate security training FORMCHECKBOX Completed SEM-0703 (Training Plan) and included Security and Awareness training FORMCHECKBOX Completed SEM-0704 (Training Checklist) Audit & Accountability: (See Appendix B for individual control details.) Organizations must: (i) create, protect, and retain information system audit records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful, unauthorized, or inappropriate information system activity; and (ii) ensure that the actions of individual information system users can be uniquely traced to those users so they can be held accountable for their actions.  FORMCHECKBOX System generated audit logs are written, stored securely, and they are reviewed regularly. Certification, Accreditation, & Security Assessments: See Appendix B for individual control details.) Organizations must: (i) periodically assess the security controls in organizational information systems to determine if the controls are effective in their application; (ii) develop and implement plans of action designed to correct deficiencies and reduce or eliminate vulnerabilities in organizational information systems; (iii) authorize the operation of organizational information systems and any associated information system connections; and (iv) monitor information system security controls on an ongoing basis to ensure the continued effectiveness of the controls.  FORMCHECKBOX Completed DIT-0170 is reviewed by the Office of Enterprise Security, and the Agency approves the information system security assessment before full implementation.  Configuration Management: (See Appendix B for individual control details.) Organizations must: (i) establish and maintain baseline configurations and inventories of organizational information systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles; and (ii) establish and enforce security configuration settings for information technology products employed in organizational information systems  FORMCHECKBOX Hardware and Software are listed in CMDB and follow the hardening and change control process. FORMCHECKBOX Completed SEM-0302 (Software Configuration Management Plan) Continuity Planning/Disaster Recovery: (See Appendix B for individual control details.) Organizations must establish, maintain, and effectively implement plans for emergency response, backup operations, and post-disaster recovery for organizational information systems to ensure the availability of critical information resources and continuity of operations in emergency situations.  FORMCHECKBOX Business Continuity Plan is in place FORMCHECKBOX Business Application Criticality Request (DIT-0208) completed if appropriate FORMCHECKBOX Disaster Recovery Plan is in place FORMCHECKBOX Backups of system are performed and stored in off site location FORMCHECKBOX Backups are tested for restore capability FORMCHECKBOX Business Continuity Plan and Disaster Recovery Plan are tested. Identification & Authentication: (See Appendix B for individual control details.) Organizations must identify information system users, processes acting on behalf of users, or devices and authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems.  FORMCHECKBOX Unique identification of user is accomplished through use of passwords, tokens, or biometrics following M1 guidelines FORMCHECKBOX Authentication system meets requirements of applicable laws, policies, and standards Incident Response: (See Appendix B for individual control details.) Organizations must: (i) establish an operational incident handling capability for all components and data of organizational information systems that includes adequate preparation, detection, analysis, containment, recovery, and user response activities; and (ii) track, document, and report incidents to appropriate organizational officials and/or authorities.  FORMCHECKBOX Organization has a documented incident response process per above Maintenance: (See Appendix B for individual control details.) Organizations must: (i) perform periodic and timely maintenance on organizational information systems; and (ii) provide effective controls on the tools, techniques, mechanisms, and personnel used to conduct information system maintenance.  FORMCHECKBOX Completed SEM-0301 Maintenance Plan FORMCHECKBOX Only authorized personnel are allowed to perform maintenance FORMCHECKBOX Change control process is utilized for all maintenance Media Protection: (See Appendix B for individual control details.) Organizations must: (i) protect information system media, both paper and digital; (ii) limit access to information on information system media to authorized users; and (iii) sanitize or destroy information system media before disposal or release for reuse.  FORMCHECKBOX Only authorized users have access to information either printed or electronic FORMCHECKBOX Media is sanitized and disposed of in accordance with MDIT policies FORMCHECKBOX Sensitive (PII) information is stored and transported in encrypted form Physical & Environmental Protection: (See Appendix B for individual control details.) Organizations must: (i) limit physical access to information systems, equipment, and the respective operating environments to authorized individuals; (ii) protect the physical plant and support infrastructure for information systems; (iii) provide supporting utilities for information systems; (iv) protect information systems against environmental hazards; and (v) provide appropriate environmental controls in facilities containing information systems.  FORMCHECKBOX System is located in Lake Superior, Lake Ontario, or Traverse Bay Hosting Center FORMCHECKBOX Completed SEM DIT-0184 (Infrastructure Service Request) Planning: (See Appendix B for individual control details.) Organizations must develop, document, periodically update, and implement security plans for organizational information systems that describe the security controls in place or planned for the information systems and the ethical rules of behavior for individuals accessing the information systems.  FORMCHECKBOX Information Security Assessment (DIT-0170) is regularly reviewed and updated FORMCHECKBOX Contractors have signed Non-disclosure Agreement (DIT-0049) before access is allowed FORMCHECKBOX Users have signed End User Computing Agreement (DIT-0929) before access is allowed Personnel Security: (See Appendix B for individual control details.) Organizations must: (i) ensure that individuals occupying positions of responsibility within organizations (including third-party service providers) are trustworthy and meet established security criteria for those positions; (ii) ensure that organizational information and information systems are protected during and after personnel actions such as terminations and transfers; and (iii) employ formal sanctions for personnel failing to comply with organizational security policies and procedures.  FORMCHECKBOX Background checks (DIT-0021) have been performed where appropriate  FORMCHECKBOX SLAs are signed before allowing Inter-agency access FORMCHECKBOX Non-Disclosure Contractor Security Agreements (DIT-0928) have been completed and signed where appropriate  Risk Assessment: (See Appendix B for individual control details.) Organizations must periodically assess the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals, resulting from the operation of organizational information systems and the associated processing, storage, or transmission of organizational information.  FORMCHECKBOX Information Security Risk Assessment (DIT-0170) is completed FORMCHECKBOX Security Scans are regularly performed and vulnerabilities are mitigated System & Services Acquisition: (See Appendix B for individual control details.) Organizations must: (i) allocate sufficient resources to adequately protect organizational information systems; (ii) employ system development life cycle processes that incorporate information security considerations; (iii) employ software usage and installation restrictions; and (iv) ensure that third-party providers employ adequate security measures to protect information, applications, and/or services outsourced from the organization.  FORMCHECKBOX SUITE systems life cycle is used to procure, develop, and manage systems System & Communications Protection: (See Appendix B for individual control details.) Organizations must: (i) monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems; and (ii) employ architectural designs, software development techniques, and systems engineering principles that promote effective information security within organizational information systems.  FORMCHECKBOX System has inactivity time out FORMCHECKBOX System Communications are encrypted when appropriate System and Information Integrity: (See Appendix B for individual control details.) Organizations must: (i) identify, report, and correct information and information system flaws in a timely manner; (ii) provide protection from malicious code at appropriate locations within organizational information systems; and (iii) monitor information system security alerts and advisories and take appropriate actions in response.  FORMCHECKBOX System employs malicious code protection techniques (i.e., SQL Injection) FORMCHECKBOX System restricts data input to authorized personnel only Vendor, contractor & third party: (See Appendix B for individual control details.)  FORMCHECKBOX Remote access is secured through VPN FORMCHECKBOX Security agreements are signed, maintained and reviewed yearly Infrastructure/Network: (See Appendix B for individual control details.)  FORMCHECKBOX Enterprise Architecture solution assessment is completed FORMCHECKBOX Network diagram is approved (email from Liaison) by Enterprise Security based on MDIT network security standards FORMCHECKBOX Exceptions completed and approved for deviation to network standards or PCI compliance 5.5/6.5 Infrastructure/Network Diagram The network diagram depicts the way that the data is transported on the network equipment from one device to the next without regard to the physical interconnections of the devices. Network diagram must be approved (email from Liaison) by Enterprise Security based on MDIT network security standards Furnish network diagram detailing infrastructure features Include: Specify name and location/Zone of the system/application Servers/IP Addresses Services Database Names Load Balances Ports and Protocols Encrypted Communication Communication port numbers See sample infrastructure/network diagram below:  MACROBUTTON [1] "Click HERE and create / paste your diagram"   5.6/6.6 Data Flow Diagram Describe data process flow of the application from system input to system output. Furnish diagram Describe interface and how it is accomplished Identify data flow Type of data Direction of flow See sample data flow diagram below  MACROBUTTON [1] "Click HERE and paste diagram"  Or  FORMCHECKBOX Completed SEM-0604 (System Design Document) FORMCHECKBOX Completed SEM-0605 (System Design Checklist) If a completed SEM-0604 and SEM-0605 are on file with the project, Section 5.6/6.6 Data Flow Diagram can be check marked above and completion of the DIT-0170 document can proceed to Section 7.0 SEM Construction Stage.  7.0 SEM Construction Stage In this stage, confirmation that sensitive data or data under conversion is handled and protected correctly based on classification.  FORMCHECKBOX Completed SEM-0701 (Transition Plan) FORMCHECKBOX Completed SEM-0601 (Conversion Plan) 8.0 SEM Testing Stage In this stage, security controls are tested to determine whether the sensitive data or data under conversion is handled and protected based on classification. Is there a test plan?  MACROBUTTON [1] "Click HERE and Type"  Are roles and responsibilities tested?  MACROBUTTON [1] "Click HERE and Type"  Is there separation of duties implemented?  MACROBUTTON [1] "Click HERE and Type"   FORMCHECKBOX Completed SEM-0602 (Test Plan) 9.0 SEM Implementation Stage In this stage, Qualys scans are performed, security training is performed and security controls are validated. A final security analysis is provided, identifying residual risks of which MDIT and the agency approve. Every PCI vulnerability must be covered by one of three scenarios Remediated by patch or version. False Positive (documented, submitted to OES, and approved). Exception Request (documented, submitted to TRB, and approved). 9.1 Security Analysis (To be completed by OES Security Liaison) See Appendix E. 9.2 Sponsors and Stakeholders  MACROBUTTON [1] "Click HERE and Type"  9.3 Approvals By signing below, I certify that I have read and acknowledge all sections of this document and each residual risk and recommended control (Appendix E) contained in Section 9. My signature indicates that the Agency has accepted each residual risk if the corresponding recommended control is not implemented. Approved by:Date:(Project Manager) By signing below, I certify that I have read and acknowledge Sections 2, 3, 4, 5.4/6.4, 9, and each residual risk and recommended control contained in Appendix E of this document. My signature indicates that the Agency accepts each residual risk if the corresponding recommended control is not implemented. Approved by:Date:(Business Owner) By signing below, I certify that I have read and acknowledge all sections of this document and each residual risk and recommended control (Appendix E) contained in Section 9. My signature indicates that the Agency has accepted each residual risk if the corresponding recommended control is not implemented. Approved by:Date:(Client Service Director) By signing below, Office of Enterprise Security believes that all information and sections of this document are accurate and complete to the best of the information provided. Each residual risk and recommended control (Appendix E) contained in Section 9 has been reviewed and the Agency has accepted each residual risk if the corresponding recommended control is not implemented. Approved by:Date:(Office of Enterprise Security) Appendix A - System and Information Security Level Matrix Security ObjectivePotential ImpactLowModerateHigh Confidentiality: Preserving authorized restrictions on information access and disclosure, including means for protecting personal privacy and proprietary information.  The unauthorized disclosure of information would have limited adverse effect on State of Michigan operations, assets, or individuals. Example(s): Public Information Information available via Freedom of Information Act The unauthorized disclosure of information would have a serious adverse effect on State of Michigan operations, assets, or individuals. Example(s): Personal information affecting an individuals privacy (e.g. an individuals medical information; drivers license number; social security number; banking information, etc)  The unauthorized disclosure of information would have a severe or catastrophic adverse effect on State of Michigan operations, assets, or individuals. Example(s): Highly sensitive information that may affect human life or safety (e.g. under cover investigation information; confidential response plans for emergencies) Information that if released would violate State or Federal Law Significant amount of privacy information (e.g. thousands of individuals credit card numbers; social security numbers; banking information; medical information, etc)  LowModerateHigh Integrity: Guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity.  The unauthorized modification or destruction of information would have limited adverse effect on State of Michigan operations, assets, or individuals. The unauthorized modification or destruction of information would have a serious adverse effect on State of Michigan operations, assets, or individuals. The unauthorized modification or destruction of information would have a severe or catastrophic adverse effect on State of Michigan operations, assets, or individuals. Example(s): Information that could affect human life or safety (e.g. criminal history; warrant/arrest data; active investigation information; child protection services information) Information that could severely affect public confidence (e.g. modification of voter registration or voting results; tax information; lottery drawings) Information that may affect national security (e.g. birth certificates; emergency response plans and procedures; risk assessments and vulnerability information)  LowModerateHigh Availability: Ensuring timely and reliable access to and use of information and systems.  The disruption of access to or use of information or an information system would have limited adverse effect on State of Michigan operations, assets, or individuals.  The disruption of access to or use of information or an information system would have a serious adverse effect on State of Michigan operations, assets, or individuals. Example(s): Information or information system that if not available, would seriously affect the publics trust of the State (e.g. unemployment applications; Secretary of State applications; OTIS) Information or information system that if not available, could seriously affect the State financially (e.g. large revenue generating applications;)  The disruption of access to or use of information or an information system would have a severe or catastrophic adverse effect on State of Michigan operations, assets, or individuals. Example(s): Information or information system that if not available, could affect human life or safety (e.g. LEIN; prisoner tracking systems; emergency response systems) Information or information system that if not available, would severely affect the publics trust of the State (e.g. welfare checks; food stamps; voter registration) Information or information system that if not available, could severely affect the State financially (e.g. Tax systems;  Appendix B - System Security Control Requirements NIST 800-53 Control NameSecurity ClassificationLowModerateHighAccess Control (AC) Organizations must limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems) and to the types of transactions and functions that authorized users are permitted to exercise.  % Access Control Policy & Procedure documented, reviewed and updated (AC-1) % Management of accounts (AC-2) % Comply with MDIT and Agency policies and procedures % A unique user ID and password is required for access (AC-3) % Tighten default settings to prevent unauthorized access % Disable inactive accounts % Terminate temporary and emergency accounts % The system automatically locks an account until released by an administrator when five unsuccessful attempts is exceeded (AC-7) % Remote Server Access is authenticated using 2-factors and/or VPN % System displays an approved message of use restrictions before granting access. (AC-8) % Review audit records (e.g., user activity logs) on a regular basis. (AC-13) % Remote access is controlled. (AC-17) % Inter-agency access is controlled. (AC-20) % Separation of Duties % Security Disclosure and Acceptable Use Agreements signed, maintained and reviewed on a yearly basis All Low plus the following: % Automatically terminate temporary and emergency accounts % Automatically disable inactive accounts % Role based access controls must be applied to databases, applications, or computer hosts that contain protected information. (AC-4) % Firewall rules, Access Control Lists. (AC-4) % Separation of Duties through assigned access authorizations. (AC-5) % Initiate session lock after period of inactivity. (AC-11) % Initiate disconnect on remote connection after period of inactivity. (AC-12) % Access is deleted no later than day-end of the user s last day if the separation is friendly, or immediately if the separation is unfriendly % Least Privilege  Access restrictive set of rights/privileges or accesses needed. (AC-6) % Ensure that access to security functions (hardware, software, and firmware) and information is restricted to authorized personnel % Authentication and encryption is used to protect wireless access % Mobile devices that access the system are scanned for malicious code, updated virus protection software, scan for critical software updates and patches. (AC-19) All Low and Moderate plus the following: % Auditing of account creation, modification, disabling and termination % Review audit records (e.g., user activity logs) on a daily basis % Removable hard drives or cryptography to protect information residing on portable and mobile devices % System limits the number of concurrent sessions. (AC-10) % Automated marking of outputs to identify special handling. (AC-15) % Transmitted minimum 128-bit encryption Awareness & Training (AT) Organizations must: (i) ensure that managers and users of organizational information systems are made aware of the security risks associated with their activities and of the applicable laws, Executive Orders, directives, policies, standards, instructions, regulations, or procedures related to the security of organizational information systems; and (ii) ensure that organizational personnel are adequately trained to carry out their assigned information security-related duties and responsibilities.  % A documented security awareness and training policy and procedure developed and distributed to all employees. (AT-1) % System users receive security awareness training prior to authorizing access. (AT-2) % Personnel who have significant system security roles or responsibilities receive appropriate security training based on that role. (AT-3) % Document and monitor individual security training activities. (AT-4) % All employees have a signed security agreement in their personnel file upon hire and renewed yearly % Background check upon hire and security exit interview upon termination (retire, transfers, terminations, etc.) % Acceptable Use Policy  All Low plus the following: % Information disclosure and confidentiality statements, are posted throughout the facility  All Low & Moderate plus the following: Audit & Accountability (AU) Organizations must: (i) create, protect, and retain information system audit records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful, unauthorized, or inappropriate information system activity; and (ii) ensure that the actions of individual information system users can be uniquely traced to those users so they can be held accountable for their actions.  % A documented audit and accountability policy (AU-1) % System generates Audit Records for Agency/DIT defined events. (AU-2) % Audit record should contain: data and time of the event, subject identity, type of event, how data changed, where the event occurred, and the outcome of the event. (AU-3) (AU-8) % Sufficient audit storage capacity should allocated. (AU-4) % System alerts if audit log generation fails. (AU-5) % System protects audit information from unauthorized access. (AU-9) All Low plus the following: % Audit record should be reviewed on a regular basis. (AU-6) % Audit logs are stored for sufficient period of time. (AU-7) (AU-11)  All Low & Moderate plus the following: % Audit record should be reviewed on a daily basis % System automatically processes audit records for events of interest. (AU-7(1))Certification & Accreditation (CA) Organizations must: (i) periodically assess the security controls in organizational information systems to determine if the controls are effective in their application; (ii) develop and implement plans of action designed to correct deficiencies and reduce or eliminate vulnerabilities in organizational information systems; (iii) authorize the operation of organizational information systems and any associated information system connections; and (iv) monitor information system security controls on an ongoing basis to ensure the continued effectiveness of the controls.  % A documented security assessment policy and procedure that is consistent with applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance and distributed to all employees. (CA-1) % Organization conducts an assessment of the security controls in all their information systems to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome. (CA-2) % Organization formally authorizes all connections from other information systems and carefully considers the risks that may be introduced. (CA-3) % Organization conducts an assessment of the security controls in all their information systems to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome and this assessment is reviewed by the Office of Enterprise Security. (CA-4) % Organization develops and updates a plan of action and milestones for information systems to correct deficiencies noted during the assessment of security controls and to reduce or eliminate known vulnerabilities in the systems. (CA-5) % Organization formally authorizes and approves the information system security assessment before full implementation. (CA-6) % Organization monitors the security controls in the information system on an ongoing basis. (CA-7) All Low plus the following: All Low & Moderate plus the following: Configuration Management (CM) Organizations must: (i) establish and maintain baseline configurations and inventories of organizational information systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles; and (ii) establish and enforce security configuration settings for information technology products employed in organizational information systems  % A documented configuration management policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (CM-1) % Organization develops, documents, and maintains current baseline configuration of system. (CM-2) % Organization develops, documents, and maintains mandatory security configuration settings of system. (CM-6) % System components are documented with relevant ownership information. (CM-8)  All Low plus the following: % Define the mechanism by which changes to applications, network, infrastructure or other IT components are planned, communicated, authorized, documented, tested, and coordinated.(CM-3)(CM-5) % System changes are monitored and security impact analyses are performed to determine the effects of the changes. (CM-4) % Organization configures system to provide only essential capabilities based on functions, ports, protocols, and/or services. (CM-7)  All Low & Moderate plus the following: Continuity Planning (CP) Organizations must establish, maintain, and effectively implement plans for emergency response, backup operations, and post-disaster recovery for organizational information systems to ensure the availability of critical information resources and continuity of operations in emergency situations.  % A documented Continuity Planning policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (CP-1) % Develop, implement, and periodically review a continuity plan that addresses roles & responsibilities, assigned individuals with contact information, and activities associated with restoring the system after a disruption or failure, (CP-2) % Review Continuity Plan periodically and revise the plan based on system or personnel changes. (CP-5) % Backups of user-level and system-level information stored at appropriately secured location. (CP-9) % Mechanisms with procedures are in place to allow full system recovery and reconstitution to fully secure state. (CP-10)  All Low plus the following: % Train personnel in their contingency roles and responsibilities with respect to the information system and provides refresher training. (CP-3) % Test the contingency plan at least annually and initiate necessary corrective actions. (CP-4) % Backups of user-level and system-level information is stored at alternate storage site and is geographically separated from the primary storage site. (CP-6) % Alternate processing site identified and agreements in place. (CP-7) % Alternate site telecommunications are identified and agreements in place. (CP-8) All Low & Moderate plus the following: Identification & Authentication (IA) Organizations must identify information system users, processes acting on behalf of users, or devices and authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems.  % Identification and Authentication Policy & Procedure documented, reviewed and updated (IA-1) % Unique Authentication of a user s identity is accomplished through the use of passwords, tokens, biometrics. (IA-2) % Management of accounts (IA-4) % Authentication information (e.g., password or PIN) must never be disclosed to another user or shared among users. (IA-5) % Authentication information feedback to user is obscured (e.g., asterisks in password field). (IA-6) % Authentication systems employs methods that meet requirements of applicable laws, Exec Orders, policies, and standards. (IA-7) All Low plus the following: % Identify and authenticate devices (e.g., MAC, TCP/IP, etc.) (IA-3) All Low & Moderate plus the following: % Authentication of a users identity is accomplished through the use of multifactor passwords, tokens, or biometrics. (IA-2)    Incident Response (IR) Organizations must: (i) establish an operational incident handling capability for organizational information systems that includes adequate preparation, detection, analysis, containment, recovery, and user response activities; and (ii) track, document, and report incidents to appropriate organizational officials and/or authorities.  % Documented and implemented Incident Response Policy & Procedure. (IR-1) % Incident handling form for consistent, repeatable process for monitoring and reporting when dealing with incidents. (IR-4) (IR-5) (IR-6) % Incident response resource identified to assist users in handling and reporting incidents. (IR-7)  All Low plus the following: % Personnel trained in their incident response roles and responsibilities at least annually. (IR-2) % Incident response testing at least annually (IR-3) All Low and Moderate plus the following:    Maintenance (MA) Organizations must: (i) perform periodic and timely maintenance on organizational information systems; and (ii) provide effective controls on the tools, techniques, mechanisms, and personnel used to conduct information system maintenance.  % A documented Maintenance policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (MA-1) % Agency schedules, performs, documents, and reviews records of preventative and regular maintenance. (MA-2) % Agency authorizes, monitors, and controls any remote maintenance. (MA-4) % Agency allows only authorized personnel to perform maintenance. (MA-5) All Low plus the following: % Agency approves, controls, and monitors the use of maintenance tools. (MA-3) % Agency obtains maintenance support in a timely manner. (MA-6) All Low and Moderate plus the following:     Media Protection (MP) Organizations must: (i) protect information system media, both paper and digital; (ii) limit access to information on information system media to authorized users; and (iii) sanitize or destroy information system media before disposal or release for reuse.  % A documented Media Protection policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (MP-1) % Agency ensures that only authorized users have access to information in any media, printed or digital. (MP-2) % Media is sanitized and disposed of based on MDIT and Agency policies and procedures. (MP-6) All Low plus the following: % Track, document and verify media destruction and disposal actions % Paper and digital media is stored in a secure storage area and audit of access attempts and access granted is documented. (MP-4) % Agency restricts the pickup, receipt, transfer, and delivery of media to authorized personnel. (MP-5) All Low and Moderate plus the following: % Agency affixes external labels to removeable media and output indicating distribution restrictions, handling caveats and applicable security markings. (MP-3) % Digital media stored at a minimum of 128-bit encryption    Physical & Environmental (PE) Organizations must: (i) limit physical access to information systems, equipment, and the respective operating environments to authorized individuals; (ii) protect the physical plant and support infrastructure for information systems; (iii) provide supporting utilities for information systems; (iv) protect information systems against environmental hazards; and (v) provide appropriate environmental controls in facilities containing information systems.  % A documented Physical and Environmental protection policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (PE-1) % Agency develops and keeps current a list of personnel with authorized access to facilities. (PE-2) % Agency controls all physical access points to facilities. (PE-3) % Agency monitors physical access to systems to detect and respond to security incidents. (PE-6) % Agency controls physical access to systems by authenticating visitors before allowing access to facilities. (PE-7) % Agency maintains visitor access records for facilities. (PE-8) % Agency employs and maintains automatic emergency lighting. (PE-12) % Agency employs and maintains fire suppression and detection systems. (PE-13) % Agency employs and maintains temperature and humidity levels within the facilities. (PE-14) % Agency employs water damage and detection systems in facilities. (PE-15) % Agency controls, documents, and authorizes all delivery and removal of systems and related items entering and exiting the facilities. (PE-16)  All Low plus the following: % Agency controls physical access to system devices that display output. (PE-5) % Agency protects power equipment from damage and destruction. (PE-9) % Agency provides remote emergency shutoff. (PE-10) % Agency provides short term uninterruptible power supply for systems. (PE-11) % Agency maintains appropriate security controls for telecommuting or communications from alternate worksites. (PE-17) % Agency locates systems within facilities to minimize potential damage or unauthorized access. (PE-18) All Low and Moderate plus the following: % Agency controls physical access to system transmission lines within facilities. (PE-4)   Planning (PL) Organizations must develop, document, periodically update, and implement security plans for organizational information systems that describe the security controls in place or planned for the information systems and the rules of behavior for individuals accessing the information systems.  % A documented Security Plan policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (PL-1) % Agency develops, implements, and regularly reviews an Security Plan. (PL-2) (PL-3) % Agency establishes an End User Computing agreement describing roles and responsibilities and expected behavior. Document is read, understood, and a signed copy is retained before authorizing access. (PL-4) % Agency conducts a privacy assessment of system. (PL-5)  All Low plus the following: % Agency organizes and plans security related activities, assessments, maintenance, audits,& . (PL-6)  All Low and Moderate plus the following: Personnel Security (PS) Organizations must: (i) ensure that individuals occupying positions of responsibility within organizations (including third-party service providers) are trustworthy and meet established security criteria for those positions; (ii) ensure that organizational information and information systems are protected during and after personnel actions such as terminations and transfers; and (iii) employ formal sanctions for personnel failing to comply with organizational security policies and procedures.  % A documented Personnel Security policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (PS-1) % Agency heads shall designate every competitive service position within the agency at a high, moderate, or low risk level as determined by the position's potential for adverse impact to the efficiency and integrity of the service. (PS-2) % Agency screens individuals requiring access before authorizing access. (PS-3) % Agency conducts exit interviews upon termination of employees and terminates access to systems. (PS-4) % Agency reviews system and facility access upon reassignment of personnel. (PS-5) % Agency completes signed inter-agency access agreements before authorizing system access. (PS-6) % Agency establishes security requirements for third party vendors and monitors their compliance. (PS-7) % Agency employs a formal sanction process for security non-compliance. (PS-8)  All Low plus the following:  All Low and Moderate plus the following: Risk Assessment (RA) Organizations must periodically assess the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals, resulting from the operation of organizational information systems and the associated processing, storage, or transmission of organizational information.  % A documented Risk Assessment policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (RA-1) % Agency categorizes their information in accordance with applicable laws, orders, and policies. (RA-2) % Agency has a risk assessment done for systems, to identify magnitude of harm from breach, use, disclosure, modification, or destruction. (RA-3) % Agency updates the risk assessment or whenever majors changes are performed. (RA-4) % Agency regularly scans for vulnerabilities in the system. (RA-5) All Low plus the following:  All Low and Moderate plus the following: System & Services Acquisition (SA) Organizations must: (i) allocate sufficient resources to adequately protect organizational information systems; (ii) employ system development life cycle processes that incorporate information security considerations; (iii) employ software usage and installation restrictions; and (iv) ensure that third-party providers employ adequate security measures to protect information, applications, and/or services outsourced from the organization.  % A documented Systems and Services Acquisition policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (SA-1) % Agency performs and allocates capital resources for Security. (SA-2) % Agency manages systems using SUITE. (SA-3) % Agency includes security requirements in contracts. (SA-4) % Agency adequately documents systems. (SA-5) % Agency complies with software usage policies. (SA-6) % Agency enforces policies governing software installation by users. (SA-7) % Agency requires that external providers of systems employ adequate security controls. (SA-9)  All Low plus the following: % Agency utilizes security engineering principles in system designs. (SA-8) % Agency requires that system developers create security test and evaluation plans. (SA-11) All Low and Moderate plus the following: % Agency requires that system developers create and implement configuration management plans. (SA-10)System & Communications Protection (SC) Organizations must: (i) monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems; and (ii) employ architectural designs, software development techniques, and systems engineering principles that promote effective information security within organizational information systems.  % A documented Systems and Communication Protection policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (SC-1) % System protects against denial of service attacks. (SC-5) % System monitors and controls communications at all boundaries. (SC-7) % System protects the integrity and availability of public information. (SC-14)  All Low plus the following: % Agency separates user functionality from system management. (SC-2) % System prevents unauthorized information transfer via shared systems. (SC-4) % System protects the integrity of transmitted information. (SC-8) % System protects the confidentiality of the transmitted information. (SC-9) % System terminates a network connection at end of session or inactivity timeout. (SC-10) % System prohibits remote activation of video or audio conferencing. (SC-15) % Agency utilizes public key certificates from an approved provider. (SC-17) % Agency restricts and manages mobile code technologies, ie. Java, ActiveX, Flash, & (SC-18) % Agency restricts and manages voice over IP systems. (SC-19) % Agency restricts and manages fault tolerant Domain Name Systems (DNS). (SC-20) (SC-22) % System provides communication protection at the session level when session level protection is needed, ie. SOA, & (SC-23)  All Low and Moderate plus the following: % Agency separates security functions from non-security functions. (SC-3)System & Information Integrity (SI) Organizations must: (i) identify, report, and correct information and information system flaws in a timely manner; (ii) provide protection from malicious code at appropriate locations within organizational information systems; and (iii) monitor information system security alerts and advisories and take appropriate actions in response.  % A documented Systems and Information Integrity policy that addresses purpose scope, roles, responsibilities, and procedures, developed and distributed to all employees. (SI-1) % Agency identifies, reports, and corrects information system flaws. (SI-2) % Agency implements malicious code protection and techniques. (SI-3) % Agency receives system security alerts and advisories and reissues them to appropriate personnel for action. (SI-5)  All Low plus the following: % Agency employs tools to monitor system attacks and unauthorized usage. (SI-4) % System has spam protection. (SI-8) % System restricts data input to authorized personnel only. (SI-9) % System checks information for accuracy, completeness, validity, and authenticity. (SI-10)$&(PRVZ^`bvxz @ H d f ̿ohd`Wh6CJaJhx\hmq hCYh#hCYh56B*CJ aJ phh56B*CJ aJ ph hCYh*jhyh*6Ujhyh*6Uhyh*6jhyh*6U h5h5CJ(\j!I hUVhjhU hCJ4h5CJ4\$&XZ\^` d )2)m)s)t)t)s)&)))x)x:$d'dNQgd*!$%d&d'dOPQa$gd*%d&d'dOPQgd*"9$d%d'dNOQ]gd*$a$gd*$a$gd z{23d f  % 1 8 ? F S [ j v )j)))s)s)s)s)sBjjj`j`jjjjjjjjj;$IfgdRl ,$$$Ifa$gdl o:$gd$a$gdwws$a$gdf | ~ Ͽبϒبώ}rhbRhbhbjfhwwshwwsCJ0U hwwsCJ0jhwwsCJ0Uh;hwwsCJaJ h;hwwshB*CJphhjϘhRhwws0J7U hR0J<,jhRhw 0J7OJPJQJU^Jo(j[hRhwws0J7UhRhwws0J7jhRhwws0J7UhR6CJaJhwws6CJaJhRhwws0J<   , > ? @ M Bv:Bv:BYY`YYYYYYY)  $$Ifa$gdgdFf$$$Ifa$gdwwsl \=$IfgdRl TFff          ) * + , - ; < = > ? ߿߯ߟߏokhwwsjhwwshwwsCJ0UjhwwshwwsCJ0UjhwwshwwsCJ0UjhwwshwwsCJ0Uj6hwwshwwsCJ0UjŸhwwshwwsCJ0UjNhwwshwwsCJ0U hwwsCJ0jhwwsCJ0UjڞhwwshwwsCJ0U'M N P R T Z a |&j|&j|&j|&j|&j $$Ifa$gdwkdۥ$$Ifl)   t 0 644 lap ? N Y Z a b c m n   $ & ( 2 4 6 8 L N P Z \ ^ ` t v x ˽Ϧ˘ϦˊϦ|Ϧsoho h`ehhhwws5OJQJjhUbhwwsUj hUbhwwsUjhUbhwwsU-jhw OJPJQJU^JmHnHo(uj%hUbhwwsUhwwsjhwwsUh5B*CJaJph hUh5B*CJaJphh5OJQJ%a b  6 ^ .%%&%& 6$IfgdRkdV$$Ifl\ #&)8  t(3f3f3f3f0 644 lap(3f3f3f3f^ &&sUPKKFgdR!gd)9gdZPkd$$Ifl\ #&)8 t0 644 la 6$IfgdR " $ & ( . 0 H J L үҎ҃tcttI2j]h(hR>*B*UmHnHphu jhSUmHnHujhRUmHnHuhRmHnHuhRCJaJmHnHu'jh(hR0JUmHnHu*2jch(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHu$jh(hR0JUmHnHuhRjhRU *+,-./012NOPQTUcdeٹʦo^ʦ jԫhSUmHnHu'jh(hR0JUmHnHu*2jWh(hR>*B*UmHnHphuhRmHnHu$jh(hR0JUmHnHu jڪhSUmHnHujhRUmHnHuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu! 0;-!VU<P4c1^ gdRgdR/ gdR   5ķĬyypVķĬ2jKh(hR>*B*UmHnHphuhRmHnHu$jh(hR0JUmHnHu jάhSUmHnHujhRUmHnHuhRmHnHuhRCJaJmHnHuh(hR0JmHnHu'jh(hR0JUmHnHu*2jQh(hR>*B*UmHnHphu56789:;<=YZ[\_`µ§p_µ§ j®hSUmHnHu'jh(hR0JUmHnHu*2jEh(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu$jh(hR0JUmHnHuhRmHnHujhRUmHnHu jȭhSUmHnHu   '()*+,-./KLMNQRķĬyypVķĬ2j9h(hR>*B*UmHnHphuhRmHnHu$jh(hR0JUmHnHu jhSUmHnHujhRUmHnHuhRmHnHuhRCJaJmHnHuh(hR0JmHnHu'jh(hR0JUmHnHu*2j?h(hR>*B*UmHnHphu !"#?@µ§p_µ§ jhSUmHnHu'jh(hR0JUmHnHu*2j3h(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu$jh(hR0JUmHnHuhRmHnHujhRUmHnHu jhSUmHnHu@ABKLrst456PķĬyypVķĬ2j'h(hR>*B*UmHnHphuhRmHnHu$jh(hR0JUmHnHu jhSUmHnHujhRUmHnHuhRmHnHuhRCJaJmHnHuh(hR0JmHnHu'jh(hR0JUmHnHu*2j-h(hR>*B*UmHnHphuPQRSTUVWXtuvw~µ§p_µ§ jhSUmHnHu'jh(hR0JUmHnHu*2j!h(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu$jh(hR0JUmHnHuhRmHnHujhRUmHnHu jhSUmHnHu345OPQRSTUVWstuv}~ķĬyypVķĬ2jh(hR>*B*UmHnHphuhRmHnHu$jh(hR0JUmHnHu jhSUmHnHujhRUmHnHuhRmHnHuhRCJaJmHnHuh(hR0JmHnHu'jh(hR0JUmHnHu*2jh(hR>*B*UmHnHphu5679:;<=>Z[µ§p_µ§ jhSUmHnHu'jh(hR0JUmHnHu*2jh(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu$jh(hR0JUmHnHuhRmHnHujhRUmHnHu jhSUmHnHu[\]devwxķĬyypVķĬ2jh(hR>*B*UmHnHphuhRmHnHu$jh(hR0JUmHnHu jhSUmHnHujhRUmHnHuhRmHnHuhRCJaJmHnHuh(hR0JmHnHu'jh(hR0JUmHnHu*2j h(hR>*B*UmHnHphu-./IJKMNOPQRnoµ§p_µ§ jzhSUmHnHu'jh(hR0JUmHnHu*2jh(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu$jh(hR0JUmHnHuhRmHnHujhRUmHnHu jhSUmHnHuopqtu-ķĬyypVķFh(hR0J6mHnHu2jh(hR>*B*UmHnHphuhRmHnHu$jh(hR0JUmHnHu jthSUmHnHujhRUmHnHuhRmHnHuhRCJaJmHnHuh(hR0JmHnHu'jh(hR0JUmHnHu*2jh(hR>*B*UmHnHphu-./123456RSTUXYrstµ§p_µ§ jhhSUmHnHu'jh(hR0JUmHnHu*2jh(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu$jh(hR0JUmHnHuhRmHnHujhRUmHnHu jnhSUmHnHu@AB\]^ķĬyypVĬE j\hSUmHnHu2j߾h(hR>*B*UmHnHphuhRmHnHu$jh(hR0JUmHnHu jbhSUmHnHujhRUmHnHuhRmHnHuhRCJaJmHnHuh(hR0JmHnHu'jh(hR0JUmHnHu*2jh(hR>*B*UmHnHphu^`abcde*ӸpӸV2jh(hR>*B*UmHnHphu jVhSUmHnHu'jh(hR0JUmHnHu*2jٿh(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu$jh(hR0JUmHnHujhRUmHnHuhRmHnHu*+,./0123OPQRµ§p_µ§ jJhSUmHnHu'jh(hR0JUmHnHu*2jh(hR>*B*UmHnHphuhRmHnHuh(hR0JmHnHuhRCJaJmHnHu$jh(hR0JUmHnHuhRmHnHujhRUmHnHu jPhSUmHnHu;<=WXY[\]^_`wxyzĴviaYLY?6h//qh[0Jjh//qh[0JUh[0J<mHnHujh[UjhRUhRCJaJmHnHu$jh(hR0JUmHnHu jDhSUmHnHujhRUmHnHuhRmHnHuh(hR0J6mHnHuh(hR0JmHnHu'jh(hR0JUmHnHu*2jh(hR>*B*UmHnHphuz/01234567STUVYZhiŻŰŻņr'jh//qh[>*B*Uphj8h[U'jh//qh[>*B*Uphh[mHnHuj>h[Ujh[U h[h[CJaJjh//qh[0JU'jh//qh[>*B*Uphh//qh[0Jh[,^5@2&[Z@ Q!!3"""]##$l$$E% /ij :;<=>?@AB^_ννƽννƽ{νj&h[U'jh//qh[>*B*Uphj,h[U'jh//qh[>*B*Uphh[h//qh[0Jh[CJaJjh//qh[0JUh[mHnHuj2h[U h[jh[U0_`ade,-./01234PQRSVWȾȳդՐȾȅդqȾ'jh//qh[>*B*Uphjh[U'jh//qh[>*B*Uphh[h[mHnHuj h[Ujh[U h[h[CJaJh//qh[0Jjh//qh[0JU'jh//qh[>*B*Uph, !"#$%&'(DEFGPQwxyꤙzjh[U'jh//qh[>*B*Uphjh[U h['jh//qh[>*B*Uphh[h//qh[0Jh[CJaJjh//qh[0JUh[mHnHujh[Ujh[U.9:;UVWXYZ[\]yz{|89:TȾȳդՐȾȅդqȾ'jyh//qh[>*B*Uphjh[U'jh//qh[>*B*Uphh[h[mHnHujh[Ujh[U h[h[CJaJh//qh[0Jjh//qh[0JU'jh//qh[>*B*Uph,TUVWXYZ[\xyz{   : ; < = > ? @ A B ^ _ ꤙzjh[U'jmh//qh[>*B*Uphjh[U h['jsh//qh[>*B*Uphh[h//qh[0Jh[CJaJjh//qh[0JUh[mHnHujh[Ujh[U._ ` a h i z { | !!!!!!/!0!1!K!ȾȳդՐȾȅդqȾ'j[h//qh[>*B*Uphjh[U'jah//qh[>*B*Uphh[h[mHnHujh[Ujh[U h[h[CJaJh//qh[0Jjh//qh[0JU'jgh//qh[>*B*Uph,K!L!M!N!O!P!Q!R!S!o!p!q!r!u!v!!!!!!!!!!!!!!!!!!!"""-"."/"0"1"2"3"4"5"Q"R"ꤙzjh[U'jOh//qh[>*B*Uphjh[U h['jUh//qh[>*B*Uphh[h//qh[0Jh[CJaJjh//qh[0JUh[mHnHujh[Ujh[U.R"S"T"W"X"q"r"s""""""""""""""""""""""""""""####;#<#=#W#ȾȳդՐȾȅդqȾ'j=h//qh[>*B*Uphjh[U'jCh//qh[>*B*Uphh[h[mHnHujh[Ujh[U h[h[CJaJh//qh[0Jjh//qh[0JU'jIh//qh[>*B*Uph*W#X#Y#Z#[#\#]#^#_#{#|#}#~#################### $ $$$$$$$$1$2$ꤙzjh[U'j1h//qh[>*B*Uphjh[U h['j7h//qh[>*B*Uphh[h//qh[0Jh[CJaJjh//qh[0JUh[mHnHujh[Ujh[U*2$3$4$I$J$K$e$f$g$i$j$k$l$m$n$$$$$$$$$$$$$$$$$$$$$"%#%$%>%?%@%лưިդՐЅưިդqfjh[U'jh//qh[>*B*Uphjh[U'j%h//qh[>*B*Uphh[h[CJaJh[mHnHujh[Ujh[U h[h//qh[0Jjh//qh[0JU'j+h//qh[>*B*Uph(@%B%C%D%E%F%G%H%I%Y%Z%[%\%%%%%&'*+i+k++++++++++ǽ~z~v~rrkg_gThfYh'B*phjh'Uh' h@hhJhj-9hU!Uh h NnhhOJQJhOJQJhWh h h h`ehW h hW hf\^Jhkh\^J hkhjh[Uh[CJaJjh//qh[0JUjh[Uh[mHnHuE%G%I%Z%[%\%a%f%x%%)sss >$Ifgd >gd !gd 9gdy!gdr) %%%%,##s#s $IfgdRkd$$Ifl4\xJ&}b  t(0644 lalp(%%%%%%%%ssU#sssskd$$Ifl\xJ&}b t0644 lal $IfgdR%%%%%%^U#sUsUsUs $IfgdRkd$$Ifl\xJ&}b t0644 lal%%%%%%^U#sUsUsUs $IfgdRkd;$$Ifl\xJ&}b t0644 lal%%%%%%^U#sUsUsUs $IfgdRkd$$Ifl\xJ&}b t0644 lal%%%%%%^U#sUsUsUs $IfgdRkd[$$Ifl\xJ&}b t0644 lal%%%%%%^U#sUsUsUs $IfgdRkd$$Ifl\xJ&}b t0644 lal%%%%%%''))^YYT)O)sYYYYgd)gd!gdkd{$$Ifl\xJ&}b t0644 lal )i+j+k+++++++++++++,)s):!<$If]gdj-9 6$Ifgdgd6gd'!gd' gd gd!gd!]gdj-9+++++++++++++ , ,,,,,",0,1,2,7,v,,,,,,,,,,,-!-"-A-E-x---..üáÃ|xtph7hXmh hJhJhX( hzh/hfYh/B*phjh/Uh/ hhy4 hh h/6hy4 hS9hhhJhj-9 h8Dhj hUjhUhh'jh'U hzh',,,,,1,2,,,,,,,,!-"-.)s)s))s):))s!gdj-96gd!gd!gd gd)gdgdUkd$$Ifl0U")" t$644 la.....y/z/{/|/////00.3/333$4O4)s):)s@  x^gdj-9@ x^gdj-9 ! )]gdj-9 [gd6gd!gd gdj-9gd!gd......y/z/|/}///////////////////01Q2R2U2/303w55555G66666777ԳԳԳԳ}}yhmq hqh;d hqhmq hqh@ hqh4 hPh4 h9h4h4hhXm hgh hzhqhfYhqB*phjhqUhq hr)h5 hr)hy4 hr)h@ hy4 hghy4hj-9h5/O444 5?5w5556G66667777777777!^gdv6^gdv!gdv!gd@  @x^gdj-9@  x^gdj-97777777777888888888888:9;9=9>9P9e9f9g9k9n9v999999999999:9:˸ϩۢӌ~wswh0 h(Dh h(Dh[L h(DhusZ hgh5hkhlS h(DhlS h(Dhd(lhP<CJaJ hzhvhfYhvB*phjhvUhvhP<hhX( hgh hzhqhfYhqB*phjhqUhq-78888888888;9<9=9h9i9j9k999P;R;;;;)s):):):)s$a$gd6gd6gdv!gdv gd!gdgd9:A:J:O:P:_:g:t::::::::;';(;N;O;Q;R;x;;;;;;;<< < <<s<<<<<<<<<ÿû~rrrh Z hq5CJaJhh5CJaJhup:h5CJhup:hup:5CJ hup:5CJhd(lh5CJaJhv5CJaJhqh<hGWh;0h(D h(DhY h(Dhl h(Dh[L h(Dh h(DhusZ h(DhlS h(Dhd(l*;;;;< <s<{<<v:h h v:LL $$Ifa$gd<<<<,   $$Ifa$gdkd$$Ifl4\#%q @ $   t(0d&644 lap(<<<<<<sh sLs=1 $$Ifa$gdkd$$Ifl\#%q @ $   t 0d&644 lap 6$Ifgd( 6$Ifgdq<<<<<<<sh sLs:kd$$Ifl\#%q @ $   t 0d&644 lap 6$Ifgd( $$Ifa$gd<<<<<<<sh sLs:5!gd6wkd$$Ifl\#%q @ $   t 0d&644 lap 6$Ifgd( $$Ifa$gd<<<<<<<<== = =====W=X=b=c=d=====>>>>#>,>;>>>?>@>e>m>r>{>>>>˹Ҭ񤝙uqmimhto$hJ h hy h8y5CJaJ haJ h8yh hy hJ hl h) hy hh6whh6w0J7>*mHnHu"joh6wh(>*CJU h6w0J7>*jh6w0J7>*Uh~hJhd(l h(Dhd(lhhv hzh)<<===>>?>@> @@A AAAeBfBBBrCsC))A & F]^`gdvA]gdv!]gdv!]gdv@&gdy )gd6w!(gd!gd6w>c?l????@ @ @@+@,@@@AAA A(A=AaAuAwAAAAABBeBfBBBBBBCCqCrCsCEEEh hhc h8yh8yhNhDq^h)hM h8yhh.WIIIIIIIIII J JJDs)s~uDs 6$Ifgd}/!gdDq^gd}/Skd$$Ifl08d&," t644 la !<$Ifgd 6$Ifgd!gd!gd/6gd/ IIIIIIIIIIIIIIJ J J JJJJJ"JAJBJHJIJNJQJfJJJJJJJJJJJJJJJ%K&K'K(K6K7K8K9KAKBKCKμִָָָ֎μ֊h!jEh" U hV5h_LD56CJaJh" 56CJaJhh4 h8Dh" j8h(Ujh" Uh" h?hhMhuhhhkh h8Dh6JJJJJ&K'K9KzK)^)s)s)^Ds !<$Ifgd 6$Ifgd}/gd}/@&gdSkd$$Ifl08d&," t644 la !$Ifgd}/CKDKKKNKXKdKyK{K|K}KKKKKKKKKKKKKKKKKKL)L,L6LZLeLzLLM MzM{M|M}MMMMMMMMMNNN鵮 h}/hh 6 h}/h 6 h}/hh(h}/0J"h(h0J" h}/hh}/h5h;bthh4h(Dh}/ h6 h?hh>{hZhuh h8Dh" hh" h!3zK{K|K}KKK{M|M}MMNNN-O)s):)v:):):~Dss !<$Ifgd 6$Ifgd}/ gdBgd  8gd gdgd}/!gd}/Skd$$Ifl08d&," t644 la NNNNNN-O.O/O=O>O?O@O{O|O}OOOOOOOOOOO P PP&QRRRRRRRyrdyjhc hHxU hc hbjhc hbU h 6hh 6 hRh 6 h 6h 6 h}/h 6h(h(0J"hR h}/hh}/h5h!jhHxUjvhHxU hh h h jRhHxUh jh U$-O.O@O{O|OODs-Ds_kd$$Ifl04)," tH$644 laXp !<$Ifgd 6$Ifgd}/_kd$$Ifl04)," tH$644 laXpOOOOO PRRRVR)v:):):wDsl !<$IfgdR 6$IfgdRBgd  8gd!gd}/_kd$$Ifl04)," tH$644 laXp !<$Ifgd VRWRiRRRRRDsCDsSkdA$$Ifl04)," tH$644 laX !<$IfgdR 6$IfgdRSkd4$$Ifl04)," tH$644 laXRWRXRfRgRhRiRwRxR|R}RRRRRRRRRRRRRRRRRRRRRSS@SASTTTTTƾվ{tlhhbjhbU h 6hRh 6 h 6h 6 hRh 6h(h(0J" hRhZhRhZ5h! h16hZjhc hFvUhc hFv6 hFvhFvhkh5!5hFvjhc hFvU hc hFvjhc hFvU hc h 'RRRRASTTTDU)v:):Ds !<$IfgdR 6$IfgdRBgd5!5  gdR!gdRSkdN$$Ifl04)," tH$644 laXTTTEUGU{U~UUUUUUWWWWWWWW X XXXXXXXXXxZyZzZ{ZZžvohd]Yhb hpPh5!5hpP hpPhpP hRhpPh(h(0J" hRhRhRhR5 h4Lh5!5hEnz hbh5!5jh5!5Ujh5!5Uh5!5 hrh5!5 h5!556h5!5h5!50J" h5!50J" h5!55hrh5!55h! hbhbjhbUjhHxU"DUEUFUGUUWWWX)v:):Ds !$Ifgd5!5 6$Ifgd5!5!gd5!5Bgd5!5gd5!5!gdRSkd[$$Ifl04)," tH$644 laXXXXXXyZzZZZ)v:):):Ds !<$IfgdR 6$IfgdRBgd5!5gdR!gd5!5Skdh$$Ifl04)," tH$644 laXZZZZZZZZZ [ [[[7[8[9[:[;[<[F[b[d[[\\\\\\\\ҿҿ|umi^mW hvaFhvaFjhHxUhvaFjhvaFU hRh5!5hpP hRhpPh(h(0J"hRhRhR5hRh!5 h_LDaJ h&yh h&yhc hbhc hkh5!5j hHxUhc jhc U h&yhb hbhbjhbUjhHxUZZZ9[:[;[<[DsC>>!gdRSkd$$Ifl04)," tH$644 laX !<$IfgdR 6$IfgdRSkdu$$Ifl04)," tH$644 laX<[[\\\\\ ]V])v:):DsDst !<$Ifgd5!5 6$Ifgd5!5Skd$$Ifl04)," tH$644 laX !<$IfgdR 6$IfgdR!gd5!5Bgd5!5gdR\\]]] ]7]8]U]V]W]X]f]g]h]]]]]]]]]]]^^,^-^.^p^q^r^t^^^^__ɾͷɬͷɡͷɖͷ~upiehpP hRhpP hpP5h(h(0J" hR5hh5h% hhjZhHxUjMhHxUj@hHxU hvaFhvaFj3hHxUhvaFjhvaFUhvaFh5!5<hEnz hvaFh5!5j&h5!5Uh5!5jh5!5U&V]W]i]]]]]DsCDsSkd$$Ifl04)," tH$644 laX !<$IfgdR 6$IfgdRSkd$$Ifl04)," tH$644 laX]]]^^/^o^DsCDsSkd$$Ifl04)," tH$644 laX !<$IfgdR 6$IfgdRSkd$$Ifl04)," tH$644 laXo^p^q^r^^___T`)v:):Ds{ !<$IfgdR 6$IfgdR!]gd5!5B]gd5!5gdR!gdRSkd$$Ifl04)," tH$644 laX______U`V`d`e`f`````aaVaqanbobpb~bbbbbbbcccccd»~vrkc_h*ujh*uU h(hEnzh|bh(h(5h! hiohiojhHxUhiojhioUh5!5 hh5!5 h(hh(h(0J" h(h(h(h5h%jth%hHxUjghWU h%h%jh%h%U hRh5!5"T`U`g`````DsC>>!gdRSkd$$Ifl04)," tH$644 laX !<$IfgdR 6$IfgdRSkd$$Ifl04)," tH$644 laX`anbobbbbbbcccd,d)v:):Ds)v:):~Ds!gdEnz!gd(Skd$$Ifl04)," tH$644 laX !<$Ifgd( 6$Ifgd(!gdddBgdddgd( dddddd+d-d.dd?d{d}d~ddddddddddd efffff f!fqfrfffffffffẳzojhK QUjhK QU h(hddh h(hh(h(0J" h(h(h(h(5h! hhh*uh*u6B* phjh*uUjh*uUhddh*u h*uh*ujh*uUjh*uU+,d-d?d|d}dddDsCDsSkd$$Ifl04)," tH$644 laX !<$Ifgd( 6$Ifgd(Skd$$Ifl04)," tH$644 laXdddd eff"fpf)v:):Ds !<$Ifgd( 6$Ifgd(!gdddBgdddgd(!gd(Skd$$Ifl04)," tH$644 laXpfqfffff"gDsCDsSkd8$$Ifl04)," tH$644 laX !<$Ifgd( 6$Ifgd(Skd+$$Ifl04)," tH$644 laXfff!g#g$g%gIgJgKg{g|gCiDiEiFiTiUiViiiiiiiiiiiiiiiiižxplapll]l]lYh(hkjhK QUhx$jhx$Ujh0h0U h0h0jh0h0Uhdxh hh h(hh(h(0J" h(h( h(hh(h5h! hhh*uh*u6B* ph h*uh*ujh*uUjhK QU""g#g$g%g|gDiEiWii)v:):Ds !<$Ifgd( 6$Ifgd(!gddxBgddxgd(!gd(SkdE$$Ifl04)," tH$644 laXiiiiiiiDsC>>!gd(Skd_$$Ifl0& t!644 laX !<$Ifgd( 6$Ifgd(SkdR$$Ifl0& t!644 laXij1j2j kkZk[k\k]kkklkmkkkkkkkkkkkklll$l%l3l4l5ljlkllllllllȽ̶߶ߣߜߜߜȍ̶߶ۉyuo h30J"h3hdxh35hdxh*5h j hK QUh6Y h8Dhdxj hdxUjhdxU h8Dh8DjhK QUh8Djh8DU h(hdxhhdx h(h h0J"h(h(0J" h(h(i2j[k\knkkkk#l)v:):DswDsl !<$Ifgddx 6$IfgddxSkdl $$Ifl04)," tH$644 laX !<$Ifgd( 6$Ifgd(!gddx B )]gd6Ygd(#l$l6ll{Dsp !<$Ifgd( 6$Ifgd(zkdy $$Ifl04)," t0H$644 laXlllllnnno)v:):Ds !<$Ifgd3 6$Ifgd3!gddxBgddxgd3!gd3Skda $$Ifl04)," tH$644 laXllnnnnnnnoo,o-o.oToUo[obodoeosotouooooooo&p'pkqlqmqnq|q}qۮ۽ۣۜzsoh]jhK QU hJfxhdxhJfx hJfxhJfxh~HhJfx0J" h30J"h3 h3hJfxhdxhJfx5 h~Hh*jh8DUh:Xj hK QUha\jha\U h8Dh8Dj h8DUh8Djh8DU hhdxh hh h3h$oo/ocodovooDsCDsSkd{ $$Ifl04)," tH$644 laX !<$Ifgd3 6$Ifgd3Skdn $$Ifl04)," tH$644 laXoooo'plqmqqq)v:):Ds~ !<$Ifgddx 6$Ifgd3!gddxBgddxgd~H!gd~H!gd3Skd$$Ifl04)," tH$644 laX}q~qqqqqqqqqrrr9r:r;rkrlr&t't(t)t7t8t9t^tftttztttttttttvvſ}unh hJfx0J" h3hch3hJfx5 hHhJh" hHhHj9hK QUhHjhHU hJfxhdxhJfx hJfxhJfx h3hJfx h30J"h3hdxh35hdxhJfx5j,hK QUha\h6Yh(D ha\ha\jha\U&qqqrrrrDsC>>!gd3Skd$$Ifl04)," tH$644 laX !<$Ifgddx 6$Ifgd3Skd$$Ifl04)," tH$644 laXrlr't(t:ttttttvvvv)v:):Ds)v:~):DsBgd0!gd0Skd$$Ifl04)," tH$644 laX !<$Ifgd3 6$Ifgd3!gddxBgddxgd~H vvvvvvvvvvvwww5w7wgwhwxxxxxxxxyyyyyyy'y(y)y1ybydyfyyyyyĿ{woh3hO5hoRjmh*Uh~H hHh*j`h*Uh*jh*UhO h3hO hO0J" h30J" h35hh5h jShK QU hHhHjFhK QUhHjhHU h3h0+vvvwwwwDsC>>!gd3Skd$$Ifl04)," tH$644 laX !<$Ifgd3 6$Ifgd3Skd$$Ifl04)," tH$644 laXwhwxxxyy*ycy)v:):DsDsSkd$$Ifl04)," tH$644 laX !<$Ifgd3 6$Ifgd3!gd0Bgd0gd3cydyeyfyyyyy)v:Ds !<$Ifgd3 6$Ifgd3!gd0gd3!gd3Skd$$Ifl04)," tH$644 laXyyyyyyyyyyzzzzCzEzFzGz^z`zzzzzzzzzzzzzz {{@{E{_{`{a{b{p{q{r{s{}}rjhYUh:XjhU hHh>{h>{jhUh" jh" U h3hO h30J" h35h3hO5h hOjhYU hHhYjzhYUhYjhYU h3h0,yyzDzEzFzGzDsC>>!gd3Skd$$Ifl04)," tH$644 laX !<$Ifgd3 6$Ifgd3Skd$$Ifl04)," tH$644 laXGzzzzzz`{a{)v:DsDs>Skd$$Ifl04)," tH$644 laXSkd $$Ifl04)," tH$644 laX !<$Ifgd3 6$Ifgd3gd3a{s{{{{{{{||#}$}^}_}}Ds)s):):):):z): gd0 gd~H gd0gd3!gd3Skd$$$Ifl04)," tH$644 laX !<$Ifgd3 6$Ifgd3s{{{{{{{{{#|6|F|O||||#}$}]}^}}}}}}~^~c~f~g~h~i~j~|~~~~~~~~~û۫|u hzh3h0B*phhs"gB*phhfYh3B*phjh3Uh3h~Hh0 hFvh0hFvhueaJh~HhFv5 hFvaJ hFvhY hFvhueh:Xhue hghuehu h#]huehoR hHhYh" )}}}}}}~2~3~4~e~f~h~i~~~~~~~~~~ ):):):):):):):):):):): xgd~H!gds"ggds"g!gdf!gd36gdat!gdat gd!gd0 gd0~~~~~~~~~~~~~~ žؾžܞœ܀xpjhIUhs"ghI5hI hzhs"ghs"gB*phhfYhs"gB*phjhs"gUhFvh{5hFvhdl"5h~HhFv hFvhdl"hs"ghMhu hghdl"hdl"hWhf hx\hdl"hFvhueaJjhx\hx\U' 0^q~0)])])])])]):):Ds !<$Ifgds"g 6$Ifgds"g!gds"g!^gds"g!^gds"g!gdat6gdat gd gd0 & F gd0/12@ABCopqrŀ׀()04JLMNPQRUY]io}y}yuh86h) h86h86hfjh{Ihs"gUhIrhWhTha5hTh05hgh05 h05h~Hh0 hTh0hHhI6 hIhIjhIUhI hHhIjhIUjhIU)01CpqrLDsC>9 gd0!gds"gSkd"$$Ifl08d&," t644 la !<$Ifgds"g 6$Ifgds"gSkd#$$Ifl08d&," t644 laLMNOPRSTUpq ./)DsSkd$$Ifl08d&," t644 la !<$Ifgds"g 6$Ifgds"g)gdf!gdf!gds"g gd0 -/0>?@Aefgmqx~ !6789:Labcefghƒÿÿøôð hMhmH hzhmHhfYhmHB*phjhmHUhahmH hMhMhs"ghM h86h86h&3ch86hHhI6 hIhIj[hIUhI hHhIjhIUj\hU2/Afghi 789deDs)):~~y!gdmH6gdmH gdmH gd)gds"g!gds"gSkd$$Ifl08d&," t644 la !<$Ifgds"g 6$Ifgds"gefghƒ1P):):):):):Ds !<$Ifgds"g 6$Ifgds"g!gds"g6gdmH gdmH gd!gdmHƒ ./01COQRSW[ioq)HIJPTøDZíyqyihUh6hUh:X6hUh6 hmHh/ hmHh hmHhhs"gh_|h&3c hMh h86hI hHh(DjZh(DUh(Djh(DU hzhmHhfYhmHB*phjhmHUhahmHh_LDhM hMhM)PQRSpqIJ*+,m)):})sgdmH!gdfgd86 A & F^gdmH h^hgdmH)gds"g!gds"gSkd$$Ifl08d&," t644 la'(*+,08AClmn~Ɇʆˆ͆ΆφІц҆ӆچۆ݆ކ߆㼵}}yuyh0hbt hbthbth+h | hzhahfYhaB*phjhaUhaha h h hWh hJhh%hu56 h:XhJ h:Xhbt h:Xh;hhmHhWh86hUh6hUh6-mn~̆͆ΆφІކ߆#$*):)s !$Ifgdagda!gda6^gda!gd0^gda!gdW!^gdaBgdmH!gdk"#$)*>?BCDx{܊ފɌʌ͌ΌόЌьڌ݌ սɵޱha5CJ aJ hlS h hlSh[ hhkh{h'hbthbt6 h06 hah#:h#:hah#:5h0 hbt6hbt hahahahaha5 h#:5 ha58*+,-?@AUI !$$Ifa$gdakdg$$Ifl\Fzr'd  t0644 la !$IfgdaABCDxyz{^YT'sOT'sT'sT'sF !$Ifgdat!gd0gdbt!gdakdA$$Ifl\Fzr'd  t0644 laUI !$$Ifa$gdatkd)$$Ifl\Fzr'd  t0644 la !$Ifgdat܊݊ފ^Y'sY'sTY'sY'sKK !$Ifgdat!gd0gdbtkd$$Ifl\Fzr'd  t0644 laUI !$$Ifa$gdatkd$$Ifl\Fzr'd  t0644 la !$Ifgdat^Y'sY'sTY'sY'sKK !$Ifgdat!gd0gdbtkd$$Ifl\Fzr'd  t0644 laʌˌ̌UI !$$Ifa$gdatkd$$Ifl\Fzr'd  t0644 la !$Ifgdať͌ΌЌ ^Y'sTOJB$a$gd0!gd#:)gdk!gd'gdbtkd$$Ifl\Fzr'd  t0644 la 0126?Dkb3sgs s $Ifgd0kdo$$Ifl4?0= '`=        t0'44 lalp $$Ifa$gd0 02DEVWX%-NfAILOSTUVWXjklvwx-GOœԓՓߓξ쩡ߙy h05CJhz[Lh05CJ hdCJhz[Lh0CJhz[Lhd5hz[Lh05 hd5hd h'CJ hkCJ h0CJhh05CJhh0CJhhd5 h05hh05 hh0hh05CJ aJ /DEFWXG>e s>e s>e s1e v: H$If^Hgdd $Ifgd0kd#$$Ifl4^\= H' =        ?        t0'44 lalp(vwxyώЎXYZgYe v:3v:3v:3v:3v:3v:3v:3v:3v:3v:gv:gv:gv:gv:gv:gv: v: v: v: v: v: v: & F$Ifgd0 & F$Ifgd0 & F$Ifgd0 $Ifgd0 $If^gd0YZBCDEFGHIJKLMNOPQRSTU v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: & F$Ifgd0 $Ifgd0UVWX\eHF=e s13s1gs $$Ifa$gdd $Ifgddkd$$Ifl\= H'=   ?   t0'44 lalp(ejklwx s<3e s3e s3e s $Ifgddkd$$Ifl^\= H'=         ?         t0'44 lalp( $$Ifa$gddx23۔ܔ+,͖ΖϖЖіҖӖԖՖ֖זe v:e v:3v: 3v:gv:gv: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: & F$Ifgdd $If^gdd $Ifgdd23D_y{|ڔږ WYZ[_)5NXZ[b .:S]_`vŽŸhz[Lhd5 h05hz[Lh05 hd5hh05 hh0hdh0 hkCJ h05CJhz[Lh05CJ h0CJ hdCJhz[Lh0CJ?זٖؖږۖܖݖޖߖ v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: $IfgddHFF=e s13s $$Ifa$gdd $Ifgddkd$$Ifl\= H'=  ? t0'44 lalp( gs s<3e s3e s $Ifgddkdm$$Ifl^\= H'=         ?         t0'44 lalp( $$Ifa$gdd XYZ[pq̚jke se v:e v:e v:3v: 3v:3v:gv: gv:gv:gv: gv:gv: gv:gv: v: v: v: v: v: v: v: v: v: & F$Ifgdd & F$Ifgdd $If^gdd $Ifgdd v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: v: $IfgddۜܜHC>>9'>'s)gdkgdk!gd#:kd=$$Ifl\= H'=  ? t0'44 lalp(Ɯڜۜܜݜ!"#7lڟ\bРҠ FXT񼴼񮧞xxrk h'"5CJ h'"CJhxh~5CJhh~CJhh~CJ\h~5CJ\hi(h~CJ hh~ h~CJhGh~5 h~5h!h~5CJaJh#:h~5 hm5 h~aJhh~aJh[hkh~hm hhk(ܜݜ"hSJr sss $Ifgd FHJ¦Ħ.0"$@r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:v:v:v:v:v:v:v:v:v:v:v:v:v:v: $Ifgd@|FGHJLMi(8:NOQSTwhjp*B.F,np89ʷԦԦ񠗠hj\h'"5CJh'"0JC5\hl)h'"CJ h'"CJhj\h~5CJ hh~hi(h~CJhxh~5CJhLh~5CJ h'"5CJh'"h~0JB*aJph h'"h~ h~CJhi(h'"CJ4opPR " <>@z|FGr v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:v:v:v:v:v:v:v:v:v:v: $Ifgd <=defhjkkmnpqrsuv~¸¸ܲ֬ h7SCJ h#:CJhj\h~5CJ h'"5CJ hh~ h CJ h~CJhi(h~CJhxh~5CJ h'"CJhj\h'"5CJBbcdefg^Rv:Ir v:Iv:Iv: $Ifgd?JL24 248:<=dr v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:v:v:v:v:v:v:v:v:v:v:v: $Ifgd./023PRT $PTVZ\HJLD Rq r s t u  "$v!/ h CJ h7SCJ hh~hi(h~CJ h~CJhNh~5CJ h7S5CJP$%'(*,^Rv:Ir v:Iv:Iv: $Ifgd.012^Rv:Rv:IRv:@r v:@r v: $Ifgd     |~:<r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:r v:v:v:v:v: $Ifgd%%%&&&&V'b' (,(())))))*****.*s+t+v+w+J-V-.*.F/R//0<0=0Z0[0Ӵ h5CJ hCJh h~B*CJphh h~CJ heV'5CJh#$h~CJ heV'CJhi(h~CJhNh~5CJ h7S5CJ h7SCJ h~CJ hh~@  FHlnr v:r v:r v:r v:r v:r v:r v:v:v:v:v:v:v:v:v:v:v: $Ifgd/@///<0=0Z0[0\000r v:r v:r v:r v:r v:r v:r v:r v:r v:v:v:v:v:v:v: $Ifgdp>????????v@x@AAAABBDBBBCCFDHDr v:r v:r v:r v:r v:r v:r v:r v:r v:r v:v:v:v:v:v:v:v:v:v:v:v:v:v:v: $IfgdEu{|j{j $IfgdzkdO"$$Ifl0pd&T t0644 lauvz{|j{j $Ifgdzkd"$$Ifl0pd&T t0644 la{|j{j $Ifgdzkd#$$Ifl0pd&T t0644 la{|j{j $Ifgdzkd{#$$Ifl0pd&T t0644 la/012  !!z'x'sx'sx'jp'!`'!p'!`'!@ & Fh^h`gd:@ & Fgd:)gd%!gd:zkd#$$Ifl0pd&T t0644 la !!h"i"j"""""":#=######X$[$$$$$$$u%v%w%%%]&^&_&&&e'f'g'l''8(9(:(;(žŪž񞗺xph#)h5hyh6 hhhhh45h#) h#)h4hyh#)6hT  hU6hO6 hPh4h: hO6h4hyhO66 h:hO6hyhWQ6 h:hWQ h:h: h:h4hyhT 6 h:hT +!i"j"""##$$v%w%^&_&f'g'9(:(;())f)g)***'!'!'!'!'!'!'!'!'!'!'!'!'!'!'!'!'!'!'!'!'!'!@ & Fgd@ & Fh^h`gd@ & Fh^h`gd:@ & Fgd:;(q()))?)d)e)f)g))***P*T*****d+e+f+++',n,--S-T-U----------»啎{wsohmhahmH h:h:hhyh6 hh2/ hhhyhyhy6 h2/hhyh6h h2/h:hyh:6 hPh4 h2/h2/ hy6hyh2/6h2/h: hhhyh6h(**e+f+(,),-------..//`0a0'!'!'!'s gdmH!gdmH@&gdmH)gd0%!gda@ & Fh^h`gdmH!gdy@ & Fgd:@ & Fh^h`gd@ & Fgd!gd:-----...].h.....////0)0M0_0a0b0/10111111122b2c2d222g3h3üynfhahmH6hah%CJaJh0%CJaJhahmHCJhah%CJhmHCJaJhahmHCJaJ hmH6hahmH5CJ hm5CJ hS9hmH hJhmH h+hmH h(DhmHh:XhmH5h%hmH56 h:XhmHh[hmH hAchmH(a0b0|000000111&1/101A11111111111v:0v:v:v:v:v:v:v:Z v:Z v:jjjj^0^^^Z jZ jZ j <$Ifgd  $IfgdmHFf% $$Ifa$gdmH$a$gdmH11 2c25,j!j <$Ifgd  $IfgdmHkd'$$Ifl4:ֈxlJ|)tp2 t0)44 laf4c2d2e2f2g2222j0jjjZ jZ jZ j $IfgdmH <$Ifgd 22225,j!j <$Ifgd  $IfgdmHkd($$Ifl4&ֈxlJ|)tp2 t0)44 laf422h3i3j3k3l333334jjj0jjjZ jZ jZ jZ jZ j <$Ifgd  $IfgdmH h3i3444444555555566666647877777r8v89999V:[:::::;;;;;;;;/<0<<<>>>>>>>>??5@6@7@:@}@~@@h6CJaJh%CJaJh0%CJaJhah%CJ hmHCJhahmHCJhmHCJaJhahmH6hahmHCJaJhah%CJaJC441445,j!j <$Ifgd  $IfgdmHkdH)$$Ifl4ֈxlJ|)tp2 t0)44 laf4444444440jjjZ jZ jZ jZ j <$Ifgd  $IfgdmH444N55,j!j <$Ifgd  $IfgdmHkd *$$Ifl4&ֈxlJ|)tp2 t0)44 laf4N5O555555555jj^0^^^Z jZ jZ j <$Ifgd  $IfgdmH 55665,j!j <$Ifgd  $IfgdmHkd*$$Ifl4ֈxlJ|)tp2 t0)44 laf4666666^0^^^Z j $IfgdmH <$Ifgd 666#75,j!j <$Ifgd  $IfgdmHkd+$$Ifl4ֈxlJ|)tp2 t0)44 laf4#7$757677787p7q77777jj0^^^Z jZ jZ jZ jZ jZ ^ <$Ifgd  $IfgdmH 778085,j!j <$Ifgd  $IfgdmHkdX,$$Ifl4ֈxlJ|)tp2 t0)44 laf40818s8t8u8v88888993949I9J9Z9[999jj0^^^Z jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ ^ <$Ifgd  $IfgdmH999;:5,j!j <$Ifgd  $IfgdmHkd-$$Ifl4ֈxlJ|)tp2 t0)44 laf4;:E:X:Y:Z:[:c:d:::::jj0^^^Z jZ jZ jZ jZ jZ j <$Ifgd  $IfgdmH ::;;;5,j,j,^ $IfgdmHkd-$$Ifl4MֈxlJ|)tp2 t0)44 laf4;;;;;;;;/<0^^^Z jZ jZ jZ jZ j <$Ifgd  $IfgdmH/<0<<<5*j!j $IfgdmH <$Ifgd kd.$$Ifl4ֈxlJ|)tp2 t0)44 laf4<<<<<<<<j0jjjZ jZ jZ j $IfgdmH <$Ifgd <<a==5,j!j <$Ifgd  $IfgdmHkdh/$$Ifl4@ֈxlJ|)tp2 t0)44 laf4===============>>jjjj0jjjZ jZ jZ jZ jZ jZ jZ jZ jZ j $IfgdmH>>n>}>5,j!j <$Ifgd  $IfgdmHkd,0$$Ifl4@ֈxlJ|)tp2 t0)44 laf4}>~>>>>>>>>>>>jjjj0jjjZ jZ jZ jZ j <$Ifgd  $IfgdmH >>?o?5,j!j <$Ifgd  $IfgdmHkd0$$Ifl4@ֈxlJ|)tp2 t0)44 laf4o?p?????6@7@8@9@:@V@W@{@|@}@jjjjjjj0^^^Z jZ jZ jZ jZ j <$Ifgd  $IfgdmH}@~@@DA5,j!j <$Ifgd  $IfgdmHkd1$$Ifl4@ֈxlJ|)tp2 t0)44 laf4DAFAwAxAyAzA{AAjjj0jjjZ j $IfgdmH@vAwAxAAABBbBcBKCLCMCPCCCCDD?D@DADDDLDMD2E3E4E7EaEbEEEEEEE}F~FFFFF3G4GuGyGGGGG9H:H;H>HFHGHHHIII IӺӥӺӺӺӺӝӝӺӝӺh6CJaJhahmH5CJaJhah%CJhmHCJaJhahmHCJhahmH6hahmHCJaJhah%CJaJhmH0JCJaJhahmH0JCJaJ>AAAB5,j!j <$Ifgd  $IfgdmHkdx2$$Ifl4@ֈxlJ|)tp2 t0)44 laf4BBBBBBaBbB0^^^Z jZ jZ jZ j $Ifgd6 <$Ifgd  $IfgdmHbBcB|BLC5,j! j <$Ifgd  $IfgdmHkd<3$$Ifl4@ֈxlJ|)tp2 t0)44 laf4LCMCNCOCPCXCYCCC^0^^^Z jZ jZ jZ ^ $IfgdmH <$Ifgd CCC@D5,j!j <$Ifgd  $IfgdmHkd4$$Ifl4@ֈxlJ|)tp2 t0)44 laf4@DADBDCDDDLD^0^^^Z j $IfgdmH <$Ifgd LDMD~D3E5,j!j <$Ifgd  $IfgdmHkd4$$Ifl4@ֈxlJ|)tp2 t0)44 laf43E4E5E6E7E?E@E`EaEj0^^^Z jZ jZ jZ j $IfgdmH <$Ifgd aEbEEE5,j!j <$Ifgd  $IfgdmHkd5$$Ifl4@ֈxlJ|)tp2 t0)44 laf4EEEEEEj0^^^Z j $IfgdmH <$Ifgd EE(F~F5,j!j <$Ifgd  $IfgdmHkdL6$$Ifl4@ֈxlJ|)tp2 t0)44 laf4~FFFFFFFFF^0^^^Z jZ jZ jZ j $IfgdmH <$Ifgd FF GuG5,j!j <$Ifgd  $IfgdmHkd7$$Ifl4@ֈxlJ|)tp2 t0)44 laf4uGvGwGxGyGG^0^^^Z j <$Ifgd  $IfgdmH $Ifgd6GGG:H5,j!j <$Ifgd  $IfgdmHkd7$$Ifl4@ֈxlJ|)tp2 t0)44 laf4:H;HHFHj0^^^Z j $IfgdmH <$Ifgd FHGHrHI5,j!j <$Ifgd  $IfgdmHkd8$$Ifl4@ֈxlJ|)tp2 t0)44 laf4III I IIj0^^^Z j $IfgdmH <$Ifgd  IIIIIZJ[JmJnJWKZKZL[LLLMMMM]N`N8O9O:O;OOOPPPPPPIQLQQQXR[RSSS S=S@SSSSSSS5T6TTATITJTTTTTTTTTFUмЫЫhah%CJh6CJaJhah6CJhah6CJaJhmHCJaJhahmH5CJaJhahmHCJhahmH6hahmHCJaJCIIII5,j,j $IfgdmHkd\9$$Ifl4@ֈxlJ|)tp2 t0)44 laf4IIIII%J&JYJZJj0^^^Z jZ jZ jZ j $IfgdmH <$Ifgd ZJ[JnJJ5,j!j <$Ifgd  $IfgdmHkd :$$Ifl4@ֈxlJ|)tp2 t0)44 laf4JJJJJJKKWKXKYKZKKKKKKKKKLLLL?L@LYLZLjjjjjjjj0^^^Z jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ jZ j <$Ifgd  $IfgdmHZL[LkLL5,j!j <$Ifgd  $IfgdmHkd:$$Ifl4@ֈxlJ|)tp2 t0)44 laf4LLLLMMIMJMMM0^^^Z jZ jZ jZ jZ jZ j <$Ifgd  $IfgdmH MMM]N5,j!j <$Ifgd  $IfgdmHkd;$$Ifl4@ֈxlJ|)tp2 t0)44 laf4]N^N_N`NzN{NNN9O:O0^^^Z jZ jZ jZ jZ jZ j <$Ifgd  $IfgdmH :O;OOO5,j,j $IfgdmHkdl<$$Ifl4@ֈxlJ|)tp2 t0)44 laf4OOOPPPP$$Ifl4@ֈxlJ|)tp2 t0)44 laf4=S>S?S@SHSIStSuSSS0^^^Z jZ jZ jZ jZ jZ j <$Ifgd  $IfgdmH SSS=T5,j!j <$Ifgd  $IfgdmHkd|?$$Ifl4@ֈxlJ|)tp2 t0)44 laf4=T>T?T@TATIT^0^^^Z j $IfgdmH <$Ifgd ITJTiTT5,j!j <$Ifgd  $IfgdmHkd@@$$Ifl4@ֈxlJ|)tp2 t0)44 laf4TTTTTT^0^^^Z j $IfgdmH <$Ifgd TTTNU5,j!j <$Ifgd  $IfgdmHkdA$$Ifl4@ֈxlJ|)tp2 t0)44 laf4FUGUMUNUOURUZU[UUUUVVVVVVVAWBWCWWtttttuuMvNvOvRvivjvkvkwnwwwxxxxxxxwyxyyy|yyyy.z/z0z3zzzzzzzzzӹh'jh'U h2/hmHhmHhah6CJUhah6CJaJhahmH6hah%CJhmHCJaJhahmHCJaJhahmHCJANUOUPUQURUZU^0^^^Z j $IfgdmH <$Ifgd ZU[U|UU5,j!j <$Ifgd  $IfgdmHkdA$$Ifl4@ֈxlJ|)tp2 t0)44 laf4UUUUUUVV0^^^Z jZ jZ jZ j <$Ifgd  $IfgdmHVV1VV5,j!j <$Ifgd  $IfgdmHkdB$$Ifl4@ֈxlJ|)tp2 t0)44 laf4VVVVVVV W WBWjjj0^^^Z jZ jZ j <$Ifgd  $IfgdmH BWCWWt5,j! <$Ifgd  $IfgdmHkdPC$$Ifl4@ֈxlJ|)tp2 t0)44 laf4Unauthorized users can log into the system undetected, execute unauthorized commands and leave the system vulnerable to other unauthorized users. Malicious users may use the system to access other systems and perform a coordinated DoS attack. Firewall Rules specific rules identified Utilized Intrusion Detection Software tools to continuously monitor servers. Document Incident Response process and procedureNetwork devices and servers remotely administered with insecure protocolsDirect access to SOM resources resulting in intrusion or unauthorized access to personal data. 1410.21 1410.22 1410.24Devices being connected to the network that may be infected with viruses (e.g. contractor laptops)Unauthorized access to sensitive/ personal/ confidential data. Port/segment blocking due to the spreading of a virus System down time, lost productivity. DIT-0155 Foreign Device Network Connection RequestRemote users that may have infected computers, connecting to the networkUnauthorized access to sensitive/ personal/ confidential data. Port/segment blocking due to the spreading of a virus System down time, lost productivity. DIT-0155 Foreign Device Network Connection RequestPhysical damage to facility and/or equipment caused by storm, tornado, vandalism, accident, etc.Information unavailable Loss of service to public System down time, lost productivity Business Continuity Plan and disaster Recovery Plan documented, tested and implementedEquipment failure/malfunctionInformation unavailable System down time, lost productivity Business Continuity Plan and disaster Recovery Plan documented, tested and implemented. * - The Probability and Impact are based on the Agencys existing controls.     This document is for official use only. This document must be handled in a confidential manner at all times. Distribution and/or reproduction of this document outside the intended and approved use is strictly prohibited. DIT-0170 Rev. 03/09  PAGE 47 of  NUMPAGES 47 ttttttt$u%urusuujjj0^^^Z jZ jZ jZ jZ j <$Ifgd  $IfgdmH uuuNv5,j!j <$Ifgd  $IfgdmHkdD$$Ifl4@ֈxlJ|)tp2 t0)44 laf4NvOvPvQvRvZvbvjvj0^^^Z jZ jZ j <$Ifgd  $IfgdmHjvkvvv5,j!j <$Ifgd  $IfgdmHkdD$$Ifl4@ֈxlJ|)tp2 t0)44 laf4vv wwDwEwjwkwlwmwnwwjjjjjjj0^^^Z j <$Ifgd  $Ifgd6 $IfgdmH www x5,j!j <$Ifgd  $IfgdmHkdE$$Ifl4@ֈxlJ|)tp2 t0)44 laf4 xx*x+xaxbxxxxxxxjjjjjj^0^^^Z j <$Ifgd  $IfgdmH xx y8y5,j!j <$Ifgd  $IfgdmHkd`F$$Ifl4@ֈxlJ|)tp2 t0)44 laf48y9ySyTyxyyyzy{y|yyjjjjj0^^^Z j <$Ifgd  $IfgdmH yyy z5,j!j <$Ifgd6 $IfgdmHkd$G$$Ifl4@ֈxlJ|)tp2 t0)44 laf4 z z/z0z1z2z3zzjjj0^^^Z j <$Ifgd6zzzzz5000!gdmHkdG$$Ifl4@ֈxlJ|)tp2 t0)44 laf4zzzzzzzzzzz{{{{{-./01'^gdOo{gdOo{gdOo{gdOo{  gdwws  gdw @ & Fh^h`gdazzzzzz{{{{{{{{{{{{{{{{{*+,234ȷ}rk} hzhOo{hfYhOo{B*phjhOo{UhOo{ h2/hmHhwwshIrCJaJhU0JCJaJmHnHuhwwshIr0JCJaJ!jhwwshIr0JCJUaJ hIrCJhIrCJOJQJ^JaJhRhIrCJ^JaJhIrCJ^JaJh'jh'U) 0&P:p6w/ =!`"`#$@%, 00&P:p6w/ =!`"`#$@%&&P:p/ =!`"`#$@%, 00&P:p'/ =!`"`#$@%) 0&P:p'/ =!`"`#$@%, 00&P:p6w/ =!`"`#$@%) 0&P:p6w/ =!`"`#$@%, 00&P:p6w/ =!`"`#$@%) 0&P:p6w/ =!`"`#$@%, 00&P:p6w/ =!"`#$@%) 0&P:p6w/ =!`"`#$@%, 00&P:p6w/ =!`"`#$@%) 0&P:p6w/ =!`"`#$@%, 00&P:p6w/ =!`"`#$@%) 0&P:p/ =!`"`#$@%, 00&P:p/ =!`"`#$@%) 0&P:p/ =!`"`#$@%, 00&P:p/ =!`"`#$@%) 0&P:p/ =!`"`#$@%, 00&P:p/ =!`"`#$@%) 0&P:pat/ =!`"`#$@%, 00&P:pat/ =!`"`#$@%&&P:pf/ =!`"`#$@%&&P:pf/ =!`"`#$@%, 00&P:pW/ =!`"`#$@%) 0&P:pW/ =!`"`#$@%&&P:pW/ =!`"`#$@%) 0&P:pIr/ =!`"`#$@%*1h/R :pd/ =!"F#$%0 001h/R :pa/ =!"F#$%- 01h/R :pa/ =!"F#$%0 001h/R :pa/ =!"F#$%- 01h/R :pa/ =!"F#$%0 001h/R :pa/ =!"F#$%- 01h/R :pa/ =!"F#$%0 001h/R :pa/ =!"F#$%- 01h/R :pa/ =!"F#$%0 001h/R :pa/ =!"F#$%-01h/R :pd/ =!"F#$%- 01h/R :pm/ =!"F#$%0 001h/R :pm/ =!"F#$%*1h/R :pmH/ =!"F#$%- 01h/R :pm/ =!"F#$%0 001h/R :pm/ =!"F#$%`!JY'Orz?b,``a|Yx lgy u04e#$!$VMl8!{H08'I,&Xi `, <-} tdqL&6g[/9UT~h޷SNZ;Qw_޵'?kkk;}O?9}\{'pMc>N?UFW[X;!xz)_g{{;_'~<.|ҟ0N"2uJQ"Q)>M8|WcR)WNWMvQq|ҷY(=|O/M7-aۏ_1"!6FG9RQroP3jSsM }L_IWmWTJE:7aVr]b\~Sq͸^i' ]iſ:*.7U\$xH{ M?2v^hJ_WH?7Mtjyw&]H}Stwrn/-`wĝbTuӼr-#4wbLؚP7,1b׵[1l'}=]4~ +RE '},'hq;_ѳӸ<_L#ۏyV6Gf{C#7j*yc{Bn^܈YZyQ~*cdasTi\3QsT#Ex,?x5U}sTy /vGsH"UO.u[:wq,IEw7"HRxαi)5GUllO>S|MMپҧy9*/LW.'?*#tQjO>VizQlʩ)3֣wb*Q}]7+GެQ16Hs;i#͡rTi &V!H稆oTGu\3ʆory~h黕\_W "BT>횣*[\5T*ߟZ-^[e UQ 9*ߥ+X,Ɏt9X鼗Z~^/ZPtkv*C+_?v'#6Qy"9*>Ocg6QM#KTq#ԟײ7Y#{Gō7䨮7U;GDeCݰFBy0ݧVn*?GzTQIXτ2sIqюT$ʿr.IϖךzGPQzsT~Ee=*~WЈ\bW!y]Ww\7a5ףdTBQ}z`H*w=%_!orzS]CV~DwV9>W/hQ((J͔ߕ[?]=ܰ^ZE~Gezq_G'9*W~i cO';Uo*mR_2-7~EX7>3{u sW}^Q#|ʸƯd5tGk G",+>GE,9{mAG {/ϜH,Tʏ}1^ocGŤ[hNߝrTcF+,H嘙AX׋мQ^^(zx+7YU^oռ+t[rJ9z9 `1o>4^/ uPʇYqV @ FO(Oį.D~z%_רsT~ez%$?ӪtQqj1^_RV>`%C 5OSL\z|J*N'.qӡU^/t-^y|>8T>`[T?B8D( ӳTŹb5k*J/aG8f߳'9|zT,D=gPf= -wr|jQq9P+N)E*ܾ/͇3sT[r4*D=rTTQ:ߝLOmoPQs 'r`r Q-h0@ LdP?̢:Z@ ?!Z@ 1`@%c@ٞEu:?Z@ 1`@C D-0,b-hX9h ZTG Q-h0@ 0 *ZaYWG h0@ ?!Z@ 1?sL?3:D@ !Z0@ ?!Z`Y+?h` f]--h0@ 1E@ lOТ:Z@ ̷x-h-he:"P&uuPC b-K<-0=Ah-h0@ ?!Z 1L@F`Z@ 1`PC ,S-b-h0@ 0 *Zy_1s -`PC bP`Y"Pf'hQ--h0@ 1EC:(>T*mbZ@)-h0@ 0h-h0@ ?!Z{)A"Wh3Jh0@ ?!ZqXTG h0@ ?!Z@ 1?sLP,o]#1s -`PC bPEuPC b-=rPX03Jh0@ ?!ZqXTG h0@ ?!Z@ 1?sLP,w A(`PC bPT0`PC bP`"\Y DQ-h0@ ?h` fQ--h0@ 1EC:ArO @@-h0@ !`0AE@ #L0h-h0@ ?!Zx)`{rh0@ ?!Z 1X.P`@F`Z@ 1`PC ,S<, A(`PC b],o]`bB 1`PC ,S<, A(`PC b],o]`bt`eb GAQA1EC:ArO @ C Fk]`b GAQF!rPXFȏ Z@AQF!r`,S<, 0`F!r`eb],o]#1s - C (#90@1E@(0=A-`b0r #90@2)A"- `!ft`eb GAaQ`8- C (#9X9x(W`.P|9.`.P|C tb P|Eu`.P|C tb P|`"\Y*+@Fb@(>!@ 1`.@`A(>!@ 1`.@cruP|f?x yc]0@(>!qXT]0@(>!{)AΠAt:(>@ 1`.@C t.PaYTG0@(>!@ 1(>sLP,w A(`.P|C tb P|Tt"(>̢:@(>!@ 1`.@%c.P`f{Z@(`.P|C tb P|&?EP|&Eut.P|C tb ]K<]- Q ]0@0 *@` f]] ]0@1E@(0=A]0tb P|C tb .PaYWG0@(>!@ 1(>sLlOТ:@̷x]]e-:" AF`@ 1`.P|C t,St"(>3.`.P|C tb P|]4+?EP|&uut.P|C tb ]K<]- tb ]0@0 *@Uy>1t.P|C tb ]:]- tb ]X9rP0+>!f tb ]aQtb ]X9rP0+>!f tb ]aQtb ]X9rPAFb@(>!@ 1`.@`A(>!@ 1`.@c.*,]T`!f tb ]aQtb ]X9rg A<@ 1`.@C t.PaYTG0@(>!@ 1(>sLAΠA4.Py9 tb ]]0.`.P|C tb P|`" 4,wtQ ]0`A f?EP|&Eut.P|C tb ]K<] fn T@]0VR7?պ;.P|Clq*6eܻt0|+KxQm\ac"b P|@ \@uhutbr# h 1mil@l@iAQ@R7%(_0 1y@ݦHG+ArhAnbҡCR^Jwww唩҅JcAnV Q>QǎEʻ)#OS|puСu AAZU^L+Q)MŧeA͏kR9*R^ۋGG Co#o 19jY;F|sL䨥Q{{{exEÇezqTzbVt#Q\3n!I* %Q)2zAVBD8A9mVGQڽ-8 A9jErT 9*}gr YrԢ%GQQkJuСzT lwDsr[r`Q+QVzb)t9}1Nn|1*Ng8'BF!&G-w*g^ ?5mZ2 19Ah;v=|e/[{ryМC`(9j-#`G/G?9w뭷6G)kVF!9ȑ#xaޡCHiz(^b/[K׌נmllo/.qjRr`-w*F,^Pbd"GEĊOwvv9jss3-{NBrgeb+TʼnS$.sUrT7w NUirԭ%)GRr0Gs昣MI\e=*֗lll{[1~o;昣=7JcA,e*Gˑ8Xz5O{QqkRW>ڹю(#?("ף[Noqڃ2n9*TX;u`͸n3QvwwgS}͙jǙ-Ji#[yW|5JoAhYf^;z{]`Q_gz9r|ΗV'G Q3Daďr^hL5H?'JA#+9j"q]s' CLZ5rjx_GI9V0䨶'u합D)#kcjʼnag/CRFꬊQr lx_νY,1nD3 >uIZmrԪ(3`1K 1y@&~}aI[oK_7ޔ/u:}_Wկ~k_?oە^'zi"CLP樣 >[^nYx9{?xꓟ|s_?‹^'_/Wo]ܛ-l"d6{ ӼNM hc=G_>~ܙ=ď~(-J 9W2So#/;c߿egGg{Ʌgspκ5mϼC"؉^5yrV׾eg'syҟ+߽{G?_+O~/>ԯ~㪝?>;Ͻy?[&S:kCL Qd-GASG=)'?/C+|/{?wu\{oϸ ^g|׵!&9r|T(DRro}Y9r/:~㽟_77|/lmoyoם_x+%zy_wʷ;/ 1y@f_)?9b=θM?y n^ŷ\lȥ7~kozg /W~ObRꈝÇk.CLPu]T+=sTG9O9Qg~o}w_<9/z]~˽w?gg_Ÿ-9 r ];tsL e /L`ea6 _: {ß}{Gy>r{}ݻ?y=wC_8Asٯ?s}\seQQ)/T Q[rVt _9A}_^OUrT8c<}9y>ُs'>=9O_xE{W'?UM?ާ>{SWi1C ;[UyF슎rq3'4ߏ o//qb_CڼQCEz[pۋX__͗wvv;zO>>5|?ޟhR SYX?GX{x|=OQ*8FG T9GR~\t΍PG/Xh%9FѢT&v|0,ꛣ677c=*]HS(J*?駺>75(hX(Q0OFB+e95yjtS)Su}) &HVa+jFQR߽G;Aرc+E 첡R)C Q+Va9{OgB.t5^'GA G B[(#$ Q0m,0yhDʱRfuZ:l=@ J 9@0=T&F>?`fC Qo&Fr]cC{ع61`;y{\[j]r?GjXr>D7eLQJ-Eʧ}S}ǎۋi*Psppo>)_h{Ѐ(&nڛ@&f~1t͝|!.:t(?9C&^(%GAЮ5ٗ~#G )/NgWxWfJC} 10ZF䨭HP[q;)Gmoo BrBfJ!#D)3`as,PJD)whRVD敨Hߕ`r(eDsԘͫ";v,J)QEtuѰU8ڜJd@RZ7YD)@;)x^"Aк5dPq>Pt΋W;.yc%i$`F!#(c|sn3AQqƃ8<.lllqVs"D%i5Oc)N_Ǹ|喎 FS`^6Gjs}KsU8-y MEJ̜+ď`W dRGEyp)FRRj:mykvq|AeQ藦I|a1OCm_wu :OA0;|}=Q:BT[ڳu9տ{!jO9 V3Gi"#sdzar X0@Ԟ=;Y9J}Dy|Qף(asTy5i&!QZI`FC v!-X0`9J7)RIkoƯ}kr˷1]馛&8L0Tۊ*#~?|>O9nׯ??g>O|"W^o+0$ `4hX%G:9jikj9JwttW?-ܒ>^iZ1`#h(#Z:.׫zjx^/}_چ,b0FSF4Ge}sTOsTD%KPQFRMhO]+䨖:529I;~xUN> @żR f|ڔ-31&:EȹH2`ArR%~DpJ(쎞3` //F}vb0GCEqǢ8y%P(E@L{':┢{1:WP`1rA 2.8(ǻu>}sT̫ŋ,0d#UN)({zL4c<)G"5.S#S.gL?GE޻(TgZ2`AAP>m;aO2nt'7 1XT!*|??-Y#_Eq Ԍ,l#h4#!7wV{];/<(\4 fIG`\N_G;tNZ2ս#QjY+s Q]#ӟpKM|=GX5@)`1"G-ea6wqx}ݩ!/RWy* @),%G!^}q{O7)B =xFQhr̷?B=(u=biNPTFjn"%lyͪ⏉?k뽨(c"m6j!T%>SS:*?[OSҟitރX\e䵦rjVTcyiGOEҋ6 js¯):R.L.WǝEi ]CT)S9 }eH]U4U>a3V Q>Qi(KgʟD/]#a`CT^?*kP]TQ T9MTNP0U><99*W5U;}SH/]__XS:m\H_Ii*usjF*]ꕠʩK7tӍYJʁ?Q*9ԘQi;}vG~w4֣TQ2TzX]]*z]"~@TQ5#S䢈R7t4rQ*!_sQjR<:JX{!v͎8J0}LߝxZ%Jut,JT=DU'/RKRnL=Vu}/|T(eU zT}RJO>z4^3Nף R QW Q]UY9_ %w|:*qBUNSQ_^[1WÇJl N UQ^Gh!T(zJ/qG=J=z4:kkS]+|^RsQ hu[z hQ2RXZ(sTsJ;Q*77[^?|JʫRrTv^3Ŵ-L?/MJ׌CdKL_wF)`rTdUN9%R)Dr[DT@)Q׈.SDFJ(Tzl rR !n+/F/7/I8/x!J}AV^9k[M+]?VacUxew^k>Gi9(`*/|I3p=P*G$CE+THl^Ȋ(RW_9'tY7kQxwL&|B9ƆE{Ŋk^wͧsq'D)X5JUyv!J(ua c%G_7G%(*grO'Ki2􀒶E8*S:Q,Sʹ*OpQBUiyD qF/ÇEQRqRT%M֪/IgWz^>J=zTe@22G坅؏U~{9jYTppf9GTOmu>,GTsaT缾0UO)ۯrmU>J=aq:9*:Qq&t n9jr*Nstp^b9*[k&*_ymU^X~/z*_0R*e*+٢xj)_8?dF>=dmsT96y)n9QRUހ~^b( 骚cO䨉(QQ/V޹{x0\iiHqLTUn9>9YƌRy9M兩{X%w}ʙ??nN"JaWbw,x*[{.Lu}o|M=˯sO!GRQΤE9*E[x4UyW'o.U^uNӈA3G=XH-ȝaaS 6GpdOZd_XTCu{ٿd4uQ+gIv?`m 5*iFbT%} OצDǞ@][e,Gw:w[ѣ$J5kYTKZR_n9z:՜ʿ4/RS\'o9*~ve"5GřD)V9G-ȝaݦ~枦(V=Gʼn樾iȑ#/zы.19kkvg}eE//xޖ>x>oMSJuB|$P+G˛˂稼"ͭ隦"GtR ro^ve)G_>~obBYgwno1oL7~Q7ף')Qࣽ-%x][%&^ij6^, )p%ouiO=@Ew]R38#1rT~6]cة~_/8/~ʢMHߊzz2ho|Iܗdf^b ̛Ʈ+]צRzK^rTJMnrt!^+/Bz\xӟK)Mo 闦_W?t,ibͪk*[$E+wE) G $kUv^w%ij["G[*9*'l)w\wuv4̳W*p%sTRZ)J]}^<zTNt15\vNף\;(5crԀ9J-9*L>W6y((i:UzT^KRUQ=ȋQْ#0Q}d/>DM{I8^bz"w/I (UYW_]y˼|zz|{=J4w%{-F2OW{HQo0u}=rE)ژ\io^!jQj׳R,T%WY#*5ۄ[ $5JUʿ4Xn99Eq~Q[ H㝋{:O[wXsGJSOdsT,4`srQ 3TjXv9R%r*!JUT9P%TrPQbw@.GR<}E'rTej(^1L^qFq4Cy8̇zv%g>-HS{}oE)P*glRJQhQݫG S]U>j[b1s|`kR7MVyb:L4ݝ:Oݧ1GU~7z<޵1G50Ai">%)2W҅CmooGoYZ+Jz  nQ#䨡Y4i_ 6Ţ=)h嗖o(?+QzuiXp rTqLv[vww777+Bt}}=rA"G7G , 3Qgu=y_~ķ.i\K/=:鰿bvc+ȩWXzJUTymoICT}w5PL/G 0]wf]qС͎XJw}9j rԀK/ėdZ*_32ҝ;4K.\uUCAiSez QaoϾQYjQρ^gؓpSXi 3+zOS+;;;r~F/N^7q>폇5Z|Ǚs~rʇ_!t^R}TerL,sTu֦}o̳}a7ڒ|_Aު{.9=q K=%rQqB9M+D+z]; 8W0X5l5eg>x}aw,UW7|sOU֦rsTӰ'=`ѐ Gfr Kc/5 ̞ZdgIv &-Iar{RLj䨧75?f 00Տz԰Kx_Y+ ٩-jw3JQK?z==W}aF^)"5G9f ǧ^4X FR;3S ]2պ]oy?boґQY3gYOuQSW(5arԂlyAڀ"MvIv"-0(5/,[Q̫Js{1⋋VEgIv6{h00(8SR}|oRAGI==%Gދ sR2UI=aQPdO6m1(5{Ѣ-=Jy=(5MaksØQjdgfm`Qj87& mij. 0(5sRYxƩ1 4JcnqƤ.Njaj jU)amR#| J-l̨$a RqgQRXmxABU BL7qaA\^6˷D_(>(JէqÏo=Jy[i$GmR]߻׏{zE)KhQ*?p9nP՘R$;˻0%R5xRj9QʒrE?`T}dV9PKDrE?`iTב%GQ+"R ,_5䨅ڎ0(ռ$~Rc0QʼbţKfzIQ nAu^u&FR(J"o;՘RRq@ ,9J$ 9QQKj9 cOfCJhQJQIa*`!Gi0Đ4*bQhc u*@i}FPyCѶͧTC*`!GiTX9~ RTvZ?QIaц9mgi0Đ4bQ 1FPyXz՗`FPyCѶͧTC*`!GiTX9~ RTvZ?QIaц9mgi0Đ4bQ 1FPyXz՗`FPyCѶͧTC*`!GiTX9~ RTvZ?QLemcv6FPyC 9J#r^PvC 9J/!o>uPL#E%|cmge0ĐbQzeVd)BA1*}ySFbXͧC `!G0XͧiҳObl>r^PvC 9J/1Ehc:(кAQLeVp|zA 1(r^@C|ꠘFTV˫^Pv9>cv6^PvC 9J/(;!PvC (;@SV?bAn`7:(Ql>r^PvC 9J/!o>uPL#*BA/(;ͱVo;O/(;!C (;`!Ga)BA/(;ͧrm;O/(;!C (;`Ou}yu 0bs `!Ge0ĐbQzehc u Pܣl|-A1jV ̮2ZIs#H(n$F$z`QQF$a!GQFa1Ut;D}Q9AMP=nծ5Tlo2vPL#HP=z-Ql;($ brr$ zbQr$zbQrF$z,A-Q̧𘮘F$z0=]9jo1l;($  nQ9zzsA$Cb9QrreAM!9r$}e}}r>Mӷcǎ뛛]o36#[qLҷ҅ECl1&fJ{#m;֍ ZRm j%ޅ@BH Q H< gKq'L&I̎s__rJ=2^mQ  9TZO#R>.M3zQPg *GZP*+d]>^4`\ >ԸTNSd(X"P#9eY_ttU3E%KlaE9ħdue}ٹ]H9j ak!޷Y?ԐtzTU/tɭ\:93nͼuS|92gՌu0֣T5fd9:Y~S'G=(yfvy_,2O >FM䨣19j3X. [KU%inҐ8EL :9 CC %HzlG600kL%HznGm+G?ġAc*Aփ57շGq8xIZד쏒 4CC %Hz(bQrJ$P8uo3("%Ȥ& h=.QQqpИJ$`Mq3e Ac*AփC'6:pИJ$@ IZ`kI5t"%G)AQDXמAu3 W|uѰg_w_7v~{/o _Ͽp}f~axDd 0  # Abwt!+EOiSDd nKt!+EOiPNG  IHDR*"sRGB pHYs.>IDATx^]߸;$ĈݥX[hK ZCq J۬Xas565mN.r~bXY:#W\' CD#ޘ\.)a6983!bX kab('f҆pH5RV7ԇU dS4ap* IW`,j6+b2͑&?WV j8q(4mܩ9JpnK(k5Aŝ[i{:eT f96Y-TdYTd4t< $Vc<*CmfoI=+ nTfu2X69)BV &lrr΍D㏧gJ|6K"d}}oMe7tqC8^ꟷi/OfjFiC_]pڵi;tN=ku7rC:{7 *  %KpuC4Mgh׾8J8]m?GysUtG9cH"aN՗>?{}[onFSfu@=|ܷ__Q Ho_ycs-VV*Bh&rܶ!̸=1{xΕI1#{UmR:X䡇N [n{xryiԾ?I5Ս\t]*e<]~*~],yQ'rl~.Zx wm>xU2F!'|sN:Ly7>D͇}rigw0wܵa&Lv~Of?{ַ&˽>K4w8l>䖛o4iK/a&k#FuK$3 9&MӾ^чS}rN8=[57lVw:i_69U[SN0 /Zs/Yx-K/;wi ׮cYyc={]C+|23οއϘv6n|>̟1xkKME-3in Wn3{1bmViK..)S͛>p.U6sw΁dG+5cѧ|ӂ' Λ /~8]k}3g:%L7rVQ\Tr9.TW5͞[v_}9~2,YfՊUuP0 NgMm}]u~vϽp8lp9/>6k+N+F \U_Px[?z^ƕcx,LY0 |pQ U"71/^0pÊkXp(]EEe̝O7:c}#'"zVScj~ٺ!2aibsZW=k^ ڰa}S~^^h1-3]~=N[o]<2u}Nvzwҙ̬Y{w;z򸫚2t::#ڶx_s{wk40i#7&haL4sU vL"yC'w¦uPs&Ҝ;nᡚmƚCKZ:t23kڒ.mƝ|m#5jȩx$f5>8c8uYߚnʤ"G[?{;2p0̋X8S)=r)z;wZ~|emwW2PSfs!g0ꍙSHdL& 6ŏ;⁽3}Ցf؊pcC/1sN]Š7^g ۙ_P9ģf^m?4u+=쒞EH&e԰zDݶ$cxo_8oC|q"I2u#&թ͈$ÙxHy5|O0cD$S9sak/~l3gV+?`,fX&Sz:l\ϋ<]O?sqF~{O7k=y}㄃X֊p/.e2 ;9r/rV}>g˦/ A1K&]K8zeKI} G>fĭ9LE -l3"Эgd_,>ﺩnGYN6_GSO=}ĉ+W;g!$6OMU&u=75skPU.]q˗/ݲ5RL6)߽Δ?ɛn! !O>R^Rmn aL/Le~CTx"b2EUE%n^~o>p3s7p͍9U+-6}ywV^k+*_pJ}]g͘n ?6nټ jChȰvL|؉favaX:8q;NkqW>yIO:̳5YMV"M x;Ȱfz̙'N"7)̯Wf+|H)N~1Ǐϱصu"ؠȯ-Y{~ʊ+QQQ"9|̀Rd5<DS0cjB8a'M< )ߐL՗ty7vE3qQ] 3xo_`ACJfç}b1&?dĐ=fW#fHƣ~-OrIv1G3mtb&0 ӹ}z;ɩTracǎi׺uscmXL +m5&zw|]cOBЁ!N|bEaqSȺdX  ,I=-l6`C*k67&?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|"~Bp[\Root Entry  F0\IData }HWordDocument {ObjectPool0Y0\_1226121653@96>@)&YYOle CompObjuObjInfo  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ @96>@)#Microsoft Photo Editor 3.0 PictureMSPhotoEditor MSPhotoEd.39qOh+'0( @L h t  CONTENTS n`CONTENTSV301TablebmSummaryInformation(       !"#$%&'()*+,-./0123456789:;<=>?@ACDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxy{|}~ HfIBcYTtOHiLGgF@\`[y^Wx50PQJkUS`SPYyxNM]RQcZYk率^[lC@USOhB=[OKd=:KhfqC@Q_YsG@bDg=8V +%C@:^4.P &ws)&9(%8LI^(/,G'$?NF] ,63F84O4FB[]Xv<7rn !  zv:2W 8?6e91Z(!B IEV¿2)V H71U:6Q40I{x3/H+51J2.E  if{,!<4]<5W;4Sif,&T$Nxu^\r& N+$W~)$ME?m98J/}0.D30K[Uq171U2,Ric} (xsmh~"?ULy6-\:2Woh.'I=7Q* ,91V.&O _[l;2]7.[PJf/(I5/K 4MGc60L^Xt09SLn@9X$¾OHg' A/(I:4P83J&@+$FLEfJE\ 6[Uo+$F*$H,*Bpj$B7<6Pro #YSm,/)EB;]0(OURoKDn]W:4V:8Nb[93chb(!KA;i !ebw52O6/XaXw:6-X4-W3LDi7yp 4vn;yr*$>4.H 2G@a%=@:V)80U,$MƲȲE>`#DE>_!78pi1ic}:KDeMGc0aZ{7)}0+Bf_~HAcun%=MH^2խSNd)"Dw6JFad[7*#BPK_4;5Q5}5.O,$Iƽ̧*%CaZ{(!Bþܷ/ļD>dNGi=LEo}w $>7`L<2f>3S5+CC9R-"B*HŻ?6c%K4ȿǾƽº<5G+!D!e]rx4º  ^Ut1|?:Q$ 1}-4.H,$I ; < )h_~A5g#NujaWy4TKj}s>B9X.%@.$I0&KwXPg%;pgXQs8qi80U-(>1*I)OFc:#C 6 0PH_WOd%;ž "{sqe 7*":JDR'v 8[P{6+U)K1# sl~*#Bum1'IztkA;WUNm8/N$?D,VMh'DyşNGY'?ɿQHe)ui#@,#>KDT .pg 9fY@5_, Nƹ":~uti8.S'A}yp%80$JE<[ "kaz:1N5)Q]Sl&A5-T:2[ )@;[) ;D2`UI{ID=^3E>`( GOEj!A* E0$RK@kMBlC9^4RIf!AUJu0ti_V :ÿE5`.'F@8]B:_·2KCX-OG^ 24)G;/S\Oz5ǽ0&INF^(:4+Jg^y39/R-#H0'@,"Eù~!1,"DI@[c\n lc}5-D3*GZRi 6A:[-&Hie|0MIbý /2(M.#KI>h7,W9-];/a!JQFpuk-ǿ-$A.$G:=5\6/Qmf1`[q1)P;3\LBd,"Gtn|)?4^>4Y;1TD:_72)H!@_T~QHe8ULw=$EZRy:3R6z!:rjKCX0'FZRj$?ù)<."H-#E*"GHB\,IBarm "HA`6/N6/Px,&@4.J  ):5KWPo 2%D&C5)-,'>UQb(!3#7nk|)!96& :%gbx !g`.&K $qk-'Ato5-R '(!C/)E. &YTk-%L< :$8-yuHAc%#3.Ekec]w 'A;W(71MIBd3 %mglg~ &#;JE\IBa0"F'I+[VmE@W $ż  $564I{y"<263-VSh# ; ]Sv$H- V1#^-\/]/^/`/b/b/b/`. ^)[-#_3)^, N4ϏɓБӐӏӏээяӐӗٕ4;qR#Z'[$X%Y%Y&Y&Y&Y%Y#Y"Y%Y&Z(Z&YTOYڍՏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӍээӍӏӏӑѓΝϗ7*X,Z.]0 _/`/`-^0 a/b/b/`/`/`/`/`/^/"Z!C+ J/"Z1#a(X1#a/]/^/`/b/d/b/`.`- e1%g. ]"I9)V2'IᝲŋĒАӐՏՍՍӌӍӏӐ՘ٗ8;rU* ].`-^.`.`1`/`/`, `+!`+!`)]._0]-\!VTYۏ׏ӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏՏՏՏՑӓЇΙ7)Z,Z.]0 _/`/`-^0 a/b/b/`/`/`/`/`/^/"Z!CC9[A6(c/ a,^1#a/]/^/`/b/d/b/`.`0#h,d)[0!\2!U3f\~ՔƒЊ̐ӐՏՍՍӌӍӏӏԘٗ9yƣ挡ЏՍӍӍӏӐӑՑՏՏՏӏӏӏӏӐӑ՗ؖ9硲č͕Ԋ΍ш΍ґ֐ԓՑёёѐёӐӐאՏԙ݄ǏӑՐԊΔ؏ӏӍӍӍՍՍՏӒ֕֗ډˑՑՖؒԗښۘ;=v W([3#b0]1b1b1b1b/`/`1`1`._)[1%e/&eUW\䓟ӓ֓ՓՒԐԑՑӏїِҌΓՖ؎ГԐяӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӗۈ̀ƉϔږڏӍАӐӏӎҕםߞ܊|cfLO;>u14k*-d&)`+.e),c'*a*-d58oGJX[af{ͣޝٗә֖׎Зەڏً֑щϒ،0,g'[0!b/ a,]1!b._/`1`1`/`/`/`/`/`. ].!Y#E؜ĔÔȑ̎ΎЍӛ㛫ޒՕԚט՘՘՘ט٘ۘێМܑӞٕ؎чˏӏӍӍӍՍՍՏӈˑћۚڢ㜪ؚۜۛۘڔ9:s!W* ]3#b,[1b1b1b1b/`/`1`1`7'h._+]%ZTXY㤫⛧ۜڜښٚٙڙږ֑јڐґӔ֍АѐяӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӊЏ֑׋ш̋ϑ֓ד՗ٖ٘ۘֆ^j9@v('a$ [USV$ [($_)%`+'b($_#ZVTU W!W67m.1fDG|w}٠ݗזבԔ؏Փڑ֒וۆ0,g'[0!b/ a,]1!b._/`1`1`/`/`/`/`/`. ]0#[BْŒ͑ҐӈΌђvw}}}}}x{l~ǗیяՏՍՍՍӍӏӏӜތvv~y|}LJĀ@?x%!\ V#W'[.$a-!a+_*^*^, `."b0$d1%e2&f0$d-!a)]'[&Z&Z&Z/#a'Y-#`7/j*$`R12jX[ɝݞݕ։͎ӗ܇0,g'[0!b/ a,]1!b._/`1`1`/`/`/`/`/`. ^,["MԐȐ͒ѐҎҏ֑؋Жڌ,3jX($a1(g*"^( \( [( [&![&![( \)\)\.&b*%_&#\&'_PYcیАՏՍՍՏӏӏӐӥlx!U #X+*c)#_* _%Z1&h*a,!c/$f1%g)_&\+_/b/b/b.b.`/`1`1`.\3a0^2a5%d/#a/%b4,h([)\'[%[%!\#"["Y VP\ړՏӐՔڊЏՏӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӊГדٍґӛڗ֎RS0-fL!T5'e8(g3 `0]3#d0!b/`+]+\*\,],^-^+],]+]/`2#d7'h9)j7$f7'h._P#U0(d+%aP8;rovӜۑӖڜ0,g'[0!b/ a,]1!b._/`1`1`/`/`/`/`/`.`+[!OˏЏҋΉ͌Вٍ֒Ԓחא/4k$ ]$Y)]*\/ a/!_-!_-"^-!_/!_0 a0 a*[)Y([+&`Tdk昪ܐՏՍՍՏӏӏӑӗku T%$])!]%W-_/`.a0c*^-a+a."d0$f."d/b/b.b.b.`.`1`1`4b5 c/]-[.[&UQ%W/!_/!_/!_+!^,$`*$`$#\!XR\ߔՒ֊ϒڌӍԍӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏӏՌҋДآ嗣el23kO"U2$b;+j8#f.Y-W3^.\._3 b4$e6#e2"c3 b0 a2a0 a3 b1!b0_+\)X&U-]*Z0`7'h5%f)[&Z,)bL$*^KU™ؓՔ֎0,g'[0!b/ a,]1!b._/`1`1`/`/`/`/`/`.`1"eLƋƗҏҎՌӊόБՑ؎ӕדӍ,/f("`(\2!e8%g._.].].]0_0_1a2_:#g7"c.]+!^Q^`ۑԑՏՍՍՏӏӐӑӟx #Z,)b)\*[7#h:%j3e;%m.a0e)_+c."d(^/b/b.b.b.`.`1`1`.\1^4a6c9$e8%e3#b5%d0_0_/^,^+]*"^#ZVY`݆֗̒ڏ؋ԍӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӏӏӏӏяӍяӏӏӏӏӏӏӐӔ؎ԙܢ㇐OT%&_S1'd0"`+Z,X1^9 d:d7b2`1`0_/^._/^1`3 b1^0]0]0]1`2a3d4 e1_6!d5 c-\*[/!_."`'[2-gUNz%X."`+\&W.`.`/`/`1`1`2`2`-\&W, `/%d*$b[Z՗ҎˋʌɌɍʎˊLJńœ׏Ԑ։ыӖڍяӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӏՍՍՍՏא׏ѝou!!W#T)V:+d4#Z%L$J:.\K@j5.Od_vPLZ(40$<:-Y2#Z,[ P2!g2!e0 a.],[)W)W0 _7'e$M#K/"X*S'R/"Z0!\2"`/]/^/`/`1b1b1b1b/`/`/`/`/`/`/`/`/`/`/`/`/`/`/`/`. ^%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӌӃ͐ؕڙݕחؙؚْОۑ;:sP-"^5%d3#b.`.`/`1`2`2`2`2`:'i.`+!`& ^TQSߘؘؙؚۖؗٚٙؖוזُӍьЋϗڏҏӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӍՍՍՍՏאטڗ?Bw# U0'^3&\!F#E3&Q{ﳱtqzrn|ț< G2"`>.o.c5$h._+\0 _4$b1!_,[)U8+`'M*P/"W- U.!W*T&R/ [/]/^/`1b1b1b1b/`/`/`/`/`/`/`/`/`/`/`/`/`/`/`/`. ^%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӌӑّۗݑגד֏ҎЛݡ⚤@Cx V'Y.]0]/`/`1`1`2`2`2`1`/`,^* _)%bYTY蚧ܑ֑ؐ֒֔֔֔֒֒Ւ֑ՌГ׌Д׏ҏӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӏӏӍՍՍՍՏאםr~"U R* U)P8#[\Kx_Sy1#V)U4$e%X-`+\._5%d5%c/]+Z,X@$H>2baUOCu*R1$Z5(`. [. ]/^/`1b1b1d1b/`/`/`/`/`/`/`/`/`/`/`/`/`/`/`/`. ^%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӌӌՄ͍Յ͌ӎՌӏӈ̏я5;oU(Z/].[/`/`1`1`2`2`2`1`._0$d*!`('cZMSފύՌӎԏӐӐӐӑԍБՒև͙݋ϏАяӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӏӍӍӍՍՍՍ׏במ?Gx!#T(%T!C5(S=5(^!O6(f/^/!^0!\*S GD3%VJ?j}, P&N.!W.!Y. [/]/^/`/b1b/b/`/`/`/^/^/^/^/^/^/`/`/`/`/`/`/`. ^%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӌӐ؉јՏֈх̍Ґԗٕ28lV0&b6&d-Z/`/`1`1`1`1`1`/`+\/#c'\'!_[NUᑥ׌ԊӌӍӎҎҐӑԍєؐւȘ܉͓͌ԏӏӏӐԏӏӒԖؘڑӏѐҎЏѐҎЏӏӏӏӏӏӏӍӉΐ׋ԊӋՔ݉ќ06fB.-O{pf&J3&\)V*S$N%G1)PYOqc[?.$X*U5(`2$_'T/!^4&d-^+\/`/^/^/]/]/]/]/]/]/^/^/`/`/b/b/b.`%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӍӏՏՏՍՌӌӌӍӐՖؖ9$J'P%P4&c/!_/^/^/^/]/]/ [/]/]/]/]/^/`/b/b/d/b.`%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӍӏՐՏՍՍӌӍӏӐ՗ؖ9`1%S/]/b/d/d/d/d/d/d/b/b/b/b/`/`/`/`. ^%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӍӏՐՏՍՍӌӍӏӐ՗ؖ9\XiZUk3'O=2$W0!Z/].\8*e)T- U-!QRGqLEg/"M=-P7)\"J)S;+i,[/`/b/b/b/`/`/^/^. ^%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӍӏՐՏՍՍӌӍӏӐ՗ؖ9zp-%J*S-_-c1i/e/b/^/]/^/`/d/d.`%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӍӏՐՏՍՍӌӍӏӐ՗ؖ9wn92S."R/!\*]1 f/d/b/^/]/]/^/`/`. ^%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӍӏՐՏՍՍӌӍӏӐ՗ؖ9cng(J4']3$_.]/^/^/]/]/^/^/`/`. ^%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӍӏՐՏՍՍӌӍӏӐ՗ؖ9/#Q&L @2#Z0!Z/ [.Z.\._.a/d0c.`%Yhoގ֌ՍӑԑӑӑӏӏՍՐՐՒԗ׌25j!X+!^/`1`2b2b1b1b/`/`/`/`.`/ a,[, ^"UbeېՍӍӐӑӓӑӍӍӏՐՏՍՍӌӍӏӐ՗ؖ9tmMBj H4&c/`-b1 f.b.`#Yinޒ֏ӐӒҒґΓΓɐ92[+S2"`1!b1b/b/`. ^. ]/^/^1`1b/`0 a.[. ^"UbeۏՌӌӏӐӑӐӏӍӐՐՏՍՍӌӍӏӐ՗ؖ97*`L4&c2$a(V2"a)Z+_%]WooߚҙʚĦA:[)K+X)]'^.e.e/d/b/`/^/^1`)V+[1e,e&!cjo♬׏ҎҎҌώɎ͏֏ِؐՏэЌЌӌލܖԗϙ88x#^)_+\*X/^/`.d.d. ]. ]/d/g(a&^(X*%]$"aX\➮ߏ֌֌֌ԌҌҌԌԌ֌֌֌ԌҌЌ͍͌ъыыыыяՓٛܓҏΐϏБҒӏАѐҐԐԐҐҐԐԐҐҐѐѐҐҐҐҐѐѐѐѐҐҐѐϔЖԐ֌Ӛݤ⅏[aV!Z&Z) Y,"V0#Y.]*]3#d-^+a0!f7(m&Z.#_$N;3Z3+R!G+T7*`.!W0!Z6'b/`4%f'Z-*attКɛô;5Q-"L0#X1#`1"c-_-_._.].\.\.\0\<'h3d3"i*dTX]ԌʒԐԐԐё͑ϒؒٓٓՒґΏΏҏܑڋŋ13l& \.#_6'b9'c1"]0"`0!d0!d.#].#]0!b0!f8)l*\(T'#VRMPӓΒԐԐԐҐҐҐԐԐ֐֐֐ԐҐѐ͐ϏьԎԏՏՏՒؖܚؒЏ͏͎̏ϑϐΒҒҒҒҒҒҒӒҒҒҒВВҒҒҒҒВВВВҒҒВ΍ǕЖ֎ϓП٢ؘ΁CB{N%R0(Y&P(U:,j6&d+Y"T6'j&Z(X8-e@6/N>2&V1%W&L$J/!V.X*Y0"`( SHihŨ:4P,!K-!S.!Y(U. ]. ]/]/ [/ [/ [/ [/ [.V)U1"c/&g XdjݚԓҒӒВΓ̓ΕՕו֔Ғϑ͐ːϐؐ֙Зʣ14g R&T- V-U- X-\-a+_+ Z+ X-]-_,^'T,"V/([$!V]_ߝԕӒӒҒҒҒҒӒӒՒՒՒՒӒҒΒΐАѐёґґҔ՗؜וВ͒͐ˑ̔ѓДєєєєєҔєєєϔєєϔϔϔϔєєєєϔϔєϐœʖӗ֖ѕϛϡ֥ڜvt>;j"L'P,#Z%T)R4']. [5'd%T5(`%K<4[@:V55,W-!Q)M#E/#S1#V%O(W*W/(R!>ih4-N>'K1$Z+V+X+X+X+V+V+V+X,T,O)L)V%TH^c˔Ŕ˒˒ȒƔƔȕ͕їԗҕє͒ˑϑԒҏĐ+1aK%Q+!S- U*W*[*`*^*Y) W*[*[-\/"Z,"V#NITTғŗєєєϔϔϔєҔԔ֔֔ԔҔєϔ͓͑̑̒Δ͔͖͚їǑ‘ÐÐÖęƞĒnj@;c&K!H%G)M(P- U3&[)M:d_s%9' B.&M2'O1&N3)N=3X7*U1$R;-b5)Y,%G 5NHd/%H/$L5*T.#N2&T2&T2&T2&V2&V2&V2&X2&T8,R5+N.%P("N&&HahĒ‘Ď”=Bh$&M)'O%G$E) M)Q)V(T( Q( O)Q)Q$H/#Q+"M&I&#P\[ĕŏǐǏŐÏ΁}RHj5+P$C<,!L3F?^彿նÿƽ귭Ϗeapxthdu`\kidzid{fbsa^ipnsmkpfdyddpigtqlrk{zrje{fbsa\pgcrlg}topl{XU^{y~zvokzql`[oZRixo~u{xc_mldyqimezhduibtf_ovp~ebkԏiesfbpxpyhev^\jiiqus_\mffpso[Yd{jftmixkhq|zWV^}v ',$< 'd[x}u`Wr /-#F.+xH?Z#)"* 4+Ftn '&";&!8'?6S3)K ' |. $!.-)'#4#529?:Q% 6JCb +)"C 8,2-CVMl2,"D.$<+!:TNZ$/ $)+#;$xuof %(>'9%gct1,@*.&!5+QM\(;5*J"4D~ -)<2&J,Ĺ+wk`~#?C7[ +5,K4¼yq7tjŻ'D0%CUMb$6"4=8OWPoC<^G@_¼)#?b]qKEa% 7KEa1~/*A!2g]$A3(P1'I?5P-$Av%8si8!0(#9Ȟ;/UG;a0%GLA_$:.%B'9ǿkb#f]|&zqB9X %RPf'$Avm*lcȿH@W*&H>VȾ잔}t9/H6,Gyo ~-/%@ZOqbWy (2yooe~$>#y (c]wme5v-* Ex( 5=7Sib;5Qz&}u-¼2d_sPIh'!= ,xq#f`n^Xr4-Nle%?je|A8U:1Pwl/oe* Emiw3(RF;eƼ*D]Qu!:kd3-IIC]i`}"6ľ1]Tq:2G=7EUSi,)F¿!3SJi(6D:RKBU".%9f]x$4jbw~01&DXNq2)F/&9乭4}snf}5(C 1|th^y/A;W<6P}u7?9UKF]2(Jof5+P7/D9E=be_{lg{9:e^},earQJk,%Dmh~8;4F60>a\r/{'9/Q=4S|r )nd%@5. hdsB>L/+98/Z"B%7'3.":!;[Os ) !mgmc":"VOa"UQl!>f^v"0)"4\ShcZu,6.E80&HKCj $je|#Dxlg~"?ldyuqyp7&@HD_}$GD?]5^Wyh`,$Mc^uXQp|t@7d\S~?8Z4/FG?fB9d,%F4tpLEf/(Gpk ==5JB;K^Ym$5.X3*Uxp{{quj, FWLn (d_7jb"A0[Tf.&=XRv!E ^Xt 2'"8SKb /* B>L(rn{5*#BOHj ^Wy;kemh0 !ql0d`yhb;FB],%FMFh?7\/(G/'Lzqrj:1,$I0'R*!L)!H1'hdsIC_-'A 'nh jcsgct+!9E>]D=^-'C|r "wm.qm|2,NF@b+!CTKh&74S2,NKEg#>-JD`*&7E=RVPr'"J+&=C=Y'!=HB\QLb)!.a]k ~ "!3QMd`]p1&fcv+RO`#a^q¾Յ";.+@pl+ҷ %fby&"9[Wn51H "}y&";ROb*'?;Tuq!sl6ٻ.*9&¼ؐ_[t.+@:7L*%;KFZ"(%8$!60-B¿vq1MH\ݝ%"7-ZVm(#A¾(C>Tٚ*&="4"2*'<ÿb^u&zxsq&$2;9G-+9&cao_]k%nlz&0 & &D@[ro$IFY(*rp~NK\85H%:7J*':  gep64A!ro..*%GDWVT_ xv30Etrga} (/" "fbsPL] (#{t1/<=;H"MKX #qn)$ <8OOL] ")+ {y,)<' (*30E30C'( '$9qpxNj̃הÿɅ~|Ǫ焂݅€~~؊쎋ƕՅ⟝㙖밭|yڀ Hb1ИbV)h}hNGE$oj Er`h&Cc]0eYs `(yӾ}9 |>ONm˧|1}'pnYcNC06ޜ|c G|#ZqC8UI(ކ+M ~sy*K*L:)hda$JKKPmP;8TPf_yd:tG]}e%Ĕ)SK\Zjo /.7o1&W}]c޽_{{gkA.6蛅&w#ꫯKKZukWbeXګ_ƪ8: ;u\Z `& I'L?Cdn9PHiy%9pHBcʊL!QCn h20p(vW5Z.3UmN6L0w?xpG[u5׭2iFCT\'&C~<:{sFL1c$eɠX#y7/_K/wT$/nJ$"cqÈ!z>Z60lذo[wԮm9Τ\.=;Hh~td9X,F>ɧ3gcOa bNb% vW(ɸnq<sq}T,vp{g{yN3ws{ DM"'On͎|ɇuuupK.Zx)ށv|?'nj:N#\V/NalT8>aĈn{7;ܵKIqQ>57&v9nlV~汧6 =,!<1 ֵCbb lr02vfCQ2ia(`%5+Y@1dxxA=b?N=SN;z䑦jnݸѨ44YѣG}y}$d8uLgCe9cz]/Vl@_p}|O d8m 7N(.XB=[^xŌ__8grՒ/pe N" JÚalJ\6jlb7LႲQ236nJ3gISLDZ a>o5[7o^twܷdɢٙMS5嵵65Yl:wiשs K ek֭8*`}}64*Ɍ8o 4yQ_~ŗ^aJX&^f7`RPFSSb5ڷ9 B|qGVEEEvcӦMkT+W  M^o!83سOs/' e]fM,Ӌ8h˯إg?ן”o^}g>K?bq놭+ۛrD9s?FÃut /[`uj2_$8BKj\re8*7q]W}7xꛐYnKfNu2sc.nܺ6cK'9jk)\_\Xt'> +μ ^yeWyر_xC;䖟^Ӯ1Ϩkm 6DwCg}QyǷPnH[z5n`7~P8glߴ&2[mHoz-~O=cO85$ֺƆv;=`piAٰqSIY鄉c[)c5 8inJMG멨,uЈ뮿KȘ>cze8wvtj3#E,+n[ұcǦƀ:;wiҰ}vD;u9ౝX3ܔPJH2 vءu򞽺.:wH$ S6nk׾M=ҦMCC֓S\Ve׬YQpGN4 ?>:@T[Wݷ_'ԹkGCV=zv1kIe6nR^0ysGVnذ!NN4OnƇpO>XнjsNm&N:j1XڹKQ 60ok߮q*[bj2lҦmQcܽ˾@[p,?E3**3%D rd~ȱ# GpIɐ.KO6( 6ٝUn{M<>c` -sXD."8vKb.~K2?Dsk{$GCb~F DEw$iG.Kt/2Bt*E0X]+;hf(Rx dU|0JdVƌ1c64@Sc3e)yK8uv{\xR,V:c"j09Ptx56f$F{8sCM/|><Ks!$4& };m 4G<>"0&] ;A Y1ᢓhmsҋ JBbcC9d7:,dui%hpqHQc]+Bb N!?&/~}S:ܧHj4 ax=!?wV1#`R&cV֬XbÁpaqgboYmC}<HE8*hM@ +p="/ܵs'  *S(R-޸:#yg3P`*(  Q&vSVӅljQca 1s ;B:Ŀ2)9EL & (Tx/fq$Ȉ*!e8JT%!e.˞ؘ-^NQZ.1 ɄɮMFp*v/otjWyS ,in5QÑPu&܈ vl9"nAl9bpVJ=$\+4v ۇfO_|`u*2 vwb܏@ȏ gCDCì5aAMܡPІ.)!v\5_JT,xpɄܗW=lL(T/\%WZR. s{Eɳ6!sSI|PLA\`BȚ5[F\󀰸"A-8$V+ǀ RRj|Ee x٪իWo%\R:MG11cŖHR6o,NuEeqSSC:I[n-ԃNwQ2ac,5>j6ô9 uaŏ}h1AˎX48D:?!qYs#eM8lfFYEfnCF$_3f% Fm1C- Bo#A;1 zE۩(ph&VNfZ[NF%("ۉ#_60BH?#abN3D>*9n Y@ $i D6Ï"[1!Z-N'A b<rGxJd^J zF݅n$2fp/.O;+]?pYrPb%U>1?EUFq ]4:۶m mz,2x3D OfDycG8(t U-z ?E3b')*T>+x3,*x:FunPEnH=Qkr8eqF"Fr_x#:@~lzTLROOJEp+}I~Y` Dy7"&uЕ @]Gp$ϒz { {:hda*+6n7ДmX0b$(#(7–x+T[ v L x e>֊R%Ƌ>0-7)"pV~,|2dFV,)}n5X jyEJz Kk=rT""UhZmz5]&=?rT.…>ᡖPK ց CqÚVoui«4}rϕYgsy_D@|x6V[k7l]%+qW5mTLy{‹OM(~(nG};)mT-ُ]6D"CǎRSf1]yWRHUʴYv#JGDMT$fpՒe+V$~b(A$:crKo>`*J?S ߾/1ż6Ъ̖p8eV D*v4\ypA%pgݑ;1I5} )99mښՎc-RR>kYW )}jodZu͎'{.$#Eڪҳ$%,[T1>*g~ ,H06V߰lsFbyW ?(Oo'q53a3-\-x ]l !=fA;C!Pv}Iw;K=4U) f!ʚzJ %ѐ7Ƃߢ0ilI1ȋ2aTp pD9-lHj,^feͪ$F\'&s" •k $g^2eq)E`G|P[Q:JA, MY O}E)+ { I^+ʛ9J9`<6gyG 'd'F"?!S@T|9#%k)HE S,]lA Ń"o⅜'HҢψ 'j=* ~a, 2k{D:ZrLRh '=) mܴf\Vd!-6m{^1j`(!)>6}7P&ޒh\V g@pSRb1sGȏ2x 2U3I%-yq SJ ⥐۪uM|mcdˡU\Y)`5ҵ6D%u1@̸yZ"E * K1dUbI"@(M(gGBberۨwU׮;xO4iWR`pM{xC@Ma%Z^;;EJ(q_S+LZV8Dd啤gJ-&YW5KRALwE"$}T*o2c s[peŝ6YvR xBPHL2p%)'NQ+"#rJvg`v@Uq) `QQDqp_vm"m,̗rRN~e;̱F+KHj-䩥. 8Ж m_WPD&#l1CB례@_E+āFNyAP))]p`[Āru̘nVk{3@|CBH !T~^^4r9\rF3/"ac?v < fq"q#0mkeLI Kc@FCY()f`DA`;,Ҵ,O~DS,dL3ԟD,ph0pze*"IuxV&)ÜJK.B_LɀuPA Ŕvb|vhO϶ʿ%%K#5%E<7ǎ|v& WjW"-'ilNW]uՙgpL{v",YxͰim>+T&l^-QB0nڲy~ɥa*PT= +#I1,)#)( 5A^[JS>O 5b!,A1BwB C5̈́YʽP )R&8#sQE`RP4PRޥ,j[3VǼK"g]xP 75t\&,v^J` 6[.l #6G;4244m\Lή(oOQTxq@HQ9 :=Vpdӏ! x݌$+/_!HZ4rgV  vw73V-[n#P;EM#n`ar3CF :,voJf S#3b+Tb.,uuJRK]}pӦ_aܤIB9(SsdI~N_[U$,]@Uoq"*&BZc(6F%>IZi1L6H<N4GyƂ@`4I@$>A}",OZ-zAhLDzsSy qkLepc6IC 1GCJZqJ@;,4CUO?a+ip~ 9?͹sJ:h$B>ܯ KJ",Io']`#m)Jծ(z =S`umN"g&fy͔AI]gڠLA İ{W^l\][5mIdA*cP ʞ"uQϿ:^s=Qz A"=D*ٳڸO;NqȬ-\.d8GqW!D/.}^am?*zo..o ŋWL804 @;#O(fuU+жh/׭\ZR'%Qe &*N)bL1㲹cӵKwdªR Y|#is6l2Yht7S=~w4C?ǯ1Wڊ7"vWuU~U,mAR\SC[]UI*K9G~=T(wa2QWTRܚ*Q޲)vJ0DW>]o{hqm ÂǾL~?fʍ\AH,YV6Im뵛srve=Mܧ[9FU"nwr5AØ` VV~E[X53jm%vbhjT.~%GX:!֡$Y\n}sYf,'DE%d?.?Զ0$RoN1ߞx%L榐!v &mЇZ#qu>.;,ɨ]>򗀞_g_PBTCP~nP%8cˑQs&ʹ BL=e B2oaP6x8(+M!bz^2MDctg*Nc+)o%M4QI 7ͤL[rp|bx,Xxj!xaOH2w{ 4&Kzۏ ##VG|Y dIP> 6gxpXHzs׸9mS_UG!% 5s!߄`T!EUmyP eWCW(~d2XJa6 g6YڒcJ[2&UUXte}K,)@"U l} q~{/**K)F{40-TD$]$H7S2JxJy!{],NF{|KX.nDb JS,Y`MUp,$BlSK,]O”= ˸]0W]ӕ?H@Bnye U(%HUվ\GDZ /c|A hY)R$\=%*{ˁOԲ:=V/XtU JVtT:ek_~ʩ'&e$9v"&&!q=Җ(7qAQLJS 2De#AW9;Rߒ5]VÄ(%5h!)E.YD)mD`v1A} k֫S(L=$ei'^ IW!) jױÈFR0d=43 ь'O S* h~'akSO',ߊ#LE&,*![ Cl\,B9P%I08HLs(o٪,[zvoڈQ'hHى*)\|Q' !H$TSp[&C [nkNxN,A 9R]r2sy)h u|a6 ,: "^_&}(@ؑ_dzv)$; "caBYG;oN+}'xOkTv@tdCޔb"ԐESpH0'dm -YL!08}TDB3&ISduЅU&~dF~vm-!1-B @NT6nްqۦ#umZ5S$;ZҌuO*TlY_8>v3c#;B_;| Y "r|уG"V(Cߏm)n DD8@,e1l^{]аtU͔i3Yת]ۣN8nчwۣmeahfWQ:v'y#`w:(M8hLt;,{hbR}<BjR%uPhhh15_DD6[SW͝R_:㒽ƪ[^npZdb>mk7zET [PqC: ?hڎ tjT*oNhw?w`*? Hpg~۫ziU+kPRA ZgmV8lݙc)lG.{{o.) 44ҢN:R-JyG<?򞷒[ep "'%Lἁ$;POp96?^xyrA2la0!I½5N5=)IH 9(Y[b-j)zFϧ [Ah&aq$Gd(:N@RB0+銑bh*2$@rw-`Ak]CUG̾n[XHeWS\:67tCb4WK{uyGJ /K(ד, C^G**+Su\dj#Xm5@ܟZpLz}̤B=Җ#iA<ьOup~;&lOCm'|.yg?_ ƊTw`4,gb 2bKS곹%KT?ru(pIjk6Wmii&er W c)C}B/{IʓƖ2%%Cp)]!o^@,&FCt,^sWJMjDŻinn È)eLHDa0O)+Fx]p( r$(|hIq9lN#kZ᧲bLK4IWR-8wK|5X+PbJa Ma]MD OF3(!uܬRqC=pqЌ=5PʫiK!6'-dÖ[VUU544KsUyCSRRR\\۴__k^`aC-Щi;H yOE.+% AV@%;P.?脂FK[WRUK(2*LҼ8؋Vvsj1ȰV Ȟ.M;<'⛐2Nghpsݶ~j# IҾ%˵LT8*"Asb$Ied2QF:e2i "΍m',8n[4t hU UBkCP~IS}}Oe3<Im'eU nB [,(@I*#vcj9gZ d5ݜ4בbbPTC'UU5ep({YYyF 2U4͉<>ޅ\3K"|7#E Qz=̟<1"NhFRPi穅6cQn/ٲ(éC&9x-X.ޗ4$U`# \f撙sdT<|Fqd2"aT L%Ie4#O3CZTHfxNِ6D$X-B /ݩhSs(mN㱺Ѝ"&cfar2(4TMa,I`^/usP=04SWֆ%qn7}lHE1QЏ*W 'r[A %$a c$A"8]^ 0Z<~c"uX T/ŔO?Ι aԋY9`Swz9!e+f]~6=;=ET ga)M&Af̎{@ UUAcpܔ@Њہr6676L룢,6ڛ`,C]*:&^. ҅#@13MJ C!rWc9F_}6[>4w?ܴ/nihSVӜ4Ѭ9ʉp IZB%&&]+|CdO]u +Pߌ ӺU8ЂdᄋmV lӱ2 KEFnޜ\~K5S[VYxP.]*("mD +"~aD-@v.* ;nY6ҕ-eqlմW CR|7!G0-Bs"@KEeEEZ$3̊XhL$#= w9~bcٸi+ 2[OA,-$T%u~|Y&>"%S*v(1K \LbFЋ|*@yd ?QE+cDYRE")$`lP<_!lK[YO5<4.Q>ZJ􊞫*Za !n4au kQFq$b2AupnOlͫ7~9Ӟ2;}X;B:ũVIW(#@_ɍSWlchC!/qqYҊR@US&%M$d hU@qs MUK ݂ X$iKD h&C(h6U>/e$8VFὂU!U,}~rY%iIxr1-V+k&m!& WTÔ[-7/\T+T4&LbJKEDh>(W|h1l%o } zD gND ɧw㪛3VX9e,;iG݆yGn.B*H<&B9 u/˨ ȳ/[b9(PpH,P)_~C&_^6Qn uÊE@.pH뼹>kWˑsTEYN@ŪwUiw,DMF j7DpP 6Lb:TWWԙ3:} ]d29ˢwV!jXQϏ]ӱ^hrRxf9Y0t#TB܃-x6_׺]W{T}0xe5XoyklyLHLYL:65ϙ3G;B:[f2I,@!BM[yͬR9D o^1x,_?6.pquL'D%@賆fKBo8²f k"8}ɤLBq"ouU=Yw*WtIOd CHD-U&fV<}n?q`a+8y~Ū+|2%#R=P2J$Y&MhjL IWphtv5KYC`l 5n i66%ɢӎzΨ9oP5zzHi{Xd[6mn FM]+z9ĎVGB|!x""5pU ZԆH;1R[o@|xptWJ?~h*Ѧr~k8&<%}\0fWkIPT< hl{}5Uo0IJ&Ac$FqIQ"mj+*n۰qm<nɇvũPYYX/ )AE Ž5~G/OJz:?y)\48 x4gs=ѴxIhT$D4j)%XSvPZ B PJM]cy)+J\~gqyC`x#xV@4l;xp<.VwSq5W]JťEx5Vav7VJ>I^6Eʢ@]ëT{|ͤ)llj6n?ǯe d#(/!МzWQG`H UR06EIbXL[ (Iɻ knЋ9O8jȘAhHKGJ\֡\özp>*{XA/ӄG:j z5,_IsᲣkhOGa1i8 aC]'KGD!&QMXc!3#70RimS G/+!XKQ Lnݼ^_9y#-Gpe֯6Qۆ`ѣW{w~ H6m.4M{_xϺ[oD1IsSx*yf^(+E aQk\WS5iG)HJ'\.h;p;6{Meq2y(v|>ubDRz-ewy H-z6Wi.iSKK+J$I1E7+MATzÿuQ'N:S=x˜b? 2M : RTebYyu!:KNQٝ6O?dea0Ti@J Lk}$#-1۰z:Z&#R H" S> PL "kH7 zw =*_eΙ9 BhkwTw)UN'vF2Vap{ ]pN]VI2hN 5u!p%;t) xW^{ӎkPPWgηBd;I Ͻs_vo0<P9*Q܆e[}b%iFݐ#Y7$2-6 \y_^篠@)L;v{GXB0O)'6=8\P .s S%|F*hF5~ iChycyawW^/=zg)cĮsLw gy|ve5ҙPumkSp4\kw neʆzq=$Yy ٳP'B%9ȟV!#tV8?.<{;^;,)GپxgTZ$I1$8~(HLA^~-]~IJn/8iǔ"06nwz7rE'4zcsfGGc)cCռYA e1˷jŚkOJetf"OJ Yٵy9&^̢$ o%Yzd4w D lOI3 v9pȏI=0thnݺB-wѫWp X`Z"U"zcy_Ecmkn^ j</]$ Y [kã.\&!ĸ\ (m 訠!y`㤦&LIdXbлO7;Dan;-_Bk{MX)Ibt &)X\\f1Rq;o~tY\qyc-`$/A*Hf<%DD sJ Azwd7|[@PNx]`ׄD!&1推{ >jO/]6?kj= m<`pk STIt"UVVlK,g4L3nc:i*B8T+ ErO~JH`YmTj7aš$D*)c`ʤ[,NTV~tئM+ :i;qS_^/WAS%ˣ\z1N_$06.ϐΊi~ٗ\z=0up\v A$K|L2 | GkWL) ?t}M)Úeu7\k.{oN ֑e= N~ ̉}JZD΋};`>VG|gE%:-Ջ/[RDE%'|TQ V\٧_k_|1mU۪4O|TBѝ{0$¸ΐ$84~#ɘz[v/~9{M| ϿicK%uuDPܾ݀_|xPjR DEHX3.{>.IEђ |?sжz]T 5%*_XYyo tѭ}NDtfj8z%tJF:qn\8w^(Uhr`jt7sTuw ~M3OE]Cor  %`DY_wr "І 9<ĢL³ E=^*_0P kX(g$%Y]ϼ֧Dݮb>^1c{;TZҪsv~cÍ mpXU,W@IɬvGL RљJf)U?o]#%㰥|ގ(qh08'Lw{&?Wa3Dc$ vC<vyFGD,~e-  $,p "9,AY~ {iڲҶMT4aRW};owܱ.Z| >.(S;D {K0 H}> -6^qOouX @ṕPm*ڼuE_?o9wO)/>“' h T;ɥFyhk&,X)W3nK岑IDap vQD<;6:0$>NYMWlۖ,qz6[sG|UY,%Jar{<^k]/_{ÎCQے|{ޝrmݶ1D:kj>W &jRqJ@|-_v`4롁A&K Լ~!ߞdjX|~1'k.99(G*-$j7x}OrIU[ᩫmЏ\;; _i ʔ E#Fˈ@=UT]{L\PTdۨ2PEPYn NB36;fn< ]p,濍$|D*) k{,. Lqyye_:?=W:;CqlI@-FPA~x(pygzD٫wOՐ?34j9׉@TvV♒&iu]e7x"j$Νo/|ժog767%l@U@6\qO;v˻uԩS;E?.av-UWA%#COe-Ukay{w) ٴCG]ukc~'? ]^ۿes_?ÿ[}&,p}T.+-&S9ONqٶ]+ j>Ѭ @ȣI{a?| K`~26鍫Ӏw*Re1Çpa)$Ca K-\1s\}Pq&݀!B3:񎻮Wf\N^]+7Dm׵kWUQA0QP>*7" J[u0ܹ3(|jf50ig*B(6t7Ϝ~ٟ|9.ǀ#ȓX;^>q4waCdYvjov$Ufk{ҍM5>mQ(`6mUFB$1Mi*+Pjbc Ϙ>?4 ?cnS\]0rV@|aMb[-Wjv-r8?Ea+#amw] Od[)4*r F.;,H8hnntpH^E|"*sј؀ރ"E;Mj{9g"a;v,i]BbjDuCTَ,Rk5ޑo~h !hhU9`@$ Ђv]´E wDuEPo>W؃"la?m7I6j9! T$j|J|- =隇IgH߻G^4!) t΀ҝkjѢ]/Q*ϛ7oĘ̺ܯ+ʘH(wf$]]c 'KlPpZCNUҖVXPpOsL+x!/5d48膍dmZpP,ju:hWZ_j֟ Nbj8(fר 5G1Ø<&l MЗFiBnٲEB ,>rjŎEe,YSՏ a] x޽F]hKC+5@źU6PU! Fԃ,.*) ]eH TmZq=40ėz!p yIQR^ AyB_K2<IG UW߫/&]k,E#!&mI?RcQۉ>T 3]s~,T%1GpnWeٲϾ)HMST7[&ϵ)HOPŎZXE;]3m 9 UU#GC_'y |Y7R@GTPuam۪a3qL -I)U :#拦wiA#[o[hg,;ޣ.%elo>`RI H|@R(nW+ZU-W( J1 *WI1xaXɨe{6Uy{ԭkG'P*]?BR#?F0Hq.'va PF{7 %a 扬@=a|;٫)PTZG4UsUYYmV!EUk OxlT8e0nTYa/%>$N;PtPI}T*a)%C0t'YPJjz[ϋM(;͒r||ͷ#.aZi+xnO9N,C]mrqU/KX-}/+2bh,Ƹ˞خa}۵1I+$t:ו3ʏ?AVÓoEcmҸ»AU|n^/6#{DQ8pJ[$,*DH+!9*dULKqU}p*:E#MPC6_zvl粓!q|+T!ȖNz=fْ2p4g/H0?=h}иЖh AwQ 4PȒʻ~XiA(=7>p 7ѩHXjY^j`?I9,&ZSCNLΚz`9OTnmWMgrDq#L<M64,0 ZVډknZT]6 ++U;VD%Of\DGAG`^ ĥfqHD&I5^*bLK=a:4gr+Ad͈!1aen9Y# eHOQ?K|Dnt[YSI+]zK.l#$B Z`稛RNrL2 sX&ONf97͹ǭ*pO#t(YlޙBr/y\ɖbS6@v#<>dJsމB)COd,ƞz~ 6) ~u$(L>k+b0M.D*73s9PAPuܣ}M9:E}`|ڿ_{i񸭔cˉG,Um$t-6hP*\tTIKuL_*ńH 4?cJ pj!ry]LtMfY/aRA,>>O q )ڮo0T۱:i}@y;M,!lZ+'oWޔdi 8/hMEJ7z GZ N `F˜ _o~oȐ (qDm[3.ҽs(LX$RJj=F"|=9gڦg`SټLr1nB]pgwQއ$dg %b69Pn`P`Ccm8`%',l";Դ5g9`jx"*P$q(\,-!m,pHعH$bF됴~nՇMivSOu5%-Jc6VBU%9e unU8p1fLL%!/2Q3J+rX"F{zĬO^3n( wTa-γON5$“,`Npѭ{8sNkݾUs085Ձp#뫏85tQrW*籠TRŽކ@1>|6ڪ5RbbɊp#K% B]=K"k%@ JL AJ2e:03kD矲x/&h],5x)QBE:G͂IB*S$Á  b$:׽k}zȠYUPSsi MjF7Wo*gaC4$TÄ)5bÏ=+E挊CRQt$L"&(DmdHzOdZCD*Dq H XԎDe[ee~XBک=@X$\n;9ӏ<ˁZI&ĎTk4abQ*ț* 5B1Un^ԺC+i,J Y g3[STs<PCJF jT%08xw 8>bHBK"@VVqw+ DEdW[c59A+n.1cւ 7nPsQQQms(+bZq .&Y9oQX. (4]N*ۭ_(!gtxFG1Ēi EeM8U(WMŽ=2,[ Վv|Ÿ39XCi/J⚌iH²U~(rٗmp"T'M#.~VR L—*Ej*gj:+e]^K(p$*rT!4ʤNBŏY;i%ג2DJaxgIsE"lXf˖-h,xGYˬXKHvBg/?r7ˊl+S9()ˊQvqY2,@o KVFeRU!EG6 ztQY*N(1ɦ pB/G^_8Q laWF(/R+I K: ΢[vYˤ'/5:pP]!,Ý~8ry̺?!M'1 >b ' *3L ̀a y=1;toT&I҃XV FXe Ջ1F SNws~llA[hM!}G)G@.EyYD`!]`V7mW/x;9Cgif?B:DHQ 8f5`gH(:K37b̠Nx6cPREt@ 0D3M0\4EET 6U#/Ԭ܅ cXidM } ~vKZ1 ;w wOX[Ɏa,jl`PcCx^s=v{?76nΝ+TgÇ}/r$MVOarM={a{^O?f8clص[;~sek):%Lrƌ؛C8xؾ}+vg_)~Y+$`6늫/)As8 )JZmuZ=H:香Iw±'S/F w啗ߚ 풯jUE;^45?pxnr'-k|W7W_w D+=عXT {+W^|O #Y}3?ӻ '|֭p]wiC!0V$d?h'~zS}njs39IfϞS?G=!Im޼׿mqI]ضoĜ3 &Ly垞LYx }{wةJ ?? ex(#SH.fO]4j 6oQu[?]%:,9[n}TvMEk.ܽWDZ=;,weFu3o 7mEm<]e>n[ЫAhF GYʬ\TݥIOLDŦz?zzv_RU ӯrZ|3e1WFuΜtZv8[ӷf(?zjeyy7&t[uK/8 o^]F1[6辶$ζjӿ哝[(vcLփڗk鵗w'oߺϰAc-Yǘ\h Dp/wl},QuxL s;=^woݪ V._|5Cܵ t n}왳8=o,7#f|E[owϘoq6ob=QP_N-_r5 AM,ɆH?tA#:d'}zěgyԩS_~U5fѢEnv \;$yy7t믿>k=:x^R7cv6] Ze AXHOoZmw,]oH-}Ο?m%za :e=w<u= x̙y>Z\TTZҦA68z)_Ѫ|Gf|_lA:Kl&'nsv ;?~K.>ʹ~,x"Bu9E ^`pSUWy?or)>O?ٳG~6Ƕҫz{;iӺ u^}[|M={vDc]Ңk3I1}Ի&GIvQ2 ʡpj-P*;W\y?k%O|5Uxǀ$)ǽڴmսG ޼"s5Y O'Y\ NxtV7od-Z0o1GOٳz ~;N#wR%QA?ѣ?>m5/4x;ow,Z]21ʸ;hf+QKkDti"n l` uNCkFN)e2,YM6cƌ2IpXj]pGN8x_=tǢ<n^~q?Z3qk{֜bv󚛚ƎSRjS]ѠSCFtm׾ͪkժ>h[+J'*M4,й=z;~5knVSӴfZ&ҥk_!1<ܛOw{umwqcǎFJ_ybO1]BWoǃ[Kouw>V,_ O^z{/𾌥w>ӧܰ xQޡKkvJ#3y>hT+cމGSTiW~q9>w0 g+;t7ڻ7-E(dwKrGO''>蠃~ o.ǟ.X M͵#4_}7@kJ/e1逗IB͉tT&0MGcc3g.ϯ?Ҁ\~`h2!?ޥ ]?λ.b2)j6%66oZ{=ȃ7!dF4x0FֻoF$ } *+w;Qj"_;7LCϜW>*tӧM[ۙl_˯=Tٺk.Q`b~FzuWmں_?j ZЮS x̸6q͆&>NH7' x> g]{%ȠIK%R:)Uec!:G;Oy SZtOq]]w%kx3&(\Sۻ~y۲U 7o[WRV $F쨛,FX-cs6SP.(uf>~}%R/D7دԅӦ.#/tXAȳ jTQD5AgKļbɐőXrO<U/_5ϋ }v>3,[p=sy7@0|5BLb#72OfNn }=}7N}ozOO.9Ùg8%߭+h/0 {ƈ¨*mNCH(suwڽ`fU= 9h!,Tܭ ٦U Ͽ&sϾM|5t6Ng6o+J{wpzL˸ZoSCk}ͯjrz^O3whk"sY? 4<mK:,d,pL<6S9.G%]k\R#\Qyͪ*=@)-~S?p&|εS>w0{CM^d) ^fq7^wYIǗ_|[bpxzU 9{\| 5[Cdfִuڶbh0v鍏3F8x1V57{}1 }zI^3;Fǧ֪kIQ>qÛ\纫uD%n^W>%3uݥw.{>ͽj?~Gz0ٿM'/CM,/Y^سgy6ԇO*+o[CAbr;c8wN @#GڏsOPEEɓ #JƍƲgE'N8K'L/=ʅ=bB;P":t=t}vr衇СVT4xa=rI JFa={vc9hZVV:d+'>bI۴i=axt.`n@q8j01tؐqƢA2w<=z͌7CG/۩/hߡqqC'N7f, ֛@X*&N@M{ї_~ig58pȑõ?h@wz3wA)a~_1֒|A*zIի>W].R 1NwqǏ9 :~AR>sϾ+ƍc:J3xPC=bĈX3<!a>RY&(yUCviKs0~)*rAUJ(rЄӋ iE$s]]A@AIm$_0yHSN Hq=[RS| e(5S"aHvPK)[ zH#l6 +)FOW\ژēQnhB8@h Bq C6# -T.ÊQ$墛0:FY_-2/oJlR%^!bNXb]r;=Z1܌ XwGwL@ad}AWբKEGQ;(ʃI(1* Gz*ǖ;Ύ 5Mpԣ4 KP.T/Õ\wєA L>QO_Z :J X1U=?aEr' |,MZw%,{M;kHm]FA}'\ )[ x>8<)V~Fn L2bRT]J];:`KXlȣtcb 'O3JqĖi6-DDzj%\ù̯#H,xfJ WL:$/<]#Y=g Q FItpRQA0."\F4?5oRGQi ۗJ?Z<#KIENDB`DText1Department or AgencyDText2Title of ApplicationTitle of ApplicationtDText4tDText5!$$If!v h5555855555 5 #v#v#v8#v#v#v#v#v #v :V l           d0  z+555855555 5 / apdkdC$$Ifl    n"' +8           d0  z+((((44 lapdtDeCheck9tDeCheck1tDeCheck2tDeCheck3tDeCheck4tDeCheck5tDeCheck6tDeCheck7tDeCheck8@$$If!v h5555855555 5 #v#v#v8#v#v#v#v#v #v :V lP0  z+555855555 5 / akdz$$Ifl  P  n"' +80  z+((((44 lay$$If!vh5 #v :Vl  t  65 / ap $$If!vh5555#v:Vl  t(3f3f3f3f 6558ap(3f3f3f3ftDText6tDText7tDText8tDText9l$$If!vh5555#v:Vl t 6558a}DyK _Toc225063487}DyK _Toc225063487}DyK _Toc225063488}DyK _Toc225063488}DyK _Toc225063489}DyK _Toc225063489}DyK _Toc225063490}DyK _Toc225063490}DyK _Toc225063491}DyK _Toc225063491}DyK _Toc225063492}DyK _Toc225063492}DyK _Toc225063493}DyK _Toc225063493}DyK _Toc225063494}DyK _Toc225063494}DyK _Toc225063495}DyK _Toc225063495}DyK _Toc225063496}DyK _Toc225063496}DyK _Toc225063497}DyK _Toc225063497}DyK _Toc225063498}DyK _Toc225063498}DyK _Toc225063499}DyK _Toc225063499}DyK _Toc225063500}DyK _Toc225063500}DyK _Toc225063501}DyK _Toc225063501}DyK _Toc225063502}DyK _Toc225063502}DyK _Toc225063503}DyK _Toc225063503}DyK _Toc225063504}DyK _Toc225063504}DyK _Toc225063505}DyK _Toc225063505}DyK _Toc225063506}DyK _Toc225063506}DyK _Toc225063507}DyK _Toc225063507}DyK _Toc225063508}DyK _Toc225063508}DyK _Toc225063509}DyK _Toc225063509}DyK _Toc225063510}DyK _Toc225063510}DyK _Toc225063511}DyK _Toc225063511}DyK _Toc225063512}DyK _Toc225063512}DyK _Toc225063513}DyK _Toc225063513}DyK _Toc223487148}DyK _Toc223487148}DyK _Toc223487149}DyK _Toc223487149}DyK _Toc223487150}DyK _Toc223487150}DyK _Toc223487151}DyK _Toc223487151}DyK _Toc223487152}DyK _Toc223487152}DyK _Toc223487153}DyK _Toc223487153}DyK _Toc223487154}DyK _Toc223487154}DyK _Toc223487155}DyK _Toc223487155}DyK _Toc223487156}DyK _Toc223487156}DyK _Toc223487157}DyK _Toc223487157}DyK _Toc223487158}DyK _Toc223487158}DyK _Toc223487159}DyK _Toc223487159}DyK _Toc223487160}DyK _Toc223487160}DyK _Toc223487161}DyK _Toc223487161}DyK _Toc223487162}DyK _Toc223487162}DyK _Toc223487163}DyK _Toc223487163}DyK _Toc223487164}DyK _Toc223487164}DyK _Toc223487165}DyK _Toc223487165}DyK _Toc223487166}DyK _Toc223487166}DyK _Toc223487167}DyK _Toc223487167}DyK _Toc223487168}DyK _Toc223487168}DyK _Toc223487169}DyK _Toc223487169}DyK _Toc223487170}DyK _Toc223487170}DyK _Toc223487171}DyK _Toc223487171}DyK _Toc223487172}DyK _Toc223487172}DyK _Toc223487173}DyK _Toc223487173}DyK _Toc223487174}DyK _Toc223487174}DyK _Toc223487175}DyK _Toc223487175$$Ifl!vh55}55b#v#v}#v#vb:Vl4  t(655}55b/ alp($$Ifl!vh55}55b#v#v}#v#vb:Vl t655}55bal$$Ifl!vh55}55b#v#v}#v#vb:Vl t655}55bal$$Ifl!vh55}55b#v#v}#v#vb:Vl t655}55bal$$Ifl!vh55}55b#v#v}#v#vb:Vl t655}55bal$$Ifl!vh55}55b#v#v}#v#vb:Vl t655}55bal$$Ifl!vh55}55b#v#v}#v#vb:Vl t655}55bal$$Ifl!vh55}55b#v#v}#v#vb:Vl t655}55balvDeCheck35$$If!vh55"#v#v":Vl t0$655"a$$If!vh55q 5@ 5$ #v#vq #v@ #v$ :Vl4  t(d&655q 5@ 5$ / p($$If!vh55q 5@ 5$ #v#vq #v@ #v$ :Vl  t d&6,55q 5@ 5$ /  / p $$If!vh55q 5@ 5$ #v#vq #v@ #v$ :Vl  t d&6,55q 5@ 5$ / p $$If!vh55q 5@ 5$ #v#vq #v@ #v$ :Vl  t d&6,55q 5@ 5$ /  / p DText20#Enter Overall Security Level ratingvDCheck35$$If!vh55,"#v#v,":Vl t0655,"avDCheck35$$If!vh55,"#v#v,":Vl t0655,"avDeCheck35$$If!vh55,"#v#v,":Vl t0655,"avDeCheck10$$IfX!vh55,"#v#v,":Vl t0H$655,"aXpvDeCheck11$$IfX!vh55,"#v#v,":Vl t0H$655,"aXpvDeCheck12$$IfX!vh55,"#v#v,":Vl t0H$655,"aXpvDeCheck13$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck13$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck13$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck14$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck14$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck15$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck25$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck16$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck17$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck17$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck18$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck19$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck20$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDCheck23$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck24$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck27$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck31$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck32$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck33$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck31$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck32$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck33$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck27$$IfX!vh55#v#v:Vl t0!655aXvDeCheck34$$IfX!vh55#v#v:Vl t0!655aXvDeCheck35$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck36p$$IfX!vh55,"#v#v,":Vl tH$655,"/ aXvDeCheck36$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck37$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck39$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck38$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck40$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck41$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck42$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck43$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck44$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck43$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck44$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck43$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck44$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck46$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck45$$IfX!vh55,"#v#v,":Vl t0H$655,"aXvDeCheck43$$IfX!vh55,"#v#v,":Vl t0H$655,"aXhDe$$If!vh55,"#v#v,":Vl t0655,"ahDe$$If!vh55,"#v#v,":Vl t0655,"aDd(4^  C :A"Sample Data FlowR$%F*Yߠ&xd F$%F*Yߠ&xJFIF``C    $.' ",#(7),01444'9=82<.342C  2!!22222222222222222222222222222222222222222222222222" }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3Rbr $4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz ?( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ֵ- 8>'{)omm K,HUOAZx4 +'T/+ڮzӂ;kh~&מiXgi*z28$5WRlgӜ$I#=U"_j:ZmF%ʤH0@Y0^ik k-JoS/ 1s@xK5WH(ˌu9-ouI%ɣ[dLg=ϵq0^A(Mno Lf2i%k{u7egagoEz%4gVEo$7v8U F2{fVT{Զ.MZ˹qV8a\ܾ;][VƘidl!K2@'+,ƇrS`?TbZޔ~ysh;Sz\jkY w4/}W |\tr 0eKjy8XcuiIsy7<|``u 9yC}yjvq93m,hF ݞZG%F hsF0rL<'ykgqⷹܤd <]xKRc3k)`&%WGҼSk~:.'ϖ6Wtoh<#KrJ #wz~Ǧ[k0HcJtJ@P)ZmwV_2z`"3L.\O4y|A "L^{w=hO2DL + K:[EM,`dURpRwiJykqۛ+vtw?xpyΒ+=" , nAFǠٺ~(iֆ9j{0B&H{ީ#Go.AVNw>IWdխc 1BXՕI',ҼCxvwG>.4Ip4qG /K\*NuO2a}ˏwTQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEZN-gŌv,k\xjɸ𷇮^AFg3RH5|fRѩ!O`p:zTP2[\M [$1hTqJ%ܬ#ne''sR@[XۭV)%c($pOE[[#K'wuc=jj(+k[{8E #$N$MPօܵ\6K=; 3ҵ( 7.w.sK`*< cP:aq~M+{HsDqպ(lmX-I|261#Z[Y3erz((((((((((((((((((((((((((((((((((((((((kHd #%d# WL1ij|K(o//2D3nz }=ORK="( ( ( ({?7$4 k (`zր6(((((((((((((((((((((((((((((((((((((++:Z%ɍ'ihTdWW}sS,hX5zs0_ZV9K[ؼf'֋V+0ea؊j>^O+}yy-=úzJ>YSZդErI} YcY# ;hU玻fx/j? C(p>8xu~ {\((((((((((((((((((((((((((څfu]1[{X^iH!Tu*aP( ( ( ( ( ( (9?rHf98r7%ΝMrNB޽FгGnYk){auViGc\'0VOw՞m|RKe{u!øLcxћ[iTd%x<>ohίWYQ@y|q^(+'G@EPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPX^6  M[oG` }I"+# NAnEޞ_s=vX06~^/*><|UtS%XiwMjq}Q`G '-[_Z^|ju=N lxF[sVx}fӿ]&=Γxgb<(Oox7գx4L$Mf|!eoZ8=3(((((((kɾuW<1Exx@o&=$fOi>?Y.[oȗQ`O=gQ^'F\9GŠ3*8dHn3H*׆EΒfrHP N3*OD496v"yf(^XHj߃WIaKS#V)nC9c2.]-yest{mmMF"F*HfNzRMB}qqwk$t#R>}EUot=Fؓow Oa0jQQEW7Nrp>8xtQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEv7_j]mk;,9v=G+++M_.1g9èa/#`od"}koaSazz?6 {ۍ+PnBsm?IyPh$F [KiR 8+"'$YAPh76:'vI9(GXSNhQp|i9X1<5̩ v IV7߉'բB^KcG#Ħg 8ßgּMRiUđ>ERnw`s.eYm4&%wDg7| k~ODŽ5e.~tF!\pu\z"+s.;Hq_FZiڔ2+qy+ sW9\UڐT/Ό3mT>¾'mc 9ʝ+g>>7ۂl(+'G^^G8׼_:( ( +ѭo湖S1]/F2 UGC q^6>!m}YdrN˃09}R-^J12]eP`nRGR9o~hu ՝1ʘwc:U 8x8綇iMRDhq[~]:yqt͒;8$ZQYQn9.oP+o Ri]BDm'":}_Y7bڵVCEX \g RLN?{\ڭP]c7rkQqtq1]Z5det<>۫15IF*ζg!WӹZ(((((+!i!a{.TJs9 ^Q[wn042 Xzx4'`z;_wJ4B9fCaY@v짺A#𞽩xqEc5fXh[b㜓J< VLf%j>a{ZT' 2hSE7zdc[+x3p19$||#wi/[VioUx `ƹψ6A4o=_o횹ySQ{²8]c'99K\ޱcƁ{PG8qEʺmq WM8`2UF{\ozS]BBUvxۇ;3P~2֏]*'KK £'_Fח"#1Zs. qJ=2XzmP'.gsXGX(p>8xu~ {\((MjB,捗|ghld1ެju-}:8c/ Ф7'NO'oX/;=]HTl6qs+ok'F쎗%ȉHyI yaX tPmk&e* $0$j4Օtv $*0E0+6G1Į@}vP7n65oj}PO.!`$eC9 @6U]-$jy%`|p Y$D!bA$NIYR#Ynգ|JӐU WO]@jzli:|]Wfif=AXH]eYNAӲy^6(<'bzG#XWbT*.@ zs 'T֭UxgZ˫E}YC;1|=6~3Xw;Ī6HU8H+ 0k_7vHC4W,';zuGaY|_p"A]Evz-wW򑙐F˴pc,ToZBE1I;x(Ш}VWM&bz.mqM̑dPc}tW#:uıiU#l +.ǥt^&3.wG!09$@AdPIkyk}/FGqSWiS>-g,zvg4Pt&#n[hj욇4Kw`q< 3NFJ P\>w4rz{E*F4(;޻(((((((((((t-/:{j0[?Jq^-φno /sscp=^Ex>.:a#Glò":㟪5z^iQn3g|x u+R14~nWjۉ5 <ղdcp?@@l8zs/𵿇-u/RmT'orn"H˓ۿ9Y_ƤthK_v1'pˑH3V-DntZ-ChG26\@M<3:εOysk ĎQ !IZݍhz=WW&{\EV'p@[],q UQ{[h`OhF-T6ڼӛ#C;B613_7兩cm?4,r+[JtN / vΒ w#0 q'tٶ?e$E+C2tGj/-Nѷʁ#4i~+fkae2ۙXy)NN46[ϺKXX]c('2Vk$|XTqlqڝ&DuP.{ 帲I;oMpp;v5v[BڑơUG(((y<5xgRIF;⻊T.m?γjG=J[ . DD0|E##<64Jk47S$04 qI{%%='.Lm"U9U@A9=ZLڰnz\B OGxCnO ^|%F-J=W|*n?κޓO#ZAEV0QEW7Nrp>8xtQEQEaEftJ]HZI%Y@U+Ts6~ӯX8JHero c\hosg !mJԟ~vp6{8PeZD *-͟c2pFBkh WNaBbT#qu<;0P@#ߚtۖUnTK+Vp; v,{w^5S쭮4 q-1(zy$@}E\1jIF;gKa.gþ0gD# 9wlo ,bS!8 2xyl-i[WxsyqܑT</^Q[ex݌*"⩥&m%R|V4i+P7}@qlWsߑS,m($ԨjIulj_QߑYiPWԫv:+Կ?ȣcR"*Uulj_QߑG*ݎ5/O(Կ?ȣJpn]\]^UGcR"4 WPKt-ڌ,OStcA>W4W#ߑGƥ?~E/*UGmREIv 9=wt=!0@Jŀ;1${kԿ?ȣcR"*Ua3*QLUTN3E1a$RLpqrkԿ?ȣcR"*Uulj_QߑG*ݎ5/O(Կ?ȣJpn]Er?lj_QC}JcKS?5/O(ҡ>[Q\ƥ?~EiPR먮GcR"KS?wVuW#ߑGƥ?~ET;ԫv-I=@Yxi sDDy0;{w*ƥ?~EpNc>k5/O(Կ?ȭ?w9~[Q\ƥ?~EV.Yٝ&XFiƃURފѵ=wOK97+}=PЮI]4¼p>8xu~ {#(((((((((((((((_Ol´&U,x#ŧU!ThᆍM#Z<> hz'ָx>)ŀ<9T5=6*i%CIE71CU?xm?q;}~#otZSset[Fm!kOi/%mqgotMqѝAyVͽ=>Fhe6P=ȯ$SL)YzWW5xr1q^a[b={3Ͽ+&JɮFN&hMWtbeU3|?+&(PH+&5x;Xr+`brrVgxF]=}K7ѐU@#+ MLLOmyF#uz ӬS:"ysTz_Zhxu^TEْ=?;j^3ޙkѿ+&hbH!HbPP;O,Djmzz4ST??h|h};~fGm ]4WgMq4Qi#|?+&(PWgMy\M{(vH+&4ZE{_U;?G7SiiDJB|?+&*=;~eI%v ]5Go=??h|hCGm ]4WgMq4Qi#|?+&(PWgMy\M{(vH+&Jɮ&=;~a$vyG%vE0;oJɣ??keߘ{I%v ]5Go=??h|hCGm ]4WgMq4Qi#|ktf"d`W'E8)!9ɫ> !<'z8MW41pF+6`Zrʲ}7N8xu~ {lO\((((((((((((((oe-ǎUy΢|T($r"0+ =FO\zlW6j-Ρ4)/XGH2F1*6Hn4k‚'ˆm1 1Pnͯ[P/nȖ8c@OH p{q[^mV_,o/sdN}8xiIї XɊO2XP6 <ҡ鐙aIL22c$tP|jSoC4ˋ?I%>ڃ}k^7QLYG40~O*/ƷtE)hW?ToxGDn;>m2Hś9zkZdvk՜A{^Ɵ~}T>4h fH˟~#޺B9@| tvx2<qC|%K͔,'{lGF>cOW}xxOԴ'g$P\ ~b;/ b)SƲ&## ^9/ojs)o <`pʿW`X W{ʾB9@? kz=?_p{If!^T_xsQM5EƟ=*/ƏB9@ޢcOW}كW?G!^T_oQGi>+ß o*/ƷUv`E}7Ox'b)A6ֻn+ß o*/ƷUv`E}7W?[Qi*O0 h+ß o(4}'ݘ?xsQM4E}7{ʾB9@? kz=?_p{If!^T_xsQM5EƟ=*/ƏB9@ޤ$($&cOW}kt"{."#*lvMC𦽤AoÇ:lw{_"B$'{<5_W$+٫\bU~{yvW?G!^T_nC<)kU5'ݘ?xsQM4E}7{ʾB9@԰m4soe"۶O?U)Ɯ"a^G8׼_:?QՒzQ@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@cF.u[H$Y3H#;׽lV'.o5ȳ6h ܌qPl|!YO9!v۔.9F/CIIKPLoV y#5+Oyvz{'/D#P3y5ROmU{kElͿٲ.' /C(Aϛp0W?(zb`% Tʁ"" 1ӎKQFkB$_6B 7eܐp[qmw-# m󏘤sҨ[7VBXu6i#H_-)!I$86+3 7b9q!l|\_[i"'hcW :[TQEWQt/um-48UY:<3yYy1U =}/Qx_L)iܹ[Xy;s@T3xwƖ5k7b;IDZȭm }CeʄYT a#5@ׁc_fsi&)c܌𮖊((((((I>"j߆ҶoE&1`^I|e. IT6.|YN~n̼hب((((((((+ -_"a§_tڶu'%F{ &v-$$\v{96 Vgf'?jyyrm@ e?Wg^'g$7q\d zEǀHï[G Sr9 Qiv_/QExEP^G8׼_:?QQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEU=Z]KG帅[{ՙ 'E(ԻP2I=) {yc6 =A_6_Y㌼R < zx/wnnm|G%A8~eWB# _||@^NMdC>jQ^w,wi$ 7in h,x9D((((((z/ϏڤM,tpqOC fD+b B0,,tݙ.}&Qï;M״g0PcǹV4 :-;Sֲ<KH951kʼm7BI{5#~s#sG9+| K^;R KY^C#)ry#zs iU엗6wrny:`+n ( ( ( ( ( u"??k_ 88xK{ FLI-0l0SONi~3o)=RrvJz{OI$z[E׏qްҵ{ SM6kǪĂ+*c W մ.G\ݲcAmݓNN>Uv}ELr3n{ ~i҈z`aK/(_4 =j(@ ( ( ( ( ( ( ( ϺMekB9Q?֦EA~"okvbKYno-~9L' o/e5v<1P.8R|o}L EgpmMۆ /Wjvw_Hg/eFx#,9nڦA2UV艜Š($(+'G^^G8׼_:( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( (5`JѬcѶ]g';SvaSE9nFk ?4 YDuE]wt i]Հ쥉{ 3WO $Oa&,+sorvƁ$W#'|2AҶ TV{۪U T+Gd!zjzNQEQEQEQEQEQEQEVmS*eGQ=M#ºK/[hV!1ۓ[垅hnbf%kiIK!RK|WPmQtV_ZKkuRHd25򷋼"~|DӵAg ql!NLl| G4g`Y ]/U[HCc<=_ր'[]sG,kXVȢRR8*"EPEPEPEPEPEPYuj:Z"ki RFq߭h@GH}W%6`8&fk#Luq,3|ǕIr^!Dc^ɪ:ͺ{tr)*7Oҹ kgj6vHϹ%M%3]jvfAD(;c u+ (bpGV k\jSCe `1I`Eڹ~^ɤ6saqy|9GݴărH=kR%8W_llm^oS]O浔 LQ^:}2.ёnbOv? :Fzڅ䚕l0фD#9?_ʽ6x _S\>*A=3}Zhg*3F'kkTQ\ [C(`QEQEQEQEQEQA8=(sod@9_>ˋcuWX(WK:l\dbe;NqKW{B(9Y` 7QZQBѽaKG1Z,ҭ&ks,Ӽ `%O5 /hu?G\_}d:4.G$+zOl-xnxڕj\0/f@y,Os[[?d%Fb#:yz.>sW֤㕷m .O]Ni<)Q53E"xH1VZ:^5uezљ0U'a?y5%|][j`Ѵ_NWr?xw1Y-QEQEQEQEQEQEQE!ӮuXb"k%g#ydhހ0㱮(u wKd36ɼ`nt=6v-mF$,Q(ցm9odCp.R`6`|L`6zW%G+hb%K)@B`ǁKH5m.4YkCZ7fn,Ceorח2@v mČOZߊD.aFf+FMˈg~UBJ@X8pY zzJe4RiB $hP9@ OO^:P\BBM*K%̳#tsP?t%Ԃۃ$hm֑R ́=P[k){iiahd0  jTWK,rk@ sU((((((({{bZ4g =k #0+ol⿳ap}u{9F[I*~Vk g y%%o5}޲z<z>^~d5ck#ڸ]&m_Q~fkجᰳ 0==G 5%EWiEP^G8׼_:?QQEQEQEQEQEQEQEQEQEQEQEQEQEQES]8IQܚuy'o|KMYΗw.]j'5tMB;v/-u馉[d^&=zGwvYEqo ܒᕇ#^[b oioY2 ӕұ֭᫗ntcK u? W ,JVl==Ʋ :>i)I=;qӒ3\ZWf+Lٶ?5@PAd޽WGNeom pGUIEQEQEQEQEQEQEQEQEQExqҺ <]1؛f|A@Q@Q@Q@Q@Q@Q@Q@Q@Q@s>4ƖfGdakqS+5Zt**:XdpA@d>:ebvĠ  6u+{`? 8~e/iпh}G;yjw> 6&tQ^ T~{^u' ((+'G^^G8׼_:( ( ( ( ( ( ( ( ( ( ( ( ( ( o$?!/p'zy7O?;/~L~D~ xzҀI,9cۏʴug9s٘ NIׯ֮#|PLGsjb|-jM^ H!gˑr_c~ ,ݣn!Yl@Fg2MNёU ȗ{a[Wu%GT.gM{kl'&# П_ʏ'WNԿsiWN_G?Ƹ'W mCُjkjR8xtQEQEQEQEQEQEQEQEQEQEQEQEQEQE6V*/rd+֫>|cbڽs-acQNہgVҜXҍOgR3r:D-ed'Ꮄ9-2G W9w^c4OhD^'*m:^hcrH,W ᗪ{WZJ?^yQJƊ1 g;wЅPg)$E3)%H]$ e nH FEue?˙C?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`cdefghijklmnopqrstuvwxyz{|}~oģ =GG$^ o2_ҏTO=?(AQQ =GW%( ?mJ?j~TAQUAG@J?%(OC$j~U{o2_ҏAG@J>S?oģ =GG$^ o2_ҏTO=?(AQQ =GW%( ?mJ?j~TAQUAG@J?%(OC$j~U{o2_ҏAG@J>S?oģ =GT!/_H7= / #dgG;qH.?ӷ%օ׽P Czʯ ?KQ7/Qj߉G CzʏH5?*7/G #dV{h7QP Czʯ ?KQ7/Gժ' ?Px ?KQj~%H5?*? ? #dx}Z~߉G CzʏH5?*7/G #dV{h7QP Czʯ ?KQ7/Gժ' ?Px ?KQj~%H5?*? ? #dx}Z~߉G CzʏH5?*7/G #dV{h7QP Czʯ ?KQ7/Gժ' ?Px ?KQj~%H5?*4y#Jǒ?[_xx6\ER_aAgCuᘣ 9 𾱧xHP^ܽN4m>畋qu/#o?/zy|q^(=r(((