Page 1 Recording of this session via any media type is strictly prohibited. Page 1 The Cloud: A Necessary Risk for Business

Page 2 Recording of this session via any media type is strictly prohibited. Toby Merrill ACE Group, Division SVP ACE Global Cyber Risk Practice Anthony Caratzas Broadridge Financial Solutions Managing Director, Risk Management Vinny Sakore ICSA Labs, a division of Verizon Program Manager, Cloud Services David Navetta, Esq. CIPP Information Law Group, Partner

Page 3 Recording of this session via any media type is strictly prohibited. What to Expect What is Cloud Computing and Should Risk Managers Care? How Can Cloud Computing Benefit Business? What are the Risks of Migrating to the Cloud? Making the Cloud Work for Your Company

Page 4 Recording of this session via any media type is strictly prohibited. CFO RoundTable News, CFOs and CIOs Can Keep Up With Business’ Growth With Cloud Computing,

Page 5 Recording of this session via any media type is strictly prohibited. IRDC 3 DMW, Cloud Computing,

Page 6 Recording of this session via any media type is strictly prohibited. Mother Nature Network, Is cloud computing secure?, Photo: Shutterstock,

Page 7 Recording of this session via any media type is strictly prohibited. What is Cloud Computing? Visual Model of NIST Working Definition of the Cloud

Page 8 Recording of this session via any media type is strictly prohibited. What is Cloud Computing?

Page 9 Recording of this session via any media type is strictly prohibited. Should Risk Managers Care? Cisco UCS and EMC® VNX™ 5300 with Microsoft Private Cloud Fast Track 2.0,

Page 10 Recording of this session via any media type is strictly prohibited. How Can Cloud Computing Benefit Business? Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine, 2005 Reduced Infrastructure Costs Capacity, Scalability and Speed Security and Backup Availability, Geography and Mobility Regulatory Compliance Other Benefits computing.jpg.html?&_suid=

Page 11 Recording of this session via any media type is strictly prohibited. What are some of the Risks of Migrating to the Cloud? Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine, 2005 Contracts Loss of Control Aggregation Risk Costs Data Security

Page 12 Recording of this session via any media type is strictly prohibited. What are Risks of Migrating to the Cloud? – In More Detail Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine, 2005 Cloud Relationships Geography Privacy System and Data Availability Data Retention Incident response Electronic Discovery / Electronic Evidence

Page 13 Recording of this session via any media type is strictly prohibited. Making Cloud Computing Work for Your Company Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine, 2005 Privacy by Design and Culture Shared Security and Related Responsibilities Control and Liability Due Diligence and Vendor Management Programs

Page 14 Recording of this session via any media type is strictly prohibited. Making Cloud Computing Work for Your Company Mitigating Risks – Multidisciplinary Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine, 2005 Technical Legal Risk Transfer (Insurance)

Page 15 Recording of this session via any media type is strictly prohibited. Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine,

Page 16 Recording of this session via any media type is strictly prohibited. Making Cloud Computing Work for Your Company Vendor Management Programs Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine, 2005 RFP Phase Risk Identification Phase Formal Security and Privacy Assessment Data Security and Privacy Schedule Negotiation Strategies Audit and Reoccurring Risk Assessment This material is for informational purposes only and not for the purpose of providing legal advice. You should contact your attorney to obtain advice with respect to any particular issue or problem

Page 17 Recording of this session via any media type is strictly prohibited. Making Cloud Computing Work for Your Company Key Contract Terms Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine, 2005 Definitions Preventative Contract Terms Controls in place to prevent data breach “Reasonable security” Specific controls Audit and Enforcement Terms Assessment / scanning rights Non-compliance reporting Credits / damages Incident Response Contract Terms Risk of Loss Contract Terms This material is for informational purposes only and not for the purpose of providing legal advice. You should contact your attorney to obtain advice with respect to any particular issue or problem

Page 18 Recording of this session via any media type is strictly prohibited. Making Cloud Computing Work for Your Company Adapted from Source: ©Teacher & Educational Development, University of New Mexico School of Medicine, 2005 Privacy by Design and Culture Shared Security and Related Responsibilities Control and Liability Due Diligence and Vendor Management Programs This material is for informational purposes only and not for the purpose of providing legal advice. You should contact your attorney to obtain advice with respect to any particular issue or problem

Page 19 Recording of this session via any media type is strictly prohibited. Questions, Final Comments and Contact Information Toby Merrill Anthony Caratzas Vinny Sakore David Navetta, Esq. CIPP