1. Blueberry Software IT Security Audit Results

2. Results: Good

3. Strong Areas ●Security Organization o Strong and organized security infrastructure ●Access Control & A.C. Procedures o Strong password controls/Rotation o Files well-protected o Procedures in place for authorization

4. Strong Areas (Cont’d) ●Vendor Management o Management must approve third-party connectivity o Third-party connections are monitored ●Virus Protection o Protection/Detection software on all devices o E-mail attachments pre-screened ●Strong Security Policies/Standards

5. Weak Areas ●Computer and Network Management o Vulnerabilities/Exploits not prioritized ●Compliance o No compliance checks in place ●Business Continuity & B.C. Plans o Backup procedures not documented

6. Weak Areas (Cont’d) ●Patch Management Processes o High priority patches take 48 hours for implementation ●Security Testing o Security Test results not well-documented

7. Suggested Improvements ●Identify and prioritize patches daily ●Enforce policy compliance w/ checking tools o e.g. eTrust ●Document Restore/Backup procedures ●Produce and Retain written results of Security Tests