1. NLNB Vendor Security Compliance Reviews Team 9

2. Contents 1.Current Status 2.Scope, Time, and Cost Estimates 3.Recorded Issues 4.Next Steps 5.Conclusion 6.Q&A

3. Current Status Initiating and planning phases completed Conducting Executing Phase Last month’s Progress 17 Onsite Reviews (OSSR) completed 9 Conference Call Reviews (CCSR) completed Cost to NLNB = $68,500 Cumulative Progress 105 of 200 OSSRs Completed 45 of 100 CCSRs Completed Cost to NLNB = $412,500

4. Scope, Time, and Cost Estimates Scope o Thorough reviews conducted o Vendors showing quality Data Security Time o Minor delays offset by gradually perfecting process o OSSRs totals ahead of schedule o CCSRs behind schedule Cost o Initial cost estimates met

5. Recorded Issues and Solutions Lack of vendor response o Vendor XYZ submitted questionnaire late o Solution: Issuing reminders to vendors Vendor Security Breach post-review o Solution: Additions to reviews have been made in response to this event Vendor ABC issued poor security grade o Issues with Data Security Policy o Solution: Team 9 resources being used to upgrade Vendor ABC security policies

6. Next Steps To be completed by the end of this fiscal year o 150 VSCRs o 95 OSSRs o 55 CCSRs Next Meeting o Currently scheduled for September 2, 2013 o Michael Schiavone, Project Manager, and Sarah Roberts, Lead Senior Data Security Analyst will be in attendance

7. Conclusion Project is on-time, on-budget and within the set scope o 105 of 200 OSSRs Completed o 45 of 100 CCSRs Completed o Cost to NLNB = $412,500 Issues have been resolved with minimal delay to project o Set to be completed within 3 year timetable Issues have led to review enhancements Majority of vendors showing quality Data Security measures o 95% of vendors have met review standards

8. Questions?