Investor Presentaiton

Determining Compliance: Regulatory Considerations 1 Has the Licensee Assessed the Company's Risk? • Identified reasonably foreseeable internal and external threats to NPI 2 3 4 5 • Assessed the likelihood and potential damage from these threats • Assessed sufficiency of policies, procedures and information systems and other safeguards to manage these threats • Implemented information safeguards to manage threats, and at least annually, assessed the effectiveness of the safeguards • Included cybersecurity risks in the enterprise risk management process

View entire presentation