From dea79c4ebf2c1a97c16527573187a2bbc87ed93c Mon Sep 17 00:00:00 2001 From: eric-intuitem <71850047+eric-intuitem@users.noreply.github.com> Date: Wed, 8 May 2024 02:45:45 +0200 Subject: [PATCH 1/2] 3CF referential 3CF framework --- backend/library/libraries/3cf-ed1-v1.yaml | 3525 +++++++++++++++++++++ tools/3cf/3cf-ed1-v1.xlsx | Bin 0 -> 37810 bytes 2 files changed, 3525 insertions(+) create mode 100644 backend/library/libraries/3cf-ed1-v1.yaml create mode 100644 tools/3cf/3cf-ed1-v1.xlsx diff --git a/backend/library/libraries/3cf-ed1-v1.yaml b/backend/library/libraries/3cf-ed1-v1.yaml new file mode 100644 index 000000000..ce01c0f8c --- /dev/null +++ b/backend/library/libraries/3cf-ed1-v1.yaml @@ -0,0 +1,3525 @@ +urn: urn:intuitem:risk:library:3cf-ed1-v1 +locale: fr +ref_id: 3CF-ed1-v1 +name: "Cadre de Conformit\xE9 Cyber France (3CF) pour l'aviation civile" +description: "Ce document, \xE9tabli par la direction de la s\xE9curit\xE9 de l'aviation\ + \ civile (DSAC), pr\xE9sente le Cadre de Conformit\xE9 Cyber France (3CF) pour l'aviation\ + \ civile.\n\xE9dition 1, version 1 du 3 sept. 2021\nhttps://meteor.dsac.aviation-civile.gouv.fr/meteor-externe/api/file/attachment/c63348e4-81fa-45a7-a380-36dd0166071c" +copyright: "Ce document peut \xEAtre utilis\xE9 librement, sous r\xE9serve de mentionner\ + \ sa paternit\xE9 (source et date de la derni\xE8re mise \xE0 jour)." +version: 1 +provider: "Direction de la s\xE9curit\xE9 de l'aviation civile" +packager: intuitem +objects: + framework: + urn: urn:intuitem:risk:framework:c3cf-ed1-v1 + ref_id: 3CF-ed1-v1 + name: "Cadre de Conformit\xE9 Cyber France (3CF) pour l'aviation civile." + description: "Ce document, \xE9tabli par la direction de la s\xE9curit\xE9 de\ + \ l'aviation civile (DSAC), pr\xE9sente le Cadre de Conformit\xE9 Cyber France\ + \ (3CF) pour l'aviation civile.\n\xE9dition 1, version 1 du 3 sept. 2021" + implementation_groups_definition: + - ref_id: 1 + name: Niveau 1 + description: "Gestion de la s\xE9curit\xE9 des syst\xE8mes d'information standard\ + \ dans le domaine de la s\xFBret\xE9" + - ref_id: 2 + name: Niveau 2 + description: "Gestion de la s\xE9curit\xE9 des syst\xE8mes d\u2018information\ + \ avanc\xE9e dans le domaine de la s\xFBret\xE9" + - ref_id: 3 + name: Niveau 3 + description: "Syst\xE8me de management de la s\xE9curit\xE9 de l'information\ + \ all\xE9g\xE9 dans le domaine de la s\xFBret\xE9" + - ref_id: 4 + name: Niveau 4 + description: "Syst\xE8me de management de la s\xE9curit\xE9 de l'information\ + \ dans le domaine de la s\xFBret\xE9 " + requirement_nodes: + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3 + assessable: false + depth: 1 + ref_id: '3' + name: Gouvernance + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.1 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3 + ref_id: '3.1' + name: Engagement de la direction + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node4 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.1 + description: "La direction s'engage \xE0 assurer la protection des syst\xE8\ + mes d'information critiques au regard de la s\xFBret\xE9 de l'aviation civile,\ + \ contre toute atteinte \xE0 la confidentialit\xE9, l'int\xE9grit\xE9 et la\ + \ disponibilit\xE9 de ces syst\xE8mes et des informations qu'ils contiennent\ + \ et / ou traitent." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node5 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.1 + description: "Pour ce faire, la direction s'engage \xE0 mettre en place un Syst\xE8\ + me de Management de la S\xE9curit\xE9 de l'Information (SMSI) visant \xE0\ + \ \xE9tablir, mettre en \u0153uvre, exploiter, surveiller, r\xE9examiner,\ + \ tenir \xE0 jour et am\xE9liorer le niveau de cybers\xE9curit\xE9 des syst\xE8\ + mes d'information critiques au regard de la s\xFBret\xE9 dont elle a la responsabilit\xE9\ + ." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.2 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3 + ref_id: '3.2' + name: "Strat\xE9gie et objectifs" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node7 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.2 + description: "De plus, la direction \xE9tablit et approuve :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node8 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node7 + description: "une strat\xE9gie qui d\xE9crit son ambition globale en mati\xE8\ + re de cybers\xE9curit\xE9 ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node9 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node7 + description: les objectifs pour y parvenir ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node10 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node7 + description: "les \xE9tapes et le plan d'actions pour atteindre ces objectifs." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.3 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3 + ref_id: '3.3' + name: "Gestion des ressources, r\xF4les et responsabilit\xE9s de la s\xE9curit\xE9\ + \ des syst\xE8mes d'information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node12 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.3 + description: 'La direction s''assure que :' + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node13 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node12 + description: "les ressources n\xE9cessaires pour assurer la gestion des risques\ + \ li\xE9s \xE0 la s\xE9curit\xE9 des syst\xE8mes d'information sont disponibles\ + \ ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node14 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node12 + description: "les r\xF4les et responsabilit\xE9s concern\xE9s par la s\xE9curit\xE9\ + \ des syst\xE8mes d'information, \xE0 tous niveaux de l'organisation :\n-\_\ + \_\_\_\_\_\_ du personnel interne ;\n-\_\_\_\_\_\_\_ du personnel externe\ + \ (prestataires, fournisseurs, etc.).\nsont formalis\xE9s, attribu\xE9s, approuv\xE9\ + s, communiqu\xE9s et connus au sein de l'organisation." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.4 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3 + ref_id: '3.4' + name: Approbation + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node16 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.4 + description: 'La direction approuve formellement :' + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node17 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node16 + description: "la liste des syst\xE8mes d'informations critiques \xE0 la s\xFB\ + ret\xE9 de l'aviation civile identifi\xE9s ; " + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node18 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node16 + description: "le plan d'actions de mise en \u0153uvre des mesures de s\xE9curit\xE9\ + \ des syst\xE8mes d'information ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node19 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node16 + description: "les politiques et proc\xE9dures de s\xE9curit\xE9 des syst\xE8\ + mes d'information. " + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node20 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.4 + description: "En outre, la direction approuve formellement le compte-rendu d'appr\xE9\ + ciation des risques." + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node21 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.4 + description: "Enfin, la direction accepte formellement, \xE0 chaque r\xE9vision\ + \ de l'appr\xE9ciation des risques, les risques r\xE9siduels pesant sur le\ + \ p\xE9rim\xE8tre du syst\xE8me de management de la s\xE9curit\xE9 de l'information\ + \ sur la base :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node22 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node21 + description: "d'une appr\xE9ciation des risques ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node23 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node21 + description: du plan de traitement des risques. + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.5 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3 + ref_id: '3.5' + name: "Syst\xE8me de management de la s\xE9curit\xE9 de l'information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node25 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.5 + description: 'La direction :' + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node26 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node25 + description: "s'appuie sur et approuve formellement un syst\xE8me de management\ + \ de la s\xE9curit\xE9 de l'information (SMSI) et les documents associ\xE9\ + s pour mettre en \u0153uvre la strat\xE9gie et atteindre les objectifs ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node27 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node25 + description: "s'engage \xE0 satisfaire aux exigences applicables en mati\xE8\ + re de s\xE9curit\xE9 des syst\xE8mes d'information ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node28 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node25 + description: "s'engage \xE0 \u0153uvrer pour l'am\xE9lioration continue du SMSI\ + \ ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node29 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node25 + description: "d\xE9signe qui a la responsabilit\xE9 et l'autorit\xE9 de s'assurer\ + \ que le SMSI est conforme aux exigences du pr\xE9sent document et \xE0 la\ + \ d\xE9clinaison qui en est faite pour l'entreprise ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node30 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node25 + description: "s'assure que la personne d\xE9sign\xE9e ci-dessus dispose des\ + \ moyens, des ressources n\xE9cessaires et du statut adapt\xE9 \xE0 la r\xE9\ + alisation de cette mission. " + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node31 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.5 + description: "La direction s'engage \xE0 participer aux revues de direction\ + \ afin de s'assurer que le SMSI est toujours appropri\xE9, adapt\xE9 et efficace." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node32 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.5 + description: "Lors de ces revues, la direction prend des d\xE9cisions relatives\ + \ :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node33 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node32 + description: "aux opportunit\xE9s d'am\xE9lioration continue et ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node34 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node32 + description: "\xE0 d'\xE9ventuels changements \xE0 apporter au SMSI." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.6 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3 + ref_id: '3.6' + name: "Coh\xE9rence de la strat\xE9gie, des objectifs et du SMSI" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node36 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:3.6 + description: "La direction s'assure de la coh\xE9rence et de l'int\xE9gration\ + \ ou de l'articulation de la strat\xE9gie, des objectifs SSI et du SMSI avec\ + \ : " + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node37 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node36 + description: "la strat\xE9gie, les objectifs et les risques globaux de l'organisation\ + \ ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node38 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node36 + description: "le(s) syst\xE8me(s) de management existant(s) de l'organisation." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4 + assessable: false + depth: 1 + ref_id: '4' + name: "Gestion de la s\xE9curit\xE9 des syst\xE8mes d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4 + ref_id: '4.1' + name: "Organisation de la s\xE9curit\xE9 des syst\xE8mes d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.1 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1 + ref_id: 4.1.1 + name: Missions et enjeux + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node42 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.1 + description: "L\u2019op\xE9rateur identifie les missions critiques au regard\ + \ de la s\xFBret\xE9 de l\u2019aviation civile." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.2 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1 + ref_id: 4.1.2 + name: Besoins et attentes prestataires et fournisseurs + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node44 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.2 + description: "L\u2019op\xE9rateur identifie :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node45 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node44 + description: "les prestataires de services et fournisseurs d\u2019\xE9quipements\ + \ auxquels il fait appel dans le cadre de la mise en \u0153uvre des missions\ + \ critiques au regard de la s\xFBret\xE9 de l\u2019aviation civile, et ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node46 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node44 + description: "les exigences relatives \xE0 la s\xE9curit\xE9 des syst\xE8mes\ + \ d\u2019information \xE0 leur faire appliquer. Elles sont d\u2019ordre :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node47 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node46 + description: "r\xE8glementaire, notamment celles en mati\xE8re de contr\xF4\ + le d\u2019ant\xE9c\xE9dents, de sensibilisation et de formation ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node48 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node46 + description: "contractuel et garantissent que les prestataires et fournisseurs\ + \ appliquent les mesures de cybers\xE9curit\xE9 d\xE9finies et mises en \u0153\ + uvre par l\u2019op\xE9rateur." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.3 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1 + ref_id: 4.1.3 + name: "Politiques et proc\xE9dures" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node50 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.3 + description: "L\u2019op\xE9rateur :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node51 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node50 + description: "d\xE9finit les politiques et proc\xE9dures pour la mise en \u0153\ + uvre des mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information, notamment\ + \ celles de niveau standard pr\xE9cis\xE9es en Annexe 1 ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node52 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node50 + description: "s\u2019assure que ces documents sont approuv\xE9s par la direction,\ + \ diffus\xE9s et communiqu\xE9s aux personnels ainsi qu\u2019aux prestataires\ + \ et fournisseurs le cas \xE9ch\xE9ant." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node53 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.3 + description: "Puis, l\u2019op\xE9rateur d\xE9finit les politiques et proc\xE9\ + dures pour la mise en \u0153uvre des mesures de s\xE9curit\xE9 des syst\xE8\ + mes d\u2019information, notamment celles de niveau renforc\xE9." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1 + ref_id: 4.1.4 + name: "Personnels et comp\xE9tences" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.1 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4 + ref_id: 4.1.4.1 + name: Identification des personnes + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node56 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.1 + description: "L\u2019op\xE9rateur identifie ou fait identifier par les parties\ + \ int\xE9ress\xE9es concern\xE9es :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node57 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node56 + description: "les \xE9quipes manag\xE9riales, \xE0 savoir les personnes organisant\ + \ et pilotant la s\xE9curit\xE9 des syst\xE8mes d\u2019information critiques\ + \ \xE0 la s\xFBret\xE9 ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node58 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node56 + description: "les \xE9quipes op\xE9rationnelles, \xE0 savoir les personnes d\xE9\ + finissant, planifiant et mettant en \u0153uvre les mesures de s\xE9curit\xE9\ + \ sur les syst\xE8mes d\u2019information critiques \xE0 la s\xFBret\xE9\_;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node59 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node56 + description: "les utilisateurs des syst\xE8mes d\u2019information critiques\ + \ \xE0 la s\xFBret\xE9 :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node60 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node59 + description: "disposant de droits d\u2019administrateur\_;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node61 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node59 + description: "ne disposant pas de droits d\u2019administrateur." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node62 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node56 + description: "les acteurs de la s\xFBret\xE9, \xE0 savoir les personnes :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node63 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node62 + description: "organisant la mise en \u0153uvre des mesures de s\xFBret\xE9\_\ + ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node64 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node62 + description: "mettant en \u0153uvre les mesures de s\xFBret\xE9." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.2 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4 + ref_id: 4.1.4.2 + name: "V\xE9rification des ant\xE9c\xE9dents" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node66 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.2 + description: "L\u2019op\xE9rateur applique ou fait appliquer par les parties\ + \ int\xE9ress\xE9es, une v\xE9rification renforc\xE9e des ant\xE9c\xE9dents\ + \ des personnes identifi\xE9es au \xA7 4.1.4.1." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node67 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.2 + description: "Ainsi, l\u2019op\xE9rateur" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node68 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.2 + description: "s\u2019assure que ces personnes disposent d\u2019une habilitation\ + \ pr\xE9fectorale pr\xE9vue par l\u2019article L6342-3 du code des transports\ + \ [16], \xE0 savoir :\n- qu\u2019ils disposent d\u2019un titre d\u2019acc\xE8\ + s en zone de s\xFBret\xE9 \xE0 acc\xE8s r\xE9glement\xE9 valide dont la d\xE9\ + livrance n\xE9cessite la d\xE9tention de l\u2019habilitation pr\xE9fectorale\ + \ susmentionn\xE9e, ou bien ;\n- qu\u2019ils disposent d\u2019une habilitation\ + \ sans badge." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node69 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.2 + description: "prend en consid\xE9ration les emplois, \xE9tudes et interruptions\ + \ \xE9ventuelles de ces personnes dans les \xC9tats o\xF9 elles ont r\xE9\ + sid\xE9 au cours des 5 derni\xE8res ann\xE9es ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node70 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.2 + description: "conserve des informations document\xE9es appropri\xE9es comme\ + \ preuves." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.3 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4 + ref_id: 4.1.4.3 + name: Sensibilisation et formation + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node72 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.1.4.3 + description: "L\u2019op\xE9rateur :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node73 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node72 + description: "s\u2019assure que\_:" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node74 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node73 + description: "toutes les personnes identifi\xE9es pr\xE9c\xE9demment sont sensibilis\xE9\ + es \xE0 la cybers\xE9curit\xE9" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node75 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node73 + description: "les \xE9quipes manag\xE9riales sont form\xE9es \xE0 la gestion\ + \ de la s\xE9curit\xE9 des syst\xE8mes d\u2019information en coh\xE9rence\ + \ avec les t\xE2ches qui leur sont confi\xE9es" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node76 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node73 + description: "les \xE9quipes op\xE9rationnelles sont form\xE9es \xE0 la mise\ + \ en \u0153uvre des mesures de s\xE9curit\xE9 \xE0 l\u2019\xE9tat de l\u2019\ + art, en coh\xE9rence avec les t\xE2ches qui leur sont confi\xE9es" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node77 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node72 + description: "conserve des informations document\xE9es appropri\xE9es comme\ + \ preuves." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4 + ref_id: '4.2' + name: 'Gestions des risques ' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.1 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2 + ref_id: 4.2.1 + name: "M\xE9thodologie de gestion des risques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node80 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.1 + description: "Dans le cadre de la gestion des risques, l\u2019op\xE9rateur r\xE9\ + alise une appr\xE9ciation des risques, sur laquelle il s\u2019appuie pour\ + \ d\xE9finir le traitement des risques appropri\xE9." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node81 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.1 + description: "L\u2019op\xE9rateur g\xE8re les risques en s\u2019appuyant sur\ + \ une des normes ou des m\xE9thodes suivantes :\n- ISO/CEI 27005 [20],Norme\ + \ relative \xE0 la Gestion des risques li\xE9s \xE0 la s\xE9curit\xE9 de l\u2019\ + information ;\n- EBIOS Risk Manager [21] m\xE9thode d'appr\xE9ciation et de\ + \ traitement des risques num\xE9riques publi\xE9e par l\u2019ANSSI ;\n- toute\ + \ autre m\xE9thode conforme \xE0 la norme ISO/CEI 31000, norme relative \xE0\ + \ la gestion des risques." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2 + ref_id: 4.2.2 + name: "Appr\xE9ciation des risques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2.1 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2 + ref_id: 4.2.2.1 + name: "Activit\xE9s d\u2019appr\xE9ciation des risques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node84 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2.1 + description: "Sur la base des missions \xE9tablies pr\xE9c\xE9demment, l\u2019\ + op\xE9rateur :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node85 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node84 + description: "identifie les fonctions critiques au regard de la s\xFBret\xE9\ + \ de l\u2019aviation civile ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node86 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node84 + description: "r\xE9alise une analyse d\u2019impacts sur la s\xFBret\xE9 en cas\ + \ de perte de confidentialit\xE9, d\u2019int\xE9grit\xE9 et/ou de disponibilit\xE9\ + \ des fonctions identifi\xE9es ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node87 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node84 + description: "identifie les \xE9v\xE9nements redout\xE9s et leur niveau de gravit\xE9\ + ." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node88 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2.1 + description: "De plus, l\u2019op\xE9rateur :" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node89 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node88 + description: "\xE9tablit des crit\xE8res de risque, notamment :" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node90 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node89 + description: "les crit\xE8res d\u2019acceptation des risques ;" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node91 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node89 + description: "les crit\xE8res d\u2019appr\xE9ciation des risques." + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node92 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node88 + description: "identifie les risques sur la base de son analyse d\u2019impact\ + \ ;" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node93 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node88 + description: "m\xE8ne une analyse des risques visant \xE0 d\xE9terminer les\ + \ niveaux de risques associ\xE9s ;" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node94 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node88 + description: "\xE9value les risques visant \xE0 :" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node95 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node94 + description: "comparer les r\xE9sultats de l\u2019analyse de risque avec les\ + \ crit\xE8res de risques ;" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node96 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node94 + description: "prioriser les risques analys\xE9s." + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node97 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2.1 + description: "Enfin, l\u2019op\xE9rateur associe \xE0 chaque risque identifi\xE9\ + \ son propri\xE9taire ou responsable." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2.2 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2 + ref_id: 4.2.2.2 + name: "R\xE9sultats de l\u2019appr\xE9ciation des risques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node99 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2.2 + description: "Sur la base de l\u2019analyse d\u2019impact ou de l\u2019appr\xE9\ + ciation des risques, l\u2019op\xE9rateur identifie les syst\xE8mes d\u2019\ + information critiques \xE0 la s\xFBret\xE9 et conserve des informations document\xE9\ + es comme preuves." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node100 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.2.2 + description: "En outre, l\u2019op\xE9rateur :" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node101 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node100 + description: "produit un compte-rendu des r\xE9sultats de l\u2019appr\xE9ciation\ + \ des risques d\xE9taillant :" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node102 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node101 + description: "les conclusions des diff\xE9rentes activit\xE9s, notamment la\ + \ liste des risques appr\xE9ci\xE9s et class\xE9s par ordre de priorit\xE9\ + , en fonction des crit\xE8res d\u2019\xE9valuation des risques d\xE9finis\ + \ ;" + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node103 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node101 + description: "la liste des syst\xE8mes d\u2019information critiques \xE0 la\ + \ s\xFBret\xE9 de l\u2019aviation civile, identifi\xE9s." + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node104 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node100 + description: "conserve des informations document\xE9es comme preuves des r\xE9\ + sultats d\u2019appr\xE9ciation des risques." + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2 + ref_id: 4.2.3 + name: Traitement des risques + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3 + ref_id: 4.2.3.1 + name: "Activit\xE9s du traitement des risques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.1 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1 + ref_id: 4.2.3.1.1 + name: "\xC9laboration du plan d\u2019actions" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node108 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.1 + description: "L\u2019op\xE9rateur \xE9labore un plan d\u2019actions de mise\ + \ en \u0153uvre des 38 mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information\ + \ standards d\xE9taill\xE9es dans l\u2019annexe 1 ; et pr\xE9cisant" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node109 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node108 + description: "les priorit\xE9s ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node110 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node108 + description: "les d\xE9lais de mise en \u0153uvre ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node111 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node108 + description: "le cas \xE9ch\xE9ant, les raisons ne permettant pas de mettre\ + \ en \u0153uvre la mesure de s\xE9curit\xE9 des syst\xE8mes d\u2019information." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node112 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.1 + description: "En outre, l\u2019op\xE9rateur compl\xE8te le plan d\u2019actions\ + \ avec les 19 mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information\ + \ renforc\xE9es d\xE9taill\xE9es dans l\u2019annexe 1." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.2 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1 + ref_id: 4.2.3.1.2 + name: "Actions et mesures compl\xE9mentaires pour le traitement du risque" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node114 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.2 + description: "Sur la base des r\xE9sultats de l\u2019appr\xE9ciation des risque,\ + \ l\u2019op\xE9rateur d\xE9finit pour chacun des risques s\u2019il :\n- maintient\ + \ le risque, dans le cas o\xF9 il consid\xE8re que le risque identifi\xE9\ + \ est acceptable en l\u2019\xE9tat ;\n- r\xE9duit le niveau de risque par\ + \ l\u2019introduction, la suppression ou la modification des mesures de s\xE9\ + curit\xE9 des syst\xE8mes d\u2019information ;\n- refuse le risque en \xE9\ + vitant l\u2019activit\xE9 ou la situation qui donne lieu \xE0 un risque ;\n\ + - partage le risque avec une autre partie capable de g\xE9rer de mani\xE8\ + re plus efficace le risque, afin que le risque r\xE9siduel puisse \xEAtre\ + \ r\xE9appr\xE9ci\xE9 et jug\xE9 acceptable." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node115 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.2 + description: "L\u2019op\xE9rateur d\xE9termine alors, la ou les mesures compl\xE9\ + mentaires permettant de traiter le risque conform\xE9ment \xE0 l\u2019action\ + \ choisie." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.3. + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1 + ref_id: 4.2.3.1.3. + name: "\xC9laboration du plan de traitement des risques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.3. + description: "L\u2019op\xE9rateur \xE9labore un plan de traitement des risques\ + \ permettant d\u2019identifier :" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node118 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 + description: "Les mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information\ + \ :" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node119 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node118 + description: "du plan d\u2019action ;" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node120 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node118 + description: "compl\xE9mentaires d\xE9termin\xE9es supra et les risques qu\u2019\ + elles traitent." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node121 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 + description: "leurs priorit\xE9s et ;" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node122 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 + description: "leurs d\xE9lais de mise en \u0153uvre ;" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node123 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 + description: "le cas \xE9ch\xE9ant, les raisons ne permettant pas de les mettre\ + \ en \u0153uvre." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.4 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1 + ref_id: 4.2.3.1.4 + name: "\xC9valuation des risques r\xE9siduels " + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node125 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.4 + description: "L\u2019op\xE9rateur \xE9value les risques r\xE9siduels, apr\xE8\ + s l\u2019application des mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019\ + information d\xE9finies dans le plan de traitement des risques." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.5 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1 + ref_id: 4.2.3.1.5 + name: Approbation des risques + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node127 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.5 + description: "L\u2019op\xE9rateur formalise l\u2019approbation par la direction\ + \ :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node128 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node127 + description: "de la liste des syst\xE8mes d\u2019informations critiques \xE0\ + \ la s\xFBret\xE9 de l\u2019aviation civile identifi\xE9s ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node129 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node127 + description: "du plan d\u2019actions de mise en \u0153uvre des mesures de s\xE9\ + curit\xE9 des syst\xE8mes d\u2019information." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node130 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.5 + description: "En outre, l\u2019op\xE9rateur formalise l\u2019approbation par\ + \ la direction du compte-rendu d\u2019appr\xE9ciation des risques." + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node131 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.5 + description: "Puis, l\u2019op\xE9rateur formalise :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node132 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node131 + description: "l\u2019approbation du plan de traitement des risques ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node133 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node131 + description: "l\u2019acceptation des risques r\xE9siduels, aupr\xE8s de la direction." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node134 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.5 + description: "Enfin, l\u2019op\xE9rateur formalise l\u2019acceptation des risques\ + \ r\xE9siduels, aupr\xE8s des propri\xE9taires ou responsables des risques." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.2 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3 + ref_id: 4.2.3.2 + name: "R\xE9sultats du traitement des risques" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node136 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.2 + description: "L\u2019op\xE9rateur :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node137 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node136 + description: 'produit un rapport comprenant :' + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node138 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node137 + description: "la liste approuv\xE9e des syst\xE8mes d\u2019informations critiques\ + \ \xE0 la s\xFBret\xE9 tels qu\u2019identifi\xE9s ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node139 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node137 + description: "le plan d\u2019actions approuv\xE9 relatif \xE0 la mise en \u0153\ + uvre des mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node140 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node136 + description: "conserve des informations document\xE9es comme preuves des r\xE9\ + sultats du traitement des risques." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node141 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.2 + description: "Puis, l\u2019op\xE9rateur compl\xE8te le rapport approuv\xE9 en\ + \ incluant le compte-rendu d\u2019appr\xE9ciation des risques." + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node142 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.2 + description: "Enfin l\u2019op\xE9rateur compl\xE8te le rapport avec :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node143 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node142 + description: "le plan approuv\xE9 de traitement des risques ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node144 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node142 + description: "l\u2019\xE9valuation des risques r\xE9siduels accept\xE9s." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.4 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2 + ref_id: 4.2.4 + name: "Mise en \u0153uvre des mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019\ + information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node146 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.4 + description: "L\u2019op\xE9rateur :" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node147 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node146 + description: "met en \u0153uvre : " + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node148 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node147 + description: les mesures standards 1,2 et 4, et ; + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node149 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node147 + description: "au moins 10% des mesures identifi\xE9es dans le plan d\u2019action\ + \ ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node150 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node146 + description: "produit un tableau de bord de suivi d\u2019avancement du plan\ + \ d\u2019actions ;" + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node151 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node146 + description: "conserve des informations document\xE9es comme preuves des r\xE9\ + sultats de la gestion des risques." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node152 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.4 + description: "En outre, l\u2019op\xE9rateur met en \u0153uvre au moins 50% des\ + \ mesures identifi\xE9es dans le plan d\u2019actions." + implementation_groups: + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node153 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.4 + description: "Puis, l\u2019op\xE9rateur applique les mesures de s\xE9curit\xE9\ + \ des syst\xE8mes d\u2019information en s\u2019appuyant sur la mise en \u0153\ + uvre du SMSI d\xE9taill\xE9e au \xA7 5.3." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5 + assessable: false + depth: 1 + ref_id: '5' + name: "Syst\xE8me de management de la s\xE9curit\xE9 de l\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5 + ref_id: '5.1' + name: "D\xE9finition du SMSI" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1 + ref_id: 5.1.1 + name: "Strat\xE9gie du SMSI" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1.1 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1 + ref_id: 5.1.1.1 + name: Missions et enjeux + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node158 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1.1 + description: "Outre les dispositions pr\xE9vues au \xA7 4.1.1. du pr\xE9sent\ + \ document, l\u2019op\xE9rateur identifie en fonction des missions, les enjeux\ + \ externes et internes pertinents qui influent sur la capacit\xE9 \xE0 obtenir\ + \ le(s) r\xE9sultat(s) attendu(s) du SMSI, notamment :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node159 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node158 + description: 'les contraintes externes :' + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node160 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node159 + description: "le r\xE8glements (UE) n\xB02015/1998 [1] ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node161 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node159 + description: "les lois et textes nationaux : Loi de programmation militaire,\ + \ loi de transposition de la directive NIS \u2013 D\xE9crets et Arr\xEAt\xE9\ + s associ\xE9s, le cas \xE9ch\xE9ant ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node162 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node158 + description: les contraintes internes. + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1.2 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1 + ref_id: 5.1.1.2 + name: "Besoin et attentes des parties int\xE9ress\xE9es" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node164 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1.2 + description: "Outre les dispositions pr\xE9vues au 4.1.2. relatives aux prestataires\ + \ et fournisseurs, l\u2019op\xE9rateur identifie :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node165 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node164 + description: "les parties int\xE9ress\xE9es concern\xE9es par le syst\xE8me\ + \ de management de la s\xE9curit\xE9 de l\u2019information :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node166 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node165 + description: les clients ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node167 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node165 + description: 'les partenaires qui sont :' + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node168 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node167 + description: "les organisations avec lesquelles elle \xE9change des informations\ + \ pour assurer les missions critiques au regard de la s\xFBret\xE9 ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node169 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node167 + description: "les prestataires de services et fournisseurs d\u2019\xE9quipements\ + \ ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node170 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node167 + description: "toute autre personne ou organisation susceptible d\u2019affecter\ + \ ou d\u2019\xEAtre affect\xE9e par une d\xE9cision ou une activit\xE9 du\ + \ SMSI ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node171 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node167 + description: "les autorit\xE9s comp\xE9tentes." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node172 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node164 + description: "les exigences relatives \xE0 la s\xE9curit\xE9 des syst\xE8mes\ + \ d\u2019information \xE0 faire appliquer aux parties int\xE9ress\xE9es. Elles\ + \ sont d\u2019ordre :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node173 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node172 + description: "r\xE8glementaire, notamment celles en mati\xE8re de contr\xF4\ + le d\u2019ant\xE9c\xE9dent, de sensibilisation et de formation ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node174 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node172 + description: "contractuel et garantissent que les parties int\xE9ress\xE9es\ + \ appliquent les exigences de cybers\xE9curit\xE9 d\xE9finies et mises en\ + \ \u0153uvre par l\u2019op\xE9rateur." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1.3 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1 + ref_id: 5.1.1.3 + name: "Domaine d\u2019application et p\xE9rim\xE8tre" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node176 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1.3 + description: "L\u2019op\xE9rateur d\xE9termine le domaine d\u2019application\ + \ du SMSI, \xE0 savoir les limites et l\u2019applicabilit\xE9. Pour ce faire,\ + \ il prend en compte :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node177 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node176 + description: les enjeux externes et internes ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node178 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node176 + description: les exigences ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node179 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node176 + description: "les interfaces et les d\xE9pendances existant entre les activit\xE9\ + s r\xE9alis\xE9es par l\u2019organisation et celles r\xE9alis\xE9es par d\u2019\ + autres organisations." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1.4 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1 + ref_id: 5.1.1.4 + name: "Interface avec les autres syst\xE8mes de management" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node181 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.1.4 + description: "L\u2019op\xE9rateur \xE9tablit et formalise l\u2019articulation\ + \ entre le SMSI et les autres syst\xE8mes de management existants, qui peuvent\ + \ \xEAtre :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node182 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node181 + description: "un Syst\xE8me de Gestion de la S\xE9curit\xE9 de l\u2019aviation\ + \ civile (Safety Management System, SMS) ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node183 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node181 + description: "un Syst\xE8me de Gestion de la S\xFBret\xE9 (Security Management\ + \ System, SeMS)." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.2 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1 + ref_id: 5.1.2 + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node185 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.2 + description: "Outre les dispositions pr\xE9vues au \xA7 4.1.4.3, l\u2019op\xE9\ + rateur :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node186 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node185 + description: "s\u2019assure que les \xE9quipes manag\xE9riales sont form\xE9\ + es \xE0 :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node187 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node186 + description: "l\u2019audit interne d\u2019un SMSI ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node188 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node186 + description: "la gestion des incidents de cybers\xE9curit\xE9, en coh\xE9rence\ + \ avec les t\xE2ches qui leur sont confi\xE9es." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node189 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node185 + description: "conserve des informations document\xE9es appropri\xE9es comme\ + \ preuves." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.3 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1 + ref_id: 5.1.3 + name: Documentation + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node191 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.3 + description: "L\u2019op\xE9rateur d\xE9crit \xE0 travers une proc\xE9dure de\ + \ gestion documentaire, la mani\xE8re dont il ma\xEEtrise les informations\ + \ document\xE9es." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node192 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.3 + description: "La proc\xE9dure de gestion documentaire pr\xE9cise :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node193 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node192 + description: "l\u2019identification des types d\u2019informations \xE0 documenter\ + \ (impos\xE9 r\xE9glementairement ou jug\xE9 n\xE9cessaires \xE0 l\u2019efficacit\xE9\ + \ du syst\xE8me de management de la s\xE9curit\xE9 de l\u2019information)\ + \ ; " + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node194 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node192 + description: "les dispositions \xE0 appliquer lors de la cr\xE9ation et de la\ + \ mise \xE0 jour des informations document\xE9es de l\u2019op\xE9rateur. En\ + \ particulier, l\u2019op\xE9rateur s\u2019assure que les \xE9l\xE9ments suivants\ + \ sont appropri\xE9s :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node195 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node194 + description: "identification et description (par exemple titre, date, auteur,\ + \ num\xE9ro de r\xE9f\xE9rence) ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node196 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node194 + description: "format (par exemple langue, version logicielle, graphique) et\ + \ support (par exemple papier, \xE9lectronique) ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node197 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node194 + description: "examen et approbation du caract\xE8re appropri\xE9 et pertinent\ + \ des informations." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node198 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node192 + description: "l\u2019objectif du contr\xF4le exerc\xE9 par l\u2019op\xE9rateur,\ + \ \xE0 savoir s\u2019assurer que les informations document\xE9es sont :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node199 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node198 + description: "disponibles et conviennent \xE0 l\u2019utilisation, o\xF9 et quand\ + \ elles sont n\xE9cessaires ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node200 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node198 + description: "correctement prot\xE9g\xE9es (par exemple de toute perte de confidentialit\xE9\ + , utilisation inappropri\xE9e ou perte d\u2019int\xE9grit\xE9)." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node201 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node192 + description: "le contr\xF4le exerc\xE9 concerne, quand applicables :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node202 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node201 + description: "la distribution, l\u2019acc\xE8s, la r\xE9cup\xE9ration et l\u2019\ + utilisation ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node203 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node201 + description: "le stockage et la conservation, y compris la pr\xE9servation de\ + \ la lisibilit\xE9 ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node204 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node201 + description: "le contr\xF4le des modifications;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node205 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node201 + description: "la dur\xE9e de conservation et suppression." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node206 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node192 + description: "les informations document\xE9es d\u2019origine externe que l\u2019\ + op\xE9rateur juge n\xE9cessaires \xE0 la planification et au fonctionnement\ + \ du SMSI sont identifi\xE9es et ma\xEEtris\xE9es." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.4 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1 + ref_id: 5.1.4 + name: Communication + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node208 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.1.4 + description: "L\u2019op\xE9rateur d\xE9termine les besoins de communication\ + \ interne et externe pertinents pour le SMSI, et notamment :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node209 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node208 + description: sur quels sujets communiquer ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node210 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node208 + description: "\xE0 quels moments communiquer ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node211 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node208 + description: avec qui communiquer ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node212 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node208 + description: qui doit communiquer ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node213 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node208 + description: "les processus par lesquels la communication doit s\u2019effectuer." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.2 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5 + ref_id: '5.2' + name: Planification du SMSI + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node215 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.2 + description: "L\u2019op\xE9rateur planifie le SMSI en s\u2019appuyant sur la\ + \ gestion des risques de niveau de conformit\xE9 3 et plus." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5 + ref_id: '5.3' + name: "Mise en \u0153uvre du SMSI" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3.1 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3 + ref_id: 5.3.1 + name: Organisation de la gestion des risques + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node218 + assessable: true + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3.1 + description: "L\u2019op\xE9rateur d\xE9finit l\u2019organisation de la gestion\ + \ des risques et en pr\xE9cise :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node219 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node218 + description: la structure et le positionnement ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node220 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node218 + description: "les responsabilit\xE9s des diff\xE9rents participants ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node221 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node218 + description: "la p\xE9riodicit\xE9 et/ou les \xE9v\xE9nements significatifs\ + \ d\xE9clenchant une r\xE9union ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node222 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node218 + description: "les diff\xE9rents indicateurs de suivi d\u2019avancement du plan\ + \ de traitement des risques." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3.2 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3 + ref_id: 5.3.2 + name: Missions de la gestion des risques + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node224 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3.2 + description: "Au travers de cette organisation, l\u2019op\xE9rateur :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node225 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node224 + description: "proc\xE8de \xE0 une r\xE9appr\xE9ciation des risques et/ou ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node226 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node224 + description: "planifie et met en \u0153uvre :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node227 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node226 + description: "les mesures standards 1 et 4 et renforc\xE9e 2 ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node228 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node226 + description: au moins 70% des mesures standards ; + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node229 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node226 + description: "au moins 20% des mesures renforc\xE9es ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node230 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node226 + description: "les mesures compl\xE9mentaires identifi\xE9es dans le plan de\ + \ traitement des risques." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node231 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node224 + description: "contr\xF4le l\u2019avanc\xE9e du plan de traitement des risques." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node232 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3.2 + description: "En outre, l\u2019op\xE9rateur planifie et met en \u0153uvre :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node233 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node232 + description: au moins 80% des mesures standards; + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node234 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node232 + description: "au moins 50% des mesures renforc\xE9es." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3.3 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3 + ref_id: 5.3.3 + name: "R\xE9sultats de la gestion des risques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node236 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3.3 + description: "L\u2019op\xE9rateur :" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node237 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node236 + description: "produit un tableau de bord de suivi d\u2019avancement du plan\ + \ de traitement des risques ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node238 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node236 + description: "conserve des informations document\xE9es comme preuves des r\xE9\ + sultats de la gestion des risques." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5 + ref_id: '5.4' + name: "\xC9valuation et am\xE9lioration du SMSI" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4 + ref_id: 5.4.1 + name: "\xC9valuation des performances de s\xE9curit\xE9" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1.1 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1 + ref_id: 5.4.1.1 + name: "Organisation de l\u2019\xE9valuation des performances de s\xE9curit\xE9" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node242 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1.1 + description: "L\u2019op\xE9rateur d\xE9finit l\u2019organisation de l\u2019\xE9\ + valuation des performances et pr\xE9cise :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node243 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node242 + description: la structure et le positionnement ; + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node244 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node242 + description: "les responsabilit\xE9s des diff\xE9rents participants ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node245 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node242 + description: "la p\xE9riodicit\xE9 et/ou les \xE9v\xE9nements significatifs\ + \ d\xE9clenchant une r\xE9union ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node246 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node242 + description: 'les indicateurs :' + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node247 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node246 + description: "de conformit\xE9 du syst\xE8me de management de la s\xE9curit\xE9\ + \ de l\u2019information ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node248 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node246 + description: "d\u2019efficacit\xE9 de la s\xE9curit\xE9." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1.2 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1 + ref_id: 5.4.1.2 + name: "Missions de l\u2019\xE9valuation des performances" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node250 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1.2 + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node251 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node250 + description: "Au travers de cette organisation, l\u2019op\xE9rateur \xE9value\ + \ l\u2019efficacit\xE9 :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node252 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node251 + description: "de la gestion des risques\_:" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node253 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node252 + description: "Appr\xE9ciation des risques ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node254 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node252 + description: Traitement des risques. + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node255 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node251 + description: des mesures inscrites dans le plan de traitement des risques. + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node256 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node250 + description: 'Par rapport :' + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node257 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node256 + description: "aux objectifs de s\xE9curit\xE9 des syst\xE8mes d\u2019information\ + \ d\xE9finis dans la strat\xE9gie ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node258 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node256 + description: "au retour d\u2019exp\xE9rience de la gestion des incidents." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node259 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node250 + description: "En s\u2019appuyant sur :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node260 + assessable: false + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node259 + description: "les r\xE9sultats :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node261 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node260 + description: des audits internes ; + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node262 + assessable: true + depth: 8 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node260 + description: "des audits des autorit\xE9s comp\xE9tentes." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node263 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node259 + description: "son retour d\u2019exp\xE9rience." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1.3 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1 + ref_id: 5.4.1.3 + name: "R\xE9sultats de l\u2019\xE9valuation des performances" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node265 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.1.3 + description: "L\u2019op\xE9rateur :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node266 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node265 + description: "produit un tableau de bord de suivi des performances de s\xE9\ + curit\xE9 ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node267 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node265 + description: "conserve des informations document\xE9es comme preuves des r\xE9\ + sultats d\u2019\xE9valuation des performances." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4 + ref_id: 5.4.2 + name: Audits internes + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.1 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2 + ref_id: 5.4.2.1 + name: Objectifs des audits internes + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node270 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.1 + description: "L\u2019op\xE9rateur r\xE9alise des audits internes visant \xE0\ + \ \xE9valuer :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node271 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node270 + description: "la conformit\xE9 :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node272 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node271 + description: "avec le pr\xE9sent document, du SMSI ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node273 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node271 + description: "des syst\xE8mes d\u2019information critiques au regard de la s\xFB\ + ret\xE9 avec les mesures pr\xE9vues dans le plan de traitement du risque." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node274 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node270 + description: "la mise en \u0153uvre efficace et la tenue \xE0 jour du SMSI." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.2 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2 + ref_id: 5.4.2.2 + name: "Programme d\u2019audits" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node276 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.2 + description: "L\u2019op\xE9rateur d\xE9finit un ou plusieurs programmes d\u2019\ + audits, prenant en compte :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node277 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node276 + description: "la d\xE9marche d\u2019appr\xE9ciation des risques ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node278 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node276 + description: "la d\xE9marche de traitement des risques ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node279 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node276 + description: "les r\xE9sultats des audits pr\xE9c\xE9dents." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node280 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.2 + description: "et pr\xE9cise :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node281 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node280 + description: "la fr\xE9quence, les m\xE9thodes et les responsabilit\xE9s des\ + \ audits ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node282 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node280 + description: les exigences de planification ; + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node283 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node280 + description: "l\u2019\xE9laboration des rapports." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node284 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.2 + description: "De plus l\u2019op\xE9rateur : " + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node285 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node284 + description: "d\xE9finit les crit\xE8res d\u2019audits et les p\xE9rim\xE8tres\ + \ de chaque audit ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node286 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node284 + description: "s\xE9lectionne des auditeurs qui assurent l\u2019objectivit\xE9\ + \ et l\u2019impartialit\xE9 du processus d\u2019audit." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.3 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2 + ref_id: 5.4.2.3 + name: "Suivi du programme d\u2019audit" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node288 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.3 + description: "L\u2019op\xE9rateur assure le suivi du programme d\u2019audit\ + \ au sein du dispositif d\u2019\xE9valuation des performances." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.4 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2 + ref_id: 5.4.2.4 + name: "R\xE9sultats des audits internes" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node290 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.2.4 + description: "L\u2019op\xE9rateur :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node291 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node290 + description: "produit un tableau de bord de suivi du ou des programmes d\u2019\ + audits internes ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node292 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node290 + description: 'enrichit les tableaux de bord de suivis :' + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node293 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node292 + description: "des performances de s\xE9curit\xE9\_;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node294 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node292 + description: "des non-conformit\xE9s et actions correctives avec les r\xE9sultats\ + \ des audits internes ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node295 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node290 + description: "s\u2019assure qu\u2019il est rendu compte des r\xE9sultats des\ + \ audits \xE0 la direction concern\xE9e ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node296 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node290 + description: "conserve des informations document\xE9es comme preuves de la mise\ + \ en \u0153uvre du ou des programme(s) d\u2019audit et des r\xE9sultats d\u2019\ + audit." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4 + ref_id: 5.4.3 + name: Revue de direction + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3.1 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3 + ref_id: 5.4.3.1 + name: Revue de direction + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node299 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3.1 + description: "L\u2019op\xE9rateur d\xE9finit et pr\xE9cise :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node300 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node299 + description: "l\u2019organisation et le positionnement de la revue de direction\_\ + ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node301 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node299 + description: "les responsabilit\xE9s des diff\xE9rents participants ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node302 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node299 + description: "la p\xE9riodicit\xE9 :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node303 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node302 + description: "au moins 1 fois entre 2 audits de l\u2019autorit\xE9, et/ou ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node304 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node302 + description: "les \xE9v\xE9nements significatifs d\xE9clenchant la revue de\ + \ direction (incident, changement de contexte etc.)." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3.2 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3 + ref_id: 5.4.3.2 + name: Missions de la revue de direction + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node306 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3.2 + description: 'Sur la base :' + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node307 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node306 + description: "des changements de contexte de l\u2019op\xE9rateur, notamment\ + \ :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node308 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node307 + description: "l\u2019\xE9volution de la menace ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node309 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node307 + description: "un changement de l\u2019organisation ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node310 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node307 + description: "des changements des besoins et attentes des parties int\xE9ress\xE9\ + es ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node311 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node307 + description: "une modification du domaine d\u2019application." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node312 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node306 + description: "des r\xE9sultats de l\u2019appr\xE9ciation des risques ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node313 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node306 + description: "des tableaux de bord de suivi d\u2019avancement du plan de traitement\ + \ des risques." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node314 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3.2 + description: "L\u2019op\xE9rateur identifie et d\xE9cide des :" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node315 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node314 + description: "actions pr\xE9ventives \xE0 mettre en \u0153uvre ;" + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node316 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node314 + description: "modifications \xE0 apporter au SMSI : Organisation, besoins et\ + \ attentes des parties int\xE9ress\xE9es, et du domaine d\u2019application." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node317 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3.2 + description: "Pour prendre ses d\xE9cisions, l\u2019op\xE9rateur s\u2019appuie\ + \ \xE9galement sur : " + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node318 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node317 + description: "des tableaux de bord de suivi d\u2019avancement du plan de traitement\ + \ des risques, des performances de s\xE9curit\xE9 et des actions correctives\ + \ ; " + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node319 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node317 + description: "des r\xE9sultats d\u2019audits." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3.3 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3 + ref_id: 5.4.3.3 + name: Conclusions de la revue de direction + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node321 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.3.3 + description: "L\u2019op\xE9rateur conserve des informations document\xE9es comme\ + \ preuves des conclusions des revues de direction." + implementation_groups: + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4 + ref_id: 5.4.4 + name: "R\xE9action aux non-conformit\xE9s" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.1 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4 + ref_id: 5.4.4.1 + name: "Sources des non-conformit\xE9s" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node324 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.1 + description: "L\u2019op\xE9rateur r\xE9agit aux non-conformit\xE9s notifi\xE9\ + es par les autorit\xE9s comp\xE9tentes." + implementation_groups: + - '1' + - '2' + - '3' + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node325 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.1 + description: "L\u2019op\xE9rateur r\xE9agit aux non-conformit\xE9s :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node326 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node325 + description: "identifi\xE9es lors :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node327 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node326 + description: "de l\u2019\xE9valuation des performances ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node328 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node326 + description: des audits internes ; + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node329 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node326 + description: de la gestion des incidents, + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node330 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node325 + description: "notifi\xE9es par :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node331 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node330 + description: "ses parties int\xE9ress\xE9es, en particulier les clients et\ + \ les partenaires (fournisseurs, sous-traitants, etc.) ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node332 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node330 + description: "l\u2019autorit\xE9 comp\xE9tente dans le cadre de sa surveillance,\ + \ la DSAC." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.2 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4 + ref_id: 5.4.4.2 + name: "Traitement des non-conformit\xE9s" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node334 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.2 + description: "Lorsqu\u2019une non-conformit\xE9 est d\xE9tect\xE9e, l\u2019\ + op\xE9rateur en :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node335 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node334 + description: "traite les cons\xE9quences ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node336 + assessable: false + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node334 + description: 'identifie :' + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node337 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node336 + description: la ou les causes ; + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node338 + assessable: true + depth: 7 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node336 + description: "si des non-conformit\xE9s similaires existent ou pourraient se\ + \ produire." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node339 + assessable: false + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.2 + description: "Sur la base de cette analyse, l\u2019op\xE9rateur :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node340 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node339 + description: "d\xE9termine l\u2019action corrective associ\xE9e comme par exemple\ + \ :\n- aucune action ;\n- un ajout, une suppression ou une modification d\u2019\ + une mesure de traitement du risque ;\n- une modification du syst\xE8me de\ + \ management de la s\xE9curit\xE9 de l\u2019information." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node341 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node339 + description: "planifie sa mise en \u0153uvre ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node342 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node339 + description: "\xE9value son efficacit\xE9." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.3 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4 + ref_id: 5.4.4.3 + name: "Suivi des non-conformit\xE9s" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node344 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.3 + description: "L\u2019op\xE9rateur assure le suivi des non-conformit\xE9s au\ + \ sein du dispositif d\u2019\xE9valuation des performances et lors des revues\ + \ de direction." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.4 + assessable: false + depth: 4 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4 + ref_id: 5.4.4.4 + name: "R\xE9sultat de la r\xE9action aux non-conformit\xE9s" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node346 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.4 + description: "L\u2019op\xE9rateur produit un tableau de bord de suivi des non-conformit\xE9\ + s et actions correctives qui pr\xE9cise :" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node347 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node346 + description: "la non-conformit\xE9 et l\u2019action corrective associ\xE9e ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node348 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node346 + description: "le statut de mise en \u0153uvre et les d\xE9lais ;" + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node349 + assessable: true + depth: 6 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node346 + description: "l\u2019\xE9valuation de son efficacit\xE9." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node350 + assessable: true + depth: 5 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.4.4.4 + description: "L\u2019op\xE9rateur conserve des informations document\xE9es comme\ + \ preuves des r\xE9actions \xE0 une non-conformit\xE9." + implementation_groups: + - '4' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:6 + assessable: false + depth: 1 + ref_id: '6' + name: Cas particuliers des OIV et des OSE + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node352 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:6 + description: "Concernant le r\xE8glement (UE) n\xB02015/1998 [1] les OIV et\ + \ OSE peuvent faire valoir la mesure d\u2019\xE9quivalence pr\xE9vue par ledit\ + \ r\xE8glement mais uniquement pour les donn\xE9es et syst\xE8mes critiques\ + \ relevant de la s\xFBret\xE9 de l\u2019aviation civile qui sont \xE9galement\ + \ :" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node353 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node352 + description: "des syst\xE8mes d'information d'importance vitale (SIIV) ou tels\ + \ que d\xE9finis par le code de la d\xE9fense ;" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node354 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node352 + description: "des r\xE9seaux et syst\xE8mes d'information essentiels (SIE) tels\ + \ que d\xE9finis par la directive europ\xE9enne de 2016 dite \xAB NIS \xBB\ + ." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node355 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:6 + description: "Cependant cette \xE9quivalence ne s\u2019applique pas pour les\ + \ exigences r\xE8glementaires relatives \xE0 la v\xE9rification des ant\xE9\ + c\xE9dents. En effet, ils doivent s\u2019y soumettre au m\xEAme titre que\ + \ les autres op\xE9rateurs." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node356 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:6 + description: "Concernant le futur r\xE8glement (UE) Part IS [2], les OIV et\ + \ les OSE ayant d\xE9j\xE0 men\xE9 des travaux en mati\xE8re de s\xE9curit\xE9\ + \ des syst\xE8mes d\u2019information dans le cadre des dispositifs LPM et\ + \ NIS, peuvent s\u2019appuyer dessus pour la mise en \u0153uvre du SMSI, \xE0\ + \ condition d\u2019avoir pris en consid\xE9ration les enjeux en mati\xE8re\ + \ de s\xE9curit\xE9 de l\u2019aviation civile dans leurs d\xE9marches." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node357 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:6 + description: "Concr\xE8tement, les OIV et les OSE peuvent s\u2019appuyer sur" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node358 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node357 + description: "leur PSSI pour la d\xE9finition du SMSI et l\u2019\xE9valuation\ + \ des performances ;" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node359 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node357 + description: "leur analyse d\u2019impacts ou leur d\xE9marche globale d\u2019\ + analyse de risques pour l\u2019appr\xE9ciation des risques\_;" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node360 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node357 + description: "les mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information\ + \ d\xE9j\xE0 mises en \u0153uvre pour le traitement du risque. Ils n\u2019\ + ont pas obligation d\u2019appliquer des mesures compl\xE9mentaires ;" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node361 + assessable: false + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node357 + description: "leurs audits pr\xE9vus dans le cadre de la LPM et de la NIS pour\ + \ l\u2019\xE9valuation de leurs performances." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:annexe-1 + assessable: false + depth: 1 + ref_id: Annexe 1 + name: "Mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node363 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:annexe-1 + description: "Le tableau ci-dessous pr\xE9sente les mesures de s\xE9curit\xE9\ + \ des syst\xE8mes d\u2019information \xE0 consid\xE9rer pour l\u2019\xE9laboration\ + \ du plan d\u2019actions ou du plan de traitement des risques. Elles sont\ + \ extraites du Guide d\u2019hygi\xE8ne informatique publi\xE9 par l\u2019\ + ANSSI et constituent le socle minimal de s\xE9curit\xE9 des syst\xE8mes d\u2019\ + information. Deux niveaux d\u2019impl\xE9mentation y sont identifi\xE9s :\n\ + - Standard pour les niveaux de conformit\xE9 1 et 2 ;\n- Renforc\xE9 pour\ + \ les niveaux de conformit\xE9 3 et plus." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node364 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:annexe-1 + description: "Le guide ne sp\xE9cifie pas comment les mesures doivent \xEAtre\ + \ mises en \u0153uvre, car cela d\xE9pend de chaque op\xE9rateur, mais fait\ + \ r\xE9f\xE9rence \xE0 d\u2019autres guides et r\xE9f\xE9rentiels de l\u2019\ + ANSSI qui apportent des indications." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node365 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:annexe-1 + description: "A noter que certaines mesures ne sont pas pertinentes dans le\ + \ domaine du transport a\xE9rien, elles ont \xE9t\xE9 supprim\xE9es. D\u2019\ + autres mesures, quant \xE0 elles, rel\xE8vent de l\u2019organisation de la\ + \ s\xE9curit\xE9 des syst\xE8mes d\u2019information ou de la gestion du risque\ + \ et sont donc explicitement cit\xE9es dans les chapitres du document traitant\ + \ ces sujets. Une r\xE9f\xE9rence au dit chapitre est alors faite." + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:annexe-1 + name: "Mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m1 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M1 + name: 1 + description: "Former les \xE9quipes op\xE9rationnelles \xE0 la s\xE9curit\xE9\ + \ des syst\xE8mes d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m2 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M2 + name: 2 + description: "Sensibiliser les utilisateurs aux bonnes pratiques \xE9l\xE9mentaires\ + \ de s\xE9curit\xE9 informatique" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m3 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M3 + name: 3 + description: "Ma\xEEtriser les risques de l\u2019infog\xE9rance" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m4 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M4 + name: 4 + description: "Identifier les informations et serveurs les plus sensibles et\ + \ maintenir un sch\xE9ma du r\xE9seau" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m5 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M5 + name: 5 + description: "Disposer d\u2019un inventaire exhaustif des comptes privil\xE9\ + gi\xE9s et le maintenir \xE0 jour" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m6 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M6 + name: 6 + description: "Organiser les proc\xE9dures d\u2019arriv\xE9e, de d\xE9part et\ + \ de changement de fonction des utilisateurs" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m7 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M7 + name: 7 + description: "Autoriser la connexion au r\xE9seau de l\u2019entit\xE9 aux seuls\ + \ \xE9quipements ma\xEEtris\xE9s" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m8 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M8 + name: 8 + description: "Identifier nomm\xE9ment chaque personne acc\xE9dant au syst\xE8\ + me et distinguer les r\xF4les utilisateurs/administrateurs" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m9 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M9 + name: 9 + description: "Attribuer les bons droits sur les ressources sensibles du syst\xE8\ + me d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m10 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M10 + name: 10 + description: "D\xE9finir et v\xE9rifier des r\xE8gles de choix et de dimensionnement\ + \ des mots de passe" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m11 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M11 + name: 11 + description: "Prot\xE9ger les mots de passe stock\xE9s sur les syst\xE8mes" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m12 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M12 + name: 12 + description: "Changer les \xE9l\xE9ments d\u2019authentification par d\xE9faut\ + \ sur les \xE9quipements et services" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m13 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M13 + name: 13 + description: "Privil\xE9gier lorsque c\u2019est possible une authentification\ + \ forte" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m14 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M14 + name: 14 + description: "Mettre en place un niveau de s\xE9curit\xE9 minimal sur l\u2019\ + ensemble du parc informatique" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m15 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M15 + name: 15 + description: "Se prot\xE9ger des menaces relatives \xE0 l\u2019utilisation de\ + \ supports amovibles" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m16 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M16 + name: 16 + description: "Utiliser un outil de gestion centralis\xE9e afin d\u2019homog\xE9\ + n\xE9iser les politiques de s\xE9curit\xE9" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m17 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M17 + name: 17 + description: Activer et configurer le pare-feu local des postes de travail + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m18 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M18 + name: 18 + description: "Chiffrer les donn\xE9es sensibles transmises par voie Internet" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m19 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M19 + name: 19 + description: "Segmenter le r\xE9seau et mettre en place un cloisonnement entre\ + \ ces zones" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m20 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M20 + name: 20 + description: "S\u2019assurer de la s\xE9curit\xE9 des r\xE9seaux d\u2019acc\xE8\ + s Wi-Fi et de la s\xE9paration des usages" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m21 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M21 + name: 21 + description: "Utiliser des protocoles s\xE9curis\xE9s d\xE8s qu\u2019ils existent" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m22 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M22 + name: 22 + description: "Mettre en place une passerelle d\u2019acc\xE8s s\xE9curis\xE9\ + \ \xE0 Internet" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m23 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M23 + name: 23 + description: "Cloisonner les services visibles depuis Internet du reste du syst\xE8\ + me d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m25 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M25 + name: 25 + description: "S\xE9curiser les interconnexions r\xE9seau d\xE9di\xE9es avec\ + \ les partenaires" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m26 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M26 + name: 26 + description: "Contr\xF4ler et prot\xE9ger l\u2019acc\xE8s aux salles serveurs\ + \ et aux locaux techniques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m27 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M27 + name: 27 + description: "Interdire l\u2019acc\xE8s \xE0 Internet depuis les postes ou serveurs\ + \ utilis\xE9s pour l\u2019administration du syst\xE8me" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m28 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M28 + name: 28 + description: "Utiliser un r\xE9seau d\xE9di\xE9 et cloisonn\xE9 pour l\u2019\ + administration du syst\xE8me d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m29 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M29 + name: 29 + description: "Limiter au strict besoin op\xE9rationnel les droits d\u2019administration\ + \ sur les postes de travail" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m30 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M30 + name: 30 + description: "Prendre des mesures de s\xE9curisation physique des terminaux\ + \ nomades" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m31 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M31 + name: 31 + description: "Chiffrer les donn\xE9es sensibles, en particulier sur le mat\xE9\ + riel potentiellement perdable" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m32 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M32 + name: 32 + description: "S\xE9curiser la connexion r\xE9seau des postes utilis\xE9s en\ + \ situation de nomadisme" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m33 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M33 + name: 33 + description: "Adopter des politiques de s\xE9curit\xE9 d\xE9di\xE9es aux terminaux\ + \ mobiles" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m34 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M34 + name: 34 + description: "D\xE9finir une politique de mise \xE0 jour des composants du syst\xE8\ + me d\u2019information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m35 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M35 + name: 35 + description: "Anticiper la fin de la maintenance des logiciels et syst\xE8mes\ + \ et limiter les adh\xE9rences logicielles" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m36 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M36 + name: 36 + description: Activer et configurer les journaux des composants les plus importants + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m37 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M37 + name: 37 + description: "D\xE9finir et appliquer une politique de sauvegarde des composants\ + \ critiques" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m38 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M38 + name: 38 + description: "Proc\xE9der \xE0 des contr\xF4les et audits de s\xE9curit\xE9\ + \ r\xE9guliers puis appliquer les actions correctives" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m39 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M39 + name: 39 + description: "D\xE9signer un r\xE9f\xE9rent en s\xE9curit\xE9 des syst\xE8mes\ + \ d\u2019information et le faire conna\xEEtre aupr\xE8s du personnel" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m40 + assessable: true + depth: 3 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 + ref_id: M40 + name: 40 + description: "D\xE9finir une proc\xE9dure de gestion des incidents de s\xE9\ + curit\xE9" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + assessable: false + depth: 1 + ref_id: Terminologie + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node407 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'ANSSI ' + description: "Agence Nationale de la S\xE9curit\xE9 des Syst\xE8mes d'Information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node408 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'CAMO ' + description: 'Continuing Airworthiness Management Organisation ' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node409 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'DOA ' + description: 'Design Organisation Approval ' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node410 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'DSAC ' + description: "Direction de la S\xE9curit\xE9 de l\u2019Aviation Civile " + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node411 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'FNAM ' + description: "F\xE9d\xE9ration Nationale de l\u2019Aviation Marchande" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node412 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'FSTD ' + description: 'Flight Simulation Training Device ' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node413 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'LPM ' + description: 'Loi de Programmation Militaire ' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node414 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'NIS ' + description: 'Network and Information Security ' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node415 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'OIV ' + description: "Op\xE9rateur d'Importance Vitale " + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node416 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'OSE ' + description: "Op\xE9rateur de Service Essentiel" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node417 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'Part - IS ' + description: 'Part - Information Security ' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node418 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'POA ' + description: 'Production Organisation Approval ' + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node419 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'SeMS ' + description: "Security Management System - Syst\xE8me de management de la s\xFB\ + ret\xE9 " + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node420 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'SGS ' + description: "Syst\xE8me de Gestion de la S\xE9curit\xE9 (de l\u2019aviation\ + \ civile) " + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node421 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'SIE ' + description: "Syst\xE8me d\u2019Information Essentiel" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node422 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'SIIV ' + description: "Syst\xE8me d\u2019Information d\u2019Importance Vitale" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node423 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'SMSI ' + description: "Syst\xE8me de Management de la S\xE9curit\xE9 de l'Information" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node424 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'SSI ' + description: "S\xE9curit\xE9 des Syst\xE8mes d'Information " + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node425 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'UAF ' + description: "Union des A\xE9roports Fran\xE7ais" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node426 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'UE ' + description: "Union Europ\xE9enne" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node427 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'UAS ' + description: "Unmanned Aircraft system - Syst\xE8mes d\u2019a\xE9ronefs sans\ + \ \xE9quipage \xE0 bord" + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node428 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'U-Space ' + description: "Une zone g\xE9ographique UAS d\xE9sign\xE9e par les \xC9tats membres,\ + \ dans laquelle les exploitations d\u2019UAS ne sont autoris\xE9es qu\u2019\ + avec l\u2019appui de services U-spac " + - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node429 + assessable: false + depth: 2 + parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie + name: 'USSP ' + description: "U-space Service Provider - Un service U-space est un service reposant\ + \ sur des services num\xE9riques et l\u2019automatisation de fonctions, con\xE7\ + u pour garantir \xE0 un grand nombre d\u2019UAS un acc\xE8s s\xE9curis\xE9\ + , s\xFBr et efficace \xE0 l\u2019espace a\xE9rien U-space" diff --git a/tools/3cf/3cf-ed1-v1.xlsx b/tools/3cf/3cf-ed1-v1.xlsx new file mode 100644 index 0000000000000000000000000000000000000000..9b15fe53b3b11e1c2dc916954c0a00b84fd40845 GIT binary patch literal 37810 zcmeFX^Rp;H)8~0?+qP}nwr$(Ct$S?yoO^8Bwrz9o^S-+=voW)O!E8lzb#zz#Qq}p% z%x_jJNCShQ0Du8N0000G0_;)#)pZ600Kf$U06+$S0MZt=w{tPIbJ17vbTD<+rSq`0 zAt(d^qR0mT`ZxdoZ~q7Hz*LH^^#B7(*e&=cJn7$}SS}1>jqbJ4W3s95fNIW`exF3- zoS)AeFF08CYF8cpP)-b0)!u$aC9&w3W+P6LtRRfa=76=z0ZzO!dLk7FAU z?8h~$`uRIRtA;s7Z=Ly5SV@3bn$BGsn{FwxuGLDUM2Yu>34FTum4f_-J9@uZ@;O5`-koY5vFXXsO{(}gYpTM%ybL}J(I2(YG7BHSyMw!C! zY-~ht|X{f8p-KUVdfOl_R$>HgFI z|BU`04Ceo|^y(y8X<$Z#u-l+t!l`cVO)8=V8+y?*S(9%-#>{U6_RNIhj_+47L6?G7 zJg@9J_gv4+XS2p4k0JzbH>5OC$e?Vq#ZI*W>F>5SaKvOMvDhn#fj}ag%FC)}=2)uZ zg0*M9sOp2l5IWM|01Q`gwc#M%b{$I&jZ`NLttTn?N>ZKFW8AP^EQM*7;TZ`CZfD>^ zzPGOTE;e@AI?G8f`|%QD>V#5}nFP(Zgms~dN7h2Mf)bMcdcTSDh>1@kV_-aTt?#_E zTkClxB{9;_Ea04z_bU$2=B{E*M9$(JwxT-o=2 z+3gTIm{pEy0x2a#b4iufCdC^^Hy=+h!Ak2wPE)yoK#;Jb|6l(>Ip;5t(r1#wC{oa{ z_1og&1%o|x{S294N*CejR>tcGJ}0n6Os z8A2V^Rx5fzo?573;dEhsP%yF2N#BQAFF5j$^f$(oqwX8w+1p0<(EmFND))S4!TM)C zgx~-G@c&HXp9THTwo|OCYrnyO;+xm}o1mHcfs!4P(u!CRq_iTnsZygKKjsM2aIuzo zjZ#_p>$@7LfI+W|9mwyLeCT}3`&#PXN)!4z)VwcMN^u1;W}H-+J?R;BV@Li2`4B_O zL@p$mR%mWEx4w6o{v&igDpMg24^S+rXlR>iU}MoQWyDo!ghaz!B5hlV8$%Bt})+XvQR6)f;*&igwE5WX)5 zk@m^xfv*(9>U}^Lj;+@5DyY^Ct9A=Z1H%`K7SxPYLxRu+Ux;hlCTcO4=h%OvzVIxe z`b|_anIe!&Frs&~)yN|{TCWP->MXpvTz&#nZ8!%j90HEbsc*d|a1%bjL>p;(Dy5aM zk@aD2x@?e#4kdE+ZRT%Pi@5|R0kIXBI2U4alC?Ha)gpn|!@P%YmZdCs5hLJexmCHl zce|yxf?2vnk%uv;TcA~T(wHVUu10C-kUn#lrZMhk`W3DN={i4vP>_mV_1rrTWbU#c z^{`Zu&H=`{&X=iFk!<7KyM=mP{thcyX2YnxbT=d-lA)oJ3R2e3^MVcaHJek^~L zW`Y1Q%I`#?+$?O@MZ_LB={^X@*)?2iS=ZN?$-ABsvX@Er;VGrA6c%>lRS(U>!kE)G z_@ug%(*I(e|EESgaN}ftEY##vQBN(XJ#LHT;9RF_qvc?l^L}M=TTFm+D_qszvq zb{oOkHZx#^p7pFO9f_cD-FFA<&%f;Ce|5y?rKD|U|1^d&_J4H7e_`ZeVQOni|6e`h zf86ku=CmC)J37sUpcM1bBxnd6^A*}yKL@FOWLEfpJbun%-x8`{^yuUUt%4zFv$i8(^Vq=#x$ z6?%0bk;VjZmT2w%9KYKIuYlqK%@E943F-_4Or1@i-|i|8VNw!Oh!=Aw;J-m46+XtM zqG9zh$ELZ-FgvjA5)DD(h;<@B_<-9fHPvcVv8gDFGy<4%fmhf231J}5tm6jGQeBgK zjLJ&%Au>1?3q$LM_4DPGh)zV@GWo(&T7Y+vZ;E+53V=o$R37tCR42&QHhQ}K*u!L{ zX;-w@mznYnb!!N*YOwN%@Mbbq-CBZG;PwJ&`ucsV8`?Q? zgZa{G$IZPQSOSw|)81csyMGulWThwwpZ~I(wh@Yjc0UZ^n8cd{B{xg9-oKJCUW|okEhpLJnubiAoz(pKG{f-zhj6Sr<7-AFo#ldU;1iL zl)NAcEhNUD{*&>@EVh#QXLI|aZx7O!Q_r@&34~&1$rlRv!>7ecN zNys65Bu?THVBUVDuzW-ATh{WW!)S^^<TnBDYH)!a`QBYWWh9B zvZ3xQOe>y5wVS6&`szf}eoRaziZQdl9A=Frkhy8A+wpaVYK@BY^hu=}Yhk9+X*ruR zrcYZr7R^jGq%K6z4rujO0HW?BToa@j$%5No=f@@5tmn`U2{I0%(D>$^Xue7;a#>?j zEHOO%bIw~7{M0s9*7d)8ZfNAG>&t2Nf4pvOyI64TPW2W%y@_x&)#T*T3X0U`s_RyO zQ4YFLVGOH7>n!2)(mU=4X~H@S6dRsk*sY4sR)92q;RuYalu% zh=^PCjTqqvf4Y_j@gb%J%+wmEk+)I&;SScX^z!OX2RNB0Hv+_?Kw^&Z^9xLh7Jbi*5iDZXH3zxb(CF(Wwj+KpjKE zdIQn5%UlOo1YT-*zzTxCj-T`rgn#r-b4m{uvd<&8)vaKx(+L97QiniSrm7%d-M zHIirwj)|y9>SSs+fFC8)_tXZ$`nG~o1S+sE7gGR(xikH2oe~9uHP|`*ROH0Vo;W?k3 zpS#RjUTHd?G&(!oKX0GD$LMOTHMq7fK4)Mhy_iH@yjXCJVT@+zw@mQ!-1qxBJhAEA z$7d$JSp5R(-1ny#`jZ44{heXeX8--)hNWgN$V`@hVjB$;008#C!;-U$r;Vxee*)5y zrmp<~2a2!0<*)G3D+@j;3WA}ER1vPFTeDK+@PIV&+dv`{lB0ul7Q(51^Bhh`T6j=4G$DNv7O@qvc0`g9JBD#$F;BZ7I{ZHI2S zF_l6j!=58DLfmq?snuvwnZ_cesY)F*jmf>oog-cGfHIhhb6v18^=rq(U#Aw`VvKJ~ zTsdP>=FBtdK39{Zxr{HFzqe1gIO-AsTX5shIIFvx-nCjpt~jD7267Xa?iuqHg=Sho zoTisfYwW$8C16h$T_I@9>`a>x~$fspVcwM%z`o5`#0as4iM4OpguFd$foS-feRkmW%WE+#C7 z1bacnrJo^BtNg~FswFIi1#6BnThcc*wE7Y$3*3r~Jc1`9^+UcsID;%r<2m#^su@Ah z{%359&5-zyS){rfj2~{zP;LJQd*8c@4z;`+boPC7=weEZJ!THHoJ^pvuQ)GQ9|b~(o~ z>4$IkOv|k5%bzD|rP{7;*iN(?7dyAJz8XhwF&4OV_09Zju^F6N%}=3D5J`Bk=iPs^tkSTDTJKl(pN zD;&tYsrUX}hh4s{eDaNH=(vwcnz-@wP6Vy(s$E6K-7fxK(0j4zdRAr*Pve=Ff3)334K~b_3 zLFhC6wtO)QE5FGz=Sjn>9?e$tT}WL45&yjzM{(<_^*j$f=qrPfD!#L%MTMPz{k)g; zcfx;no5g*-nqh^!@?*$d6Fjx!$rSNjb-(?oLT#9(Fhpl{_qcxI3XTyh(6(jkB>Yu~ z4J}`xJV&p)66l=izIET;>~p?8+jzc`Lw~)}d*!Mx>U$*Lo_XVo2*P^JH?7!o<*B2| z!hYx%P?p0$)vjrUS{4^1Ipb@BG_ML#{?2Fo!2jQ6z01BDFz^2y&(^=p7vq13M`sID zQx|9Y|GF{%$J1mduh;%z_*b@}e#WKQMQ$SD3=oP_KzrU&)vd#22BBsvZEb3~=yWHL zQley^Ph{BH`!wh2HLoMD83U|NE~T|#fuaml%aCf_4D$PJg;SEsKD8ZAwJgXtcX)FB zxgWf;__sFzxda8SptfDNP9xbC0?zDAxXo?K*j4SL728a!ntRK4$!aukgOrOptxrN@ z*UT`=t4e(f5#3=c`UGewuNb}7Ca1M5w7LD3cJ7~a2x9ILYZ9d2o&idQqCc&+vB%h< zo_U3g=tm~^kqxBknTFqjlG28;%q{qYnYu=PGW^DvhX-O_Q@@llEM{nMjr4oCsJ-;X z7EZ>)?ivqrYfoU8@slUsny62+(rGE0S#iNky6J)#@#KOZNG1JD(dt#IoUrMKXY@I< zRFSARO+;uHL1~IT847H9us`pF`)5Dc$-5(GbwRHsLdJ>Rh9KEdqZtkmW2dhhfnZ;(f= z_ia&E{e+&bdO^q*nlPp)ubvP^36b`NqlCsF43S2~Hhu3cSBWVR z-H&4Wq26fN2EYG4_wRpqDM|BC!2~E_`lLPqniU9!1C{8ACcQ+%4{UnPzgaocjfRNHeyu+1oo@KLiNa*I|zee*VKJ){_6c*LTncB zkmU+yv?O=p&|d*SuTUJ5WuOuQp+1O=HuZ%jhz9{dYraqk0Z^H{2!moK(fMzDyZ>Vu zjg%5H^3Sp~QnORkYGabJ)D5akbIj^W6caMD0S(d*(0zraQc#lbq@?fd40>W#Mp9OY z5$4s!32AxyK!<0W>u2ew=%(oA#ieO$|0%QmuOe~lndz0_Uo=*O`TxY_zm#Hj@^;(? z148J3<05PXt`rfl3>4j=L|^%%hixuIbHLFu4W#?L%`Jzf0cjbkCdCwo>~B8e%+t<& z7R3|jIwST{CN3^Pe;Mpmmju?N)vLLkFOlRCw$Ev z5h~>|wVPV$NS>AUcdxmAQ+F|0j6Fi5O6uJhxDWj2hXYGoC|7dzc{ju`cx)gU3brf%?NiBUkU3i4V4U0V922c| z(u_M*{@j@hZ&s7bq}!$aZOIruxY(UPyR3VDFbeh*5+C;M0zXIADHIn@6%l$kWv9ue zKa3?yRtxxBsouSAWa!TcG>RXfYA8QE#k+OP51pt5o;(I=f4#MFtKl&*8B$SLFqBC> z93n<;zBaG?{G-2?Do&x1OPUWa-*}x?w10~UEe?&$v-WY%P*aFFWw_84)$jBbfAB^M zo_Tm1YQMCmpH5J+g^^6jY;X(4mRPf z6}9QN%Png8Y9~#+*k8@sRm<=uwtv09d0$E|XN7AP$ZN7HiO-p>?j!qe|B}@uX)BX% z|90}eYp|Eig(j0gIE&y4iqt$Bb9ZL(z9S^60Y6gUobB%`Tq)=sjd8i4?E_B9gqB=1%j~G;DHI`u9gno&nyyDTLoaI#8uL z6r$w;zE=lgk<7?zi75%0xim7y>Ns4${83y-j6iWxg0_^T$YInOPOtuO6N1DFbDR>l zjHCzw5?WaZtDl5Xn0#44jYuo|)j%PllDIcsU?sT4>k3LxhBPt5JXO}PW~hKp1YLxC zzGj>O`IUN2o?>jJKJDOuMg+a%yEs|eng4gH?<*aTvzmIM7w{t-&=)|W0I!BBIo~`a z#)=OHs7RtyY7Q{SP{>qNDKwEz%v3e5=XvRBKf-OuM*9K~toKy9p9A$M{w00#In(|+ z((PzxVwOtLQHI~DlIfXu>f7Udlm2^W$3;n3Ra$e}RA+~KwcV+z(lqa*Gdt7U@%+M0 z?}ookwPDJMou2$&{c*AKS=s#zFVFXTHQB0*_I6$UeX%m^)b7#MyBkMWX}NwgjlK+% zmp%Q*vVEwR?ez1yuwuf|TTylL+~oIer#t*}u`zd>O6+mjCejoB27il6t?47a>Z0Q3 zyuT<|TfWEUl3brIFU3~7#nzLnqGwB=@7*cSe_4KH*~oML_pmxUi@xX5zoKI1Mx zKWC{-cD?I&urd?Y_Xy7V>~P#iWyAHuadkFJyY2V5%}QLhTjL-%tQ2n={r1ntml5Yv zs3>!9^{6WIn6lg*kN_h3y}6YSW~Cs;FOxCt0ep^J&9{I%?C^dI#d}cgtofsLPEQ zhjm{!#Y6rFhgJ9tAI)}E2N$0Q+CJAedj84c^7>b5hr!#E!9V2r=c7Ml`0TEq+s5MB z@$q8jz`gzC--dpy`hlQk$2KMzR~EA}A3knyQAxl~pMBRcPAXsgAIP{@I5#-gTkP0d z+*iNnChI92?T=b;wtgS9<{Zqguhmp&$*P^iqvz?0I=%pyvKOSYojL)c_1y;zoL!or zoEW8miKvHF@OxvVc5Z4Zi;G!*sAk9?mGAgNECA2T(8FTmck+Zr4#26ufZV^N2ZL0# zLqgG^b!_kPL;$rimt(&_=64c#(VbOBw`M95Tz)t8g9`@`Lu{4J)RB)tyusElG3p%3 zk7HD#4hvEUm;)@K6EKE6ttnk@1KayvuOBYLD;`8Sr76j{*plXUf1c94N+(E(p_6?x zwZFV}nsv@2CadTgI`9|;{$mYsT#59KzDyVlnS5ZVmnE ztEm|A6U^Rcf3R2IUDU~fHsWZ660-i~61Km&6@xHod$Z&WqZnk%ojGO-rOr)~jzWhu zm39PAx~g>=ICAsUgvLZK`e@8m2`kM7)tbqcG4$(A!`|3Tg`l0#(7>w#vkn3Pqo!4L z8mAQt_vPlZiUP@Ev<>{Uu6%4HK$!Ywu_7~@72sK;6oqUI4>eZp69Kc#I*zJ(iepRZ9;~iJ;v|&X*((kQzDRzA7aYB;c)1Y03dBlSm}=632rU2&kh%rcNr33oDwInZ*+kF*SmQqzaRcDz3MQK7>Mi$WJbn| zk?NPz;A^G(M>qGJ&D~*|Qz7>-rUr&{%W`G^v-;%x&UW`Ke=;)SGSvw+AD|)Y^Es6E z5Py{;$uCcqeAz**<0An!&M?ep;FvYx-z&e56p7V)$Ibwiw+l3Nv7)yX(tb$(5Pu`J% zTw&JfkER$ghp7TWB5$Q~KNrQMZ$=gp&TG@kk^ON7n&Tj>qyygNLsd{;P)7;g0B*!Y zh~TPRy>9{A;AQXF(f%^*>hYrqleR_<+I<5|WqTiQP(N%QbZTBBUH2T*C&}jH_v*b( z2hWD&B#ldjTK1j4%C&|10tYiipxna3F(J-Fgy+;+i5`)c%jbkU+U93i<5+(nQ#@+c zkP`53^SdscwPrK?8ZwrM!+Z&hmHaQlc-}~I)!REE$x0W0XJ$g2%FPK>&GR=eLxbm5 zP6;4Cf;e^QK0e&qwPuzjfLRZyaF=Q4pq#_7gR|#04_x1%WH6@GbjzD~^id znJUapWzkb6`zRe5aL6*`Z)|{!(QFz3-~~0GB&g|=zKBE>7w=r9!r|!MW%!L$ZiUF2 z5#9?07}-RJTz-181eGJ&AWlRprzanhl)Dm!p(P)=%;1B|){ph_7^i|di- z9G?%OLz(neim)!z7FERK2M8WK2%Fy0_n`y*%mPHq>oX6(EL=aIjgXhuF)f@;bP*Ts zd>S&?r70wA;KW@zrxww|7_$S5Fm}T{hFT(vgNL#$0Ys;;??A-Tav<+*$~3&ik6{>H zrNwf3so;c8wJ6B@kQE50g>~nV-HfpDWDS0L%)Nyg;dW@hX023sW-NAHVpJ?R9FIzR zMbsQx8#9K~Cf01-H#!Az9`clB0T2f>UKV_r+Hv9kj#%`>IZ`q@fB3CFwAoiOM>#PC zvP;z6ay=e{_Qj$%_}Lj3ip(oxfMbO{rn!t(N|kgIDD3*u-SBX8`gysNOGqcy@-vRz zy_?q$vQ)d*A10Fw1F8-nUTqCK)p2yWd;A-b31}V*5D-**G_&7IE8@j(SaU^;b{;}~ zoxys|(KS!MO^^2ag+YwEB!bIoqF~{}x~V-WCTpKfd_}KSu97o-gw56o(%@ z^ah8=-}yW+Fe#MNCHeS0ZDKK0M{a_P3>+=muYZ>BeET74h3}||mf88+f4|x=nqKgz zCt*K$=Just$u%roWwxtEoecVkHNW%@bi#}TTTj>BBytnT^~%4?R2tgAHhk^?!RGTD zugYDAm|koP9Sc8;2IhBE`w+Zl$Z8l?Ad7*W+bJbh3JI{=RNB7&Csc5$SI0L%vt`Z& zDHbxr_Kxo&GDCw!VL!^dg8hL|c1?y8{((G?4ENb5p|B~lQ{%Z*Ljp@29XW<%55_TT zXU(QbokzSHDukjR3D0GaA(?aiRk>v=0G9ec(n-US-vyE=`!2>yBWq(%(qe z;-e_MFsUhX0PGWaAy@~`Q^cW^I;IlG5 zZf!#>^sFc$RhAiH1lU&IA-Pye4qSdsVwba;SSc`L@v+;0RvQf;Rpy)&C}MHy-%vYX zM7(;$3|i@Qva-jKaGY;LA#DM%L#dAt$;KIq_VlE``AtVW;9~YHF_vK%D&h`8XG?BS zP4^DB#RWLW|S{~?v z$RyETK!DLg!{`PtoC!FNcBaH&sP_}^?};%30T!plO{I=r7X=UG{O=T5Q!8+@DoB%2c!P9 z*)&X>e5HN2(C0t3C?EkESRoSH!4(3MFkTUu!1;68PIyWVqEcYil60k-kZjRV1H*Q2 zu8~HfK(pAqJnsmRt@umg-6B8k6m-G(5N?#M|9_)6(b z`+1q+`IhA;#TLIaTq(R26`Rb9Hl^Y2#3w%TXH|}qydp)ek|WmR9tBwd0EunrudQ7l z`U2ui+j_=z3{9rkNh_z>)~g%ozw5_#IgJOJk;cFe$nV40R{3;%GZVMinMv`CoOxO; zf$;a5(FY8NOF@rxCx`DQa$V>cG|6ys;8p>I({%@#&}qZ9+GZTa%k2`Zgs`d5)`mzw zyVzf&=X`q=zdAZ;$OPKA+XKC^^&6!YGxGn`(ZMk9JN{3*r(kLNE$-sa-tG*5LPpmr zKi&iUCli@Ky)Y){whha#cpkUE2T(15^Bj4YBTSh_o368Jl8?hn#L?Llm4B}Cgz?;u zo_H~*b7HF;>V6i{8&lixg+bvY612@JB3U;*D9k)PaK@Qh?3Sf zm~?C)Y!&E~UStFOP^N<0ixGl3-iBjuN}z{qJ2H8!kC=Lj9XT#Rt;TOVCtAu!9DqE0K7y+U?UX%rVq0+FNUL5+f1 zhJzG;gZuA)zfn)uoyx;5He|S16l7`+4%?1kY*@5uK)2nH#ab~X^@&z+HR7kku6>?S2;?dsE0ryFCDD$X!l8JO_2C|Rg`dA2Hj@idx^iTG;x-DSTCl?6sXoRJCwOdt) zRWGokSUs96a5K}apZ+E=>Vw%NU~kR6e7sV|gJ*F^qao)ur#KY=FX8!vDKGO55u96#!gPyh9ThRIGGQW1X7D?j*IN+fP z8qe>nqoV~>xcTJx}C9Ih4num?ZPX;PW&&C!^6GQh0hZM`)S8o7+{-% znA_k2lP06g5#p?^HtNbn@YUB@ud12+NRC zJf>C0#e7CY;AuktA!-R=ZQ%FLGY*~U_G1pvJMuSQCS|nDb#<>g_QgCD*eg+64K_p9 z)dZ6s5(DB8mHyJz%KGb2_Q%L&$Sk|PxW;@*Jp33*%Rqsx1c9)|!J%X8He)Pw1m~zp z06>Hs!8ImmNKt4qTmg^@#E)!-6X#f=(60ew4A#YerxY3)`#S6>1&IpbP{I5azrvVQ zxM^5en#;HAm{=_Y#ltKZwSs?~QXkaO>K>RfV?(8DY5m?rC1*cmW*nC3m&Ga0Q2}xe z3i>BU3X!@D%FTW#Q!%>>VJNMqomR`}SKlzJSQ~ZDQQN5(ex4$oZIFO2A5SoC`p zgjGuc1^6DPlf4QEOG!KAKsHCq5B+4mEs|HYC~16^jdEwG!cta zZSfv7XI!B;C(pL`&H2%M9mB9Jbt#1P)$!+WkX~B9rd9U`E?&tb(xpo9%o*E6JcVUt zb?8T3n#2S@^+{)g#UmXhNs0^=y7dpAx=id*YdZ&d+V+X`dF^N$74zjHL zVQMJ@(qgLfGNzG=lQ1daDj}W-NZ!_32(QkeB!7ui@zP&QOJcjhWHRrza^#U6{GF6? zRVQCXmx!XOYD>9!aGJv6;aj^dRh@8@c259wsk7wW#5d6!zk&=rq!BPZrbg2{O0$@dDYF9}RhY{WuA1;3LU6Bjf zn}v{q>FK~3J_X7mrjz1>)q%T3D(66nzVBJ1~W07f~(vGRo? zsANb9z?!Z%QUBnPTo2$3Y_p!tsd=ngL#1ThB!I3Ps2tE6FVwDua+;%K;wy4S5|^P? z_iT)^=N9F$cyQwlEvs4#_6W1{p4&GD-3IWvb$bocY!ER-VUvbb>{_>(P^w9)$8(9Cq1$8zs&lP*pj z>5Z)Bnp0BUnkbjG@ER9WMHAM>xu6R~0>~M!w!s_-h-G$K5nFuP)aV5#vP5^fprhSG zkIQ?GHu>s4cad%h6k$!a*u0bojP*(ERBi?Buk6TiuA^_*6v=Bnw|NFwEj+o)&w z&`*h;B}4S)a+^I+G?=hFGcx60$qVB;a_M1h>v+MXHg_5$4*3GGsD$eU~W?U5ieLQtR&Z^=5LhUFxG{Hw^;uJG5mt32(K$Qumj( zVoP{Z=o;)Ks?l{n|M_?qp()bNE73+(B0>&Ptw zphgupdnSC7fBk7|h?PCN^=jx9BAG z@sVf#aj3}f3eh^aJSL~oUg)koU0M0D(GI$t8cQA#uvYmJ&&+nT(@-s z_|>DB)k8LZ-viW_xF%Lo9*mA&{Z92?f|EBa5Cpr!`8ilPeFJ`C99;uB2yFttm@CaZ zyjz~6yrdI+kR7wBlbVa?3PIt>o`cVYi8PkA{e+mzLB<#Pn1bT&)TeSB86tD8uBZNt zdXJ%sWD5F6e!zRX7G7uXlWu?_fXtzD)J_}z@fMWB(o6>h>!%`)$DD^TKypp%C^=w$ zUYf+38$$+CNFRvlSNgq0=wk3Im}bFmTaJ&sY6#%HzwTndcPlZ0Dd+l(8r8O}nmuG= z4wW1Za^MBpkikJQN!u_iUtoq<@Se<{DRM184cV6|r3~?da29@=j_9k^VBiRW_F@pO zJ;=s%UihSZX9!iSqd>AIckG(l#8gKUTQp67AxNYaQ2QTa&h8Qx;8Y9W7&zyLB}rNZVX~Mk*H#59 zs-#YGPy{#W*B`W$d`=5k;oJ*=%uRyf`k?4DsVL{jii-Ab?{E}5V?#Ddkc7HPKpg&Y z*0Ik?8O9tjiJnBv3(c=9>UO!4KbW3Grnz@!xv1ne%y|BT{3VJt*tCltiI!gElpdAC z?u}`&R>VvHp$Q+2b~AvVQM4K&2BigHo23u86+ZnS_FX7|*tSH@&K@|uZ6_-t zm3z*~E#Za}eXqRO5RV|-yq4Zh%O90GHSihxmsrsqyW~;r0=ADqsIf#ugdqj;@8_9~ z*r|F`DW0x?jYJdOu$%N@EXY=lWb(L4@Q+-nDZW3$pIJ9zeu1{x-qWK-%7-l-gcVQ4 zz55JICeZiLpNgrBd~&*-(793FW`gmKq*H3Qi8_$?#mE0$3(a1u?_Ay(47`&cnyc( z7#T+9po;esl^-CsP|53%Z^r{YHBEW~KQ&@Kv|D0HjT-Qns#v}}f=_h4VF949HO4`z zE2X6DP#F~Ajm8tbjs?2cp@i7mG`@(|nHr!m)&zysBV;6Ic#Ely(nyMj2+N% z9U$V{O(M?7?8x`rG3@0Fd>gDncOaMQSwkzvFB2L%Tn#?%Fy z;!QTn?mn=+N>ZRhW|O=wke;R*62w?`;5pG)7m&;+bivRc6ZqA&xpk*T^m|g4gRBUY zQNl0_-j2AjzBH`ZbW+vrF+7YYcPQH?#QRlT_s^5NNhxDHb@I8d=b3IGjqtU{0_u`n z3KCNOQ?L>JLaE_uq5COEEl~AUCb1pv(RY!>nmQ4y-5G)yzAVH$f#eI>5Son7IAXA! zeaSr^O3)12`=;-7Lor^hQ3gihd*hcUDk$9}bOk|-Ow>)e>vMw_hnpfn>>fivGpIpU zYdVgnN5_-9J0&(Eyfw{336*@)vh7*Z^E%ajmdZiRs9CG#5zE?P6z8MR#rI*1wofpe z3U)5=9Ox%v^S6D?1*A|^PKdZ90e|YM9;+3IzYq{1ET-{)|EgU6ys1korKU+X3`GLq zS7hI)duj*6Er2#JNkcDgel}tId0&UQcX;ieRg+)EA z<<;M!J5^2ssjis8;`hRwyNCC#3UnX(A%Y|Tlr$3rynU%m{-(7{oP4QnNr)Y6d6?3i%+YNjjD@2lW8)f)B_MlMzu;^n!fT zXkvVxgz@P9eStK96?qbg+l;ezD22q453>|Rk%VJXWV~8Op0&k5v(vAazP(}h`Ch^g zmKPC$#RYjD*_+jpktW*)5*u^nK&MVVe@-Y#`l~d!X;n+kMUZeqXse4I??;i$dKWhf zi=79V`Z8&+YGk^}eS=C*=x7!*DA=peGc8a4+jNL1jg{DfvviuQeU!3M#=3urX+mFxqB7_1=MZky3u8hDK@` zdxxuMpIz>%;ArXjmTavwxEv1d2ywD^q)@8{<6ts08F3OsZ89>o-{L}kNssr zcEyKMjFufr7&S48wMz^UA(u94A7yncc4S$+C%hgjjzx6&(wxif<%e`1hPW_`-*oy; zzsk~^Br{Tci$cDnN=T8%E$(!q_J*)f%5KbNLMKq#UCittY{z#2p8=+8`4^cKW>$I% zl-_dlVgWm}V#mOYU=wRcgsl5yz5I06-AJ*3>5{J^PF#s1{>g^o=;G+!6xsr4W>-x7 zn>o`+-~iM)2C~OHx(zE($lR{n4b-!Y)3`$AKY%wET2~!xUj^6T()D}+c_l1k-jD|- z1zsqiU?F~3@8kWv96OI0t$UXBZvOCe9wy>9d^TQ0T z(1R++0R`V-&Y$$}7;`F2s@aJGho$is=pDx~ocaDjPhf3+m~5T)B9ETh&Ae0DU^7dh zD4qI{TY?oy(J|$sJ@jL{di`R`Nvljb=(nqdMw%~@1>Q!BuG7`^WPAqze^+<0;d7AM(R*>H$i3ltg9is2br454NJ=^KZ z1T^fXi9Hp$N@pr&-I#QG4b$`p=v8hb@|r%ptcy~)&r{CkfO)*7eW00wJfZE4MPWNS z6Vi8C$`_g+@9xjS6^gh|(3Ra5QQa0&x^jNyHVJTHz|(0;>Mfs#t-*{O|qQf`-4`R_nV_wZVoJ|-y10|PV*4s1XAEbuD`&F1cGXIhc3 zB6=W2z{rXPg}bn3*$|Rd8u`99k#|U8!=7wWij`E1WU-D;q!Q%|Bbra>rO5v39T z|BJl0{)#JT`UjEV!JQxhg1ZHGcMb0D?hr_D8Qfh44esvl?k<{XPmVi4(l}K!KhSsgj9ZOmQ;iFz#HJ4l< zs2o0e@v}%VZolR#-a7{IZe-PH``&K9>m$C8bS5_nJCfCSQ@78|QUD|O!-ef&Q-3NZ zWn9yK67lZP^%QMJM@a%05=lN*KJM=Rl(muH!@YTlJAf&s@bi#YHn}luRbS?cU8%mC zfkR*n>c7-A{xUd_YRN>-RBt+<$)7dSClpF3roqLoMjT3 zBi)o2Lb^0iESe|dM}BR))z%;3voXfxv9K+OgM+Di*RZXOzR1W?Y2y>l`q!Zz zZXhyD-zr>WN=R6*w6egH$3??RL>JOU1;dOi!qo5_j_e^ki=)l_xK+M!k83DMvJyp+ z)DMwQz6u}9jj@7HNGY*X85cb}!Jk>tho0FtqlRAV`A?DPq5T}z>f+KY7RyiGYP!OP zCqYYpP=>GUBaCvR#A~r@sE8vW#8@EtZ7@|F`wl)M{A-jH#Lu<5rWw9-{#PVSWc zAeELi zc()pB!+6KV2ID(CYq=rBShN}8S*)LQ>N#j~c_}+AYjkp+xtlOYw=9@$smV?sd%%B> zF+vVmlp6@Y{NA`gJ+5W@I1u}djNDzibIUs3p^YUL`&jn((oC~uYo4A|7koj&;t6kl)a7R1?@`%U?5 zj>wGyCsKm!o>ynP>jhqyipSP=-N$Krzu^P}JMi+_G>9lXtgVd*^=q2# zQBwv^-=ME2KZbd1ru-7_KWi{E6ayRv?pnJ=VD z442SMVeKi&|3$iDJ7c;*R<*Sn-!ptE>OyXOdK{e^|xxxut8Bkc` zoy6jIFzJ``j#)_%36D1GxY&*omY^R^%Nd$wTO?&Us zK#;H1zuBi?f=Lf=fL~wu{i!W5RETqjXBC4R5-ZjBW5pg9TVr3j2`ZE+viBC=F>F8C zGlK1dIUNW&_=9~I&Vi(}a{hzatr8+s`X>#7?p8#sC*QjmR8VCqQifKYLvEJkFIGt^ z&cNI&n(a>mOiT6!9*Oy93S-wTFwT!(D-JaTn^Uy;qC-iEi+Ou9*l(&KFPsMx+xem? zua}gL&b7OD$+<66sHz@w1pKuK{hTg019v?_AN{&+k^S+v0~qbLI1n%OQ*xvTw93R2 zloG-!@iZx^Zr(@?It6I_^qRJ~WvhF9Jt+rp^ZK4;ucc%*uV1S)8@7Dt>2c}00|T;) zUYVXS(m4Et$;SH&QqELxnJi#P6k~Rewl_O`=wHVOMT=+vkfH@oucz%|_S4VAd__I} zpI9Z(oZA)s5!?Ot5ka&R7<3De+x+hVO-gsADbEZ3wH)kpvDO8-LUOY?bN<|Z$Jsox zIfy2%nKfbqWj)o(H?TeeS!$&a=$cXAaVds_Il84O$iBN{ z2BodLsAlC22UM*#|1g~Bw(h}l0X^;5L2|m`{#lYp2|CO-H3zYmd=VcksxG8hMP_u* z7*p6Ig!z~d)gN|Zc^Em|p;*GxcB#V+W=aSf6d5y>n42pz%+4d;BT_{`G%<)+A>-N* ze)zi3O|tsY+D0P^Fn~@y&8Gdb(Ds#R@g*pkTz7C{k`Sag-LGeF8ZaUOO6*5=E1R zmKqgSiu}en0jAprbqSJ7bD)(&Y&Q)Mr}+HRD4@%*gO?9vk$qzYUL7JxIRSh{;1*GU zQuF-vFudCn`PgI&!&P)Lw4W9@KdhU1X$s(L<(JD99YCUg~B%k6uXj;VVtPHb>8xslY!kKOeB)zlJa7wimI7rwROX!PFDN~KyI812%y zJ1+3ka&@+&*6p~c=s1aJh;RAz#Apl0=RWv(jQlpmAhnBdz0SY3OrUy9p!!r`nDCe0 z^KZSE-+HgV_1=E#z31t@8y$?FpP>G0D*wC1oT>b4tanB!-lnK8!<8TZyZP0>yf^9z zJp2E@mIIutjG2sZK|ss|LH>W$sJUH5A zBGiQK&3{L#U-h_LmWBWq88uRSV(8pX2*NR4pwv=Mh*hqRynhEDvdOU3rE`|FnU2_v@r|9bIH}>B?=y0h5G!U04gnucQu6q2@n%rb zLO0^&w^QcueELK=_ImR1dxpB9Kn_JW4-IZw! z(~Q(!28ODTJ-<24QBN##9Q+I$0we?uQuX-r1YN&s#1(97E<^p6cbe0?2Gq(qw09j^HPEq9Fv?@%2T|LSP*q)M*H$%VCt1okItF8KYP-4xXWdZf!yKLZne zcgOG9vi)-VC$6+hD@^$FHG+(yESjqUI@h1G{uZ-~`rod}UXzrN^C7hOl89Bj?fWm7 zPJCW3dr6_T4gP%{f~{1mXE&8GXP8c@Ou!rWzQft@_p`C8mTQlmpvCR(6GX_~HgNH) zQ^WS3!C%c7H0v;fEoN{Ik9zHCZC#Qn&JrU806m1zf}l&l4`-!?Iv&J_P1Wg##F5}` z;*|Btz6T%T)$A0p-(?n5^n>pj^8g=*`VJ31q+MG=vr64S0{YXamAnLvz{bNUs=s}G zJf6g>!UpNOOJf`#N%T&HZIfolcbUf^!_3tqiK)kTaEa3YRL5jyUDob@w;wPV;6Oz) zkgj;8;&A_QA?E?&(2b_cKwXiqAfobmtrq|F$q^!cS-Q8vzvt)Et-lX~f^YA|Olv75et)YBK3;sDyTBjPxal+ap#H1+@!GX^o?`I#dF$iy z)uHR}%bLO1K#Kor*W26u(xKu9=s6>&bG`FTsq(LW<;U~w*b>R#x98KCE|q?ZsAW|2 z+T&OU4pX|nR)uG6(a#DjBxDCgq8AEbG$3VB1ubQV@fgrn-n+@!3yH~7%oX7McnmCu zmP<$VR;52$S>xvV1I|a5|KGPmUI29`)rZxl+pwrw)we`{=an2$gegsmJpHc-2RYX| z9W)eIm*Q-K0F2MveLiwzAJGpU5XM1x15UN9pa(K;Zp=61QUX9P2P2uSTM`N zBW{jETj#-Wjk{+X#q7z#X^T&96JjRF2<(d)GJ9U>a51Nr1plS~tYS}IG4&D?Fj)vI z#|=Q&au`J)>B8Nx$YG%BAE!Z`K`bl)l$lXXX%-gf!@m@456fJLCXjU7YaNHHpepONpRQ&i4UXoDtlssA6u=zr{uX&P6>}Iz1InGO*+Wm_gG>wScw-YRo<4VMDjeEZ!9%lG}~b=DRl;a>h>fAM;Yf2P1JmY zYtQ*jWrclP?aL+ag{(W03@!$~lG~k5RYFM6|70^udx0^N*$#VPI@X*(=UMv;^&A14 zSs5O-aA6HQU)&3sel)v=TH~q!lZI0B`KU79vu>~c#~h_B7`pTug7${_ou> zbfS%Jw@#>OrP6WSZ$!)Nw=J_37OF7@NsGLnc)7b zgl>N%+v7MVc8x33ZWX!d3|Ei!jEeN{hC8Eu;9i;E2?u8YO~}hipKH%FepldDB;>(3q18GNDe zEx;i!XGEY6ERMwM@KZ9K=fgfSCX-sP7}?q1`iM2Y6Lt^-^RndNh;EO!CJH7K7E^^5 zoyceAjKe!)Ip+h?jC{_oY~d-;7)-7d-jnKYh*;jCbTRIQf7#mMF5x5xtH4?j=DMR( z>or9a*)9CB4o7Ma*8$g3NWQ00xt-Q;v>PmwD)p)BKQ>g=4p(_Q{7t{o@IAAXFLGm} z*z-QKX2I*?a?K-0-H+raNi_rGEUUKxpNXWsTc9MNYA#*RB>YB_j5d0H%>l{w#lW%& zUM&sSk$l(7>7EMcdH}*6Nnh`nNZeDJe~^o<*%_~3F;JUu*ds|}Mj(79-}n)OSzxWh zF~QuM1lD9sH|7@W!5*S|45nWAOS#>>qe)j2nV7#TlMj(>s}IWtuO18P3f6`NewkAs z7J^>5x8<=e0x^A00)=P&KKYdb=b`P0OVj?+-;ej0uJ^;Pj|Y;!ep&bFL?xvkB6j9I z;RGPzapiai4c^g=UwlWwz=X16;GDjfl5i~z$?wuuGrnPLKCLP0kXGDpJe8j)w98x^ zu$%4ymBWdf4;ahwI)ll&J#0~<$*G~IUy_*9OuLioBiaTDfE=)$`^ne;+!A<0kz2Ew zW%tVI=XKTVR~LP0-1Sz%n3)a%fHPe z88Q~O?I{F^TsnegD(@)Fd=Qe`Zb??ITl`F63%LD7Nx=o@9#kr%^0Oy)doxxe4;Tdj zlK`)l0IDg%0WpHI_cY6(ap|&V8!?iGj!&ftY?gS3alJ*XmV^E^rpW-5o#3CbO-@O_+N6uqO2rGQ?bHwlj+0v!&!hfq4yVwyD^ zFgY!A6q|3ZB)aI=ptnapdZtWSbClfwq2U)h!<2!3RemA|hia_fOuwy(&m#!aW{NTJ z4Q^Vi3q@IGhFzoQdwp!mielurR8HB=)&d_FmjFyH0T$${=f~Z{y3!r>)~ym!9bED& z58EC0942a&hWxCd62ZHL%2wiGEarkmZEeB_1DB*!DGA|#)E^m{^$5z_U6zvH`1|X{4T51&J8(#al0Y>j2Uhjc9ou6I& zurToyJ9)>S8?0YMHS9(tU!`t@SwIGbSqp+OQeYnK#sSdLv?_81HHGTlYt@21t@RPF z@NUiwK8AXmtcxJTY`$PDOv{3{z2fR0b1&$Xe3?bI|3gz(B-KNxm2}lm$Oh}5Z-v2$ zbNC{BY_MeHmSGP(I)>6!KuLl+E49)QQ6=AMQgG0+&S0r-k9OQ>%5oD_M9ybkE^DX- zzE$izDPRBcSL!|4O-B;gB2;j!#ofrV3}VPrcghd|bIfPZHW^H5H+q2Ppe;7;z)fPF z8D6+M?$h@IquH-p#$gT^{n83OUjjh1)E%k$2eggeKSL!St^r4Iuwr#!L%4Bhjb>vE z^}zAFoQFHv5r6pXy?v!%h)OT7cq&_~xXl{h(U~lizj@{)4l}~Z8+8SbpPdZ_gsej2 zN+C5et4A^7gcG{K;czb{?Y^e_T|(M>3J+}M70|8}n&ropiJ!#RcSeDFaS;K8y=`?h zY#hT&F_f@r#-mgalaRR%z8;pbV3S+?MTgp&kL+wnyv4@2kGS}=P&aJDs=#wWV={W& z$m5eXe}3IIog$d|8|(M|4W1CiRt#i8zL437*op>TDErtA^w_AGcvgXZq6a&$|6w0r zcv6P`*X4)(!weg|r<$X|v$(dhTx<)l4Kr$+M|;4o!8yHlBVfMAXVC3G0mw}=RE|Q9 zUBnygT^u~eaXO!nN1CHObWeJ;l;!4Q=nxXr<#Wg@Q2zmJKSP-2M0B~$b0l+j$9*Wf zt@DHW4n+g(0=_Q+OUI9Z<7Tjx*R@8JEM?ZiTL;xkl{Lr64YjWa{CFeZ6RF$|mxw^v z+&HTAei1S$D~gi)mp6c=>G&NZr@fDuZAEx-q=bMORSle@wSPZiH{%TilK`S%-yuk{ zsHvj{s~g^j5A5kPPCORXoL6x*^x#0b$DAVaZwQRwS&3uUea;=$VpV{Z_yF9Ynh)P} z%p@_YKuoNx6}CrI>f*{|_kypf?gZGyxyB2@d5_;GjX7|9%@Sp>*tQm6t^D^G;eiS` zs7N?+{D&1s0CvIKgXG}CKfwCzzS0U?@xk1JcsQ;*7UpnKt2q>O8riBjNbq%BV9GQE zTQSuNAuCRn9@TGQRu#6=%yYAzQ%5DPtV%-XV-AGUZIAW`TXb^EvETOm zvkcSXG}Q4YJ@)9HN7MF1>lJg^48|}?Oo*(TlY8^|^G4Rii<(@2&1f8k{t%X0{{B^` zRr?(g2cSZ??=X+uj{p0)Zn3X6$@W-NxfOXQ6Q@1 z)$%K|kj6z0&xVXw-YJqe4)T)BQ2r}-%-1aa&IGBbonTS+hT#Wi^Ew@0pYI_y^5T(r z{f-r3Za0GH{uXUd_4%Px{E;DH5KTKrcEuLWGg~%UX6~~zn&C1r7~%W-y+vL%H!f7Z6OkG~JeiF2jg42W3+Dm}^aH$%!S)>biQkJ95|mm=7Q zpvCc07~rPw;ajN|{g8u38oM zar&brHWRWG*9@KZ8fz;SgRQI13TtPP2K^H`re7+*P3Oq>X; zB&07J*<4uBDkk$z)C!T`e-E)5tI~WCTJf`Yr8$!t%9~cK7k#cC>TWj0g!RvoYaFqZ z<;F5x#<8Qd3fyRP?hQejnabHyA{4lwY}S_09?dKN>dZMYJfJnl?HkC{0hs+^GJj34 z5ZM^xcrOdGBV?_(6{4LAFiyGou9k42H8jA*uu8_foSY9@JX*=m^J-xR@EbDP{&kU; zq5rGGNRGnc@fxN+jK$gHn+$37V`4j2KNB@-RV|RM*xBlpm ziDQROXeX=eW^;FkKvZm_Tg^!5z5T~^Nu^UF%4B@$44u+W7Si3O-rZZQl_C(rhbOCs zSEh(ZYU3S-Fz^dZ2&vemJ??`0$}_2N6Al^)X0Cx8#t94qWeSgeC4+^!XkKUS`p~|ofNe&>JQQ`@0qa~Q%`k;Kq6tMpih(q`{I;qe zl({_pfwRMVfQqkmzmnL8h`39(_{m1>XqFwKvL`wSAOL~xBSgxiqfFZkvoWdos|Eok z4CqE)UMB66lbq67 z#ArS)VF@?MY<=@B5T3?@k0hsS1W|r@ZskYCVm)~1?0h(*aYOljN{JU$OTan(7Mh83 zjxJN}dzp~#ppJ5nM!|*EX6j#p#;{l;h%8M{GHqG+O&pdn2Z7-mHai1e@&tu0^HM?o z4O3x_n|8f}vh%P=AeFzW$G```t7i>^xmjE~rn^hcnCKPr8g{H$D9xz77r9b=&_6SC zREdqrn;!yZt3~&kD*T0lJ1j5;c??&Wrj)KY9pUT?2rn6;w?U89L%Coza5BbES|)0I zI(S#_JNOgNo9q(H9~)Sm6~4lBAOwY9(-_K#z{HtCDDQgua~iqP5nt>FTp?B6<>v z9`?>l9KK~>cW+@>@0Zx0V3UI8RM5ODFb41M7ojL?^Rb`Lm%b#``_Y!!i$87^D zexld*qHj`DuP)q4^``zjpl(odv@WK~$$~xiIf77eAL@BARxkwMF_Qey>vO2(o=}#d z%V5aEeqSQ)d1=J5Y?heX%or*$Vl>H53h!5;+YRY}Jx8x7^?gXx!qN!qYZz|)=tDtF zVwpQRiz0PTJyoen^D%``+1{CegxJF)?h9)Hq^TdGp+SX%AN1LWV64BqsfDWEo{}dI zGrB2Uv(|EQ>@7Bf+GsIcFoU{~tgEt(oBUiL)W3!po*J01l`@)opPz69DRkXuGfnLD zw-GD0Swhi*?7oGkUD-qC+R{G(I4@@^h)1V=J$^%c4Zfiid_%(@LbOS-bHKC`oj6TJ z>L=&r5ubj@b(Q{I0{(?R;~3U%lb`ckzDm@1=SalYEamDkKaSs~^RVv624-nBrQ>_+ z?|9NDvH0j`$=9g+c%Uc*KERu`>m_dAYk5%66j%+GxQ$RKleQYnP;k3~^nSs)brq!! zt|88YW%j$T9^?w)mJz6u`u;#rA4(EausoOnO*F_-?lm-BMdZnsp1~z!)li&7tRMJ5 z?kr7nP z^859vzCF$dLi29g>EBMm*x<*i#WApss=ON0W$xbu=e?0ZvtGOUEJjAlLisv-@nmJH z^qa4%H18AeyGZwcN3qDKNa@!#8JMepe4f;i+iX1B-n^<3fR;xnE4yO~rBuV_vd9pABR zec8EbHBEet+=La-A~9u7W=t;0rhLd6ldS-TZw8aQ`hb6z&>nZk^ZD2{cSNC!R`HV} zRT9go#tOu6DgB+7Xm%P%$HE=!-~ZfWz?7{ ze#+KoS!l+ZU;B zm5*|m`g5{W5#IV1#XJ;$FTtHaT~5T#p(KXcI_rq__KMsLZfaH+;&%K5=x*!I$I-Sf zr`5Vpt|6>$FX&k3V=*^)0vxoM4c5WJ>Ap6P1M;{!wNJP zZ#8Ca212h-rtJB6xR!O7$3&1{>ruUi4TNc6iX2$W*IaRPxq1*R z6RYX9Qgly;Hyh=dF;1VEzz<_q)EgrXTTOou*p?(J>SCglN+`y|5n=(1I{C9hbrPpn zZ5$+eZKfF=bN?8OHPz5mAXyaK#O*Xy`1%xK$6#JF1>c^h^dn{dN++mD1J1n$$7Mg1 z)hfGxcEM+>@XRb(VtiRxp^ii=0wpY|bungURf>n)@pbagMSO(&m;Q%_R|JY&N?e55 zQi~+C)O(HxAjM@o`N~_l`Ko?mVIXNQs%LyE(%u)c;kDw|bZJJbz(&DyO1&9y=z$vp z`TWn5I4d@RkMdX|J2bFtWx%;wx>0pn-LLmce-eFpB?_ zXrlT#s60DNdefr8^g=HZcQHkq5;w)6O|ki`QUZ`0z1p*46nn%k2=cyH(YoTS96cTzaqNGYh@eqFn%u$I9;GhcvObukx=-(9nw?K)u(clwQ4 z(Wdn#`>vF>G$R=kAT0>vut}uGT2RXsHdrjrdwZ_Mq%G@wndDJ?UT+bzodv3!SEJI- zQ3@#@1sPI(SDd{$e#6}0H$qN%q zHz2bMPMYapzS(ohMcu_%7E1ljdc>|~gA>>0UG}9ehly)8K0)2;jNcxVhib)f~3Din4pd%crU z-Bq<`&Mj})zzhRB}u<#5<_WMNh!GNOKRXOH!Q?K3{Lft(D&+dplt`1wS7)99)ot2bAT%&)k-=e3z?89! zGfHRDN5ZH0L}2IvEqsVgWY|+!(n8|ke_l2``ni3bk^Iz5ZvZmS)(8??f-+X^E;+mo z6aVU}44dP5FI$TXJaddd*Xvvku1}&A5k*;`5b1Mbr*Ee2+m8+{iJndZMXsskRGg_= zePu7ta@C1Zlq^fQw7Rok5z4|5KN`Imv6DF)mB2>N0X`;he08-;-TjiB9SlA39#2@O z?9De2$Y^l1oBD&KGcfL)?U@wRvvl4_y(%RCJJSO$<1Fk)hNk0enA5m*t5ZKuWzmnV!!M}&gywpx zUk`u6?2il2oMI)h)HxDTQZ1=>pq*xRAuJa19M21p#3&nXGW2O+HcZ~mqrx%U0}*k+`(o%=Yv`l?WFXh=ET-Flpr-Up z0Z1E3p|(QesbQ{PS1*W?@m#$>;q$Ed#R7V)m7f30Y7W+Xi|-fYL3@DXfx&pukA04< zn%dCT0w3xD8^$euAc~o@q4xFB_)`=$Zn^u{yxRP}8cB4wI^X6@uVU>ywk0xA9`dbh zcY-w1796PBmN2)6NwPEZXLue8cM1>S^EghenhkibK2sfUue^UXtCnohO1XbyT{Y-{ zfM2%2+MF%o{-KVr2CJyw_+oH}n*`m{MR6v>=1#4A^q~7hO6}m7*7ozY)@YDYT~_@nn~w2#N&d|;qBGDz zH%S9<(UUQ@EButUdX4t$=$dS}=JYsc#lQkT4c?XFa8+;O4aeTpk&NhaK?Q|c+ zEnQ%-@sB|`${Z9|oDtVzi!1=@G?2tTlC0JId6t_4aJ|lIlnkUdJLG(%FB}TSk&;_o zbpq0hbVrSzwL@wZ9u!&=oBwAxLI0X59Y0#Q!8gJ70NBDLcNc134 z(`T@mKJ^|$I?ygI+5#sAXp#ewJpxmfxIWR#=A%Zl$roL!s{kbRNC6s+$Br3|*N%g@ zC)tb zbt`*?c#vIoEfB(-QQpJkPS^;syPdb)Wc(2TIj%dXR$f=O@CUap&ZM7gem|RxdFkkQ zz6^jSkZbcy49iiL-B5YD(b0cR)uJO@XBHxb0X_A0|v@ZJo_m1SIE zist~HdmLQ$Hmc{b`{P7@~x1077E+rDC-M&HT4GU?Xt)~i52!y?;8;k6Fh1(jx3}#wT;3SCXN0J@vXG3u< zS+ZF!Adn1Gy6U=cwxGB^qvcAmw%B8B<7i{;ORLl$bnL{3Zj_Xx`HI&_*j)U$?iway zN+Lb|mOyr5oCjGDQa;>0-D4MJKB#ZoDS4N_r~ipI&SxevfV>uY@pDHi85`~<FkKdQF&?GyVMVqpseYNZhoMUbvc9dIH0fkyipB6cY^ zw#1TV0<(gS#KDS(&Gbc=2TUZ$&d27D6}1o$$v2LeY_FOIbM@6<;zP?#ja07}(hvM! z*XLW!e?tuD*5^at5MW_otGXU^^u)gUA?iiAN2J!$KdSN#-hS~F+LP#kW3Lr|`N1|| zy!qutlUmgePFI+U$wOlsJ!@;b51$h;Df}%~Ir)Yc*_A%Aln<4Qo03}bhEK^6KWb42 zTVq=@w`m(`hI~M)awb6+9u7v4cq_XA&ilti!){^dS}uI4W;YVTk~XkdJG3~r1yHK) z)Bdt)>1<1me!`JDvyi7g1DA_S#d!G__Ug1vK}G^39!By@isRHme%X{(s8jwe)X z;(7uE2wt)Md%4?Y=?;qC*r{WW`d$Vy?GNyd#c}D*qR3HviGSA7K5tVn-$J5+nNRb- z$6Lna#t@XIG4)1UXuJvdsMAn8i-NZl%3_gEk|OopRx$G=Vz5eDBoqs2**>u`&m>!@ z%pj4rtk@~uO}xgDaV}YQL|}w)OD)_mnfFdVvA5S9i4KK}Z#9w7IJ!h-KjgjKAiYkH zy>Z^??8UcJ(2m7u{%EL*v%6@Y%JAUoGFOfqDhz}4!5;=?6jkK zH<*1CKWCzlO-K?b5gCf9qcSXz};fj@uYGGwb(PkkhAnpe`iiiCzNRU z*v19g1(LRi>%N}b<{3nJsg?{{yWd^J%~Z~_!q&~J_?zItGB;0fXjjF5Qbn1actg6! z*?1c3z;p=sq}^ogqsKbxmzt|>%ERJ<(VF}9Or601F_bE61wH&uKf<=o>$dAv`GNX3 zIHgM-y-9osGzi||<~wmwLbn#c&gsx6ddLFqzp9tD=@1ojH^K9J6;w}ftO69wY`sqwX?2`mZW>Vs#izGnvbN{fAMU6?jeNs5R`nGmdKd&6Yri`|5n!JM$<{ty)xOv;W zi}yz<{c|lai4){7hLtmQoU~+AlKAwvBcCO|dH>j0`x?JuGi?{?4zD70&}Tx{Cs#l^ z!HiiUobK~Ogzmzb8@bi4$AUrTf^zVFMb*e9TRI*hz=mrnGPTCn2K#1_)*G< z+%1@r1~g3sn_$7k1qHM>_qvd@8vI z1a?IWJ0rv&18M{mUf_O*oVF*L!nm}$Kd(;ldkrc&FI-KVzAq>m$ZVX)B=#CZ=Oq^S7(l{wc&M9Oo8?49o$kat z=|!I`;G4q#`Rs@cN6@!RJauAkm$WKUZ)Itg&*E&QK~-SfMcsG?f}8I!L&*Jvn`^*D z0HWk=BqiTfv6#~XdY?JfAsNT}(hVWw+fia-RN}wgL|99hOG8=GmC@$ap zHn-VeHf;=hf`d*M^DhBB1^<1U-ZMOFmlW%YH_a)WRuEM1#jJ}+nSu2^^*Q#`@@{`e zj91`D)NEWG7ezIOe7RsY#x`MJ2*qMGkxDy{lLQNEvfd^;jC4wd;ax3Cn+hFEnJ^|Y ztX*KC^32J~mrbEz-<=XAR%T|38n1A+X}Lfr$cc~f`B_^QO?ea zgDv$46WmL%+sZIpMb-O_CLeh%LFJ@;I1WMXgA_Z(Oy)mkusbV~cF>8%cph8(`w0$= zRHY7qkcqF2Ww2a2iFkiS#=7^o!IPAQr`j{l3|ePEh0EXZd6K^L0-vHgoK zEh}Lgh7%5Iq>(B;3Tu6)o;+HGU z&#WN1D=ku=Ja0JE1)-io4?;|g&I>)qT~P3!JU}qO8md>aQ!DyI1)?xfzb7#=P`*>V zq@O%kzH;V3OBn&jS3NxijnxsZbSCB%B_3L=Qyi_I97YU08HLCciG_ak;8q&Vl8xI^=IY+dFytZNE`=cp>&tDR z)8N_E9PVaHM>89TDGN3*B#r{ilj<8H;NrWL7HvXo^@48GSJ!OGJNIaZyth_M zCiznU#|cfnqMNAJocO3Pg_p5pq2D1@u#`7;*C-Rq`<8LQm5*GE`;gHV466xVYHi93X*DC;9FwgTCNY4C1pphORH z9bsH-(^W6L2qaaCoE3I;TYHLU>?(MjS7;b-gsXRJ6oI))9&S3L#oVCmVtg9$raPHJaWlZxQ=pz;bazBJ<8r@BTiI4FA)`0_w!tf1P#!hN0NMwU7@8I zLZ{B&YT^48xTi%Tt$C~;&zgC(;AP$*}dgCe`*ZT~hgaU;@(*-Y)m&b^k|KWjRfDm(R2ZeN;AqSyUCKjt?Ow{D+0XKNf5m zZgo2CH}u;}C1@4AH#RhUw>zW>PMKvy-w6++|8t7~Sc)!6g&t>rUay8Fa2MMXLx}BZ zfxRE@Z(!tUq*lvyUO1e-C%P@IwRVwrB|~wOAZPH&G+5TNJv8ktWjZTDxIV5{IidJP zAu6|$TVBNV@+}>u8O&{4OmFl|ZB%iL)?L|DRd>wiGj43_95pTyJvU%|deQtX^baiF zPufTBDmDQe3VZDfe#fv|BL5x9ujwH~v~)07=LPlC=T96$sgJ8n8?k2jgH{`H2C_YQ zG1y$}aKWuaT?dIi5v8fGU@5OHW~}sqBK7}}5Sj@cG7E8&3(UWM{_jXqLH|Z_jXSI5 z(E&COKL(g6#`5%FLROgIcQAwEbyc~6|BUr2*^SrloB<5iFIUo)@*{P)%<8WH@Ig%G zK27$UIJhTX=i1o%Cq@A(>J?zm_iTxEX>cnwUE0;G2*tM=~ny|)NB@~BRc(BZuSQtegIkRsC2Gqvi8Q#<1*{)C-HBV9ARv88wDrZzT z`rZgq^4#`%uKou**0iCPy`@d)E_Yd$O7KRO$G!Ycdx&4u*iYlOmuCSM+&V|A<$f)5 zoC~~0_#E9ZrBb-{Y{I|gFhK@+S9Tj6lWA;_{O0)WT~8!E1+1QpSow-hG?KCaOY zr{C+Wtltzqw&o7gENw!1YPWW=sV9yR1E3`BP?9A(U#1kWW`ylhSI~PJ(a{6P z9ozGxSluFsLdf4m9`SvF>KS<&@oS+Qw7b-7gn_!w!nlP6D@>CDHjq1zR-F}vD=IR@ z+y^krxr7wF=K#F)CM>H~i427=*`|l!SH&Lqe3cKDF(Vgz>wEVJojZeEhFxa#{b$d- z?q;nF?WofcPiuSO$Pk)*di5;^g?FySUQw#~l$)@*(34lAu>%DXQd>DJU+Q}HjMt6Q16yO-Y zMVrSy6b6CO>Pmo1|5j~?;9Sftu@C6>4Q@(|50Maa$yZJ{5ko`N%P>Nz>C0n^R$=># zUvrG8M?;P*Jk#*Y^T0!B<_(kkt4>etk|9PO^?gbBoX`nd0+fafO`So<&qXNMQ9^R4 z{zKlB{31!nEa0`2;QVO5^tXXvMtHJRVh&t_5b_Om8-hfYL~b2psJ_8b>qK>&2~yl+ zFE12fMpt1pz@#cf!D-RUcF=G=NGxpt(Wh*a5)acn!vM=$wLb%o#0v0A; zX1S+D(ijSGc0R|~k_s6!0-bC{dG58S`&`4IQw5A3Q%`4+(wA*H z=KMxOAUs>7zN~>|BVo5O2dnw}r|&Y{GRQ+=XD)TIhlMdNr&Z(7oC=Yy^)8CK+(8GJ z50EX48>&Ke&)1J#Zx3rETmH{`DLH@t?{lQY6lWCrm_NT^k6qd_5I_}~&9bwH!+k6G zDQswOQqdoGTFcVkwTFV|<>)*4d{G+~I1<834pT_E{U_VOeCZKhG7GgG=}GH7o387$ zM(r=?@*JsnOk6sCK(RBpAwEOV*F-TR5?O|!{S!-fWl03Cp>tUW3;Dc(~4w7xDm5fO@ZbqWssq*Dk@>|@x$*c)h z(Bh{Qv)SBHgY`c3+G*+9t^a?Xv35m(ywwXner*-z-$C5)kfshM zO3n_BE=(qFF0KxC|0*BBMT?Nsxe))(X#4;5uRc*Wa*Y`)_%Zkc4%jhROFx!e!zM=z z4V}drTOVm3pr4IrJEAGGs`Ro|c89HUG&qnu0g3=#>Q*Ya{VlxAPaxK_kw=c_{X}M0 z@T0=3q9=5NoL*?3@Bf;4SNXLUQggO4fA8L&ziRqLzN#;4%K|4DtYc$;-)_`57dR!h zd-nyig_mz^d~P@8adyt^WmBtipKiQO4ZOtSOrWHYCo}Fi>wY+;d+-&uZrG8s=&5=sa7t148oD6xD{+9n+*_PY# z(N?P>9X79A@c!_tJ7>zKx)?+O17u6_#fxV*^ObzE+7f4fmv5TbPJub<2Ge&oxdd}{ zdwXWgDw?*mBf#+Vh0iP1XN<1$MUqZ+%az;eC3v9GGq~lm1+XkfnjZRGkjIky8*Q>E{=vjwXCW zUT>KcpWSRAa`Zksu$NlyyQQqeQTL7i{3wYt8#iv(*_oRv`P2JievNhp?(e8a-I~MJ^ z_F+jj>n*Va8}~_VMN=2;-P)Cu^FvN6jp_LWzdP44j8&0U2jbQIG5biIyM7vmL{qoo|erX|ejywo|26N9S&0l|OQ^ z*5qhL&MdWzv|66&_DAw(e=Ux`s-Lo5n@_`=WqAzq=B?*;{aa-_jdPw&8Mn^Njndm+ z=Q2K8cUG?S;9gVf8Uy#sod4byT-kS|f$ibWh!Ty$u(F+G6XtVxgV?@y4V%J8oS3&$o8*+n*mYYdv_@T>TEbSF7#Ev|k5r${3o3 z*hsu)a?R=9y_a?UlaOUIidoBM%gUCld}0!+oo#dHgWxVhImeUVn|85ZUZ0;CYJ z%Z=3VZ(HOsec)?DjbB|0mr%M^as zo$$>*#P-Vk>~XjMHS>W(y^b-~i;-p>GDY72BkNk(dJDue{zWs7bA`i=Am z2mBWT8-Tc<9$hQ?ZPN&?apG`?gD;&%zIz(o6!c4Y5vKG4Llx))koS>I!Rih4OE(dw zJeGra1N{n4ba$Yi(}6JIlOI-hfKTl}HwCr1i!g(M;bS`k1D3`wx&f$-24n-?bRio6 mZ9<@HM=k4-wU_iFX@{2l0p6^@w8Ox_3xvMFB Date: Wed, 8 May 2024 23:55:13 +0200 Subject: [PATCH 2/2] Fix 3CF --- backend/library/libraries/3cf-ed1-v1.yaml | 264 ++++++++++++++++++---- tools/3cf/3cf-ed1-v1.xlsx | Bin 37810 -> 37764 bytes 2 files changed, 221 insertions(+), 43 deletions(-) diff --git a/backend/library/libraries/3cf-ed1-v1.yaml b/backend/library/libraries/3cf-ed1-v1.yaml index ce01c0f8c..0bde6b4b2 100644 --- a/backend/library/libraries/3cf-ed1-v1.yaml +++ b/backend/library/libraries/3cf-ed1-v1.yaml @@ -19,19 +19,19 @@ objects: \ l'aviation civile (DSAC), pr\xE9sente le Cadre de Conformit\xE9 Cyber France\ \ (3CF) pour l'aviation civile.\n\xE9dition 1, version 1 du 3 sept. 2021" implementation_groups_definition: - - ref_id: 1 + - ref_id: '1' name: Niveau 1 description: "Gestion de la s\xE9curit\xE9 des syst\xE8mes d'information standard\ \ dans le domaine de la s\xFBret\xE9" - - ref_id: 2 + - ref_id: '2' name: Niveau 2 description: "Gestion de la s\xE9curit\xE9 des syst\xE8mes d\u2018information\ \ avanc\xE9e dans le domaine de la s\xFBret\xE9" - - ref_id: 3 + - ref_id: '3' name: Niveau 3 description: "Syst\xE8me de management de la s\xE9curit\xE9 de l'information\ \ all\xE9g\xE9 dans le domaine de la s\xFBret\xE9" - - ref_id: 4 + - ref_id: '4' name: Niveau 4 description: "Syst\xE8me de management de la s\xE9curit\xE9 de l'information\ \ dans le domaine de la s\xFBret\xE9 " @@ -1123,39 +1123,60 @@ objects: parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.3. description: "L\u2019op\xE9rateur \xE9labore un plan de traitement des risques\ \ permettant d\u2019identifier :" + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node118 assessable: true depth: 7 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 description: "Les mesures de s\xE9curit\xE9 des syst\xE8mes d\u2019information\ \ :" + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node119 assessable: true depth: 8 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node118 description: "du plan d\u2019action ;" + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node120 assessable: true depth: 8 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node118 description: "compl\xE9mentaires d\xE9termin\xE9es supra et les risques qu\u2019\ elles traitent." + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node121 assessable: true depth: 7 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 description: "leurs priorit\xE9s et ;" + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node122 assessable: true depth: 7 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 description: "leurs d\xE9lais de mise en \u0153uvre ;" + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node123 assessable: true depth: 7 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node117 description: "le cas \xE9ch\xE9ant, les raisons ne permettant pas de les mettre\ \ en \u0153uvre." + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:4.2.3.1.4 assessable: false depth: 5 @@ -2114,6 +2135,9 @@ objects: depth: 4 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:5.3.3 description: "L\u2019op\xE9rateur :" + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node237 assessable: true depth: 5 @@ -3072,307 +3096,461 @@ objects: depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M1 - name: 1 description: "Former les \xE9quipes op\xE9rationnelles \xE0 la s\xE9curit\xE9\ \ des syst\xE8mes d\u2019information" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m2 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M2 - name: 2 description: "Sensibiliser les utilisateurs aux bonnes pratiques \xE9l\xE9mentaires\ \ de s\xE9curit\xE9 informatique" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m3 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M3 - name: 3 description: "Ma\xEEtriser les risques de l\u2019infog\xE9rance" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m4 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M4 - name: 4 description: "Identifier les informations et serveurs les plus sensibles et\ \ maintenir un sch\xE9ma du r\xE9seau" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m5 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M5 - name: 5 description: "Disposer d\u2019un inventaire exhaustif des comptes privil\xE9\ gi\xE9s et le maintenir \xE0 jour" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m6 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M6 - name: 6 description: "Organiser les proc\xE9dures d\u2019arriv\xE9e, de d\xE9part et\ \ de changement de fonction des utilisateurs" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m7 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M7 - name: 7 description: "Autoriser la connexion au r\xE9seau de l\u2019entit\xE9 aux seuls\ \ \xE9quipements ma\xEEtris\xE9s" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m8 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M8 - name: 8 description: "Identifier nomm\xE9ment chaque personne acc\xE9dant au syst\xE8\ me et distinguer les r\xF4les utilisateurs/administrateurs" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m9 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M9 - name: 9 description: "Attribuer les bons droits sur les ressources sensibles du syst\xE8\ me d\u2019information" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m10 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M10 - name: 10 description: "D\xE9finir et v\xE9rifier des r\xE8gles de choix et de dimensionnement\ \ des mots de passe" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m11 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M11 - name: 11 description: "Prot\xE9ger les mots de passe stock\xE9s sur les syst\xE8mes" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m12 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M12 - name: 12 description: "Changer les \xE9l\xE9ments d\u2019authentification par d\xE9faut\ \ sur les \xE9quipements et services" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m13 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M13 - name: 13 description: "Privil\xE9gier lorsque c\u2019est possible une authentification\ \ forte" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m14 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M14 - name: 14 description: "Mettre en place un niveau de s\xE9curit\xE9 minimal sur l\u2019\ ensemble du parc informatique" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m15 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M15 - name: 15 description: "Se prot\xE9ger des menaces relatives \xE0 l\u2019utilisation de\ \ supports amovibles" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m16 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M16 - name: 16 description: "Utiliser un outil de gestion centralis\xE9e afin d\u2019homog\xE9\ n\xE9iser les politiques de s\xE9curit\xE9" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m17 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M17 - name: 17 description: Activer et configurer le pare-feu local des postes de travail + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m18 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M18 - name: 18 description: "Chiffrer les donn\xE9es sensibles transmises par voie Internet" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m19 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M19 - name: 19 description: "Segmenter le r\xE9seau et mettre en place un cloisonnement entre\ \ ces zones" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m20 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M20 - name: 20 description: "S\u2019assurer de la s\xE9curit\xE9 des r\xE9seaux d\u2019acc\xE8\ s Wi-Fi et de la s\xE9paration des usages" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m21 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M21 - name: 21 description: "Utiliser des protocoles s\xE9curis\xE9s d\xE8s qu\u2019ils existent" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m22 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M22 - name: 22 description: "Mettre en place une passerelle d\u2019acc\xE8s s\xE9curis\xE9\ \ \xE0 Internet" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m23 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M23 - name: 23 description: "Cloisonner les services visibles depuis Internet du reste du syst\xE8\ me d\u2019information" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m25 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M25 - name: 25 description: "S\xE9curiser les interconnexions r\xE9seau d\xE9di\xE9es avec\ \ les partenaires" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m26 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M26 - name: 26 description: "Contr\xF4ler et prot\xE9ger l\u2019acc\xE8s aux salles serveurs\ \ et aux locaux techniques" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m27 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M27 - name: 27 description: "Interdire l\u2019acc\xE8s \xE0 Internet depuis les postes ou serveurs\ \ utilis\xE9s pour l\u2019administration du syst\xE8me" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m28 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M28 - name: 28 description: "Utiliser un r\xE9seau d\xE9di\xE9 et cloisonn\xE9 pour l\u2019\ administration du syst\xE8me d\u2019information" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m29 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M29 - name: 29 description: "Limiter au strict besoin op\xE9rationnel les droits d\u2019administration\ \ sur les postes de travail" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m30 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M30 - name: 30 description: "Prendre des mesures de s\xE9curisation physique des terminaux\ \ nomades" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m31 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M31 - name: 31 description: "Chiffrer les donn\xE9es sensibles, en particulier sur le mat\xE9\ riel potentiellement perdable" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m32 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M32 - name: 32 description: "S\xE9curiser la connexion r\xE9seau des postes utilis\xE9s en\ \ situation de nomadisme" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m33 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M33 - name: 33 description: "Adopter des politiques de s\xE9curit\xE9 d\xE9di\xE9es aux terminaux\ \ mobiles" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m34 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M34 - name: 34 description: "D\xE9finir une politique de mise \xE0 jour des composants du syst\xE8\ me d\u2019information" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m35 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M35 - name: 35 description: "Anticiper la fin de la maintenance des logiciels et syst\xE8mes\ \ et limiter les adh\xE9rences logicielles" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m36 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M36 - name: 36 description: Activer et configurer les journaux des composants les plus importants + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m37 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M37 - name: 37 description: "D\xE9finir et appliquer une politique de sauvegarde des composants\ \ critiques" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m38 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M38 - name: 38 description: "Proc\xE9der \xE0 des contr\xF4les et audits de s\xE9curit\xE9\ \ r\xE9guliers puis appliquer les actions correctives" + implementation_groups: + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m39 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M39 - name: 39 description: "D\xE9signer un r\xE9f\xE9rent en s\xE9curit\xE9 des syst\xE8mes\ \ d\u2019information et le faire conna\xEEtre aupr\xE8s du personnel" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:m40 assessable: true depth: 3 parent_urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:node366 ref_id: M40 - name: 40 description: "D\xE9finir une proc\xE9dure de gestion des incidents de s\xE9\ curit\xE9" + implementation_groups: + - '1' + - '2' + - '3' + - '4' - urn: urn:intuitem:risk:req_node:c3cf-ed1-v1:terminologie assessable: false depth: 1 diff --git a/tools/3cf/3cf-ed1-v1.xlsx b/tools/3cf/3cf-ed1-v1.xlsx index 9b15fe53b3b11e1c2dc916954c0a00b84fd40845..e7e56b1478359277db0bef41d310333ce1e34291 100644 GIT binary patch delta 28265 zcmY&;V{o8N7iH{BY}>YNClhO8I};~QY&#P>6Ki5kY}>Z&?7ZLp*{!w zs!x3>Sa2y=EfXv({G0W98}2H>sxL)e#RHo-PNv+M@rb6aljjL~m@RcU z3x+~FGACVxs;|Z{7E4yhR93(PgjgXG&ZYvwL=0X7)uoJ<@-M4e8#!i^SFA!Y4lttd zH=O}8HjsFbVh6Pf8TEq@fg{stbTD#}BFPQ1AcGk5I5SYQM1tPyDiPMv8|SgJIMfi~i`k#VS_y1!Q-z{b2Zy5}3?xRg=;<8^96ywg zMC)>B+gDnka)r#DXT5gz23mUn52$>`phpml!3=D~ts+P6Kq`3PS|?@a&vE*DsWJN? zt^Pq-JeDk+Lp-SHY_FYDa8;`g-{c~;v|u#>snwT<7Yc*K<=iz}8?YW1Y^H-cHksT= z{D}2Mq8?irK|FE`I9WdI$T&t_h^9>fsgF&M&^UW(ATW;;ushqL z-u+jorL&ApzEwq#CA3}ikK%+GLv~`7YVS5<_6|c`;>YMSQY-3dK?sQ`9h1gc^9-1U z>#XeUs5R1J+Fovas?9Bo3>eM+8E%)W_OT+xf(*CsWo|5Vr^ocuo|Ee-w9(bL(CLsq zfC^bSvhT_oF13f{C^-bH4iq&F@P2*cl@O4A%sIi*Zc1gAw$ACE_4u}!c6G=lX5;Pj ztzFT5Xr;G{Cj)Muz?5A=fjuz2w%-23#{guF`WSJWGCx(Q z9xqV@AOB<6Nq**A^G)O$k6ss^TgwiEvw}Nh;>7t#2`R)B`;3xW8=%U1@3IuAzn&j< z(oayrbXNk`WC*@uD*!jo87Ij|x)yg^k2=n=UxK7`q_a?s<}i6;*ST(YKX*I65-pe7 zJ`1_1+s^THqB?x*=ryU&6B|K+!!oYUPO;ne6TAh3e=6h6KYs@lS?GBY=Vxz`%jSuM z)Q|@})_t2dCCCij1w!jc2)X6)AEM?RA&>@RgbFAibo&CE8v+Ex1_uNL5d;Lp!%6 zx_aaR$6Y+#MBFQ??k`Toh17&03=%j{2qj;W;_s~WmF#*6*ri;gB=}ts!O?Yr)p|Ns zq_74>ulecP)pk!+*lPCZFooQ<;HV}qp4sX7;b@h|S*+zvJgEV@j`v0*A^k2;-`PsT z#FBY@PYUEUqV@}gD$(YYBfpEELOC*^NU)OwLbC)qV(?)csKoAK&irF;PmehxvC;x^ ziHHlgI7v?AEwU=qi+V4E$l=y#(Sj~FA<(aM$}L$OIHiU&P;A&v2sW(WAkk21;=j?S z#W~_984n7WyE6XH!Q4r&w_`a!4bZ!AHjw}O=rujd5678wqc^pxTS0J3IQ*@rdSvtf zSmz4tnf$tUjCq4L!Yi;0M{*W~eo<5%k1f2kYa=*H9d5Lmj3Om+4#%=xPrMo^B085_ zU!ZZhQFBxrU1t2QM}Wc1j3cI~B7O_PTV^X{hZYX|?WE@V!e=vKMJ}Q__KbtD_7;)^ zKUhz=tt#;QkO>Pr4jU?svgYi8EI^w8^nA4{!>P`icI0``aGUdXl~avE*;0{53!Emu zD>a5?ON7_#5o-`(c7cxQOPMbO$0SdH)f`*CQ|bh4`2U3Nd2!WCmS~5Z^uXOAH(KM9 zOyj5Iov?xz4WwK{QHaduwKVye0dqznrImT@Yz z45=JD*T`%Ywefn|Dg`F=TOiX)ut~xtw$Ve|Llwt~k)EGaej4QN$QYl3*ie|;iC)JY z73@4l-tO1UB9|tfp}V(HZUIZb3uc;5l)6a|R@d5V&$bnh%)e(Mj)i9^XWOQWAO3D4fH-ot=N-fL5m<7W6Ox$&7qf6N>D=D~Bu)P_PEb{*69p`sa; z)#aBI8re65ep-DUv6%Qe*c^7!zH?6EI1wN~klv}gn<3`F%htL1;mQdg+GMl!wNw_J ztAaHJ|8mWEb}va2blOS}aOoxjl|w#-Gc?CXKSA;~_61$v9yo*as;ZDWVf9$gpipw!P)awWo$MlwbcI z+^>I&vK%-BItUa9%)iD$0+@`!$QFd=_2mmh`e60!um$A8}07cqB7{5SKBc*x$U@tCX(6lAJ5fTAIDVGNRpJIVMkTQ8h=k|#OmJvaOf(T#* z(k%*G@YtaV`Y9XPs-0Qd3u2R_x-}LqooJWl{Ww3EqgD_))b>76z7k)$Tu4dDZpAg! zo2fm`37h8CF{bVWw|H&_wmLHvBge|E&R)*PbfLYU>@gN>*@>1K?wA}pKOUksq?&<9 zH|@#615?3@u8xN;Yln}GBqgDj0=qOwKR%o8j-PdUjD%NL&4p3cI!)ep5*&S07I)@4 zj5jqCFMjQo<<9E{-xr*DSA;s;uXa8gD=nHMXM8wxjW>g)kQ^{7v_HbsAHILxZ_j+_ zDs@?&Q5n+bCfn)$vGe5p-L-5e_+m_&3oIxNE*N{xeC<_c{bK4m1AhOW^fQcm1G48! z6;?XFK9YEexrCeen{$^M4$2KQ=02|`akK7)#xosUjuw2=w_Kk*?bkL+Z8*E=l`j5# z8mV(FH2z}Hm7@=m(o(`gdr=ty|NKa*BgO{RP8uZ^;k;sbZM3i0J#F8`^SQV*0FtDX z49_+8f;Ps2KB@9fhCV5YxPHD}m`Lfy#YtL#cmJjOF!JL`5+T6@1(Njtt%ymUBx<1W zNfRXGpaDs@B#iiPzi%aYLUE(pJ#gBrCG- z;9p->Nj+o>SSM8NLOxhuOzHz*k`M}mu<7ZK#_I3JNtNV8;7URXNt5JkWVe`_l7-KU zXzK)&q4T<8Ch_Vby{~5)7bz(fA(0boByoo5N#qnUV7^KX4HT?kM6AQtCseh4?3M1d zdr9O2pz6IS=j#K`HQXKU9{-Re2x?KlqWxf|(7Rmedda2Qq#}r1vN}@W3aw|C4Hm%U*kZC}QCjWp%YBNe7 z$+C5M_-Gx=lTmi$G)z^Kfs6*Q&sm{5#QAW3CYppYhSI=WjWrV3!LE;1rbw5tK`*ew z8Ufx2ti*xFEyRRqyVcmqDBrXut!-+!Cz$-}P)8ZbHghQT*Xk?p$+>vGa}m1ii*h9nfGd`UJ3z#uKdjHedMCCz#6iN$_0 z=Q9u&I#Kxcl51Neugd`=y3^XuIpBp{xP$Cs2<2qlB(BzckdV#UB$}fxUf$0RBVo+J z^!pgb4bS8iP+6v7sV2eUpyWk%P5^SIohOgftUA;a9YaS{9&Dn7K!AT?*$)E?YR*lx zx}bnD+if2D=@W~;aLUQwYGzRIb`KjUU`90ykpejSOplp2j8j=_o)q%{TpEi*nq0#Zz)&;+~j!9vc zRaU&*9)RVZDn39OQDeZ2)g4(4S4TFLgd9Cs8hsbqj0EzgPY6p9GsBKZZTl(270`qO z6Q)NLEvowaJ&znppg$T^*;0`QiKc~=BIpk})?6h-rUc}UG1q&WcpYiLQH+Gog%V5v ziKN#0a zjONVGUu0Nu&h@pUxO7q7FSHyG7RFM7-}JawuaFSsXmY$d3%AXDL;!_JloGN;suES^xFK zy1VgVrP_o?NR@#u1?T9AKh(S#ha59rVqnXvJJl=t6(2ep@`oAr>k9F6&z0zU9-wC& zgN?6xvftT~)Us1!KPolc^t##2c}MzM?;xHVdjevufNKW}5Ni3&Ga{syFkc)r;^qA4 zEPKvhUxicILj0hb{yfKMecYjH^y}5Fv@(L+-r~-#<|#rGGzTn}Kn2-sR;#pbX{4h9 ziqFchMs1w>Xz-1hOC68jh~qd*9%&jQhKT)^TML@GratfYSw6wQ9pgWe+<1a4yMloQhzw8{-1F57dwi`ajn4I|HlMaz VD;y`JV0 z!Lrs65YL0ESvrzxt!Rvt{yMJQpE(6v*MKbfnnOI;i?aGvsctVqsDy`CxIt2XhL2vlP%6+&gmW5fWoXNjHXk5#^CynQNFUob5+co{2U)gPZ@`jMOF zs6xUG(!Y4Pnp!o%gk>eVX_S3AP~cOXtPGsBe(RP|K3J}sQV%becJxpo2M>qz$pQ*L z2zXg7eYIqP#AS3E`_}QWZzMgvbL~?T~F-qF89v!`T&X zm2lQw>N1BzMwp53zIgDn5bK!BOBWacY z36;tc-1IW*5y`u-PYl|_(XwRK%8(s9F!}`<=hKFJlg0Ad?SeFOs#Sv@6%jh#GHko) zUABV34lGT)v@JNyMCrmfJHF0r?ZhYj$Ixf`p|Xa|p2p~*LhC>07IG;MPJs0gcF~8> zGN-x$&VCP&#KS4bi7Ms&%Tllg;%VvuMM445dnfp3)3{xqRgm?AWtDXoh2{v!+Y@jo zBRzXi{7jb;aCpQ#AC^7{=JIhU)|+v5q;2L%uwJkNtaG@Oi@++zmUQsRlL+Z@o3ZCQ zl17nM=@l+ed{trO!$eW#U10kTZ$l0%W6hP#b8)!XUuNeXoLsr8s37xMm^bdnwj;X< z7SgIl@-0-s1p*C-nKC%Jqxx|_H-!Ds*(D0Aq6LPgM(KTgC!Kb|z7jYUdLcXntPT9P z!cXX+y{|XA$%X@Em4!bUu9kV}Is-#aE4a&+OlEYVJ70*+u^U? zjYwDK@{&)QKo;P|xCC@o2veUp-=H~{3CY36xkS?uZo--m4XW=rP7*NtAG0{6p zy`5-Q+&D(K--%vlynrl|oID4`o<#Mz8UxP2ltVmD*JWR;_Y8J*OL5S?c4#VCv+ads z`8?NmhigkUKGv$OV+RtGE`()bu9p0ZhYOC_Z*+-n|Dr_Pddxq78a%vA_63I_5;b1QlGbFB8`Mc z(|OmHNwyYuW3#3tjaHo(nA46W&EKUBFVJi0f1TprH!d+xCDyXffXj3yafImqQ8R4_ zThY(H%Mjb!YJ{OR^KjWF8X&@JLuJ!VHA1~xHdJ>=xATjlZH7rOV!jm4b6VO=n5{o^Sv-*9t%amzNcC=` z8W~E}hwSW1-vYwq?a-u{C`3sd6X{UOg{Ci;cNRAiRSkH_-Tc{749(R-Avdf|f?P}6 z$6WRxOc4&7d*wr9jlz(l`o`B!f&i`J8Sex}wCp&+27Q!Vp6Sy7^FI2?cpAYvZ6fNI z3R>J?{hi+gQbqkRPDKhdFPYwb`d3Dv zm~xzyM=kJ!db$tfH=-eEBor)#v-j)+$aCn+Z_FnpTFmEQZo)5#>w~=%^v`1>`^lem zOyK?n(dVJXX7$GD!(w@ByOV22?olg9Uw$4}+kZd*9_0$r`gvcs`-nz6lFC+6Kudwh zjMEpW5MdckkO*RbWs@ConF-$V(|Bdbc zehk<}(~vUGTCApjhX)+S3+-YQ1ylvR>$~Dt!)!Qbk-nk{3uVy2FPzhLE@hr5mBTz1 zbkS$_wA)Ct8j{tbsFfej*`%yL_GZ5HpF-$!J4$JzQ^X++7Tt>z$4fJduNdumajvt( zz=s1okkh(oO4xU;k_V!GJ1o_|PL`|W7{?u}1tO=VspUid z=AuIsFs6KyLyW0BeL6?T)h(@AS}WF$WsSo3j{j_& z8Z#oW8+JR3sh5ac@ZW7Dd*zdqP_!*VtPPdzK`DG#CN1gEDEg`@soXNu3q&ftl(0(F zm>}ippbVz?65VP~{)FQhJKor_5W@6z3N5hGrxr8RB${SGeQbK4NIB>|eWH|3lPv}a zEq=C$dx|9}=m`(GHb{!R8B$CINkurxkQW*$cN*^9cbGO{RJZr>x9pG_3S4s3vG8yG z$vTq|+$FUE5US<;7vn2)(>KtH8gXd8mBX-8kmIgAP@JE@$$XKj6E3}#{E6+1mCv|d z&(5XV{@gF(uSmU$DziY>)K_r#;5G*kiHLkXmn!zTi@GL2+cw#S)_BxsjhO+}g$lGS zX4VOW_)7%@TX->g;)^&=u`gBX7H;gd-nu)d2@LB7F(UGMZkdb^_R4b_w0PzMzTHbY zej#-ft^pAX2^mQh%Le7TeXcWbE2a?x72)@MWEuIyY60ayU$;&XQ7O*v9Ie1%QZTmI zw$fMyAjU)`?qC^04rQoE^y4vL5hb(qe#N~)3aX882D9m>(b$u%ONsKBvMRA1(>tnB z-v(%`%Qp_;5ag6BSz!e8H7+_g5$V@3p5gYh<^0Z@>Lm(ljtvs{`oCrUhJ!`=5AZIN zjI4qM&Zts~ayq^*aaZC}LjQ&@H~#Pnx|LAhut%@iYg5QA(3lG^$Z+i@u^O0@czAl- zm}zv8I`X7yPI5K&rFJH5-{Vr<^?X@L4yw0f%rPBYr8;j0H1Nulz|2ljPYJdoOh<^w zR9tnDYBz!Ghr>CPfPP*>BjzO^oSZ8j-VWupEA;CaEG&ABF1fG-73nFc(h<`5!wm z(-XTzA*G1xm!ftEX)tHPs>TQ~aQ5*@H9Q$K zOS1?3@G||$;204w>987qI zqH-BzlmOe z4IFP%mdGd?$Y?>##Wea0Z~x`>mPs<3FCx0KgZoW zm}eVDFJA%%EO95#>|(Zzz=pZ?^UbEVi|=vvwGwxBiIiVKJR@Jvs2S^5*wEfSz2C6| zmk7px#9-TJSlGqVUt>|!B*xf;Cn74pHQFRMr&QYg{fd_DM!JwE;d$0(;#rO{)4=j` zS$ zZl8dUXh+uo9unJtXO?;kU$2fkX+Qa20J29WOJ+0eb}1Ah$6Mr;9G&j$k1#P-^KV1T zLM)+)j~cU$&dd>6Rxh*ACcV2TrHTa|<6jW{?F*0N7a7nH(O{;irJCpUALL7_(V6DG zB2~al-0ryhC>eB?X%&qQ())9*cvD;0-(>P@685cb|6D_2fgcrlh^G#HGhdbx*dX1V zY`Ff-<_JadVo`sM?J7oYIYdI$1_E4oVJ_sb(M^-j&GUA+VCFoAGgnF*s~>8P^h()7 zJn@^v@5Un6+RQn){b78>Ma%B8v0Y|@Xl?+JFs&*cOiR+B?vYho6%x%u^NdajV(nKc z7Si~U&O5O6w0k0bsUyS{15ARWf1DX?&2bda|Eb`&ENf$A(-$~rurX9#qD$4$P-=p3 zuy?=c97#S0xARkcJ5|Ffu8qChe9nWl?HwU}dp)&H>NI`_ffyi=5zSz|huFazq5O4o!_(C`3@%at* z;0J*-bS5}Qvb-wVcpgcGn?6BwLAlDaFh&i-g(H;eUN|(VzX7M^N#S#1{;yM8 zTH4o($3c?pHR*T>Qkr`yQS7a(Jul#_h<=ip(%T^RSrNjQz^*z7Ky@(KG>zCQRngpl z?W^3%+Gd)?&iUw)ZfwC%Y5#uSu`(tMO?2ToGv%e#=!o^%gWpMsK00PUgkmg)7W`@& za=x-jMNd}}>!t9A9{7Vb<*DT~$G5fky#7Z*6jymCDtwIRs$svSg%g5Vy6huo-E>)-zE= z+ZuItv#J9~C`uy3zga3@zGXwof{nNP7stafn6X%!J57@=t^@h@rTi~>O1yh_R)P2D zpcS7cycf`3-_HQ5G=+qxqd=f`G72niXgr=~n2G(n*&u|1^Nn(F*JA;s%wh_HW*+EE z_2-zGQaa1CmI3`8{zoL5w`btmfd=^#Qs}|XfW?l`SYnn@y5SA1@M^1(4G$YBT0Frm z@lurTNSL?-zZrN5?o$#MU1G`suMH`OxQBLlkU4^v;idmPtkED?B`IHhkhj&x& zK_t^_E$~Cn?*0X0rTbbQ3YED(7DvMyTRLrIuwha9StLEw$vF}U&mo*m9 zj~irekt|~B&pX-wVNWeMdLG5l^DwkinH|r!e)>r+H;mQR)SlllL++?7;!kSV_jmyM zY>THQCGZh%A{A!}y2^}WWn1}fO7s-@ke|W9SfK{Tb77^zCkC97rA@cTxyH;8DcvQP>G{y}~yeu$sJ_-9yFp+`=4@*_R)G5+|(E`1&!2+=-TF;`>c4 zYKO`MmW1rv%zVBd1!jXj$RY0>Hf%h(J4AO1BD_5uk_9>UZ*sid)f1wh4p*3{!hM|3 zkyz*^!Ek7Fm`Xs1j9rBL#jbNA-$_usPoZuv*~^o0F&+(qKOaq)xnRSSS)C8b&GRp&7NQ?JK=i2yuMdcyCFJlvjkT1O@nR5eToARweUTe@%B(`JucJ=Nxa-N zXkvE_gPhqiZys&vb!SJ-5^h>En9AsbqFiTBC_h653oHA2D3Ew+al($8{d{jbl%^WV;(Z+%pxb0;14LC{P3(mcFw6NHX%R}vr!@WbDQxBi zOoNrkCw4_UE@2USj|*{bnE4Y9#fKw*A2C}mLv8}k3#GdLD{x8^?j+{(4eAhRd|*mB ze5D1)9B!}}(Fxia596T*Iz(HPs2zVRFdeIrzxN$R@=-AvejYNKk)2u?S^zLb8=8E)#E1EV)CyE_|JAq*yk}z4kE=vKuZ7ij2q$#j(Xm@3Iv4K12H-2QVAr0xIWqH$5PT zO<~)ERUW=T+BrTV(r7Bj!@jT9@hwo_%e{NYrR)>ihm_R%n7E7!3RpDOVLicQ7On1U z)yj~s38PQp&%q_sbrF~W4RB?$Ia~F(7t5#&2=ldHewHt5H1w-LrCZx{s_}r0U^Bu0 z_8M|)=g0edN?(drzqw13%2X(Pc?=*lf^n(PInTqmsX&fhFuVi}j90A1k=WSaMgDsjT~s2!)N`!03YLSw=P!VtjE3F! zM(Z4|fE_|%z&!s^?*)cn|63Ho4~2Xgs2zMi2YwJG0nosyWzDa@dVlBY^P!5oMxMPw z5|J3_53hE(MceAf!yP6YTJk(f{Fpb`xH1=0hWR#b#|W&~Dy}4qUc+xEh`#2FG*G3k zVLj{A_p2nOnYp8ULXzgZ`_#Vj9f+Bhy(ny`mG6ZS9SdJAPn_A5d^&Zz2 z1vg$}3V%EiA8V_s^0>IncF(^<6APp`KFi}PBx_xz=A!RA`lMVcx2M<(+cflAq4LY` z*y5rsEfv9PTew_k3WVq+UDjF)nrbCg=Nk*RX+Em4sa9WUOzlt=CCEUM8)dFzL0}>) zT=3JnT)OdSU0DcE7tTCcA~b^`X;vVf(~G}<@AnI(NBKq$brx#$?lOxaVSCIXrvT#M zA_phrUtr0Hd1)MmiIV*jMj!<|1lEN@V|Dv+MOEGNEcpygVau2?c;!Cg|6x*JWGRdp;73O}(IhZn4I2JL2xoeCjT9$ozIjjg7w} zP8d4;S0DEa+ztLFu5?vOA0Wi!FyDNgCxudnNNKRZ7mj{&LsnB(7HTe8U&@lWmKF3T z3BRKMT2-E0{P`o;li?FaKOI+ZqK)1VQR0T}h|Gg@TUX4>p%ERJA`rb*_c$z*+{?~v z{)(=krJR!t|QV6=V5{=ZW?Y|>ll#!6u zD+I%SaA3A9k{h$mP=x2dn60PBrW2w57=R!z_;*7bLuqh6AoVK#+5T*c0uN47m7z8a-r$XxYE5i5cDRpNo|hl%p|9K4265KYB$ z7g{#`=rkrRv$PEOB|c-Dsvg2$ZzYOvLp+WCGlcUyfs6Tjq8qDoV)l$hG%pIjKj}Z+ zJKqWxYh&La7q=c{^#4#WmItSMuwHgB`Q1H1nDSZUcxQB5nfN;Ud?Eb(!7RK{q`UQOsqutn<?& z?zTS;;XX#X5(P!CY3sbGJ7#9hN~88sL@&Oj`#Pm$-q1pbdUfh~h`pnHONss=AoFzl zw7csoXQKd)dyAh)30F$t=dPe)f@;#HvCJL6QhPsx4a*n|aj#c`H#m@f%|yo37&@RO zkUawQ4Ts?iyMHJP9?xPKSO#KV_;P7)O=W7c@!93g+Qxi_O z#tteyTIP6y2l28Y$Qn`oeQp7ToDlKUdD6igXPHEl$Ta06mirwf9?P4l-rLw=wbd?i zKE~KGhVEY|Sg*qKSYzqdJ!~tRBRO*XyXhH#S|=X*%TtI5*|#bcmlhh{E2APvzbzW@ z-YBN$Y-<;BDC=RF)1<{K1rw=TXs(EcQ8+`8O4QoRKk!b2%F$`AJl}f%2qL2LDrqO- zq4)_YVAs~;VLw=JN>lmkTXwsGnx(FxoXg<-MNf6|;_g=-QR>wz!v(hZ3hqVjECDUh z=LAxT6+4cVBR-pA(IR@jL<)NUFtsUp_ly=pj{SD1$4X*o)2u)%m#dD$E>QiJ?g(u0bQn|i=$;~hMD30{(MwPj6R6|{Nbeae8yf$O6o zaz4R75l(|;BEfLk8G`(_`JM7usv!r+xWhc~IyY%jvif{mQWs+||Aa8~@qHg{-1h|K zg?Hd8#X^L{KlGHq7xMDIH@ohUr|R}=+R!j07WS;8S3Et5^u#=tFvd3TIIvit;Lo`T zHQIKncypUD-r1L!FgAQKuUm`x+jFRq|sRnYW!jM z4E5)RTE`2Cl3y!@knMu#O)NZs^vJs7-n<8Dnuhq{HYZvz;Nu~HYCh}pR(JA+OSm4X zUc{HnQbdsKkIP+9TAg0XYwMd1FmvD z+?oeCn~Fw~lDK$Ss!agbHYC|S)DzLPq0da1n`TG3EK1Izr=&dIoEEX?OcY+S)$yYi zeXbPVEmZ0JVHmDz0dx*`2|)WU7KW7G28#jIH~45Mp*CBri(0YKzc6wfhE;0zAWR?4 zsGS4^lo#XjwRQ6KdEdcplG_BUgX%RHaY3?3|ZGV;^8_Y54_q84blcfcHK$ zB^H%U@4Z{eoz{KQR?mB~Ol(BzVLnJUt(jRyE`tA99-WBAy^F79$o8ZY#_D>hW=9Ak zeq48mS+QG??6-G%hAj6t)!xGrQ&A6$n|!8zg5&dZp|9{QtX*mqaV|t<-3D_$u3NwZ zrUk9KkRbt0cmNnF%{_NhaS9>*N$2R_K+PWq5+-dQQOdoCRLFz-Lr)^e=lXHyOqK;% z?Fh~>eLgL*=b;l8c6v^UT==-Wy*7j64eC7tirU51nGFUm7fez4-S|S%ONwUnvJpR5 z*VG+p&&%(j)4Oc|+#7q>sf~(Qh)0l>UFLIGoU`UYWoUgO3>b;qUe>E_ZngRdE=~c zeREG8`wh6&Ipmha2vmoZE-0zM3(`eU~COfgl-ryD#lIld4v(Rwb=d zWdzxrWAcEP*z(IT{GjrdXdwSB2?y6tj>z|sRyc%>ah-p4&%y&Iss@6GfJfm_o7OQ9 zi`33v;mxZV-=c>dn7b*Hl879zVA-q^sHcUVl?+fCn{WkWjRJ)5j8#lL}vrnpAZ}aa%Cc&b2R_Zixv)l zX$Hn59~h;>288mVVbh!%*r4~gc@uplJz5{G;^13gIpIeYJ>)$P6>~U5UTQn48Al=w z;Z|d0w|51U>9_VKjfs&I<;X>j|5OGF&#i+*o3oR;MI3y39@v-~yos69+R*jT)QcgF*GOa__k_ z0ag*Ph(zom$U-1NC_c!|;moo<pW z;xrE5RYUk_SEreq(ap~aysW<;Z0CF==|2SMKL+SOi5!BQk0PDVBAu@yo$n%@pCVnH zBC%Q6YXX-4EY0ixHPbY&f0mq&)ILwGGXYlhdP%?sOH5KVjTu0N z!?yLlhck8gt)7x8FGhJHYfwZSmR&EUKzr)s$zg0J7}Z2utzL(Nxm1ez-u~uu!?xyr z(H4YWMAYQa)x=IWIDZE(ejK7a1j?PZn4;mid@0|Gqjna0gjXIYphluVL%e_q=?cj& zmv!_|_MytJBM=vxpg-lpoB0($`NF_Ga__bj+mgsYs!@RXc$}XsZNOiJSG-a_*oNdZ z$j$Rlo&PKs#=Z%p$iP*nsHFUpAiMpl8Osfwi@!lTY5UA%cEYswK&cL}_OM`p`!a##(jKf?6Y#l<*EiS~>$DAaHn&HV!X zV3sqZER0u9ajds7ndRgo)GsW`&IRT!QP3Pvxfjy)Qr_34_hC<}|mU5pO(psWLe7 z!rI$SF;M20xK&oPQl{a;CtCQ!pfQZsM=i#|4Jg9UiPT?_U3N!x6H&bg^h?aW>-wPP zH^!}b{oTR}zEV@jLB9<}MmF#2+; zfnz{IVG)ojyeQnWLO#+?Zr{V5->%!#B7pMbu=F_ZI)j-kWdvmZ$;@rExALOMcsuru^b zDY5w!Zy#r96HrHT=_6bg5HaLXn-u|-S)jS=^D}MB?``jm33$J~Tk8J00Q{cclnhgu zgx)_5yWbz4Zo2`$kJ~=OPwFq4ug|OcuiG=BueC4VuZt%`;LS$H=cV*vY|0Su?Yd=} za`$_!2VU}vz6?~q-d_&R;(*Whhatm}-3Fb?OlIxIk!I`qWI%`UtlX|EX(9}$UHLQ8 z$HLN@wXh!#`7rvf_4(~0uI^N5@PcT^>TNEqnMtUAio@Jy!`PGhV+H{304eV_%Us$J~%t0np{Q-M2Mr{krIfeH4A(PS@M zzclydaoC_cH-V5ii*e1J%M9)xe0LoY9OzGZLscZ5N{0 zi3)84MQw}=ElEB8uYJJlH81(cXI^PgYJG-aUV20Ey-=TxA;=#woZofaqCM5)rf5G0 zON6`@er#9|+)r9cOv-SYiCXpE{b52~m5>U;7yGG~2GHnC;NG`VqZm`kd+}PzGZuSW zt0|63d#=LI<=|2{*L+psKIn4H?f|!*Gxys;>J8`YZDaM*YRcQ|32YZCTcLdkInrawaJrB zjizsnmSWt5LmM@kjwDvl`MV*3PE`}Yt<8G6&q_$Y-FzF&itPadR-CdXARcjxE1k?i zroy-5@?uXxLCthwnjYEaXrsylWXNC9C=OYWpmg9%jqfXi31c>q3<6 z#edS3DA8yzWh<(024017keM>>B}CCSf-z3^Yy7*sM0ho~x@Xj&uH-O(rYCwZai(y^ z%-r8(FhH~fW4#o;a#Z*FZ!Inf+maF0E`#Ra4HyfWQ$GEx^R<8Szmkak!W^DuD75?+ zwlIp!JdTqSUz;Xlov@I9^){-@{9!9Ov+jUbo7WOiZ-~>R(I^|5^G&a@?Led^!mO(} zTm!-NBvpkqtqzV_MYh&-dM-dLPxrrC3#S0coT>jTu%Q4e_CMhT2wGs;LJX4ZLe)Lt zgCA387}9Pm_cx#nsKWxHYQN^-?C;9dQksQ-IN(sY;GEfe;(3sG(@f}K76h$ums*$v zvXxdwZu*Zy7;wULD9f@>n%~2jzW&bxp+4_x-&(W#Q8WJ2;AXE7XKYtdn2yFkz?-W7 zBJYW~squf9^9|><=)Z(Pbk4$EG8PzkB7Hwfh3(KA^ve3p9ksDR<;^jvb;|$rbkVFd z*8S9lw2X;mgwx5ClR)OZv5hi>PEE0llV3WUlp0c2`2x<*kLQgbrXj(Xj6&3|4w;*b zI*xt+ohSJ9pzjj3**JL44an5`4^F^+6Q2&Y1^X+lwBQ)1Y)4lDD=E#BUG4+%%VR1$ zZcGc2N;YD(((b|0thrz{C_L&R z;!=GeR;}D8Q~BNH{64O>zMj{B&ohUwo2w=5nwfxK#f#fQp%3hE zkijxvYx*Xi-KY%C$iKr2tfwsF|8XxT0g;2L<+u#hbw)N@ims)~BAHaoYfO$q1|I;E@~@ z%Cx#1nG}FI;LesoZ`MLJ`Y%0G?YpOB?Wa0f^duoph%*jd8Z||_+`nQY6DdKG=Fyck zR839$(aQIkK#+SzF-J1-g2xJbh~dTSh|x=4wZ2G{{fnMSg!*_mJZ;Q_`EZ!>wr(^x zAP$-5zbmOoF))c7?+=&#!}j;=j)R?BzBa9Zfkp~sRmD=;F*(;pb~4Lv$n43e)a+ig z>OaRszfpM?^|9%kr^Qu9&ss`RYB=MZc}kq1w<`%hj#BU!)zd%Dm8Our8=N=)+u=r2 z_&rA|?w$ohHezrwnla#iJq-QCr1r_l)OEy+A6K`zE!Y`*oanzm_fGwPvRBk*|N$0 zTyLyKo(Q1D&hx5kFK)L#a1_ch?x{?D_vW2uvk+yfO1~rvHpnWcx4GVU{e?oCR(F}v zEE;lNtZbznE@;j)C!j}mx8puKN}YfEAAD1`GXEDHPc*rOs*AK_!0pJKpes}#>zwY@2ptu=-#oz@)f z+8PaA7;g(kbaL_mP}>ePx&{9)U{Dv&sR@i}b+{qPsN!+Qzq9ytF`fBW7@U@dFC)fA z%SP@P3coX&T&SktsE|#FD-+K_7iBS+krF?qs{C{NQF=h`ToZH!sf_@iBfxkvm6RX# zDefnpnd=DNWna&|2xq`!K`A(qkz5(ZdI?e~ZB$v*BfwH9x5@k(AV^zm{0Hk__7kE` z=E4;IQJ>zpdO^@UcoeT3{9XkXUob6kT4L&yzXiEL zoc!xpz6%j`!DGVaS4R_20)jLllDPs6ib@Nt+x_C4-j0R;r>n1yYOCq`MM}{k#a#jv zr#J+HyGwCtaR?L%9-yH(!M$j43+_;$&>}4m+^sml9a<{SO`rF>>%I5OKRIjtX3w74 zGJE9gGnoMN%eyza=Ctc#A_RL+6uC2=!Xh0Gt07+vsPfjuJonVIPuja`6Cj5mfVzNv z8?nA-quH#{;Zujpzk{fHayZSW4=qh16kis#u-|Hn?-7LgV4&#bdMUruy%TqnAJyQt zU{ULHdV${De;s0|IrSS=4d!)L8@AaDX@w};$ML4z&PCTIoV}r?z4D;^{H$CVwoZ~< z+{)+h8o7Jrm3R`<{;wY?ZP-cinzjVQXz53 zqj_{#MPwRfIwptF(avAW76Z{v@2%?BYWMI9v*t6}3vij=pVQ8J(DWF=0VRcZnT^6`_@s1q0;SkE2zJ-uTjV&@9Si3Gc@=k@I$GR6j4Yd zV}Xg6n;LqEA^S^5u!n}K*q(_`$fH46B&g8D>wek*sOGhC3;>v;<92dK6UC_QCScGI zJzlDi3tb+^@B`nP=1Be4Y=-+M0>3kicAwrjMRCjZF$cMG zoEh62+V*-MmYm{n!gR#8uhI;}=AqAr8V!o{eq4Sr))()+5Jv{ynk!nZ#FI%FG5U9H z&~?{3Bt0?kVFF|;pl&`zjU~=NaTTsGJ#zyI7%*#UP(nIELPQd2=?$?+&-}n$%0aQpjjm(2e#G*bB2d zxy@O3O-26QlE@@MRc^EDa7#ifcjcb*{<~G9&ioj3a^WBR*=!gdmOA&L zZ`SRrrWku!X0&glk+K|j0GDB}zbXeAu7s7I8&j!`mdU8OI`0G!cnB)-KVbR5r7j9R}gGSNsROEg*T!8Zd3%o;G1;fjJ?) zRdSC<`ugjK`|D{UNXOb%N~%z7fwn?`RC;rYFV2AHUF&vjY1T$W|4o|Rxyf;=#mtSh z?}C)(Nh_Z@xAWgVM#48DFmBUIE=-P#Tfp{21+Pbf&z$UsZ+V>aypEV5#593HB<;Jf zY++|k-wVe&6;=+FF&>afNy_X^Gr@T1BGKlHdF+~W8xuj)X{&=5X;))$vx}7=AL1sk zai%d7tggl^C1xSZ#`$sRj(8t1r#6UuLO(ODb^|xLXTBp{+0I+GcX9U*J$M(beF$Jd zy~!eEf;bI1`OJ~Ni8ADbI{D3|C>_A8Wj~3Dlt(*Z^u}}EY&+~!v5uIlJrP{fJz3O$RIDHn>X(JiZpTp(+ zLua{JH!&;O1*vTiJXTJMcLdfHOqk-<7Cb;$BOK#euUe#&?&3Bb_x#mhPEo#9U7c{3 za6#V{?nuu%Q~ZLj#*yD%oT6Ob$C{Yb2bJX)EOXBCz4Z0h{Q3OKRO;B}{qXlwMQ~!H zqZa(ovQAAg+3Uj=o?jB~Rw|)@rUZX)O)gcb%CQzZsbSzZoF9Gp%6$V#hR=R&L_rvf z&L6Pg18rCXq~Wma_-g4o*e}xGmLe`=1Sdk%^bw6>mesneb}H75(vLPt|7k0u>7R!# zxt`Cb#$c)r^rMYSjZw;M` zCS8O`mr!`;_kPnvufHz8n3F0dM}5nfH2?qzxw%q;hRs_t#RJ%qB>S;kZ9E*ms$>7M z0Dw%k8nfbSxzyPf3D{F>Q!k(U72$>TJDP1UbCrx>Ydrdq)!tHEHKSJ$p}y6eQ$ivr zk13F}{{C6+rzbv~P(0w($N+N#*{Y|8LJZ8NnfQHnV=V+E6 zxK$OSA2Py2{^G)Hs1YBk$6L=qoJ=V+X9j+xEiKg{oVzNND#nH>!0qDQ#^h(8$RADO z39TLG1A}1w6mrn5-$rxATn$?6F@`7G5GA(?a$c#(dR?6Ol$UFS)b&6+E;gJjglV;a zyB;w6Wx2`B$R9AFoJn`lK+OB4$0CJVJH?w%B|h=i7SU67v@xh-CQ!4}_&nuj|1Q0H zTBa|jyK@m|I>28xD_WmfPJ^JMoitR$RTz%vq>X?@mX35+>o?XSIF@~e!A$1-qkWdP zdFAZ`VZ2trVnd*0_lo#C7ZI72mii^yY0Z;BZ)XR9@3?z7vih7BeyONBU0*RGG;IIa zy_||*LEKK&dsjDd(o#VC;^rU|n{s#(5!~<1Kg|bEYS3-PWgW@SIUAck(x zqk!EP*-zMCaDSC?SgyyDzT;`FpMDFcI19|#Vr(&>XfBgc?NhWmnASQEU8fk8 z0tqZmJFOVwz~q~Q`5aC@yO*!bKhD){P;?vIwG?Q)xCz90ap{a?`6XulrZ$Tb*D1uz z(bQs^OxPd7HPK8t-p5UJCHz^zsnlhmTn45JTEM@-VCs_GcMn%l?t`TBmF_U;3Qcr7 zP=p!;s9vov3$z=87Hmv;`?li_#n`U-xpg6JOrde4bCUUSE40OyFKr2HZ)}OMq;~g> z^)FgcT9;|mF_tH-h^JbOo;pDZ56>gR;0=nnsiF{`R*&hgMp}k_awprlXL3Ca9PG7-DEP!^D?;nplC-9I#`~Vp@7ClP=x}`| z^{x74yJ3sKa9Tb=9T_*I>)n^@zKJS!oj}!>l`oz~6lFG8b-(i~h)@bHV=#PofFm`T zPk~e>KI}SR6AycYk%qNMd;$xi#8XLoXjX-CHe;ZItL~^RV{rdOkV}T3{7H3(&1ZH>!`mz`Z;~MQ8VgOCneN*pO-Ay`L(%tA%KS zE>s3=sz#3a?xA*mk(tg-+0sgY=DMe$Q?H_Uy79+M^|bXfNeq-RtmtWw?@BY=ne8jl zP{taj&GkV^*Hq)|_S@nDpUsrZ2$8Jkc(}y9sx(7;C47?-q&DQUqAvM{J*1@aIBsI& zdpKdr*;J4@9c4W$Lwyt&^zeo=+=pWIx^v1#1bFp$dCDenA-2R!z}KlPU&+;bQi*?;? zqLofUGoAtXPPX~NwIX_TF|BI} zEP0GSW0m!gLA0Ej#R@vS9*=YRBoiZR#C0I+qLEXj6x{z#c8t-1M&AuDRa>Y$o3=`n zUM0RdCewdq(Uy?ad<8K@XUJ~kehAqLaI!IEWg$f|*{od7<72YgqOk|MC>4Ph*R6l@ z-fCxS4G5!iWBb~TR05c7h)T1VZNdr#LYJhHZs-`LHHs^!V=xoxG-N!uZr*Dry6XKJE}E( zf%`C{K3#@qHRjP-*xtQO4YTR{Hgg{9Thfks63N(W zw`EAH7o81hO|s#qu<18oyhUfWRUuJ{sm@8A3Y)%yHc+Zx3kwf?kOy|lHWOQrE&(Vn z4$qqt4DJDQjsb%&XIjF%yDj=|PWv3�$B%!h5~<=5(0{b|t;h^%q~+v@k-Uy({g#vQNbyd_o57 zB2OjrUiQK$=65f;D}DB#eG01Q_VR5LUpE?pG?L|Ux?bKC#-BJk=?D}`eXu;g%NBi+ zI4+zr!~SGujau?a+%TtGD*aXtj6AGKdty7s+41etI)SJLoXq-cI|%@Br+75?%DjU`RB(FLS1+d^Y3`6-nCPk`F z*GS^T?rUc>)ZJ{<>qaf$otO)>J1r#9%K9RO|48O;EBSD)n2y=YENgeb+`Is`I$Onv zTNknEKo`{Ko51H*%bGlM(cx65M~^(%YMr|l^1!ADd0Dr|moY3xg^R=IeX=x?gSxm_*<26+y1S*+lhl37mRgPT^`4D$b&QhtV zB~YcEFfnfTf^obzi8dolh<}mdakm9Y%=W3b(}ew8ZD;np7PZne{!E31=Bhg86`bKzifEKYYL{qf$I; z^Lpw^^vVKOH6!nG(!8OXxx<(9l`;yF)#9#|#!nwLVkCot(9?#0$)Laq0g`m9kucO> zb7EvrtU>BnprkYJ7b$*sS>#PuQII4JS6g!xX=V?^=IPVk`E&vEkKQNsHL|qj?jc{f zvle|os>J*rr$w9{8gs$3E2k#+N-mZ0ViQWt-p0V*_*1E>U9`>&_3RjPJ(c0U^67F( zP%=;nVNqU|nzZ8r@~DJy1#v-5oTzwt;Z>1VT_!|@u2mwDT+(x0!TX;|5_>{# zng^}8@uF|q_}m<1L@o=em5TR-g`idH6VI1@(^@X3r1!D69Aj2`@UxhMxxfxG+NWkx zERL{@t$UY)%wl9j`8QkXYXqeG5=?>lXLM+Ld=41lj}{&<9}@|1W-OS6pI;}&_!I9m za<^U|g=G|E)e&$!^h2g6s(ey*tRB}q!7H#y+?GFyQZD=h@qa#+)M88&H36Mw9x<00 z?ZGnWmOOU%SNYi3YO}i=eolqMq`F@Ls({qArkDe1u+aGTC1*Dz>f0#nn6=Ke~UfNn9N*Q|e9w}*Up zzc6DCit^{d??oqsvrT|?X>y&B?N0=oB7vWVn-vX~aD)d{{| z#LTpnlt{Pe)cwocOE$;4cYSPQu7-PoVipnfWP2O_qsuui!~2DP>9)T7f<&&RvCHE5?L7Ad}U zSsaHQgOEAjXudMw9wbB+fHa75@!HKj0-Y^hKR&Q(aZe}VV-uL5ea0-Fe!2udkB>Di zjYZ?3XvgacQ{mcIXX=E>IFFbgJU02PLFimSr_zZO!||60#BdrLT zj*kvmKH}C(l4mPoVgjG}F$fVy6_q@ak>r)@MzCd7hYUCO({8k@E}PKdm-`CI)D2y|!e=9`X;B?&Wyg-bsZ~1}2?{WBJASo}z?~ zXuzn|PLAyn%=>a&@>Vir-zMZGLoc0*@>j7T=lX^22r!*U0thOT>$0Ss1R4~&zjCa6 z^2%^e)8EOYU_fY*FRvsbnV5Ryq_q?PvA8T@WK0FT%798%1dbmQCFdlvrS4q4LvKr@ z&cdlDfNW~d#S&Y%Q$?^HY{XJ%KU`Y%$8;fU=y%#-S!kUUb=fHI9C|vl3ojB`R7S-u zunJ%E9+m3964aQMQr_3W0BB4{DevDZ(oF`71A@=u#@hxjD@7vmj77FnnUcx)12ZZn zE4D!*>id}qCF>g0Ur&hiolOaI#;x9+J)H)nQltkJ*rK;pQ72YCBX5Q8w};$!)vNH- zx+-8rX5{;|`XnElxeB_zij&HD9+XdH*#Aj(l<$zm;ADtPJR21MF5?(SzL1KDSb(;}OY9@9?>B~zT_)r1TUfJQ+G-OX zR*y=pj4%$sAPW=G8QOvZ>1(B~swZs9zz&%dJYro)>;Wx?(^0O>L~_nZ{KzMFFrg7QMpSp2&_C zv*!gK1k2#HhCPGu0)<%LGVXrmO298SLn7D#vm3QeVxP-a%#j`GJPyD5n43GNSMukRMZs5qs` zU(@HWSX zOo?!%diMDp_$mUC$3zV|iJxR;0{-CsMP&Y8*;q>&9cbuuV=fTyZi=M5t46+}FTVB30oNc4sRS_A(y_ zhG-WFK;&Y=h2?ksbPw+k<}2E#Z;N?cpa(XTW~|20QXQTryXr+9n-i!kHbK+lfe~DK z96&NNi5<+Mx2hfbYUa>{E1b`R`wG3a@K93^T_)k5uty<4m%mWu62_axTs;7zM)J6Z zRPgH%u^8fIPWJ_F%sH*6$WgFb=Mi4fec1D^^8PXOW?`*y#v^IF{EmA zD2YcZ#gTH2`Ljp*Na3}k-4Ugibt~M~G>`Q4p2C=O&IcG*_;GCN7kFOuYs|s@rM5<{ zHWemSOs0CwWqdwKXQ9mYIa%Rz5W_0+YLiH5Yq5xnBni1b+}=jxZ>(HNZ`%(wt^}Vx z&m{C^+oR!)%lqzz6qZ>+Cacx2%z}oDB`;>v%Mc294q6IX=%H=FKrQT~67N6=GCx|g z4Xe@N37y54>&5-av5I3@n0WW%xEP^HQj92M60SK67SyQaV2N3Kz~iiB%HbyV!L&}m z#&xHt;~2Lx`M|NsqyLV%_o6Q&@Rp2AZwI{3aI^60Yk+-bf}$z@CmAowA=0$m^@k8; zf-NbB3Z<4+N6=Bf14T6}RE7poSGMt%6?W)*Og^C2LDAi1L1JxehbMYwTmk~WWu$2% z?d9^XT7OUu*yx}b>#}eQm4CI*(lglg+7VwQ(+g*Vt#&z) z#>+zO+2>eywrMq4aqoLVl?}Ou{5PDICfq5+x928I1vSSTs-k)b@JDOR#Y9qzu$*(q z@H7dxegP@zk5uqq8W06h!nqKZ1ZP%tw~w>}_fXiirTLaJ4F@xR!va%Pe%X^9%`!s9 zfOR;!NtkA@cvn#9Q$@G06klOEggohB&q0&Gm)iLcCuB~(TB-SnHrGMAc>GVuU(pY6 z4`rw2*yx)Zl%odkbzNu;U5@HF!`(7FN0-Mu#Bd38IG%)8c5mfSfIKpg`J6H#pq}nW zZZZEQFbjT_@$k>ZPnJM6aoc-e|E@vCZ-`IdI!sbf1vER}H7#n-NBLnmkotv+03KU= z?BidU8x~pEB87in6X(yeB3c&s4DHRfJ2OQ!cU5 ztI0H)0TVPQjtN_ZXX`3gp$q9oPmiYtAy5cXhVDTq`MgCU2!Cr=cMP?|C zp&?MXUTD8RQaT?2G1#V$LkETvl@CP;bc=;-b`N>q%Gp;*o*-SK8-^xa`lK})n{s~5 zV6gZe7I#j!2~LYE5X|&oN_DmF^llfAeD*KHNQOM&NRDvbz|op-wFke9-~1X8r&?e? z99JRB1k{2#jhYi3NQ$ihypFQAMNN+lv~_)Qr|UlzZibCywGy zPrm%;7cD2Ns!TTJN5^m(nThg2x}U-t4R2b@(vh%TFCZIg(4RG}(%Fi-%H7#Y7+z*G zBK1vLEAM4<)LTaD{2{YhCR_22_!yb=7uci9j7VxM!`;$z5||vHbFUce_DjtkwR=Ot19W zH{DjvrwW1bS2Wd+#EpDNzLd=*@ud%5J!Pfuh<_s^_hUT&mbC~XIXmIX7A?c;sql=_ zvp`;7*?Z0K`#u=-RE6$aLOd#;tHkPtrrZ=ZPcuX=7aZxmCh+GnWOd>M;#wjCmF^f* z>2mQ@kj`u$;yEQ7@zxS5K-^ZnKIfjyA8}a|-ZQ^*(3b8+Lo41N%tmKl$L}8GDx~9a zhF>KzBYt%3ZGRcU{a7qpjnkLfuH~R})8qDb(nxNtNo-tL@cwY05XXpcYt6 zcD!_8;j#ko+?GK+%2$AaDpm&^*77@w@{Q7mwP4O ziS5qww{*LP7T5t*3`EyV-c%CtwuL8F{`Xa#r4EGt_5MFJJ0oyC=#0A%F1W2dggm9R zysD)#>p`OzKa&+733z5uBxU-Kt9HU7V!)*J=*8)>{3ak#y1HLmi8h|K0sVa~9vujt zgnLN2uP{-U+=#SaN(}Ue`eYJ3@ z2_^Cw>9pSQ6$Y8y`P+8zEayEI#x*beefrhE=Y4t{)f&KYNXgHTnp5OW&kZx%fhkmA zs313N;z`|JfeiT+lFl!28FUW85bxsb8&l@6} zta}&BQBNzjo^U3Kg#qENi#Rak(&!>*rR<;x@3c6UvcQg+e&W1^o95;H8D9*~pWF3K zGZf};Hv83(@MFwXRNYHqHkF9keDctK5kp;#nDSGqa|1#BG><{lcSSf%yoXHMjE9Hl zFx>#vOP=V}qt@ny(b2J3>1M`b9n8$=-5J|A`?8UVgJ#vHU|^^{poBc>p2k-)e;%vD zuL{2M6E&p-x9CCY$1ih%gOe>1Hl#Ti{gvgQq0rUY_?4gP<7Ll>EdhkzhRnp4XjV3` z>7_Sz`jAbQ#0m|`7k#k4s@`N#eYkHAG9_u5%RTs@KYj4UK)%q0h@J`G06B|)N z+0+P5t+4l9VS?iMD%q>)x8rH|>%51g$AZD0N_@{gR;|i*TLw2pRyz06Qe9P;e_6V& z)WtzJB;0#^!=5JEW^O}mx{QJ$=sIlZ`9ZqD(w$E7dON5vMGA&dv~~;_4h=Ox_q9#~ zGed&JG+_f#z~TOrbH}4sjWWROxo^((<;@cg*Yi^B5$dwQzJtjVQP&b-s9gCiga0*a zF4#)nk;i)PV6`(hkb&kNFs71B7* zQ)kDG(H+s07;@ckl0>>w+=e92o&=t|^kTQ#AoR|EWcl4$m>$c@s4QtGz*)CH}}Vu|GC1klUZms_3xsU8+)^`H9pLI>;C z1q7~t)sCzjwVxsk&?;=T*-?rAE=StxcIw#peV6^;HoQ1Q?kL!=escqj+85pCrzM$c zO`hD69f$Ix&DFJ+A_(dhhWgOH$OlIKV2Y=kPcoXh1p9X|^~$aXL(y7B7b$?|6&tk} z%w2;BBY{S&H_AYpydQs`u1zlzp=Wto!vm*wC&=>Ldl^j2J{ z%c->SZ@oq{tc|-TAQ%|*KaINYE{fu0TXCR(%26)*XaXNq<@cgZLJ)iosLN)vrT#UQ zaDQ*n(9(3CQI96B@VH}YW9qHyA#ok#wz%6TtMy*{=GHqg*>}riyvO=#{{&Dyyow^(Pf>XY`jKrs9>`p9A98*6gVDxdt#`0&%rSHHqDM4?V)O6ofTnkUVfo{ZY{XSpp6OIKs;~1I_UxuIMm=j z9-+qxFIdNI8u0|*V>g-Ny{dleIW&(x`Rxh(oV?ddtedX((H~Q;Peyu~AbFY6%d}>~ zNb6qy6r<< zo83!4q><`YFuYFu)?OgFkUj77#&;*)b>`Bqmv&Z@1lw5cijx_S!eOeV5-(tpXggS)oqCG_Ov|L5i z-u0NNx{PT{SV+dmz!oomq&k`Yo-8O@++qmF{qciR0eGmP=!?OgQRiD4<)f}?i!s$5 zSRqc}P3$@Vm}acg@ztN%&eYN3hQ#(p%*+Tqml2QGpM zOI!hV7g60+>hTlpFD+SSt+m_IDWy$3oKm;>Wj%Quq%qMYH_^pz&4ifwiS=5UUxWgO z^-8`um#}MWN~`IL8huZgrtX-9Vzk9`mz+T=*`+FI@b3$}Ha^Pg;^Wa)(H@+$Ci&6z*%C10#M{a!P@jXLok z!r0?>j&v<*UkF-!*)}3Pls@9|mP5>c$G?}d|9s__0pWh#;Z_7NSNGC0ru2^Ev8<@q zk1B}arEBSNaS1NE!Z{<%#+4m{#y?H)R(TAE{my}9+wVy%$o8S`ajWuW~u-H delta 28283 zcmYg%V{l->)@?YkZEIpD6Wf^Bw(aD^n%K7OiJeT$iEZ0{bHDpuy{~Fl|L9e9PWM`C z@9wVZ4lV_2C% z3KlA1sgwe9vze9cv(!)FlRvWM5=bCLQa=rClMQSv`lOA1R2ZSsu@=i18CD)Gt7OCj z>*!G{O54=XUajOh1sK8wTS56|tnw=wv+X8xHG*ttgJ8bO*JDi<6uwA0QuoHXFDl6x zf+ji+Z|nY~wMC-~I^X43Kf)&QHdweCU}4 zGk2MjzFoCKT2$X7ic7(}g^&WH*+0YWcG5hSr&y5U^5qsl*xj2Q9U+Ph75VbOmiVl5 zcf1UfDE#$YfF~F8r%>HN{0SAPkhJ~f`bpptX(aiWb3&!rlENfumD4lp0kfETbqItm zKAz&cWnbnrhIlGRu6d0^F*r9{@Os%T8Tx=BGT@GbPus>9*!lcjTkkOO(F56_4mWO< zDmzd(PccD;{v+T-uG}PI*GbA5Fz!Bp$lWzw+`H^ZYK3TTIXd}O9ZSQ&W?nby#3Tu3v7#7XWKo|sa$Q|o#eh*9N!QZq@T{3 zY&B`C)HUd8)^^Ti2%+PdhjD-4qD(OvWKy3?3eQ|b*jBsdHNS)l{T3$pe!bRrO)QH@ z3FYXr`bWE!czJ^rG+YnCdRmTwTu7w$qaEQBtkDp@@*B|P1(VJO0Rn=F0|J5o0s`V; z!|3edX=Ccl;9+a?S5w!1mkZrj-||aj|A~!=0v*{M8)p1nF@kB^5e+$JA=T9CPeQ52JdLSJEgYT6jmNbkLs7r-Hx=jF zAYrL8sZ8ZA;+ zd@;4ZBVpnLqOjST^*XQw1^meDl-NEfx0T@&>Uq~@ixz3VjcRFq;bB>`OewP8WrAD` z+KfaEOC61#sh zI%=2F4NmuR(-?Os-pHx+_F6!5i=k1F9&2Pi?)?Z!Lyr5D-eNc;Nas`cxOfq|04>!( z?iZ@SDO$6Q%kZEJ6BiLjML7NbLqAP{UildiNY)aO#zinkpDym57+iXckOOZ)LmMWP zmHwn!8JI$oq4OMk_@fz4+?F}A&S6NFX%?aG2Jc5uJy_HC%GvwkqC>0T2A6fy6f&Pw zZI6=;Coh}9iWv-{>Q)`1a*uaDYrtw4jF}cK z5a7i?Si(vw4NuPC(r%M?ES0(aa8I|)s5<++r&X%y>_X_kymYa1JMOJ^^cH7B?4Fk4 zr}+Ne?p0N5SwW*ZVK`Rr#bm5(-tHU-#VXv;czfl*{RMd7U0nE{55jJ0YMpkncBeL7 z!4=Ogaol)X-Zvw75q4zif1)mOq46c(0G)fCzAgL;4JlXzcS@QBv5Zc{Ep4iug~nZv z{jV_!51d;=A$Iw-t|&BPD2o1Ns@#uO_#IXurr-TZUTqi(;45-71B2Lgl}dneF2ya7 z2~9m!*+{Ppj)T2|lm=}`^sIOY#&o}RUz~!9532N8im=K%vqgOu3Rh5+e?6n8LM2Uv* z=x__Z8t^Y*ARz1CKoS`gumRTp)RU~lm6}W@ly9&sX>KoE zC#umQ4$#c&wA>4iT(H6`FDdoTg?EK6>Jww4KVkP+n;g}!(dYD8+PS|mAd9<)FH2H< zc={_9h<&!$MjzmXc;*%`W9^&VMATELryG64^2_(%&SJ+8y)`lJr)5%-G&5p?Saef`uw$u&UQvtt zSbnKjs&XTw?j18`Pk)cVxNIcFJPl0w*`21yk&E#8Lb7xGiI=!Fd|Vs&R4i=#b8gMq zc%tU(8o^YA{D&g3S0QrD1}J78dLY&DwLVs~kpBkyVdL8~P|-pN|FM#Q;9kdcT3Y23 z#0kYtTlS*&!g%-$v)^*l8hPGF;_0dvh-RS)Z;Jlp30)W$VP8O@$Hz-LsUQM$5|^$} z%k45n7!}#{zBHf5Cxv(2iR*`WW8xWn{aZG^{@Wxa%)$l{qlfBK`1os>sepzVDI)cZPxIV_N1$`sA$$*(2g-u=NSo?yAgOCco%Lwrz}ZR!e4PBL2Ppy(&-3@{b26jlh2rIN8!j_P@yx!Mo&7;?}*f&}T^m+WN2-buX69KKDp zJq>p`+L@RoQ@58AwWy?f<{tTWJ71=LUEBSjVW=#rK5DGBBRJpaP*rK1_0gH0>S=#? zHwxjcE=t!+p z8)$1{7?}z<@MW5~Nw$FXV%{O(NA$(0Is_&TAvX+@miB0*`tFoCMot7iEs&UaPRi>4@o4Y z76!074rU9zJ0y_)?0G{W5pBNh8kiKw>yp2I9W}BUs-ra`Mg;sR+^Ks|=y?7lZ9!_U z{w2HlyYFVH{!eQDot~uqz_HuAdc}_+kxH{IHQGeTH{993FJOnPs0eioU5%ob0Y9Du zwpdC+>N$o^9H2RTzG78*YEe>)Y~iAjrZItUe)~1ILCc2hhN1a#*myY|(&8mBAX|+k zZ7Z1}LVtU7eEl_>XIxODVbW}``A;L#G}sh(BE8EwZ%O2qWx0`Vsd6a^9(>{o8q+&8 z9!fMMaV4ZHXNoTIW>u-v0@yItnA064>5FIz-o1F zMdiFMU8uP0rcjR3?+DkT{YK?9xIX|zJ8{J>lmVQjBxr?>!Z~()l{*G{g)0(`^q_J= z2bsH@UU{4mRul^+_;D#ekG3H$Rz{?-D%+F@GC~XApnNn97lD8#nago?wDdP)iIFS+ z78?y8Ro3hzSTYIPuMj(M6v8@`GRKLHLTKc_yud&ue)e@vDcW>W89{-kuJk%<p{*Z_bea$lDy!@HzZusF_~mZ=0wWz9Hh_MhBr^wd zg5QwAj;rwv3XUb`|5A#H-wg;V<&ZNIoA3_ZV(6Ve^UIwa5u9dnV(7L=UB>Ii770LM zN6>()hhKblGo#YhsrclWK3hb8qsJlHSrBEnpAkc?D{Oc;KmDo;&~^vnaH}H6O)iN` z*qV~)L?o%9G~Ud=@T6N$P%6`;Ti2f%V!{{De!gA?2f z?qA&n4RzcmI=3GN(V+x1hlYOG{AB!drds+gk6s$w$OJvl1&z*u!NiDJmLFz8myBke zfzZ#qDjNUw++_$M<&KtsOr(_BxRaY6mS#3#lRbNnoWkb)nmZ{McFJbX0%X$e|P5oLqu*+`P)r>F( zzeRf)!n4X_;GY`1!b?wxW#-P+Y7RiU(fqZ`wD&jgj^S|c#YDan3!5$xQ69?5pJcLj zHytizs7Bk2%XpzplAQ!08P3`e^>YjF{m%*icKMf%P6`^a_SHszPjuaCiN%z{zXfP_ zi0_5yv&~beB=rg)nE%|~ngUTw>s%5byhVCrp%knW!QtMpVf&KEk0-tZIm%oAGs3~w|m_(XLM`I=O?OD&tErqizb-7;daHI4j4V#q5&^rp>^c1^ zJ!|hlkpQf7_WJvnR6Nbo|AZVs<>3>p<=P$O3z87s$5pBe`~f`{6iZRGQCzBnXae>( zI1lQ*z~SBRf}jXt7d4%)uQWoah>aMB@#}zr%pNU_C{L2SG7E2Qo%V*XIB)|!wL2qR zXpD)Ck-O?Iy^6C(lPL?j$;3~+ZL|@-qHe<^N@@U+0H=wcE=ge3)g+__s;Wq*kc!q{ z21yBJS!!PwS{F2j>{cgE#l;28hyh#%M*AUweQo%xo$fRoxg(Q^&nqz$kJA?)zrR18TVd>Fa)&RW5InZO2g^13G4JH}9 zpaY;5#W6sS<5b2FHLB>2hO`Vcg*!j98wjJM%KL#t^tbm%joivNRDBz#THV1Txndd> zXs%6IBcgAoGA4#&BvBhJ_1_iLX^6e4hF5$^l^Ms^Ir9a%SJU(sHRaMJ$MT~OzbLg~ z<5{;^*jejAj|`VTDk1~&t2$gBj-)()xT643id7_5IyUtPBm@QpFV3L$w70Eq<$2%3 zX{GZMBw~?m*1_mk3b}GAK-{_A(Cu{^tqbCPTKt)@Ql&xu9Qqvf3WMkAO)!C4eQykq zeP%&;dr~%oA><~8XSg!a*ap>UWMVhd(%A#WfZL7$j^eE@=hdvS1R)ieH^*jVb zUlzj++P0_jTJN)T7dgCwqNb`T&C2-@XG@gXKPT5qK-tntdxFopg`zt!Q@^0Ne0MRz zziGL1eS*d*ZHzpsQ1%MmOs4xeR~&#AISXkN*gO>Y^DC(D=IaCFXvL{4^mJAB2b-d7 z_3mElKD-T^HXY=K8=80vj+8#>B7p`FI~jW6>nyipC-wtdRrw3QJ{2@;-)c6=Ix8|3 z^W_9|hg`Q@%C&ed?w9Na;%hv7?i}<}x2briRMLxia@d%gW&BiL)iD+EojLGu)Ok_} z>H=zs-KxphR<@W(s!P|Ob%5B*M$A$@3=%Lx0(hd;IEdp!OJKRENOifc6r}gEGA?AS zenpISurnBwHi%xU)@kNa=o!ZWMV+G={WYyL4J!lZHB~PY0ax}~cS$Ur+}E+Yu?V^m z>Gb1F5uWF@6+GX#7}>kLg`Drt@@j@^P&H1${cjuL2>p)R+nXUpny!G)0~~j1Vq{A( zgiX@JI8%h6Ptd@otIZ9;rbmtp^^@xiQi)r~5~W&J2_AhEInraX^=V_Wc-=JEru*$p z0Bz$KD_8VXIfU1uh$RnaSMD6A57u`bdEJ=i#!ej?oF*&&;IRfJu-^BselE73iu4!M ze104J&NP7~0(*G*y8>|aV|^|NZ#{uxzX}<8Cdu&cyq6B@V6cLHH&SsJCV%+_{w{K; zND=P{R{)Yt>tVWxy>z@>Hz$OjDS*{1h+{!RA~0?+qe=cfr{1WbXjAAX)_E+-jwRw_ z5k#AQObcaP6st^sDxqQxGrCw&;ikg(Bp&if*?MB?9x_}FVl==))BkTM~w5{XO#a+kH z`5!=_)BW1uYa6S_L*@N)`{^YZdsZY#Lk2MhBq2=`BA1_`J4eKa>61rd%6{yTdBhkL zK~Y8&BCI6W*b`tS-D+Z?VD6o1JIqX_8v3`1XM}{d3@#yLS#q4uV@3g=Bmo9#CBe19 zUpkJtbSB#lxFD~oo_$%AG1FJny=pnEc(WfnLXF*r&BL5Omc z*DR((=V;-O_kLq+_W62kb&a$g9ZvN8c*QW-Ac68P5uEP?DY&?r3s);RxXr{xLu}YJ zLYYpUIBXu%>m|CQBM&$IUUA7E{)X)G5PayGs*c0tkf5&Dq-qVNpW=7H`(;-^=t(+2f#@wM|J#3>@R6#WlaeWFMeZa zEP&L~d8X=wue5atqDz~h;3l8!fMC}%jW`7_}s`YN6Z-OJ>wV7pWU zJ32B@#)FzzboMPtFk6>4ZpI%$Otxl;96%XDexAQQ{mOGiE8uJrMh#+QfMR+REDfJj zem(D4AOn|+v4C4+sXOp?V^=OSEhCO&!19Zz+qne!!ySg3CmjA=mV)?OX$V(!lE-Wc&APo4AEwvY9-p0-p_NST}H!aeR05Rhs0M zFX)86yqdxxf0_bmiXRr2?){lr!U?M_U-eBaXSr-Q-ZrTcv=QEDYOdMERW0%I z8FNoDQI&L|t=x0EVC10Ov1+TV0id{MN9EB)M~w|$h@yWPj^=cSe{o1^h0*&$!(!7;GxKvi5`$b>AE;25B@$E3O z!F4C^;NE2zKiUbQ9S1e&g5ve)vlq9-zA0v9kMUOMhOl+ur}AH8dZO;>X4Ii#@eTdL z$3ck#P=D~Ls?}w`4`5rHVdDR`XCC~K|FY#YCc1&ch+ zO_z2Zf9=(ZQwuB1jV>b^93r^$v2_977b@Q^z=+KTZJwN}mb@xZf`;u-pI$Rcq+ce| zVmWgvqKg%VJ&N*J*}sembk`^(j|30G%`N)I=@iEdcIecI4L~@0Xc@j@0yW91naMZ5 zR(geZq8oL%L8A8c=M`&nMaNn>Pml2Z0{4UOJ3}<96Nmpj(a0fz`TQ$EeRTLiVDwv= z?<)J)n)G7JHXxq78Rk|JhyPxXihn-LQVG|?ef~i?-0G_51$!3Fr};;SzW znJ8d0B zZ+{2-WhpR zZASwMNs#}YZ@q3795m+NqA-i!m$bkE&h!>ZK7N(RrGax^Xo8egAP$?!LQQ4RPnG0x zF6y90{kq-e;cVUOtg0~+=0d|tO(51LZ{ToY))?+ zi{(N-##c?GUznHuL}`Uf!NQ&^7hJ+N7J-WTWpR9KZ^0BpNrCsfXvR9-R1lQYAd=J4 z!piO2JxQT&)XbR)#Q0^kTr^p8VN>YMAixG&FF^}Z>TdLlus@k?vAmrxJJldYH1ItFdwE(o8!?1oM8vkXQQ>gD~#HirVu^zeq z*;mKg`Aqk2u9?6Je`nqOEWyKRLvJo_0@ffxxbNji`x197Rch0#vgdazD%Q}TLnc=g z3e5=TI1?pwHBJ!sgJeR(Uo|Y79jIK0`V>PgA#RxMItx~FjCXq&S>>65+-!zJ(r^fh zl4WKMEPpvv`2^z#k-7-}aNN~X(_|#}QzO&Eydsm*sD_HFjONcJe#6om5(EofW*+!{ zu9T1!B8x7v+Hk1XKF9Dh7#Dq&!XMr;RSh=69;djpkA}*MWHHfR5 z@9UISX4TKR*14FSA-@^C8AKv7#COJ0Xbj)Pp3Gu@TMEAq!Dh?GpFkLrNcYWyZ2jcQ zYDRMk)85E6fq5Zba^pw95$r-_0I3=>dEpP{OshT#lVtzNFBQY5y$@uZNcF?E=u2;t#mkcyv zKW6)PgJGZC&Q25rRkDeQ4$nv7<;8|Dn8os;;7y=Wl%k>0(5@*{IY56?qpKtDMCJPx zZ=ZN2%?M*=u;CqtW3Dzq|CNO^DQO9bWNMew+xzSA^FTGQ3zBmH%j*{1itkIW%7rWh z)Pd??X2Sfjn=XZsoRH`WQaAmbnip`MTU8f{Me()joX>K^Z?CcB#*dd#jvd1osv$w_ zBDnU`18d>-)E|;)c5-FsTx_!L2j3Cmkf<^Xg z9GiXc7fj8VC%Iy`?vp@q>>=we`A)v5?9k6ybJzCM!*1Ox1XH=a^lpY`YeQ`p%%G7O z)8?;9G}E%41-Z#Es+LB65FF^hbrh@!wmU>%q+BxIV&>*r+aInft((L zU{e@@R?9k$NBalkTbso;qI}g&gK-u7lX7htle0QiewNCCO&A$V=HUz4q0}dT;EHZS znQiakxfShPkhri8#b>X2oAN1OzdNB2ko#xWR^C-90%Y&VD9{#@L|?yE&OV>jWt5Ur zr0NGFK#0n-u9qSVvyvGU*mksp0NL7yQ-nmUbn1y`H?r6Fj!>c#XE;>D7=1(3B5p@7 z3xsK`-GGh6Ia2u#!u3|CZj@O9^{;Q?fqA{)N-InHH1a8+bDNZ5+J40ojxAuTbd(z9 z&1#{M!0mEw-4&Ko#Wx$Q6S4pEyIPjYb-5%iW(+i_ z{hJ1ZNDzwa(1lxOZEv?=SH1=^+qbcet;IZ zL2RWzTwI!Bsgn`dO-49Whg~g*kSW4dL4UWRSd)4n+tHc~b%m7V0a+a|i2KuO@cpHo z@HDCHTn&@LGWwc8HG`qk>m5N;l*Q~d2dGa&fiQ*ki0l%&V7`su4#!zU@AVK?fG^;D z-}C^<(E!`c$*=izZUxIV{ep+SN!YoE#URv@nAjRn2xc->MbS?(rx&`B-O%$gw&S2D zi&t+wNaazfQ5OjJy9eFR6u2not|GVDzPmEY7?FuW*0@G^;r~Gg<7*xt*I@UD7zlt% z5|YAbf$ERf? zonWmy#fSb|OipLcD#mfzQA~kyCg|m<7I5Cq@t%JH zB~!=mpIgi};tjKFlK-vStS_&F0du9V^xv_H_v+(bj;qn%n2oAh;RA%292(JAaY`WM zPX;yC?cYD8T#z-CRfX!qR+rK!&eR!$K?1Kc=^3(9O|Hv9p7fVcd?~m(lPq-l@1i%X zM`-S(+u9;t_D#1_1j4tfT)-|h|6X=x>PM9McbxCjWBCq$M<3xf9Y^qI`wBe4wFTg_ zblM6%x@*>QkK}^PEQKR=>VmI`7p25Tlnb}94(#gmi)hBJ(&gcv&*vKG-pS|qDvYTn zx&sK>Npr$4Uf8yq29?F`Q-dwmtiDGZBkO|?meLMSj)b5^vEkbYGBT_qmcwgo0D;xO?V$F^1EE1bWx>PDq9YM7>m!!7X`QC0U6W}KGDza4Qm z`Ogym-2t1*&lTQSofolVFrj#nqj{wJ^zM2qSfq}5gIwHd7SnB}U?>w%Zk2=*0X>?e zpn2WhHwDDNe!&;4&qu_CAQ2;&yXxzhUWP4d)rFIQ4 zEx7Rf7&D;Gp*5SjvYhEf-wPSReu74n&naGqHpvB(FVQLVwu-*Mh!}QfiBT^mV<(EY zcc2z4pDHitjj{~D>WV5210Nx_?r$tSa(PV=RrMC8bB9({FjX%3y) zm#2=lxcOPY0yxO@k$Hmr*&_Z{>JldGfDbYrL^Wv|fSGqtS))syb3xS88|5X3@#EF;)XqcxSN=s}CkuMG})BLD?j_vOS ztZ)fEx?hQ2?M7OVUh#1uIQB1^t}wCY9fsKE>!;ni_8MHCKkb**yE)I@jG1EE7EHEO zWM)p>p*dm=5kePbha#>xS{A4$G;N-S;>ZC~GB>I2Evp3k4(2$F6PbXe*;b48d|k<3 zNBkkb7g`g}S1#uG@FW+2kKwRKGwtqg6j8Gg0ZFNnv1d1rFkXWXQ*y9719F*&K3-OB zuye5wn{qkqzcz{-NpN%e-kfZ27I>VipV~Who@VU)MiTXH|D9c3WjjUEsZQv^f(d|# z@Qw}wB;s_N1H(QZe5htIK5z9WU$}(pk*Y;Fxy(fbPX4%D1;tfTI z#r8D_)Snl_Uf%EhS%=z|bi$dtX>!wPIu^gM!jbhqXd5WB>2IpL0D=ckD57P%ygfRJ zp6mcqvxPMAkusWT^gTtnFSu*gb4K76LBUQf-&JNjEBYI1-(FL(W(XQ)dqnltWlkQ? zdkSn?I+A!4tms^sR&%q?4Q3ehU0_M#6*j#X3XsC-R0@qlN(}GNV3PU{cO2QH(QCT& z$Js?6f6TnJ$(e0JUomnJV0+ESk-Il8u-?uz?b)!ckEXZ0-QSm!k2=H7z665iT1DGu zimSgEgx~4cQA;BbPCn>}W2i2XKkb62!a44^?Uv+dxvfc9I1` zkFSc!2omiyJCfTR#WBLd(QlWLvIb7XvppCliZ0th3;N54bnq`|66L;cOyQWHgZLDAEEK7kcGEDZJipTEJv z7=QKOK|6%+r+7rNellegf)1;)jX>EGb=Um;WOA(m36t`rfzjEDjPv0A5CsdaNrTJO zY_!kIw(w_>pyCY5yQbNO7-C$qD{@aNIF}#4X@hinBCbAC7idk@;*AL-AuQ$T&t$u; z1HE(_PU_^1p}bjAJO(bbdUwgVuTrUMpK|#DO?*GctIeQY_pm3wo;w5pXFHI=c8eYM zN-s565?8ZQEKxBryaro?lIr%INWYt(#!vV67Pm}YpN|LS5LW)ci_DFr^ybZ5tw!^f zHys@oZEsLuPRSeNGio}!pAhN9U{UJ15*DL5B#}bw?(z0!7vN3zHjXb+LK6ilQuO?G z)+uT?^Fqj5(g#4Wh$B07DgdyZe*3To-ziXO7eKf9J_3I$-j}DoEC3DcY_xG!MR|g< zbGh>Xx8F(551Cw8W0$OY(V@z|x}Ue-yhrEHp6kXN+f$t&J;p;wo=>t>%0W;xqB*cA zMnc$or6@=_05`PY^mS+D?EI0y+SOK7gUMd2K6K}U=N(&6PFJjoCGphYqXHAN1GX|e zvEh=sVv1D+2Di*{`8|Bd&q)!z5l807(W4!TC2TF{MywFV#PDI^aTD?R`AUPFe8N2f zWf)jv{m2zkt_`6_;)PzK)z9`08j&b{@U*j>?|2Ix05QShYj6sg&hX?Ee$?Kv>+Le+C}-bNV&!zTF9E%+tfx7+O|QPkkYvG34q zlL&FpS~0Mch#Jh_sgb@(lHD35LiTziErD`r47Ib1?xsh@E4;k6@axd;U>6iJ%e=D` zULV0o0*+BW!cdEdg_3{ynjm?$Ckrr07e;DnrN2WgaDG~~^3W7PH^?nlDL9O=G^*m) ztm*t+*G|!^A@(q!v+R_@6t{+x!p<9bk&116DNSm2G`^KkFNoXp@&DZxZyVwS)fln0 z;b8dD+)kxj7Zl^%vOB@=Yq2`l)!=$kQgV_^0Q})yemgbX!t{O!c^N0WOVv;7!C!9# z8Y=ng#`){c_($;lbzcH>UjuaC0(9R4bU*TSKMW5iE>4mD6H5O(V$YTS6D;?Jsa_^X zuOl^||2zDeUO!rN`CowlxmF4eq9_9nfew;r3l9x@p)_th$^`;48=Oe5Ko5`=`9oK_ zsh80{6r4Uf*k-}hhwuI6fNNTHzgm_8fw2r}q4q%4zMB+)V!T9bpq$Q&R+N+9BQAiz zt%04jaeCc*vtlbA)L2BXQbX9khYsDO-|EpmPu|Rc?L{SLqbyBszTkyNs1;;EE5pR) zrAbbi*e%@*E?MY>y&^wjiU11el4RMM$R-}>;Z;)t2ZDBaV4^RGajndL_LPfSf6Lha zy-hy9rpvP{-4d?xOKZ6>Oo{a6-Ep3Ja*_SeH~ddjV$d*EAMhji=1o1mXj=v0-__;9B+L*6EJ=ieXytOV$`vyMytCURyxLcFCAu1!| zg=zC460LsU2Np~w;eqwa*Hmhokbs*|48;ar+v&`CgAB@_xIFP6JDkm5@J7m-E`7QJ z=6Ac#AfbEPg^R?F&D#~j{;jAq>yX23rcm}zx}E7AJrb!-;-k1xx-ely!Bm1iE4MnifDQ`e^k9=!=yb5cbED$S|rhCkH*MtR#ebph_YaJx46rZqZ2xO8XH zEBT4)K`lqoR9^!FKRgImh4eFYmd4pXlj$7sJElxe?z2t~46;^_#iyS>i2nbT<*e+h zhJ6mZA^jnCBxHT5>NhHOH`Pm7_XBpF7}`vv6}f5xD$ln%F@FdLkc4FgHz|t*bIEuK z;)f1EANU%#@AkFhovKh&x4oD-0t=6cg317y_(OLyYVHWulJX; z*dC=p^XO$Hl!lWydv+7rFU#Wdj+hsDW+H&}uteliKAh&@r-;1fPy313gRT4zTaq}%T3o25tUl?C3u7ZAps z6nOvb)o6hZxhyp5>hNdlA_S^s_k5$2Ek!7O@%epH)EEJVZ81}N&ocum_RIqJzqoHL zTgr-wrzpSiLU6+_foK2NKVUgzjn^cttx2EK%x6rs zY9*Ohy@_wV_alSDduOL-nN@;Tn3vaVvWthg*38p$q{PAy$NA=+3Rs$l(uFxhYUeqj z(LN@q@NA;}$lYmX^w&}xwz7#qsiS2b5)G<l5jVWGIZHq{p!)r9IK%&#m@=X*q7hGyIbp zuXTJZ<1Vrf+4i1%KT$5 z;}*BG`Qj^FqRo#jQQ9*xL!_<|F_}pZON(9CioVJGJ0W`EV#xM^twOOVlRaqdmU=+` zUQq{H#J2IVxsp+IJn9zMpO*sDTXB_%WZn#q z&OdF8T#*(-HkOmk3EeU-+Wpw@qQ*vg4QyzV0?O?c?rDZzi^JxVes6afPGhIjdQko> zRukNnwkuYhrx11NVTxgNC~y(rJJo(S@jE^mse}- zeN)gI$QDZsW^6Co7R%uttXeFZZp3Sq?Sq4H&u>yuz=hG9 zK&IWBd4orn8EFN5!yKp5F$f(-H^R%}L zQP1Zi(U)KLLk2-v`KK^oYt|QmdmuFNGr?Y+XDrj7_c)|5vGSyFUe8lesDXwkpuF9b zcLal1bDBD|9gF-&4FrW&rL#T8?}w)a3;2;S`-d*66X6w6HV0WTteJ-jt@u zj$zzF_HW($DL4Pg&ca)Yy!y>-3kdyxtm0ZnEn;IQY7eLB^Z{O!s>2Xdjm<7nxl+tf zja|LBN05E5>Oo9A-e&k?7**u6$p#F?9eeVD!dDIlvo-e=rrt0q9d|@4H*J0<--@^a z5t4sTW!$NhNaW^DZTDs^M;}p(0;i%p+XAVk@rOilD?idLf+wUZTdhTjn!6y%6Iu84 z{^>kycp5B?4fI?!S*@Z%s}ssAx1=6hSPsu*8CV=kZ_gapxGYpdzi_RP5$MgBZTXlO zCrR+Iwk6PNOw*2)F8hK-swZ5>jkT<(=c>idbgj4(tzgsB?5X5P#NIPww4?HA({@9^ zb`2y;bda)t^CmJMPW|URbL(T7vf$Bo(C#AD^&=!%Ak{{@?!^&TzoF^H@x!9T^;n@S zI7023s(QBu`?F6ad z6>TJ0=y~ui?*0c?o89&?j25YsW)1TnoSrp?!8>0TQ{q4DHg*+vgw46q`+h{R8yEk(uAziqE87Ga(paf$ic?`>UK5-ZE4bjD`77WA~Z z6vfyUXilbland`YBh}Sp)h;gC#U;1$xZU-@Zmd#cz{e6M9M^St$EfO%!@*G8&l2ei zLx_S^xwB9&DloY5bB!9i2YGua%N zh?V^JlTM>R@R;vPvPJd9YF=w~0)6dGk#EqhPW0Xex|=ME2e3K3A?RopKvBnDX`Sl) zD@qM-R*B931Jx8rbYU7KT-4=r{&|3Rh2D{KxNP)}e(&G>=*w55$`aLBs1=V1 zYIs+ZLxPvJhs$;PwBpB7mw$sr=EC!ES%EF^u43d%`T$jL)O#|U4n*Hdkp7ijtc`4o zVETMD$4vgL62PW_UdwnmwbSqsoc(*LQ5RM+)9lE?{mFoy=RZORbt>7-qQ>yr!T**; z!CL5y*8hiVYu*32m29N`Up4a=@9acCFPNZRct+S``XpxRyNGsTUY^;a}2!Ile3x(w9oG!(vBWBnJyZwWtl-rsP zhq#p2H195^TW=OGr z637<$U#33&4gCiH?r7u3DbVJM(?cpm5(#sAp?H@dLlpLNKIBv zVTE9nk%>s`Cz?GW{LvB@V1CeTqNh0%&yAOCq?ON7MI0ms(OPsz05ZMkf2~XGsb5}- z?`o`@z2>+idV?|q@b8cF`!~@27L=~T+oHeB=QQBDd}>guXo=SxZ2$T3^#jY6LiPG* zm1w-xmA&fV-*R>prLmfS^9U3>9UtN~O}Fv$oB=0$x_D%6+KO?<3ah%E&gLX^m+|Fl20CYMHdm3?aot5mu=?+9 zfE|65b5ZdW`InT)M~dPH$hGRg>|dGnx;^KTcb3AsKuU<5b<9pv5!Z@nn>7j5iZIfc z`CwJNk!^d{&W^CSJD86q!A1(d3jap;Ry@64pluCWVDk(@E^?!AJ83Zh=T1 zj1R+r3^zOKcQ0NJFAHxqI+7`giC8vM*}11-yZ)Iqtgjb;sXS&s`XUUmpGxo}ZWa&E zi;t$pK)Y~49v46^=F=&ij2~L|23RZ+$Nr+f<1NpGzp_qqBD=tnP)SAm2u4p893JhHC?XWTV#GEpSTQLR_D^UGt+v9)?30nTPH&*f9Hul`g99s};pj>0d4r(fkrJwgJxj?G}nTu8XLdOkUx(iOqi@0IbYtB^lsHBw$ zm`74N$CU-eXUuXcoXn{;!uoZDyqR*RnOYTS=`oBt{$-)J9p}{+ukt_@Lg<^y*{N^DA-y0hUb=rEHpzJ)cND(e)w_E zIFN6NsF;$-#g#ULfPii#PmDZH-)_c>Lp$c>he1JG15P@*#ZY%&&Lg$K!bzP5#k<eGI1SzT_1F((=WXM+r2}^`(YP9$zUri% z+pKt}aLqICk$GwYcS9jxn@OO&FQk=iB|dK2%d|ncvf;c?d4Nc`^mwSxISUx=rd>w0 zdC7B|6XJGw75ekWBZtzB6yTG) z4gSGOZLDEvAriTDlIo=rYAb)R0AX}k5ll+I+^J^$7w?$B&6FgJWCd25kY|Gc)_L7_ zqer52_yq-eOA~o`vx*MR@dAC&b4%f;fRa9mlOc4>Ul`v?SM;I>zg3|HiE{*>ohP)% z8MDKBy9|jr9DJ|Shv-X&+OxyPl>?OI3l~@e`gE;k;c=4QrVWw3w;$JmvV}xORQ)am ze8y4Qm-J&g0M`D^#&aqpg#Qq(`l9t1W4k&=IbbvDwF#rx;EZ#Z1&^tGoW5!6RFNL|@p{&=$1nIsAR9@F2bTmo;hTA8wor9y1UIA7GI&PxZ%)_EtU*a3wG0B~$4SIu% zBi(g)NK?#ykGrR(dSwYHaX$XS2COo>f{PsSZb!oRR440XiQWgU6~!iyUk8|NJbIIe zV}PHeCn*{xQy#vEgyc{jld9K(eRx`v-=h2~{(G09E&V;& z8TLq-T&7KX4`H?P03;`8SXYQISQ-s$t=0UD{qt{D@u;wPLdXb}JZCv~Sr*|)~O*;8hZvC?WiYmafF3a@cZ9DiCY*SC!S zIU}sdBpouGaaEMOhc0*43z}r``lpFJp+!Z1sqFpaQ{mcoH44ct>D@)C7dNz8_ zaE2OCjvCPT6+kksbPS!;gL^REWnlNG4Xr$ zOe;!brzgdYTs09oH#2BSXfO(Y+*L_0>a%2jaWfN!DY@!qc`=R!qDe4Jn%-w_FGBX&m9(Qr z3~g81R@j{i9JnYhCS~WyrVqr+33cQoenUOTir(0IS>fZ&VJqTJl^SSq7_Bh{wV!F* zPNMFw{7qqzq-eS7f$;iC?i8drC1@4xz#Q55Q-ky~=!11}Ut^frDpp?tcAaY?B=0lN z$Dnqt9kh6_K0(XYJeBvEQSLep%yCH_3ogGpSDhyr&Ip^yKenn&I569?s0!)r3dZMY zqa=tR6R+Ko-UPT)Z3N!!`xgAr?&8vUqQjmlaQJ4B44wA3UUtntXE#v+Ef!+iepTSm z*83;1ZV_YY<8CK1-SYguFpP$DAZ1k*9AxREu#9?1InBqP!kIKl?-;UZHUi9}x1mhA zt*W0FIWcJ5Ic0oe=k7y4p$LaCBrF>2w9tJLy!l#0W5De|%9T$-<@nW5N3k+zLFmVlmpHH`f(_(&9k!)oYNucHOWpM&)g~fF+Rk)HqcG{J}5EP$1tE zVXP3~T3_{L#ktz4!V2CbEL{_|(r03c(*+i20%J>A^=jO=yXPyFIq_ak`AXhXlT|g? z;tx4bKGM2=NzpMUBPv(XNx}h;Lv1>x^CHbsCYL}SDm|b{pl88XtC8k9&ME@OGEm}1 za}_wGlp>xCa>f^aah%>qkn=u^wki`geIK5fcU@7h=l|4)MyM(<=gU0s_v|7^3`r?6 zdET%Kn3G$r9C0btDLozi_!(0EFO0er88e?UhqY!H18}mqOM((4X5WIfoc+KCPXu@w z+e;gOx22}rav(`(X=9%jk}3)!YOjp*evfV($OtmzKevu*apOS$1D&J2Ej@1qsaN;` z^BdovR^@n%Y(c8(0-Z=!N(ZmbvXVw$m+@lGXb zA98OfYK3r=O(hqCF1@!4@o&&u>SQk!TTT4?l}y3nmiZgFlTs2Ugj zMLG`$A7o9nK|Fg}Da9w-w*9F|c;A_0$`Vv*Z?g3SrxE)bm?Dmy&V@AFe9eL|+DaJ( z14(^h>&mst-Nj~kg`X5ViW(J5G`byJ?_6)a50g15hdVBaOJYHKJp;I>@H zDn13rGICXj2OApj2XC>-2aS^1yFG4O(=-oH1JgI&s3R%-zExh;6gTy^>FO2J1yN2W zo!wf_%DW$dHcz9gMaCPGJoKmI#&D%u`0orEF~ZB;diqT)rGLR|Jd4CRmM*L@E^ou9 zHk59b`pFMnt2;iuWU~Kk#E(G2S3xIujX)D-9I`R23V~7Js~nyf-1Ly>XBIHW5C%JS z;dFsaNJJv;yI+krp?=R1s!v*YtdI_QZ$2r_W7rye|FU})rTpAi4?92bN~4|%cH|jN zYSFn6-jK?sphz^!s?h5t%+tcryB!z#C2lem8MADdUv*^Q{9L#)*VimwN3|mPm-D5g zfLt!6^4{?I4>$FrVHFC}eArF0$a7z}j7_?%(Q8yeC`5Y zvfA~pl7PhlvAi2X!C}6rRj)dCTSxHyz?`E8mmF*1Uz*D_mUMH(JpSIw4-dLKoUp1n zgPi@4FEo-UlQQAqP&aKg`j%nej;(yn)*l4SU)l^S8-4oXMdm!uq*({~9iIckqM$AP zE^}b)!}@2+eM?RG+?xp96TDZko)MfSEIIdKyG4b(yjAn8SJ|R_kuHgPsA}pI>12mj za(K^ya8Y@QPj35X35U@o}fd~dnaFg z{rY-_>r9h1?m_Ibx2q@krAxL#UUL1AmExb zjL6>G+VpI1^fs1*s?z^?VSQ0=ohqpx9NdxhbzJA&l&)`8>Or_1ffd%IY!i5m3>RO^~`h5dVMQD4L{Ho?EDlUBU@Ukr(=J5IQYyiA_7i;j!%86k$j^Ka_Za3jhr20p5$M@ZL7OxfkNvLb4Nu8nIHj8A(vla9N1>=GpUtYn zy7YDo$?X&@J&*W+rIw1o{3c4Nihx?XyM7YdiE;J zEiulKG9G4^kCyiXt0Lv+SdUPMA?K=8T)DY6j42=;W;2>FVl!GliWJjCDw6O86?p*& zAKvAhFZ$&_Z>T4S23dU&@X-~%YT)K!SLqZxchJ2h3qtKXk?{BSd-9 zJC4+R;@Ctl;R!nn)wooxW$Pm%!A&QiTfxeEAb64V@CBIG#U#q_nGA-sGqxMo23)~v zm6Kzb<=dsbYNeewN!MuV{yxW2@3(}35f5YTTcpKSx)*f~EBFh!y;UL#%2`Ls=hJoD ze`pIq+(7R}8Xpe*>iL+6Aa^7Q8d**&9QS2Qtq+I&qtL~aW0MWOUv`gzYk7+d1Hu~1 zVQ3COtpK}Ac^mxi?UL3WQS$-AN_fTWS1Nd-T_5wzb{;eT{NDad1(Zal0CdNI zEmD!!SbezBqz2d&?G;0Q0&Lbz!(H+T`XTx*j!A4@)T1F4mY0=V>CCs=dA9uXPRCTZ z9|0zXuTZm#&j8xI&jO0-FKWnL_@XgAmzZV<&m< znXs42Hmme|0z^v!;h7^DTB<}5sC1=IVrLKfpn%`oUSpksD&HV|1xB?eBzADcA)_cg zd)&_3MA5wXWK=^YQwTDO@)|q9>+j%;Tn8&X8UDlkoX@OqK!bsvVz$8ntT3;A%RgiC zxly}PQ*}HOhAVB-=`vAFL@OV}(NyZ*Bmb?5ZXm~z74>#B%NXXJ?K}*zc_$&KSv$9#QdcIVq!xzcS z2eyUi#SxW5-zU4>VjTu7T{~4Ti?%GEa3zKyVm`9e6V5&D$Y2(tT19`6zppP`?k{*T zc`er+PpyQ<&(=@UKLUXze1&XMI{E+|wT8|84)7{ItL!tsKubaM0?1XERI8fG(A z8`@Iqpjz?Au;P+Cv;+AUY-)OOD}01s(uzi0Z9~uc$y^-{o6WoCG(AI0m@i29;>0;d zR>jTe;VdEa_P4nN3P_t*L?NA^=qRI5WE(x+UNeaz3$~n>A}Pp-F=~*r4ErC~XWAS- zp!J(W8j3K_X~~~a82IjVbSK=0;#)-fM`zUY+!#m=T+o5#wp6-tgzJ@mzZUAZU8VbN z%wZ6UV=m9m7w~4CG~C z734uQ1k#OSlK^_3AJF;6zBC+%WWToDIjq6#KnB}cV7%P?X^(V>GbyofhbP^QxN$EdH zPVoitwB?z6J#mh29%Mp{I61r(Q8kB(1j2*V7)!q;vO<-3@-M9_Iwf2}PlO=+h%`ri z1OZd)qMOd;*nJ|i=)6-$^s@+Ywb^q%hn~q>;dc0*;^1fHwPr?6PoLPl>%!mX1ox98 z58uJd38O3DdP^dg^P;$di@%SF1atYd-1OUz2G7zK3gQ)tdasYGKB15XTArWN(In-7 z(3xmrJtm+MtlFqN1{GH*p`bzruhJ4d*;46S&peaEf-CB|I$7;pak-z7Zq;yYj? zDWb3~HZ4|l#s3KoTzAN(FU)Y_HQ9XWqinB#oE!Dip+>qH7sWKBWlY4hCh3U*(bU)j z!4>7o?MMfi$Hyn8%`PDpg2SO11*UH$1bm*g6+AyO;V4r#;~m9x%BhsR9HZDq}IS>VD*a^rIlm&Nv&v%D%pqNkgpU~S``*f ze(gq=Rh}P&-cCtztL>P+&DpV8I6vBNkST@QG`!RfbBBE7_}-Z$Nfl`_VHWnGPci*hlutJ3gL{dlVSBKY;n^7Euc(4wjG?O88wiJrid_V6AEBtT9W^YIno7bFW8}VE1li=!SL8`NXr_8LOkfTKGqy1X7c^%(u8!-fR6X<>Ezo#vpQDlE64FE zJvPQfT))(0A%89$)l397TV0nM6mnig=}nx6Csn^|csdluog6w>h9>kL-15THIdbGz(DGTmW&KTR;WU7g=Se&1day(jWG>{qfF|tLViA(Kf z%lRLOi}m}+pnZAxkzVAhQzjaKxy_&9kwzK(%MUO6#a>EEY|7uVBeoOPs<}1IIV;%| zGYFM1Dr>boOs_WDPugN1P?B=T|4j-Zhp4}Pv$}_-+)@*KsV7C{GmAeJ)7f{?>+uTy z$+$~6bh_N$P?D6{Q?ws7q9QVgXIUtoig!)kmLqapN?|uG6lEkQA8!EVMKMjN^Zqf6 zHDxCy*8{}IM77JzRv&pegN3vkxBc0O64VhB9MmOK%?rh5pS+}ik7sR5sTM$p0$1d_ zZ%rfp>yER{>$%aUu2a05Vho(6C{IJPDu6`g5Yo+>L1`{$OTC~eUIj_Yc2%~q$n9NI zIgNwNr^BM1RXb}&(RNh7P}Zx?dm7siI-Ir_G>?&={^&V~zKzuBRI;0SL{M~ArEZWi zC`sJ3_4U#2*chno!q8Lhn;;d~VrD7S|0s-n-x5cKEXP2@J4ys~Jb7iS%AubnEK?5~ z3EI9k$K<(br!(gg1blnuMM)fEV+k;q+bzcmhp^{)99q_uq&Q+VmjEWuwRCC5;I>l3 z2IJEa@mBbBr^ZhOk(#F_Od*BAIK;DZ-6a74vS*zq7M`2P@UMkXNI295qer#VB<@ik ztt7>=J0&Jet5f+)A4|AaHDbp^504UTl$A~*=!sK~h`%RF!c^*1Ch23rQbI+h2=&qe zsKc{QPk#awZoO(WG{0k{e#s{#khKiiCjAJWEZN&rihLd*t~;Eok+`NO_I)ecT7p)* z9E&lkHy>-7$%?HI@kHVSwf6xYnY>?OrcCfDLP9IfD|Pqp*5v!ii)Dd6!HUkS9? zG+MJ8Q6gw}3ASwMGZsAC+_IZMP>OSX{@@M3oLuN#LHk|;!J*kQ5T}iJrSU)L@Jeu>f>(0&>{EH$CS zNePu7g+-o+S6LBK4LFb2VQ9CqlLW?7UV-lgX4ATjM`k;ySS|E3Ho^+Jy={BUAE~8A z?K!LtQbJ52#h&}NFR67F(X4M{fF#JpY#DI zU7V19tEsBI@GEzur1suIn+p z?v2@4JUO*xq6@IqmQ=Bu+ zXGt*E1{0F!q&~01P~0i-#PV^?GB^pMRn;%`*4{L4>n=mMRY`g;astogYd7n3Uf%*8cyZrOXtl>)*#QeDnHf7%OVI-P5eb_EDHurWLs`dLYSotR!*?JD6;D~VaxLNx-&-(lqk}An_5U13|22-+EP6ho-z-}CBj5L-E zij6Kd?QU;~WKiQg3dj1`AbxvhSkI&X14{UuYD<-7zeT)WrufY-w{@{}rD2FO5@t)O zH##*4T{myd=XmR&`Q9wmcoBuh;_J1sIGrT+NX_qMT1`XN9Vb`1Cst}ihT*56n%a(; zBH+rp*r5zdq=ri1t?dZ0J7rn!OyVu zOGrEE5@N=dzPEjaGjO-kY-j#dijSglAgJ$_*E7Gb5J@Y21_F>@ims*I8P@zH<3Er- zXbp`q=xpq|Lkab^@#EF2eHAOLd+f#`Pai161GExnMP}f2?D2?PzS1fXqa1Amp%iI- z9-o(^B*ccV0ac!k4UL5`U!1dlM~0x3b*|m{g z1zc%uv`2)-j=Zz|_WMpofC}#EywGRjKzTylgqv?3rCW~kGY{}jCDtda!c(`Ej`2(( zbZG~g_Acj%oE3fFL)xl1(F@iC+7RD3kHeR6XBQmWknT<0uV}RJr-RzcJnLro4i>Oj zLHj&ink;r6rt$ObDynPGnplqT> zR&SIH3PWMfrRUS#gx#f1V5|`L@!_YBo=Iz5g~EeTXwTYwX{mS~YOV3S%fwZ-q2Iyb z%_&I{DoQ>@dRcZ#B={EDHbiy3g?w@PLjTaz?c-Z;vOoys5smKycLL-P4`kxc&ARL7 zt)CTgTz&aGEq5T4jPXXD6K>Vild|adCgwLF|e?|h}8&8w! zndEGNFfUg{i7OM1Uf(Fp3>ll7jKe8{tOZw*Y0c2#2(-XfHM(UKcZ|Xy2h>u(eDYFV zT%B+*>c|J4uv-%Eb67KqDXJag+u);PF8*nU>>9llxMCm&zdO6>dbnO@T!Y+grRV>{ z2uDWjVm`^0Gc18mMhl@sv>N<<<#~^E@=d8n>*|_$THWkv6_dt)A5%5@r4eEWy&7+o z9dCVM!cZ}FkKq<=TFUVh_gwDWl-xVLC>@OCOK{{#{+QbMiM-KzQt(@+dP`CJ+-Wfg zYl+fYN;N6MJGH2zG1}JkmVwIwV>dzj=UkiZoW&Ip_kipok*CrSgs}R%U^h=M{p1@K z(%giP@oIjP_QWIrMLY^MkSF!0+d+{0o1KXdmYHG|Jx#-Y68*XLSd4v$cf$Qnu32nO z4)30(%l3I>U-?+g^1W^5CgRX|Qf7_`ZyaxX{3@M>mnY>`@=*L>)PzF9rS;Md(D zA_?YKoyL1S_MGYLlYNi9(Q53=;bmm$ctd=LZ%_K!Horw^qSuVJ-&cF}8yeMx#pp(% zME`BN*v${-cm-Ng+Cj2SnuM!XzAlw(!oNLW;D)jJnE#^#+e3mjx>K@7A{*WRZ90WI zjradQ|0F{bp9B6!^B6Sh|A7AewxmiH(4k0PN#w(brTzCOOA-a(zdLrIp^^Wu@mmbZ zhDmII|2{a1{(lgjYooBxCf6o$Jvoa+LrdO>B;(fAK*!)kA;Lz(MImEC`>Pdt=xAt; csD3u2{|o(5G9Xz7-8b1RnFU)X;V