ࡱ>  T8\pMasood, Taimur [USA] Ba=    ThisWorkbook=xiL;$8@"1Arial1Calibri1Calibri1Calibri1Arial1Arial1Arial1Arial1Arial1Arial1Arial1Arial1Arial1 Calibri1Calibri14Calibri1Calibri1 Arial14Calibri1<Calibri1 Calibri1 Verdana1Calibri1Calibri1 Calibri1Calibri14Calibri1 Calibri1Calibri1Calibri1,8Calibri18Calibri18Calibri1 Arial1>141<Calibri1Arial1?Calibri1h8Cambria1Calibri1 Calibri1 Arial1<Arial1 Arial1Arial1 Segoe UI"$"#,##0_);\("$"#,##0\)!"$"#,##0_);[Red]\("$"#,##0\)""$"#,##0.00_);\("$"#,##0.00\)'""$"#,##0.00_);[Red]\("$"#,##0.00\)7*2_("$"* #,##0_);_("$"* \(#,##0\);_("$"* "-"_);_(@_).))_(* #,##0_);_(* \(#,##0\);_(* "-"_);_(@_)?,:_("$"* #,##0.00_);_("$"* \(#,##0.00\);_("$"* "-"??_);_(@_)6+1_(* #,##0.00_);_(* \(#,##0.00\);_(* "-"??_);_(@_) m/d/yyyy;@,'[<=9999999]###\-####;\(###\)\ ###\-####0.0"Yes";"Yes";"No""True";"True";"False""On";"On";"Off"],[$ -2]\ #,##0.00_);[Red]\([$ -2]\ #,##0.00\)$[$-409]dddd\,\ mmmm\ dd\,\ yyyy[$-409]h:mm:ss\ AM/PM                                                                                                                                                                                                                                             , , 6 6 6 6 6 6 6 6 6 6                                 *                        6 6 6 6 6 6 6 6 6 6      , ,                  4 4 4 4 4 4 4 4 4 4            (                         ff  ff ff ff ff ff ff ff ff ff ff +  )  ,  *  8 8 8 8 8  8          * * * * * * * * * * P  P@ @  P@ @  P@ @  P@ @  P@ @  P  P  P  P  P  P !   @ @  @ @  @ @  @ @  @ @ !      "   #             $ `  `  `  `  `  `  `  `  `  `  `  ( %                                                                                                                                                                                                                                                        &  &                                                                                                                                                                                                                                                                                                                                                               '     (  ) a>  a@ 6  a@ 6 *             @ 4 4?  0  0 4    x? 7  x@ 7  x7  x? @   x  x@   x@   x    P  x? ?   x@ ?   x?   x?  x, x? , x@ , x, x? ? , x@ ? , x? ,  x? ,  x@ ,  x,   @ ? ,    ,   ,   ,  ? ,   @ , ? ?  @ ?   ? @   ?  @  ? 7 @ 7 ?   + ? , @ , &@  &@  @ ,  @ 7  7  ? @     @   @      ? 7 ? , @ , ,  ,@ ?  ,?  ,  , ,@  -?  -@  - ? ?  @ ?  ?   ? ?   @ ?   ?  ?  @    ?  ?  @    ?   @    ? @   @  ? ?  @ ?  ?   ? @     @  ? @   ? @   @  ? @   @   ?   @      ? ? ,  ? @ , & ? @ ,    8  !,x@ @    8 x? ?  x@ ?  x?   x? @   x?  p,  x     @ ? ,    ,    ,    ,   @ , @ ?    @    @ 7  ?  &@  &@   !,8@ @   A#x@ @  @ @ , &!,8@ @   A#8@ @   @ @   @ @  &!, (@ @   @ @   1A#<@ @   1A#|@ @  &!,(8@ @    @ @  &!,8@ @  A#8@ @  A#x@ @  !,x@ @  @ @  @ @ &!, (@ @  A#8  ?  14 .@ @  @  @ @ @    @       @ @   @   @  x@ @   x@ @ ,  x@,  x @,  `  x@ @   x@@   `@ 7  x@   ` @ 7  x@   x@   x@   `@ @   x@ ,  x@ ,  x? @ ,  x@ ,  x,  x? ,   x@ @  8@ @  8@ @  8@ ?  8?   <?   <? ?   0  ( x  x @   @ @   x@ @ ,  x  8@ @   x@ @   @   x    @, @ @,  @ @ , @ @  @ @   7   @  @   x@ @    x@@    (@   |@ @   A#@ @  "< @   A#(8@ @   A#!8@ @    @ @    @    @   @ @         @       |@ @  ||]JN}A} yyyy_)ef[$ -}A} yyyy_)ef[$ -}A} yyyy_)ef[$ -}A}" yyyy_)ef[$ -}A}( yyyy_)ef[$ -}A}. yyyy_)ef [$ -}A}4 yyyy_)L[$ -}A}: yyyy_)L[$ -}A}@ yyyy_)L[$ -}A}F yyyy_)L[$ -}A}L yyyy_)L[$ -}A}R yyyy_)L [$ -}A}X yyyy_)23[$ -}A}^ yyyy_)23[$ -}A}d yyyy_)23[$ -}A}j yyyy_)23[$ -}A}p yyyy_)23[$ -}A}v yyyy_)23 [$ -}A}| yyyy_)[$ -}A} yyyy_)[$ -}A} yyyy_)[$ -}A} yyyy_)[$ -}A} yyyy_)[$ -}A} yyyy_) [$ -}A} yyyy_)[$ -}} }yyyy_)[$ -##0.  }} yyyy_)[$ -???##0.??? ??? ???}-} yyyy_)}A} ayyyy_)[$ -}A} yyyy_)[$ -}A} yyyy_)?[$ -}A} yyyy_)23[$ -}-}% yyyy_)}(}+  yyyy_)}}. ??vyyyy_)̙[$ -##0.  }A}4 }yyyy_)[$ -}A}@ eyyyy_)[$ -}(}7 yyyy_)}(}9 yyyy_)}-} yyyy_)}-} yyyy_)}x}xyyyy_)[$##  }} ???yyyy_)[$???## ???  ??? ???}-} yyyy_)}U} yyyy_)[$## }-} yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(} yyyy_)}(}yyyy_)}(}yyyy_)}(} yyyy_)}(} yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(} yyyy_)}(} yyyy_)}(} yyyy_)}(} yyyy_)}(} yyyy_)}(} yyyy_)}(} yyyy_)}(} yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(}yyyy_)}(} yyyy_)}(}yyyy_)}(} yyyy_)}(}  yyyy_)}(}#yyyy_)}(}$ yyyy_)}(}( yyyy_)}(}, yyyy_)}(}. yyyy_)}(}4 yyyy_)}<}8 yyyy_)[$}(}9yyyy_)}(}:yyyy_)}(};yyyy_)}(}<yyyy_)}(}=yyyy_)}(}>yyyy_)}(}?yyyy_)}(}Cyyyy_)}(}Dyyyy_)}(}Eyyyy_)}(}Fyyyy_)}(}Hyyyy_)}(}Jyyyy_)}(}Lyyyy_)}(}Pyyyy_)}(}Qyyyy_)}(}Ryyyy_)}(}Syyyy_)}(}Tyyyy_)}(}Uyyyy_)}(}Vyyyy_)}(}Xyyyy_)}(}dyyyy_)}(}eyyyy_)}(}lyyyy_)}(}myyyy_)}(}oyyyy_)}(}ryyyy_)}(}wyyyy_)9 +  !%9   ?333 !%9  * !%9 +  !% 20% - Accent1M 20% - Accent1 ef %20% - Accent1 220% - Accent1 320% - Accent1 420% - Accent1 520% - Accent1 6 20% - Accent2M" 20% - Accent2 ef %20% - Accent2 220% - Accent2 320% - Accent2 420% - Accent2 520% - Accent2 6 20% - Accent3M& 20% - Accent3 ef %20% - Accent3 220% - Accent3 320% - Accent3 4 20% - Accent3 5!20% - Accent3 6" 20% - Accent4M* 20% - Accent4 ef %#20% - Accent4 2$20% - Accent4 3%20% - Accent4 4&20% - Accent4 5'20% - Accent4 6( 20% - Accent5M. 20% - Accent5 ef %)20% - Accent5 2*20% - Accent5 3+20% - Accent5 4,20% - Accent5 5-20% - Accent5 6. 20% - Accent6M2 20% - Accent6  ef %/20% - Accent6 2020% - Accent6 3120% - Accent6 4220% - Accent6 5320% - Accent6 64 40% - Accent1M 40% - Accent1 L %540% - Accent1 2640% - Accent1 3740% - Accent1 4840% - Accent1 5940% - Accent1 6: 40% - Accent2M# 40% - Accent2 L渷 %;40% - Accent2 2<40% - Accent2 3=40% - Accent2 4>40% - Accent2 5?40% - Accent2 6@ 40% - Accent3M' 40% - Accent3 L %A40% - Accent3 2B40% - Accent3 3C40% - Accent3 4D40% - Accent3 5E40% - Accent3 6F 40% - Accent4M+ 40% - Accent4 L %G40% - Accent4 2H40% - Accent4 3I40% - Accent4 4J40% - Accent4 5K40% - Accent4 6L 40% - Accent5M/ 40% - Accent5 L %M40% - Accent5 2N40% - Accent5 3O40% - Accent5 4P40% - Accent5 5Q40% - Accent5 6R 40% - Accent6M3 40% - Accent6  Lմ %S40% - Accent6 2T40% - Accent6 3U40% - Accent6 4V40% - Accent6 5W40% - Accent6 6X 60% - Accent1M 60% - Accent1 23 %Y60% - Accent1 2Z60% - Accent1 3[60% - Accent1 4\60% - Accent1 5]60% - Accent1 6^ 60% - Accent2M$ 60% - Accent2 23ږ %_60% - Accent2 2`60% - Accent2 3a60% - Accent2 4b60% - Accent2 5c60% - Accent2 6d 60% - Accent3M( 60% - Accent3 23כ %e60% - Accent3 2f60% - Accent3 3g60% - Accent3 4h60% - Accent3 5i60% - Accent3 6j 60% - Accent4M, 60% - Accent4 23 %k60% - Accent4 2l60% - Accent4 3m60% - Accent4 4n60% - Accent4 5o60% - Accent4 6p 60% - Accent5M0 60% - Accent5 23 %q60% - Accent5 2r60% - Accent5 3s60% - Accent5 4t60% - Accent5 5u60% - Accent5 6v 60% - Accent6M4 60% - Accent6  23 %w60% - Accent6 2x60% - Accent6 3y60% - Accent6 4z60% - Accent6 5{60% - Accent6 6 |Accent1AAccent1 O %} Accent1 - 20%~ Accent1 - 40% Accent1 - 60%Accent1 - 60% 2 Accent1 2 Accent1 2 2 Accent1 3 Accent1 3 2 Accent1 4 Accent1 4 2 Accent1 5 Accent1 5 2 Accent1 6 Accent1 6 2 Accent2A!Accent2 PM % Accent2 - 20% Accent2 - 40% Accent2 - 60%Accent2 - 60% 2 Accent2 2 Accent2 2 2 Accent2 3 Accent2 3 2 Accent2 4 Accent2 4 2 Accent2 5 Accent2 5 2 Accent2 6 Accent2 6 2 Accent3A%Accent3 Y % Accent3 - 20% Accent3 - 40% Accent3 - 60%Accent3 - 60% 2 Accent3 2 Accent3 2 2 Accent3 3 Accent3 3 2 Accent3 4 Accent3 4 2 Accent3 5 Accent3 5 2 Accent3 6 Accent3 6 2 Accent4A)Accent4 d % Accent4 - 20% Accent4 - 40% Accent4 - 60%Accent4 - 60% 2 Accent4 2 Accent4 2 2 Accent4 3 Accent4 3 2 Accent4 4 Accent4 4 2 Accent4 5 Accent4 5 2 Accent4 6 Accent4 6 2 Accent5A-Accent5 K % Accent5 - 20% Accent5 - 40% Accent5 - 60%Accent5 - 60% 2 Accent5 2 Accent5 2 2 Accent5 3 Accent5 3 2 Accent5 4 Accent5 4 2 Accent5 5 Accent5 5 2 Accent5 6 Accent5 6 2 Accent6A1Accent6  F % Accent6 - 20% Accent6 - 40% Accent6 - 60%Accent6 - 60% 2 Accent6 2 Accent6 2 2 Accent6 3 Accent6 3 2 Accent6 4 Accent6 4 2 Accent6 5 Accent6 5 2 Accent6 6 Accent6 6 2Bad9Bad  % Bad 2 Bad 2 2 Bad 3 Bad 3 2 Bad 4 Bad 4 2 Bad 5 Bad 5 2 Bad 6 Bad 6 2 Bold Calculation Calculation  }%  Calculation 2Calculation 2 2 Calculation 3Calculation 3 2 Calculation 4Calculation 4 2 Calculation 5Calculation 5 2 Calculation 6Calculation 6 2 Check Cell Check Cell  %????????? ??? Check Cell 2Check Cell 2 2 Check Cell 3Check Cell 3 2 Check Cell 4Check Cell 4 2 Check Cell 5Check Cell 5 2 Check Cell 6Check Cell 6 2 Comma( Comma [0]&Currency. Currency [0] Emphasis 1 Emphasis 1 2 Emphasis 2 Emphasis 2 2 Emphasis 3 Emphasis 3 2Explanatory TextG5Explanatory Text %Explanatory Text 2Explanatory Text 3Explanatory Text 4Explanatory Text 5Explanatory Text 6 Good;Good  a% Good 2 Good 2 2 Good 3 Good 3 2 Good 4 Good 4 2 Good 5 Good 5 2 Good 6 Good 6 2 Heading 1G Heading 1 I}%O Heading 1 2 Heading 1 3 Heading 1 4 Heading 1 5 Heading 1 6 Heading 2G Heading 2 I}%? Heading 2 2 Heading 2 3 Heading 2 4 Heading 2 5 Heading 2 6 Heading 3G Heading 3 I}%23  Heading 3 2! Heading 3 3" Heading 3 4# Heading 3 5$ Heading 3 6% Heading 49 Heading 4 I}%& Heading 4 2' Heading 4 3( Heading 4 4) Heading 4 5* Heading 4 6+4 Hyperlink  , Hyperlink 2- Hyperlink 3 .InputuInput ̙ ??v%  /Input 2 0Input 3 1Input 4 2Input 5 3Input 64 Linked CellK Linked Cell }%5 Linked Cell 26Linked Cell 2 27 Linked Cell 38Linked Cell 3 29 Linked Cell 4:Linked Cell 4 2; Linked Cell 5<Linked Cell 5 2= Linked Cell 6>Linked Cell 6 2? My Normal @NeutralANeutral  e%A Neutral 2B Neutral 3C Neutral 4D Neutral 5E Neutral 6"NormalF Normal 10G Normal 10 2H Normal 10 3I Normal 10 4J Normal 10 5K Normal 100L Normal 100 2M Normal 101N Normal 101 2O Normal 102P Normal 102 2Q Normal 103R Normal 103 2S Normal 104T Normal 104 2U Normal 105V Normal 105 2W Normal 106X Normal 106 2Y Normal 107Z Normal 107 2[ Normal 108\ Normal 108 2] Normal 109^ Normal 109 2_ Normal 11` Normal 11 2a Normal 110b Normal 110 2c Normal 111d Normal 111 2e Normal 112f Normal 112 2g Normal 113h Normal 113 2i Normal 114j Normal 114 2k Normal 115l Normal 115 2m Normal 116n Normal 116 2o Normal 117p Normal 117 2q Normal 118r Normal 118 2s Normal 119t Normal 119 2u Normal 12v Normal 12 2w Normal 12 3x Normal 12 4y Normal 12 5z Normal 120{ Normal 120 2| Normal 121} Normal 121 2~ Normal 122 Normal 122 2 Normal 123 Normal 123 2 Normal 124 Normal 124 2 Normal 125 Normal 125 2 Normal 126 Normal 126 2 Normal 127 Normal 127 2 Normal 128 Normal 128 2 Normal 129 Normal 129 2 Normal 13 Normal 13 2 Normal 13 3 Normal 13 4 Normal 13 5 Normal 130 Normal 130 2 Normal 131 Normal 131 2 Normal 132 Normal 132 2 Normal 133 Normal 133 2 Normal 134 Normal 134 2 Normal 135 Normal 135 2 Normal 136 Normal 136 2 Normal 137 Normal 137 2 Normal 138 Normal 138 2 Normal 139 Normal 139 2 Normal 14 Normal 14 2 Normal 14 3 Normal 14 4 Normal 14 5 Normal 140 Normal 140 2 Normal 141 Normal 141 2 Normal 142 Normal 142 2 Normal 143 Normal 143 2 Normal 144 Normal 144 2 Normal 145 Normal 145 2 Normal 146 Normal 146 2 Normal 147 Normal 147 2 Normal 148 Normal 148 2 Normal 149 Normal 149 2 Normal 15 Normal 15 2 Normal 15 3 Normal 15 4 Normal 15 5 Normal 150 Normal 150 2 Normal 151 Normal 151 2 Normal 152 Normal 152 2 Normal 153 Normal 153 2 Normal 154 Normal 154 2 Normal 155 Normal 155 2 Normal 156 Normal 156 2 Normal 157 Normal 157 2 Normal 158 Normal 158 2 Normal 159 Normal 159 2 Normal 16 Normal 16 2 Normal 160 Normal 160 2 Normal 161 Normal 161 2 Normal 162 Normal 162 2 Normal 163 Normal 163 2 Normal 164 Normal 164 2 Normal 165 Normal 165 2 Normal 166 Normal 166 2 Normal 167 Normal 167 2 Normal 168 Normal 168 2 Normal 169 Normal 169 2 Normal 17 Normal 17 2 Normal 170 Normal 170 2 Normal 171 Normal 171 2 Normal 172 Normal 172 2 Normal 173 Normal 173 2 Normal 174 Normal 174 2 Normal 175 Normal 175 2 Normal 176 Normal 176 2 Normal 177 Normal 177 2 Normal 178 Normal 178 2 Normal 179 Normal 179 2 Normal 18 Normal 18 2 Normal 18 3 Normal 18 4  Normal 18 5  Normal 180  Normal 180 2  Normal 181  Normal 181 2 Normal 182 Normal 182 2 Normal 183 Normal 183 2 Normal 184 Normal 184 2 Normal 185 Normal 185 2 Normal 186 Normal 186 2 Normal 187 Normal 187 2 Normal 188 Normal 188 2 Normal 189 Normal 189 2 Normal 19 Normal 19 2  Normal 190! Normal 190 2" Normal 191# Normal 191 2$ Normal 192% Normal 192 2& Normal 193' Normal 193 2( Normal 194) Normal 194 2* Normal 195+ Normal 195 2, Normal 196- Normal 196 2. Normal 197/ Normal 197 20 Normal 1981 Normal 198 22 Normal 1993 Normal 199 2 4Normal 25 Normal 2 26 Normal 2 2 27Normal 2 2 2 50@Normal 2 2 2 50 8 Normal 2 2 39 Normal 2 2 76< Normal 2 2 76 : Normal 2 3; Normal 20< Normal 20 2= Normal 20 3> Normal 20 4? Normal 20 5@ Normal 200A Normal 200 2B Normal 201C Normal 201 2D Normal 202E Normal 202 2F Normal 203G Normal 203 2H Normal 204I Normal 204 2J Normal 205K Normal 205 2L Normal 206M Normal 206 2N Normal 207O Normal 207 2P Normal 208Q Normal 208 2R Normal 209S Normal 209 2T Normal 21U Normal 21 2V Normal 21 3W Normal 21 4X Normal 21 5Y Normal 210Z Normal 210 2[ Normal 211\ Normal 211 2] Normal 212^ Normal 212 2_ Normal 213` Normal 213 2a Normal 214b Normal 214 2c Normal 215d Normal 215 2e Normal 216f Normal 216 2g Normal 217h Normal 217 2i Normal 218j Normal 218 2k Normal 219l Normal 219 2m Normal 22n Normal 22 2o Normal 220p Normal 220 2q Normal 221r Normal 221 2s Normal 222t Normal 222 2u Normal 223v Normal 223 2w Normal 224x Normal 224 2y Normal 225z Normal 225 2{ Normal 226| Normal 226 2} Normal 227~ Normal 227 2 Normal 228 Normal 228 2 Normal 229 Normal 229 2 Normal 23 Normal 23 2 Normal 23 3 Normal 23 4 Normal 23 5 Normal 230 Normal 230 2 Normal 231 Normal 231 2 Normal 232 Normal 232 2 Normal 233 Normal 233 2 Normal 234 Normal 234 2 Normal 235 Normal 235 2 Normal 236 Normal 236 2 Normal 237 Normal 237 2 Normal 238 Normal 238 2 Normal 239 Normal 239 2 Normal 24 Normal 24 2 Normal 240 Normal 240 2 Normal 241 Normal 241 2 Normal 242 Normal 242 2 Normal 243 Normal 243 2 Normal 244 Normal 244 2 Normal 245 Normal 245 2 Normal 246 Normal 246 2 Normal 247 Normal 247 2 Normal 248 Normal 248 2 Normal 249 Normal 249 2 Normal 25 Normal 25 2 Normal 250 Normal 250 2 Normal 251 Normal 251 2 Normal 252 Normal 252 2 Normal 253 Normal 253 2 Normal 254 Normal 254 2 Normal 255 Normal 255 2 Normal 256 Normal 256 2 Normal 257; Normal 257 % Normal 257 2 Normal 258 Normal 258 2 Normal 26 Normal 26 2 Normal 27 Normal 27 2 Normal 28 Normal 28 2 Normal 28 3 Normal 28 4 Normal 28 5 Normal 29 Normal 29 2 Normal 29 3 Normal 29 4 Normal 29 5 Normal 3 Normal 3 2 Normal 3 3 Normal 3 4 Normal 3 5 Normal 3 6; Normal 3 6 % Normal 30 Normal 30 2 Normal 31 Normal 31 2 Normal 32 Normal 32 2 Normal 33 Normal 33 2 Normal 34 Normal 34 2 Normal 35 Normal 35 2 Normal 36 Normal 36 2 Normal 37 Normal 37 2 Normal 38 Normal 38 2 Normal 39 Normal 39 2 Normal 4 Normal 4 2 Normal 4 3 Normal 4 4 Normal 40 Normal 40 2 Normal 41 Normal 41 2 Normal 42 Normal 42 2 Normal 43 Normal 43 2 Normal 44 Normal 44 2 Normal 45 Normal 45 2 Normal 46 Normal 46 2 Normal 47 Normal 47 2 Normal 48 Normal 48 2 Normal 49 Normal 49 2 Normal 5 Normal 50 Normal 50 2  Normal 51  Normal 51 2  Normal 52  Normal 52 2  Normal 53 Normal 53 2 Normal 54 Normal 54 2 Normal 55 Normal 55 2 Normal 56 Normal 56 2 Normal 57 Normal 57 2 Normal 58 Normal 58 2 Normal 59 Normal 59 2 Normal 6 Normal 6 2 Normal 60 Normal 60 2 Normal 61  Normal 61 2! Normal 62" Normal 62 2# Normal 63$ Normal 63 2% Normal 64& Normal 64 2' Normal 65( Normal 65 2) Normal 66* Normal 66 2+ Normal 67, Normal 67 2- Normal 68. Normal 68 2/ Normal 690 Normal 69 2 1Normal 72 Normal 7 23 Normal 7 34 Normal 7 45 Normal 7 56 Normal 707 Normal 70 28 Normal 719 Normal 71 2: Normal 72; Normal 72 2< Normal 73= Normal 73 2> Normal 74? Normal 74 2@ Normal 75A Normal 75 2B Normal 76C Normal 76 2D Normal 77E Normal 77 2F Normal 78G Normal 78 2H Normal 79I Normal 79 2 JNormal 8K Normal 80L Normal 80 2M Normal 81N Normal 81 2O Normal 82P Normal 82 2Q Normal 83R Normal 83 2S Normal 84T Normal 84 2U Normal 85V Normal 85 2W Normal 86X Normal 86 2Y Normal 87Z Normal 87 2[ Normal 88\ Normal 88 2] Normal 89^ Normal 89 2 _Normal 9` Normal 9 2a Normal 9 3b Normal 9 4c Normal 9 5d Normal 90e Normal 90 2f Normal 91g Normal 91 2h Normal 92i Normal 92 2j Normal 93k Normal 93 2l Normal 94m Normal 94 2n Normal 95o Normal 95 2p Normal 96q Normal 96 2r Normal 97s Normal 97 2t Normal 98u Normal 98 2v Normal 99w Normal 99 2 xNoteb Note   yNote 2 zNote 2 2 {Note 2 3 |Note 2 4 }Note 3 ~Note 3 2 Note 4 OutputwOutput  ???%????????? ??? Output 2$Percent Sheet Title Title1Title I}% Title 2 TotalMTotal %OO Total 2 Total 2 2 Warning Text? Warning Text %Warning Text 2Warning Text 2 2Warning Text 2 2 2Warning Text 2 3Warning Text 2 3 2Warning Text 3Warning Text 3 2Warning Text 3 2 2Warning Text 3 3Warning Text 4Warning Text 4 2XTableStyleMedium2PivotStyleLight16`C DashboardResults=7 InstructionslR Test Cases^AppendixS% Change Log&!  ; _xlfn.COUNTIFS _xlfn.IFERROR  ;   ;   ;*  ;:   =  ;   ;Sffp0 @ @]5b-!ODw30@Gbe .n!ODw30@GbePNG  IHDR<qsBIT|d IDATx^}``SJsH JH" btJww `ynw]^O9f3 o7𿴾gN3ڍR+[V]ò2 -EcYt޸!V66+-{mUu?RN}>_:ϭ՛ֳ*իd~=qك۽rn}L=Q"))),g%6$.(~f8x|G=1%1 ";KaL!w8يZdy(%,"ZBf鴵(4\JV-- 8+x9|o=ywOևo1|WFo9h4dqp56kWP8>7J( })ᑱ'$8\t"\&{r9|)4 JSkWMjJBve |>xW?3_T;F ߶3>b'{j-&VK)Xܒ[wBD86XۊNORK,"*JKz[6,goóIF7x,bڮ~)w-έf0aC[cwnݱHGbo^rΓƠw @?"< /7*kTK7e+600hGK/)Xj\Ir`7VFd 0|˗0o[мl;޻u3~Y+## ݈Je-NJ*"ݛ֔ƕ}&0X !%?"c6^^^jR]J|K8gK keeج_)eݬtTz_XAz VWӻE- f|rJH19&UDG.LXDI${J30 o"Ψ"zɪ}`2E]Wz-%;Yj?`}ŔwX#IoG>m eŻO0q{He,H}Hs$M^xaRTŊ2uYuB:DY:i_#?; CG-C`סO/spCnO 5 ~`_o]Gɗv" ^żd\צҶ{>?Հ܉5~vyd~D7Gt1痲sH~uwC:Ke\x+D⁰仡]doP_Kh$Rĭ{V;ӆu.2%FZV/'͖% ˹γWeEnߌF ߢ^i߶1Xg!Oi ^ ],&Z׷uW|g[kko^3cuDBy䎋c^84$ٓ$fljK2 {K@=yB bSIݭj4Ho M 7tl+I]'eڢmK:345P5g 8}LEloun탽l'011XO%R`~C)T4j6`9kEr$X}Pa\Zש$H(I cz8߮إmS} zH 1yVvd[=q3@ӍQnT.zLM!L?t8w9 o =nI̝w0_k;#|O:sAS{:h|чZV/+-G dJ2/&>nW Zʜ-G,<0ƯS,9$r%t_E zs,>tml+f|%_ D>⵼Nп 6?O?Q U;PA2 Rȥ  xH"}ֿ8Y **!mGȗ)Xv9;[2 lCsӹVB+N?0].]~ÜU*&0 JDRP|hkeܜ `Rcf>$ɪ7<+Ae 0G2$;Ag2HI9)Cț~ue)ɛ~% ϟfB x%> soL=yDAwym]0Mo* ;^AV}4@y%$_kn)nBa`X*rGvLIaZ7MeΓr;ުƁewi Gk@?(6lĈ>[  :@dߍ_̇Judߜ|`2CFK~r כ߭C7qd7iS'iO]xG~B/-xݨ_'tq/ : 76wɟkk&%мO_H_)otCw%yrn(35GA,ÿ[.Q5Q7 #z1oP/_ݓ^ع}{G_WuymfK>oLӘs,z`K0St@_TGb1M)C( DB? U[+H H)W&rD!wzC'E,jQ!|@~X3Jj8oveqr-5'k{N;u`BD0w|6&_/HLQEz6)VմѷPEGk8:L`Xxn7*-ںx:?`06ʖ/]JBݦU:o;(c025^5ߐW^HX]o+Z~[ L2}r ׃GOltc!9pŰ>*@H%kPHipA% oՓmWI~.͔ݫxm3sp2 s5=Z~m7-'/hX 0/ЭGMv}9Đz_H7.x|˄ߍPmCiiX~z~e$5 篷+vK , 8.O @/eLL:mkWP )gYI4 ͰNV]Jκ <4( yHcown,KiKR.S%CA|X/ʬ]"ƮN=e 4BkۦCmQsosY rdCgL͸7b-\w,1ֵ g_C&i]cPH.s)\,H_ ` `d?6J0R< `>E Hf{p0g+x|Wl9w&P#0Y):4&t/ޒUx`p KƆH:C̃D% B65gn/zbAf> rfҤ 5QGkeJV=yw̍:@?Co2A0ߏzECs=5vxz/(sL8e{N 5lXouUy$]J>гm$&.@=>+ e㴑pV,/Ni46!opu1A#6hվYk!^>x+?g찭Sg& >k˼AV#5\=n , `jF_l^Sz4.;ay~860KH[谺gK^?10zai ,X`g+~ !T@=%__ӄ)0.MgJ?{w_ md %d|?Tω4W&fv򛡆5kWOMҼV`|Ń94ss1Xbk3Ǒ%;aA*A)>~]jJ2|5rQ NP<s4Dn~(& s T/n{~փLZkO tGY}:hCy>}ʲ,尪P?$ڲT2mնĹ;帿7ρ%綊<\M:Nއ\)g mݍ!M}*ǻa^& Cwlp h:M&i <1T0,٥0h%=}jwJ->܌W.~ܨջN)TSL_eI󷾕4T+(.(JVOck>[ &~}@vE-&>SkZU;Gk|Oy.^-_}/.7{2 \ƞ#QJϵRuVzg7 , 'Icp\>{31݇Ӂr²Ѳֽ|5ea';+价!97WQ͚:j9= 9Hh#Eo Q5cJ?q7$__ >ytik>}fvX6~D!+7P^Mcҋڜa""=YbHD~:,?wE )x"`3QitOU|*Za(t( IيfsI[ݣ?H Caֿ>V |38c({7SB#˱fKZux=IdkOADtuiL_M`7( F0Q.bJM@ 8Jp#iN5f dv_ ܼf-to![(d%B=?~$ab夡Sߕ [g EKֽkbw5oڜrq߹V@G߁;pdP'W3 V\֧\p j`iûɅ[e1kUJ!|> =m*˟̼60oT~[`GX#HJE9/,*`Wf$zl(, Owz<ȑrꮭ| @/faj>p6+`,.J z_U]j2!O0q1CpVG>@o&wpi ';b%'Vi- l?{쫈<(|1Q5*+ i|֭SޘA8>RɈ1R ݧ%H}V陫a*mհ zIzFH$2ZL6~怖If{ŠLep[I<@gx`Mn·!ǾXb+uCױqɺ8YFá Kf# `yW+FGm5d`0D?I3䑘ۿrUk|qNrg潨O1O'e\D4VC]'ĽG1Wb@\ ʋR &A*]=!u JcxN6Q 9SwT--MǟB>[ϲ4`ک53KUG^sr 4h$N=-HR_W$խ˹qSn8BƊ]ⅲ޲R%֫yc6CJMm-_{懳'җz] 1~A |P ;XrZ#?oE``]W4H^vN7K.*wFJ26~k9n ci.f6ۼ:ㇿ&VMP{U- $ރZn=0^׶miKfu]uٻcۢ^wm[ґ݉.C-:Ȓـ &A@g u9ɌS):D*<`mFzZD.Ŗr)(Kwkr3Sj9zsx*>xKL KBwlq2s IDATbch͜{i}06DYr/lf`q1t&yU lBH͂ Cjmrŭw:]@]V@N3)y xO@8T\2H4gx br=8W/'ۏ>* qNoD=ADebk.LOt ,X-%@чR9nx$ޑB#I׃?@ouz5Z #zo.KW\rbwxS̿e"߱W!FKcXU 2q Sgl`b%mҵ)5%[[9񤸜,)Jky7ڋUJ<ɮ[ mfRiZI6R)Rk Ћ{CR{]$%%*Xiy_' ݑ̿귕:zicD{ Z50y` zOI50Oq_O[~¯fq2?a܍(=CmAJ-np6WQ: k/BztDc Ⱦ e&=]D qf֑g%,G\]AqDLEnBU)|VѮކ.aY4y6|l@ɭHjyJ ;ҥ5U>dycjjgeR PfS LBZ('91iCn u.JPa/;<~  /5&{dkgY)\`jlBJ]͸ nlKd֬QVܯ.}_G3X-+N5o_Olh b %Pa֯Jo~6lhՁX@Y'5lUd2L{g)}A<~'z2$#<-j*BPT$u{\k9~űeiK{J05ԯrq/Cc/E`鮙 k~E629DiE# FE!jee#n]Urc { &e>H x&p{jy)3褴ǪJ~ӽKM?S0y)hhfCus̪YUN lK#J.zg,Bq}ە06T\']ʑ8Y;],'$eYڥrj ì -Y1ݸAI^1Rʧ앣jQw;W5C%61EJ#-LjRyhI6lϰEڭ:Y3&Bk =^߭ | H =N*r*mՂr/aNhf2 EsoGWe4 s~|~ t`ːkB62váǰ0GR'n]!wo#& Ą6^!JUF<* P3D.+UðV&5= ԰+4h\Mmj!W g12s*\#Ћt";5Sl1֑o>~Eg(S,reל@Rm-`&@uИAQ(l7ێp3z,eZ?*;Y+S-&Hj^ҿF xjYpÙƞs:_,}%A~ ,'ˁeWW֫/wQ:= I=R>g.l:=ͦKQdP/2kf ]U,5><#؁J̴ͤ9OUbKRIu6I rH<s35`@lHy\[H]q?v.7_$ M˪넒ZKI4+6 vRf58AO3OJWdnVՕ#a"L '} qrcunצZll LO#n'gZ&v 5`SbxY}Rb t^ ߇qZԮ).A0l;N(a5w+- 6[KU PqB%-bX43 v-V>}\Sz ϗ y 8y1;58&T @ bL׺b3f*?o;.Cn,… eJBRZ)CL Ľ,y*%=H_>J%}Pf/"iڳ!8]9_ݺ[ԼZ}kXoVT5^=;o[[4Q cn*ŒPuF/j=|[miQD2S){4y*2K~eldZ$,k $p{t̩U  y]t[iKB͊ff!.B@;&6vt'Z_L_y؇^` y׬]ccVEUĻPS耭>s>N`R3}Sx+fݑH~erbKG0 *?0.^O 怅[$2) ̫b\qez ki;gzK!yGrB]/4lu(0UXZNsv͝2BkkeəP5AfGF ?AءR GZ ;N+3m僣a0Rj,-EY oX;Z'X{kI c_Δ@H=X˔@ԉ]&*Cn$!>b`Ɗ@LS[!Fc*m Dnar0X P%P [+ ˫X?ӻZˎea\n ض/6u7դ7u?Y>oXFy^?sdL\C1 8Qy4+CWbFæK=W<8R>ޜ2|Jڸl,J% d,.6GScM0 :Ex11`\wpaH Ҡb)9q%H-Kg{ 0PpƇ#!W} BNZŅ k#_s0 kuL76 [Y*&9P( gj6&TWSI24ws{>󴥘?< ǵ€ 7a bt~X$vb\\ ,4kEUulf5s`,d%(oY #,@.wϷjJG'Jg < ǰ!8:+sR@ !@I2cn' ]:,p !ϵ~'^E/멐-⠸0X`Lflu M+L֗Fe62n E4/<ɝx5udu"78jN}3ve&q݊u+~NUeHrLEjtoB JzZ1ٔ۴,U" KJBB( {!O+":IA2ֺիSF?'x S`@'xF_sQOwJ mlh5Ov`" =IWiOJە ;hQFR2xQ14o˺L2ES[#=7rS-`B#^UsS(w %:8TvrILoyt0)(ʰ7V5wHT:aߴ~J D 5Ϭ%ij,{q>P5ݼ@:6v2 0KR^Z3ݠ/u!Z|'[#z $'m6rp<~*Rui $tMAz!tz_{ߐw#bhNZq7;Yw9\~M6ȋ0Zv`0[0I4 ["%_}sx;}A W7,8H>{9<@:Co_gŒ픲K#1P6Wz|__f>?r:[S )Oa,iH鉶6(z SHi^w r*UQko!>uYmz2RU쟐Q3 T0B ?fxyS ,jQ(Z$}7'(Ld]Uw8ixfm4HѦ$Y9HYH;Pj}:%2fDZ±-H_$K[nqm T \ ~kC5v %^7da'`Yc`/`M1`SLmd2 PyO45dKuVFQrCHJK  ;L FpA&Q&zJ%|Fr\M6:A7͗*N2}_?JCr=ӡY- -_M$[bQg5L. 9CKPꑶʶz)".AU/Etå}, {Kr ̋Hh)\ܧo?YR 6æ)P=6 YVjTw%JBewlTyU v0E5=rHB| qmz {<j|SQqM?TZK: UPW.K X"yfju᯲=3 8ːr⢭3!M߉>8@Lƒ c?e;_TCn IDAT+ u NJq. >HYUqxIφ0\#I!)RUe026°s@ޫCrRYI;W^ SR5Tk& gCvW@_]%>Y$gi`֢ 3&_},GI@ dWCT7m)r/M@JwʞQlZ|Z*9oM1Fʌu1UdgITa5`i9NBԌ@:3dK%eFmTMȍV QBc|_|%PXRz (EkNε'η2Ln"^s GHjo:T8+:$' !Xh9c2`]JWA=G `k ~~fn p'@6>=Zޡ._ 2nS4L̴E?6uT: |Q0x S39YBT ;ZLCL-lM'=q`2)WYl̃XK#W>dF~J ,0LJ?N3BI%.FbƮ ]I:2U)l&3`uoo\38:4_o% @*oہzHta x]~t}<]8SV&~ژLJs1x{QN^*J'2Ep:2ZDd2np/$N^ZC^=U- Ju`>dMلVˢsbwK_8*(kȺkU uK|Z{ߑnGɩqlL^$E3Hy24EDbܛ'W:#*hEgʬC΀ԃYvkI3Iop?zh7⣑|=?K 6#nN۶l%}X:% ڽE ]Jh|cVzOouW I="SIw*uSom-j*Ҍr&h]J>v]l~!O;> 4]T&U:(V:چ|ҀP2>`\jx69H~5).b)PN@jP uc7N8w7hWweܤr$Ϯ BZ!2@Ό0o@9[%1a :+CqhpwgXH~N.aJoxhwp0:ZM,L, : 57AG'ϐ"QPEp[9 E#eMu*\2=rZu; ~,_ '?@A ʯv(.Uۿ4~^ju V"_LmG{u q\NrCMesd'*R6Q Š)j.,ڡ2׉E xӋP\q*v#ke6`UPeTJ#&Y>~R -bD@00XU_w2*3"Xq./K_RP&( W8>Of6ZOw/XB;M~5rM$g± {T.h@nCZJ zJƛB\>βb` pڌZ<h\u{2K̻k2q2 N<>N>XT=Qd`t>͢$Ac'=ض{Yt(.#vp~^j Nz"Q 5!wr^*_L׃uRǶzYx Bcsh<$ftJԌ4;C6ïҭx48mBD@n'U{k4N&2H HSJӿ8#,*x^IzKJf[EK~6qbT-ފk ‰E_,LTqgkq35K7aAGɯ>\dßٴ{w`Q/GXS1[2HT:ҰV( L~ۈ)Gpns5CUH+Y Δ_;qfث!`0A(l!'+G n? fG(G<|*C@'Mљ{T]y R9$iz٬I[fFt2 䪅)=?|7JYOt%e?!k[\)?D|#KHcqNbu9 n+uIuG4KlM/&%B@J8go%(7 ?P#S^o/c{3|SIn+CIW#Y5o;|^N]*G sF=|,ҴvuOIHV8௞8:YM6BbB}a;6Ej?4(`*t`AUРvf|[뇍HdBlCq:ӣ$ S NJϩ2hg?7iy}Ƴ-x*Y)wm ?~vX3S[[A BD#.&ݥkz<+~sdɎF0FUL؈. ppWn^NҸ->P{=JPz{խYM75d"-kxqbL5 (@`*KNM7d5YVlḽ>Jx_`@C 0}8#?A +gh4OPSTAA1/&:WJ7&Y˱`'_ _ E6Sjp@KoD&ei;PY}'8<2]:M|*fp>5E{¼1kǸy<;x>>0~15%Ė}7^Ta=5pѰ¹7??l1֧5ؘٿg$gcQDp_u7K(H|8 ~\p8;7ˑ0d֛Mn#zHO`eMY/ IUFis\U(tQ^mZ#)/khV'}N'i9{ ۧ.c\h^3ռ%+? #;6-3dN'P$ޞ!u!Bݞd;~w„-~ls A#~j8)Y5vvqTT BL*[HT !ʐ$/k 'e?E}FDA;i|YzdߝlS&x_ s7R%}[rV*ѰݸkwXط6iMN3-ŗ /9LqF*n>"?ݳ#<'e^odB_BiPxH\9.9IBaВyhh鬹`"Пud Tnh9v%hP"!p L%jipX'pCy- g8VY^w=tuZ~0e58Q0DN^4KotQT'/`]a2}>ˊ˾dASTFIx>tu .|ӜX=;߲:99*i ϭxy[)[QHzr0>`EG!9YpN#gxXRjd+ar9ҫ5IMh,S dzA]|n:Bb" e43el 8"\&&ݥ?xXfp11,M"Q=1@0dƁll>ҪS*ƺܱ<BXٚ_AE}h1B}4? @ Kӡ]CPZzugټԏU<*iEbCb53Sn>NP k%dyy)Aʅ,,Ze~B?,r+6 _ij%Ŝ׉!W@Bqw')IE.¸5zR|`e% 'HFk Ye$n1IAkV1%DͱIbT#hn0wʝvo){wK矁mTm| ><> Ѯ)eEdx>W'js /o8IU\ky\xvrYڲp!^e~s\>3|h7wmܟpTl7^ \-O$[8;,tr5%M*S˜?:E{cR#wǍPJz9-ţfBs,lj!}{bL:1c'RV2x] Q9 L8 ĘZMLM$L*K`nd7YeU)Y}=F %7-H_-wVQlgkɛ%x7!n)@#Q_FmuRN% Ut3߉3y(`PgDfrHB] !!&8^~ pW%2P8A:܏ xTENqyH (0::ā~u wmWVݳASRx!iz;m\a*8vZvCf yYE՞.{g?-i6zXyØ\7؍OBhei6M2r08yh; k'{Iw8Jm4 4dyZr|VP8LAţ3,tjA_4 f}]-,SJ), _.c RajAvX ˦T-ք:\߶|Ы kfFJU8tA_.ޮa6\Jkz2\l\JmHس}8o922 "RfISG4{S\2&Ϛ3y2kdqZWܡ%HVN:B_HJyl)NJ%aFBEeߢRi+ĬGF'*>R0PrMN+[V(i_&.6IX[Sn]oڔ6ڛ5fzF[|Cزb6LIV;qp)C2?Q q{:2zJӺ6Bk r爄\>ڔ1oW>1J_A8O:cu\~W;s@M|:6W$2)LHvxS等jJ~󅲦{rfWbu([Q1,Wd]nVA Ѹ2mLÁy,/ۼCʛU);Zc7rWhQ3}VRTO/ej`֍@PEB#0 oܞz~ d:0n~ce1.1T J0l""EiOZYN"v56a%2dQN =VtZBO*,;33g3q\ηZ]Pz"R Nϗ4W h(S}(\“ɧswt9> p(1nbMBg\DU%,st_{\p;U5&$2C>Xt6qܕP*.JiyW>dX7C:#xܒ9 s;Sz<-M BN~yy:_T[-#VzBDnʛX_4FmH6D>Jf.;f0 ˍFz:ߤgYi9ԞHV_XD̑꬙]4yΛiYU@jO#x$PӳlGϐ$f}Խf%?(cLB۞ȓc5!`~SbH?jryUU16O29p?$7J=>t$s᭒>zٖːx٬>&}Ϸ[F,zΌiVJ>],a_ӉK:Dמ#Ĥ}~S g&ӋlQS+,Zf;jF+ FL a}}⇥zy1E3IqǓ9/oQ䘟H'1S7%uHZoƢϒE-!F12*7U8u@/\X)ή3]cBYR;y 2TTog,T4ר[ǭ[b\V? /N~E:ݘɗ6Ϻ?aav` Hs X 'c 464|X$ё&Sә6sR蓉o]ÓUxJJ4&kzLߖD*CVS|KۇTlaJ0pfA36cf =Jqd_OSg3 >4ȗa@*n v׿M;v\4.Y?){S>a6~IxH 8ӈmmfpoi3ԛ,dPF.M7| x)}?o׸kn'^=v4Da"6Qu09XLZ FZR3U'YyכCfJra!_tG =||5+mkrw-RH})Lŏ;b3k6R~ѱ I&ARSޭ;Pք@RG ~uo{"jCڒ^7,ڸ۬"tdH$SggEDG65oSw;ogxZ47QV93 |Z~tweBA=0~ q0vu^6QqL¤4D˵[kz_(,Qӳ=ʟ2OuE'⟤*$[AR;w:hw:X0M68D+wL l W܁͵^=Iý?MiM]b+:G"8 JbXڞLVUw{wuVQGT'rśwt<>E)[ ?GST0\oTu0sa)?R-Ǭa=īE%2L&m6\#Ysl35w~S|HZr u&ƾ)Z~ZLMfhiۀq؊ zHnԇT́Bs{@qn[Z˼`$;pSV-:u{g p+q`+>\]oZ_}|;lP;uy) )rKLlzB^Lv:R:(i1NGjSwl Z6i@]1NrX0֯*>,E*H%,<&R/ .򩛅Mp+YV|5ެI\҇##z<2e*5B /s/bfV*]O|)3!s@[x "w.ђBWE0)c !S/T=ze$᣹f0Z!&gͶ!͂T/i{-wɘV U"7 ~StO54d C7}##-H[<$KB|ROۦkD/ g(9l O$¨V%Zc_P Yyy&~cA.%k~ӕU UD}W?sAH èlI?NDH>B'vDFYW KkH) UIwn#*iW/>9!U'/\ʰ|8P)e;>Ypʏ@3@_ET]6)h#&8؇0('F#T:Q_8A#~UJA~aifu8C ~[KÍhj*k'8W!|XBlFf$2cꂆ*{Cjbi/İʁUL@fG6P;eU#P-n&)Gi@,Iv)I?6#'dǤ:4UU~SAv )GHGy-4-|.3@U0Elv|gLj_5+ddF݅ +oq=@k#!%B[Z1yIgrŔuhl:ѻͤ(&j0pK[Y.5&[|Crf_P08m%/Q;?|cNk[Ӗ]/DXY"Y(cP(E|&SKd o]R佰 64S]ܧl1sU[8.mx^z:'}N t36XLg-|:όMp`vCHlQv>!7<0L1=u $R%GxA\s2C6sS&kc)8c bWOz Mti 9 (*O5 @TnOeEWxƔ%YP #q ƣF3fHz-vu_CZc6ij?Ԫ;S5w^!Y9S/6UnФa;kh5Xl,+{;X`N6v]Ù J?Hx~6=*N>#g5:YWCló+׌@0ݤl4`"/>txWa3c{ 4խ9G/I=-0P[ꅭYOmfJ!QKL(ؖmc\0ERM"?;XٓckS)?v/%Kw)JpL4tT+{?xʘG)c|seհ07!GBV-Z6U9$ "4˱v4˄GD _(]H.3i) (| @Q%QgK_@C)y(2 !>$ٶ< !j ;#歱;W|y4GkrH >kO*OBs3cGE+*1rz߷ [no ?h|O8h(?Q}ɼ=k%_NXK}K @i:z԰i^ BS1g}TBR$( njcQ`<.e>֥`b$&Cה5f|)-bȖ5Z3l| [$D2=a8O= ug" NjVޠtsM',85⊊e tɼ~@J0v07dx@mwbYV&)f Y7(B CJ΄/<i)@ykh>u\ꩽJ}p QvRl{kwh2"P M%!\bx2@z彗 `xH"5Z|<Σnmj VY`':1%P,߰\BϔJ}tW-_)3mznUbfr&Jbj5ݔc~'9arx/6 Q8[udU96 K:/ITH?c۾́Yl&Wv}.,ujj@R.W5"급L`Slb^c/OD`R(ՑUk-[$oyg}t-G3N"g 11r[JRLD|QG~EKaiqf N蔶N~DiҲMstpI~uuWg+T`_16Xג" @vdtyp ,9kAȥipߣ#ְݕմө<ң=bbwV&r_;I2JCy*YՃƄ,r..&`VRuQ3BBЊ-^9ζXr.畕x"x$ψߙR @n~};/ӛ.,-N$9yڛOʘ9آe?2;;\ݯo}͍4G1{;*QyxDHr;2* 'ͥ X_qDT"suC2ezSG}\IUBG#IQ9A *UMI:Ʒ])@rr"8?]bSOf4 c:m?lױ 픱>DҜ?7uf=)ҥϣ;(UWKS yKzJd /i63OdfZe{R-YS- $߻sC\6Zrjr61_AC>'*4ѥ߶mNxS[5!~U m{ti)aڷI) vFyٔ{6R()?~ܵ}\m>mz})=t^}_-̧pD'nRUh}d܇.·!:"=>j\HY'{!b6ᇂ`T6)3tlGd4s/ϔɗՄʼ@3xc՛|ʷ/B#Bk#ysUev JwXMˉ-&#vp|He`N\"D9If7,_G4IOrub ~mES^k׮١U;Jt *4i0oE@r8KQoPf*]"ʳ-O贵T,KG̽u)4G=c!ȕ9 /%x8 ޻_I=☓4Edy4SG)pxYi] Add/Remove Snap-in..."fFrom the left panel, select the "Resultant Set of Policy", click "Add" and then click "OK" to proceed.?Ensure "Logging mode" is selected and click "Next" to continue.@Ensure "This computer" is selected and click "Next to continue".Select an appropriate user account which has access to FTI. If the system is used for administrative purposes, select Administrator.;Click "Next" on the following screen to generate RSoP data.YTo execute the tests in this SCSEM manually, please perform the following steps to begin:Local Security Policy or Local Group Policy Editor should be used for settings which are not reflected in the RSoP Data Report.Export RSoP to file:rWith an account with administrative privileges, open the Command Prompt by typing "cmd" on the Windows Start Menu.QNavigate to the directory where you would like the exported file to be generated.Type "gpresult /h gpreport.html" to export the report in HTML format. The file will only contain policies which are set by the agency.1.)2.)3.)4.)5.)6.)7.)8.)OS/App Version:Security Setting ReferenceAuthor.Agency Representatives and Contact InformationLThis SCSEM was designed to comply with Section 508 of the Rehabilitation ActAgencies should use this SCSEM to prepare for an upcoming Safeguards review. It is also an effective tool for agency use as part of internal periodic security assessments or internal inspections to ensure continued compliance in the years when a Safeguards review is not scheduled. The agency can also use the SCSEM to identify the types of policies and procedures required to ensure continued compliance with IRS Publication 1075.Introduction and Purpose:tPre-populated number to uniquely identify SCSEM test cases. The ID format includes the platform, platform version dand a unique number (01-XX) and can therefore be easily identified after the test has been executed.rThe test case is executed by Interview, Examine or Test methods in accordance with the test methodology specified qin NIST SP 800-53A. In test plans where SCAP testing is available, Automated and Manual indicators are added to Wthe Test method to indicate whether the test can be accomplished through the SCAP tool.yApplicable to Microsoft Windows and Internet Explorer, this field will identify the location of the configuration setting$in the Group or Local Policy Editor.uA detailed description of the step-by-step instructions to be followed by the tester. The test procedures should be Rexecuted using the applicable NIST 800-53A test method (Interview, Examine, Test).{Applicable to Microsoft Windows and Internet Explorer, the security setting identifies the title of the setting which will Dbe found at the policy location in the Group or Local Policy Editor.zThe tester shall provide appropriate detail describing the outcome of the test. The tester is responsible for identifyingeInterviewees and Evidence to validate the results in this field or the separate Notes/Evidence field.zThe tester indicates the status for the test results (Pass, Fail, Info, N/A). "Pass" indicates that the expected results ywere met. "Fail" indicates the expected results were not met. "Info" is temporary and indicates that the test executionttest subject is not capable of implementing the expected results and doing so does not impact security. The tester 7must determine the appropriateness of the "N/A" status.ris not completed and additional information is required to determine a Pass/Fail status. "N/A" indicates that the vAs determined appropriate to the tester or as required by the test method, procedures or expected results, the tester nmay need to provide additional information pertaining to the test execution (Interviewee, Documentation, etc.)From the MMC, select "Resultant Set of Policy" and from right panel, select "More Actions > Generate RSoP Data..." to begin RSoP Wizard.YThis SCSEM was created for the IRS Office of Safeguards based on the following resources.|AC-21, AU-13, AU-14, CP-3, CP-8, CP-9, CP-10, IA-8, PE-9, PE-10, PE-11, PE-12, PE-13, PE-14, PE-15, PM-1, PM-3, PM-5, PM-6, zPM-7, PM-8, PM-9, PM-10, PM-11, SA-12, SA-13, SA-14, SC-16, SC-20, SC-22, SC-25, SC-26, SC-27, SC-28, SC-29, SC-30, SC-31,SC-33, SC-34, SI-8, SI-13AC-1, AC-14, AC-18, AC-19, AC-20, AC-22, AT-3, AT-4, AU-1, AU-7, AU-11, CA-1, CA-2, CA-3, CA-5, CA-6, CA-7, CM-1, CM-2, CM-3, CM-4, CM-5, CM-6, CM-7, CM-8, CM-9, CP-1, CP-2, CP-4, CP-6, IA-1, IR-3, IR-7, IR-8, MA-1, MA-2, MA-3, MA-4, MA-5, PL-1, PL-2, PL-4, PL-5, PL-6, PM-2, RA-1, RA-2, RA-3, RA-5, SA-1, SA-2, SA-3, SA-4, SA-5, SA-6, SA-7, SA-8, SA-10, SA-11, SC-1, SC-5, SC-7, SC-12, SC-15, SC-17, SC-18, SC-19, SC-32, *SI-1, SI-4, SI-5, SI-7, SI-9, SI-10, SI-11AT-1, AT-2, CP-7, IR-1, IR-2, IR-4, IR-5, IR-6, MP-1, MP-2, MP-3, MP-4, MP-5, MP-6, MP-7, PE-1, PE-2, PE-3, PE-4, PE-5, PE-6, PE-7, PE-8, PE-16,P PE-17, PE-18, PM-4, PS-1, PS-2, PS-3, PS-4, PS-5, PS-6, PS-7, PS-8, SA-9, SI-12% Expected Results% Actual Results5Obtaining Group Policy Settings in Microsoft Windows: Device Name:Office of SafeguardsInternal Revenue ServiceThe IRS strongly recommends agencies test all Safeguard Computer Security Evaluation Matrix (SCSEM) settings in a development or testenvironment prior to deployment in production. In some cases a security setting mayimpact a system s functionality and usability. Consequently,it is important to perform testing to determine the impact on system security, functionality, and usability. Ideally, the test system configurationshould match the production system configuration. Prior to making changes to the production system, agencies should back up all critical datafiles on the system and if possible, make a full backup of the system to ensure it can be restored to its pre-SCSEM state if necessary.This SCSEM is used by the IRS Office of Safeguards to evaluate compliance with IRS Publication< 1075 for agencies that have implemented Booz Allen HamiltonPolicy LocationCM-6DisabledEnabledAC-2AC-4SC-8AC-17SI-2PrintersSystem SettingsAC-3CM-2xComputer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings Turn off Windows Error ReportingAC-11AC-6IA-5CM-7Solicited Remote AssistanceDisable remote Desktop Sharing"Do not allow passwords to be savedSC-9Enabled: 30 minutes or lessAU-9Prevent Automatic UpdatesIA-2Account Policies GroupaComputer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout PolicyAccount lockout threshold3 invalid logon attemptsAC-7Account lockout durationS0 minutes (Requires manual intervention by the Administrator to unlock the account)Reset lockout counter afterZComputer Configuration\Windows Settings\Security Settings\Account Policies\Password PolicyMaximum password age590 days for standard user. 60 days for administrator+Store passwords using reversible encryptionMinimum password ageMinimum password length 8 charactersAdvanced Audit Policy Settings'Microsoft Solutions for Security Group YComputer Configuration\Windows Settings\Security Settings\Local Policies\Security OptionsPMSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes9Highest protection, source routing is completely disabledcMSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)Security OptionsIA-4Accounts: Guest account statusAC-82Network security: LAN Manager authentication levelMNetwork security: Do not store LAN Manager hash value on next password change5The warning banner is compliant with IRS guidelines and contains the following 4 elements: - the system contains US government information - users actions are monitored and audited - unauthorized use of the system is prohibited - unauthorized use of the system is subject to criminal and civil penalties6Devices: Prevent users from installing printer drivers.Interactive logon: Smart card removal behavior2Network access: Remotely accessible registry paths7Network access: Shares that can be accessed anonymouslyBNetwork access: Do not allow anonymous enumeration of SAM accountsWSystem cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing30 minutes or lessJAccounts: Limit local account use of blank passwords to console logon only0Interactive logon: Do not display last user name=Network access: Sharing and security model for local accounts\Network security: Minimum session security for NTLM SSP based (including secure RPC) clientsCNetwork access: Restrict anonymous access to Named Pipes and Shares2Network security: LDAP client signing requirements_Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights AssignmentBypass traverse checkingCreate global objectsAdministrators)Impersonate a client after authentication Perform volume maintenance tasksDebug programsChange the system timeReplace a process level tokenIncrease scheduling priorityShut down the system"Adjust memory quotas for a processRestore files and directoriesLoad and unload device driversCreate a pagefileCreate a token object Manage auditing and security log-Deny access to this computer from the network%Access this computer from the networkLock pages in memory(Take ownership of files or other objectsLog on as a batch job$Remove computer from docking station#Force shutdown from a remote systemAllow log on locallyProfile single processBackup files and directories"Modify firmware environment valuesProfile system performanceLog on as a service@Deviation: USGCB requires 15 minutes. IRS policy is 30 minutes.>Deviation: USGCB requires 5 invalid attempts; IRS requires 3.NDeviation: USGCB requires 15 minutes. IRS policy is for this setting to be 0.Deviation: This test is evaluted through SCAP. However, the tester should identify the target machine user account and determine whether the account is associated with an administrator or standard user. USGCB requires 60 days and does not specify administrator/standard user types.JDeviation: IRS Publication 1075 requires specific warning banner language.Y% Internal Revenue Manual (IRM) 10.8.20, IT Security, Windows Security Policy (2/22/2012)0% USGCB SCAP 1.2 (OVAL 5.10) content (8/17/2012)/ % SCSEM Subject: Microsoft Windows Server 2003Microsoft Windows Server 2003 for a system that receives, stores, processes or transmits Federal Tax Information (FTI). The tests in this SCSEM ocomplement tests executed through the Security Content Automation Protocol (SCAP) or through manual evaluation. WIN2K3-001)Verify the current approved service pack.5The current, approved service pack will be installed.95.2 (Build 3790: Service Pack 2, released March 13, 2007. WIN2K3-002>Shutdown: Allow system to be shutdown without having to log on WIN2K3-003Configure auditing on each partition\drive to audit all "Failures" for the "Everyone" group. Right click on Folder\ob, click on Properties > Security > Advanced > Auditing.bInstruct the administrator to identify all locations on the local hard disk which could have FTI. gAll "Fail" entries are selected. Ensure the appropriate sub-folders are also included in the settings. WIN2K3-004ZComputer Configuration\Windows Settings\Security Settings\Local Policies\Security Options >Interactive Logon: Message text for users attempting to log on WIN2K3-005bInteractive Logon: Number of previous logons to cache (in case Domain Controller is not available)2 logons or less WIN2K3-006 WIN2K3-007 WIN2K3-008 60 minutes WIN2K3-009 WIN2K3-010 WIN2K3-011 WIN2K3-012 WIN2K3-0137Accounts: Rename guest account a value other than Guest$The Guest account should be renamed. WIN2K3-014GAccounts: Rename administrator account a value other than Administrator,The Administrator account should be renamed. WIN2K3-015AU-4+1. Click on "Start" 2. Click "Settings", then "Control Panel" 3. Click "Administrative Tools" 4. Click "Event Viewer" 5. Right-click "Application." 6. Right-click "Properties." 7. Ensure that the minimum log size is as follows: The value for  Maximum application log size MUST BE set to a minimum of  16384 kilobytes." The value for  Maximum security log size MUST BE set to a minimum of  81920 kilobytes. The value for  Maximum system log size MUST BE set to a minimum of  16384 kilobytes." 8. Repeat steps 6 and 7 for the System and Security logs.YThe minimum log size should reflect the following specs in "event viewer": The value for  Maximum application log size MUST BE set to a minimum of  16384 kilobytes.". The value for  Maximum security log size MUST BE set to a minimum of  81920 kilobytes." The value for  Maximum system log size MUST BE set to a minimum of  16384 kilobytes."< WIN2K3-016DMicrosoft Network Server: Disconnect Clients When Logon Hours Expire WIN2K3-017VMSS: (DisableSavePassword) Prevent the dial-up password from being saved (recommended) WIN2K3-018YMicrosoft Network Client: Send unencrypted password to connect to third-party SMB servers WIN2K3-019>MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended) WIN2K3-020[Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy\*Password must meet complexity requirements WIN2K3-021 WIN2K3-022BSetting must be a minimum of "Send NTLMv2 response only\refuse LM" WIN2K3-023.Interactive Logon: Do not require CTRL ALT DEL WIN2K3-024 Lock Workstation or Force Logoff WIN2K3-025HRecovery Console: Allow floppy copy and access to all drives and folders WIN2K3-0266Recovery Console: Allow automatic administrative logon WIN2K3-027.Devices: Unsigned driver installation behavior8Warn but allow installation or Do not allow installation WIN2K3-028JMicrosoft Network Server: Digitally sign communications (if Client agrees) WIN2K3-029DDomain Member: Digitally encrypt secure channel data (when possible) WIN2K3-030ADomain Member: Digitally sign secure channel data (when possible) WIN2K3-0317Domain Member: Disable Machine Account Password Changes WIN2K3-032JMicrosoft Network Client: Digitally sign communications (if server agrees) WIN2K3-0334Devices: Allowed to Format and Eject Removable Media WIN2K3-034CInteractive Logon: Prompt user to change password before expiration5-14 days or more. WIN2K3-035_System Objects: Strengthen default permissions of internal system objects (e.g. Symbolic links) WIN2K3-036RMicrosoft Network Server: Amount of idle time required before suspending a session WIN2K3-037 WIN2K3-0386Computer Configuration\Administrative Templates\SystemTurn off AutoPlayEnabled:All Drives WIN2K3-039<Network access: Named pipes that can be accessed anonymously WIN2K3-040 WIN2K3-041 WIN2K3-042Terminal ServicesTComputer Configuration\Administrative Templates\Windows Components\Terminal Services@Sets rules for remote control of Terminal Services user settings@Enabled and the Options will be set to No remote control allowed WIN2K3-043=Computer Configuration\Administrative Templates\System\Logon 9Always Wait for the Network at Computer Startup and Logon WIN2K3-044Security SettingsIComputer Configuration\Administrative Templates\System\Remote Assistance WIN2K3-045 WIN2K3-046Windows MessengerUComputer Configuration\Administrative Templates\Windows Components\Windows Messenger (Do Not Allow Windows Messenger to be Run WIN2K3-0476Do Not Automatically Start Windows Messenger Initially WIN2K3-048User Rights AssignmentkANONYMOUS LOGON; Guests; Support_388945a0; Renamed Guest Account; all non-operating system service accounts WIN2K3-049.Devices: Allow Undock Without Having to Log On WIN2K3-0503Domain Member: Maximum Machine Account Password Age30 or less, but not 0. WIN2K3-051ADomain Member: Require Strong (Windows 2000 or Later) Session Key WIN2K3-052QInteractive logon: Require domain controller authentication to unlock workstation WIN2K3-053`Network access: Do not allow storage of credentials or .NET passports for network authentication WIN2K3-054ANetwork access: Let everyone permissions apply to anonymous users WIN2K3-0550Classic - local users authenticate as themselves WIN2K3-056 WIN2K3-0577Network security: Force logoff when logon hours expire WIN2K3-058 Negotiate signing, at a minimum. WIN2K3-059Require NTLMv2 session security ,  Require 128-bit encryption ,  Require Message Integrity , and  Require Message Confidentiality (all options selected). WIN2K3-060 WIN2K3-061WSystem objects: Default owner for object created by members of the Administrators groupObject creator WIN2K3-062DSystem Object: Require Case Insensitivity for Non-Windows Subsystems WIN2K3-063NComputer Configuration\Administrative Templates\Windows Components\NetMeeting WIN2K3-064UComputer Configuration\Administrative Templates\Windows Components\Terminal Services 9Restrict Terminal Server users to a Single Remote Session WIN2K3-065Limit Number of ConnectionsKEnabled , and the value TS maximum connections allowed to no more than 1 WIN2K3-066mComputer Configuration\Administrative Templates\Windows Components\Terminal Services\Encryption and Security &Set Client Connection Encryption LevelEnabled , and set to high WIN2K3-067gComputer Configuration\Administrative Templates\Windows Components\Terminal Services\Temporary Folders #Do Not Use Temp Folders per Session WIN2K3-068#Do Not Delete Temp Folder upon Exit WIN2K3-069^Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Sessions (Set Time Limit for Disconnected Sessions9Enabled , and the End a disconnected session to 1 minute WIN2K3-070=Set time limit for active but idle Terminal Services sessions WIN2K3-071,Allow Reconnection from Original Client Only WIN2K3-072.Terminate Session When Time Limits are Reached WIN2K3-073DComputer Configuration\Administrative Templates\System\Group Policy +Turn Off Background Refresh of Group Policy WIN2K3-074 WIN2K3-0759Computer Configuration\Administrative Templates\Printers ;Disallow Installation of Printers Using Kernel-mode Drivers WIN2K3-076BMSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended) WIN2K3-077XComputer Configuration\Administrative Templates\Windows Components\Windows Media Player WIN2K3-078 WIN2K3-079oMSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning WIN2K3-080 WIN2K3-081 WIN2K3-082nMSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS) WIN2K3-083JMSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds+300000 or 5 minutes (recommended) or less. WIN2K3-084lMSS: (NoNameReleaseOnDemand) Allow computer to ignore NetBIOS name release requests except from WINS servers WIN2K3-085JMSS: (SynAttackProtect) Syn attack protection level (protects against DoS)7Connections time out sooner if a SYN attack is detected WIN2K3-086iMSS: (TcpMaxConnectResponseRetransmissions) SYN-ACK retransmissions when a connection is not acknowledged3 & 6 seconds, half-open connections dropped after 21 seconds , 3 seconds, half-open connections dropped after 9 seconds or No retransmission, half-open connections dropped after 3 seconds WIN2K3-087vMSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is the default) 3 or less. WIN2K3-088nMSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended) 5 or less. WIN2K3-089@Network access: Remotely accessible registry paths and sub-paths WIN2K3-090USystem cryptography: Force strong key protection for user keys stored in the computer3User must enter a password each time they use a key WIN2K3-091$System Settings: Optional Subsystems#Blank (Configured with no entries)._System Settings: Use Certificate Rules on Windows Executables for Software Restriction PoliciesComputer Configuration\Administrative Templates\Windows Components\Terminal Services\Encryption and Security\RPC Security Policy Secure Server (Require Security) WIN2K3-094Registry Policy ProcessingAEnabled:Process even if the Group Policy obje< cts have not changed WIN2K3-095EDomain Member: Digitally encrypt or sign secure channel data (always) WIN2K3-096@Microsoft Network Client: Digitally sign communications (always) WIN2K3-097@Microsoft Network Server: Digitally sign communications (always) WIN2K3-098 WIN2K3-099HComputer Configuration\Windows Settings\Account Policies\Password Policy WIN2K3-100 WIN2K3-101^Computer Configuration\Administrative Templates\Windows Components\Terminal Services-> Client WIN2K3-102?Interactive Logon: Message title for users attempting to log on_. The title should indicate "Warning!" or equivilent. WIN2K3-103ob Permissions3Permissions are securely delegated for \regedit.exe regedit.exe!Administrators: Full System: Full WIN2K3-1048Permissions are securely delegated for \System32\arp.exearp.exe WIN2K3-1057Permissions are securely delegated for \System32\at.exeat.exe WIN2K3-106;Permissions are securely delegated for \System32\attrib.exe attrib.exe WIN2K3-107:Permissions are securely delegated for \System32\cacls.exe cacls.exe WIN2K3-108:Permissions are securely delegated for \System32\debug.exe debug.exe WIN2K3-109:Permissions are securely delegated for \System32\edlin.exe edlin.exe WIN2K3-110@Permissions are securely delegated for \System32\eventcreate.exeeventcreate.exe WIN2K3-111BPermissions are securely delegated for \System32\eventtriggers.exeeventtriggers.exe WIN2K3-1128Permissions are securely delegated for \System32\ftp.exeftp.exe WIN2K3-113<Permissions are securely delegated for \System32\nbtstat.exe nbtstat.exe WIN2K3-1148Permissions are securely delegated for \System32\net.exenet.exe WIN2K3-1159Permissions are securely delegated for \System32\net1.exenet1.exe WIN2K3-116:Permissions are securely delegated for \System32\netsh.exe netsh.exe WIN2K3-117<Permissions are securely delegated for \System32\netstat.exe netstat.exe WIN2K3-118=Permissions are securely delegated for \System32\nslookup.exe nslookup.exe WIN2K3-119=Permissions are securely delegated for \System32\ntbackup.exe ntbackup.exe WIN2K3-1208Permissions are securely delegated for \System32\rcp.exercp.exe WIN2K3-1218Permissions are securely delegated for \System32\reg.exereg.exe WIN2K3-122=Permissions are securely delegated for \System32\regedt32.exe regedt32.exe WIN2K3-123;Permissions are securely delegated for \System32\regini.exe regini.exe WIN2K3-124=Permissions are securely delegated for \System32\regsvr32.exe regsvr32.exe WIN2K3-125:Permissions are securely delegated for \System32\rexec.exe rexec.exe WIN2K3-126:Permissions are securely delegated for \System32\route.exe route.exe WIN2K3-1278Permissions are securely delegated for \System32\rsh.exersh.exe WIN2K3-1287Permissions are securely delegated for \System32\sc.exesc.exe WIN2K3-129<Permissions are securely delegated for \System32\secedit.exe secedit.exe WIN2K3-130:Permissions are securely delegated for \System32\subst.exe subst.exe WIN2K3-131?Permissions are securely delegated for \System32\Systeminfo.exeSysteminfo.exe WIN2K3-132;Permissions are securely delegated for \System32\telnet.exe telnet.exe WIN2K3-1339Permissions are securely delegated for \System32\tftp.exetftp.exe WIN2K3-134<Permissions are securely delegated for \System32\tlntsvr.exe tlntsvr.exe WIN2K3-135Registry Key Permissions HKLM\SoftwareSoftwareAAdministrators: Full System: Full Creator Owner: Full Users: Read WIN2K3-136XPermissions for Registry Keys - HKLM\Software\Microsoft\Windows\CurrentVersion\Installer Installer-Administrators: Full System: Full Users: Read WIN2K3-137WPermissions for Registry Keys - HKLM\Software\Microsoft\Windows\CurrentVersion\PoliciesPolicies;Administrators: Full System: Full Authenticated Users: Read WIN2K3-138+Permissions for Registry Keys - HKLM\SystemSystemBAdministrators: Full System: Full Creator Owner: Full Users: Read WIN2K3-139BPermissions for Registry Keys - HKLM\System\CurrentControlSet\EnumEnum WIN2K3-140iPermissions for Registry Keys - HKLM\System\CurrentControlSet\ Services\SNMP\Parameters\PermittedManagersPermittedManagers WIN2K3-141hPermissions for Registry Keys - HKLM\System\CurrentControlSet\ Services\SNMP\Parameters\ValidCommunitiesValidCommunities5Administrators: Full System: Full Creator Owner: Full WIN2K3-142MSDTCAdministrators: Full Users: Read System: Full Users: Read Network Service: Query value, Set value, Create subkey, Enumerate Subkeys, Notify, Read permissions WIN2K3-143hPermissions for Registry Keys - HKU\.Default\Software\Microsoft\ SystemCertificates\Root\ ProtectedRootsProtectedRoots WIN2K3-144 WIN2K3-145"Administrators Authenticated Users WIN2K3-146Add workstations to the domain WIN2K3-147,Administrators LOCAL SERVICE NETWORK SERVICE WIN2K3-148Administrators Backup Operators WIN2K3-149%Allow logon through Terminal Services WIN2K3-150 WIN2K3-151Authenticated Users Users WIN2K3-152Administrators LOCAL SERVICE WIN2K3-153 WIN2K3-154None WIN2K3-155Administrators Service WIN2K3-156Create permanent shared object WIN2K3-157 WIN2K3-158'ANONYMOUS LOGON Guests Support_388945a0 WIN2K3-159Deny logon as a batch jobGuests Support_388945a0 WIN2K3-160Deny logon as a service WIN2K3-161Deny logon locally WIN2K3-162#Deny logon through terminal serviceEveryone WIN2K3-163>Enable computer and user accounts to be trusted for delegation WIN2K3-164 WIN2K3-165Generate Security AuditsLOCAL SERVICE NETWORK SERVICE WIN2K3-166Administrators SERVICE WIN2K3-167 WIN2K3-168 WIN2K3-169 WIN2K3-170 WIN2K3-171NETWORK SERVICE WIN2K3-172Auditor's Group WIN2K3-173 WIN2K3-174 WIN2K3-175 WIN2K3-176 WIN2K3-177 WIN2K3-178 WIN2K3-179 WIN2K3-180 WIN2K3-181"Synchronize directory service data WIN2K3-182 CCE-3448-8 CCE-3672-3 CCE-3709-3 CCE-3631-9 CCE-3551-9 CCE-3574-1 CCE-2627-8 CCE-3530-3 CCE-3548-5 CCE-2908-2 CCE-3743-2 CCE-2853-0 CCE-3773-9 CCE-3757-2 CCE-2870-4 CCE-3690-5 CCE-3442-1 CCE-3769-7 CCE-3703-6 CCE-3060-1 CCE-3674-9 CCE-3676-4 CCE-3659-0 CCE-3787-9 CCE-3189-8 CCE-3370-4 CCE-3511-3 CCE-8592-8 CCE-8534-0 CCE-3586-5 CCE-3804-2 CCE-2963-7 CCE-3761-4 CCE-2644-3 CCE-3597-2 CCE-3711-9 CCE-3729-1 CCE-3592-3 CCE-3848-9 CCE-3549-3CCE-3599-8, CCE-3617-8 CCE-3357-1 CCE-3494-2 CCE-3306-8 CCE-3613-7 CCE-2984-3 CCE-3478-5 CCE-3504-8 CCE-3420-7 CCE-3817-4 CCE-3112-0 CCE-3632-7 CCE-3719-2 CCE-2819-1 CCE-3614-5 CCE-3441-3 CCE-2947-0 CCE-3714-3 CCE-2909-0 CCE-3654-1 CCE-3786-1 CCE-3812-5 CCE-3710-1 CCE-3627-7 CCE-2875-3 CCE-3665-7 CCE-3683-0 CCE-3577-4 CCE-3298-7 CCE-3758-0 CCE-3708-5 CCE-3778-8 CCE-3720-0 CCE-8479-8 CCE-3227-6 CCE-3725-9 CCE-3509-7 CCE-2812-6 CCE-2817-5 CCE-3616-0 CCE-8472-3 CCE-7613-3 CCE-8544-9 CCE-8325-3 CCE-8462-4 CCE-7936-8 CCE-8043-2 CCE-3731-7 CCE-3652-5 CCE-3295-3 CCE-8091-1 CCE-3424-9 CCE-3527-9 CCE-2790-41Deviation: IRS allows for notification 5-14 days.PDeviation: DISA requires 12 characters. IRS requires a minimum of 8 characters.>% Windows 2003 MS & DC STIG Benchmarks Version 6, Release 1.267Out of Scope Controls - Unselected NIST 800-53 Controls% NIST Control Name&Full name which describes the NIST ID.hMinor update to correct worksheet locking capabilities. Added back NIST control name to Test Cases Tab.NIST Control NameLeast FunctionalityConfiguration SettingsAccess EnforcementUnsuccessful Login AttemptsAudit Storage CapacityAuthenticator ManagementAccount ManagementBaseline Configuration8Identification and Authentication (Organizational Users)Transmission IntegrityTransmission Confidentiality Remote AccessIdentifier Management< Session LockProtection of Audit InformationFlaw RemediationInformation Flow EnforcementSystem Use NotificationLeast PrivilegeTesting ResultsThe "Info Needed" status is provided for use by the tester during test execution to indicate more information is needed to complete the test.It is not an acceptable final test status, all test cases should be "Pass", "Fail", "Not Applicable" or "Automated" at the conclusion of testing. Info NeededNot Applicable Automated InterviewExamineHPlease submit SCSEM feedback and suggestions to SafeguardReports@IRS.govHObtain SCSEM updates online at http://www.irs.gov/uac/Safeguards-Programh% NIST SP 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and OrganizationsPUpdates based on Publication 1075. See SCSEM notes column for specific updates.1 day3/3/14: Updated to 1 day. 90 or less.YesNo Agency Code: Closing Date:Shared Agencies:=Permissions for Registry Keys - HKLM\Software\Microsoft\MSDTCSecedit\Permissions for Registry Keys - HKLM \SOFTWARE\Microsoft\ Windows NT\CurrentVersion\ Secedit WIN2K3-183 CCE-3062-71.4.1BMinor updates to fix some test case language (e.g., 142, 144, 149)7Minor updates to fix some test case language (e.g., 48)1.4.24NIST ID and Control name were changed for WIN2K3-004Reported ComponentN/AInfop% IRS Publication 1075, Tax Information Security Guidelines for Federal, State and Local Agencies (January 2014);Fixed Status column selections and updated column headings. % Criticality'The risk category has been pre-populated next to each control to assist agencies in establishing priorities for corrective action. The reviewer has the discretion to change the prioritization to accurately reflect the risk and the overall security posture based on environment specific testing.1. All SCSEM Test Results JFinal Test Results (This table calculates all tests in the Test Cases tab) Overall SCSEM StatisticsPassedFailed Additional Information RequestedWeighted Pass RateTotalsWeighted Score Risk RatingWeightDevice Weighted Score: CriticalityIssue Code Mapping Criticality Rating (Do Not Edit)Criticality RatingsCritical SignificantModerateLimitedHCM12HCM1 HCM100, HAU5 HAC14, HAC100HAC15, HAU4, HAC100HAC21, HAC22, HAC100, HCM100HAC100HAC15, HAC17, HAC2, HAC100HAC100, HPW2, HPW4HAU100HSA4HCM100HPW100HAC29 HCM10, HSA4 HSC100, HSC18HSC100, HSC1, HSC15HSI1HAC100, HAC10, HPW2HAC13 HTC21, HAC100 HRM8, HRM7HRM100 HAC29, HMT12 HSA2, HCM10 HCM10, HCM100 HPW2, HPW100 HAC29, HAC100HAC7, HAC8, HAC9, HAC17, HAC100HSC100HAC100, HPW10, HPW100HRM5, HAC2, HRM100, HAC100 HSC15, HSC100 HRM7, HRM100HRM5, HRM7, HRM100 HAC2, HAC100HAC2, HAC100, HRM5, HRM100 HCM1, HCM100HSI100HCM100, HSI100HCM7, HCM12, HCM14HAT100 HSC7, HSC100HCM100, HSC100, HSC7HCM100, HSI100, HAC100HCM100, HRM9, HRM100 HPW3, HPW100 HPW10, HPW100 HAC100, HAU3, HAU8, HAU10, HAU14,Sections below are automatically calculated.PossibleActualTotal Number of Tests Performed- % SCSEM Version: 1.5' % SCSEM Release Date: February 6, 2015sAdded baseline Criticality Score and Issue Codes, weighted test cases based on criticality, and updated Results Tab\k kll{DmnJoi q0su Jw ww >{A~nN1.ӌ_[WǏS=.| ^ > K AٜeɟUz8sFư7ٱJu  # % "Y;v ~Tas1f="o.#3e b Q d c DK:U#Y Zw6Q9 Vq2Mj:U_k55Q e  s  @n  f -[ ccB T8 /    dMbP?_*+%# &CIRS Office of Safeguards SCSEM&L&F&RPage &P of &N&?'?(?)?M6Microsoft XPS Document WriterX odXXLetterDINU"L r SMTJMicrosoft XPS Document WriterInputBinFORMSOURCERESDLLUniresDLLInterleavingOFFImageTypeJPEGMedOrientationPORTRAITCollateOFFResolutionOption1PaperSizeLETTERColorMode24bpp MXDW"d??&U} $ } i} $ /;;h@@     @@                              %   6   &  '      S  W           Dl   !"#$%&()*,`-`.`   ! " " # # $ $ % %  & & (X ) * , - .(    A:??:The official logo of the IRSPicture 1The official logo of the IRS"ÙPK!9^[Content_Types].xmlAN0EH%NY tA*T0'E2 JMN vi{ɖz$cȢ*%2鉣-uAg>퀳Ӷ/3[0ཻ:ũ5a8>Ҥ8Šr>O?aΫǮʰ!'/辱ٳܰ泾.泾U0?+"ɖ9,(~#ϊv;bHC3y6r3)2_ϲʊM<#mfj|j_ ASPd1K]W m`jڸ";r7՝ &,x6;/Z1V;Jw)"r-)+@V׋( (FJڊg1n>l8>?qO+gTb> 'Q7ePK!mA6drs/downrev.xmll_O0M5M:R!F#--i ?z9ǭnD䶨Rb~w2jA ;0 ՠ[3MJ( U>P+߱+44+*tK^8r8ת6BV80ZyΟm>X6. ¥m#Bl+X9C_/٭7,= IuD߰"ME_)y'8}PK-!9^[Content_Types].xmlPK-! 1_rels/.relsPK-!'.drs/picturexml.xmlPK-!mA6Hdrs/downrev.xmlPK]bi]&`>@PwH #Insert tester name and organizationO *Insert City, State and address or building Sheet1gg\ T8 $%4y5  dMbP?_*+%# &CIRS Office of Safeguards SCSEM&L&F&RPage &P of &N&?'?(?)?M 901 15th St - Room 4025 - Xero ߁ odLetterPRIVx-ArialUntitled0:0:0:0:0dX222222222SYSTEMLettero o o o 1'v"d??&U}  }  }  }  }  } $ } $ } $ } $ $h@@ @  @ @ @@@@@ @@@@@@@w@@ $  $                v$& $ $&&@AAAAAAAAAAAAAABC D9EEEEF G H: I; JKKKL M< NNNOG P Q= R> R? R3 R S@ T  U U V W X+ Y ;5 PassAZ+ Z ;5 FailAZ+ Y ;5 InfoAZ* Y ;5 N/AAZ! Y D D  D [A \% ] ;5 B! ]f@ D D % ^f@ ;5B _ X` aaaaa_ X IB KKKKb aaaaa_c dC d- d d d3 dD e e Wc~ f@)g ;@@DAZ?Y)#;@@D; @ @DB?Y)#;@@D; @ @DB?Y)#;@@D; @ @DB y Wc~ f@)gC@;@@DAZ?Y)#;@@D; @ @DB?Y)#;@@D; @ @DB?Y)#;@@D; @ @DB~ y$@)w@DDD! DD Wc~ f@)ga@;@@DAZ?Y)#;@@D; @ @DB?Y)#;@@D; @ @DB?Y)#;@@D; @ @DB~ y@)v@DDD! DD Wc~ f?)g?;@@DAZ?Y)#;@@D; @ @DB?Y)#;@@D; @ @DB?Y)#;@@D; @ @DB~ y?)? DDD! DD Wc wExz{dD 0%)%W d?&%%dB W&hiiiiiiiiijjjjjk>N0666*66**BR.B2*!`"`#` ! " # f($   i jPH 0(  >@Z     ; 0(   {+{ gg\ T8 ;2?(I2Q  dMbP?_*+%) # &CIRS Office of Safeguards SCSEM&L&F&RPage &P of &N&?'?(?)?MAdobe PDFS odLetterPRIV0''''0\KhCFFSMTJAdobe PDF ConverterResolution1200dpiPageSizeLetterPageRegionLeadingEdgeInputSlotOnlyOne0EBDAStandard"d??&U} $ } $ } $ ;  @ @ @@@@@@@   \        " Y  Z  [  "    6  ]   ^  7  0    1  _  `  a 2  8 9  b  c :  d  e 3  f  g |  ; }  h  i 5  j  k  n B X22222&222&2H<HHH<<HH<H<H<HH<H< !"@#$@%&')@*@+@,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@  l  ! !m! "= " "o" # #p# $< $ $4$ %87 %9: %~8% "&;< "'=>? )~ ) *E * +K +>+ ,L ,?, -M -@- .N .q. /O /A/ 0P 0B0 1Q 1C1 2R 2D2 "3 4F 4 "5 6G 6 7K 7H7 8L 8I8 9M 9J9 ": 8<<H<HH&&22>>>>>>>>&2&2>>>PH00(  >@PA  %' w Sheet6gg\ T8 ,iZ]z~B,  dMbP?_*+%# &CIRS Office of Safeguards SCSEM&L&F&RPage &P of &N&?'?(?)?MAdobe PDFS oALetterPRIV0''''0\KhCFFSMTJAdobe PDF ConverterResolution1200dpiPageSizeLetterPageRegionLeadingEdgeInputSlotOnlyOne0EBDAStandard"A??&U} } } } } m } I } } }  } } } } } }  } $ } $ }  } $  @ @7@    @  @ @@@@E@@U@e@@@ # # # # # # #T # # # #! #U #2 lF mG oH $ % % " % $ $ $&3($  -#  &L pNz@D Critical qD  Significant JD Moderate &D Limited """B $ % % " %     $ &3(  $  -$  &L qOz@A@LCritical qL Significant JLModerate &LLimited """B $ % % " % $ $ *&3($  -#  &L qPz@ $ 5 5 " %     * &3  !  $  -#  &M qQz? $ % % " %     $ &3(  $  -$  &K qRz@ $ % % " %     $ &3(  $  -#  &K qSz@ $ % % " % $ $ + &3  !  $  -#  &K qRz@ $ % % " % $ $ + &3$  $  -$  &L qTz@  $  % % " % $ $ + &3 $ $ -# &K qU z@  $  % % " % $ $ * &3 $ $ -# &L 'V z@  $  % % " % $ $ +  &3 ,! $ -# &L 'V z@  $  % % " % $ $ + &3( $ -# &L 'T z@  $  % % " % $ $ * &3( $ -$ &L 'T z@ $ % % " % $ $ * &3(  $  -$  &L 'Tz@ $ % % " %   %  &3($  -#  &L qWz@ $ % % " % $   $ &3(  $  -$  &L qTz@ $ % % " %     $ &3(  $  -#  &L qTz@ $ % % " % $   $ &3(  $  -#  &L qTz@ $ % % " % $   $ &3(  $  -#  &L qTz@ $ % % " % $   ! $ &3(  $  -#  &L qZz@ $" % % " % $   $ &3(  $  -$  &K qXz@ $# % % " % $   *$ &3(  $  -#  &L qTz@ $% % % " % $  & $ &3(  $  -$  &L qTz@ $' % % " % $   $( &3(  $  -$  &L qTz@ $) % % " % $  * $ &3(  $  -$  &L qOz@ $+ % %  " % $  , $ &3(  $  -#  &K q[z@ $- % % " %    . $/ &3(  $  -$  &K q\z@ $0 % %  " % $  1 $ &3(  $  -#  &K q]z@ $2 % %  " % $  3 $ &3(  $  -#  &K q^z@ $4 % %  " % $  5 $ &3(  $  -#  &K q]z@ $6 % % " % $  7 $ &3(  $  -$  &L qZz@ DlTs !@"@#$@%@&' @(@)@*@+,-r@.@/01@2d@3456T@7@89e@:@;<=>? $8 % % " % $  9 $ &3( $ -$ &K q^ z@! !$: !% !% !" !% !$ ! ; !$ !&3( ! $ ! -$ ! &K !q_!z@" "$< "% "% "" "% "$ " = "$> "&3 " , " $ " -$ " &K "q`"z@# #$? #% #% #" #% #$ # @ #$ #&3( # $ # -$ # &L #qa#z@$ $$A $% $% $" $% $  $ B $* $&3 $ ! $ $ $ -$ $ &L $qT$z@% %$C %% %% %" %% %$ %  %$ %&3( % $ % -# % &L %qZ%z@& &$D &% &% &" &% & E & F &$G &&3( & $ & -# & &L &qY&z@' '$H '% '% '" '% '  ' I '*J '&3( ' $ ' -$ ' &L 'qb'z@( ($K (% (% (" (% (  (  (*J (&3( ( $ ( -$ ( &K (qc(z@) )$L )% )%  )" )% )  )  )*J )&3( ) $ ) -# ) &L )qb)z@* *$M *% *%  *" *%N * O * P *$Q *&3( * $ * -# * &L *qd*z@+ +$R +% +%  +" +% + S + T +$ +&3( + $ + -$ + &K +qe+z@, ,$U ,% ,% ," ,%V , W ,  ,$ ,&3( , $ , -$ , &L ,qd,z@- -$X -% -% -" -% -  -  -$ -&3( - $ - -# - &L -qZ-z@. .$Y .% .% ." .%Z . [ . \ .$ .&3( . $ . -$ . &K .qf.z@/ /$] /% /% /" /%Z / [ / ^ /$ /&3( / $ / -$ / &K /qf/z@0 0$_ 0% 0%  0" 0%` 0$ 0$ 0$a 0&3( 0 $, 0 -# 0 &K 0qe0z@1 1$b 1% 1% 1" 1% 1  1 c 1$ 1&3( 1 $ 1 -$ 1 &K 1qg1z@2 2$d 2% 2% 2" 2% 2  2 e 2$f 2&3( 2 $ 2 -$ 2 &K 2qh2z@3 3$g 3% 3% 3" 3% 3  3 h 3$ 3&3( 3 $ 3 -# 3 &L 3qY3z@4 4$i 4% 4%  4" 4% 4  4 j 4$ 4&3( 4 $ 4 -$ 4 &K 4qi4z@5 5$k 5% 5%  5" 5% 5  5 l 5$ 5&3( 5 $ 5 -# 5 &K 5qi5z@6 6$m 6% 6% 6" 6% 6  6 n 6$ 6&3( 6 $ 6 -# 6 &K 6qj6z@7 7$o 7% 7%  7" 7% 7  7  7$p 7&3( 7 $ 7 -# 7 &K 7qj7z@8 8$q 8% 8% 8" 8% 8  8  8$ 8&3( 8 $ 8 -# 8 &K 8ql8z@9 9$r 9% 9% 9" 9% 9$ 9$s 9* 9&3( 9 $ 9 -$ 9 &L 9qm9z@: :$t :% :% :" :% :  :  :$u :&3( : $ : -$ : &L :qY:z@; ;$v ;% ;% ;" ;% ;  ;  ;$w ;&3( ; $ ; -# ; &K ;ql;z@< <$x <% <%  <" <% <  <  <$ <&3( < $ < -# < &K <qn<z@= =$y =% =% =" =% =  = z =${ =&3( = $ = -$ = &L =qT=z@> >$| >% >%  >" >% >  > } >$ >&3( > $ > -$ > &L >qk>z@? ?$~ ?% ?%  ?" ?% ?  ?  ?$ ?&3( ? $ ? -# ? &K ?qo?z@@Dxl@@ABCDEFGHI@JK@L6@MNOPQRSTUVWXYZ[\]^_ @$ @% @%  @" @% @  @  @$ @&3( @ $ @ -$ @ &K @qp@z@A A$ A% A%  A" A% A  A  A$ A&3( A $ A -$ A &K AqoAz@B B$ B% B%  B" B% B  B  B$ B&3( B $ B -# B &K BqnBz@CBB?LCritical qL Significant JLModerate &LLimited """B C$ C% C% C" C% C  C  C$ C&3( C $ C -$ C &L CqWCz@DB D$ D% D% D" D% D  D  D$ D&3( D $ D -$ D &L DqWDz@EB E$ E% E% E" E% E  E  E$ E&3( E $ E -$ E &L EqqEz@FB F$ F% F%  F" F% F  F  F* F&3 F ! F $ F -$ F &L FqrFz@GB G$ G% G%  G" G% G  G  G$ G&3( G $ G -# G &L GqrGz@HB H$ H% H%  H" H% H  H  H$ H&3( H $ H -$ H &L HqrHz@IB I$ I% I% I" I% I  I  I$ I&3( I $ I -$ I &L IqsIz@JB J$ J% J% J" J% J  J  J$ J&3( J $ J -$ J &L JqtJz@KB K$ K% K% K" K% K  K  K$ K&3( K $ K -$ K &L KqYKz@LB L$ L% L% L" L% L  L  L$ L&3( L $ L -$ L &L LqzLz@MB M$ M% M% M" M% M  M  M$ M&3( M $ M -$ M &L MqvMz@NB N$ N% N% N" N% N  N  N$" N&3( N $ N -$ N &L NqwNz@OB O$ O% O% O" O% O  O  O$ O&3( O $ O -$ O &K OqxOz@PB P$ P% P% P" P% P  P  P$ P&3( P $ P -$ P &L PqTPz@QB Q$ Q% Q% Q" Q% Q  Q  Q$ Q&3( Q $ Q -$ Q &L QquQz@RB R$ R% R% R" R% R  R  R$ R&3( R $ R -$ R &K RqyRz@SB S$ S% S% S" S% S  S  S$ S&3( S $ S -$ S &L SquSz@TB T$ T% T% T" T% T  T  T$ T&3( T $ T -$ T &L TquTz@UB U$ U% U% U" U% U  U  U$ U&3( U $ U -$ U &L UquUz@VB V$ V% V% V" V% V  V  V$ V&3( V $ V -$ V &L VquVz@WB W$ W% W% W" W% W  W  W$ W&3( W $ W -$ W &L WqTWz@XB X$ X% X% X" X% X  X  X*J X&3( X $ X -# X &K Xq{Xz@YB Y$ Y% Y% Y" Y% Y  Y  Y$ Y&3( Y $ Y -# Y &K YqiYz@ZB Z$ Z% Z% Z" Z% Z  Z  Z$Z&3($ Z -$ Z &L ZqYZz@[B [$ [% [% [" [% [  [  [$ [&3( [ $ [ -$ [ &L [qY[z@]B \$\%\%* \"% \  \  \$\&'($)&q\z ]$ ]% ]% ]" ]% ]  ]  ]$ ]&3( ] $ ] -$ ] &L ]qs]z@^B ^$ ^% ^%  ^" ^% ^  ^  ^$ ^&3( ^ $ ^ -# ^ &L ^qk^z@_B _$ _% _%  _" _% _  _  _$ _&3( _ $ _ -$ _ &L _qk_z@`BDls`a@bc@defghijklmnopqrstuvwxyz{|}~ `$ `% `% `" `% `  `  `$ `&3( ` $ ` -$ ` &L `qY`z@aB a$ a% a% a" a% a  a  a$ a&3( a $ a -# a &L aqbaz@bB b$ b% b% b" b% b! b! b* b&3 b ! b $ b -# b &K bq|bz@cB c$ c% c% c" c% c  c  c$ c&3( c $ c -$ c &L cqTcz@dB d$ d% d% d" d% d  d  d$d&3($ d -# d &K dq}dz@eB e$ e% e% e" e% e  e  e$ e&3( e $ e -# e &L eqTez@fB f$ f% f% f" f% f  f  f$f&3($ f )$ f &L fqafz@gB g$ g% g% g" g% g  g  g$g&3($ g )$ g &L gqagz@hB h$ h% h% h" h% h  h  h$h&3($ h )$ h &L hqahz@iB i$ i% i% i" i% i  i  i$i&3($ i )$ i &L iqaiz@jB j$ j% j% j" j% j  j  j$j&3($ j )$ j &L jqajz@kB k$ k% k% k" k% k  k  k$k&3($ k )$ k &L kqakz@lB l$ l% l% l" l% l  l  l$l&3($ l )$ l &L lqalz@mB m$ m% m% m" m% m  m  m$m&3($ m )$ m &L mqamz@nB n$ n% n% n" n% n  n  n$n&3($ n )$ n &L nqanz@oB o$ o% o% o" o% o  o  o$o&3($ o )$ o &L oqaoz@pB p$ p% p% p" p% p  p  p$p&3($ p )$ p &L pqapz@qB q$ q% q% q" q% q  q  q$q&3($ q )$ q &L qqaqz@rB r$ r% r% r" r% r  r  r$r&3($ r )$ r &L rqarz@sB s$ s% s% s" s% s  s  s$s&3($ s )$ s &L sqasz@tB t$ t% t% t" t% t  t  t$t&3($ t )$ t &L tqatz@uB u$  u% u% u" u% u   u   u$u&3($ u )$ u &L uqauz@vB v$ v% v% v" v% v   v   v$v&3($ v )$ v &L vqavz@wB w$ w% w% w" w% w  w  w$w&3($ w )$ w &L wqawz@xB x$ x% x% x" x% x  x  x$x&3($ x )$ x &L xqaxz@yB y$ y% y% y" y% y  y  y$y&3($ y )$ y &L yqayz@zB z$ z% z% z" z% z  z  z$z&3($ z )$ z &L zqazz@{B {$ {% {% {" {% {  {  {${&3($ { )$ { &L {qa{z@|B |$  |% |% |" |% |  |  |$|&3($ | )$ | &L |qa|z@}B }$# }% }% }" }% } ! } " }$}&3($ } )$ } &L }qa}z@~B ~$& ~% ~% ~" ~% ~ $ ~ % ~$~&3($ ~ )$ ~ &L ~qa~z@B $) % % " %  '  ( $&3($  )$  &L qaz@BD(l@ $, % % " %  *  + $&3($ )$ &L qaz@B $/ % % " %  -  . $&3($ )$ &L qaz@B $2 % % " %  0  1 $&3($ )$ &L qaz@4LCritical qL Significant JLModerate &LLimited """B $5 % % " %  3  4 $&3($ )$ &L qaz@ $8 % % " %  6  7 $&3($ )$ &L qaz@ $; % % " %  9  : $&3($ )$ &L qaz@ $@ % % " %<  =  > $?&3($ )$ &L qaz@ $D % % " %<  A  B $C&3($ )$ &L qaz@ $H % % " %<  E  F $G&3($ )$ &L qaz@ $L % % " %<  I  J $K&3($ )$ &L qaz@ $O % % " %<  M  N $G&3($ )$ &L qaz@ $R % % " %<  P  Q $&3($ )$ &L qaz@ $V % % " %<  S  T $U&3($ )$ &L qaz@ $Y % % " %<  (  W $X&3($ )$ &L qaz@ $\ % % " %<  Z  [ $C&3($ )$ &L qaz@ $] % % " %<  *  ) $C&3($ )$ &L qaz@ $_ % % " %` $   $^&3($ )# &L qTz@ $a % % " %` $  ` $&3($ )$ &L qTz@ $c % % " %` $   $b&3($ )$ &L qTz@ $e % % " %` $   $d&3($ )# &L qTz@ $g % % " %` $  f $&3!$ )# &L qTz@ $h % % " %` $   $d&3($ )$ &L qTz@ $j % % " %` $   $i&3($ )$ &L qTz@ $l % % " %` $   $k&3($ )$ &L qTz@ $m % % " %` $   $&3($ )$ &L qTz@ $o % % " %` $   $n&3($ )$ &L qTz@ $q % % " %` $   $p&3($ )$ &L qTz@ $s % % " %` $  r $n&3($ )$ &L qTz@ $t % % " %` $   $n&3($ )$ &L qTz@ $v % % " %` $   $u&3($ )$ &L qTz@ $y % % " %` $  w $x&3($ )$ &L qTz@ ${ % % " %` $  z $n&3($ )$ &L qTz@D|lg@6@,@          $} % % " %` $  | $x&3($ )# &L qTz@ $ % % " %` $  ~ $&3($ )# &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $n&3($ )$ &L qTz@ $ % % " %` $   $n&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )# &K q~z@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $d&3($ )$ &L qTz@ $ % % " %` $   $&3($ )$ &L qTz@ $ % % " %` $   $n&3($ )$ &L qTz@ .+ / / 0 /` . 1 .234. s# 2L qTz@t t. tttttttttttttr                D*lF                         3  4  nI uJ nK nL nM 0$ M t 4@\(  R  C ]F! d ZR  C ]F! d ZR  C ]F! d ZR  C ]F! d ZR  C ]F! d ZR  C ]F! d ZR  C ]F! d ZR  C ]F! d ZR   C  ]F ! d ZR   C  ]F ! d ZR   C  ]F ! d ZR   C  ]F ! d ZR   C  ]F ! d ZR  C  ]F! d >@PA w  ; d *Pass; d ?@Fail; d Info{+{  {+{  {+{  7  % \\ /  %7  %[ ] /  %  Sheet2gg\h>hRange1_1h8h Range1_1_1 T8 C$  dMbP?_*+%# &CIRS Office of Safeguards SCSEM&L&F&RPage &P of &N&?'?(?)?MAdobe PDFS odLetterPRIV0''''0\KhCFFSMTJAdobe PDF ConverterResolution1200dpiPageSizeLetterPageRegionLeadingEdgeInputSlotOnlyOne0EBDAStandard"d??&U} $ } $ } $  @ @ @ @@@@@@ "  #  r  5          "   (  s  t  u  '  &  v  w  x  y  " $  %  z  {  " 822222222&22222222222&2222>@dA w Sheet7gg\ T8 8-1  dMbP?_*+%# &CIRS Office of Safeguards SCSEM&L&F&RPage &P of &N&?'?(?)?MAdobe PDFS odLetterPRIV0''''0\KhCFFSMTJAdobe PDF ConverterResolution1200dpiPageSizeLetterPageRegionLeadingEdgeInputSlotOnlyOne0EBDAStandard"d??&U} $ } mT} m      ,  ) * + V?~ @ / ^@,@   @`@a@  a@@f@ .  -~ j@ /  0~ `t@ 1  0~  }@ 76  ? @ | }    0R8<2228882 PHP 0(   >@PA w Sheet8gg\ Oh+'0 hp    IRS Office of Safeguards SCSEM$IT Security Compliance EvaluationBooz Allen Hamiltonusgcb, stig, pub1075The IRS strongly recommends agencies test all SCSEM settings in a development or test environment prior to deployment in production. In some cases a security setting may impact a systems functionality and usability. Consequently, it is important to perform testing to determine the impact on system security, functionality, and usability. Ideally, the test system configuration should match the production system configuration. Prior to making changes to the production system, agencies should back up all critical data files on the system and if possible, make a full backup of the system to ensure it can be restored to its pre-SCSEM state if necessary.Masood, Taimur [USA]Microsoft Excel@/p+@s@2,g՜.+,D՜.+,p, `h|   securityOffice of SafeguardsInternal Revenue Service  DashboardResults Instructions Test Cases Appendix Change LogAppendix!Print_Area'Change Log'!Print_AreaDashboard!Print_AreaInstructions!Print_Area'Test Cases'!Print_Area'Test Cases'!Print_Titles  Worksheets Named Ranges(Zb_PID_LINKBASE_NewReviewCycleAThttp://www.irs.gov/uac/Safeguards-Program  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~Root Entry FWorkbook2SummaryInformation(DocumentSummaryInformation8