From e258c7111d74a2f771bab93e66edb860a40b60f1 Mon Sep 17 00:00:00 2001 From: Kanchan Chauhan Date: Thu, 12 Sep 2024 10:03:30 -0400 Subject: [PATCH] Release 1.6.0 (#14) * Release 1.6.0 * Release 1.6.0 * Release 1.6.0 --------- Co-authored-by: Microsoft Open Source --- .../ACN/ACN_A2_1_Ordinari_Mapping.xlsx | Bin 43592 -> 29498 bytes .../ACN/ACN_A2_2_Critici_Mapping.xlsx | Bin 30339 -> 14991 bytes .../ACN/ACN_B2_1_Ordinari_Mapping.xlsx | Bin 121059 -> 114920 bytes .../ACN/ACN_B2_2_Critici_Mapping.xlsx | Bin 67937 -> 63300 bytes .../ACN/Initiative A2_1_Ordinari.json | 2220 +-- .../ACN/Initiative A2_2_Critici.json | 418 +- .../ACN/Initiative B2_1_Ordinari.json | 13331 +++++++++------- .../ACN/Initiative B2_2_Critici.json | 6117 +++---- PolicyInitiatives/ISM/NewZealandISM.json | 2895 ---- 9 files changed, 11895 insertions(+), 13086 deletions(-) delete mode 100644 PolicyInitiatives/ISM/NewZealandISM.json diff --git a/PolicyInitiatives/ACN/ACN_A2_1_Ordinari_Mapping.xlsx b/PolicyInitiatives/ACN/ACN_A2_1_Ordinari_Mapping.xlsx index 2178265e19fdbfbf1971f9072104be37d4affb6b..e2096b0ed4b72c7aef63775fbaca9ab5b40230f9 100644 GIT binary patch delta 24649 zcma&N1yogS*EUM`2Bf+$KNH+^<=~h4*=}u{o?q(Ab(%qf^0-xvo z-t+zAjC00-!E)bo&A6^>&ih{5y}QN`YFFV&6kj1C5x}9qp~1ny(ZXdRbsdMp!@+qY zmy*yT00k;DZNLK#nBvQ ziq?bW!b}GQ;%Am^$Lki6@uwD`yhXBk;`2yGH}z^jvUP7t9u10hGje#P7JY8-Mt6Ak zksuu*-cGI>rCt3{LISp1Dzo(Q;fVhjVlQt$;NWWlZ#QO|FZi?wGkA&id=b1-9Ml z%qN;Y?eq+{$PHaXEZKTeT78llDs>W7IaroZa-KBJ)2PouhLW6Pw6=SB7Wq^K0Ib0W z5EF_XFmeAt+j?ibAR?%-87i1E|24wk6c?|Ua-?)LS>lY#DPl<2CaU{+t=Hh>)jRBG z-CnCL6m{FA_QXxcJBZvQ`a@@&Qci0#pTv1xnfXKYc(DTu`oxo!`1RefHmXdBJ30yI zx(8mI-#Gw!7*h76$Y}WQg+r81`>V+zSOK9XLl%D~TzuZ%Aw)|^5nympe(9$J`I$o~ z$3h}Q0HTKF5xH<>=8^Acmm7p;RHZX#8Uqy-adW9T-j$nx?qCi5?Wfi6%3WDuAB%G^Dt(v4`*Fkva=O0MX+L#r z)-fHk>dW%4C4Gz0VOz~;Ysj_D8oM8C;?2(85Y?-Ug@=+w4yEip~ z-h~AvYrTy&M?5TBgZ(brk1xLdiHEBJ$*<37C{4DP*!PG5*0B=kLkMtiIw){(IH1Oz zEjXO4ZJ~zN)=+k5ON&fZ9qU9+0*{o6JFn}v%>-x?k5#4c3P%KGpfFK2?B^{QlYM+| z((~>-V7MdU_4bxAli%DN+{FfJ1ezvQf1JGdVd%|>hNJyKDf!Fy0|)Qh-vc{nn)3L` z(eFMbq>88l>xS1iGZ$)I{qF)pk>Ru-=M2?`QOX%37Y33ACfJq~_!b2EXJ`xM#l z1KT@T(+gukRl0lz`9a&PkIAXD6zy@1F0_fRBPDnRy34NcwjFYU9GS7BgdgQSFr|0@ zv<#mN0NOBT1TOYhZyqxyWO+ju{?HZ|+ZMII#e~PI_8e`3L=*TTUwdmCJl1?2XD(rH zz+1M>oFi^47c@EUnTkR8k&R?8M_tMViSb7{tuV_AW!&3O#{lQ@c4g-Gr>f*^=4*td z-MK-xKGO`(PHa>4b>7V$T`fvjaqn)_4UKrOO_2Ub9(lx^ z>9{Xxwqtdm#)_#_W&uc@#1xU3ngr?kMCqTm(pXZy>EMwPn^r- zSy-Xy_uCYMYn+E6@mVzH>k%mRT7+^aCKEhR@b1m4Hcs3I%-aA?r$k4>M^pA3bla+1 zIB4A!PiLOcKJz@DCugqJ(U^F}foSdTve)0~c*cvph=_mE!jcn&hvbTHu_uIV-G9`N zh-SD`NaZbujE}dyxs|_ziJf4FUn3gT#hOg;eD$2^F=;?X7M=8Q&4@pb`2eQ_x4GSr z6=lyG&AHx+Wv@$LtnPm=Pfd) zXovOJCU0B@pe-4fSSu9yuc-2PMcn=EX#%?BsDY?N;yo;J-Kvi2VD znJjmAj?cqAK#-3?HXrgB4o>u0bUTC=2%F}__1|MTp`@E%TlN*F`-MT2Hd~k130->L zMi-_$^Ihd+R>%g=@i9Y?8bU|gMHA5RELki`W``nvM4L|lqXAB!AgyenpIuI@(fT*3 zZ3XQc3G=BE3Y~AV3c-UZtBkp)wT6Aq#m(%)n2o0U&Ug#I(M(6PLG`m^KR($S1Aq86jwLi~{Tw=flp%819-CHvFG@do^69`lw)TJl zW7fW0tFFa_h&9@QI~4Dlm~9m~0NY7bAShNq%YOj(_^C1h_gPPFf48yaTclkIJICu- zdf|g~hF|5li2hU+k&Eh0_}G`a=sTtIf!Us7-ifYqaBL+Aff;aCSFB0x!^e%P!c4Sb zJ;$XCpP?eOy3xm>#_Msij;S(jNht=2Gd zYaSSdkj@9`pSW~?_}%xRT>-eB*=xGH*nx=wHy7DWcUQpe${uiI09^dx0IoZWfh(gc z>$~ggR=rzj&D}{ga0|P;J-woCy1A_uySr?i71N>eJio}EKOMa7J^izDchY&nLq%cxSkTFEIKYox5itgOy(RM@%65mBt8s+2RQmfP8=J6-Z$5{j;D z{cyGK^klGQIi~>$h|Z`&>a)i6StW04zQE>k)}=)m!U@!qmRKF3E%!JVihq1dsvB;Y zF0lY>8eSv0M&a^mk_f5Tle2*=ss~D3BYs3R+Z8ga!U-RyXqWbBmPX_PFL>o3Z4|t? zc4G?(h&(uyJTn2EW?`Tc{q)b@%)%DQ?7D^8NZQo{ZGe6pZ9A{kQXiA6eUg5q*F0#i zd2sRjm9(YYQ@*GN9{7oV>W5Fr#!lF2HR6%u8m8eK7JtnncYrqvdieIX2zN>Cx|tW% ztP1sH2WMxeb$(cTan93^UoV?4_)%8CP zcIS%y2Z#=6x$1ZsvZ_j0su8Iecq$T-H;JQz+{(o&<&&QUeaG@5zZzNQUWMe*(5it3 zBT61!>8LP|uDk&AI1$Bw2(6Vv+X8Ot#W?`*bLDsu7@GTs{8=aDM3y(@KxN6lR?;Ix z=^P%6qWYYp({(f=ERXhIM_AW;=W4mSxvNK1o4D`teRacPvuP<+r6dbzBnTOD$X?2w zC{>fIgl4`s-}s^WdN1Yn_S!Y%>WUC_!N)>xGB6UDCyU38y1-(@8)cOXMzWB$?* znYDUa@m1{yXeN}IeO^|q2thC9vU4|DJy)K~$*Rdt*iAN{cFW25;%2G(`zpKh9xfw% zym4P?UPh}tO$0#PW8e$Jw)vDo2|a^&c989~TDMw>a8cU*cnzEhQM zK46Hq8BIf5PSa1E{fOno(aOgAiENl!JD37=N0)vh$CUxZDh#xd7~k>ld*rs_G_m8@ zD}OSb_w!6af#wa1RR_ih*F=P3cy^01U=qsEw&_@B-0%93AY()pA-@sw1_|_qhS!8H zZlh|^lRvfjjy_hoKmP{7d}oCwakAq-shvG*c*fR!9^koz?2tlh%+A2YM;w)kZMv$`&S0iJhhv+Ca7SK`Noh^qE>jgl0slNoaqcrjc?#8TlsK$PZPc zy%ehOd(K1Nyifr_rFf})BG1c6pCk36knGB~z=1a^^&eI#$5+@HA8TtI@-BamV+w!! zyrO5jx0Hz&$o?4LuVEu;Vk61r{uReFQ} z9SeH=*E-fp+WD=bx*ubW74kbbqk46dPBqB5wtbmRzTZ{FyJ`|C%LWGa^H=ELGLD{) z%5~}SKfxicl;7Ran1)wl2O8cr;m`^b<9N^^5$A=!p*DfreuF_8O;*Ow;GYc21*n0%{A^20fo)B2M<>w7^ba;I!Ovr zvRfZXx{)!vVFhI*NdaiZv}@l9VN@;Vsyk;n$&ldoN`0k?E<@WE?*coYYxA$#lUM@$ z{7X3GE#|SiXE}Bd%ra}K9&Z3F5?KI;qwy$Tr_2*aV5{J~RklQn@LHtjL#rWSVI-Kz zH|-J{y|RHt^;Z{UwiB8M0ihrc=T|Ps3RCn@-4;397RlqsTdcC#?hs8oqPr3hMPxv% zc;PAeM7?+TvbW#5aMRhqx;9R&e}OH>dn_vqRSdHdkqX6OID z{YqQV#J&d>p=vs-(lTGoe10=po^G$(@@(4SKEk?odYU`+vvb}?mtBegVG>Q8LJZHl zW8#7$43H=~r+p<`Bw1Aay;;+RpC=mR&itixd zB4w-4eGq8p9qn|3W22#;vcMrop0MvYn8q5RuyJcb@x34xEA77c54#p}M42YZJm4fY zz~bEF&#UJH>WNq6$r07Crl8`)(}V~)e0LBc>G%Q|4X8JFh-g&jkV{4Z$h21amvvT3 z$@`Yr4`;Fm#RdunUpN|b;+g;w4gKO@7H1|2{9VpT|GRvz_0?>%Z`!YTVk)Ka|B6I9 z4f>#w|Dad&;5|+F`vM3IJ%&!}zt9z2JSBSq!-E*J4J%T$xPpPfb`E;il3su=x?He8 z@A51CKC=rUWLV(91HAy4yySmt5R6Vz_>cd4SW*;a?#uei9j};7>oN%ay%VW>@u90$ z81(wi=G|GxF3Zj16M(tV%O*XZ{v3`^TvmAz|R#)GWTg8h5P^U%N71aBCK z!KxAh!y1ZMR<8afD`oY8td#UGARS^d_`@~QQWv72=5Y+b(U5&V8t!qV`^PiYPL_MI z;8qszdG=qq#(;Fnx_PIl1N)CC%LjyvlkSU3h(Mj&uTgE;OA&1j0#ej_$TVq9k*T|- zJpV(eb~^gszAX19E^t8}Gz%?w!L9*T9s+hA2)nPa_dRHuA29#ZlVEL}HF0K4&@WH! z2R!m!AKm*BF#ik)IKcs^XOMq)rL+{-6)|!Ot!oeY@tOYHvHzu&zqOgF?UQNV$GdNp z|L_f_{~+QN%@)l6cedgQ>-GN^Tfn_e|9{;pQ}xhZ_haP0lM2^wsJI`9(b=@ds{0Rc z;S+&yegUWA{qJAjdJlXVe&)EJF<|xwl-B!*f5|Tib)`h$UH9OaWllj9pI(JB~W0X@X&2nTMkg0i4IM>twN!bNLIU z0uoB){puIVP=Iy~$QQB$=YGgEP7l3W;pGi7Z-r(l0x^qhFrjg2`giNyHuYXTUo6c* zNd~cNTy9jgd{00ElGMa}EkA{bIoyaIFT7h;{nL>u>N~iJ+aZfC7Xxy?%*XdQa?(}f>T$A%!0DvBm**2~cbb}l6$rXTUZgxZWzUv_T?p4=8@fF*L zS^xT~tO9UXUrs2)6{&?(&tq>pNJ=7eXs2v6Cc|-bvz#Esx#GPNF)bQ9>WANi-WDy& zwT0(aGGDAh3*5)el^KNE2j=}1F7SCPWWa=poionjVI>xjf-<;ZocABTB%Fd4E zB$7EO3jv#3I&ZJ9JxBP>Lk4rjZX3BO)hwHSr!}+ZJa_>O!!8q=W`BnAZe9fGYzh>% z&+}(ZFdtUW*9((E$KE`ItITMebJ5M%b%E4Y87=LRD??+idMTMt4GaFqiR->w3Z-pz zsjNt$)8EV{8D8ZtP${g5-ZevMSDuHwTw z7;ISjLutoewMpVyDA|%ou>`e7-%8O6lBn2i1I2qgj+@xacQMdTb3n&X>oV@*h%I%< zA@f#xKK0M#bZO|GnD2xwQtxc3t?m&FmCtNU1Q^M2%Tzjhk+B=eH_i{fFtUIpJCwlo zZdj?pi>Nl$kKHT{Q)}JT%fASf>BJp&V^mXWWIjlo+G>Ujad5jO+TeKAMozW_fw3A?IBEBWo)f4OaR=Zj;BUrG@CMz_gr~rC`k)5or3Y4_ zDf-Z0g|~lHofo(aW^??z6qsGD$ZeF!*hPhB?Jikf7eF}vP?$=|vT6QLAlKdBRzq2r zD515~Nc`a2Ex~HXLWQZNi>KfJ_0ck$`sM^e<{*YvBF07WQAExQJDacqUk>-c-*FL* zBt?v)N-^*yOY}&;3!fdI2MUf!B0Qg5%WN^8u^K3N!X6%IKXKuz;Sv8Mk z48^*amV}TE(j#j##xSn~m*4I_{?3$g3OYF6iGua)ZcF3XJZjrh1bfeBVa$Ok$?He8 zt4eFuqjA=4^NSw*Puivf@2idVM0Z*#|A7|HC-9JM`?_LP!xr^1`NPa7a} z5J5`~PdlN2uPsy?dP^bEc6BOjgA}4p-eFv1Jrp4p?(3;YEwv?paH?JziZM&S13IXe zBU?IRY$58{LLHMlqhna?9C8hV3sr?(rd8)djwZ&9BX;a?K4{*&;RgmtkHOtKCQ9Y;<;| z69r^;*@~=NspdJX_8?@GpSLO!DO%?AE1!)hDiPnCrKUi6N50L|hZ1@Szo^P)T&nDS zD?*N80YXI~QT%7y`?jDRl(+z!y@&{XQ>v0v648OpmCn-D8t_V=dMp6PyWz^*C^JnH zihLh*uG(~&pC_3zXlBpj%egQsnQP->nMCWUgX-%0_ z(LL4RATR|gC<$S(rRds0yAs}=Z(7!0;X-v`-el&x|1|iJN3zd6$KY#gex{`r(Wy1Z z*M)#7#?V-0x_^4zKQn3Yc3rc1?<^DSw$}O+mmrfmsql-hT$RZz;!dz2vb@uOhlT3G z;g!e+I$5nbuVXQ#^41hWg-c;h+V+12*Abb6W%e{(2$rCA#^jcL(XYD&uKb)hL_$f7FU(GWtiS4wp8CUio42IWz41JUMS zS(-)GLy&bq@V%1JN9v;v4$LJ?^T0F89_N{%bI&|mdR?$o2e8yRxE)ilmYIJtL7Ba; zh3K&qY}9M#@4AQCf35o)d(0@Vf@o6f%nYrMT#bg`fp1$<12eZrXTaTH3NU>;sCRn{ zqmFB6v1s)N(y1-Mo+IOI^tw;f`W{1`Mb)Cx`CaFnlLGk53Ee|=4qf7PKNpuO*SLDKW7;xLMRjg2!)_0dK6mx07dNXgulz4>QsZ}hr=gt04EW-jBPvs2W z2+$YtY}!}~$jgtvybL_>f~%(l2z3xUF)dk2k&76Q;2-ZEVHukmvev!qz z^E`;G@UsQe5omC)()qau0r||_t5n=wW`{&iNy-z%9EgPcxMd~pL1_dFw)T2k4Hj(u zUj_Hw(UFtYS}+M+fD!89wdTMGRR9D`Lg)a+q6SLd1ETV%xQCt$0mou}uD8lSYWT9s z8>9tSPvTyQ)esO*GH_R$DQcM;tC9-+;U@f3kNCK&u!mO*^((ZGn$MO6hHFhu2K#z% z+C$Z}L|y@^5bMm=6l@l_gK>=vUQXWSYDnlcyDe$)tRf$9Mfq;a;Yw$SusRi`fdrZc z1u;`Hs<$*-R*xh(C2hsrY$5upyYP;KJ|mBwPI#&kB?*St!jzv167}z!a|YL#GH--**ZK#(jobh?G6X zAg1@7vW+GD(2i+;;}_=)lYRS3$jk#D!3z(3aLoS0N9aWJz5HS>Ku*EQqrU%5YmhuO z*Ggumjhv=2UDjIPyvzC_d>Yuvz{kJq7vTDb8MuRc&YD-7s?z#E7!Qhs!(h~nLf+q zWWnUH=U>)xpDtM{zV$y&WTE=zeH;(v*m(3qw|V}8)&1XK9rgNiH(4@)&00l4b>FPV ztN-B&0LhvV{|{Pcf8D?QZ}$}_V4FP*hL|^j5Bbfy{!e~?`|F;osHbRsZb`tjaEHvkGix7@e-1ktBb`jIPw&`xD2UQu}b*4F`#}dGj1D(J*{> zqwB|(i|;p?g+JZAA}fM+Y>^NN5d-1YL*SkhJpU?TEfj3%KxbtiUZxz%llD=vqqVe| zP_o6N(1q}!hq@a)@9U;nd;^(CP4#zzlu@|peG_wf1wOl+QDS&J==kJ8$8>XJ`Vb6r zIgjpNh8Z2s@lNY9<*yuhAJDHrEdocSPar?9hL1Nuc33y{_=q@MvBOPQXmcs$a8l^X zF&Tw*_J-$qDT*0`d(AW6WpEE_O4Q*79Pws$6+57MdsVWXGc3&s%Dk-C0QYvbN#5pt=aR8C@^4Zo>+Bm)aH&V1WFQxq=3RTppO*DfDnKL5h3ybP zI006LUMjV7v@{RM%zp=d@{U z@%$=mW@b!eLXsn=#ciEJO;;=>Ee#6){nA&fm%PA?QaiNrqDrE}t)NASU@SsUmHnug zdoMTJC0jIY;t=IMrisP2OF@5wLzp{ou@ci242Bf0gqnX!X5X$f3Q>g4!}Zrp6MQUNRG!aK z3U{$4hwf7?nVS8ZPz`^Vvoh#0P|xnix-@vkxl0g@0WO!ZEnR#F3w>D3?W`jXviQzW z9yP6Y%zbH8lDg$BY6`8)_?t8SNpyD0Z}JcIxnSOHrgBp|*fQW#1@C65Xth%7m-GY5 z=|dEj1XOh+%UuZf+}P?I&0_h=wk+hp{AFTo3JO2vQ!TgIa4|8_Bb06SZDwLurImM1 zKtsoF+eLKr-oZ_o=}zorRM-~%aZ6Q8ZS_^dtiPwHJBDSWWyArQ`MT&f@~4g~r{}qK z8Eze02A`DAmMUR4=SNG*W{d-Hvwr!Jj*D1yx(bS$#22}N{1r?jGD6`b~!n0=zFb@y$g{y>5SjqtCSY+?$N~Dmb^)Hk{l& zaeSTCHYxBjy&-NWKw+qX{*$Sel(9|-Xy=8}Hcr`doz7}zZXaFo9JrC>@VdLg_jyX_jSd5x!9RU3C2Z&n3|PLWoMKC20*Dge7f$N&*{u|XNicL@d0Ty-clFgzGc_tp9|G)=To%1tLi z-5#C2gRG8VhLm&82w*!5COd)_`^^u!v8923K?Q^J_06aI`O4Xt>aT-72(_@=b`7m1 zQ!0GKLEOXF)oN;1jB_{RMn;A(cw4XeshYxk46qgb6f<^iVbn+o?x=O z4MgkFE`@85A?Bay_X~Q8;5i}WOc(QHyWLfXe(q@6vJS<~Zb5eCv+g~4)*yM)U-Qb|L}>hjhi332*!{&9~)1s1CA-E>w&CsGJtSXATQI zkN&;lZ1}@)@NhafL501Q9%pMNBsl%?$IR=_~ zdzJfFgl=rxP6gD7rq}ChgcA*S))~9vbqg2|x`E$mBbBaKvt0rO@p$nBsiBbau=eb3 zM^S3Uv)CcsOzyh~k0=Mf5UJ03Z$ki?6LQ6q?(<+!U>tx}bp8Jr>naM_pqTM%7ZfRR z4X^exs9l70uRi4z|>H1!1*KsK5eI&#;L2fS+KsKcQcCyiwu#dGKb9=!eb(l`d58Y>*Z{Ky{Z+!SFOHV<2E~mZ>uqk;>31yC#^S#YstP@a$r_ zyjSUSYt zVKnwTmA`=r9G6*gIH#N>XP3IN3& z=-HO#e{NWil8%mz0TQiy)?Ra2FhN_iYpx2=aLR za%K1kWt~{NAIdlf4w3tIaR#LaoQ>+fYU>S{`zMc%hajC)&_E6_rT+<{3lec6rR#PR z0S@qd*xO55x%yn%#(k8r8}R;o-C$?1n7=;wJIF4PiJi=jg(ftN+$HYunY$Ocas$zU zE7?CrPN1ykMR_jYQ6^4zf1ztrHwv9WnNBmTpNASW88yKqJt|;jpn}DXHj3oTDulp? zzK()3t@|f|4q~t!E=6N{9XrALl7~F6m*ze1ZU(KJZZEb5?-0xN_?^)(+SX%h%)n0$ z=SxKY5yJ=CwBK7V$`W`MkKO5OZqgr6enL|D+_ob>WB=pLc%xtkE`KA9+oYe`&7O#< zh43?UUs|q^^jZC-i-CB%#*5X}?)9}dapv=jW%5Dp1@G0firQUN`l8(hChnZkT%~mK zUwj*Et>{`RZ470(S?dlL3t=vMvsA2L^P0!2E5Gy>knY-?=FD4vI`C^VPorJHy_~6s zmEn^nd#Jf;$DjINlA7j|SyTLFoZTm6e*}X+h?kYP>lV8zMHWg%2|xKLSw-*)R*zTpjweKS-gyl0@ z&18dVNnnqOSvne ztWTXIq1{Z(Bk5yk%h-}~d&>qyFooX*FO)u>8E6vCA56)7d%RI~JJ3PSv)13Li9p(% zh~lbzmDw}7ui8&he^h2t{jyTNb>|?@57^6{rUy{;iC-xUECv`pCCMbji>j^;nk9Ab zkK2XpW|-8tQ*24Vr5nVrHnKVn40fc8J!@GvW^?uFoft;{u0P~KiJWEI_K_}FEh+V= zi>j3DH0CfvZGU6%-hS`zGc~ zIFvH-RgfZI3hSQ;QT2c1>%;lo$dgOVY=q~2Em_wLzYsa5Py)VZ=_&QzX;sXk7HGeg zP4tT^E~lYS(H}O9kgxCQ1aaNQU9Vy|HPB@bR&tG;f z(VrSvHSts968`{BKby**!<8@U2-6@7=guEyzmolhWwi#+AmN9~IWy@3cdYUUJ|x76 z3Qi&(bzy+K;QWP9iQ*)g0RlE>wEms;6A7c!1YsjKoNf-43%dT<#bcttfnQj}YZyng zUsNA+X-}v9D8+4Ve=p#rTb;;0D42QCgYfGM`*|}R0{16UK+QG*lTVe2N)982Zk*jq zC{IUm>_&@%Sg}wgKtc(p??`Fgd!FbEJE~+orsP+531Vk%w42xjPP7|8GUBnVj6!*8 z0q$nUDs$r!Rdfb^sdvTURm>jC-Kn}XmZ}KdkrEA}(|N~{j6SZP?Z?Owg^}vv^zzM=_`8QjM{qW({B{X5YaiO+@2A_|UgOJf6M0v;o$ZTgStekpAN@ZNE z8Wp0Xm<07Ll5A@w;_3<~m_a-mhT9_DlXX{zFHl9afqI%2ZqEY^*6>MFTMfk(bWeIoB)E0tO<@v_P`taPzgQXq|EB)z(w6He!}J&0On4sSnXvK^27 z=YlYw6`zADctvRpUHu)SGi#ij5~KFZqy^AP`=nb`DUh2(w`BRU1IEPaL*|@IpB~?`Krry9~~Lf{ZPBStqgqr#u$CjySAt*4G&h7}+oW z>@OE>5o~xLvBf{(atq2ZwM41QWs8`kDj|=BubpXr*(S^&Q!`Gr2>JM@Ez>RPQxky< zIsGGeMjUSJ8w^IrKb$2K05-cc_It)(6_yfMIPA?yi*IH~q;LO3!j$!=CuoA0!%{xz zi>~B5B+@FqD&30veExlT@Id=R7>U96?H-!hPUt&-wmV(4xDWcfHaLy#xR1T9a+@fg z&9%n4^$rs&#bCAUL4Wy0vip`d;=!~(nBPUYtRwuQ5v#z`|P|e%2h&V4(tS7HXcy^HnD@OTwr!U}qov1i|ImlB@b94$`U6XqN zkghS|lgAfoxENd$Q)`3ghBOt1&K`)%t9Hm7i7nQaI!}yl=Ib_^n;I~;=Z3yxyA|QP ziOeU?oeDegH8eonM*%+5I~&F=u}?+Gx3qBIL^XFEVt;L1mE~G2U8_4<7uXS3UL9M~ zd`di)6l)i)x{H}*LT(rIv zDbSbH8@BwyG3yMmPY4$sEgl_--noe&Pd;#<&-{m?W^7N_rY;tlcO;MOr|DMGov%3q zl5Avn6(d%0h%a$nfB2~#p^bY{Wu{2ab7kmlP(^-l;X^S~k(2#N9vWcMd3%&{N8x!3 zYide*e&)(&J-tD!aBa8uB_rGTJ@4oiM>61kcFV%=w%A8(u9f>zXk1VDB6UsS_Okcx zLQFJekQjSDX`sp3wp`=4hocP_hxKt`LQ1uhYmeThqhmhNwVk5}S5x9g)qd*=-QRE7 z5e8qeTd6+tSd7`Rtvz3Sxq#e)Zz^EvSv|(FUHps5?Qmu7Xtj5cSg+A6J6Kc5Mz;yL zzBW8qStCB2nQf}KFs?TOJmy)ST&}C1)PLu7!o(`Mi|nP2d$v<=$@u1?#bv5*@5!dm zQE2T>sIlnCKB*4>sI0&3+=kX5=MPcNt?|G_g|ofwnZ0b+iNv8`>)*Z2C$qgry{}+* zZcS&OyCntkiW21s`!hAKH>mHn?zRCy)+#fJZ>#BUgWB`bDSITkJLUEuTkLit9Jp=0 zyV($1xx3xT7ULUr%~}nfvMtpZ7`qkMqrQ|J|J1A6dKad>vayvUQM%<&u87~5xmTI7 zX4m)RmDRAIxov)Sp+cK;pJzp&Vt2?>Z7EcE`e`NcBKr=l4eZ=xYiaBW-j^P_1$ zj=a^%;($eAe^I>NvVo3q-s$X!f;&HRjN_5yid7QQ$9338JUpd!sH}@tu5ht z8}HkW8gosv_t1&>>gdN?rqkaD+c%kJKF(^FLzb({v=YbZqIok#4VM~{f#)0=8P94W zG8psBU_J)eYg57M94UL--g&$;UJBMGb{Qt)XF&mjPYm9~Q>Ww#od$-`x=EE|o*OAI z)_a~yB$dYh9I9MJt&3PuKI^wARf+b;`F15>cbqN^h~ApC2Y+9J+iQ=QWw*-O`Ouyd(h*6XzQ|>dMNm3eKud*Q#(T%G|%j`Wj_6=I#*+L2$RBdp2XgIaH^Fj`%WR z<>HSotXx*uUPPcjOxrq!Hkvt~g#$8M->30K%c!;f@Pol7H%un(%16!6ak;s2#%*4D zi7z}w-T2*8{;tEG&=EkoPIKGEDzCK*<`9>;k!mN{?|k|-+AsMHVbRS_0oy^gi5t)L zm7J%MPSgUb%k6x>8{7#k)?wHAZfA(tfTG}pLz_{5Wy((_(tx6%k;%efx}ye_eD2+( zldt4R*QcAf2q>teJde8)m2p$tDbN$8?h>NyFn&hie|bjmj9(vMGb9a$gUl`O$8WZ$ z*NBDW2u!Z+obaYBw23gHL|_g_=jRB@A%e&UUF<-&qT;XIIa1Cji&dXG7j$an`+V2dJ*nNhon<1(tm1L zavR{dxV^wlA&}cf{5-(wfsl_gF!Lp$>{_Dr72N*H2ZURrCmKC9pFB%H1eYj$FOD01 z*SvbYrq`P~KUeuX{O3f@O{8n&X{&UNQlSVx#>fa;8I4mfGthnXyl{z`DGYIT;kseZ z71glKhigDkSCC?9yTgJSU&-^y);Ilv56E6EeF%@sYMwoU;WY~z)53l4HC}q1yo-|1 z=5+J}ZWCKBZ^T(R?%VdpingQuVEf92X7Ww!Huh9r*`q0PS6MVU3R@B7>XJuZ+o#Dt z%?XtSJzecqeQ$xCc>Dmn_yKbhIID@Bqh|pI_-n-sW*?$of8k=ux_N{s1cSUyb#T`! zYDP}4sPn2hvbvUlzKhs6IJv_J>7QG;Rj9_q*0pKC#MVBD-a%Fv|8W{LRLESSLO|e` zze!^UKDUt?7!qBIa4)AxaS%znHh<#?l$URgvSAtS+P--&Re6R;(lr0#bD@7i1 zBDOW~VsY$9mIdB+-pW@QcBAa3b^%gA2mFoCD%$!pU&Tkbsw{&|{bT6fnxQpAD-}=Q zXVdT8wtiM2@?N4EgtSyQO5=zl4eyOg;Ba`lw=`=?0377ImJZnn`xyt#=&#;=x&(?6+N<$_YfQej&Ny@7E^mK+^6R&g9v=<(r#Y z3maV$I%Oyar&u3eddTx33Th-OtJO!*GBqi_k9N5OUDGvu4+7MXv2OJYg%nU5l5}MN^D}uR9lOTFdX8^qBV_ zRwVZv@6(S~dmp>sOobpB4XonkYm&(4na}->5~CS`F0h(Jy%-uW%wo`@GH_uz47d)TvI=M)DjL7e)K5)6QQYcJU#x!g8gpB(sW*7rIgqr!B z1anu92(HisDGRF{`{I=PD^Pxy$VG73*uT`+4||FpZFOFCKA%t$q;WP?cQ#)p?&g?e z4!_eeg+IjSTkSipjE;i*O5xaBIDx^!G0ZFOTwg#WMtu>!AB#3zVEXDuW(~6o^GwQ3 zHXwHQM^8=Riy~QcHE(v;sod?KY=BqcT9#G8-ON@Tm0M3(_t!z#CV#lzEKz8DNyM2n z!7TOK2Xi!wmDg^vw_d@vqW!hU{YP^b1SeE5pAFhA3b&0kUeX(?UBkCAOZC>(OzDKr zJdpFb7=Cq8H&PVLFZ6~YajB-gJpU=N0R{Lm%18P~wS8`s30Gy5Om8_+`ezJ=s``!2 zeb`|pM5oAR#7+wZ#OE|~G#(4`c>I=n=!QFyETP=G6mcKD<9|2zD)S$5uMkOmJES&S zs|dss+a$Hd!kTv??M7rb+LJvXwQe`1cui9dyf}WVWxA3&Wj$dOoc#oi!vPtc(;Qd} zhVd@LDV2TjXLz&vo2_ni=k5z`dW(^L2;qxzI$lfLrIOEqbm!!DikT_CuQ2R>1Mu;lj{hcy|H`BclzE5J5y!P$5_4erX)nK`u5N4O;FUh5&>>-1pr<7=1 z;X&oFOj^sZ%XpDCESVba?`e-7C!JCN{;1edzo&@KxC04ZGjNRrFFkIzqj9AE`ZjHNHM=P;DVA=EFzSslR}$_%W-vT0EAfP~;qG=o?x`G^C+t3bB(_ ze7%(k(U_XrQBmB~u6t`zHfriu_VrJUr6KS7(OGK+u6;pKce4c>Ia|$NED@;et=`Iy zabglT3LJSE-$eQTz`5gD$F`7lo(Fgsr{E>DmtSsXTfMZ6pnUcH>(wJS2|0!;`gsK( z+HM$UWj9QL8zvkyA{auS8n(=@9M2N-E&r8mpmAhQ7j>H{!-eDX8-}~FSB*4&x~hm&)1Vn zd?;w2;vD+04J-l3O*XGL-;Fr(0YE@l&nl};T4Kw~GFGy$pQRt$KOq&P4~T@rplKT3 zh;SjOD>!!i!1N|AJRD7SGpSP@IIFbjJ4~y27QpyTWgwJ}s9x`FDyrHvqOC_debQ3i zOQ+vwunr~#6{yZ5cxkJ5%VlWj*j+ftR-0cLI%9&iYJXR67A_;()PJY$)di$0s;A3D zcQ0a-b$fq(I}+x^msnC62}$DF&K1F|4kKMweeb_Mw9?cYeFPxF#x=i|qlqkJ!h2&d zAtlD~zX_JdQpj`>0c5+sxm+EY(~l! z1#Y!<9-`AH=Q(KIJi;gg+b#NDE6hfxJ(hg)#X=bhJL3z1(VjJ5MZu@n&Ud1M!&`^g zKRbVGFeC{_k_`31)}KokmrN$R_%Nx#8SM3uehtFd8d6XVYGg85w2|)mehBA2f26FV z;-Gk@-6{Wmq2$@xz@jW0(DfF&W<4&VF?K0)!GHI2^s#sh<^I@psq$~J+3L1H_}Lx! z*->BISak+1nKA@;MVo{g$ZN2kFFJ+U8ibi&=*N(}z0crdF3 zq`*K$jmYpW5&k1pwNFpR92R%<)(>|Ff@-@_cSUQefuqxPpXeq^z|AT{*1lR+xZekH z^76$ZH}O1i+6?Qy*K}~;%_7Z7t2m*|;1>!_TWc|zv1BTK|C^&`hwJ@RtFtw$A?0|6 zzH6R$Ryr5UZuV@i=*O)fTKkimp0TH|51U7?HPuLkcC)!c)*yU+6Qyi*E_XZ^!3NEl ziZ53p2Sz_WJ)90?02n&OI!&n7(~lKpj_*My{xnyE|9WX)eFwVuD zl+R8LP+7Za^?Z(Y$@Iy_&>8h9b%#n7t{^d*j@OS=%;P_*kwBJ>%0$;idceXgDt@X~ zj3OvNdwUb-{}N=v77a%$Zi<+rU`wc{uurtBnT7 zrkD;zRZwcRH^b8ux}Rk)yWzQ_+aS;KTv*%9%6{_U&h#Sg1=#=6AUhw%*>HU{@onGa zwRoDG*O@Jnl`POAMxq}E?`pKKNQQ-qHRR|sIKpK*`3=!1M1gXtu;b^KxwyT6pNtv0 zzviD8W8E+c_~)^`)c*2aN{2kHh!dJgMB5i4Y&5KxFsX~_z{ol%htCw1Lcm_QVfkmS z@O1X3+lqI(ahzSD%q}}Ul*(2e%KwpvTY4iZKGHY%x#%N6z5rrAyKqnkTXp^y>*ZQ8ula_QId)|zhcdQh_maQP;Y8dk@ z3TmD?1s1t==zlcU*g|$?9iFEl{LGgoVkXgrh{j0A&}xQ0Ng8Ize~R2?$E30T!A~+A zK|S}=|0&}vgW}qnH9WWl8{85g*x&?rC&4ukJU9cvf)6rSaKgYK!GjML+$}(Wfk1E% z?k*uX;d1U*^__F>UBC9Ke)o^=TGhR4ukNQ1Q3IWS;>D$`Z0zP=R)jAB@`q1GKDvQH z#nSnq#wM%W$StG>+u)L)OuU?jL2&$i^Z|HK-y8E#ILq6AbxT$9&559Pi{L|gS^2xy z4b>^UF&jTiM#Cz8X2(>mTbdzXJ{_lOxpI={MYxVls~PK8pEE)3G|1||=5Z{U1lnTN zOF&(XSEC1UzvBuI_ZTI96#l?nHm{$n2e0VW_|n`}N5k&b-uhuefFoBrTrx7A`fYuF z;hBsE1n!w6@yAvqGEfggwG4-s@XYG67i}$v4aoItA%l?9XakqABTx{dr9oF$&+6MC z(t5aWhZ@%(HP}m=m9%mSS%cSAp{yh+qzE+*>NH7(l^VXecwX^3E@klmYvWtSA^5_& zG1_lo#QKGTUH|$rCj}fe_!aB#+6nBSfLGNx=~8guF0h-+Jhj(jI9spIQl!&={pR3% zgeK~RaW4tkG6O#5Y_4vtx|4j!2qu$QLfr%Ogj8M+P-4CJHkf|keKck?FW1kn@ubl1 z+e9DhS1Eka%-@@~qZENo=N2q;-L<}Gk{xZ5%Gim0%%{3(EpCQn*2*PidS= zT`KyeFV7^G@ZQ!-___6sm}h^Z=u7_VXB&OHpqc@Zw$LD`8}$$ZD0e&u#jM-SVd~J^ z#avHrn3?jFTu=xC83!tU6;C{i3WZ9-MrreMqAU~G-enH`ScOn?i!$WUu@aBvrz)=! z7)dD;ZrB((N{^^inm5(Ga)hEq>M&{iZe%%C$IKn_M)Ri#JTVs+US}^qK0JT_7s+)j+9zW0=5g>XA+Yp?NiY zA)%2BX=PN6B!&)UJGNJrXf5itsTX$PY?=S|t(sl9u|Mab@%>>XX@Al;-9fwacq1|@ zg;cn?aU_UN`=zru&L!^$J}tDB`xX0ZDj8v3ksS7hLae2(@gIBGmLY|ufa z47sKtHTRx}pj6Axjr3CM%67Y5>|wJkbTj|>YfE&EiiQoakW_NL>0i_$5=csK74h#u%oekbRUldxyH%!2!97I5a!iJ|)xbV`2 zf)*|uh+(luJ$hIRTMRP}+{-Y~fPV6Pe#7bd!66G_)$;l)0yWbr65e!h~#9dmkx?8Vm$tviK>XTs-i4$+lvY_tvxbiT*XXz!y(FGwGM2_zm_8V)IL5y91$q#SxYTYUdZww37TB zb$A`8sq{#?LaL#i~5nJo8@wJZbFh)| z(ny@zjeSr@W|sUF3BwvW=DhHTb3Tm>kTzS^%OiK}{73-yqf`mJ=XM7K@Mvkb27r8| zgP6!ZjlT^Qq5M%s`nwF2YvSohYBv{1D0J)0O>|GzmI0Czh%?J>zds_gSLr672#fGh zi`K59?&hOPIr*R5Cq~RyQp*E>uwRHg%z;{EpJQSx;^szme-Qn)UG|B(Zvr+|tJj<20goAb6$x}o z0WDZuED^sd9HtUc8s2`Q)p^NoC6sZtcQ@>KDbsaHbA~!26nuJ+<&Su&Q+_sY%Bcxx zhwe&%&TEB+3ud(x%#?iJ&BmxJzrb@UTg+FGF5qe^B6=zGrTR&I)%BSHgVC6ksyPd; z*E`dm4wL~LwbXNZNlu#vF<(Ecl=oHF0=b97gL{)hEKU|Z{AGc*v!U}lizrUoP8{z& z=XmHaToN_HSA{o_WQf<)p`9|I~w6B zolKa(cB1`6QTy8n`sCMkwmoJ~jA!2G{n?!Me50oq7SaM@3C1}=v141-a!nFQWS2<-g7)#Jn>Q3D{6nlASC4($09vE)3N_ z8LEr=T&bZ&(!Z6hlR%+oIH|fK6*QWtCpU}6!jErJXa@)5bH?@oK0&SZa2cuWE>;lv zu{sKF70kXc-CeZ&FgeOu`9cPnm%b>yb4#$MZ0ZU$B~fBDVu}w+hQ)HqK39AWHzAR6 z;om1G_SAG~MUkUGyCdli_)wjiKa?kC^uE8OuSglyM}c6cs7_J?J309RVzeJYo(=-s zGV#Z0y%`U0ep{rY7NHHc8`P9lvH|acd4@546BGz8HD64Wr*PMwFLKs>%S8$4mP;N~ zZ!7(%TFJ(D11mnp5mm!3WF22e+x0Q(l0&-X<%x`WbJQ8XET z*tEZM4n99F;@w7h5dG4at|3@E>8us}!01LN+HTC?S2xmqiGn9@IU)kAv1`=W!>u06 z#dKf)SjJSmi-yy{-k+>M3N34Tb>F*eu?tl9NW$M8B+W2$<-PAro(7w`%_>jV>nl?F zP8LLvNfvxIaP!VC+Af<`tiT%~#HzmtI{Q|YW0_Zig|Dl-oiiSd?oyltE3a#3Kchd# zyCIB_2L$C{-?}~ym@;{B;r>|WEjWlyQRSQs>2Se0+hvM(du~Hi0PTY5^9C~3e9#m& z-TM#_zhvwxj*LoZA$49QOIBs=Ne{>MRg8uPxty%OMEMOyRSPxl6dTZ6>Em$lRh#BPIJna0uOa} zMe5it7R)MDjbneahpuC%WINqdsUYp=DVI+zL-uWz<;^n^%!M!foCo=)ekwq)w9;bF`=N{gL zZ!o0?5)8+BCDhwLMcvR(grV-MjpDf0<92INu+ufX2zxbGzE(z4H|oiAD#jf!&`O1< ziCDsBdY3e0Log-psGAj@{-nr&fB~OT-o-z?r0De~bT>0{P&3yG!B9Zwb%3I+%vof% zH}kek_E!BWPLqG?Md-kZ{XCuhJeDH15V$?P--C&}tx2Xr#zfG%G<>CsV0G#^WjM># zmIW0m8xy7L*-~O9H`DaWq%v{(7Po~1>(>NCnkPm~k1wn7l66s>)$eoMFZ)}BiJi^C z!VmPPP*2jjHeh#0CXO>iG2G>QL4$cvgEwxXkQ|35d+<9Fb%xGnNWf{#49^!c@ob7r z(PMM-8pQSLlyF-w!)Y7;w)j%OOE_@}Rgyt0cw4d_Cv*C|6v)s{{0VJ_Ex^9g<>mvI zmB|C;v0z^UazQ`*Xot_(afn)a0Jxt(w5&A;<(EAr@Nn4nCapy7OM3mbW0_(EAR7pD zF0(8gVz^@DwMB0{%_Ofpog{7G-n5;=si(;G@^nd@L53BV~p$qmx-d!xOF?uV2I4dIG{pvlWvp4RDOn1G7 zwp%fhlXkHy=T;mq2@4295mkTUThNQeg|gsonN>C+7wQ{N@!JY_M8rYUA9lrbzdEe#&u5}o z-MFbL`%c0m_S*#xOKAm=lm+*a{-p(IacmXo$P`B5!nGDhMXJ5U^U|M}KO^=~y;Wsm zi)8fffYL}~Jg3HrL)e>n%rrWi^i&nePlv9tXcUJ{IM%IyF50BOCFNy_LmQdmonE3R z9wR5>&v%T3w`-33B&PHCWydnnQF(loXQydcT#T>w;Q%Q;(JCL0x^*(r_Z~M;HZM{h z1hNg5m@8J&U0$p~`~3CO=P!m|vay1hMBdc+I8=PLSa0}Naf?ACJ~(qPJx<;75I!a= z*4)qCnIA~!eeD(`IR-oB6ihmTW%HSS1iQt$mwbC7trP9spPY|v#g>Rng zx{3)xi8nYQLYr`Zc7_hHgUHSwrUnV;=?NdY@$tZ{gp;Y@wrZWL%`gGBlX4#IQkyI^d|G?!-Z z_ZxhpLh~*CvmgZNSQ05T`WMg<#frSf36~P1w!TTAE@Tk-s_=Dfo0=^9Dz<|ftG#a; zZFNb4!N}Y(^xwhMSVpc45HNXqSiPrX&y9=P-dlyb}3(E@}6~~Iq zRxtd!v6biS)T_{S;y*62c+~3{eFtCp$~q~y&hysGLd$9z*$RKUXeT9POf`}vDdTUH z?&$8ZM}0*|$+@(?uB)#<(H{;ogoOE>rK>-0EkOOaW|j`9G^e3I7I`xzoTl?y>B~@S z&G25sl*T@*}3 zh$Ju3Udsd6xYL4r0$6k_~@}b+r0a%=(JHB z!-p2X<7nH{(N8jN1`=6md%SFVbJH=UjXa6~-|gJLPh^t+g=mE|RjDpUKzZ=?TjnDS zE@4kpi}$Zj5cS9N=!GElmihBja*J_6DBAec(X9gx^#Yfp%aOX{9VC?Or73@N;7$e2 zYxQ*siuR@h{JY+)AnzhKuPQt!@mFB$n@>tP_F*D!Hv_R1bMiJ1QHtJgWK+{3%&^pi z4dddai8qrIbpQ(VSR$d=(2X!X8L}t**sm4!{&0M}X~FAVj1vq$Xr@YWYX9R;>H*=4 z!^rfPVLI{I-}h>&9%+of5FHYZvrGLwXl!FtY3gzJOS)9q)|imA!PN7fNYHEQ7CeO3 z+efo-)iHTcub-Zprss>oHpmg=mX7+d89mREEkANpV0p%9c1e6e2|8orKh)TzXoa`z zYN(-7f{uo5L-|&LcLiNehF|Utw=O1L)BY-rGgz2gB2==)E`FGSeULPSGZc3P)%~kt zZ?G2a7~^CYpLkaXf5+6e^}75{CcmCO1{PJS#kpMgSlMS&>rdF|IQo=1gVXZsL*wy3 zB=WOpfk_xc38ZAm$ADq8DF?4q0aTJrYD^fIFVWZf2X}YMoYZSS4pwyKjah8l?=awl zKrBy)zxrf3fk!(>}_b`Sd=*uvY%XD-6}w zI|hYkyo9tY&-rYFHY^elNl!>T)x5rWE~&4MAF`Thhfz`3@EQP90IJc!Y9N%z7bba6 zx@(xk!+A#9y{sY<(Y6UI{ap8FDmsoRE?fhIyEGxr`lh_6L=C!B!dHhsV*Og80?IYz z*12zaA#`7yn^3H_guoQ)mvXk9D1QMzalkGj*n5xsMt-<)G9y&oxrd$zW2KD#A}mLY zui>4YDaiCUI@%LK;3woL;`LN3h4<8v((~csOWT&ff>%$QQelm0gYeJj!WpKsOSU&= zk`qZuxEZ0Jgfn+p$swjJH0rd^DPtS8*uhBsJ}c3Q`srJwZ#4%CTQTWDw(7-iYxlLe z+qVfEx#*g!f#OzS6y+j;`G|vlSsR$bfC5c0*X*Gu?Oj&CBfvlAa%$XV;!@3=i{a*TQ(C79 zZcTo}hGN_3!n5BZ_8@VkfE2y#Z;r5R(Dgh=nI2F|WmDB54c>}_L3H!Brx>&IkiJD2 zWi>CcIZ~mlyjBE zU6vDI8w~kC=EL&I?g|h)ETbT)bAkeHXgC6dSRrJCF9__E!#mramcNG*cnqfLDt8K7 z6iXe68lU8gG$i5mSN&yu2d z?aiv4MDXqwbg-8`F#SaRB|@Kf!YLXq0piKOUUUey&)!-W$?CfvX3u~PL|V_dVEp0J z#QMDFewQP{0^g-NMgMGibZo9E{hwG8hbOAUJ;sux_WsjjEHyPB!RNil9EaYK{>2&= zAM}&0>hj7(IP-MyGTVO?RJ%HT=T|rkgs?=h?RG~k-1$QOT+i(}bpBGrqB4Dw{Aol* zTc)bo%fdJ+V)(c=Cr{=@u8GNrzV_vS5C7|oaFxuVa)qD$G`r< zVQMT7O_h&g=a1XF?Yt{TB1oo+2a7mKWHn@N_DQ|wD?_Ms?_DexAUBbdGD2Q-O2hF| zegq4JqPTnME&6INXss^+tIb89WrFqFFVN{%-m{M)Wk|QD(=w{|CawWryjhqDR-T{3 z(4IXk2SZJK`XcJ0ROL^|cXqWZjN!Rk!XlV~vQUE8p+@-r_(YXcvv*TchK9iAwtT#t3^|8wf$A_c-Ue`C=B0KCU6@b^N(qYIwW z{9g$8-*y^!PXQzC-^649fckIa;}az=9Ho$x_HUjr3V`xo0@WvQ6mAj8Ht#uHQS!5<25HePdu(JP5xdd~Zaw$NU$ak`5lfwJoPKIGD5pt9SouNd zkZpI9uSQ?X+Xpml*a_>ujn4wiWWeg@K27TE40p0LEc*##r1l8OS(B+8eo z@mIm!w^A+AkOI%qcu!B-MvVtEJ1>$5%W5!15s5?d67*)mZDN%ZZC%vFEjvFB=-<{- zdN6cwxw}~Uj*5FSc;Ci5ql-0bt{ZQ`X+_n&L#P^lkhE1BREGb?;+cpZdlkeU!cl8K{+Z&;SOQ(iXSk zCoc7E%t${H7e<2fv*D-E=h=p-5>bDLnIQbTcO(Adj2Jobad&@yI(EGCx=@m0lXcQC zvU@p+3Z7tHq+d#z$*g{8t8C}15II~@eAc_@>CmPr517zSn-r=g<-78~iZrS?IhU zxHvfS_i=EDf#7hl;&gszXKC>6oh65hwN;U-uHq6u*hA0!T0GkMkN6HTU~8 zN~O^wJ^{l40w+q9nrRPdRbs46L@MSl?0%oW>$HT>@A<9GCq6-%fzY4+>@bSocQW#VZrT_ zbF#g^bXw@gwc8_hwR(!Va6f%SK>xv+ z^tlKBmtQ&HCXFwQAFG-3MB5d=N_I7XtwdITzIZwjxgD@2H2Z<+QqgT?uk1qog%^e@ z1gA=>q&>V*G1K+Kg4N-&OSh#Hm-0lquCo}82fE69v{Ky_OIB!Nf+JpLvd6sqBL}xs ze~gG$h`TuIWeR7Gav2jH#-a-6$==WJBr`-E)1>|pqk-MAth^M(w;$Uq{Z$*LvGitY|;SSbpzZ?u%Ln!xoG8OBox*hoi#uM{KN`&s>C*OTGX2$BxG? z6MB$j8tlx?UnxY{=jB|z-Xkt)COT2m49Y+-=#M^tJ`5JE+@x~MT*c(rWNRVR8TjQ) zv#L2dV@6`xh%DR;nqvAmi}(aH=q1nSqY-i`o)3PDu9$6JpK~y%!siQqp=5FY=1oz( zSWFbTC5j-isVb(=`}T2v7yJ4FsS%bo#}&*l!GQt~pzryLF!R56?;LCvqZ|&C6T4S6 z9jV|wAWuPgtiO?LpRO8 zA6q%{t#G_XD!%0At!XT7cQbin;GLhkKs>Ru$X+@MGNaL_kk73veecb-AMf&M{vLcZ zwZAXUb#+RFh;CURB1~r@L@C-O+^6sL@8E3n)Tdd}<1}#{2%-{9NbykUV#7E#LWj``f{F*%or;*|X z>2^xl^Htb$c2x);{kdHCgIVm&esLwLNNDfdxP8wYi$c(tr?I@1gY%c8r+slkoXgU(Ys{l{e5vcDorlLji% z4H|#)D4*Q4kyEK42g<+{rblfuuzltZo%oqcEi5!*bdGpm!>N|M;z5yo zJyC5u1$D39%pdx3_rd;X&97U}<4O>u7kr_&8U1>X!{nw5vz`@-ddGP>QKT%JdvBQ(|?&smV}n` z!_w64!{jN<60a-?lP?LUi2t27Iogi|E?IDJ2rQxu2_Tq2AZzg5d*E>|<9sqUOxC|* z`QrwH6B#xUD6Amyyf-Gg4fS_d$cdfF;`Voqf}~_PXZjuL z47sTy`@c&cV3a5Wx_8JoTX=SV@5GA8i+aY>R!&V5eq@v}vr^z2s4`rrF~AMfR;>B) zGYLt9rJKhjR=v~4ZQPdpa@@us5&tKi4Y$I)fpM@p3y58<_ z_ zCmnMb>erWrTU$p=-kJ1=oW9XY2f91Wn{Cg+w?f)fNS`++rP`iV-eG%hH8lMoDwNeB z1pne0(rJM{luq>cfI+UN+nmy+?PzHdC4hI&`1Y`~;u-dO1fhm%PPbh19x>p)%> z9flPPOuZh_k8`8zsNgVpL(4oB-joqMhzvHx7)QIwl1se156hS*UCQ~nEz9t&5>RrFYTp#S5?_n;MCj44LI`vxIubd38UA@=jrms(j zJTDJ>+tw5@o@W;uGkWb00`%n?BPnaz6WS}8IGz$|FCrIfNz$|?;;zDGuCB-3oCJ3_ z-Zz*Pwi*8T)XuWLui*YyuHOFQ7byl)TjDwSN8fag9A!5+wEh0iNJwy11w%&6g9w<68yRMqW5XmqxxW4XjD&m} z^qR$We-p^z^;zJQwabHa-v3~fsbl9$T9DY2KrsV?IsONvrOkmeGv+3VO4%0ckb z*M|66j%f>+4`!4?tW|V#OQ^gk;J{Dr;#d7&{gI$w8K(MarJzfHxdxc6tzLZ2v(ptX zy^<}AUUkZSjvd}G(Hf%NS{@k6Hh}(f0IdGS$v~st(N*u=KF7=6YA%C1P)bIYAnm@Q zA<30BJ{|p{gD@r7F9jjiR4681u0y=I3>yAH8^DbxMvdt7dm%G;NMA?C2z;941Yz$_ zr~e|d&XRK16{FT-is)dFVf^tq9|q-E^2W?@a4dtE4-87(XZ>L-Lw+nKtS3f24ZTrtNHmu>aN28pMf0wwk!#|Jb4HAzr1%FN zHDn`HY<)n;VNc;=1>O$qP_KIK;lfdEOVLmdEs@3qL2Ikj`sqij&tkS|a7r-7$w}Q? zEh)2@d$INSkQDc2?0+kO38EY37|CTVS?bZ&EC+d6{0$!7f_h}D^b#QmWoqx#C5Jqv z^&`pjC2^hm1k{l+Z^3CAT_&=EJCu(;*pG;{820T@ea=^gN`)X`7T}&tDV?<|9j?HP z>>G$aQS#tHEcz0kSYYlTv!rxPAr|dQkK2~d;MCw%thzTer1B4ed0z{H`V-2$-H|-| zp`UZ`%&(#JS_nD*eKo_yzee)%*;G+R!_$nnvWG$C{)*Yp@x;hKrHX5$tck(}2Yze> zAz%vtY_&C&9;pnW6$~NqvdI6y<(SP9i}xaI1ZO2qtW_&ayNgZTx9K6Od+eTmT`yIBSqIhSLM zF~Q@Yo;C+z3NmIY`6&LMUe8TzAVFf`*gk8WgjG>E$MnHe7y|OD^fsM3abh*`j|STP zr?G!vyGh`{BwX)QgC~fL(?1#+>!x5NY8V}dn_3FG4vvG%Z5a0dp2H2mPk3Jq;X1hD$f*I{H%{{hToVmq z5=boQy*sGBBNgJJE*0`B?-Xa=#<`W-iXCezJdKJhPOI11cONU^Ui4xKdG##W6pk-f zBc{K0aQ-Z@D)`wLB2QtuS>rthpIFA7^;0?%?xP& zZFXYG{ocDRIuk8cgQWo<*psIO{U1trYGXNQb8_uo@HIbuOpHDfd-kS>mbgEl7FkY4X9u)87 zVPLa=0W~qcL#^Ijbyhin(S#%?FYk1?RBnG^XX03`7TV;8@#~T2l3R%L@z7=vW;~Qu zU3OX$Pj(~>Od2jkOck*am6Gytn~?J1iP3m3cKm#+G)oBu^WlM*XuQ2O8UuO%pff|n zen_R8ni-N*!tkdlqs-3CZjuI^zgoWiO!E-}BVr`qP z)M*Z4H1dja(0vk6@Wgu`17<{q5uxbu)ZkgUu63X16C3;xLt3<5gKe-OGJ`)C+|v=Q zG1U`~fpgN(zoRGg;=PUiJUFElsC^QIa8YfyiR;65is%XJRnzd1=~=O-EK-+{tkTr! z%KPe8BBlTSaIwgVmkvl)$pg|SFrJLd_!dVslgwscR~WLtf#QuY<5;$c**BV5C}p6o!BCGC!eoI>xueRrnS4r*Mgync_G5ms{ub<0x9C zX%swN!NC8)uz!&8DCHgVrwPHde=nr*XdDBBY7n*uYEaEa#YMjd!#_6cN)nPnGwzya zGiCoM1}?JJkL5GQxXA7IV$=c!-|}Jj!|{G0Bm3Ry{Df@aJbj;X^V(iQ%)-3eed6t> z76e}0kyVnnb#3^P7Z;03R;e3wc_$p|exb31Y{0xT!54Lv+zc4N3IA^iFx?<9-5??2 zuTF+h*85GnHh|-ToUw%3a$TuxpUIFm6fG2vfLZc4?Ar1IY1HtQ8QCGOHo#Rvl8e!A z(1jCE4fyqe%tu&Rz5^W?JsYkOkTRE=9-|{kl!p=CokZmkcrL|59>VM~nKgAqoK@fC50I z1L~sce(iJq$y5?nen&FA3X;^zQgUbmF*UCi^b!uLV{hFx?}Lj22IQ@o`Gr$2CX>V# zU91GC><;Dt4uavy?x1+yxEaFE+9nnJk*{+cNxlt$QcRux&4FJgP85FQaDe+jBUWRR z0y>$F4|xt%Kj0$&IgLUZ8(1Ccvk1yjDo4C@zClaZypK?v`rxZfQtys$UM+&<=7vbJ z&AOZA>>v$esfO`CSJurDncMp;endfOZWc2YY?EvW_Tsiny=`u9ZvJW-qmxnV!WR8} zeo)uOrP+ed;zsGeO+c(mNbsWPIQ|XVO9rV1~^aA z4Q2+@I*>jdfGtV@V-K1*Jmewcd(KV>fC1(Mf%HovqDTj)bVgQu)7We@AQB;!7+{H2 z!1WI=D{v}+iTl_tw~lSwI4OWK#A4Y=CdpDxc9eiv*XeYp{H1Mj;HNAwYE3~>Zd)Ze zI0b34^edy6tVOrFR0&I=t=*R{M0VJYg!t{Mz#D!2IP5Q+rkW9CAFQll5xZcra(l{C z;p^EA7ZOI*{9Z<43^7^MHds2L(#O5N+UIjUdWcXkX7W3rk`+)%FHTlbWDP0aRq4~> zCrb%K2OK5n^(XhNLGHh z(sM;4XNdvbYmTRLDaeU(4!)Pd@#tKHlrp6Iq+{EMloM}_bV$HRcWC~O=L=@SpdgLL8qbgmI{jgiyU37lWij0x^6B#Pi zvHg;57&T+p!n+H7>|DOVnTSR2h*0|MdaA<%1%39B>hh|h3YElY+6qee+H0TB2sO{I zLQmND0J!F0bjBX3TC8CSh}D9Ea9Uw0JI`<-xX>P0?SnO&_KwhlJlR`tbeAv>8QhO% z!Gv}@RAyKRt8C&dFRhuD_XZSySq=vA`Sf92(GdIEaa{UDl?XUMZ8 zT;Lt+Q&$6{?R#~M=wk)j$K^t~he~OAu@>g!;!KL{)-YR9sE@86D%o$jRw}lEes$B7 zuF#_!EoWYJ@QpIEI=lsQE-ub{>%MzV_;+X48Apx&8n3+AX>(F>q!=VCyaQ;<5nxz+ zC{e81y+wbtB_Z~`?}JfhuMN7OCck4^<%_{47CGe!ZY3+n2g=M$KcD*|Q?;fe<(pAm zXc{c=YXiE~ixC29oxg}j6=&K^J3xF7rA{i z^wcI6CcmrL`K5B;on|?|SP#Q7b;hhJzeiCe)<(>FEJmWyUi2u|Lvj0qs!&RJjl2&q z<7UgjIounST(A<_w`{4sAwRcPkn=OK{~rj1eamcQ$!*3;fm!mxM_=N1s|CM~1r-Lv z>rstP!hP27@`xHcF@C!->2X`JgFm9`Z9G99k$rZ*EVI31J_L1QK7d=7l5%oX^X5Gc zzMv2C#tX(2XB0FOs*!m`P-?sea*OkejX};dQIGTAu2%}JTVG$DDE!KMP_VU{_k*Q- zfvBcl>i=6bTkl=(*YNUO9pzoveXUOd`MdE)87>D(b>Rv#Y*YQ!ehELHC>F#>ikIb9r<7Z$+mD-@?!=(fh6bAn z@boj^HWi*bo+y+pj`@O8;Nr>}x!I|z7at9`z-S#dy~{W`gCXFCLWLovY{ydHIxm&U zHP!JqEEZ&y1Q*x%vB zX!-W`-{GasW@9XZfjI@Lc_?X^y8h;UQNh5|&qcuCZDGI&EP@~<_6wAB#!9A5_jMCX ziU}mv(JY13|IuAYW3&bP!Smo*3Ci7d9imGjv4w35>^GEXw}71&S79e-%m^i#MrH$JgDLC+IuHYu_v(yW}y zwB8J%uLk*N^hr?uco4fAk(`ujdq#p=2Zz)q*Gn{Q?)%uS-7S94dZH~%TD4s2xEt%F z4BIi7UZ=UzF6B8Bx#+@?Ti)(go87N3+JAH`Ssi*K`F$Lc#w6UnNlCF#M*C=u*lh2Ubt1KobxqKGhekPzU$UleGIeRY9PW^q2$7H2vy~bQ!UU+{#ojK z_Vdv%+755hwQ5jnJQHUdn8|*P{!EwTCP%qY9qiJ!wG}MMJB=e7kniO%1%Nd53T45H z<25$jTqzLGgbjt_tE%`x&FT8{Om|DaKgJCc9c|^?6LV(oo(a8Tm zvY6M~RQ!RYq~Hg8@8;~Ajp?Zg4fB*+%;GGy!8f}m4t%9MVP>%CMfZo7?XCmX1B02n zBR_}7Et+N6eaHL@geRg5*mmM?)iaSZrs{go#a63bYsl|?w7AwNz{bnvIb0Y9IQ!?B zY2#C4&%6|aV;`trYq%R!=C&@|5G@_UlA9thO!JV(S=Mv#z{9(A9XIxNpuDj+t&}kf z`Q8f{UdUpiq+b~rrRf+%Wcb>;!I(*zb?`}1HNGMNiw}cN{`rqq#kgCdx_qKOHja-a zBI+4-hTM~3(XD@)l?rW!^gmk6A?bW$o)l#77UxO}pPs^@K4%^oYIB)b9KcI3S_Ev2 zC|3s-Nug=`=NFa%SpK&?8q)yMSsN?TK%uXSp2-kcY#ScYKVMd9ZZ^LYdp zqxCUv!FB7B(l(lb#_|q(NPT9V{IM4DL&_WPih@xTot|1ecjO=<_5MS7FF-8gbUuGB zVlRZ%=dc@TycV?<38n*Kh63UdQnt|`A5Mzunu&0H;r(KnoNys^R=Ly@vPH`5bRQOp zEkoE-@IqCYQ0C(2D_xl4tZ(!j?87l!y=>hd@|O|a1?>n|a?g6*V@-Q1m81-OD%jRd zYA&Ze{51N0UJ)GmgpyPo@%jS!8RepgVCfS_8Xqd@Iffp4;9&+p$ptY8g8MvJ%t^(Z zZQ{N=dZrauA*WoKSH1Z36dGkfK`su|HkJvMJlH>qXn*V1uuFSe&^t*B?J4aDk19dD z0#|*|knJ>-k%w-v^T$r;$fvBn=|w0PE1j|3aY1;0^e{y($s?m&k^+`g-ght~Ab(M& zHI~ZBk|#o8RKbf;g1`<2#Is%QNN(Eg;|Gep5XUoqV^(4^Wcx(!%Ujyob7fFNnos?^ zNBiicH!eLNE=PDP-um#d*2%CpeF7JvCcS8U1__CgKKK?XdFqdsG@}dA8?zQv-&&j1 z<=!hjneK-v_?Pain5zW^-}^B$st?X1%HnsVj8UM&qztlEf$uS8w($gf4lHfr4hS{? zQ(?)b^PdM6F-RMyn^zIaWP|Y%l`rHYP~kExGTADu%4_y2?EPW^>v2qh*~J0puXA4f zh;Ds_W~DJxOV0vJa_1Uyn{w`;VW_BB<)>hEbIYLKN|Z)kOb_{Hot>m~BC7EHi@N6}b3d^q zR$V_T%v}1c5tiepAAguZf=0pkmc2SN?D&yiyb&RLENy+;m#)vZ$g$X8S zYgJyQdS|6T(r&u5x+j)f0x3a)b5*g&=@LxN#nwK-eXf8k;a$f`U{UdyxLz9ZW z!CFh+%D}DDw`e$hlte_GhE#;h z`|UqFp^Q#{6>RIPg>pw6(;6P<4EV`PNLvA>tuAwuwlcij3vBKxXcr8%KMPL%Bt>CK zN`-~OSqVZ9XY{E3c-Nj-2H8g_Z|ID!l}H!-(I*|+(gNRSYVLymeS*p2{}J4Sm#F%; z)??u3nsmB!K@9BIYm&Uh46U5^i0>?Y%47K#*D~H_+8fYEdb$A+SYKwivWiT; zi(M%oBZvSp=;C6BTykw)Wtrr!P$MuIDQh#PW*7_ydCIVyLUK@|PoE)JK>_S!H#!m6 zuoE7iU;_dwEG3*Z1Ogi)^J$L>yeY#n7VSrJ!s3d**91RtjV+4#8 zbHOI&IpvzuU))s;WM~U+HUxKmPy>w-aItV#`EQ_B3;_2cP}X-Qm!qm(c*EJepih%ZozvBVS~+slTBb%ukvU_R}N_R*T!vr#NQFB7hG zU9@slc+rDLl7isK=bWY%EFn)0!IN+KcTcislOUs5U#90??M*` z=Qt5pc8{8185oXDTYYY=A}DuqW?n$bm63=jBB}ylfA*X0s2n zcZ>rnw!A({cpz|Co*1E)rH+k|w$W2`Bg*4zc{!dT*zh_V)*F$Nw8%5A8_b4d-e7)@ z#3W27!wqks*0c(RXMKGZ_2gywGa#aj)i8PK;VR=1lqeABpJn0;ZpzXdB*<(E^{j?2X} zfMWKxOfJdHVyb-NVrm~l4`Yqo*h5iWmp~{_Bs2K8MJfBRVpe3_Ka2qb-L1)2StT!i zj+TVjW&;7~LdxzFdE>mM=Dh~?u^3*~lpL(0`u}+Mb8UheC{N6?Kmy7|Ay;LS{GZI3 z?Z)%BpGs?d7{~&vMFLJrYwXl%6|EVQ>xDpV$*e+h(*N^^n0e@KcXW@M8{3$QvW)Nx zLm4E`YoNanNFOR1hSUcp2Ha%|T2ZeEgmXk71|bFW-In0GsEiIzT;x0A$U*@i_n2(f zfzbO1;1=AVe-U5%EXqRVHvq*XBnK{PG?owW1mi!RSna10m(s6_`>l??km_($0jT0& z1Q@9JZ=lepPcIWjyAo>wipFZ`nwmRiXicnyYM{diNU>%!sG8AFxBI^~dw z7$#2x!oxjHo+TI#q+upx1E7k^QI04e(#S|f`(GwhVb_eLY!!1=s)x0!DgzO#(EtL< z5Fzo9K0olAB&kriWl&aMzC(0(0>D21!b+uUK*=yS_K6MP*dVSd)J+p3FGn~j1Oq=D zQIP>mwjJuOkPF@pML%$3SJv3cQApYDjz${F3@E9C;i9i^7~1JJ z?gw}Q`q>9~RxJ=ODFx@kRp9grWfK95{~c%Oz^uOA_|S3@#U^mld7a^NR||6hcJHsI zJpRA;!`v`Eqh&p=KBh+~(szPBM~lWPtbaCCS=@bxSeEm4LQe^@s$)ESZIibqJuUpKYjj$?jw-jAF#x@LJHT^0|3_|mZxB@uc*>+o=&M8{+{hnpm8N6&OU}~{TOqDFX8iCnr>P!Y@FP=82O#}A2E4oCRK^ zwsH3k`@hDV;J#cd5^}B&1}#>GaaVY4hr3!7VgP)A9$F8*0-QLZO)_+PdQrMR=D#MJ z8nP@CqXaYzb;Z##(*|Bc(~AYf|AWurC~EwNlqMk6z6U0tj%l?g%Apj$Xdn`&7LUv- zX}=k_BOU~irCy?};$~t?sBHI)@a)jVoPUij1e$1A-N-{ZXeM($I& z=X^C(Wt}P0I%p3>M56y?JP4RKr|Lr{?^2+pEtCs7ay4fWF#}qFTM|B>4e%Cr`R&Nd ztN973Vg|%L-e|Fc6A_D=l8}t}?=?bjU{EY9XV_7GKv5kdMRj?T9vR9&P4;u%XBzE? z7~ts@IOOj3D$02v(Eh1M46vsIu~hDLSw{OYi^4|E@@p9)oa{dLUPBIwGQ;_8O!iko zBfqQvPoQzKI|8C#+P9Bum;Zh^qy zEflQ#B?E&CjG|wwaob{YJsYg_ASS6);^X6=37XNcnspUgV+E!xtMbGEGN9@HxA-8R z(NIR1XCOsW`y#XsJwy!T)fwg-9;d%Nre=)KVJZis)8z0|1%TNv@D022xqa(}9SdoD zE|{F?fG?j0g%C7X@j&)|fypp8=sCJ>nwM160^NSaVrz)^p31BvKaeDGh|n49rn*Ji z1yskX3RhM8+^pt20}N(?nks9Mc^p3`w-6#E+QmE0J#G6C+GXf72S?}BTQ|LcBTg^i;(+&s>x@`|Y&Y_P8-5x!#?!8@l)MP75HiW?vv^7lj%4*-^aGxSXvsbl zQp@=|qXcRo%qgcU9Fr-68hKK~p860HA9$QjsF@}$yuug*@dr3|EA%GevhV&DHYkoV z|6$NoJ{b(@RqSL`-T9D*GJPZj&w0@kjg(GEPWvzRUm}7a2cvyIwXMaIzrRx)kdOu{ z2p}_X1OUFtpBTA)w(sEmM{WR*4pVLdj1u;bQGg-2FQYRNb_VAG7!Xwq>nPCBA5Lch zo&$`NbDbg~Cm8_Ox^6l|-*6(g*^Ry`EI~7BfAk+u#C}hE@W83a7(jq0*S9KyVJ`R>3fM0%H1In73j!P*!v9`}w|8*0GPb{Y z8Gc)>+Xi^!vx#C|l%$bO%b>0r!s5S#4-Lq)rElf3m7XQ*q$Os1S$ zzvLo8cPHNizbKtbudI7t2+?rtFU^k+V|-W>bn;F|;3v$KRB}eLwUOLdZHs+L%<*4U zgYDQ6!06<+K6A6oYiJL;FMw%S{RPlGF)z?8?EZI^OFht*NaPal{atCX7sq$?Nl);( zlrISV8U8jGG$8^KHL4Agr>y;aBA_PkCQ#<(i?6B(rL$jI^N&BYIJyc~I3E%4BGaN$ zo#Og-q^erxbtUh-spx^Cjlem>xXS2n-x~_pDfVO@?wa`Xsc!$*^MdF~JhCqlS>->&J~M@tv4*zKObieMrUm#gX%d)07Yr;U5>{sv~e&0*{6 zt6On5Z}8%GycVGsa%#x9@OkOHZB@-ybK_6>CR-ur+Ny2NIYmC;uE@xUs>shmXt(e- zoIV!ln)5Emy+q;b45(XbxwV-cO%T^Dpf7qy+^OwxDFy8nNpa`nZ>ioDS9Ii6W4EqF zofuIQ?jO3Rv_R9Qs9EC3z>2yET-;Yk81IM_%?P2w)qI3xJ$g$D%wPm#KpO3 zTm`igp3$YH#;=-YK&knDR@yitux|Q6H~bH?LHRZ<(O=GxvZCpE62o_x_`=q7E}H)3 zOVkQMGI4ofky7PCgOxLgA|!PDK@CMqUF31(JI<3obv*5=q|guJJZf`=&iOe?u1Kv2 z-U0+m%Uu?EvFD z(!OW&>&YGS+^L+6E)F~xz30EpN$#pI;O)#|xSe(RK%5%GM<#TnD@PatE*0 zH=LO$%!un0vuxi}`F)B@yO+U79TmVwmDc&@vEPt^aH3wPtMJdqq80ZEE?#WU$V!W( zYBEFp;ufQ??DBmWKAqAqUU)pcFf2^-`2Twy9m70AkUuVfgA;!L77qA-#h{tKov{(x z!Oq;q^uJI{nG2oKh+NyFm~>_UQBLCZRYD`5Xy)&VRquT1maOYpa&Xim01v5=$U@s`rTqv>>lkHMD12-;KDbm~zkL~%c+BJ(uTq6d^4}Vjn zHFBz_U0iZrFJVrtsKqnx*n=JEzpi+?+>Sl8EU%*NO^7m)YPIP|CWCYcsC z7$=YyIvdwDr@W*IlZrB}*}ynl1w?W39`c-oWF9;lFcG=D%yqXB0X3aQ>3LQsUj42( z;!NXQ-C8kN)oD82p86Y?_A*M*xy4nv>*XT@-u?w4&K?WFv>sw2f|1Mq zq;l4{J_*;K6LAaHu{nmN8zLhE6P&q)4Vr)F&sdw-Ptvx3pQ-PzOderodxLuACeDi| z&c0iv2%4+D4&qK4$lVgXK5V&CT>G$=*0uO>?+>8i!IPu_1JQ+yR44?ZHJA%7JAW@RXA6uC;u*Y%c0}$ipNHDAz2ioUD+G{ zjqU1W&g2FMft7`UmtL(HXM)CLxDUE{S^CVNZuA^{p(*IRGMq3#D^-`~$*0R7R@(9> zbw7*j-RZNdlWK=t`^QQhX#*)W<{d#fp=<7T#-ghxHAQR1!Y%f?VfKJML^jec5AF?I zoocVSeYdPJ8PsGqp_w-k89P~WJ;XL9&c8VSUC=jI=?T0}@TUv2SuU^6wI=YWD*7PB zF4iQ-B-r7l<6}|G*<$wq3j9F#foGG4zw<`Vi4^;$6LH?BuWoM)`mMw`!K%d zcTH3xi*A6<3sYB&o2k+DOGPc~)!!_{hSiA8B3@_bASP6+_ii6A=P9nq`N?mCbFYJK zo4VRG^7VGp(%dsUNR+c}oo0*n^SlL^W6)WJ&=`w$Ou3s{@Wqd$HQ=1*yFM6PFPo-JMO`2|l2mmRXER7Cq=&}@oz-b;d3R;qoO_@xV_ z<1597h1}P3t3-qc)e;3QzeHs|S@gV9OU4~=bo;=!L~ojqKPeaJj>_KUR{-((Gw0Cw zWkt}$c>au06%NSE#AGg-U7te?k6)|M9=#sb%+*J=tHJ`^`MQ^W5cZHN%LYaWad^WO zd!8#ah6;~j)_h{(25ezQeQ#V3JU=%2e{^rwc*0v@-h@tr7;pVH5zuWB4eOIojixxz zF!AeVm9i?a)2Y)J?w0B{(sB7-(EVEo&h@r$zWcYL{J3L5VvR#dNaUF2hXGpKKK*H{ znibdFB7$DlSCx^&Nws2+|JqPXWM~^}Zii&T``fZHm?TMC(;mFwDL!N6zG&Tn@fEvN zJJO~%9Co2NWBll=t5n6l>u66-@dT4>i#9)6cRN~J#^jEnaGueYE%qRAAJ%loeN4E;rHsWkjlfCu0?GjO2|dvUx3k&ry+1Xm^!`kGU>ZAbHI!asVHZ~ygV%d40(|kx_VeVp zj=lvA^-*!H>)~<5*6P739=et*9OYKLP2Y1@><@P*T??`OAx+@k>Chgb!hpuAwjO$e zha9ZWZJ1%YrFkdgQjz!aL!PcG2S1JN@a)zL72bc6^qWA3G4^yqk+z6_zL*quma?Ke z7sLMGYMssQZ0u34crd)qsl@4nVao}7$JUlO%76b$lR^7?pD(k{KFfk^l1GXDQ~r0o z4HBM&*XDGnE0um$Pfc>Ro@Ft7zsGThFGW$)_cE=Nx5KJ=rpsWJ<%4+tdc(>e5#2nB zfw+xzEX_7 zs3B5j6yN%de%5At-Bzj55~W-LKBPwXy2i{Er*6tPKlo$a>k;kPA6NelYx|b38^6GN zD>!S-g>mgc$;;+IbxsZrJ-R|@B!$$e5FHJZY zGUPG;o50C0@VkwkF{_KjioIl{%znPMBBo(DG{de-Unq+!8T;hJR8jR*?VZ;H>oId4 zZ%wI*4MU#B@SzXnjMCQj_SLb2vn>=t)6LB>9gWGQ5;WCmx;DeLZ^ytBa=EipMdbCW zM8N^?o3TEkFM}<9{!N{{%o(6e2N7jsUJ3rb_{PR{c&CqO~W*1h*-~bAcnqrpnS=3tCW|k`u4PRvgfgB#qq$la$;`@$$Q_IMIeyT3Z^@C z!cw3Br_Usb4B7j5m~M){>hIO9_GQz`zs;1d$k4UJ;%}nkzpQC1_06&xS&{#FfYH0a z!5R^GY2DfW_SU6CvxS0CV1lfW0{Lp@E@RffWbJe4mhch_f4k-p_1a9^0Vrtc)4qS# zc7YW4h`^uL`V$nYFymqS55w$Hs+Q~&9t|es7NiLw}*Fc;UpL2b=V=_aoJ)zMu8sW z7ua7ui^u<74>O<QD}qmE@<*1^%FE~aXMy&v43Ig!-& zrbX}^@YOwneF8U@2}L}TlsFpl+ilOeU*!cZ?xkIl<;xCXEmu}glKddOi`mH<7b#P3 zsIT(h(wMl$tq!Ao!L{qu5cc|SWgRS;PrS&|`QADRJ4)zfQo-O_o;XdGr2 zEBke7SJjdK^~K;v@j6&TvI;j*>cmdU>D$KjvY$H}{f``!O8oi{M|f**dmV&T`zdKV zZ?f>Ls*oDlV(c9}*M*+ye8fmvWYbn6zDs;n#%ajZ+wnZudQ@Bbkz4PAI($`5fn{3_ zJDdu_$$C+2P~p|jonCCkK;|4GxIhYu)9_=cZS30P`$^Yz4%uI}#hvxXWvr>yfA-S4 zft%;l>sGh&;J~kYibZR^`rV%xop@f=`hKYkn>sC?%i}Np{_Z#!RrV2cqFV zwKLtCqCh}=_ z9Lf(?wCX;O%Bb6aC{vYVhTJu+Q-AU{>A$@friK&L5ORyB_n9JDdI!fX(L0S5>w*Vo z{eN0Hk{UT13LJL%xGoZ66^$$T^5<^r_3$IerI&Lbd^57KDdu&(*IlrF`@?x^dAs;# zOiXRe!7T7EV0#_cif;$UO93Trdq2W#CPcZyuA_mNDQ1H>*FT4RU8aO~B_C3GL39E@L`V;Q2NW zgS=HQ*2O7(%8*5Y`!3=ACmB69!q9sWI2ut=*kjJa3xubtysY-*B?Ho}% z1ui8b-;vHIy#DD!mi7T3zZ8qouZ{R*mc$nY^}AI~KDYOpQB(-PI8OQuUg-uo=GSW{ zyS}n~Np*Zw>uEOhdW>6ByOWW|HI;n)t$I-7{V=MT>D$ZfGq2jqa9W;_3aXzQS<*~O zbW3L|{t~B@ZVo+Pw+sA$1MT=S{isN7te-93Fz=lFm>>RPXM-YwfLC(cx~SBX3N`X= z2kS@zVVWad_{5*-h&f_k7oEYsojxDr!9geYdz!yeq4(#YT-DVdBNFSGr(2InC12_o z%d)RCDFqL`eI>;l-&yut|CO?=6j&koBF`t&dq^0X%e?*D5XwvvM-e3C#D8ogTeGuXP=>MVXo5C||f_1}*ZQHgvu|2VEJNaVU zwryi#+qP|IPX2xF_Ib|5x>z^;R9973m-;QlKaTKO($V_tYn8Dsf=_B0tH;j@E%DBi zV?)tFi{N9deTvaxP?VP1K&rbe^TRgho;)W&izUfEgL-r`ev&zzQyX{>LEL{~hI*q-)ILt_4m{=F)UjE#Kt{qRL zY&Dfkbv9iyC9-kreU|_ZG#osHq8y2*^*8gvyR6@17*kzMC4Ft%XVpb}nWW*R(V30M zxOxePQ=S=*PM4Ikb`DzV>9R~)4}O>F6IFP=!Uq8cg@EuK3i;YK#pDgfR6dkVu%RK|2j#8^mo z14a1sxtsZg&LXE({>udH((>R(gH*`bx`V)_zlswd>_`T>u4@phvy6+TDi67 zr2Qt=U(w6QR8b@5$A*hQs8%63wzcl(F3AaZ130h}^`$lBJyYk_m{!$eX z@&DY38D8xZk8593MPpp^=z$`d$%FE4TL2PM{litcZcg^iVS<9~++G%<208nj9BC6O zE9uY#jCJ3%5J_Zr$<2%3P#>T}WKOCD!;znlv}`pRZ28Vz)LX0*N*rl}Ne)Vn=jeq+ zlZC|LUtPUPypY_Qo}+1eCRv;Q*efeH+bA&mN36VD=si{athmm+xP>Q+LsZUC$5#2bs0#*d2Ugen%WovveJR_UYv~Co% z9Jc~&M>Hebn9lTVg!MCus_b)GyNi)ZMe;F{)?yRUwc}RSarp##SuscMPI)`_S2p&R zPAv^{DVG)#k80}7X(EoY9$x4NUcmjsDBJ^a-~mWMq%&*zCS_n}-Y9degn0MRi%=^k zU^LC=gHERC)t6(GnC;n)Y*c@tDeDhvj;-xXL12R9zS$nB{ns3&YoJ3)rz8^kt)7VL z8JPqBeaEMG3ZWzvLqHuU2s~D!n_SR6>-~eKy(%q>_@Ckat1+K{+@QBv@vfu`)s7ohc# z;yt8thBS7gqb{VH;!2CO3}6||Ko%cIaglttBe;AioP~dl1xw2*-_n)79OPGWrBhz@ zf;pIO!p>;o`p<(=zE-q*WDJgVS ze+qX8M8ubCm15kWH7`;()AQ5c^W9zH{Q!!)D|Fqp?&S}gK7ER3rnUMWva&(T}pzt?{nZ(Q z?I})8x$444ed4ApK#?~@-dyR#bl`Z>i)Q;ov{$ObcNomp z_f6B)L_}#TSJ^$nP}qjt7T;UCVQf&RuPG9(gi7u-9iQ9vO)P{z;L=+mB$tEsJ>=x- z$rV5k4%wCt<; zmMtSAR>vBeQDv0q)(+QiXnR$NTI4k=`y@)qBINgdZL}=ew3YYB$3iqyckCQ{_y(Ol z-yTqb&;g42`hiVY_><%|dJ|@?5&=pi4M{7SavA&V2a2xH6hr(YXQkeESXtXn zm&*5f21ok}ve5uOq5G=`9U|1$iltyPNhu&&Ahx}DW0{l7v%f{S3@(JWC9Oq5*hwnE zuyZ2edS&DjgLr`XOJ~Zyf}>h-o6kz?)H%ejy(34!3H~1(Lp8~|JrZ&e&bc(B zf(3B_ub28Xgng(Fd~wFXS5gAsUx&|!^#L{`vaswVZT*)kwe>3#zNTolF5OBM@D4yF z9{NDJW0dxiw|9J?fU4`Up!xzIzFk+ST&yTl}Cnr zCjU50>j!tV;7-rzwJIrzb|bVKP&yVUl3ToZbw`-a-vf}X(kRdBVPRlCO86j%->Py? z?fC;J=o^K;l%Xia`W*AsHC%&jSV;hIR!C)f&hT!SF7{UAW=duM!?IQkWJ_-0KKpY<7s%3b+;ul-`MAIv@+33nODcdd89g z2(KPliZ9MyO8TTgDejR+*UH9dGIPVi&<{2HbSvniQBRD=KPUKdqUT@5+_nIUl6l14 zbA#pq_B>f=CU7^N6+Hg9mWyq2b<|L&P)aSi3iOj2rO&3ZTGXKGkJPwk12P#%F`Gu- zqnM3qR;0kjrNh{ALEfh2T2zz;ym6cGl`V&9MN@M&!9Bv zp@LxV(*Cu9RZAcRH8z{ji5{Shjjbdjec2!4v7UR<#W#eqJcL37F+lSS2RB#e`$9(; zn?210y6JIg)WM0t%e`sy0mjQmXOO~`0EayPAghb){eV+RZVRilujY@llUx? zoTG zb(iXoe)az<<2m8y&Nu1)z2t+i|7D~u7_CsFkG>Cv(N>n3VIg70755UR$DP#nVciVD z6%h;02M}~j#Iy;Gs0QE%9oZ?XKNBO5Q?+Fl6XC}egY3vp#ewM$py*_JkaOEQdXe3l zNXuUMvc0oqHCQgz>=-20FfrK?PNx`-4$H6F)Ri?YIfE)%S_}}r1FM;lNmMSDER)u- z4a7H`aquy&wmjc6@9{chO(!?8#F0#{3}jXDucv{t?~p#G`ny_>|Lt+nmz*K)){OfqHlE zJ-x0jci%dBQxp?2X8+)J4QsV&nguZ-<@QJ6=x+QFMSv#n5=dR^`DzlAB2-PXt}r%h z+A|4+ZWZVR-bsL+KaV>4bGIdnrdtNNeB%gJ;;b>vfx|b4E+-EVY!QBljP zM~8mbyt!CG72CD95R|%Wbx=u4W?DQ}0H~}vSoM>rbh#?sBB!eCnWFNTP4g}yPxiVu|0;o96s*;3uye&ron3+w)we#f)_ z`^z8jg;0CZ9xuQ(F3TgEHcv3-hTLKd!c%sf*Nz>m$TXIpE_I*hXdpwaJ!o_22@qn$ zPcHxCVd0oGW%55nmST{NRFT%9?)aWJ1z-7eo~0UMKV&A87V@n8dnHR~P0|HXnx+J8$8rYGt71A@IJ7vw{a$?+j!v3$gW-E+L35Ds?a$Z7IM89SwBlM{4-RwpAZU z9%CdTmgJ9N7S#Tw*|JWE+FX@BpuNAZ$iSt*$9DW#BTDty`g(Lm7|GTJH+m*dB(pyJ zf~(2N4WBD=*!NOY=v*zB!!fWS!6RI%b^PFtQdYP&?A>`gRFC&CBo|OT?iDvWaSJ`o`xm+ zdZ^_?CycpYp7dlE07_N^J@$r?Dg>k_C}Td$WIBGy4Tx|a?hA47TDpCXHlhh7vuhju zhgU-RS?sCvI^K9!ngk{=?1{vYiXr=33H+2we4 zW9bo*WLS#(8;NY1;f^HF_{My_e4lYYJHriCkniz`OKW+?D!ljT@%76JX z@7INOx~$`U*wRNGMk^E3eH#(A_-_wqfVD`T<7GV)mY9moP?aU8fklXON*}@4JlZV> zE~tP}0y2vkQ{4a5Y}@*H+{&O2`YcG|;kGxROH}AO)WNU6VjlV1L2d?B9(jwPR5V3Q z_uS=m2*=3ie>jxPQQ5wspgAJ3fe-9wLC{y9Wh`h;5;i&kDNYy$x;n}Q44C~IYn!}R zM2e1GXhHaIM|4kg=7T-J&xL1Ah&04^dolQbNM_&~sKMsO1~)N36q#%0?dOl4%KGYw zFc8|s63}4dY{qQ1|24N1rHWc`!+WcjNZViW0s~Fdljm(ci@Wcm2%NHv@PF2+C`qCd;0*Trd4Cdg)-s+mJii;~gz!(C9B!jFXq2r&DFgfS~gGu&(2V}ai0pxA< zx>0!YBSViY8CKx?tQPXhsGt*#>k+ilO{JA9#WTgmQc|7y_d>q_e_O=tY8Z5N+9ATe z^y<5d_t83c>%YT-y0}a1?Br$UlZvGzb`E=Gn*TOyZ>5{}rZ_1q6^+T1FgfUmnM>%M zDo*LNg&p=!1z6+QEYl4slPk*MQQ#?O;7FrLNiNnSRBr)G5^O$nH62R+em8Y?1#Y#4 zoK6nVU;!i}sX4j=Byr7|{dzWC4&Y(clp7O#yJtM|v#THZ z60MvPT4pM=ZKpsjHKwIH@xt-9gz*=P7+DS#7wwq-gk2HX1@bpL5D9rysimt z^h}G`ymjV~#nC#Q_dG=@+{WMa7g>WpD_Nkx&e%1$pLGgC+MJPWCJZ}vf&60j^_jy9 z+_mvUd0i%=xV5M;8BKEqqd-ay!Oa$|iArUS8oQDKF%9++mLx3LM)T(Z-OlKeL?G&( zXcF&jX@pei2){0q(Z03L>MeMkzwU0kWTevuKM4DW0U}kJB${{E-}eJO&OMITx#&<%O@pJW9_A+ z*s6(urU>BfMx}YJ`6PXqch>2I`Wur2=GzYh9AWJbD;DF)?Zo8|2@1NqcG5?R_{@dp zA6Tj^o(Z7YirJY3d)^p7e$S;43|H2(I3_RM9Gwkw%by&gmeFH<%%UM60dXfUToYJDeiZ36$$DxPkHUa+%wHj} zO%D;V=*t9?+4P1UG0+g>q+|F3ee;_ZdDlNgPHgaR|MklP z3e(m#LR5D@4tox{yaEKaoP{}k5`xk)xhMu--TQOQMeXKoLV5Hjb%Ent+X&==_Nj5m z5~1<{;e|+1T=)jNgv1=w6^sNXTma3Uou(Y;#o-_R`OqoC5QqW|b8bn(f9}eT^1~M3 zjuZ^?Vjrz8?F|y7o`oAZEY{ckbnjfKhcWQ4)|+>nF0N{~I=-KTO?`>t!tL)MNv*tV zP%Uz_70;JfH!V(k$XsDW)7yg605g!5`ZW8wMQd(PeTu#F-WvHOAHkt@0u+AkHt7zf zvRdWVrfM5a<(m-(o38|wO&Cu%-p{+^x1r2H5pO$l2yls4-B`_qTVX(@>O7rq2Od9| zPj|?0sm>uOnUY{|3%nG0DS7g~XrEO$zV+)O(1J@lQ=+ikY=%eHbg+(~SLFQxb~@Xj zBhS%6z*5E^O9)zQ?9?M?fHdr=arN7#-C% zVTZGL!IyGE7p@EbY8Ey3({^v)$0{KTYt2FT5?;dW@^V>`8Pmm!$?UN18v)jioQnN22F=mM5uGLVfO-eZ{ZK48`>oFuA0L(5X&2CtCfw1=i zAA|kwZ?A6?81j}4kOtscii9kM*s2=;9t*nJmxL4QKLTW;>5i>j^6OYnXrObOCej7h zQKw?+) z?LDo*lEL#MPkPIm7rm$G4B>O-Lo-q{_$9}*6E}ega+4PTkOD>PQx}2scbOBNq&h;F z`eJwG_VLadkOD1iNo&chPtwz=OQbsx4mncN z<0U1-^4omX#C*pNqwalc*-wRikNlXt%)|(LtIc(KNy3y|ZqJ2+Qx1=1KGR?=0U~dD zf>)quY=5}{K!2$;Y8)h{-D{ulMeq<@e@sIy1ODanQ*YLG7mDB~?S!64Az_3VQN|GH zYPy0KS|kRi#{9zPEDFP5ZVWXQ;C?KK-Oh-79 znu?65;07yPYj<1e9bXVwKL%w2rfZGQsRfpq;0!Qm00L46h|om6#0GX7CV@942F6ch z$H&P2vy+(-Ba8=!+303DSpW0WI4X*^zYwxEh=)d|nn_h32UfH*6-hcnEkM@XNw5q; zalK0Xb5nSEz~yEHK9cG1Tqh}O2^-Ip3v#8pjvCEgDGHODa|!eOBE=mnBz2}RV25rD z06=Q25wOD+(4X@CSPLq|*^dKUctypiaWIL2NJczL)$vVM(zT2vfV1hLs$ecfk`c%A zf9-B77}ht37aW9QS1GvH_;w*d)~Sfz>*b~ z@$@kM5bI#aUf(mQj;F$uLgu7`Bw4k9n%bPN^Ygc-WESk`TyDEs`g;G@k%`(YdseLI z9PXV>p$TyT>%;$y+yY)9cu8PQUesk7+Z4h#-?PNgxgRO#FiYa<-sWL-9@ zEm+&^Yr}DPex5}JSIvRli8bBy2udwVdTm2gs6o2x;U6Wj!5h<07Asg%ca5AXAab@*TV5V33_FDWUSq{amN~I6gfIY6 zLjEoCi>_j|QfT54NhYSuVvn&H3z|TVAq%h>7jGmsIA`|~O^N>UH^5H`AS?kTqqN|# z^w^S;5}BKa*8%1p$jfQ%JdgJ~4N-V9k?^T*M_Ed3KR!3xp3AL45nie7H%B z?Dut3f>(gDqSHiI{RMBAIdL%Ra^Qp-n~$r|_vVCVZ$xVGJdfW>PRvWl4eN_ropUhy z>2$QJf#zN`MDzK&=IaLo%sQ2mb_0oOxlT@KbOa%zK-z#R&L)XivgR(Rx0|Imy5piJ z5<+bHz9;tK5Hle?# zl@jw6j4?koIQjs;j$z=JmwB?&Bm-~fr*KsmfyMthgz(6Ec9DdDZ`1luJUGXd?A?1p zG^KYmTzIOtdIS1f>QU-PTa*=wPLo3~G-L-ukp7r#fgi^W3UX+AXNL`WNtb@QP_zqE zglpVsMLKT_%Dcg<%n~OaMv}@2AEjKNnPfkvmgA?blnPPrhEA<>kTgg^P~}X(+BRIJ zYR4)nca2ki*jgCCXo%|%c7MG)2<|O%_*G1Q<}G@9@QyxLZd80=1ou-p# zPTBvOa{h{mHfFp06Il)Fl;Z&-NnkP(hoBt86$L#8iIpghO{8fM5<*&7rs=|cn+0I9(^{+6)2r$Po4Ge2@N`HA87Pv`UgP@7F0 zdOxyArGY%;J6=h_q#XiOm1csZ`h8%$|CaQeXuX-s9!9^d7yV<9a~d)P-tXi!{0yp? zC5R!@4IP5WelGfAnlnmV3|}tjz+131RJZCTV54VhRHU#S!~(5-PN=><+q_12(Yv{Ef zOaDGnW5{q43mM>zKyE|Up@G67CJTi#z-DvE0wQXS2g5>$d`4TM*2*~11SF4)YbvE0Y-Wk!jp@Ram#Qc96;-N$%Dx*LsDR{vrz{tv^wh#n3 zwfu!dGI*V8H!FkY96xYaj;dAlx$nF&$4x^X24X++A1HfkGfoXp(1gOWW|aB9cnvCY z=eZok3~CbFS%pa$+00)?Q^maz)P-tB@`>EHQ&Lf%sk6L!+hMg(H}3~4J6*;^q(7zk zXc~**rpbd*pjt7DLSx8Wz-Gg_@s9BPDIXjIDdm7_lM#h!^Mo8pbm5JZC*!4@R3(e8 zmVo2NP<0uliMYi+%OAVuTu%021*_S|h&Cb$0g68hd%+Sl!+6RabOzqEP_xMji}P0_LOGt)BbrN_gR7IA%5#7UMB_519%u06L&*eH@g-dd1RHi z`V(GUOKyX1H(A1R7mB?{v&77-xt9DTxc_pcFa(;yF&&XdnWm$-=ZQ0UL{G z^~Y%97rM#g?R5H_2lcdcl@UPRBUho4W*SgT?`TLSJ{w;q5ir*k>I`7SoQ&bM2_dfG zoWg9}#o}YS@*}u5U$IVq&8qfOcU!ZOB_$SIcU><}cYq!}0}?_~T-LxQ)M*%qp9;h; zGl({|uq>iQ78=^KOge~K!uK3&SOay{JI!%F@5}?ztV;KRW~Q*f&`CZ*<%W!8GZ?5g zR&$}g3{QhF$^OwSMpLU~Kg(yYnd+j;Y~^YzHc5X`OwqEb6GXP_ac|G5YWb zKnzb9#_It&Yfa{1q>~0)E1|h0~|9eFk)O|7_}aW zud{G74{27XpLlRq7f-CEbr?BPT-$h}03khW>rsq~J=qN7`$lJA$2a{CgKz zB>g*?CG`t@=Kz1H(DL_U_EEE1Ce>m=%7m{4aDmi1$i8h+mxS-N); zS$b2-A)wjS)v9*PN+VHBu`JFA*+6TlA$FN9vk#qRu2B7=Rc^+5;WN2Wj=9u)y`QL6 zNb8fpf>xzBW;uL$d21G-#o=lL&k9XqjVjHu=}WJP zd`?^=@l@;NkHvTARJJh2-`^b!$A$^a4@%qxSwG;?**HBV ztf~2w<}AV10XR$O(sbV9ck`MMZb^?=Nx*dLISjTOxV5f@izeP6(08}xiT-tmH;96P z&{$(uq%}@x z6VF=kFjUcnnGst@T7?r8jGQ}c?SMpXo71NyWR0?2^gR#MtA)+@p$J zN+=0SpnoU+#XDiz#oyABK>sNRQcrmc&&xoct%rXtDc1eOYssYH&CV|?8ruL|fGJcG zo&qr$J`Yvu3x;KP9;{);u*del(kpF8oFIQj?__Nt@Tflb1=(bu;%5-VKou%vB_&mz z$J?)A*~|bc$W+^g2cxk1yUBllUF?az3EQz2POLu@Ha|;WtIuL=jAp?a@i`%mk>B-0 zB8{$qmX5IYA7SnwPRwL-8}DH30rZ=aq(hx!*n+FzzS_1Z$(qw?Dw9QVVkaXCZMM$o zbiANw^M;1+Q6Qar62Qbm$50Ibl_+3h(q={Kv-2j&i)+YUvz*&<;j`J^7Yk79-zxU& z+{Wuk25$YK3MXZ38iB0wft=YJzgQ9#FxX0_{LVwz&d4V!Xf0LX`~(-l0ZYg}K}R}w za^VnVb8xIC*$|*ZO;|GcDF@_<5L+%)QlxRvucwzGw3SkpQlpK;e)3!5!O;3lHe!hg z&+DT^f38?MvLUE z*Z~0o;`o*5XNn8hvdv^f?a6I&6Wr|dv-v9`OAS${Vv$kO;sunNHjKSH>e^wvuV5QK}?INh_r_Vqyw3-*6-R3Dv&wZyhf zhOsjx5YYB|TP+8YL$JlB@79wo7-f@Ql6Esuv-D%AuI~ms-dg4ow>C)8Zz@skxFN+H z(4H6L_w)4^*?of-r9N+X24gSO7Oli~EckW~KnM1uZ}P(p$5fQ;4gbQC{`RxGq`B4Q zSms=KrvZwT**F*Lo==+{tuW(jIR=mDLZRU?^r!Fk(*-Tbt{NH1eJH3wj_?nZ z59Ta|4X*%{v<=tq62GDS3cT#w95_XiV`$QHar}6zGFRn+^I%2_+GV^Qo|xWBzj={< zz`GB2PDKoCP^e(PqO(5%BJJkwGTFP-tm#JTco_e6V*ZbcBSVMB=&L(b7ccHsXvNl= zJad}7VS+Sz807Ke zUtx86d(}b6QY_J=BCLH@f620wtXob4rlDGO>LcvRKZQ3e-0$dHZAjwW>p574|2U#61%%O4I#8@#4 zO%kz_pCjuPySp#_#`h^>my@I>&H7y8l37MtX{d@M!}qwVRb|I%LV9Bp#JP&9A2#sA zF8tEW+tIh-LT+h=UcFa~SF;%lUIu?Yi*i%&O(*)6VQla&hdFOMzX+^y4=d;0#oaMU z!CSdD=??Thevh1o$E?}?r}ETo(%+nUFhD?NLO?($K$Jj6E>6yNHtIIk3>MBNHcbBk z9S|0f0#W7>#tRVvF12m!4%m^ub@ToS-TJ6iacnfyZ}(qZZiBa;{c>q>+d)Sa9qJfO zpqUE~-2eW7lkDzYP0D(nFVND@T+P_C=fvgD@@Ts8<-7(t3Lgw72%d=dEsjP--XDD$ z2t7I#ix0C~>9aOTiK%+V z(X_T%k>5c-z}WxHv8mX(7c&;+I_1#vlPiRnqQ{|AI5+UG=2lG*d$m)lKDcqgJ773vT|P=l!CGvq+f2aZnEP&S%4 z(q#59L_grk8@Ub2DVr%*_7;}MY2?m2a8gDbA~!x9z|LmMP5dkYg`yKAlZLs5Q1U9| zjs`nJ=k4p;iOta}NMux2OQkn&#K}zLDqX&^by*NtMSxq#Z%f7jKb4f`hH+x3; z!rJCNpai7~MR_K5W9OaY4xJVzvU}Sh#(!K znbP?y_szen8~E8&Sw2^W(SdGdD5iMIti!@1CtP;nwn(;3e1xsQy%Rb>X!^b3+ahjr zM^eIYaJt9~Fp^;MPvPwqtaFcma;=8MEiJ@~6Z&S31nMLDUwRONvlogjB(6ryWr2_@ z;N@kfCxjmt`Z~i#m7s6BD-wjDck@U*rHG26*{55>;CNlgb_)^pz{W1Hf(wXnn$I&X z_GF6P^V@Zi_4mhd=oy0dpF1C3TITG3h%yF7eLIR-`-KKrdrmVvt_aa@|yMc>w zA)sWMEv5AfLBLSYj^Iz^V+uSL@D*r{ zL@1)DiaZ$I_kPG)id+}Gf5&jv5s zENdmoL+O|ER1j#0FVdJ@MIL8vfN2JkM$6RfO&a^9tApf_4E!96(H^{;MLWlKFXyt6 zr#pFNMFa@8;GLMzagL>a9t9xYlk5)tHx+sa^QZQeH20Pb*Hg+G#c>p9czb7@M9DKk zYP>6O^J|X;>CJeUQd!Mxu{kE_LY)+9b=6jAgQDTlCU3(fL13S8xt=v4z#UmPUA`!| z#a(UEXQv@BFDhv<@&TOSqaKBYte}Y~aIz}6iW<7Ygp2>b`vzmvSvo@BUa*-2;~7?@ zg&cRn3OU#nB{~Eoml%o|OXQ6QYu0+R7EGLe(^jISF>@!a);g<-#By1c*h#izpMv%4 z#aW?oC+o;qIJa#ZR2HNefDp=rlMGs>2n3Q=XvU6pg`qLmLc6Vy%ghn6!c?{2C|LhJ zS42AWbqMeigRa;5!4ThMo-aj^D!-`-O&L)H&PFju8~H44s9#wD>Kx?Jmy_1(LHsbJ z@;){00Nd|I*?$Dq5UHiJl$dDS=TO9&tWTT>nnetcmJG1I+%e~5fck!MJ|fW{9%KAp z9+UO%Bd?$+s3bSJ|Eie>n^zv`ZpB?zRkiyoKecbVM-FA&cd}gao7{K(kluN0<(4Tb zX8;BovVJQ{u5|DhUz+Gc6VD7AUK7tdN##SaFdIj{gRuU_x@;#|rVinX7r)1Qs0ESb^YAOHhtR=J?I{xFbgjh3IhWn|3P zZ2z=`fMGVRdE|*mG|A_%xpna`r~}H|On^`*_ZYIl%#Pqn)$$juULrz13SOT7Va|SR zQfAJS)uhXu0X9`tV=Jyh3A(d;f2b3j{_v$nj2dPjnnKJdYMm=$Yt9nVI9MRJ!o_J$ zF|@{vBw)G(CZqEyhLP2DaQx`0_85AiDJCP?w3NxBaExas4 z_DhUD=?Hd$O$4bHdhR@g90=W`+ktERmCt@j1mJyXw*N>vtCM8sUZY`0k{99=Q!p~1 z%Y5@W2|aLBoh8*ufgcXH-NU12RrutG((EcwX$KPC2a5fx0E)r|1n&u{&OML_2c>zE zlP{1{Vc5Hxkr&<|{9q3Z$#-&$002rXEmdY-M-`&Q71jgoa<(X&t^H>S0cD(11q))3 z4!}wH@f+7(zQaAslM3tN&wHDDifS#)FDVT_K%xK^aNz-LE9pk$!6;SCU%BNos0}a# z^1#8jvgVB72R=dedk&qsx67i8t^KrSS;s{#qv971iea z@jCqlN)*vSgWjHhY9GV`Nz!W+WWDSJ(*PiO49TS-7+5m|#y+{fnB9Rz=fc@|hN9*` zamo{H$-Y87Q)nSC{?Na%8Y@b{K{ixI?^J1(v3lURk4Dgwxb{xV7qyhS%Iu>SEO?$Q z6iU_AHb@Kp{iPBqm{G<$%9(Jhkca;q=9{c74iFar@2`(7NOkUjT70xT(auY{w+A4a zBth@<;*p*agAzOuMd-;*|L#Z6r}J?*a7h|E95Z_f%UQp-!3se-!X3X%j3Q6SM&DzyTyfo(pk(Lb06cAY?JQ{CY>tgh{JC~E<1%xMV=s_HRAWFe`U z`YA*1JoB8&6M_Nzud7V270{#TQ%iOtZsV}qQHKtfy!!x;R}Z^0xlV@#LNWj?^?YF- zQ6Sl)ZYT5c99~Nl`3HWK7Sj&30=l$hT~SFN{Ry=u1>tZ=K)d#jB(ed4QqBib9jFgh z*Jd8g(rmPjlqhb>@VIR?1DJQ_4TeP0Ei$4#)gaK@hI6^w!^yk?HyH(8gNG#L+E&qR zE*uqIMmy?s13gzcBh4`paWR1Z<1?*>-o2IQ+%h6USpbf%2g_V~OEtl=!lNRrE5BUI z{kb8C%-I9)VpkIw)1N$(Pcu) zELs1pX{~)RP_@1ppB^@nPa9LstBsNN#oj>u=DR;Yj>EZ-#o|qDpq+um5=ea%uFd$@ zr^;FH%(?7@Z*vTkv-HXP)n0 zFd!hz|Hs2uaI~{``rmGTQ<9$51|#aw4#Wq%&`m?tYRsilY1S+4U>L)b|&8(V>71iF4u^0>9t&+PK5z)B!bBn%aAJ)Ol<>14LlHID(nZArlir`Ztl9~^9H zsmv0pdk&LCfM}$-O+i%c9DUGU5F&$XUc3Ay5V`MV)dKI}yiNEOH`#7~gkm6+ae4_2 z@vwRAjdSes0x!bWP2Pk2ghkU_xf#7Clv($cFmaVHt2^Q{;%gHRaTV0u_45Nz*eA`JA;b~Rcm^Tvlu8;w5jw+J#BAGOer=KqD;-<^n;3_v8TmUj!g<8v zjkinCgg0S~sUt8z2JY{>-9W*bf9Qq{%6S#*`cn@T2A#gmSyhwEIV{!UTay3gzWBef zU3ZWnN!$-)*2d5G|HgLA|0}k$j^TmtXG8?A4VX`)JDvRrk)aijK!!OZimO)c=?Ql5 zA%y&sJabI(T}iuKaF@jKr0%o(P|UD-i`Obrry`FjLrs-ry?`7NDQM`xQ#ITdmzn%! z*gpn|sCiv)n=P9A)OF@DF9TKdnD{z*mKM3R8>dVpi9QMO?Sxh+2m+un{%McE2)^>z zZvPjUGFX*IpFR8#F8`yt{~xve-#ajllb0T3L>#&a*vX&l&g{^V)>)_jqPSE=?Fw=3 zfMZQhkiiiBye@IqWIv9ScK+L`lSpCg(WBJ|u z^w#a$H@7ohy?*{E5HU9%UmEWg5p|pB+!hDFw-Tse%w_-TBvik2OIRWN>2Ljh47Kz> z6R4@@nquJNei#({15)_^N|@z;Nw_Le&x(Wyb*NYBc1!UjS29h8%0qKin2_#~F0Ilu z2n&rZ`?A%pM7Co>X`OBhqn+Wz4I#%VGjm~fCPyV~cn!@EOO(Z=Ptpj1##sh?W=?kF zwHRT#GA=5jv9W)+STCQRte2EjxbzoNW1pb?+*y)8PT0b_A2C-k8-2lgb3zKohI z^8wtF!t^&kdCOEcXSHa+b<0idD>P-I6Qx6Qsoz9LoVx%9?uxhKc?U=d^mEJ$K5H#o zCAC6B67n;dj=frvCWZoP`*+62v2O6*eC5AH8V{ltxVOpEPzSs3bJ$M~P>P%8=uZ#L zE0+J!aW_ygZpk0}9h&%K%jUAz{Q`HDNalUDmz<+yqRsTLPMh#u;a(|QoI5E#(2tv}4f-(sGhG47{hqO7 zAt|WJ%f11$q8mX_aHmH9r;sa;hH?$#V;d%;OJp5H(cJ7N)16##yBOJ*EM;f97{<&9 z*(a5q#2{pBW9ewf61m}`N!b$FZb>t`M6O8L6ZfN2hSNFsn}6mz@B94D_j}&wJj?r> z_l1e@aP=wB>D@`4CG?(Px_j!zHHTrZfaazs>xkbL*3BR?BPp8pe{x zdoSMA*DdW=R9^5!nKsDY)NP@<_=NC)QMUv$5f1Lw29{N86~W4?Dd}+LdMuZs;jyu* zH_!~4@&iBR*g}jtRk|i`;VHu|JQa5kQvJx{(+uEVG{|vYvZO9-lqx@%X$yJrB-1k~ zK4d7$YD!^T9R>D7Wu856$Y>%C&qhbCu56z3&1&HH@fp=pdm7;S}Wr|y=P zkf^^VOS+Ovrm@klpZ>Vu@ZA%qf;(3P#kS-&zF&sd&Wp!{@|FtXTSO%XI08B=@?8-4B~rn z1)C$j&07`+2^ZNPX8>57M@<=4hK-bJVMaeB6vZ%E|A}u-sn@jTMxD_>x5!OVO5ch; z)7M+E7j%AkuK2x8LpQhdpOYVmJ$$Qg><9Zq>}&phy?zZSf7D)=4LK$RekkkPaY~3O?g^c9(q|w6l7rvE|7qr>tMB zCzeg7{9`pQ7^%flKaW^bt8gPlPuE0cwA=7^VkZB>I=u6>WjD_gwPW9fnM^7kPJ9lT=Yd}gThi#1-qxz?83=zIpjCkyDIB2H z-|!=<(5N|%HEHOm1PVB>6G?M3uwAHhWlOE|Fez~_s6G-)OPLu?uIn3k5i*@L9vZZ! zdu9}N(s|)VUz>T{M4=EDr-Zl2QhLzeqmB^=xl$pu^J+SB*Dt@(cMh|>1rx;hUFJe_ z(sYf|Y%B|L1&DeVRORzWuf*OU=Pvk=#68B4FK_N=@3>Rlm_aziqcL#voe;d_k+qpL zUpZBBjkM&N9(cu2~ zaS*2*13WF&U3o8wC{{b|HF&i+lh>aVgtIMN!SRE03>V}z1!JqgBLj)GW(Ma-+HLEJ zN}z&NpUh}?)N+savYrZ>LuB%?j0?N#7>qdC&ar_-%J*wN>O#%8tInJLG7^bDd9mk& zQoFkT;LhaPXQq+2<25r4}=_pbEA5Lm&}F}lCDDX$14KsascqJf*>9?4BmY^-&Og# z%Uz>}gR+r|Qd+TeRj3Z&QLoNx)&7I@a!5@Z@G6LDbs3$NCqCD~agRI|f4mXC-+ov! z@a6T>&-=+~6)GP&!LB}~)?m6=w9akAVG0(p681M2gmZ{!{fTTNdzD&ApfDK4$@rL&L0-b++m~v=7-EM=H`IEAG?_-v}L}x|ML?ZtSN`VX zR|-l+Lxe`oM}$b-9D0fakNn^;Q6JXa|Av7XRlE>lq@F}e9GLL-t1A`m6d z19EVhUCGoCx$w@Q_LsM|&D<83*3V?NGJ;fs74|n$>NZiImRF~iy4N|jG%Dw>4V(i9 z+$J2*suZBnopyn<-vytGUz-Ls=zRigq-)PwiSlz{ z zv+P>-JN}UL8hBt8IMug_JEwNqN)<)|Ip;bB;JT75e*84hlA3A&$M_KNp` z_u>=M=(hRDIb*ek-jf*#jR|bRMiA;O zGlD+GSzE|TWa>V5@(vUPcO8^Vyr6Er-^MTtO`$cs6j-dQIHesBp^+bsupX9ZcWh=0 z2q{WkZ#JPbC8au)*r@9Q1)~p7j~#eBXB?N{^C{M?g*V#6+de(?xBE#EpYML*+Fshw zPwdqHV~g0!)^(e${}$UWIKY;>K^#r&cI&d6w)@IfYm4n-45PkGS`h{po5~gzl1Ez^ zyl$C%x6%l(?Z?;}dNQv-W5&GtNla|9^85kyJ7q_Zm9gVZLo>pO84{hD)0mP2F8$?;nV*scMN{KM}WL8STLFu^~TnL!F!>i zT1l!+hd*(6$jEArOKV|mwt4I)5NLCg17vQ*#;ye1C=3Si081nAdq7u=tqsgy(-+j z)4&Q~le8CLXW!u)3hCQQ>@HhbVM3Dk!fcm--w?h5>@FQy0o;Ldc*kXJbvU=bV;hCE z7iM>H#R_vTWiQNjn!XoccY4nXKq2o1F!wtSY{dK!=6k9Nn3EVQ3P?AdeBDceTEic4w?|B85Me+g85vRv0rk;sS3; OhyXt!;Ga~{*4uwImAE?q diff --git a/PolicyInitiatives/ACN/ACN_A2_2_Critici_Mapping.xlsx b/PolicyInitiatives/ACN/ACN_A2_2_Critici_Mapping.xlsx index 3cef0ba54c0b7dd93a32f84d47e961344c0554cd..9a4b290af2b70954ed7b4de01e74e62f01763120 100644 GIT binary patch delta 10071 zcmZvCWmp}}^5?79ujLzVgJ<$$mVWiO_>b~&5#9vu7ZNyg^E!j0u`$-e%j=~^f3qng+7I2*NJ4| zSq{PwAR)QN7``_oRwgcrvhm0pdwKq(FOKN4Sh^SSG0J>IFnMvyak^;(4rhMNinmk- zBEAZ1^4zQm%CH;CgiylUwZlc%=+YDp?GHo`TnbU+VILQ2k~uYxrKF&HWifrYx|j%= zf*Il+2Dt>8K{-vC=ZrVl2AE&zU-Hd+_R&SE1 zEkL!gBH{U^a}(*N6frUsk&aju89h1A4Cdet|tC8 zy1~RQBb%t0%#gU{bo)6b;t)F^(C9Zh_o#->J>a*~LE3ag6MQ{6{=PmEX`Cb-&h(ptlc~dSFEM?$rfkfGp)q1c!*DC-Ot}X1I<7 z4fT7Z*_ieEj7Q+7S7>krF)j@!S=cc3+aj(&0{|#*i)i5Z)!K=j?eG2nUA)+Fc^FPi z=~cK_s;w5`MU4-+i>;w5Dwu^797<+&zvSp?RTta%OYngO(qnz5CrfD!-~sE+V)x%k zsE?XaMY_lr;Wg(z%$WpkIaZ8nGG*hH`I@$j1M^o;))yb}oh;;;abg+R#A+Plo$8@v zEv3;v_xO7kI+K#^IQ|fY1*uydA*D372HY)6eL~1EF4ZI2eUJ?A;fqUr-9U@tviyS> zP7^7~V#=Ay6`^f-#8{_R<;gN@QC5Il6SOHlj3GW!&>z;M&*<6?G@r8llNZuR^a**; zSUwN&21!>xmMm6;)c(}1rs4Dscl_=a%g1oJ($it5mBC=JaRcK zY5?t0IdFY4t6%+|K9&262c#&<$yLi9;+6m(wFTE;nGLxYdBPwsw?J@g?U2H(Jd)wb zbc4aJK3nT?(S(Pgyc45L=oN=!Qord)k6DoK>YrsO$Le3y`M+_kgU}U0Id+?625hcs zHd<=7WB^RhAY_w+?n`IQ^6-O<;$*;(E+m{-01}yR)$^?srB_kIQ>-^eOOu__IMp42G_HUAcTJNEg=e~~Do zQf(ZeD*Ti7I0|7$rVNdENdhwx&uQSd=g+oc#0JG41GdpqF5iH!x$)`hVQI0J+(QjU z_lQ0Aal$t{!IlRWT?*w7Fh{pB{9@xCg=uLe7N1i{C>;?nqUJC_9JLwZKjbWuu&2ru z7*Ws88cIhUOM6;bXgQYddtP|-IWh6iP%ML)hp`(c6fBYRRktewiD})kL-oi!8?(Zv zV0#D(9Wp3xqBW z@g#i|BMNcK6p_GVlIM~m`78qNHjYw3{2{;%9QQG&60mT8!G3iROJCPHP+oQxLR>DV zFmc0F4kdw2>h3Zm>~(lDWv)3qOQ=fs{RI{kdK6}JY#{jsqD1#r>G&nw)J^VIavims z2gpEkaQD1TKUacc1p8W(N$~U4V0of$daP#l6&^}?^QYaKxFMoUr%PMxDcci%c*#{7 z@QVN3kNU$^ z!$b&=bg406h^b{*9NJ@8~Drs4~p?iA|yEx zG!MY|-V_z{U5E4y;zje5nUcqdRY%SP>NaVS0y%_N)H}qP@_YYB3J_zg({^@plg8<~ zv*hC-W82~d%h1)S+15bc^eW(QSU_&rvQh9t006$TfH}}8KyiyvsT`Ogr_9%6KTlx@ zQK4`v<@rdCP`NfsB^?x{Ri%JFhQ9W`>S#2{mq83y9Nk zh>uhk?p^A1DN13jAiXHAEh2@~@EOQDo#zhxveJ9sq_nt|WY*mo7)cZP>Ka!ASbrlu zw!-u24F2*ekfyF0O1>vfQp--YBef2KDq)^~Zngy3udzCgDNj~H0|wWh%@t%HE>m>- zSFL+iP7nr>BTkB#M*;HToqP8Wz4szYoJYZ17%88apvY{CE_e(QzlB8fC1n{3 zIlx>=oq;`SZdiam+q~upfk-l6gfp3cyB+cU!EI`CJ^4i*bsczv0rdkE^|*lbHv zXo8Pe18tmpir%p+S*aSOUH7wxynC zg4~u*cJ5Ax>Naokl`)!9Gnel!9`;WSzSnIYF4ooL|SyMB|EQ3p8hRt1@_63CZ_0p^ZM?aBw z%b8O2$eE`1ivYrh&BezX0O6z143b*ypa|6@BHcgMfkkH2pSfd_iNtwf7~1aW0^!ao zSzcHk@ydjoVhd-E^0j5#2SSH`tD)iORntv2o&1yR|xMK>F`~RS3rG%9y z`qZ121LPO+MvIdg?A|(xrS5;7eGfHQ`U=g^^a5bm-Q&(Wc_%*41*bBzi0lr!SK7!; z)?2a;JhTN&qh&Qhsqvf(i2S(Rsq9W#)>Op8&|cCoi9mzqng$d+SLb7;l?x(vK}u> zTgIwbz46s@b27%=PZ)OXsp1We1_ftnd4F%SH;}vUb&bkS9*U-+|IO*!;(*7ma!>Z&Yc zQ<5g<^LaxoQml+NF^=AL>V_UET?rezu9S8}ew21hLJQkm13cx*NCqxbkhH9gkE1^! zPk*!F&GxA7uv}K4?_=N%uN+7ztSNe6mhN{LNlk0)*gUPYr4}G9-nYpgJ*8f-=*@(0 z!>~S#o#>9#O$-{LXH;u~TPxmr)(}UC1f*#wseRr!F}ZM&v)GU+QIIqT;}-hvvhRsl zZNQW9K-+8b%KabxT5|<1a(mXX)HQkl=ZtH7fb*0dU<3l9FJyGM<;-l%y<#J&VSAf` zTCOXK-$>OrhOC@)xmntiRz`Rq(LMYJkSaDa4Phbm2>vNR3QS2{GM zuty%Dn7=k$kT-stg76|Mz|vf4DGU4@D7N#q598{;^Ed=P$jjsK3#aC4Th##y-V_9W zB8C#!{c9o7+%S?Uy5DX~N7k`t`p>RX$Hif(>DP+XB}>q#|7f4L{c9k*y0<~PCQO(6 ziG53=<&{gSDn-a$9D0qrA*tdcc1Hwt@5MKKd&?+`Bme-ke;t{foIR|+I{iH`ckAof zZOGvImQB4H>KxFVli99#pG|L^qLFSd_EO5w-(_>3Zmltk-coV zc|Vfu)Ox?OGqAU-lwi5KQ7IqpU96{-SK8yD{s-(WIP>a`=qUv(l1&1Qc2)OpRokOx%V*1#Xfk(38%%MKq9ly zdyrUL%jhPvx2)w_Ny`L^fN1|@Zs!f}p$^-aJ$VSR3&N6u-nymI$uL@wT;|^vj?vHg z(MFdf=EJ3nD_B@vpuGzli&U6X)8ac4aq8i>+OfP-F;MXE@ex1IzHcIOfPrZudkS$2 zUGn4UmJ$A}@=~#^s>Q954*u%-ymS)Xe(lRhFA2}?aF-4=QF|%~-t+Tg?%>>+#xQB~ zWu;l2T#bC!@i`^E*9}NLqn8 zzB2gMQ;d=qdx0xppCgcXt1o0+PAr=L+`ITz7-iB5L*%U8EyQ;f{-dIstP*ev27#2& zePyi5dodWKUNL$qG0S=FJgu`Wq7tVu0wb;SyGu0(X4_6z-oQgs5CivX{H3_6CIT7r znfO2Npno;&ODcS~!AmH`y)8;Z2(KLU$YLl;M-wA~yNNgdr-vYhSek|qR>1v|iRy?E zQXBA&*N9DHHTB1YyM!S&kbdahlTtX|)2lWn^x+bCTm&gmnmn&wzloVj6}uMJ@ETMM z&ZqT+H|cyZ5$!EiN*j_aLT8I=Tn71Dq3e&H%;Ka*DVm>)=$MyT%`U8@zDK0#y>ahp zAl#VnA?q~T8Jgim{bK+Y8^Gq7=9!Fz^TQFAmrdBqj*@6t*|c1w1pe+{7T0maj!C4FZwc)kDWN zugf<_^LvqGlz(#&S?S!gYZ#Xmy&_dj%QH|NdeyC7Mkv--lt~RvD668R$ut~?<_mUU zx4XsCTuq5~(NZ-KCvYtIiMD-9Fwr^9w7gPQ)mM+Y_ldJc=5&LLwkc&oEDE@qJHRz+ z+<22c%V97W(2ey=c;0#b>L=*^$XiMRFWZ|LJ?Dlo_gz4)ZFuQlkD{LKWlB zrRrY5Dt;Inf@Cv_WTLkOfjbxCb9@R1;&U)D!PH?+i9CfMSG#Mi<=1izBwBtcwX*11 zCZDZ=tS^){8qfnV5-lLH1;|y*yFgEW=P3+Ivg?PvG#v^w-;U}pV%wUZ&aHd)QSuke z#!Iu*yv4UP&3atsXIewP6ZSURyyRY2r!oY@t002VzEY9R$|39Rh5ncdoxwYjS2|1` zhKjB$r;OrFh;$q^^1sRmheJfehroS@W4%>p;V>{!t>k3Ut`-9kq2M-mNV4vhi)$%g zqlEKl8y|@d%r!k;$Rdd9H&b?S`JQXDM9-N!YO8F2uFxh|brfVNxG4PFX526r81uKS zLTanr&oz!p_aigAHANDGAeGWoGMp(Y)6`IGyT~P#N>!oaFv0&WZEN&g z-!zKQDD7yFa=Fh+Erj*;3u1z);fVuAYY!$}fNfzLDfdcOg4fVEfodFT$0^9FGdPAV zsHzovR^Qa}^(UtLklAc#@CkmMSS}@UCnPFptI=9um^S#_Tzh9uHz@BhAP2#+I}e}Z zA=7T|k&x#EcC>nupLgLN5adSA-svJwzQEom^!P;L148Sc61k?k*Th8ToSEMpy)&k) zHg@-c+1hb}V^8g{vjNhZJcCx7_S@T9P>xo{($Kw1alAxVQ&(<8-1u5r(7Y%4%wHYe z9lp0O&3K^#B#G&qxWsqvKUNl6Z$4?c+7&wy)I46x*fT^%`?)umh*L9X`+|I&zEZ*nr4%F0%FQy>$j>RnIs|w zKF0?Sy#6a;S0$U|etb*Vvq{0^^u(ZQodH`~e(V;EH4x>&1mBqYcIOgtENaaH8e(~I z0BsjS7e^9pRd=#tr4WG!?Uj)s#V()0+NO6OVG>3%`?-mxMG;e>uv2b?N`o|PAl7M1 zmTTLKmqx6D2LD1zOIX{cQYcrayv>dm_;hr2(pfSkfn-3zYHDRmo)=tp+XlKDvYo7k zT}?5wa~!XY;GeXhVN>r(C2LZFS4P&;YVP?en#mWT>oBj+Fs-@GbJpyx>tI9wVQ!?_ z3rvYbpUeFqm5-k2Hep!Vwz&7a?D{&EQd>(W=vgOhbL*CWa?;wLo5Q}~#v$i8N-x}NFMXhGgD7F|o@48ZsuG*dqiV`m4aq}w`5<5si+ESzQh0b@c zcP5e=^mMZddOkk{y(q~8_Y>;M)neh8hKavGW`nFM3rZrobh_d{gxdr@0Xwy37jz8_ zy0)ycx6&&bEX&0es;Th!b*D*rx73!Io;Y&1wqg^3LuD0c;j$Wye%-;f<;u1*CTBb8 zC00pa*=NB12$VQFjr^8@7 zs$4W$_Q$2UT>qZW!3zC(L8I$c#tE2_Tc{xac)8v$Q8rU278D3z|%LoRL9WvdafHVxs%tei`s zE+bim5i-z!@*iJOE-}IgZ4Sk0JHf_fQq( z^XyJ8oUjXl-A*c>v%jDsL}!!~Y$$GSY}z2jIDvj*a`>3lSPaO$Xwi|b^TT)^$tgPz zhw;&b_$t|k8IM5%5$>fw zUR5H{9;iLB81~~uNXOViIwhg?V$;k#c0Tty#^er4d=+9aMF?@DJIAIfqGkN>1vcvw zoB+r)7~|;%SA#2Rf+Nfa52NGM?>FK+7U~pI?k!%jgsX^xBTX4*1%WKn=WQxA_{Lim z3H=8nh&ru?SP*gGoa*L{uUCS5@?dP*W9&|7WF-r-1(RS-24*(mM8NOBBu>Lp-&t-e zPpta1D0Gg`S9H`=O8fvL_0(|cKV6h47NnpY2vG#?wjAbIfLB8w%KF#wtbizeiL$a^ zAM5g9ihW?TWwymf$k~6#e=e(AdT8Zt7qWskT6T>_-zLA5ec!cNVA>eO$c|AMr?Vc1 zfJ_)H?$Z+xw=IIkAK!;lCH}KPXRW}zV_U_;6|P1#rcVE|KSz1 z9u;NJ|LM`3OUvQsnD`xXICrq00#|S`J!PB-yBa7^C_`5Z*QRXXYqBIuv#gG-i{~Us zw17{=AWJ7L3JQ-KK7E0rreA0TDcWfdi>h?N*r}8|^96-MVTnV*_SP^)V~aS>Mm;o6 z>t?7Cuw~j`VHJR|85Dth!GR>2f}9BwT!(H|g!(B4;X**5qaq0kO_u7;Pq|YRr1Mn9 zY&^d#Cm3uW@G?N3&r){pITD*WEXd81i$P4@P*>voaXG>KEiWKI#v;v2hg3EbF3@>W z%FNvMu?NEW04|eVI&lnLKij@1wn~!wz$oLSR{%;I4-zZN&4ugV~ zaL_TTTlo&{_dh>yexzd0o-rovIjfc}Z07`gZOEMD2`7wqAnZxr63jAF=@DvQns~>b z!|QO+2PAaknYR&^Cy#f?FjI}$WT8JJRM+2wiCZl3(t%E)hNp+7S$`HfUo0OZQBLCR0f9FyJb7<6GktS;osG4FFxY$<)n%!ae zk>#>hVYNQaZ*luX2k^*>COe`&_?e|CZIL#z?-H?6LZsScjqz6ks~KP5`s!cb{c|t? z@5w(SsZA+_Ex*AU%it3QQjq$h?VLTVH={e&IAGakJdYx4&{?vW zmKb-roAqWjv64jCADGo-HzDgZ@+Xbk>G{TDugZ>3aU^=ExjDeYtZ$@j$-V7Q+Y(Xx zg?0FGy`|Utg|DqupI>fvqWNblo);EbzD7@SfkGXs7{Uv^%B6&X_n=6!$;28ADUwO6 zdiFe}@?%TSaz1n)f6C&BUoIxT;@YUor+%n5cV10U=@fi6&IZ8K4cq8=bE&%e77CxF zBHbNjDlg1@F2u87q#ianMND$NqLTK0?RKp&NujMkag`f*->+e%b%S$GMUm7eX>zdlWzy$)? zomAOYjAG5l`)V`A?)yeDUN{F(E>jO(Nm?9ys;RuLPeH}M>jeeG?|p@Te4e>KCQKAm zK=m>w-N=_Ycgj!Wr1}XJ`2mfxX3MVw-d~3IH`jzp!GTHsU^IyHPONGA-l|oUEd}B3 zM+B~ATsyJK1cx|7u-|4QELs;`CvV_jJGcJvEqSw_sMl`ju&MNK2w?&5mY;aIpST)8 zT|-R^&jxYRe9n#S=03V6l5X zk-)O-3${AyEHS8%cuYQPi{%#-4y?bL6J4Bynv^pw=4xGs8HLYjBQOu+X3z`-%q}#D zd@mO+Pzq2+hR%+JYR297Bt#{FLZiKy>dR=SgKu)pNnPw0o3BCJKbtf7reqK+k!_gs z4T*=3my$4E+|kl6fhkN0PUbAP&x!wC>5#3w+X*cSdxKs=e3qYTphR|#cz-gAJPYjl z2Q}BUh3|diAs&)FD7(trnuJT@#*ph{5W#c2WdCQ!BU#u9ARfH^m*WNxexd}ak15%9QDVZa6;a*< zWeRcDTAKqIf!DAwsJz%o{bL0h(@g|!(yih-S+M-6z_}H( zhcBX&adF70fl2&n`|t2Qf%GIwq%?#->QtC4`Zaq^1Se}|9{W8inCThvagQ<-Zmvz8 zHs&7QSjT@@EA%RIhubN5o9Lt*zW<4L96|e?9x$7SiUE39kLo(_L(#TK zMpnN^9-Ngf8r?#m)a1bfWG&=krW0&~rp?|V?Vn4wo%f;UHpKYI9WA_pR=^o^wnPK; z=X=qzVb`7TB47lO$OJ9}X@^J*V8V?#j>LH9$D_A+1?b@9$rAVaK1thS@C8G&;XQ)q zc4uMkYHIl;;|ZPKS&l%x+b8ti(!*G`QDe*lf`r|E}&gW;2Fd1Kf^)#D{eqPgD=hFBkLAj!}>wra4K98%M6mD`Vb@ zpD#4mC@!Y~>iMLv^ihuTy#(FdSqDy_*M|d~zwjp#R!FRT;>gY^kjLRsz&> z%6#k=>Ye||C|EPzq&mA;fF)ZEC9P#7x5D0Li2K8_uP1#N!+vMj;**Ex%l-U;W!t4R z0uc~3K50~5RlK~y)krVw`|xR1X0|xjFFrB&f^H}k{r%I`DW*QyWKzQpd?@B|?BBt0 z-}L5)($0m>^1?jKLl>LlD?k=$!C$M{g%N2-hc47QGbpE2GJog%A|xXq^O>%G1Gl^S zhN(EqHQUrKMu<1`4us8}y603Js_NF_)7bDPOFCLjKOz8`1Z}1lh%siZi%B-I;=Cye z^f-LJF>i8NPLF59C~y+&y*OC!X5U$1dZx)c(+lH-R(Q_Oq1GtN>VV$&JpEt={EB5E z{4OOp{mJT9Y7_yAAis0P5O%$Xaicc|q1jH8e)3)SCF6NJ$3>JtQNIKEjJU!#eS4o$ zH+nksHJYoRFchz={vdt#-tX063Q}kId;2OSdf;C>`~vX4qy>5-T#qYTjl4!E*Qq<3 z*`Sxc^XS9-?c!#J`>zb|xan3wRlfh=iZB2b1t@4%!2hqT3+!aikNlqkA#k-lJMw=D zT)@Zn+$8^v^1nrie_w21VFy;y{{Y_r0O7xRe+eU0aFD|XXlz{YpaUK0{|y5CNA!^d zjN(W^`k#ax@HW=}c}3BJWgNw!n^?f1j=XID{x-kO?!V>gS^p`=aW*o3!xq^8d2oUq zoN!719pK(}DAE7a4CvzkkA5Nn^EqLX{yQAJefP2cOK6W1Z0tls`tLms0{~$Dmw-MG a_?HtdF5Fv5&|icD4WRobLc#y{?SBE0G}_(( delta 24214 zcmZ6z19T-pyDq$A+nCt4t%+^hws-7ItVuG##I`23ZQJ&Qf98DW-2a}t*XrJTRljLsdv+G=-x1Ff$cvU zNo{U6mvM?8w>%oj~xJPTRZ~D?~ zMFnAJf$n`-+CC3E=Rc%0tHOI><04XP%PE5lhChso732n>avrZWn> zb!PD*#k<1(mbPvZv2qXARKud{t6My!Lym$Fx%<9Yb5sTqV(1E%l|1TGtY4Fi1g~~G z&M|)?bR-oP&x`YtDTv1R?59u~scqzhkkAz<$FjdVoFl++w8>chPQ(a047k~s6DxJNx7#oB^2~A_fhhkVk&!bbGt5L9(vKJHx@*~- zYcl>#OjVGpXoRaZpm>>-2m6p3jD>LM=*{cXY})Uw)S-(c7!>j^#G$3YpG87N1et@T zoANXU;L%@W54G&zuX2^5`yk~-v@Y^ye9@x(B5HOBw-WT*TX9qgK^GB zJh?oc_&-`GK0X$)^D!Jy{=TtL(*zEDA3bkMeFrmM*g~ILeP^GQJGFPtO7db|zfnv- zQYQVAc9=0pd-11?S-*PS2@C*$13ZBkIGfqJFf#l*6XoCicW+;T04wGuq`{bx0o#AJ zc|+F!tW*g`xUNM*LqH_F0Om~HIoU=+$QB+i9-8@P!5pY!IBYc0jQ!Wv+l$#t9E{o^D*G|vfR16YU1nqp4#g}S z(^!~5Pr!;wQ_>4Z8@MA}l`F24a!?7~<#KJsNSRswGrYBJ*S7ZI@4@FjCMFt{BoP?| z{@-{r;uBps9U)8R1>FSSku@hmB~x~+A>jp>_yrcl0t$@8irk_ZXAN_;sJc@Pnu0)V zH^gO+>26dxgInKifs4t*syyPE=a6H`*Dg&YvL#GC9+pstX9nWkVnIAo0ji2rv2xgaJDgaaIpE8OciQ&4!^mOKm2Fkq53_drPivaVoKMr=EwkDf(`S=|_3P6PB=mST|=O-8ppU#d^y< z+5V_2D!Y;w)>X;E<+W;|EgqAK5Xtv!XCjPQ_1<+B#o`NtS4M!p=#8w}iT;n~rt;vjW?&X2C1EooOMd6^b*bNNP}S_Cfr7-MrR=*rr4GQf4Sk3vqfrgCKeR;7IbAU z-YihV8A0UNb`P=^Ye+IVG-(AH20{YcVJ!H!%l8+x34~>*5#gQHsE-X+;k+6lgKgRv zGNfTq4^h+7hkRVpW#N$ysRG)_TzZR%5?(2(jf`ge(agFb3JQ80vPr56nmLh7no`!Z zT7*>XHk(qzY0#3Uu)RZsYRwPhu$#ue^4GxqmbQ=JeW|KlOA(^)7DGpb!LS0+hKUcc z=(v0a6dLiXI=AqVklYxr0*){l_njRt!@UUyT#$9^(=~dGti8)}@Vtn>`p?4L}sK3gfpWpbO$Z5NxSMf$+T z4SpNgPQ7EurtZwNxau{dyI&Y};D7%PLnb+0APt+t#MJJUxhTpFKQqELw_t{N`}LRYz9-605OHV|^X29566h0l zeNuH9d%I-v+2^qp&cM5oqQi_nD``_Ch-zy;Po(+u3k{^`Oedq9VkB{_3RDdKr}q;e zYdgdht#`hYyGOo}Z-*|ULPLl2($;0YN^GB5a!B!7c)8m163;u2p3w(e?qR$mJ0c4^ zWrpq>SW*uYI`US51r_1f&CwJb0Kf&T1CnH6@j;gXNk7<@f$hn1GW|@*VOK$)#QXMh z?rs<>u8bt-YP6mRC-=d2iHR9%uU7~dYkInEX}jc1towdBsG zkm`T(Yg6_e{@zW1SxAmzmbqb)U4i`N_|v)CE>upX+uL>$4}lS#xFojm8@a@W36^vz z5FusO>o-+MClEDz)<-Q+a?g|gtrl`ho^7Qne*G#6!@_F|;%IEOiVhD!L7os^lgETO z{)K}t;9yikDDksj$#8$S{rx@h@g-n?+{Y0QCSNi}YX&)e0bj0-3?Y=bM~o%Jm@A1p z%v35&;pj;dY`UMhND)3oEBzsnX^)5^U2sq8NZaLU3y-b7qg5{v(&iw~lbjHpbin?;m%tzy4aOTOj}dZ2C!F@PxpmwI7-P*rI*-Mz-uQtnex~aym z&pQZCi>n3#f7g8u2>8dp}Np~C~Fm+>_w8&yQ;szZzymntm{i{>Smp@7xq zGPXA0wB8A2QrO@yO0pcDM6wg4@Or6<(J6;M)BvhK!)CUlrRo}OxM!T`V{(7M9T5~L?94_dJ@iJi zwB6QCfjsQe>CpwVX^9KJAx&9?hM--RiAW@K>rbEX$S`M2y+FQ@56pDpkPdNdiPN{B z8HzBUzPS8;sM2``%>fl!^%o8|T^|X4COhRBl7Vep73`4VgoJZ`@Z{}$t^~gR`mk0c zmTs!v;PiVV*>7?-#1}2pE0>MFlh#D!hh6l?_E4>|5$Z;xUU|2jHaTY_qlMEr;DYzX zg@CD$z%$y=b{C6z-sGwDN3uDV#Kn&HnhNm5Ke9S3cETq=K{LFR+>!OB?pMMU_eUR8 zpuRwD`5hxc-mkXhiMCq;e`4}$q$I>siNYhLVC&-Z>yPpCKc}p$ zovJks%n$?eVK7_SmDK%R4k5IRD-=_(dyVE}gtoQjEt@ogMz~ zk84jkTR9)>x?8}nRzsjyw@p&>=iWo*%hAx>Sh%2Ir|bW|k>t9R zE=huvF5JzIocD~N*n3weHJ*ac-nAwAkWsP|5%UNaUnCL`X(K=M52mvUH0~rnE?97(0T|0vK@sWNvge0Ztz<3_?} zpyt4nxa{7cQPVUyE{WK~3J+u=HT=3xM>}bt-J6j%9jUR6ZD?#aPRF-ZrH8uK8_TN>lVWfy19{yung|L|u{d5}0G4Awr^?dAlVE$D# zX(ZfZZqg<*&l#M`fT12#(wa2-Tw?wQ$$vn@G;xC#JMa5H9iyS zApkMTh>0pJVaZ?XGjyh5@^*FW8>xe?yR6^dZl-b2P@u3;*>)~AWU$B~iNks#Jn8%T z|GA!#a~R|J5~$59=|&zA3ra9UvlVltpGu4{7Lft*p#n(Pby*mOxWBI<0!Sx$?T#?GG5S zBadQ+ISIgadCrBgVv3wWK@Qo74RPiGlz9P-q-G< z5v=T70Y=*ZE+}e#4XAD@$$v2?m>SAr?*PIA!M527zGB|yD=^E)Mk7aD#z}huqCgsA zV*@6|An~Je6TgTzA?XHT*4_M$9bjY#hyZ|1N+|xra1sRoOM8O(FJTg)lh#i22mn1= zf7Tz8?o}G?y8_5@?Qu}c*wZ#;!S(Qk@~jhpt}67_n^A`ZT&vDGQl0U8T-JQ%0Vjl$HED|e9U*j zqXNDL&#u8BS-^XJ3#-Nx&VPl4`W03S4oz#N7&8UP`B29Hx)3D{YMDV*bjGwZzTg)I zf(;270Iuj=WemL5`(h)#N;Keqi}w%yLN-&gQE$-Qu%3cb3uJ!D?Y>D?!^$u-UdYsLLh=l?kvaO4@ix4mPPcm z4gC0Mn9A42>KW++)^YE#1t!pQj(f`OhvH&QWQ>cn*F?1(_1iNAXg+=of*4OzT^#8Y+TN2_6 zT)L{`wizp&0E3d=xBrr#_;L{RMM;}-&jQ_Zi-Z}mCJ;nf*h>9?2%|wZdF~;0+Zxk% z9lRE~0#KUER_+`Rt4%TNb7y7B_LDi7j zFRcsl-w^xu;$IH@bN+ud1HWAV%Yf077j34Ws=1u&0$P%l zxk74)${_#lkoZZkkAnU&<~?2i2lP^FuOPh2OK@&p~aS?>Anz#>w%4jm9D3OD$O+u$||MBsHh~v*#5}<3ZJe3 zOP{`g^Xt&ir*CjNa$|up`8@WwYvg64Fw$jaLrh$7tc^>ecJzqf)E&btb1?9=X`5uC zNK$`ZwPQlX^bg|Y<42gT?SV*~F$7Iz6aPZSWp3~+xLh(jcBIvC=#_%e~l92p~O zLewGD*fJznW3+^3yDY53vF>)rnz1cW?S$MuDC8Y%eUK|U}N zB7_(V3}#}3oTU}}at@E@&fgREt--91!tL@3h9ZfFn+>sd8e8(}n(oqx)pq#-9M66F zpX%}mx#q^Z))z4ESsAwIvlGbwRyFE#(ZJQ$xmc+Qb+yDVXx7ApD@D+ev|ARzB2<5YJ(R@d;76d8>%&yWYl>g33FWZ$ zyp-l6^CZ2!{n@Z2^$d1@E7H;br z7s}2{Zb@S-BX1Ty_6s8e%h}`_AA{ZwdlBV%yPm>c>QXve`)4-L(EOH7bdLx=cBE$6 zD|3kayqzAr+9_`B7B?yE=}L0~KE>P;KO~R&2A$X8t|cV9Idq%-(n&|(WcE5R@- zx{<}pUQ>v(!xqG`zL={~z7z0gtB|D$=eB3xqx^^aVmzPOzDx97b6RcnXPx_Crj zY#^%p<`-Ibv$$M3Ko+iJA$;DyZ`3m*?ji;W76l}xRdQOx0E#< z{0GYD3-o{ZsQeF$VOGoVv618dgXfE{JOsQ>xBu|ZA!03-1)Ozznm`D_^hWQ zWU{sA*w}xctqEmf`wzL48(uol9OnehW_@}Vea)m+%OcpgOG&?$mVaF@wtO92l3PEK z9=cTDfFOYS1T;@*;Cju34DVM>s2mOe_?jI3s|mTddfA$}{Hq9^tB={QaiMP@F?|X- zRv)8`ncyWxwfqPG&5)mI5o&G_Tgkd6j&~*TVEPnzlJ=*voN=GE<3PP4_j0`y4Ikfh zl}`L_pUuQme4{1?vy@UAx_Nj%*9LE%%r)gYQ82?-3_3~CPWrMu&`Ejp|7t{0f5i_Ng9%3AUe(WySL5=E_q`{Aid zG>%8d#`h9>(@Co~dNwZ%*2RLC>G2t1oa~m$Nm?ino^%-aeUBW)wZH{JwB%XgD&16{ zO!j#VmjU5WiMrsa<@>0-FnufxBG_Q)f#{k7+NQBHn+c=mjp4?iO0qq>!kLtMyXZXO zYT}2T@!u(W(B^7}X-H$q38bMi&iH>)3skgNbvW(w*DvzztcFn&BlYP9{pj2u8juzO znZ_Z>*c@4x;N;GF23vs$}RP8oGIz1_eSPTyS*XpZV8#+pG}F&(4I^d>SU$ z#Z=~XFiLT^M#A05y)#{V8O7t)K((!@)KUi9WFHx(RxW>pleOPJXg}FrHIX*d6RhL{+N$9+#1r zPy&LxR6O)H-=z8x}GMZ4;_cH zy3nWswq1B>@B3DhL3bhX#1Zaq8Ex5I4S^)y+STj&cVX7Is}9wlCo=5dDd474d)Y;T zj+5H3qbhe{7lj5nlrG*lpCdN48Y5l{P&byoNC|Ue&xi_Lo>BP_KRu7Ohr>8mbQ0!( z_G!Rzjb<~{@%#h2blp3)^x`qKc==5RjdEuK@|iW@cg}Ky7L5liVXoudkzT15KaCZW znjz#X#?GuCF@gS!twKKIe!paYXR`eWy5)%q9!Z`ETDj*z7-f@JpBuU5pr1o|x(|J- zri$6yp$Olf3&o0(;iCREXAsw+NXFEKCgxct=Gkh7_4%)q4a`#zhR-Jh0GP|aYOepC zTb4%7W~M5x&Q|so|4A{u4SP}z=T4+}56f|J39u6Kk55@!MoTMO=w%$Z*$NjFY>E2U z_&KdQoiU2WnQo00qA8SfHPC(Px-_q7zeHby1@8Ag`vhFAy@%!YRH3Kz2 zHQ>XF!-rezwfzK5^xXcP#YNI0>lB$0?!d^~okf?=Yl@)vq1hQxWRUpJ^r@VUjPn(T z&ga*zSGuu9g3e6S96_IE{jGLB{)t`>a~xC3lUS+iG_5vmNSn8opE>57v}j^0ye5ld z16IWgxLFLrTwaHvClp%1kBYSmzB>-7H(+=y_uQ82YOsZYZ|Z=7Z_~#vo!nx%>yBO) z(7o+rw_fF==_So2DYX3AJT`6lW7w=MqL24#eSDYf5DJ$;<#RkGBLf4om(ADv*1w+R z*Sq|C1`SXku0B)T@u&kP)%xeRG$^Yop{Q^zPd~x%P22p2I?^8m8xwXvZ$LKA+9OUp-S=S(OuspZZ^A>yR5zAZtci z`n0K5O;m?rt>+JV*u>}e*KPjAAbMIRTU>3D5yUlx=rDTJ~LE(DT#Q;FI_2=M#cl&{5h^M`Z8= zPcA-=U*Ps3WG1yjq=t;enIPmc4Bsq;%#C!ch6C`ZW1~XwIw<~m0F*ITW`|%z>{kLr zXo3?; z>%|?{OspDnF&Az%jp@rDbMDu%oR6n2syiH{L7q^$kZ3u~tzAo#OfN*6{2E~WpYRF) zmx)XNqmEtSLV?!64}&2lIfBpTh_q*zE`2_v!#nIjO0F<}?IIe~(xI)QaMZ% zm@T8dPaO=RMpFL+2s{D@D&ROfdR87HyqFrNWs4sP({tyi4Q61V+G|4Nl;S-tl~x5y z%!GCD#N5{U_Bw>hPsZ~>ph)d3K`_2YB#dJufT6<@bNlRF7I0WsAgl@>u-1@Fe zCIBl`-#=~(f_9TaKYcAggO_C`5-J$1AmE+U0IR{MvUIQHfTJ9l7Ey@V7S zMy?R#T+TH?fB}vyStYtYmn_y|SlG$!;C7D_RK#Vl-Td}zkFa^91-gnqC`+^n1#T@} zz4e*-O_n1jwoAff9*{T^YL5(@4g40(7tJ2LdtFGYNFRz3j;&tV7rwrk!w57Ib%Y*R za~4wNIvb#f=BrkyU=LA)-lqpx?6;b)2f>dHwu0b*NJO7;ySADlzc0Yaf;je}U2kDA zcwhv6oOQiV8GOD^6{aN#vUNna7M^s+=9%RZ*ar`o%bA7`0dwpUK?T4!dBOsv=%**P z$e*Q<_O2bV1xx$5z%lLOB~Cw1mB30Oj1~b(04>Zjj31B}dazrjKdUO5DF~MCM)1Ew zUt(6`3%F2lBp7fAQ9BA!*I%P_ka}h_{%~543_C4G@rTp>-dNk>*h@-8)3X{oe->RB zA=|=oHgACK31rv*vk z<=b#G8fdY0o#SFb+Zrb8-!_vkN|)^}N1oB#*9b!N^A*qg^NXheCTnSq3xQr(H*jaG zBHv**gN!u6^iXC&eTDTPA$G~xhW(!H0`d|0u=aVc7=bTcpHxtYpp7vgGrE8V@SAx{ zS%kxF8sPOb1Lmd|uKlsX0)jMNkcSK@vGj`9+OzIR>*0qsAdVIsP8SB#bWaW}$|(`> zf`hajEgXZP4^xs@^gSP4Ym^IX5_x)uemo~s(i#b)!H=qasOokr(g!EwF#Bk92(cIDI{Vsz4-7jL+2s3{7N8NG3k@)cVDGy(qNcgS=ABeq~SfBLs zkHEUdwoG_uexzPxBa(7L(q~BT+vi+kc(ELnSU?Ih;$+JdsL zO+-%509sYO?wfmkfQ80$>a9#Uzqp=)4A7s_9mD`WU(*d;m||D>F1AHclT=$^p@Q5^ z`Xpl8ywXz#k}f)>&t*pl9TfNAw7Ou(aV`-%^4*OVNERO21GT||v1pv63emZa;nFS; zOkW=QtC};SansA<3c0A75KgoCjMZjCJtB?D*bwl7sRR9uF}ej(v1b%@6-z>r6xb>> z(fzRN#u1*A7d^06oH3rJoc#j4((ucHI$GFek%suj^)&J9WC+sXB` z{++xj(}N5hsB$eB!eKQC#gqzna-eSAo}QZDA{t<5bDpfVi`GF{GtAE2E0E+PHr6r% zxa97o!@foNmy7ER5RRiHLbND}${zrtmQ;IID4uz~YUp>;@x1`@3Gw^BqgWLF$`CgR zV88)J(nV0%*+r4W`3>5`Zc$49TVDnrsbXK4Q>V4+l|D>YJ5RNXX-AX9wihUNnsh*c zCCw+!hqVcQOOINk!LK*z3Ry_rL!ye7BkoE73!9b(SDKG{j%16|$FL$sp*~JQf5lp7 zeSg4T)&p$A*4ZrZ!RzJ$2UftyUT=Cebt^ip9bgjW$1A;GKud&IWoS!2FS*L~f1~CP zc#eD?m&k9Dqu$b0l^)B*{nm}e?I<@P60TG1flv+(#a|fJUs;b{>#`qj#aqjoNu{q* zOSuUEiFuDNENF?|eiq=%x0(CfnTp99kzX_o0TigElD41ER^|Ss4y>W2L~(932hEf& zMlMK3jrGlJ`QWA!@y8E>jfdZqQ1fgXzVK2T)<{%5YeNh7)Bh zt^ZUh+Hm@zzH)NLrCYcUk)a z&)u+#6`4B=6ZXvM1p0Dwzm{#_&9@g1>9PWi%Z-2QM&2U+y6RYzMAl#bh9?41eUy)SPI>38WC z-VahiO9b-|$JJ=<8Q0YxL5r8{XK~G+AL%xi+VvmUHce(fI)Ty}n>uACXUg8ya_A1J z3Uw6q@@zla%(vqteg|%yHNAXTPRG3od#n?<$_e&6JXT0eoC+NNnIjf3q)VzxBzsI*ucy>*d0ql=b0*)w$ql97)W%XL_)C`CwjJZ-w3nXB3ei zSGJk2v^YjuJO=J*kzyxpNu$TKIGLrE@|=wKr8w?1!IY655N^x(Q<0r4{5FFke)bdz z$i=4m!3-)R>w}*A{kjPa90a~~Exu0=Vq=#or2yQB8!U^En$a|rNzM0nmRMwA5NJ?5 z5?C-17>FYi9}GZwRBgqzwFpR_|C~Fl2NJA70X|~N>k3qo`rCMgv|7e+x!ylFLwn9hQ(c(K_*A$FyV(STee z_t#Zi7_}0~yrK*GMCFd7t@VG>M0I};M$XE=$4oCaWZu6q9TdyFHGUPZ#suMw*rcTK zzJ5MM)B)nhGeqh_fX*_2OqiA}go@BB>}Cafz&Fw6W8nUYAIC_K$7{1Qas(@CMX-h* zS+ug{Vua3=S(MXs$L&1=nFb?i)8{@Lz6fZ9sd`yGPa5A5riK-!J|a&+bD69Lwhd#P z&`RbNO1A%zOT|uugm@qhk%WoX{rHwxB@+ET1_pRZr>P>jL(d7vRDyW|hr$O5^T3P2 zW6VE_5dgop8)~~|lUu8qmD>P{*m$Eq zdjL?=kdXdv`mJ8fwy@XqXok1To<^Iy7`DaTRd+CGs`@Sp13`=-@H9oBLrptqNkJpP zGI6weKAz3o6W4iIw@PF*v{|<_<`Q`BWdJoKh+c2(g54W|)0H#=m=?=3hjMEwNC+?etek893WNu+kYBqD zOr3s@_<*-?KWnFe%N`+zdW!EnDZyTk|Fg^#9Faak4jpVhS!*{yLQ5Pm`VmdnYAcr&i1L}vrU_@57)*$qg)qo9z7Mg8IbuC0_B4)}- z6AZmKPdauedi%y-A~4INtB35f>=B>i)`kH4V2!$>H5SX1Vf#4XrA9q850L_i!^`|} zFDS0YAORydu2}^u&A;yiJWkS@69=f-X*w^MEKB$?VoFd3m2sDpGi)->clsPHbL@#i z5%Eots8T;S0GXUMmn0V+A)7M&(nn?h0&Z@BmqfN9g4O6?ksytO`4Lpdg&pmN^z)fyvQH zGJo|S=WzbdhR5|*NAkyn!e#9sr%4D#QOa$h;NLXGPI0aHkX?z{88d(_Q?y*D5U!!7-WmLC*s= zr)RzULqtffticNT<0JIC8mt?2I8CcklZu|n1r|3u7O>nKnmvsgRpAj|*A;n_c+L0Z z>@v4c00S?s=+Y^?09xre$(y$qkETEtacS*V$Z}ysCN%3Uiax-GRm%rNtQSciL@+7{ z9({SHvC$P5F;z@~C@L^pUIXn3{S8OvP@>sRD{7F9IsS?&2AxU^6G$RY7S$lR3CTq;b>_BWIbdp!GN*g3eMrAQp?l#>E6P9tSXnF zi%;cB19}qYAzXfyID{a4cKI(ww1;SA*bv{j%4P0`BPDSuYY>w0oL zkp^=u))5Ncrf#$Mo%4ei!d?&*%4ZB};ZdPkC&*Y+s<%-qBbjFBJwB|rxh$iQGFBrc zp-a>Pl9~jd3>giw0i;LJPNH&=TqeEh3d1Z8(UsBTP>WiMF6B16;wjDD(AJ5#!4{xl^;-B1T@1g0PIZJU9+9mT zY)8UnoHj8#xjQzsS$b(Q!}?&DM0!$MH|M=hF?bLNrR7;d2Vkm$VZ@fKc%gry=+&?F z2({T(JP_0>Buhv6)VLk3B=1g}S?^nc{>vpI{Ub`ekmQ^?oi#w}4X-j_JzQoS&TcJ= zEZP0Iunk41dojAeCSo^H#M~$pMuRj>x%I@p`195-X~caTHeyEyty46(+SQ*@H)^bT zRT~U=PiquVqeGr~Ui&HB3MU(R@jIJYw~LA7M>}gO$Gj=2%-Ru^0}MUC%z>$zHqRWu z@~%Ysie?1XW{)OaO&D~t^A6&!C7-rMoj|hiB8fx9Xb--rm&!SE77>hncy?GcQ(sAT z^wB^I5sO41^(M0A6ZSndbdiGN`zDSpiYW|`W!Z8(?QQAPAbF1?pQ2MVfTc z1X}0OIQ(LCQS>M}#% zD`gW7W&=%cMon4M0Y(FKi>|d`oFIup?E0Dy~v^cwvH+PX8d3 zhT3LFrMv@7YSib|-?3t9u5;bY`^9miDt|+|GS+Si`KqqS=bU z4)Mlnr`FdT@t#1JioXrw@nSb*IU{*IRxGCKug%2**}GUB{O~ENdPtg@2^fwXx7m|g z&neJc<9Vdrkz8&0JP9btQLE~FmP|tuVY5|kyk(b?@|Nd_9D<|D!#*^SO30ryQ+Ijs zi`jKA>yZZc9R4l1W#m@C73*Q3xXmLvsp#`gM&2g{lVz&}`f1U=BZ&ZAr=TOrj8<4yBc<<->YsCitz=JMHc z_i`Fd?=~ylkXa&e*a)R=A439AFRKUqGA9EN@5E|~AYG`pqxV|Q=9~wh7h2cxyKQ=u zu>~@^-<54>lpVRfuqy$TvmTft9#}QAU<7QOaS-~vb#(b)D49F6FDF5ifWnHV~E>MS4U_36fNeV8gN zsG}ymZY>qdJesac@61_k^ds=r7L)k5Z~B1jxoDnn@0%C6eQG!GRz0(&T~xuut961j z+Y=2b7J=O8=XVRcDY)i9)MgGF4dB@kKV+XH%EYbc*oY7Bt;r>Xm{K3v~(cmT7~3 zl?Vfx#Mv<~6T(agUwE%hH}kxAzp2tB(0X9dsa=8r4ayN9dmY0X13$kx$Uh?8m6U+Z zNeQwXMIbB!%Z~SV*N4c~0})Du)6guXUo>7k932V5XU=m9Pn$~2|03y-DK>SA&yI+l zp0C&!lZ7QBPVThRr(!+j<6`w`*ehPbER4^QohH_fC#IDys2YdeaoILeQ`B#${4JPO zL}|Z`m$Zw!+Z)8?aVpJt4sKZ|Wr$-~TVE6EzYw1Q-hX@C{nZiRSMKhzCs}x_h}r;j zV(5&8+yCH|kHed;pBP;1#L!6<8*AJJw-pqAvZYh|HHx5Y!Ms|P6|bl^g`(4YII8Cu zX8wlf;wRq*R_98zB|N0fgH%ryA0~bR^JTSZHam zwW6AlK$5~m)tFzjW`p6dZ`5L_ytz{n;{mw_zX{-jq9S*Sg z>QFGmV6PGBY{dh=Y053eHX}iwSth+aW8s$6Tq)@HTVF6~qtup(k?{OIXq}(luuKZ2 z4Q;xRO$e&W zqQX%oQ^gI5$@S?ESbRdg!%yTRoR`g&M8f`c@v5oLQVa31d@|Gv@7Zt`w!cz~Mh| z8*#44-g~jOcMNMVT*x=(5yanRCL;&#z<_{aN8_{HzooU&NwK)|{KJEBNeDw)W35HV z^U6x76iS!_IlRi)_CV|9+ZsVZd!PUT_yWDnHj)3TPO1e=p=c(}cL43AM6)6v3Ch;AZ7ibvjgl{K?z+k~3x;|Gal_Rx5Xt?&l?dtx-za)1U z;2}Y!fdf9s6*dEbV|6IDtzKCqM1%AL==6q14NNdaF`Sqc>WF&t=8RXZ zM*_Cf)p4W((B-b+Z>_LrnB;9V6+m3DW@@-njfNqGvz7I3rs=S0NiAQp%)Q1*>_4t& z$Mbg2q1rgcRJ<1O_qsS-MYp=0&wLVRD|94yngSIrg&t8m`*LUwK0(zcjtN0?BX|LG z4tC}dZQ`3O<-3 z&V@S{o4=uwPU(|_eEc#2zD!Uff@Xe!>)?FjsT7X-n8YEr&1MPtN|LsBP!x;trpM?^ zsiZG8Ez{8=ey}dc5q1k0pSUAzp!Z!DH^T5eZ2D$P>+XE74Vs^Y3sK{AxtX>Q5GFrV z`M}h;36MewCRfKs`6O@t7q~**!+l&i;|vxSM^ zylL1F?E4K-FmiT|1SI*_YOajUYIofnom@3L-t{`qP3ck+l_15daY&fN8>3cxZU^`Q ztfRXL4y=q(P2~=9fAH%4H{f_oh$|}dvU^&n zITZ#?8;)>)bmDcrhT~s^uxgCyL+!lSC#0U+L&6T-z3ke1=$eCFZ|6tj*UMd;!{q4= z#1Kh0Ftai?aB>_IT)QP?2IbO`%(dvoPGznEQcHCU zpdgqtFJ(eiBCQXbXW`}odh{`w+u;!$RuYZ!5FG9z*k2t~cDCI(HJj^zNUrgY>m%;~ zOK0azE~#w4DXn1WHjQ8HL&hgVg~)_!Tt~?^k*>e0VlYWsegP5S6nKhN(za3E3qXFG zGBr2lh*)WY{4ro4X{U`up*l5(c8WbKC5y#Vv|% z96i>OrlE?ms|CUefo=T}bdN^kb>0=b!hnMwp0$==6rU6v>QY@F^_SC8dxsV+VC31$ z4FgP8F_2;keBw}GD);BKPPIt-@hHA>(t)vxpO3GOb#Bu652hufU9EI3@GxucQ zH5|HnD61K|yms>L$uSd%>KYqg?J@Cm$_-hgYDK1GA}Phf>+u>gx9{_!w(s7Viz9lL zeR=3DMYw>x2Kut{?JnQEh|P}T`6vYkPBlqzUfm`+XVdb@{>o18(`s9PKUxj#ynnX8 zKn&Vb?ei3W6_ryZV2^K%GpY#A<$dI>yqUggln4~Oa1DR%+VKo4tq68!T;=v{V68x~ z^&4mR7~kms#udLnpt7g87TLKpj`|+otoN{aYnub~POIUxxyn50ikEP)siVYEz)jyI z%0d9!aWFaRbhYn^Famc?N1Ber)9x*7W+6(dkJrS7e(kYq30mD-M(v{azkc=JlQs9 zZ?XOW1x6LBU+wT_xP0i8+(`9+d6;Gw4p9NKM%WdOg1_c{Fl zg-)T4!PjH%r~5k#1C@lE)PGk-T5bok>-zjoynY^4b|m7@6oN zV*^L3)K5wH_8*~?qY1~{qc7G;(7bn65FLNbhxA7S~DgJ#R;t8|6V@6tVBK`i-aXot{ zH};Qcgt`M{JWJ;8bt7a)UWOaOM#1G#qHl#MM&etSiML-DR-^gHva7j2kS)DwFj#)Rs{Hu$G{#2r@T-Hp9!tvH zvpZ~X7-GepbDwDogr@q(0zqm0?xcPgqCd8o&*Qvqlpw96HGm32*Vs=3FO<5r2oQLL zYoH*O=sv&LMEg*q|HOO?{@Dc%0tV-LUxLFYUdk?y|&C~9^b=%ul3@|VyV}h_$@Dh6;wzzUT-yZ?6e=2_n62uJp(;mmw z4k(Jvcs{Mg*{uF$UIMOr{Vd7GlUE_2CnwrP;t&YwU+{}Nx1lTi#q`-4VuC!?zAg)L z*UpM~Vk$3U%*u$fXH1_M>wM7o;+`5Yd2b3{j0xraGXTuilMQy8Yd5_c_zRNhc+T*A z3J~0OvEn#=c8Qj}%Iy6$z+hqBhQnc^cE3w~PU{oLlkP;w z(g@u<%xgZGSQ#h)@H=UW9v_&j=a9*S9(F}}AxLzo7sJdUCPz~vT&60gvi1&0OYg_s z9(G?fo%?u|O+5TvS!Cz&9I$od+a7+FDYpeNHLF<|ZiQ{o!xS(2`^Z{Tw$CAseYm%q zhk0DQ7>XOAc{Yr*ek!Lb+w;_P+X2ZPmmyn6E`OLqW(CftP{aA!K^ti2z4JChNAib7 zdHh0IddUMNC|;~XQM5%P{eEIA;=b3{pjznnYl`Ekl-sDChqlo)XVTh0?nL?m+j_d8 zNutJ0tQX~G`JiRFj>o|O$wpII!j*H3lj(jvu8vEh^oL3`ext9x^`*}R`-CaKzz3Pv z&t#lk0ID`qEX((sY9?&4t7sp5oBQUY(JG$WcV`r~y6iA$9+RWt$AcbGBE5NbfZWbC_&T{hmPppzb) z4T$Eqe0W^_Sr2r!$Jdk~Ds%7w>Tau8zrHbC^pa5!TI4E}Nuz{b4|E1Qlljq$H^)Wx zTNHcOEtK!&iSs2S0Vty&67AP5i2)V2M{Km^u#4Z~Y%)Ux`=R7HYVwHp?};!lz`wT>zy zLU6#bd=CJ-D^{01YsS5)h7X^ooHE|;R)~FUIuMieWh)_Lyf$pS{|L05_psq z!+e`a^_Z9M|5wO$K*RNY>mUe*5H)&l(aY#EB+*5Q9uqbC=q=iWiQZyH?+iiI=)IR9 zL>DcD5CjR)>l^akFXi{%``=l2tvhR-@0@$~J^MR*pL6dAWBgLESUHT#S&0#BvA6u7 z7hp2oju^)(B45Y`X-4rqLdC*C#v327nB5c|^XW?}qBfr~l|?LY$!aO~)T-htA! zmbo;8_si0tP34W@RwQBghB9?r&El4yn7mv13PN;X$*x=l5B?;^^mw?*&$%VMj_&Qf zpbO$sMK6>p1Dadt`)0YbtM7$zOcZelLs1qbs&ElPSyaYhh7S<<4da*&Fh?aerw;Hh zGF8ysEi*xbS6iySGRrDw4k?P+n2fF-9-H!7kNoWId3;}Sj#}Jk_vLVxdgyXC3FdVw zTk`!l&ku88KT=FMPSrL)h$ZUzqMVVBW(qa2x$|>O`RhgZm1A`@vmsf6wZ>v)Bb~Fi z7lGfN+CeETKLMu`2+(^A%Nyez>2C;+C9ILKzv|Rhqr)#o(j0zw@=yU3jn~9BRs_y)4nUKjC8tPwQfBQ z%T2^{g?d7CvkxJJSgA_8tP;c_Z?I;@BC6CB^r3gVP9wOlWx?$dgUrMZ25k=>@XBM5 zf9Ym0MmPCH?eyg>#<>lUbyT9WUu^p=-}Xb%8Gi?HmqC#yNovPz-ZTy7?J8g!%BRH2#>BgTM)c`CM{Y@bUPM7Cy=IrQMFb9WM<(o+GfO zAj|yq^YU}N%c+pFR{30%AAlO^GMCaO?AOfPTwEO>dJsEal!HO|e@dG$Ut`atkC9=3 zZWuxwW<+nDH@BW+w;kxe*|X@En|rWc>Cpy+lqnu;J(khXDhlVSgQtp$&O%!lIF!c1 zAxeY$VO{S2_Kdbc9l;$*!Kk-HPRr--PZKLv@P#HYEtv|8C`1t7ji8H1f@xQ`RugI* z9GhDeQxT#q&?&e?BP&%-TSsaCu)+*9bLV12Ib$e@OI{b}BLo!D#NzAaTScw9PmFP% zVkq9d>%3U9qFY!eRyELnK&SI)Ce3IN+ye#=CYQJ1*{ULshDm!JDeYZ=N!m*44~25N zKI{L$yT_Bv=pi~4khS6Dk0CsmOj#m$up(%?P8B40khkR{TNG-oW(QsIX2OR)53j%+ zOhCG&JCH9qbsP8c02v-4xNvsxQti4G311{e4D_0de|$-O#4c}!gOgNYItl_P*KV0QMl*%YD z-bD^2{YZjYen|0tvXE?U@eB)UESK6lmU=s+mWg{1uqEJR5k|*#jv-G9;N|x5^K163 z=7I0}2Uta1xc!Kc$OPGE6tpyO8*RQZ*y*hE!9EoSNe(o7DFcm7~w> z;um>)0!KG*p9We)Wu;W$cqVRAZP`7+(d&!ffFFAafW@-K{PI~+V=}qd z@D;}PHakj+C|Ib&iS+(PuaAYEJE7i(@^_%A7v7adS=6PxNCk~o%^xy!Tkzp05}}G= zRuAiMiU{fLd&C{6l~JAhm+x_I2V2($Xn97{D$Y8bMl<`pot%Vj)A+|O7xGZvKX5$R zQ>K>H{I2U-7<9vZ1#&C!aJgDVKkOCt`2OTejGUU3P>c!s$Mgn4WkJNlJTPu!;spVnW%h+oH#~;Y`y#*9CPq%gt1d?h{c? zy^nm`n@+k74^rEQHc-cp2U5h{V(=skEU*L?^L@Psw=Yq6?oQ;G;2=T5PfohFe-lY_ z{%VmuFH~MaH_}DHwJbB$*KQkUN5gTDj{wfyHyJB3&|Skmz(831yeAK*)5zamV)D+T z4p>k;j$`7^QcyzQ1DjXomSURtVpc@m(o+~}!v3K_8ZR1eKs%KgzXneMWqD6eH9Pr= zaZM?sO%1qhGP}fgebL$SHSs^2!@JoRy~ZMlmEmZ1L@~XpN&?3FTqD-BeXUO%3%c@{ z*;4Jk7wZt)Zpqa@iz7m`+XN=K5j-&}sS?o4z|ghUH!9oemDa@yUn(F8j7{7&+Ww+O z2mQ>&IehGV0v&Ss7HZ|9-W9s)tWLm5fBr?(i(^r9p4-L3CuYEg+FeO&A%6xtEpSac>W>e5WE7+ebXGxV-$}$(WyJ3E6Bt0h3A6IJ&tPpH z@hf@D4ijkBtchwe!Zju0C}Mj_2j7xfJ!G>In`Uz=CxT`L=(v3)k+TM5En^g8Ij=Lp ze46|hm7NS^!zo8i>8zJ6$I-8|_vPGL64t`HSRxTdOC!T{H6R_b)(0hgMZXAS0vOzY z*+1V7z9rRP&OLsgYZ3>f<)Jb^v3ZTiH;P8BCWPubkMnF&e-Bp8)ND*@pUO&!iP`)} zT7mNJ^LJ1-ao_BQ^D!Y1=Xb-DNPNqWZg9<*)_YMjp7BxKrq4rcK?4rJasKkAwb`<) z`Y(b+`709&=2-SesX1DhFquQGrOyxQ(tL*Cb+m<2knKfUiy=v3bXjkW>Htbck7gG& z$DM`Ld+VyovT7ds0}ZH-)wX;%Ntx|dTe%aKK6acCpv6~y3e}VX8X(}ZY(r!TQ!nF zp5l&MadY)0>)5RY;MpQ$O=B`Ud$72;y3Ly?o;uXh_^rF$y)IlD;a+7DV8WNWg-D=5 z76$ZaQ)@`NKp8W4F*$cMUU1l}t3p*9t%Pu$RbRN9iHW&z6)l2m|DtQjT)QE_!fX0j zK9D=2$^cA#1DQX&6Am?M-o$o()$~%OpST#L?;Z4*QypF!>Ry4n1!vpb(g{~rNujFb z=F^a?Tjx6Hl)TQA|BWlTfSHn4d-WrW;(h3l?Pf2`?Htz-Q=H{wjwq7GKA-k$^s3aT zno*3bf(H%hb6h|ncU~fzZNNNnFzvERZuoIaUlR1#+2SO-WtJ(Zy$gqY(h3Q(jD@%p z(cj2StLlqF*l&k?G;gb_z0s@wk&Pc>hG^&A)G%hd*s1KI_aA1#o-D~?qIm)J~$5B>TSt63#_smu?62J)*FjDm>Lfln1!iw|> zBAaTFkZGsD-9g2CNqgd(9GdU(y@y(}6~!6?`{Izw9ECADdVX9y-O1B4*xh}hg(Zl- zNYbqeW|4_?PII|=sds3>I=KW9nYhp|=LDo7UfwE!aC9(+hK|IT9yAgQALwX8xe2Vi zgIp@%#jT(Y^Hi@-(JvuieYI9wk3SG6F1xS7#wsTryR0%J@{FkT;c#-01&B<)$w}(@WL z0D(LaPJ2AXPjqS6%def}_y|J%qoPI(m*HR)|+5lMzU6g7Y+nv-Whv?O8r5;1RugwD!zuN-dyN*NhJ@kgG-$pV@ zPL*!80HxUxEjBF%ndd?GORep55e4lAouiI++8&tJWKT3oe-l$M?!Us81 zzL8VxV0@vInCh;xSNR;lwG%5AJduMUSc$e$(3 zSMsSZsqZ;WjZ>rsCNSm0gyrijcd*ATB_;|zT%W_*HQSIG=mZ-~Ez074IAd~qnPTcn z&pvDm^qEu|jC3*HySsi53U8)P3l88me7xNiIjIp3&wH895?S{gv0&C4DV%AkHt0?c%yRQW0S-HWlOP|7c#2lT(^sFIli$3S%xBqCOt=*?1BE&XLg=u+n!AWLre0Hi)Y{$&R~L*O6+ZfLlm#@<(hC4#z zWLMB;KLci+;;72BZf8S73P=ZfsdC5J^um*u-u}_9Ui)QT5K8rSg&*oT6g9~H|lYD8l|1IHeyRk$=s>e2?OCP z?7a;v+VsF96dN!tBYvp{iSaQp!-|2Y ziVUapv<@uQs`E-n`IV}#r3Y3S39b&?5G6_+G{t^ekH*_H6O21;R-M=5gPQx`?fH2egM{` z*kkN$+Mp+4%$lb@Sz~DJLY1q4V3+lyWcK5IGPOHg8~iv&=Q(qC+l#gmrydCnX$iAO zM0wH4W8D4nZJdlGJhCZ`Bio-%V54CQsgihlD< z>Y`YIXmNdyDyDTeu!EHAIRtcI^7@_wJ>4y* zQwkkbzWo^}hu1_Yuc%_yucu@^@AoQ?3`;^ucAi%_*gJ6?U(h=Y3#g5ci$s3x8E!q= z-Ft)4WoqVN8D_QM4+wT|vhj1Q){OVu3DwqMq)NO$^2FAi7^|O@CE}@oI)RQ-l6+cG z!!*%eb&2#{H$UM_UqS6js<+@4G&ipt_-Tu3#{vy)FE<+UlqhSiUG~$hm2WDc;dVbl zOk44SENvghdCSy9`kj=XVP36o3|B@GB%mH^G)h_E-##e#mk&lD2Eu0eNCJ&mtQ?eg zGT@n>6y=<*^e=C(^04b_a+R?#a4hX^QmG-VIquCy)~5WJ>yVN^T@%<1_aH?n>A|cX z4$0~}j(ix!N<$3BuNEx(ZNh$VG9wokUza&;isUQzmhwjp707h@@DUoiiZ3rc$yof@Bh8lZ&4&epdbSQs?AH2G&Z%%?Me zZ|=>UL=XCeIUTCeuSI+nv?%J!9pO#2{m$mv-+pwBZ=3w@~!w3IGAB&d0FY`-nRgQ`! z&9WksLM0Jlb?p(}#)C|Kq%{}@kBfCIdK)%eK2rapoNJfn0=jinh}%)DD=6PoWy7O; zDq|;>E=YXLw>5V+En^!%u{2bASLCVWJkZ=DV$ms7!35aY9gI$r)8H$Xo z$H**WyKhy=9tiTy5N2reeIrH0`)6HzEaEw!t^MM9{-e-yk&KKL|416c|Ffsz>Z?y* zyk8p8%T@|a$KePQcGOMzrgp1G1E&d}b=cnL9VyFc+^0P6x97X}cx7j3rC2igHR6@1 zp}B2e_|ZnRwziNfFQKC98mm>JS>vP+MFW3wsy_j!R%^AXfR8vjZ{LGf@W-JViA%=X%Lr z42l&d&_+R>xcfiUkc z$C$F!(|Em`oq2KZg{Bp@e5?#|ped+tt_up0Bz+74P7$w>ZU$Iq_}ILST?^-7MQ*~= zQ_*vE2lda6@$SOp>PrR}bZ@^Yk8mV;Dg0C>q(d8&=SsV9-K?C^?q2ww$n`Tl6?%2U zaE$O0;l=$W%8RHF5v2N4 z;S)7s{BtZL&_ubZf2mkr264Y16!-{V03{+LjAYC%P&MGBVt&T zj{0wrieCk=SP=j*5c;$d;-Q!@^*=kem_NlVewCY4Mr4Rlvg2O+UpB{39(DUyNz_%v zL&PVsJJkPd^`P91=#K()>IimmCeD9$E>JTF;U5K(G*SAe|Kpt|j*f^dQ4+2{7u0_* zucv+OujO?_rYI@@pTY3&fJKwP0arwDiQ@h3R#n^*~(saA!Q4p6vj5Tn5=^mG7*(zD`d$Yq3mS|$uh|@ z7?BWzv5aLb&vlP?pU?Yye1FI9A9$V)Mu+>l&+EL-<#leCD+V;Q>@YeQ0}KW`1-xeCI`>r#WRm|9y@(I zpN#wE-Cr|tfNf~pRjye3tva68VW-wSG#%NQ@s^Jc*?1uCy_G&>h<31M77HS=?gg6qpLd;U7XLCF|QN8%wI~w_@0q@I@TdoyPYyFzEG7dd_AH? zKydd!-IpG*T)RtFUoTpk)@W4b9dUQ%mVJGlln@qk>!Q^6Q{Ibj-3oXLLkH?2)RYpx zIR@Q6^?C2kxXJ~~KbQ*{_@wxoBxcr=VA;KyU& z>0#i#|kKChIa zW7TUtVL=mIgF?}<8+lqiZMPRjQa>cNyG<6N-n=+MHh)}Tb!a)}Juz4;gVR6DRrIQM zN$q1A1-WzAzg2z@cOgwqnL@4cV-R8#4?XdS)Q5*C#2d*bA8?^qRDQ`h-} zFF)3YZ;W0tqEEk7Y|S;jbup$z{%O+Q1mj~Fm#+*l0+@?uZ%e1hJhHT(7p=Nl9&mO5 zQIdD){rySxE++MFd0(PyY()JUZ#aGT_?i>>k;~{%$1VLF2GT(*n}m}I$|pP*{oj9B z++gqBSZ4{gAAJ|#^=svccu+VmyWOVS*;+3f$>f1tONqV22lC0a!odMIkADhdplk5n zI{N?RQkFNzKTH94vZI5+n1CEnZj$~;Z`WH$q$?B_v(0W8gO!h9E!ht@lc`Uk!<;BpOVMjAJ%QAH*l5tY4ka=Nw*@u zuxKA;dvNwcb;fJFMXpEq3HQ9y2=N0cuTNrUaP0$dqE=Tc`c z$fw%+I8nsY`*K3XlhJIh`0nAM3Yb@$tB0S;Y44Z(Dm9!}du!mgk$N+39NYXGY)3dl zM-E=3x0b8Da<%i>d1_}QU+}98`?z=op+TM>()zCQlk`}0`sl^ZE{ zYa{bA?A0{K+Q+_ec8Cte_`Ux?EfBX9AGLF^Rh}(Yx`gpsIJ`3c6PhXGZtxEu6;fux zxaTw{8SB+zU)pH*ilewfcQ&p5RgU)sGbWDjQr>}&s=F3+ElkVIy`?Qn9xUr>xFQX; zOnQqmC;T!(UAxYIOCWjY3}{!5i8)|Di*7NwVn6-pj0k7UjGPXAL_chLVR-%1Y5Mf; zW!|1o23s)3wI+qBmBtK>&IDZB5fMFk%(O)N?`sN;WsBcF-%X7=Dd)t!Ga*vrTd834)cf3}MAWUR`BpjgMsKVR5`{Puuhi1CJL=!MDE8{| zr$OOQW98aS(k58cV%3BdQNs2ULWhM_=VoOe{H@fyrQa#@1>~Y)ZT|nI1*h(_&wg<6|RGN z%8d75y))lWiET7#kr5jaLZ>qR~H?BwYT--fu{er$t22G%^8tFPJ(2B9S1A^0Z||4J9m72Bq=|n zAv8^WihDdP#T>aPwsw*qKb@*b&tmSzGF(?M>>lWT;-O`;mrF|G+xkEe`oU*cu2)?B z@@%JuIm0(lOWkv-fI5d*YIwrSThZ_dU;kA}-bwjaZf1+eY}s zyA-&##vZtD&Y35l(|N-J`|@Ds$)U1ierNJ&rI*ayZAL}4J2V903QNlKhdx=$vU=ZT zx@69g>n1vDRQe;9xdncUFZ9NWQ3fJ>EP_qb-9OFn%?zyUH={x>Rm@q9m1#pUj_V3n z)_da^-akH63{(9%zz1+S#F~?$?%D(%C)oRcQ6%$KpMSSl$mYgnRf#3)7{t zr`sE!4%y!PNq=*LdM?gjO3C)v43jO&mi6a@lO^T`N{76hbK7qr=zAx#lIVV(`8;GN zoAK<#g%OK8qUIdVKc|gDSnqsE>yBjEY9G>QxNaR;*ias6^0~29$6W2Tt7z5Eqwb|I zGGq3N%>z(W@vFtNK=(2$Z`iv09V+$>lgsu51c+OVAJALyfHyrBQKeJ7y45Ph% zHD7U8lel-!O2+V}QPar5$#jD|G|bi3;p=LOFV1k?-IfHN=E4B)KsWjm0bvVEpDZ1uY9L^$8OJgZ>I!r8?v*~0Dj#ay3I|V zDSI%us8Y#F?secU>*m2ls|3tz&(D-8m6h-W?nLi==p`m5zW=00CK?-!-B08RR&By81$z=1MZvX+0wB^mQ-Tw$US} z;ZUl}FNVavR`BM6$1+%l)+6e7=w4;d(!5e$nQ1axUOoKe;JGS@gj(|Tskn_9jW;=M zvG9sB$gd*&Yj-bZ*GkiapVTj|_>^41hNND@M(7*HamhKGaZ%>dCnvE_=>pe+QS~RTWVnvTOrcsc2cc> zxV2>`^Gr`l2Ah3=>ts=Ly-wG09#p(2T_6cpdV_>#6qLYwW3#TN)vm6+@sU0AjOEXX z*Ec5_?iAIzM!olE%&T*?IQ09CsdPre?)eF~92Fg{bC=%aY-^Z0-OF6ASB{*~Fnu?F zcqU=WB;U_=D*<~RZq|K7?r~447wz}4_bdTRAB6i$zV{g9N2!LYe91E5>bf$?z{stm ze&_PN(mNVVnak-RRE8^griPNiEPw9FzRl%wp>U8FYtB?z$j>q3G1>d zd$MN=_n+tK_(uo7x}(LE*|*HuBO9l`w$_*QCS51%P|E987P$Q50N*OdJ*(#N5UMbfz9;4JkovX9`gcjgNpHUO z=6!R_^SU32$>OP-eSvw-p%V4y1*7a#o~ctwuuyPf(@I3%k+=r7XBt!VCS3BW(ZijQ zwnLqC-)-ez;YB-6W?X$;N4lGzNc&xv+C`8`E+Jr50{NAu?&>Pvnd=)Z4W|Y2O%Wx* z?Q_sGG+a*|lg(2%x6BamW=7+?{FkMX*zBwMb);wilY+Qfj~I~D@`&WF7MI=|t3bjd zTakl#Pxg0No4L_L4-qisd=eEBXL%w~zlAhBkYmJpMPPr?pWYfXn82!fhFuYLqfg@H zVf}v6=3K_J>?fM0di-w%S%%mJ0nfKAYnm^&;)T2$aUOM4e_(Zm_nuY90 zQpYIfk@;Njb4*IvbG_jC6vh#7!cL^Tr(J$^)zy~Z-GD39N5ni@ zt%SkC=K7(=(Y7-IQa|WClodMv|6b3s0OyYh9Q2aj|(mj1GebAIZC%6 z#<6buwz}JHx`f+AC_1m+L-U#7tHleROuZ3#M@ND@67&M|CxEZ;fujSyhu%H8|HkJe z;J=td!Q^E1=05LCfOqXa%Hi(6r#zMb`lI(yRR9L!wFnMHd7H~s@FvlQ9REDqid z8%unXP-p6u(ZEyd0c;1b_Z%abdbKxM?HyC>0$7lCxMdBMu4}SWi;?;9sZ(n z_5({z?O@L+J$I091>=~-+l4yQyMV-!tj)AzArX9P&oAG~^5=D1I@K#5;=rO3IH&($ zUG;2j^su#p%^%0Yy1R;mzv17OKl>>fyv?6l)_RS%=In*X0)yk1>`%5) zIrU?UOdo@5*j3KwxvW-Ram90t$7n^AmhAHnp=Pck9y8|qB|WYtX-qwlDT zg?0X)15Sub28gUkM>2)EpJ=!mhu2>NtT%1Q7PfJ@Dl^V`HA@s=CiB`jR0W4yiDHL; zR$WyI*$rsKdY%HTgU=IXoi3A#f4m+rMOS)l>#Kx_^-lu%L9asM2{=*qXzXcV?9WT~ z+-)V_Cn>LQi5Nc`vm)~q=1PWgS{hp(D%3f9pwge|2F_RXS|(xCVRgNM-)L^cKx-37 z`ucs$*|2AnuPKfIh?2^Xpr^KZzDz^b#mcYz^S4h0oO{Q>ef|F0^HgPPAjW*@dfIPa z&ODo5ua6=P#Fr*Ma29z~`s9FR$xr1Cw+BpNYf*0-iAmNAZ&-J>*Ji|N=WSRjoB7>r zsK(Y(&(!2pSso3$`-Q*uPPExu>|$Qh4p?!UMIPD%O{hOqle2WH^v99=*WT&3Y@ICl zZgk8ZBCj?0g}Tt<8qfU8Q5zP^!}Om-ufK`e`POHt-OlvM=vZd(7k;oXxw<=b`7JJweQ1d1(h zy55o=W;K8-6!%n{U1u#4VPnAEwV$1|RxsALdfa_R3FGJ@C9^9J14? zle_%eqw>$+*&6hN%@&h-KHS=I7dV!M5&P82aZ~(VwyS*YxnbLj`VoR9`u$|F7@O%B zxl*qd=gF8-FRj5bjm7}3Mf>ixLpaW#XG`>3$YL%w(=Il(1{Gd_AF;-gkBXmL2{JDm z-}*8***tSuw|H9pt-snY2@t?=Tc8R0aPBH41hsX4k3xt6$po+e2Jq2@(i&{_i#9K& zH7{nsbyY|QF%(X6j6W^7I=dUWJhU8B>a)+mfkBBp;*j4ZOz901npAJIwfal8K`KSLppL21u0d8;-N0n>y><>xdX%%44 z<3H^E0PMNCQqK(@Rh)WjTGfD=^ZTS~3qBDe)fX#n*g8~vde|smX?I>^#r!R<+b-^R zlh>$3?{kaEk7>Pr58aRO-X|R69+xfAze~nddx*^6lPku(@#+-Q#F@!!iv=;bIRxTS z9cK9+q1*$6`)Oj@))001V*ejJ)N`3Njc?QT8LRRdH5&YItHKMsKeSQfG7ZUun;m_w zc+BALKO(D6aGuh)52ioZFt^)$T$T36&cQ}ei#H#4f^DkU{EA!e*2sF;to0U*nFjI= z1K%D^he0yK;oI&i-JFi0aD5U}BKh%~6l5E`6Nf!1obm2+#tjZdc`R|Jbb;ki;rr8& zMn-p4i*W~)EMn!s21;-{g2Vu{wH5on-Yoz!!QfE+IwgJ?hkNOOOjJ4l{qE!%B+oxt z7B$!h&Jj#u?~fh$7h^6qRR)u-X1sO7brPD~;Mj9V(ASEAK*^9mZT6J`y^N#0?C!S6 zZT#U(KVcE*pwx#V@5#4uwuBJQOh#4O%Cen~fI#xLdY8Vl%?GsIwNR8d% zQ&fo`)-{|r9Ct%<;(GXdV~+2-+(}E_zaz6Tk5JJKN{G{wgkjFf0W-Q4ZTRGSMWOUW z^D|RPNnYZTsCdMri!IK-Z)@XjKl~XnQlam7i5PRUPoKVAFj>C&isfORczKDr_rW4X zads9rqU>vbVq{zAuF?`yE3SGq)W#MBHqrF8uGLj8X0H(oUTUixN1_BU#E-%n$|6Ok zQ<9RCGImSo3a{5C1i;AJ`yK6JW@I+YK+D02^N2Uz4Z%LQmjfPi{*kkNmOWtvciA-@ zIDNd~%$Tl2tud_%;PfpSx2`9gjWHf}u1%Czb^W|?cO@D&p-$9>du1>b7vdx(g{YRc zH|-yoEsd|8aD}#J1j2pNP1?=xvXE zgJ>;@0S8`WYZB7BBFp)PE0=(fY*xVvj@cSFiDR7wU36wPxBETLobh0z8a8gLz2rxe`=x2*VB)6EvMy$0I5)T& z{&0l1(IT@oSZ4ZLCBeDnwA3wn(G|qaRMIp4+iw%)ZD*af-&!1mBl0#lfOM*&VJIUj zLzbSNbA0YWSDc=pMBHnCb#IuJu*>#cA&QOZ3IL9lQY&8aqxYs+<0E6#UN8v9s1L74 z!#L_}$KA3S_r((cl#s*VyvY?WZ$itum@KbaTh13!m&|{B5+i$>TCUsKVOU7Z(<;Q= z(b)96LjD)E;iS?nX|XRAL`T@DmxP>)<^-}lx_Pa)PGI%~qu?4m28`Qu4xz-qMONaE!Z*nyO> zNrC!7Gp43(F!S+MoU?K_e=)o%kbOqGkzHi$C3W( z$4JIb>k%8vE)H;avqZ6T1hTJO-xU+Grn*QUA67U9Mr@jIClO@6taNXl?W}^-?<-oH5ES{PLw1p4;%@D(h2+$+-pw;@IOQ({fSM+5PNPsk#Dv5E&Lk z;b8FPOJqNl?BG&nhnMN6gzH~qu>fBI(m*0Khc#LFRQWL+HHncVLi(3ayQ6EKJjAIk zk#K{U@d}=z%d~7-FcGZKaSBttFCtMjQhlnMQJ2qYHSQ))vP=S&2rP{sWIKRN)q|cQ zEI%`~%2ps1bdHf0Jz~(^RW$;!-FkrSja2PyLw2eOfj-M#@?12Da7d4=&nMHxPL;8@ zz}ECeCH$qCYv515YnMxDm~4$FR0H+N02~Ms(W}O3NT!KLRy4sZ#^(qX65_E4&kKw) zj3|hEU9u5;f^fC{6N=mcBWe|e!x6z`$ev--*eD85O9A>|&2SY?=NYX~VZlQ+&$_yl@@v(`It5_LELdpZ?eQ}q# z{3C8)4I4o=XBLfM$a%{%V#@t8p5a_VhvZX7J&9OD}`AVOgw83{16+!(Kg$I~gFJ|9&B9D%SV=uu^w9ZJ%JH*s1|RsT9$^S$s+ zhT2|nM9|bRqoRFsuZ#pd2F$WUKgt9$)DLQUwj=z`7nvV!5l_ATkNiqa25%C8atgVFTV@1j=e`m-}lcsCvBR&Fz#?%TvWiRqTu}ge1KDmM$kY ze4xJA1ky_I%?N3VoEpk5j;KBq+_9)h*9ORN#V6;6{WAOs@BrCpMo8kScw`~-fC^eZ z=XLOV5+eJ?1v%65{2SvNltsR=|6NoSr>D2qfA#efKSbR4s!vfYB2k5U`12MI6%m32 z_3b|j=23I4dY!TrB^d@}1sB=K5%$^iq~=_smQ1dDLF)yJZ%B07AB3?Jcud91iX zs_n6q=ljdEjem+2kof|6EOdKzF?93Iongqt-xH|02hp-0ziiFvjp!wkii`vnpiMpc zPwgnA&`-?H-FsPktW_5E33!VUW3RV7A7gGv(BZglAj#&tkBXl}k`$~Laz;H!0Y5Gy zIgd9}ylTgZrcXFGawCW$EgF#>JmJ-{5Y5O`MQG7&h%+~Nl!^$zgD`$R%6|2Zow8#B zrP1RF+zZ|TP3F1|Egs}_-*iUZh+7OY;1E3_o(>PH7aqy?^#DzMxQ(evtuN!~vn*2r z#-$EgycFL8Yc^`q;0dUjvWtOuUkVoZ$ipEgNqgh;GN@Wq+ zaNK(It2PP{4)zrXoE>*aR{V2_2Lzm*8-MbQF;$(M^Z2gER%N07)*pn@Pezw){*hS9 z07jrVC!=cl;TZ`dTUnAD&eNyX5Y&Wf2+~j%0s(3K5;tU0t7U7K69Jq9(F`OKN6Bm7 zpX<~p4B|(ZJ2{)L^|=JnE@h3b!a8(1(})jbqAl1ITaf|glh?es60LI9y78-p+5(tr z_n$YGaW`BdYq~S`Y%axtsI=H39_y~4@_ywKF6pvM_8I{x>F01K7KD1FHEJN%KMCty zd1ds|Yx!I5@AUYH=`O)RPhFb(=jJ!3efQqVvwc}{7iNwa8$=+^7deS#uL%VLdt+^! zmDiW6T+G)VDgId&tWwx}m5~@w{PPj2iiSz7WUAs-QT&gj@4$WaU~RZ4S&$G>4SYWC zenmhc!WOW}RVrYOv&S(!S}-2PWjg%oM;r3vgE2a}3DUtA(oo(bo>#Uf zig<5GtvCXdA{f@Jga{7OgnN$iBa`Kuxe?8VI=xK_LPf#{$9;huhX5UroyF?AN!LK)Pd48jk zxo?qyAb|iI(v#SmW|7wMCZ(VMO@(H`dfpAMc1X0kJAEefB^0*oMj+s}4^oGV`ITUM z>ODkMhI8eY%#`j0Tjx*>Afw+)V+c-c8ip*5YW`Rss-o(&)6^8E27G9Wj2yIptxXbo zikbtx9_>0MoBO~#@Ov}6Lcoo98bSJ}N0zw~s$a`l#fmIA(Y$k7kemVKGo@eu@}WIdbVUS?3+mF|1QNUy-1wNXg{N@I@m0#{Sv!*JAfrT3|krRa%Wj>cB>xlqz^ z*%t~;Xd)Fz8fp6S7z7h}9<6q(e$^O>yV!S0k>Y1L6h8x6g;F)`7W)=)-1@}x>anp6 z7rVX>nG8nUqZiZY21fr1;S32aYreW0Kn+%PuZxNKau}V1{I%r2ba>+FMj&FsDmc6)}M_cKEbnB|$WJ(eArhmp(ysTQHW*P%vSW^m| zqObmmHedz3Z9Y*{eP@rdkz?&&<2pkv!dP80qQ6&IEws=gj(JRZUi|Opn3%>Ga1@TJ zX0VB!w?0U@8`J*^UR!HC+l#3w#<~*d*h|s_k(x?LMQ8u2&V)q~VM=R0@-A4?BRbH_ zfPRW%mN$|Am?faD=g@+5I-ebCKEetl>i9*Jk}8e;6*os%Vyj$`m`6+hV2t&I?Fj3> z5H>uvdg4gLnvf^U!q>JIV>;*7E_s#L+mro*OnDYL=nu4Y_s@sgt!JP2*1vAZ)HtJ% zd1Ng>oy#jXw))zS$$AaG(UpKKCZ>1ueY=f_acj$;XgpGr>n#B-GhsworFVKZBZ)g! z;oyUfg~wDz8pU#-C#Jg_m@)}P}P`SWa-uu%Mas-Y)D7MC?WEG z_nZBG*s6qxvM3LG*qp)@HgV=P$b+AKZ#?uFZ-_JsV(=)*ok&OIk-Ai_Ox$Jd`F)p_ z*=Ahw(-6zl+UjDRYNkr)?v6Lz)7R!qrv(Co4= ze=vl6dMEEYO-Gc{okp6D<0Xk`Qa3i1c;TRwYN(t6WdSHK*3hz`a9l#mwvq)KQAP6E zdjW{Ib*aHYMpk+U3#G`Qau5Q>KcYv&6R&Oa;3LVnld&b3bp{7cB^t)z*pL!ZUT;Y4 zAoPluAnN{Gvvy2xo83mOW7N^88K+aj;on!Bdd$kzv86l1AB&DXh^Z($)`JpZ1di9( zC8a-HwP-9>tTflW68$Qh&ius=s29v>;EUO(05DbCes=?yjr*l%6NiDco6J!nwZf90+MI4|Zcb>FY) z60gWw1DDIEf;NhDQ3Xrt_m|*r{j(&6!8r$*DwalS1(@m#RkVL!9(}6p_}2B_{o)%c zFRi>&7itf%95{!Ej1fc-$XaQN?Y{gIK~fmdl+xyF2!t}~6KMb!jNqO-gAM}j{}k4G zEP%wb%MMx|ci~?{vZB#MBe)mvxsa;TCzLo9%wL_&;NsXK_BDu-(*Z^xz}h-kuMMgQ zw%{1DW>4F6i4(%#{sEUKtjaRrCb{k30GBxYFK-^6Hv+kAQhym zlWU)yF(6BSh-C-)N!&kjJv_F`ZOt1VnAVEgk?CV{w`=`s+~SVV-4fY&4dPSpk@E#u zBY*rSP1w2dDB0pY+%60N7IO)H3FHVH9+4(7oh#gk*rYf4k`wu)LW-*X`Z`c%QJeox zR8PbXuAe*qNh>N)1reF*2qDH<#lKJuLfUwJdL+qT?!HU5^q8aZ%TpAn-WMVS)lp2k zGz)VG=TM7F`Jmo%CuJvlQDEoD|0Z&`7b0TU&C}fm6-AJQZpZyYWR5s$Q)ylSdM%8^ z-|w_QnO~^`E2rp^63hZ5&sWor3+coyZoPjCHmdtoU7_Roaot@1C;%)R_76}xA5VNM z$iDVD-WfInZ5ve-{B{u`wzB#!)w%5_j)`Q0|w-oY9aDQVYnl>NCe^`l6J;YqArKoEk((BXZ$|pD+>uYQ!c9=m0 zgWAjrbtZ4giA|(@)KQiNeJbV9YyMG^t^2+jB+yq%#~V*)r8##0YaqJe!2MX7Y4J?S@mXnu(zmF?m*eye@b!(1gfu3QK{e1ju2F=#71zhSl?3$!q*g}# z^%l)@0YDJP*EF{!vMZy}febke*})~)Z&i0OzV zc8X@XJb^+oRHC621F+pSCyT(_8b?=2V;noK=k$M#vG{AP06rFzTTvz0?BD`yRA8F+ zx&0jAKeh@*3DYCyxq5r^e=^5qo&*)iUZZ48|DwPf-x>&`ED3@y5xV}!j?d0t2Qo2F z4^I1CE<&`2B!j@W$rcg=(}anYva~^gE7C-FQEb}7FbYebjo>H3DNME z*NKPD;epSn=CJtpWd{owP81m>q6)CIRTl^e*NFiiSC08*{nwGR_&xhjf7<@Y&Svx@ z8bR9@bs;c)p%$u)aj#Wh?9e@mZ>H%RtWS(op)SD=)|ce=77orqkV0`lO8*Gb04;Qy zLD1x@Gs?PNHh^dZV#$phpQ^zr)L1m#`MP<-b4R@oba2aG5ayhkdEiJ8@(i_aET6G; zwFQAcGy}n?3zGe8Do~3ofJW}d)L|40eUjvi+4dhw4`k(x?awvtJMc3hJ6A0_Wyh%? zpD!emrw&&xQkJ>2v7&QpOmfd7@9^8VNZjpdJ5+*K;e!kWLI?iO!*l1GnOf2+_T%07 z6d)!R5ULVJpAAG6g)C{dop=I;ra^c=L1$#jzA z5KCJ^b;hcpD?^C{a=%sp2YLQpdjYEG9*0_}svxLE66uurFx5_QW5yv(Sjo@vKm2tu z!KB(>X0_?RYad86+SUgy1-#4j??dnNu7qe@%u#u>Cm(1Fwlnq_JA|;DWYV4F2?vei zCmL$$qq8zYdJdraS%QzPMZ5z=YWXzfkc&m}tudn_;nDnP3s2dcvS27paWt-6TvwSj zn=cnxsxVUO3KRo1;y_76NZ}Io*y8fmc5!trk2tV~+gDQZ{x%p97zg3yqI7? z40s86cF? zJ&zW`e-AaP2T%`1MQQL(u9d5}U%pg3fsvi4l=b~`d3Qh`- z+BQz@tf#d6BkXv@(lVo?ag(9;!39b~9J#yJ3%V?GxQ4pH|9BGA7hBrGfHnri*Q*`e zBZ4-DsBMMcHEgim(o$A|`9Nob7}|l-l(1&<+)x{SHL);`gEBKi{+-4oEgCXWhZZ(c zlIG#6Ec0-jch&gSTKT@MY5exa%s=P5ZDr?0Iaw__Vu)?Sa9vz2V|0gvdeUAa1g~WF zkja++hE7?o{bgF4{-c(oV=Lf7X6#z6F%6pvEO$IgrkVUvd@|Vjz{Y}gOHwMutS(yF z83U55uv&DMvIBY7n|h%8cBQ6(MD!pla8|20$lO{vyWxmYe7%xH1|hC{Q{Jr?%g}M6T?89WTmFV`hV|~lID0R*HjS)=xH^)FZmU49Rs*o z*w-3>CbHadP~jt1YVhq~aW0s0A{`Y`xm%x`mitI(mNNGo71$fIhHjo4lKq71$~BTl z-t(Jk?4bxd=&4gFnX!Yh$&eA|f3RhGu~G$4DTz7>MJyFt3cnv9J{A^)Re4#gFY9G?`&_U!&n z{xJzcryNWPZ?8$iQ zDcsMJe$5<94eIn|x6A{~ye5%Ws$a^9q{i0WArj0B&%*~S2|TBHtefIY1qME^Uoh!% zBbnU#)WrIt{0q0O8DYj%^p)7Ls%5`S8>X>u(I?O;p3R_jUFB1&vIHhfBL3$NvDkDy zsgIh@H&3MTqA*Uk}2~;HG61;q$Fpef^B&G_R4uym+fZqoi2>CsR zihP&@HHq>=JobA*f#`0Fxuz14lWO>EkW7ceJU}uH2z)#Ux@@of`>Jb^IGXtkE6&Qx zDQ*)j>OUA1|x;AmhZ^(=bzAe9zF`P(lA@6T6ZR?kt+IM#E))= z6}!t{@}LKhPo3CQ)FprNbqfOnuUBc@-Gqcy*2@Tuu$iD(=blMF!*L>BzLzGpia=#` z3hY!Z^%YE9P8l#{{MgO!{bWnt<$(=QxdT%GqPTGknZu4pI0$W=Is^~2JUOsU`Mo}FTx3Rv zHps)bfTLkW2AqTjhJsYFL0JPn{0E%{fnN9R7`@tE39P4*9%^Ah3qUkZKx?;v5t&{i z3ddu=9u%m~Q-Y&G`*gSjz~t*$?f?_!{)v7U&0`OYuQaqCLTMGx_8gQ_aIlyFeC{r9 zFEDTUPk@99L;`kVga=lf%Tb?x`>VnaSK$`!%Rv#!S$d_$)ZsWm0Gc;DQFsb5-C9HH zq{}f?FZGBk(^=jT!i`jj#LpL_m^v6ILITw%)(lSch2nYCgFZS3eq26gYxH6Rx^X}w zdytfLZFv3iAZY&70|%n ztw!fW9X`<$$ItRY>q>WC<($q~4gwpI6#%9J2{vNGCw-@iYSRmU048I^ zt_P-7Ne`QT+Ft=X8-)DBhK10XcKrjJ72hkjcN8y&WdK)5Itw(OSe4*Z*sszpY=u77 zqLKc3hobP|1_%!EJg>C8NM5fAvQtH+t=^;8Q@&6Iu+tZUMeo6``->WYtg}!`h7n@f zWj3Ho=#Az9+HzKdTnkM?Lfll*qjMvyy0TCa50O%Ny)=Wa)=lnLpl$&aBfxopk&h?n z5Y1OkhwKKKdi4k>@_`(OIrOkD1uuY|12bNtpeRp0n0nJvsodXLyG;h_fCPx+;j6dm zq5_>HVTSRa6c<=!KB^nR#{j(#nFIwQL5VPY?-UBsz_-J_`+IBvvBraFg>J@?8inE} zihi4bQ0xhrbpQi>HrQz*0$>rvsAOoND-MF_hfp^|Po3!}m}Ur$uLK9GZ#h9$4J4`z zj70|+%je4}y88qK!%)mV!F#7h0czZ<^i@Et7&v^BG7c zU4YRx-lxZ0jsh2BS^-aH`2K^vaAxx6?eTgb?F>}GCL730GB0n35#D8v=g^_)AAp=P z5W;XiqWnRdWsxzL-DW^TFXhCs%+S(luBE7bG_Zn14offg9oUXe!Fc;SDjn~gVVY;v z_w1IfSbQL!u~4FXsLKGecz5&*jT5S>`oZy@8tpH`@5i01qR6jjt*TkG)z>J zC(@Io-MuY!hm+uc5()V4-BZ$F1YziJ`X+oeIRe2$uBHP?j($BAoFjjwz6g?LcP@{23MuvV&dNb})dJ0QGH5 zn(QAc5petD^F-@z{ykmLA+_~hg&;Qr6%mS5A8yWgL2NP$g|0V|{hr7Dl=$%`@XQa% z4{S&|e=vE`@yV@bvTl<068S+&lbK=ksY^tS(yK--F3K~$3cZ)!??*pA2DE+K-+scV zRu35cYIyQPgYAM@s>%}8VLRy358-HI9VON_*9~fej+I`7E$Z3jdv387wRhl?{YDQ^ zZ|RMc#y-hQj|3uJzU`Dn2bMLYTkcq_EbzuQvySQpzA2i4SCz1q`IN(2;$ zg|?t?J402yH%8qD-~sN{-VCZ?_t(~*Y$iz~(N!;%fT`lyG(dvK)VKo*TQG?N-81Fr z6rT8LN`v14N(1T?0#rmmf}oKD5u6M=buHZu&m_paPIK@-RDi)l8)+xgsW5|qjpow| zB!5ixmUGomIZ_Q+2@g6D@*0)K4LLKH`n()Ff&ti=TH{XyzUb4(5MR&1L|GzJ4%eEb!iXZm9l5{{GpF9Vq{8 zRNFhM09`GiOkdT&6sPlaC3x5unq(41DV0Bx=_q3eFzzg)&!$>uRIV)fJr2638#RF2 zf$}z}(STm42hg%|5lmmRZpF9EbYm9U%)MYo7oJ4lD=YT0Sr#618H4;QH!Pax)w-uT z@MXT;;*eQ)_{`*@i}=`bY_%~>5{aI|b7+Jz5Du6;g9>kA(edQBT`o!$+b}44l(eW6 z_p`jFeZ?c=ZIkF&gO)0=3v89$Y#5Ofe-$dREUrZxEZlU zT9mB(-nIKCyMGm|0D%SQ3JP}UjhZnU*W@2<+|Z@N!1Q^$i^I0(L;%Dt1+cDn`m-Xl zMT>nzh&9O%LF3me4YcM(5pTK=6J*!lUl!nb(i&j*`0ZXisYqWSWU(VJSE$1w9Bem@ z?+@HINC(64;ZuV*7Xk;Aw4hYla#0DPSe7+5p3zrdgkx*IEO=j!S` z$lIIU1LyeN3jy98zBF7v`~*>3jB}}d8Q~0mvVtmYHtghYkWD!ND~YO5-32YrwQ#Uv z&sWYcqeO@v)GmETn~wTG#UPmb?{|7m)79t-6L24k#w$Gxfb;u?+CSU`^{*wkT>v^Y zpkKrhQH;~yd-_zKg>USKdo-vh{TTcP0jOa(s6gQgnSqA%;K!m0+0_Nr|_H&heYC`XUI|h@QR~p#3hJDm_BE`x@#9W5>T!q>!S(xJhK&S>@ z1hm9)4X(m+pbQRALxH;r5fdlr>NRo915L-E>DoSe zbp8$=HRmZI@qythNQy}NNm1Z9TBZeH83$uXo>yT|Edl~9w3&_gm{pF~L-he5?qq11xkQ;}!f7ENKr7p+nE6c< zwBL;$xN8lKKUQJe4I72*QI$i)OON$gLTlDnF z0Nj^@@~L^1h=yusPgR%T-h~dmFkcZF`-u<4e_xJ5m3kQL*^3wsTlk0v*FO;^ZmnI$ zD6rfGv9knZpiqN4^h`ax zieF@B!q6Z>D$%;({TXKB+(c?N*QcPn9F#Z`gWheTLR_JxLMTdqPpc-c+df_Gb~IMS zFW?DKnGgfpt%EK%sE2~2+7#Tr89cQlq)RmR12%#W9+KQ-Ta*h0!Q>&-fCJm{F~;!m zF%ssAXD)5!R^gZ?$SH|_Q(t>R;G|>FmRZnTVT)$}h7C<|WGFz1i~6AH2U_hb1Lfe_ z$2b%uX=R}_h@U}sGMQKMJi5l-Y41j9c_=vCHCj(dC#R_|fGh{PrUO=3hu_|_31qE0 zcS(tyM7b}qzr+ftO@oCto3Wer{Qz6FtMP`Xcs!{?~DSjZMRWrONhK2n>?3}gd1_cCcV@LS&DpMeotI`6&qH6MsyC5Wfmj4qAjD7aDQ>*+k3!Igmkjyo5Jta5HGfa+ESj6`M|?pltg1L`xGAi%gt`S>;w7F(sHngW<25O3^dfi|vZ+F?OsH4p%!(($9Rcf+ zv3I9K=F@A_qF-I1y`?d)W(+R1H1AB`YvrstPuTD=k_@mO>B}7SFml)ijDs6jL0DZe z(EL?GJm7ytU-qLjMEQlC!sAw5rD?m0$KGGloxq(FW0uBdg(v1hE<51$Dko~72B#5$GUyg#?#eN@+5^vW% zTYVIYPpzxCJtk-oN$~~#t0=Fm=nus0c)xF8;s|VIB4rHmfX6FclBTV8|E6jxI<)*;kC^3jHAuE0D3=42)r~h71bK8n2iPX%@D8it3=_92Q~Ww} zHpqwyxjJRl z+&z3ad&(^l4ADGAJ7r?gPNDN>phOE(_5WD48LWVTz9ri0!G>=(dVNGyU)t4Ufo)d9 za{YlAX1wQX5Wc5Kl1qYP>`mfHK!|UE5Vfp+UOh`x?PK0sebTyJpQ6oq3vZZ+!Wq^~ zUEQAfz|PwxsRwu-r#_(#CjwZASj>^OwOh^T3w;kG^Q+#-B~;d8hS((Pf2IjbG*_my zZb(5kfC|k$=n_{p>Sy2I|&_7FMSi zoW0%rsnweA4_1P|c&T(p0xJm+2ENzXUd~KgN@XNa#0>uKVH=I!+(D~P+!2gZ7%rj- zA5E%S(Vh$+4NZT*hi3HT2a96YX{aauG|Gjfe*uE?E4ZEKbZr~`1i5wZSU8&abNV_1 zHIb|GlJRf+ys6eia7);9w};~&E)F&OU);K4u`xnpdWqZeEX;Vf<=R%Ysm&0tm(9ki zc8g$z^RI$}RE3F~&su>69NYd=xAbj0g#E$l&(ks02aOxCAIhPvx)#q}F+ag9rFw<# zJoD*Ek+#YK@lE#y!37CSh*jpTi?ie1ufB zApB>PS_~_<1G%1lAKWNry$YNBOz|@l$w3n^W>}K;ml=DU=`qBv=7%3^?K>vl0JO*? zr5X<^9o;P3C2)7jF9ckL@?$>`q}mq%^`!n;5V;lroMY#7%q9n~0EYfZWt$hpg-Cwd z@E@H&)68e625EEs;VafEyzWt8U9}xjj0n-W&mz!x8{!N_6!#XZ&!(9_oqC|2^z?!L)2oZ>o-iEHmC4c-!WB|Sa#k~zPXwLkOMd> zz&%DwmOv-jF-uk~Huwf1_R^oACa zt^wYSqj*?AFF2~-l5SYko znjPZi@8HK%W252hF;PsD-OmVB>kf>TJn>LJ7|DfXKWmTc5J<_$s&B z&rR*v3zmlrA$TR-;QQ2goWaI?vaS2^}p=q>WHg+xn_s7k_HboF)0Yot2Q;whr*p|X9Owxp)wush@l5n z(xVO&>cv%-G#+}S-7aB-3wwkBFwoO{ ztb8q0FAU9LV0}gxX8rtBE8)Zuvf>tL3{SOTbYpzasf7c~`#f>Wwz;nObNVlui}~wX zr^YGQXzqs&!93JXs&$$>6P^xa69VN4ujsofKS?=0#^2GyJWo2>_E?@!G1THAfV50h zPba)85%iSGo0TWLO&TlNm#oX%Ice0hw2P);#3&7e9V0^1e7W3W;Hp`j8c*jPUSI?O zV8N<&%SK{}I=r3hMm>9s(Zo3+DGhXlT1r#Z=X+)z)6*;y@RXXFm47Vm)bb` zRSn84tG=sRF7+8{OWt9-));`}7#G&_LBrxC*a!V5Qg(v&ekU$}qVSkc?-j)v$G>P$ z8$nt_!K;OF8|h|#0=`YwToJ=bVZB=FLZjVNANaQ1^lHN_X03cJ#>H}kl(!y~%=U3w zzb~0e@YsEwoBP6H@nNvR;kNW?r!T!J%#+jV=OH?aIe78!nA7S$R_W|!P?mT$!WH^0 zU-tjrZ{;>Jz=}0@2DegCPZ|QCzVE72p8TS}A!%V_a)ci!vu&d{oxUii(nmc?VVGAwvP&vD*xV}=rMMe1OUcLEMe-c{w5elUZ zS5UxfbcG`%DT<(_e(G&zFi~jP=w;OWUw3Ef%OXPIstO_#N6VN}G;mziLD*dOd;FN_ z{H9Uqof9n!`vrw~6PoiaIVg;|C@a|uR9JtqiNS1}M$~zUj{zk!7yyfr zz%tIokNko%+|=H@4z@rD&tIL^_8I?&P;k;P;>YS6r492C*;fqW14m1pK}V&BoyQXD z1%S%ej45s$Z=SbRWSO_M4=HhW<0|G`ic(v7r#-<{oy!%_Us9|IQw&kZ>tPxsVWWPe zqGu}5hP-Rz>0d7854Ro=7lV?=Ov?&mQYV`^Se{ zPqn3`d2?D%u^u8U#B{)ukMnTkXhZhC0CirM_q6g+<(8o{`B#H4AaXcNm5i!FQVA#PmnP1_rSoW%JVxw=~VgG1bL}mssT--N}y- zeRT8GS5U~g@^EmUn3LI}J`Pa37(4XTc)oQ3VPBJ!OD%WB1i_kvYWwuPpL|$NSPc|Z zClNgTN+v0X+JwdcL(E;O8r&gvLHY7vs(9riaBaM79(_ouV9BUS*`jw?)X!M4+!pFN z4kIzhU&0|iwTyKwQTT*gvQZ>Oy-O7IV{_p}^PAnMw=+ST#oM?02%c}-I*A%dM;Fl8 zhaMH015K`iZNhcOk(h8`aftt-d1n%ucLHgu^;AJn=w~seY9}G%OoZ>Q3zQIIp%R50 zB#7xRpV#Rlx^IzUVN$^M68tY@$8k2EZzVfN-pDFHaIf<>|5E#pUln_RnxsrxFnr*p>_aX*sLR`4YBa;vHS@fw8Ro=d{#}bBd|a z9!Yr0Bi8X%^)(NlZjHhr@LAtMSP#{t7|Y}m+C^RR2#he`VwYN71L)~VFfYhz zV(u-uLE9qoumoo0ML+GQ%{{6xq_VAv%-p>pA+7bqZ0{>!{%fAX#TK<%5Lr>h1zc-l z70Lf}|J~PgxU;8apZU#;2veyjQ5k7tlO5u*{BOLk`*e3kLj{$8Qn0<_r)2C}+{!QwR;?fyYT- z`0lzB!PeTes<!*f_ zv0f_grBHPjNyphHwat4%F}RJzJmbPQsuSr4T)TI~P8UysHCTc*mH|-Kc%KCjAxbq)&c*oypO<2DY8^xHVSq&A{pJT-9_+5r3bM6;?f6?4I$8 zH5(@5+2UNG5YDyJnqAjbb~6~U3?%XKF>K;1jl zY1YV4;I`jq@8#BfP4T?Wm(0JKRx_0C+!q~XjBF_4Go^3S5V-Dmx!?GeOm}hWZLDwC z!?+UbfD?Q_pFQvL@xinwtc-EpsavIT2;#a^+)nex0hjbcK^0d(l-?}pad|FboHcn) zpqg3fv{@!2Uh6O$uLrsG=#@2&+- zCt#`s|6`$v;EO&gIs)whRu#uGU-A};@jc%M;$$(#(Kvfv8}6k#ejqf3deLD+aYV6P z_qU~MuhYZLXP!KLgExzBYc$0joV z{zkI+y{;D+>LSWw?<)jcQY>O`{qpDmo8pSgD@#;QWNS=DTi&W$*>J?ypHJZzA86Pk z@4uylb)CB3^3MFI=80wBIQ6;SRE?h1RR~DWDRH3A*+od{fXcMs`!0(Z>o1KXjlz#l}$KC zI^)~Crps6dYrNpOCB>zK&0AOGG8dbjNWyu=ha!X~a-F$7RX^^C4}i#Qgp|CbiRu?z z2h_!W911)#;G0(5#OG!|bT94xBV<{IaJDqtX+b^Ai06EdM`6OSd|=}Ip}>LHdcRhM zqdtooSxZPXGF^dc)}DpW!=H$*iSxq(=_@`h*N%Nj4qtJF#7geEF;|tYQjBT*A*4L; zmA!rs@^r~`vHn)VI}09t6`>!lxgVFHJM9%Elq(+&>O9ByGJBGajWSD}cc9}@9R0-H zb4$}|XlL0(e~NS1XXX{zx@kf6pPh=$n30VhTu`ZQZqVoJB+=s=q042_yF6$m8%xgI zBtK+#1)tmQzp;?bMO!?gh7?8`DV!j*o_iQ@-D=w=^Lz ze_oy&!8ck~o)S_sA`g3fU#OymrCY(jM8YCnVs2G$GC{cNfKr5f-h>a@T?|F$UU#Oc zq(Q2EC6#SX*nob)lESj!7cQa^_MWg`XfX%EqSM$=vpLc43JJw|9s*MIWgOZWuQ&31 z01Z8CzEmZ7w!S^si|;>gEtNj@O#OTfaNL)$O=YTN(`iN(Z zW0!9tSSVzQP-F?|+%ZXqjU_@PGJ-lblCg0))rLX_nG94ckH;V18|+4_s;9YmPLc}A zGoNT1m#|18pTKb=b4RL9I{y>3oKB&nSW^(fD}9_y3n2U1^V*c?g>l z26}^^EEfxWXW$KyRWd+M)hA=AFFFZY3TNf39n%<{)QrJqTsPXM;g*V+K{(3McT*FG zD&A~XzJ$@ah%sy42)KLP;LMSSq%gMDXzN*J2!AMxEgq3?&1+^z1b??o0;Y;%R0dMd zgB)Qf1(~5*Bc4ePp?>qSD)nAgBamZs=2JF+pQ1DuhoA~Vb0MRtpOg&0lqO<@m+~DCT9Q1MY$t?{00zK8fK(DlRm0Tt>(ijzclDR8`D|^m*op)SO1ov8~Ul zcebgtWV{}Hd%K>G0;GxZmB56<{K`z z<>onf3Q{!Ldcl3gm3L`sRRl_YaQzn)C<;%MK}nBby?jS-{TdPKnOj!`XVJSAh9Sv# zBq;;hj*f7P{kFg>l$NkiIdxDBtP*kqT=l<7!^8i6Ii{cr7a_jgmO5b8a9ctO+RkPW zX5u?xc~Ynu#*MeuuP~`IPDMUrznApZCCt1cP{Fr z$&3V!i)6hG9G27RLG(|77~G(n)39Xx)#l09DUu_#52>X+OJ_poWpBBh?kl?Iv?`+J zh5HB=E};uEnw3qga8*k90+_FMDTmoo?@SSxjcBWb$k4O z#OA(m|5@DQRAbe9VE6*PzK3b+%G3wY;uh~U|05-g^o=ydioi?<7JoO5IbSH zmX)`%FAarFerK*W1T=4F7EvWBNmNG2)!R=m3$sl6lrxMzBEGu%6Diw3hTexn80Z2N z1tNQ>wTbwv@sZPK)7}knr(KimXujZr*ce=Ihsx)4Qe)e9TJvpLsZ}l0r-8z@r`?K)I&{r zwXCI+ltjjiI!8pXoy8$5Jx=w#5{B@Ypie117KVA^J{l8g@5ew?*juun>XWk=G+6b1 z^*DDvX=Xf90u6e#3*Rko zN4rf1*(g%XMAyUHqhLiMOU9pt=VF~%^xJMRxj6#LB;31y`r zxXLOiZxgQs56PdtO41~#b#EE^I8}xi>t1N)SY>P=D@sV``5%qv5A+~)o(}f8W7u*z zDkZxARl$I(f2mX9YiU}HH6&=2K?8CaB6y* zTV+MtMTnOuwu0I7!0V#mJP8-t59w**kdr`b5XkqNwhuE26bt>^?=tZ4@*4w=MgEv1 z7j8rVzev2*rs%5A@((kLR6W%+-v^Hc!eQ5BETSqAc{xOuLm(9D-te-gji7`Q%VR5# zVMJ4N(#*~OnhLq<{uUZQ3U$D{j0l0T3dds}AN_%f}cw(#oon0_BX zMembat-krwIwZJ={mzaY5Zp0~6~e8}Y+8!cNBhz}mF8JIuK#RlAF7f+qJV*x^tXX1 ze?k^n>FT-!q;N*`&Y#{}Vg5ZD->XGIzM_^!{lt@p9s*m{7+CLoo3)S9QD0SwfxT1+ z@e89khyr{|I$G$vTQM*ISfqG@$;q^08{hp=86Vsf1~2;UojtubFa7K#xMJFmPH>IJ zg${?!YU_Q}RBQX`v^Q*ZG|KZD9LlT0!jqq?yI1EuH#fCCE+lj;sNiZiluiRsD6`&o zrBj)^-AIOtw{I?QDe|00VjP$f7Zq?-r0|;$HOh`j*OhZMBK zML6PM?dAw~-=g1-;uxJ+JF`Um28A)fvD)?XD6#w2F(9nIp2N=aYdh#$Gk3+y=dAdE z&|zt86G=TOIL^VdvfdozLePRUQV2?ZTd;LpqB06N!_ua3glEkSSkQ8fwG}C+!&O}( zdY9K?qJ&)L>F`!k75t}E$c_2XGFm_G52D7lpx2Lo27Fc1fdGH|NfF=r(IVktC{7|} z=IvoPTATHvsiaP~1u!EPa;2P_8xRb{xd8`}0|aM-nzu8Qom@|-&q8V3 zZH^jC3agSj)&-FCbD!6aWi=G6rSSy~y1WM#S#`xTBItvNYLx z=cTERQ4&3l4E#AL)FmfDCGg&{2T+gxwhj$yFbVjx1;KIfX+^_ZzFfDLgZ0WR707Kj zM@T-Lzz(=a|7Q>Y14{pNkt!R*_-?d<{I9TvG}}0bZk1ivR_GrntWXe#B3<8FSn`-T zDM$F5$=ql=;oBpxQoweE;>HUw3z^4KpHM z=SGPY$R7CVvvz43y@!^%4tE+82GyTcMg`X+a$Xb|1wSeO9e^0T! zL_K*5z^d&j4rsS5NaJdn(d*@TjN2cq0u+1-FPtnUg>@!cL%k}M;$DfbSx(8rSF3lH zx%+OE(iZnPMRbPx5gnHKSE}3wu(}Hdkh)NgY}`8Xbv6wwQUyxZ+0#2o8Gn*6rb_Fr zyPU>i5nN$%Yx)0}Vb;L;vbR_wF7Yh$=0ciii|os|!5gKF zpjgg4_dd?Va~TmkLcQ83Iww7^G{wx+u%3h0`m7>N;n~wyH)FrMeO@5*w5NjR!*ucW z-S43cz2r;=|i9j@YUPODY8g}$?zFzOMPKxC98C;OvT8R2+)ANPW7J7 z#f!6Scdy|Zw?zTw*$ZaaLQS~pz~ztd0PEO1A?XoB(5o;Fnc+gEvQv`Ae%SOcQu-DA zEGI00{O~$wzq4?vn{;aS@>QI^jyscB^n+c|PNnLS_uAbvY(%}lfda46bYIin1I=)* z1mv!;xmP4&@{S~|7;G`mbUZ>Hr)_gHVcxX&E9u2|H!dF4qAT;+W*u>MZUa)bLCiUYi?}qUeR<>pC_Fe`?wP4}6(ztovQPH&$ z)n1}#a<4Ojq9BCSs*kAp_7r<7a*LcFjG=J)_Xg-r`&0=}{=-3iOjQAv@jwDD!6 zyNiLTm~iel2DJl3vv@`FDR0ZEB(e_<6ZnJ(P<4YcXO{WZ7k`klAGymH{jbkKkAqVK zPH490=Y-tkb8tJ=Wuq+b1{yFzonHtH4I`Dgu>a2huxhd@`@93grC{}HLk>M0+!a9( zeYSPwegAJ#tRqYRO=&AHC!|J?p#Lm#k)D*BR#3$ktvZ!PF2PUQZ9KUdxIB9fagq;_j8SAk(xD) z=Ne70H5^<5z#jSRclOOpqgTER<7WJT>>9&nWhX&g1#Pe!#CA%^#$`hOepvFHw3S5V zqkD2R+utYMH>B~{L@vgXh0yrAy#Sc!HJWe`yWk|JQD(~ge`0c`wFPZ_jm$Vz^}u=FTs2)w!L?Il}uhK5_+z~%+=(Bp#@|@ zlFx+yGeKF=3kY+Dqzq%4Vr~sYRb)8{*Brvs!E{bByMc29A$SJ4n)518zDgzZD?VA4 zAwk;Ail+ zv|wF8t_1yt-^SQ}9Nx|RB9TX^|JX)`5;QwQyxe%(<1}wkl$&CK0~8qQHP86QW-hzS z8`EmZBee@x7w(JoZ^QuT>#UvXWq~8Qx{STk0~nAJuAuowQ0Os_XR?d*Rqs^hRfsEn zkH7EJS{r-cAA+L5ZEDt$926#`R@0SkhszEV-JX6<$T_fuyeK@N z1XqS`O+q(HIp8O>^fwLK05DDm*088PY>HR|q=_Hp=S2{<@DJ}&S48L%{XhP<0z3bg zxXlJ_udwYuL>_-qS%Y4n)m)F0D(KnYSRW#N{%vZAa0tw*2(N6^>)O2*c zl&?h}09$BgO)hb~NdlpXH%cc=r{4E_S9H1!f;+laih8edz;UVqmBgg z00(>O@o2KRFRZgau~?J0a%~Cn&;WFzQ8edz#aD=IJsT2I61)=)1t(}2-3FIgfa+vA zR?b=STGVhzCN#I#;l?%$4iWXH?PdN@*8fJ?1o-|C7o`z9STd684YipxCtA#(EFMHM zoj=&|FE2(m{eH~UTVAa^(-DyYG2{MwKFgOO6Cv|fLz?Z~9QJCR?$mu=!qNNirHi!c z-?tRJ5JJ`s{Q0Q|rmA$*v}|U%OrX_+Ejo&fhPv(tk&tQnNkh?&OtROXTFn35yWocK z!V->ky-S8M2b?DM^5YUg$$QC#0x-@$`U9Eq5hyQ0vIDg60bG84<%qV+=Uk8eX&($I zM!hd2L0*bZ2%^JV$p!elKkOd@<%S$oW;Y|31{wbQ?jahoA+uSqPxR1NX5r9had68F zLhS*eP%9>C`N3(D)qIv?5in$48sS)|6C-9$)S}QH`uChLV(gW6l1R8Cqh>s%hod4w zY5@?alOA>~NL$qzcj-x^P~rarN{}Eb%GLg4r9|3FZ_$0Q5cF>C1>6Nexll@r&VX0~ zK@x!dpB4W7JgI;hMa}YvZWB^i!aIWWA5g3mEr5G>z%-z>{wQdMSQkDrJa zhkbvVMXF4oR}kjeRt5@=R_=iVO?o5ll?eT10=UJPy@*~ETlOlgGww$494TOK1Mzn) zI2<|EeN^+(MNo1l=WP;53v(smj^emuxcofV)1(GyD}G&6IwyUVWMF?_AQZ%Ey$`Me zX(XiEMPQx#Mi~7~Ovn9eay@tyFW((uMicHmkl`4Rgy7|jzMHFKgIn;Is0muX^*+3X z)E3!`;q148GyzS$>mj;(R}60FrXd!fb#z7uRXxXiGpBXDGl9xCaskgAVDvBH!9dOF z)IS(%PPQG?hY=7~??a9?=>G=-I$R0N}U1gOI4ubuY>s*85g5wEn{!U45KbdeM33KWjO2+i9@$mj`(rOylgKz;mg#1xTCt7_~mbm*e0LBs(X zu?h7)8o1L5s``_Ut1L}{Lxxm$*}-e445fH>ox$1TBn$~a#zKJ-MVM);dmn8rLWdxC zMpYiMr=Jh%zue_-1btV)5s}&w#Nl*?qps2&Ns{yOtw6}r=9z2sH4%=1WGide&@=;X z)Al;m86nM)-n>xUgq>J80-w22I=brSjO0XcV-O0512<*6lk{E^Tv{O*8`1n{*7Scy zL=VnPKLy%fd>j%rpjFU_=~%2-5zl~Rlw8;^2w85h~ewYT=SLBeKh#kh>~aH8a5N2rOcV03FgRzZ z4EvR)N@DOswu6WPlwp;}nIP$q1~>=T&iXj92qIfQ??ZGEw;ChwqR)lXbd@VBZIM6C zpl_37N7j}dTrXHN5}O|Z3qxogIa4P0m4P^7(`(^20Nc&l-5~_O!vh_G)(wjLg-hNVL1*e`s`{z(2z1+@uX3)h zT%_5sbX|R^#vL0`(F?$B`#Tl4( zhAh>PE{O?AD&Q^>UJ$4EQs~W-D5o#Zqc8D_(n1nwC3;*ENh{DtpTrp8j#A?OkJz?X z&4w;_C4I?iUgSa(6QqBkP6+taIdLJr1q&bE`LDm)Lf|jC0KpG)v>2mBS>!=00$ZA; z8H?i==X07M5wGa~EMxwS9VMHEd2=l|$*&_Uf;FEUR73veSV~Jnjhv4o&d#DQ1Us9Oj8Y7s4HPUJPa1fym z60pk2vg^IF^=SIM#)wp?x36A(FZc*rs0s184hB8;XiFs5_%?typ-qz@OZZBz$ULSf zS0uDJR|KtM`{8Pk6l?o#cOAmMKyL@s!8=+YVmd;^gtMo#zq1GtlknD;AbUW5Gq;5F z4c@toaV8y4+4pYmiis;UxNj{i)_oq_TCdz(N%D>K-5jahnlH}1W)8eE_t+0ZWpin9 zN|sP+`)HaAI2Cg-CrRl}qD{p7<{8Y$uAC)#N`c^7b7^^a?!dl<#$SO@)GV^YmLT6Tf;*yLNJIt!jQ&_qCw5C>UlG3(W0$=P&b#?$)*W!$-QBAG1{0 z9_;oUsN*YtKz%D%S>5~cOuUV}%g;1_D~8&Gk<7mh_`m4W^)A~4?!ToHs{UZ8>Z0p) z_$B|dK*#t?0^jkeOCv1C9=|Gn4#A~kU-=cgvgy3a2nhzm0BXlz9d&Ph7xOg9o+cLD zM!_ZbwG1~O6Ugk=2UYFy)F0Do77|?bdBNEZ+~1`uZaVyCJ+DsI<#aW=Vt2-8)}B#`P&(T3z_%esiskb1?sk1@uEk>hh=%*O zReqNAx&37Npx!Wq?>nZ!e|wDX!A=tvg5UbULDzn7UNKgIxJ^?pPyfW~;o=M9w4QVz z9iyn@7+q!A!Cl7YOBMl#`*zRfE8Vuyv1tD8@zTDa&9sD9PW3CZUi9@xbQRKhESDQe z?W*Gfczy%tGk!x<6r}TMo%f?}c8Tnp|}4YZg))J%EXOMCZm_OK0-a zv&Mh3-v0wZi*i2Z*!l0hzhhbPo0PnB83PX$JTPiD^K30$wfh~*U9V7Hu{x*_*qqg)`@$sM-`A&#&g7Tp8%ouxn7>ab>QQyRUZWAZIVMRuBKw_% zQP9eXh7{XhTuYqjxYGQ~Bk-Kdk6d=vhr)9@!|eCslX^^VPfhd zNn-vv-j6f&aToIW!uOxx?Rv$}`z32Kls=BS0b1l>CLMwAn!E3`RA1x%JUHL?c=Eika{)tSI}g(dPMTkt!c=!0l2^(iPrLWqgezlh?kg0BM;9k@KwDbA z*tnMEa8M3oyt4Ri;{u@^`IZL;YKt6hZ?hB%u!N@qzdPPSXH!yUoBg4|F5!!f)Rn_Y zYKtd74ldKY4=JE4YDkMZv?qn-FP(yFhtr*M+55uPRsjG)5%poE=i2`b9E8VQ}S)0G2#!_5}xT(pVj9tJ3NqAe2F@J z$$*gYZb^$KCs52WI0T09u?bN*!r?CkDq(FN*g6h5AG;iPrW51qSM8FP*TV6YUZ={4d_YncNE{lZATY{q(M97vZL$b^DUIeziVjKg-<8%1+Uqiq$wB2j zMz@wwv)d(ng)g;5oqj4#$SFa6YG*Y|H(>8Lr2)OY@j z3`gT4N)nxa(^(H|S=z=sForAp1e}&+`4X-#G^|LxPG|8YrTXmrtXp-&X?k}M*_AZ~ z4n~lZ7rcN)ngt1gIMxq|-hN|q%|iZ4dHqR7@$xQ&G=HuJ zx~sHr^(Eg|CmS8<(!J<#Xf!WF$i|TW!^m$n7fF_Q40fom(EnJCL+htQx_Wfkc6Rsn zyQ{EJ(i1)k#LoF6AL~<(MY5EcnkZ+n)R#PB-h5LkA?~U3nJ+v<%>Cj|`k6HUTQE`S zt-$*S-5Nf#dc@i6nZ@@@UH$d!fb$_SBRrPcs~bx#X2iGK_4-^(cC_lds0$2ppXk^W zd^X_WRi+jGSVd3Ht(M;bijG5?MsiBG9&@ZcsVh~j3AfAf_jxbn(;_QR?>=5Tb*}TR z)qss9NzS#w#IH(#FQ+L%e(rPw-LI7+_xkSy9-d0`cVvEB{kSyoX|kp(!D#2N%?DQk zs}kg0X1dg6)A#gQD(;5uNIxpMf-jqHs%059eo4S5$b3)09A!ZE2|nRYM|UfHa7xZp z{?wzwd9U(x3Acq|R_AukVM|H7+PkoSuP1a(e0&aWKTm3o3ia58ANyou@vB(oS#f`0 zNo|4*KKS`z zIQNCF?O2ifK}w;K64k69L04U7;zV+$yQ*Z*Kh(V*Sed%_5(K8;-OKn zqNt6zKH+Eqyj`~M(yQxpS-!!gUk=qiE*_v&%~%M=(|gh zE3owBX^NpRDnpu?WcsNC6w<^3OK6+JJghz_~jQ6`%TR^y;zlR+Z?uSw)(L^ z>uY#XMDkQMy#Vy?XYDTF>ooP3JFYy_s2LT}SyMS`40;8KLHj>jk6ch$C z7j6^mjmn$f#a)h`ge zlWA2&hI?(+C&fclvgz4;-`%cHR%(V_CyXw#3>+K{<}n4qQ`jEcUAMbL?AU!fb7)7M zK!Mf13xaj~Keb%Sj~x4GzKXI`E4sC1XVvZH@?mC)2nZFkDK`m6;_%Iv5Y@p2zO z9JZBMId;aZ3)YmC%+WER|Mia6DuJ&(Yqe@}_)(vz_G*x`p z7L#WN@X!BFjEhbib9|Zgd-|;Ug}uo<@yfJwXSQaq+l}OI9KQ5Ez~?|UMG^i+@Tl^) zHZIOC{twxUG*ZNwAj3K4s!vSO$$^+BJD!$Z<8d&_;QB&>cCx(oQ*ZnaR9yo#)*V9^Eid`?}%e>O| zdG2q^NYjF8w2^71R(!y&*X?MDlU$oT6|%S=rxt5o88bdI>f0}z!;=XCiE)ILV*LjV z1}h}8*N^X`5Jk?Bu0_28-mK|Q7sBg*B%M_h(; z6&pjWJX6z;s9@KZgK1Pi-1CUIOTtv{sTi5+b*osBEB~-iP#Y=a z%vG82kWOW0WL}h(!a_KYlcyD55+5mM+*31glX+{v&F%O4^OD5W=&GMe1XKY^->Gf! z{gflA5ghJY8@E+bQre&X@KI$-SG~q`>l)rRe^xB-As6TR@d1&za9Uw@cV|2P+@pk< z%A}`1eKtN-o{>55)xy_0swDAg^bj)X0T8p~q=E3oo}yY_r|FYaTLX#`E37%8ljpfO z2lzv?gJ`5^2vQ>ce%PefD^wYu8Ax8f_5E8L4@<1nm-bUOhbqwq)lu@qD;>2hJr?v= zuK^d!hoZ~Q8+`T0wD~tW2Rrdg;z2=5x&$dkbg2`1!LFPSo0V8n-R6URo!3irHNKDi zb=66RmGcKIw@8gFw~=hy_Vmil4gJa*&jZ7Jl?yqIY#Tl*1W$rSO}v=v6A$%Z^@|dM z>`IQ=QdHT`e)|vxdtVIe`hUMBTd)=|_?L`t_QB9^Sn3?V0s+dZVlm#6j{1W=4Q;CJ z{(}?hksK=@Bge0pCOup&b0nFzDpIr(PIYrQ1Xwd)6Y7h!q4hGPqNqG`yu|Bv8CFNZ zUGUc5Z`u0J5j5VWv?XhDH3>AStu|ih=9mi1&pl%+v2@Mm)_u%(HviI-YS&NPCa@YR zxjzx`-%E@rn$@fuP`g)j+AiEx(hp3GG39VGw#k%}il;^@g)@LHd(imooQX0;Nr(-t z^*+IF4!Qmhax=Fd2-RDri;5d5Pnc3rA#*Y1iBTl4s?_(3VN!QteNLv`z97xb-obQs z&b48$19*fRjda%zWs1JYQ&l&bn#9NIOWKCU4qfAkE-}es2mFu1ELKl5xV2hky$#s! zODpqX@)M&W&ZzI)O)4HLcPU9^m1?8kFPBE@5^{LTx`@<>xY{Y*&7lyC5a;C49?E+o z)}>#XO|@8o5-?({7_YL)Ew}Hbmd(s2=cK^{=7smSk7NobxvrJ^Oj?&JHMPy}k=(+8 z3p8rTWwwQ6KSmv8RG6pU7T%U(CENvq6}@hpwI_JeKa&^n9GTBPOt?HKWc4WdgfMGk zb=i%xE|`D>c}xJ0cZCc{*iRGb|&(wuXU{I}>>mR1`aI@|HedfAA5OIF_Q{ z0%mH20Qb$B4{#iAty2u(3?AGbK26@^^%qiHTSJkRgR2C%gKwFE>!x*cP?Ug#qa{G~ zSi->*QV|Pg=V`LE)z#ZEg6FKz^lqH3j*K3RO|`4XxYG%^k%}}l5^tODdo5>l!FK&N z0Zg4Kh-`zX{bEkErNPN?(@F(#nC)lEVh0aU=>uyh-X)0wxj>3-OK1rqs4$>3ulY1M zkJb7#Kx$h7I^b!G(zw>eE4s*lR?agbUE2meT^CBK*qbLQF3+sYVa5o`z@IyTnj4M{ zaS)%^s&JzIaH87u1opkt52&S-Tpen5(tmAt150FcquDGkKN2$-E0(v*-RH*R+oE|7 z*)!Qgvc-eWGPnhiaDNN<`#QtFz#$e`L!bV$;Q0Qizv@(i;YV zmk}rtFZDpZl>G6zbBM{Cus-JolmEv&0|Zhk(Jfk>8%3OaG}*S3ZzQ@h;jh{vukSg2 zTSJv8HTCU7gDf^eUv0UTFT_z~z7e`^Ct-H&%`MG4SoYh5JWe(s>RBEPeUyGUO-we&u6aqFSjcOO&pk^cO)N3t;rN+D zC8NHg#YM8If$;9_F6zhQUjA{?WFeE<{oIfD=MK$u1w~*eDta6bQB8f{3tYe+LDp`L z=X41r+3#qimE2!Tc=x5$m>tjER04UZh>fH4KzBWFo@h(va(@zULpx?Psx@RpNqSsA z#7coVqTx3^D;R8*BscJ((DXVl?EMUqq-3Qs^z~ET_kDZ*f)Yt3VRL3+@+E%qZLEh+ zwew1@PmK1!yGn)A>gJaj=k6z*WL4V?V>&*lyjMo5Ygdh6x>Ztn`{a(z=cT{GAJLtZ zoN3Qz2!th*>*ES2x>hC_3%)`=lf?joOh%I1f^xNJrHSxouxZzUPuvOeRlD6=@lN`$ zC}ehpC1!$!;vwBJul|rt9^#iboGT#X6-ES4T8Zt#u7*iL> z#{8K!C5$M#?pF&K>373-03S~KmyK8bhs=XhwA_@*S6w6xr~cyLA2C8sB$ev!HwfVW z2yL-*>O2J})R<=!kRV(r}&=j~g6UNw0X1^G+Yp z!#~GAZQp(6POMY2x+p;}C~oN2Bn*0gZ%>p};LIM57e3($Aqt@fz8-G;<)#v2p2^w~ zB8E=$ERK3YW%R|B$p$m0OCjcux;TYi=FIeRg$9#sBJ@NrFp9s{IxOAlb#lUf2p~17&yso=bpQxvvE3-2i8XY(O;!khV>i52SraNZvfhy?OGt*kpmn^ncdpYbmU)8XWTBsqtW@vrNx1OU^clh_ z9vuzadr_Cu;6uRUDJ{GGW~XZZYSN%^x?kdQmBl)N2X?#POg>Zjp?M<@{)!|r4j0#Z zOs}1H`O^i>xIuk5A33Sny@ur<0s z-@Tz>hm5&l_vKSF(}sa>xkAr*D%y+J)tGuKQ`>fAF11&D8uQ%|xsyaeo@c&e9h0a% zav)N)^|sDOx80!*w8q(k-Hpq2Nuimxd$T&{t`S}ynmwJFWiCGkx{%tL<|xVez5Xtn z_=%;tqd%J~r#4^HDAeD+s&+k=v#^iwg<`U)Ce^)$xD zC`L>V11CBw^SnhsUxsJLnF_AZ*AkqezoKX=xmEi6Wwq4;tY0I>QkUvF5QA^Mq#^Dh zdiuSVD2L#K_4IKpOoU2eXlGJ*{hhmb;aQmwdSmeujzI^S1Y$^Mu;Q!fOdyEctxq^WQMCgD_kpmi8;wd@s^6@zVqn#DXc=au=$%vKu>kg#+dWIYXH zj_b}D&=z)hm(R@|4igr?xUgRotNPYu@!AAnRl45Ef&^g+NvN*%2vl+*iW2CK^z~9iK)GcNR6= z8#I-V50B)nnv2QEv__%MBhrsL&p0Lq901XzI*d^u@kEkc=bkI-I`~=Cb>L%WLHFS= zyqip8rx%HFONjT8Cs_N>36OoD=Xz5cJ^hOsbRME0D6)NjkkY=ydTn30x7TEP%ocvo z>Km~7ZWp1h@Eb%UUQ8-Sz@-ALr9yTgW~AeRno<0m zmR**43mp5K3=e`Kr|aC8jWZf$!iC@gF5Y9EHTS?`lsLch>x-W#v`J;D6 zv~J`ben$MOaIy8X?pTV1@RPlWb^F~FMUefwP2uPCjy3`AuQ4IK72T%zn-AnJm1A&O zbTJKxlLtMM(xI)we~$#7iHcF{?XR| zUT%$pbY^?RK6Hf07&;=ASB5N57>=g$EP|C`+HGI9z344V9j6{QekbY7qCDB`cnZY} zW4$ZNu?O#p7B;G0i_j9aaOI4N5+t2z2Q`6dpmPX5xEF^iNO6zyY_n7E6dYklBaisg|8kIf z>)`HD2r75YBgV~cnTVn?2q_!@$1?-Ahk8eu2jU$J$Nt+pRt$uKv!Zmbf%`O(2gsoV z6cFz!f$wkXET4Y8CXB=d7j*r!=l{KaWzAjg{EG6W-`{-+vvdzC>9aXI&Wky^zN_Dy zvEbK93-p_p*!3!>6y~Z>R%<*jWT-G2rW2hJlNqw8v-8-Pt@s-Vsk|z1d=W#jR2-yM zUH{2IWJ5B)(G7Y0?}k)QS_vV>d+#B7Ha`~r7%zPJOoxlJI{W0;WoG_aha!a&DhPbz z3qa($0I-b5DtEx4z3=SA??5f26-8r$rzn6N;*Z@XD}X3!rjpz4k&Uk4vHWL+HyJar zRJKBc0&JyTYF5#Jvb=9ADld&3%2CzEe?R{$wa6Md&8jKHa*u{gpb5S#sOx(r??gt!Mll-)Ptk`f{-!wSq~AbgtTDHuuy;Fwy? zRf`MfA9j7dIXEDX1p<}+;jPXY8HYN3ErJ(OP!>Tm1@ELxGO!m;0kGR>yz_$KCJ~)U zXYeoLBA5(rol4eB8QBFr$5g>F{u}x)dZEzo4bWc*&U}dxw;utb|1kZ2FnyjKgh8&* zQ!@TqDyCQWq>OyZ2GjWuClqT(RGgJML{ABW@EFn6^fT~-1`xZiHeh$ro|nPo&k2)k z*l$W4${eeP??e3fCro`vjhRGtll5?z9sz!^l2jc8_!UC~%#7>xIlN+b}Xv*+j4yzaOQQ-w-hhh-A!Aj-_CSZT{- z+>$+v^J(z1K9rW1xH%xWF+UH-MCr$x5d zGaYk^Z??Vg_7Y;WuXnF%z%K-r(IDg-ys*!JEC?19-}pqzc=K9*SWM8Hw# zrbTSl2|}ZdQ70gbAR7i@yML>Bor})26DOYy1dEB6eyiX5!8cr%(Pg4nlgg#^&T4Rx zjZNL0egAqPZtqcu3_XF0$szBIb6Wo&Wp5r1_51ygi=naA%-AKy%-ChkQrV4N*+mi~ zOO_H9imZbf`;x7N>`N3XWH-zokyRNC}>Urke=RWu2 zEcZEQm<5?+DCsv`=oD0X&n#K3J#_If(f) z`J++}Ti0;iN@DM`aNIW+KijPRS!h(&1n_-4&u?(iqA9~|+Xu8!duauP8PeyjTpq@$ z4-d&EQV_4*Z>~g1RN30}8HpHQK$GM~V}H#b7rNLQ?6!H9Y$BXQteGegivN=jC2$hNxDme(su%HtSt}D%dyaZ{sz(rJJo1x z)&j6v818(7W_LUk@9sf%$b}ZLUEp?D=v^=fvserwX!Uj5k`VtM1};NpK(`9+ital+(S!G5%{#|ZkR?-Qu!E$<1w&)@5<|nX)++ur zo8^|qoCKCpStaWzXAf@K{+m#c;Q-uXZ0T8%;Pz#HVgY>i*XcDo=UeYtAngH7p0eIw zgfTu}f4avs_W3QpF`|mCdDlk+e$61Kqz(kU{ZJUzPI0SyShZRyXL>1%xAexrO=*1m z4JbMus(jL%x86#*{>y-Nzs1ElxKAI($UzMSC#axcL0DiA5#Ntv57?ROH1!cdr7z-D zzDB)NJ{$_zd)08@us5!}H>7;%Y`QR?L~p~OVRlR@qeRmdE<+g^u@y1*-X0F!8+s~A ziL1dP2i42+FSiW|AO1c`O;o{WLa|7&NEWL8i&(tkOximgl*_O>oWQ1DCScK~m8r`b z1Qn%(TR>2y1yF9{6LmP$_t_2T=rqMzaBI39hqtlbe^aCrpNQ6Lc9%i%&Q8cdrs{l) zw$|_jvivF#L=Y4sJbCtKclxjHA#hSlX6!KWFgt^{QFo;HB2^&&@G)(1_SN|FD3dZ# zqtIj3wEv{~-i}F?+NOP%gvx(OBS;8ws-DIBN2dbuxFdrt41T1$aro{hwCGk?M61~G zSs6}!PkX78)i2S4ffH6u{rIgO<2JKrBCsew3}OPj&_?j%(u2o|*i=ZW;^HloS zzZJHjaQ! z;kjj$5Dk5Ok#S=;vOFWhwpWdRjD;F%`s6#b}W>iD@m(-Z^i~T{{ijBB0~^hzSP7 zM1ltVxcFoY&H~v+1&4l9KYhm%-t|sl{p*Eh7zeoe8<&-8lD)~5sqc&(|C|&wfND+j zr@w37n9bG@caUSp3Qmj(t}RL(IVkUQ-#tN4=0ro9BXr!=HF`tajgHm61KdbC&lLYl zGU^0K7$mh&umhS&%P;#|9e3`WPf?2GZvjc|jwm_a3(NYn+a(-XC26e4$$4|M`;NOJ zlim|*p>^l;DY9fGn7QKLTDo$r+%kugGlciRC(Y1FP50duo1t^X&tHAd0uJn^TMU*3 zjV1e~hNOqdUJX48n}gb-)~q?*K&Wc4m}V9o?PmI0$gAaxbZ>**U$d0T7CAoljU;`x zQ*HChDt%*Nfi^5K#!Fh>;i@N__U+b9(MA6!LCa?ldSzMgH4jUnRyrWh0QW>mjt&au zWjYAMS>DgP{Mcjjl-hJNQ#^D?1iJ;^1dL$EV|7oQICi`Bc%X>VG0~HPx1@XOq#0y* z4!+a&xMwfsTHqM(9>@Vb_Re{`@;xoNF5=}KsL1HF_@>Phcgu0i{qX@v84N$T1f;Pj^Q3v9Wxdg)mEWtg=s+(+TxA!Oupy z!c?l>8YB6`3nn~QEI;kbW`DK9EG&ac&=nC*9v*TjsO7?BNcik*-|C4ihU7pBr9BbX zD-(`^6RREi58NdSejz0-z6d`SlgHbCp77Ue(da1y`w9`}MuezTbzc{$ui+%zO;sIqZAE))TdR@y-M~ zCD#}i-I&YCjnmE6Tulr5{;Z-itAezm8GEddF!M#hRKVnhF=g*+rA+Tp*Fm1OsKAF`6ki0nzt_#u_nO&=fIe4<$o z((W=6XHbiAu{NVWjf0!V^yXA^tQc*e)!WYT*L^n9b#-r_t6+yKwPfwz=bt{|0y)qv zM3wl3jk40MR?+{Q%MVau4d{5lDL2L({U8=y`shgDTp+LCb4?t(7P&SP_#fMJ63Q}lt#KnI?ZzKp<)!Eb8edlT zh8~Jd)+Ax{=P0q(h_E&-;a=U;UT>@?Bqx3v3Pqly{8$cf^zECSp$ygz9L!^(f3OYF z3M{EYQ$Unq%B-v!qLuPJZo3!zzD-G&nF<%grxS~KKS$N06VS+LjFt)oPx{sDfQ2u4 z8NEMCa0Qeo#%ANZ8(00f!fx;}sNchq&}%2OV*-CqhFtzV$L_~(>UhgHQZ)%iZ2D}{ zTfEhQ1f^58_f_aX^R0o>%;b@i-jMX%FYZ02yYvC0kNFXLC0Ukh@mMpsGin^(36IkR z>jq9k6(Zm8Wc0hAP-o#d;`IE8Q?ntw30`$jemsWaL9;sF9ZhwM60RV}^8Gx^6=zFT zFyRMo$jK}flUFI>T*n3jm3T}Z%j|JYzP8^jNplOBurY9+ZWTb_9&arkFY&+&ogn~C zeV3M}q=UvZzP8vc;cyL@pr_HR%fhWW>r%zDo7N!!pW9j#gzrG4x8sk?{;<`9z#+^j zz@u{n^P@+lVHYSPES6tCDf{z8v#I^KoshX9S`nsK7R=cMw>21p+cFMylZ$U}%+AsQ zGl*d6*Ty8VZ6ofStH6ztKaL<1k=NdDWpu6j z=F95T(4)N>b7K&?6_Sz9{mKrG&X5hyEg_lj?IEtv#!$HURiPU>hjUIm%OcF&y>-MZ zT^k$ahXk1|C?#FWLjFCO=fM{MvX-=J9o*Sns)48bZEA>?ED)a6vxS{+w+XNg7@^V% ztXmuFd5zt@=~&_I_{OnTOPH(+qHYq3s9RSwIiC9HKj-{<+|d>wW&k#kMquAQ`^=-Z zi~9ATJR;-@TAs21UN23Fy$wlk9dVZ~t<%VIA%GjV=~;|Yry>$T^fcr93Xel{!eJ_& zkT;}XF^vpvz?V~^BrV=EGZJGNvXWNyO%3=I5Gw#v+Tsc5Rnad0C(gjY%+xS6dYM_Y zYw@aY5bP}z65fzcxN$9a{y%EukA_(lRyf=uDXjWEBXw#Eto%MFHyRY&-|AvZMI zJi9F(?G-EHDFif7(jjd6Ih%~n)RMhTDlLjSpw!(OPsro@z}44kiRpO*yH6>)fk=sf z#!y_L^@apOfi298xc4XkTkvH$m3P*7vYAE;4v+`eW(I}~iQ_s(4bl2;nYus7@Va4@ zIwbd6FJY_0w(zncP>u@z0;S5|$FfsjE{H_7)#Sg6B5a*y@W6L%j<~g623IpQ1yG+w z^XVWb+#f6H?gJ7Vx(uKYr4)nJ&H~wYFtAM0>0?OJe^HR3iJn9g?Ij%tWTi>a!uno=VJmX0Ta4q=nc6P-xiL(Zx2|Ljj4NA=PjXW@bu7J z(_ZtK?@$W(GW4&RBo03k=G^0EdqhU?Fjsk!M6_8qM2kY^uNcS3RlFh=Mt|khxAI)a zu+91Lgc?B{My=#~2}%B2j5$~=oklBA<}2KgeBUa`YFYu8;=JdYoWwXGvcTskA1m|J zvta^%*CBt-CNwz)@8_j06IG{4;Wz?kkZQ#wLwQ)kLG_Uz5qSqN(eCd$J8ZMHyAY*u zv-?I)vw(0Hl`Y5(Q@*rCv0|(Lo_Of$z;h>Fpn(>k0fyxCh_LqjeMT5j)$9T=G?7~} zRKVwG6g%DRGw-F?kGHoVjck{Es*7gny#b)3SAZ<1I^kJkQM`>Oj5$ z@|sYFEEM9kCQpMCpV#mNcpq|?Ce^hfF<2kwWHpWJQ&U(?a$W+gG!ST@(Z34)oUnnt z<-*c)H@3O-jhP{uQT;}e%H-*Iu4B%au_KE(;_|#shGD`BkF%g-VGNCJhLu2QSm0bi zi{ifDq0i-j-uTsX z&Bvc}uf=ozwK--O*Rh|o5lwX*IN)7x!GoYSz90elbfrw_B0wj$3Vj69Vx6VaRHHI~ z6dBZ!C}NUvnK>o#O7m&5XALAYa~&hs1l*FWO~%p0Bnw>hS%e3LXj}m>kKu?TCKTYH z(=A41Hb9O*WEs@PnA>T%0u3}A*HSsQ41J#Hdho#5VFVWb4LRD--F?FR-J zbE!}e;QvBVp7M(}kTVdd`iU!zFQa4jflMat7&EOq$XG6a1om8^R0&TLo;M=u+d>h)oL=!!evhRW1s8 z24P@2uB}{TnJLIc-9jWSNPUILQAVv0f|w}+YOFa6LK*NT6fEX3jo%oG8&)?fPxu5! z<-TJmc8YF6+UwdHDzXG%bmc%Wssk>n`W<)3#mr#*=2_qD-4gA_z^aC zx7?#S>(x!kCTOne2TC6O!cl>h(&!6Tw3r1m7K*m_qI`f8dFxC-W;N=GWe~IqfSHED zgaMMP(4`;Exxd1zZdYn0f>Yjm;N=|CsKhjKDyA`1oI4`-n(8IL$?|>?hii(y3o#UM ze-LUn0^Jr^avJlGSuPxf&P}6S{FZq-FcT+Dr5{BOBcj9LYXPyf~MFk7}QO7_VFI4VDYO#{wAGaiJ#Ng)3?^)2k-s&NFoMc+6e1`>{-Keo0Wmcj zCgW#xKiRZFE^$G8?_v0lC#R+x0%$R6VGsmMJm|N4vlh`4S1N=Egcwt}e&)h|4&6Yy zofn3t8ic?Q=+)!c?*?$9vW8F9Moc0$tPWuk?T{O#{KA2Oc4X^tFj=AudjxkKw5(( zM6Jq;hSFs%G~nZb2fmoqo^akiqGIjCM^yv5m7AYj(>^xuuJAN~-&j+WX4-%rQ;a4V z=YZlwDYKCAlysD85}Uil8-XBihxu_IrXAG(f_gTmtkx57)xoYy1Ts2`9FbP=DS<)z*X>^<`DniKHn+pS6QJb1KsqZHN_$18Z|mCB3wkE(`-V)mI}Ey^ z644v-BMFUpQmS!aJyWorrfs2q4$Zh-4_uJt+xVw8%xcWm!YP;S{Z{5%MF@PA0HvN8 zxa~C>Cuv8&s!vjVv^T3Y1DW7KjLdAZL1bBIgQuB-a#7$``g~B^WGlwDV}>iJNLDtW znGY&FSC-WKW@qMFX_{t(>!9BkdIUT@DEB7tWR1Sj$RBS=yR%Q6H6V%tfo$rf^J&N_ zMaCxMm{Lvl;9Ra=&Z`b{?52w4+Ya21ps`I(!8vIf4d@9)BMUmjAe1>d80+eWlPidr z_Nw?v2hX4jD|ebYAkLehBpTnB&X=Z~zeI!l-T6P+ zY}sV5f_>^TVLpWq^+ynx)oQCY3T3`|k6UH)JQ}`krWrjW@AjSv^BVZP`@ygsY*s%3 zqt>`}pYu=u=FpG!Aqhmrvn7|=Pb=DvpidA+%QV@%Zs>wV;0ljuyoY~i`Sh)dhWoqE zg5~VarwCJ@`|XU;1w%b|^@qm_^w)-6_Rbt%N%=6pw`6}=I>LX*;?I`8=smiuF(#rh zI>AQ^zkc?M=6M4&;dVMr!2H7f;qHv__zvzoDdVx`YJI$cg9e7u2>mo4XK*H;C7`P* zMd>=TQdh?KlkIi3gAG$nFF#b7!ayz<$=T$bP>9a!3SU1<>9bim`0?}HrsK|DsQ8wM z2A%PEv#2?C`sDF)KO;>~1#yuWM%f*Yovc04hyLz)A8odRTRvYg>ao(w9>u;;||A%J}ByGey`8YjNX&9vTrEE%AdqW;~b>F65Jw!nKAa{ zb(lcK)hzAM+v%GAHVyJmX_wAWZb)eYTNc!QXaGs3)NuJnPuVPcN+n0e9vUqA2Wu;I zDQ+trD%wiyht4^F`Un_^;Lr3(Q{|?eZ$O7D!Y$~S9N&jOyeFjpDfV`Hn4*Tr9la0} zn}g4WutlR`{b%FwR&H&3yILzjtUNJ78^E7*pYyjgke2S!^SsaEYzdA(_F^c&O3u$E zs+3>_DH=C&7287H98GzH5dX0Cv%x_2=}izm?`P?)kN2Gt<8KLfvUPrXBU+wv zMdlxY;8;M-yfXuJD}rNQ<-;wC;P~$Fk|-1^Xw&>38r4(Fyy#H>PFs^0q?aPNJHp!< z!p~iO4=*80lT9{{Enn(mwW+NaRfEBoy>LR>Fv$!W@b-o*OAL@j5dKH%qgdKiou$KV z@k6EhHx>JR!}!CMpZhik2L^{b0sgy{hX=b2`@250>wjXWKKI)kdOn-l<{5o?e{oF} znD=adI50Xy3H*fA-zD)zTl$aAX3u!zOY)5@A`oqT$LaKpvd9~|d-iF*5#%sot;mLA zk@%G%c|5*?ThLyxR=gc69~z9b9g^Bop_L-0*=ppQJQ2|OAod0!2 z`IpnOi8J1im%v$c;bm6S@5Es1Boe@go6Y5Hnu~wH92||ZuVgZd#@EjewzS=fnDH+K zSoM;C+t(;uOSfQd+44O+lz8_CHxMLBufoCmG9rf6;I|lLF*j(D9}tmko;+ z1o=4mChYw<#@jl~%sJDu7+W15$M2Hh4 zM15({@hOF_6yS+|kxNO;qR?9gn1#9xiDyP=zf){b|2;2#C(tNTicB4U0$(T7{5FPt z1sPc?6b;1Qa!II=QgU#lk3`9GdvaPmb%L+&b{nlIFv)NqC@L^L7pTUg>M9KVh=~k)4eyhHBrlL`qC;N`NKz6E>3bd&o zu_dZ4Pd`L_-yQ+7v7*;*%y!#srO?yE!pHMUIW@C*-6GW?v4;m`9HeWZ93-W+_YE^c ztSaCOHq!F-lFZ_MO?G^i#hSKd38Dp(2`1ZW@r34CX}H4E_3L{npU4>d=y2}r4W(jH zm6lA4ccO#3>=9Q&7TdTYUctvt<6e1KT-UKPDCgol%cE0#mGuQ&({84`l%|iLA6#(P z1sQ_M&TCE9wf$m(wCl&ZUvwIq9jCL=`%>9^o6j=PXLC#zzK5S(ahn;V67oNAAkg^F z^&Xz%=8Yx!n6`K-{3%XWzdkq4l$3NETugK6!mxZf(eM1-LfN3835@f-g-XW!!FOer zt;e^#cL5|>fCTlIWE}Ghy$|?{OJmb`~^$KjX4q|0!GxedU18#cp1O@GN_RxwgGZmF{r>JPZM&JbS8vw)^MisB!YsLJvE97B5dymVGJdgCEx>w1BWb#{5PB1! z>Vi?b3oZc@FUNz-eKc++KpXg@TD01mW71xI<0R(Z#x3~z@T&=Lu^um6aXzmX{e1@% zEnls1UsXnucK|wWe37#x(6!TL?bk+^JrXSdtd6y?U7%HM34iC0CBwS>h7XV&JOWok zK6;m`MQ@6xSlJKr46jn`nnNH@ z6I2a(QZ&i^yn}HOS>Az{ae*PsVEI4DUD!Og8zs3|9HHR~8CszrSu3NyZcy2sLp+&S zKR!83MP!KC93WeSTWh6!1oS1(15U91*NrKg8ct%*>Nb_f61m;^T$4P>1opw>`(97_ z`uTPDGQB*kD0!mJz8tuNqp68u3=TsX6#eTq?I*hNb@Fx2T3MsmMozY#sXa}0i@txeI;gBy7ui+i$q5tDq4z8oZIFio5wCC>ZBu*soC+5VXW&N)lE z{a*ddqg=>dwF1-%fZoWT-}-RxgVUSIml?>xm*Y`(D+DJ-?|`|{PZK*yLcdioLk6z+ z$OLoXS+-LYZ||?Njivj6ub`e7z4B80;zSnha{PPaDo{{}HAWi~uiO7cX&KLfCIf+w z_?MuCOmLK*c|>(vE5AV;NgZChGt>K&qx0M2fg+*L#bR}=(Lu4Vuee}Y2V7}i@?4>P znSml%H&Dr#tCw+T1>C^57LQ}eB;MygqUK{cs=uXufI5S0_&vG%V~mc$ZeduheD)nG6)kV? ze~R5y$*L#^r~Zms=O;L?e}$%wzp8xGf&L{AOhH%ilA1zSuCn8=2dHabXh#%~JONZEz@}~=?Hid)uLo@4 zrQcTp@&g1h*B;DY9id|I_RvYP{#%2;Zk~O1gsdY2_=}mr)s)vi<|A4hHTQ#-HdXA> zj6jtOTLRinKeTS|2Lb@QZk>W6$p&-;rraTbx&Qh+u+Z>yF*0ta8~(xVzfUK;_fHJ2 zUT^;~pFkeNp#drWf9wk=hXBMQll<^nX)O2w!@6g))-06XB4&F8Qo)UTU`Sw1H>*J{t0e2udBrv{{A$NWA*?Fi7_(1t-pNx49#J=d;qG zc7DUxlsAjq4gwuedbBgv6cJRA;WnvF9M-XqeqaCr-&4=DSCy~r#-i{oep`!H+7LBu zeJtbbE=itXfyvUW6QK0aoir>*?v82eUsqcu7V~1V!s1e){7lO!($%msFcBwg87R-^ zA!rFZ>5iFAwAMty)WFLQDa+3!hIj>!#3C1ZWe>iXAi@)<=a)56ZtU-#2Eh>E6$`!J zDt>*zb$IbIh0Cz(fj>03FX=S4jnix(9>7t^PAzrZ|h=@w?T z@5=wlwyk+71`M+7!({A@Iz65y$eW62d&wa(ou(hqsFAh6(9#wX^0weAnw6;1k>!bf z+IG&5@y^otR`$SUKAvCWH~A}ELS^tR1!aRyM_5HhIxs7 zbhNXED}Np<@BbGUD6!;9C&<3WZpslf?Cy>zEs~A|InbqPbzZ~hv`>g58Yk?}8Fvq8020=@bURD<3e(T0nQOXsFDzgR z?wGt}3B>D2t`5(f0h=ayfBVQp>r3KunGFeV-e2XVFe5frufk0%a$1Fz09vRGGndCEZF8KYJ=i@DlP3Ny zry?#LZ;fxc&UP*?n$F-{9Ah9?hh1F$9%HMnW4lN|iG}Jx?OKYI+DrQ=^%M3%-xH7R zJ|=N)sK~CtMD0hk#t&#(=&DBG@Bp3W`;Xs5S&g#AgxTlkO}UDa z7~+AF-UcHdpyB6%E#bi;IeRC5q2MwLL86)ufH9TW>(?d>bBaQ<<;avC9YLZnKMue6 zRBI)BqjRVaeB{5S~>2ytw$vKDtM{o6OCn;|@_pV&LI8nr70D|HOc9SnDDH5glrt3|i_b@{!gT zOF25gB`UmMIf$Pkxm7Ths1^d3o6B4$3t%J|5Q&k|$UDw*J-mWhR8Q_%}xs zVrIsZKMP>C@P#ydqpMb>KW9#Suz+3Dvbsi;Jop-8#pb@w zoFbOksV>y^v=rc0vNOZDI{58gsD895=9QK_Oa>k$f^Yr%J$`_=LV&n_!y_;OeShhy zerlA>-Eri+%Ivv-zJ*z_?@tkb?ur!f9xrDX%KphlJZF3^j+*QO?K=>G#WYHo&O=}5Yoh(yytDep8P==vCU@E{@%;*Rj(+mv{@>*R z;9{n#Qil6rF$e@RyVJa8~yxHwm00Zu!Ve)M!RrwAiVJuMNt3u)uul?ulm-l|Gf* z%emlZG!$;S?|CE=0;-k$Db@-YSh2X$yFpyL^fetd?~08KxCsRUC%NW{p8gE#E8|;X zEtg(C591ntB&IgGk!@?KdWjohXuvJsVRGPD{~m2JJtIYMnv*2S>yb1YWDMh9BE%qS2T#p@ZdUI29p2e{~0go(LBDqJuwt4&$=Xy*iftem0jOB14fM_XlkTTnx4 z-I~KK7wS0`-DDnN&-k)DlEg(bE@#P{CyuUcvI^_G?ob=cYS)2(&=KMGz>2_o*1)AmgcSV>Z9>wDQWnfu)e$G69e358%@e%oiNEkT5t8U;#18e}a_k}bCfKK19d^|E z)UcuMTyx}wZ>Tw@RA*m;*eH&!gx(;%68OoS1<@=sVGmrNu}{5n*pagtJ&&%Lz>E51 zm$L9J1>eaZyG@6;@S=rvonV=^rwQm78Tn4o@!|tXh8F=-rw~>iB=-C75=@@5 z6SeS`UTM+a|3I8JQnv{i@@ODsvxeR(A}i1De=vLy-QvZX*+*YY*({p+ozvB@*0f?itq zgT}fAgWU%A7lw#34q`i}-AHD*g;$U*|G?wW&EK6883*yipXceV9tQV&TNxW?um@=Y zUH#xqwnn;L_c3_J@OqvnZSWREs;>Tn3TnZjTkM_z6Ikt&x@b+Yq38U%xZ)7M$o+?& zv`)q~h+(DnRySW>2^-;f4tANAa`lsCOXX@Z`jccxf5zPT3LyPhV(1#wEmx->oQGmd zc^948>Gl;i$O#7>{x>2)C8D^zI#_BLv8NHOCVJsFtV;~Gcd$}VXd%-uCh9v~rnIsS z#(P_0hc%Xi+Qt6a(ALX*{2CeT&6vcIBf}XRJ2ITVtI&f@9X)Qqn2;aGBS*kvmj4r? zobdIIUfA|}tiC;1KqlDK8(nIKHd6m90$c%UCD-KZ*cow|=jZh+LL{FDBhU(CjB6^h z4&cllX5l5sTiN7mXCL|^RuHcrI9APLBK`E5ApUB6XcY^Z5dEs%>MxaVny;rlyTW0I zpjS-{$3+_3%&|YK5vf(7)b|Vfc z7ey~1r_Wr7`n~k%0lVB`2Zh(Ouo5YpeO(;X0fpfPG#V!X8)WiWUCws` zTaWE_99pcB(M_cgXI7)44JG=RcEzAel260zMsPX#a?P1aoo-%yWionSo^Btnff5UC z0n)(k0s2p%71184(uW<>_t0fMXY$~Xc6h}8{FCtZp=K}dG-FYppvsV**e&;ZejuN5rY(# zqVqB1;!rM5evY?bfpYxBZ#7#Hy)1wtvf-J>arkgG11MVub9vR^t*l8`AMlnA@ckcq z6VefTepQ+p_^=DY@iTo;2|w{)+Xnk2i}xc189>H3?fQ>U0C+4J9%Q3MrmQMf+NYuq zRsK}Nhl}8OE%ZUR_3TgG0gf-6+irwUO|-_B_g5^Auy-oJkGU#cQ;M%7LUz1hz8<;PYqjINhDe|7hQU2m&s4MnO$3J3$U*KX}yPd#Ij$2ZZQ$9 zfq;M9fz2h4Nk|+7v3q5fGDc}Jng}cz3qgSM8!SjZ?b?6x`ZxNh00ye5@vTLcP>q3K_NkNo-cnVPNr zy<%5(_Cu8paP$j_vJ&-o;gqq~e;qX?@2Tb^T%A{K1dloSZ(8hySmPV7laC1?2W*Fp zY#06f(93d^R?Rt#5&vr!+Y*j@AT9YMp;`()ubU`~IcWNCyP9rJ-K3o4X%5_ytG6Ut zS(2dJMKSQPdfNYU<8hTs%c0=gttvY=Si+Kw?w!sacM$2Tw+$ZlLa$l?ZyW{os?uQv zoOvssLO%v-QmI!pfVn9FB(IhJznU7vXt%Z|4+b`QSExmPnc z5fb?;9hLBPhW{w$9)a!(aK}{<;f}P3!JCK*yPTe2pqHzy&dL2#XU@XA#DL9Ee-9>Q za;er=8x6mYm!&1^1$P%Z>&od^~Zta9US-mwPIZ?M!;Xie}9hWOot&K$#yaM&9T)LqtmahKjjgpxx@9>09^aE zc2;s5mCZkF6R-;Qe3**&ITwQhVvBg!hBZWMe&CL>pl0O9uX(tGU8=NsPmap%l>!_I zZ@qxAKk;y^uT=Bxk_FX^g9BJk-QH%q#NmFl@}=1Gv}w!NRzhzc_|Bs+ZN7XUk}$nq zLLif^Ppp3}Kb6;@9G7})y;Mf`%kRz48iM*snB>!1SI+zsj(*#5FEC;9z(rfhxo@0j z35A(ecd#3g+&?`BtvNhF4#)FCMD@_%mb>UOGr^lXy8y(Xit-;2dy8-Hmwo;ypeObD zb9AG5#vAYp8;z{RJOA~suyV<$@sE{*&HbCl6UY?L-W0CnMs_z!=$Gb>@^oTBQbP&+ zG#TrLPmp}T$ucI&uI>L1)?3OW$u3@(36leI^Rv!<-+-i${{<+B5TdG|feU|+aBRBV z6$5NdLf-|(dK6^JmZbC!D&c$U;QNh-yWs&Nhp+GMw5P`@UBQ0a>N+C>OPI5Sg*JZ9 zg{2Z)M#{9_E*WM%HJe+>m%e=}thQl|G3XgCm=m?6%f`DpoO{J<$>>ZC*0f730EC9w z6t|8`uTmsn=czI+?P*9!zzF~*9?S#fdf1-wE+F~S!gxm76;0cGO+$4j+L$EOKb)A1J2^UhE#xvgG$Z`0!E21urN0BbY zJr6S`T>chHQUS@pe=*QcaD)2D(Ou91S4dt3j!X&IK>77Vmyu&&yO67f@=SbIn)&Vu zCOcF9Oqb+BoiqcApifDM?@-9|2gb00+mrG|6Ikp+Ee68)33gunFv*oul*6G|)a~2l ziP~7cc!Dkp*02yk*>d?@!K{2$>BcjnG-vgq`ha}K_`X1R>KoLB|P%CiJd=gMGld07HzHDnPDEs^Xm5L~3wwmH( z#JITQcf(ZV!WdNF2nWzWrnB9`3`>cD6(MH;CfxCI#T-6+Z4 z^O0yel8-CA1NT<~!gC>5an9^Zoj3rU8vyhzrK1Y^mbi5oG%Z{O8clqTd*=v>#YRx< z{WuXg8|Fl-j$_W^Rkv1JS17T77ZY|JRkKj6Vsgg_+<>Xlws+43HJ5HON-jy!6ARd+ z;Ylhe;h>nCI5Q8u}E9(TA8w{@&<@IV8>d(X9 zXby?i=Ie*4u2_Y=8NH&97v%$~GNYyL=dtE3pZLhr8d0HKC-NEjMvH)B^DCC}2+BFh?D6#zTq+H|>ZFI}vSyje!B{()-_!JDZO?I*NY`kmf z?&ZNf0^u(SexOVj9n7g|H@L-$VB+N#tR@_%!}~mk#wb4{swV{xdjsz*RDi=cGNL8n zu@9~^2kulCQ5ZF>SMe$wfEwo|Rl%D0;RWV?P;n0fZH7*kQF-Hc0*;LLwV96n%Ez2g zWNv8yQ6T(i5ecwH`?VixE!6^9nqz1bmdwIj6;c~N?7{+AWTK|iQ=#_8r(*d zYTQO@S$iDBX8A2f)t{i%gt80K5nYxfYB|+e$+DRgO4unz zzz0}VUhaVa*coi-Lw*RvA+z#9)@gTh+HBnC8;ncy`FMq6mgL@H3=Ro&1~u(OEDb|e zbVU)b+b&x_v&_E5Oy%LvD%%}89!LLIlBgE*^5|1M@5XLK;_k5 z^?7ytFc?sf0K5`p(l_+jtU@g4_3qvu6t~8ZYqR#9Eq6x+C~;O#2e0ASET3h!B`VET zKRxQS*+<^_Xv@*o>`pMPOanFV{!;LFa`D=mP(Byt78D!`DzJpeG*GT4m;zzJbO1Ol z3&Say3WB3?hnOV zFQCgdQInN8?B1!v(PJ%%E3oBDER$ov(l~h~-$HC&kB-NyL29{FY`G>)%QR&`lW^4S zmBer2QrFf!afa2SHtK+REW;NvM`A)gyR30Zhj+9PLR zxmn)7$Ru=?4Cx3y^hi?6puOr|Z9Mc0?`F#qkVEtR=Je)6R9n;WI`BsM11zV6NG@AC zYHX>xW7PDZ{)fyPYtCE_07xB~a;&`?7TsbMM%|o# zejXP!`U@_xB>ec8HwnIk5>Q@+hQn9ONBOgsD@Jk?2%M9q$H2~9`=e3iR0Tg&G{*R|Ed6_U}d&$<_lttSJl_mB>OD&Catc~XxqzY}A3fz5=w+1O=8{i7 zSiGb%_`SVua3M-eifJWHR7CNi=krwO#Uu5f0wxv_I#s|=5Az#vh$o1Fu7tE@Snn^Z zu#!_ms9Q>p>=ByB1hT^9%@|@{k;Op(3q5x-d!~}X>M~-qodlZ~J8Bn_58JgLoHVbv z77f|@>^eLC2-wVic_xhiII6Fot8&u$@G(!d-$YF16H#nGRVz)I%?I$V0qM`USrNYW z%j&4MXoq7gj)-hA71gvuDrIb3WF2g5tp*;b$O2~k7m0U|kT?iKn3S;-Rr=k7GP@?u zuI?X<1NVw=QF;31p@{y&^7Br9|4TQd->bn)58qIL<2Lf8J#LiS`?Z& zW5GOv;|3nfe4pH#Av<#Qyk#2}Qajc<`WLTb9N8YMN48*Z{~TK(s(doF#&Ekn?W#|D ztu!LwczZX|0P(Z@EVy^jF%roTpwcXgsDM*73H9Kg~^JHOSQJYrumj@U5qVd9XJ!enrk0Gzml=$sY&ec%u{Q(dzbJf9}0M1ti#DI{W5!%BfXR3 zrh2^#y~mdK}k&^0A*}41@5g-)bi{A=cNnkJ-?^Ep1Bx+!h^Mf- zm+WS%ltB(IOjL1`Kl9a~f>?k-7}@ynXC?TEC;Fdq{M@jnh484ng30?LK_1IsYNCkK z_&ddMG{|wOQoh-A=ggfi8Hn@L`1sTZc<0p`#YVB`_v3wv*IMUny_*s!Zngf2{Z^GgOb7nO|_Ic&cK&Fi)a{{y8V8wUPh9*?Wc*U+rtD*a|N*D(7P z!9!Y@ytq9cT3+ibH?rA@JQTzMc;3dJPU=Yd&DL8F}GQUP-tt6VqC; z7>lMZh-oqlXdJXsndw9Gjh!>-@udF{Y1%=F3q~{Ya@i8Xrr`_M&hA%G4r`@&MnG#G z@k--Wka(55@p>Shxt$!$^^3N64I_Xbf4{c(Q(Tp1oDRnmpNb-B2_wV8!oQMelM%k+YRX|Ozoq~Mjar_jpyTM^#qxji( z?f0(MYfVV~TKm{N-Z(5ymqFo*KTK?B0f{XMOTaHV=rD(3*EPTb)G&pyP#9Ya>9=FL-8Z0 zy#7Ver8l&$!w*aQ_$@hiiVo-wef^{(G zhN3Y=#p5R}i1J5YrHuZ3e9I_4c`2<{M3&7XU*DoxY_hn?{e6ign4@_OgN}USg0rpP z&eQ*MvhnTW5y31DkcBM%L`k|1M=)Tw>Fy4K*pPSWkNEeu7_SAqOjOIIXU{czijUa_ zOlH3n=*7QEd&#m5mA5hce{6jNa9v&7c5IuCoyKX0=uv$1X4Mq?ZQ z&hxzQH{X2o&#c+!%sFc>?c4XY*9xY&edf5~hVzTXObcx;H%Mt_lolQ<>k_y(Q-cel zR*4gk>{^XM#mxa6fW-Pu*#19A7aKx_yAuIl-jrwr?Ce#Z(P^~x2H9hgf!iqu^ z`E%u9t1b2EHP7!GnvxbEu3`RDCMEiUJl;*jXf($y;c^*hab0}(g?K|0Zf#!-%mGXc z_!;dyV5j~IFdE=sxMxQPztrfEfbJE0eM3VzAV*@C?C(6@%Yf_sr~?!p(%#{fj$pS& zXI~XMWDq{phKfBcsNuKewF}MueIm8NW|9w{LFp#`C@hHRU9MMmh@_&!3AG}Ivz%GM z-*VzLF1Qhuj2GGdZBZJcf#F!QU6dZpk9uH10I>5CY11St$%Q}$|1&gch>pf)@z#H8 zsDAnwRe>aB8(kO*$Op3PLne^AxipJIZbg|JJPPQqcuwgGUsKZ7IC0@$01gTbkV0TxZ9{zMVbtfd*urb%rcsV) zAr2HuTS>it6aiB`I5rf}KBPy#QL_L?1gHn3=fgOu?5WjQ?f`=T*fj?LHED<8&87S1 zLdP^?2Mv6h*dE=v-+05FN%O5hxeqfRpLC_DN}~PnQWYWDkJL~%e3t~3QLCv(8Q2fm zQ4bFE=n4SY9uAY4dyapK5bS%UO97ekeEgls3alvZa|J>n2on@|&PRj- zYC9k&#!3UJ*X$L93x#O=#N=bLiWH6;Nxc{#fK8AnOdQxtwtZa6=}ci3 z)ckdn|2Cs5M|Nn@)r9HRj~NHX1O>)`sbvrgpDgL~7nGOL5ucOTP@pYtiU6Rk)mQv5 zKlu+KK7(AWx4)_f%EOJFb*sZmYF@*DcK$cfApDgzVMCALrJaGQd){Qe6W!{$Sy~uY zohG!Ip%&_9+J_xoVZmf~HH$~^g`jY;}mG#?NQWpk}!{^#y>7Js?ZIyak-?U)ANeh@j=^nD~`8}MX@)6k0SBDP#^^r>7ioiS6fW;*vsp_-fN#<^1 z%Rzv0aYh+x7>o#N7{E!6ui9Ro4kXQq;$U8Z^cO8aGR}B_R>ldH(@3d}C?5gh@m`D_ zZ%t^+V&pf}WW38GnY13dT7aV{lVqkPqz==J$L@!N_uXvMK5CG~=Y?1la+ck0*%YMWr zjA(!Yqmkkl`>{SbJ#Cv$2jQk!(mnqeUchTILZs_f1I8QoiyA%iCd9&wwZXA&$ES}# zC1BpL3VQKE1g&Gjvqi`xrcv1Z@3nvj@X|Qp^J9_NrA=D+_Vx^NfnUw-IaF92h6I=x zF3!7Q_l?gXNMIa}&Li8qYR>kF2z|6o8q|JEr3aTMFaf- zgS1RS@bta>s%1r4uL;S1;vkE8NdmmTaqFiZjlq%mfe7Ti%v9CbI?eMmTqgVo8n7_w zo_`o&fGyx@NPGjBnhtWUQ~;jn_E{`p+u;kER+B&87j!@sLjXurfgic-fUo1Z&D&Iy zyClZSycZs~IGltKxsVnLq;p)VJxMKR4^|urg8ssNkk9GY^W(nDlH)Vae5!w z2sG)^b^!ST*j0Wg9|c`dqm{Zu{$dZ zq+U}gM^bAGQA8lNq^;3(l4r#g1ekO%{|s5jm=a1T#ndUT0GItJq3>St_+E|;L1OfC z`~TDk6rPO*{{83UF;g2ic%GlNUx)D^5%y!ihNLGBqKFzl74n8LUp{*+IDMwSM@Tj> ze`PgVjRGXxhY@fFjl`cu`E%QN}4uy;PlipjtMNXS=Yg}%wqe*dN4|{qSUYf+<`;JyS7m# zeTN!W3HX*x$G@i0nb_h`pibajBpFM%Peo}*2}_{W?NWpK6- z#pZ+RIRC>H-ONVy@v!zJ3tNx(R);Zx5DE+l;J8TX{N$Q$W^*J^VW;}=f3$}Z0skk7 z4hRSdRea>$8OA`X3b^P7r@iD#5q6HUa4-LzQKXn<9e35ekTc@ zhER=kVKkz^o|=LGl#;c`IKCh1tU%mvjo<^$>_7p&s>kkdE+PD?2!(ok>p^;SL=bwV zc<&=64U(6R9VFJJq}#D%8+u=JltowR&4#E%cF_|1ToMm^!5D0HD#eP*f>;ZmS9@2$ zWqFY^CbC)GeT=P14;J&Il2*wf_5glZzR=k2dE`L~)Zhh_1Slz&sF!3L9AkcOB_#IG z12jm;oi7)q9#(Mc*UG90&*pH2UQBT41{h!@ALSG32EJq&mm9>3*F2&NNV}DQw(0|C zR^Yd96iRE(X#4XUIDm=)3JuD`|)=s zD?6}LxDPd86h-uyOD;8NNIQ$>E)2;>HUu?EnDnSX8lqkX0Ef@UOj2wE!L6RZS-6K4fLS|IJD7%$_YNiWoI_CJ$_do#>417=ZdSlF!M322T zAnmxYwK%N@1qca$v(n}OX@P9`Klzf4_ttBJR8GEUAGqfBb0n`(HurmX=_`wN@!EFvPRGZ#{CgV#F~2!9N%jC_u6A1Hv}d&pJ`?f?eP zB8Zq4APf^Qz_4+}zDRx9!<6Ao1KZi)1^?w^AxtFtYk*qx|11QB!j9Iu6GA64GCOtv ziSWn2>Hj)P%*qd531LO7cfA# zhiS&fEi6C^6AM)0pN^V z0bCJXu@p50qCw4A(3}2UK!QmC(B<{68%Qu(5n3}q4wFscOsB0xjBX6>chfX7>iFLA%Zu<_!jv{S}iiAf*v+Trf+di&RImC%HULtAT;i|dzCLMh1D#B`Z3x<2!#AKKv!BKtR2(VHsG)=|rW8@Rt;oaYRSBR!KqM2izfR;6 z8>@%{7_ZF35@6v_HyA)SZqphew3#?r0q@ni-mxkH=;`CC@y)9R;zfBQ8Z+EA6S z#e3_z9g@ot;Bi;E{`oFrmI`?MTHqw@I>ic^-#@d5OUm{_hOzq9_Vib*`pj_UopA)yuVlue7JsLMGZnO#SPs8p|&aDm>)yo?`x3yAQ$g= zi4)RzJpr76j~ti*6EAw1h41U20Z{RW?LN<$RyR&BP|ZG``Gcxt<-b)J0xEdsvIvY( zGSv1Su9L&)6L!D=7C`Vx|8hRS763m37%i_BHIUv0sUN@!e&AlESONgts|l`e^91ymBP9ai?PZY-`HHOO#mLFtD`e#{t01g7( zUfDwCGW!4weqW;`LFw10lUNkN;h9I-uz4@M+{)7Q`gh1P99Z|~=wl2!2-a#)AN=tJ zdTSUaKrHal#TpovzzeYa6ysD|@(Dm1LJ>fo0SuNS5h&zTToX-J-cC565Mze+Vap{G zN9!aT5uZo~+Z7M60uYT{(c4q?yeAg|i`&yPk&zBnpC@CP@mA+wVIT4;JxrbwzykuL z_R$LJTtiC=!@K6=Uotcjd}9?GAX!}B5&4l->0t#3_9wuuAlLtGCRA_`$^h63J#DE1 zAvc2QUuGU{fdBF60?LU^MaSdaOU#3AQ019>oaA>pOxz3;a4DSf;4;W&~@t@fO)LbNu0%_|Aka-cn!2q%UcOn#~+nE1QGX&QK z@bv#Hg_(eU_g8X+)+QnTk-&m5t$?`yN0Muxv5)@4Bt`Pb7GQQ=o4_-LSO;YHe;H-} zAFfu8t$W}M{ooS_*#FZqKy^9(WqtRVJ9veI9kC!2wwovIgea9)uR;Dr&t3OLKJP7+ z8?Re>Zxcj5ugHAb7uYUwa_V^zUfp=1F+VYSfSoOod=Qm(Hy(P>Q!1adnOL@?dNCNB z*56u{ARwaCvBUg|>Clly~1h?>;1)@4~XL|!3!H<`=FMh&4YMyba%|P56qJyl%loZ8*1X@S} z*jQCOLC2>Jc+Ku3J<|tUv*BJ}EiP?fKu)=>#c*)imbzJ~iOvLsQDrK&g)g3uj%h`s zJUWv?9nXSmAQX=KbtK_-7*PAyt|MC>^nC5Z)Uj=e`HsYHe?0V2PrU+%1=+Xb5)}4z z#NODf7Njzrp&6{UjWxFdvM&qyVyu)A;XrBVJ zbN2jCqs&~^_Sk^+4dZPeg17iae|8oYYw+deEh%QP9mh3{=}i9HnJd59YTx@)1Wn{e zqq7s7V3!eUx7%lmJ}=krZ&~ke=fEM_zONI$uRZVJARzDWARia$NG-T-0R)i-v>K2V zQqsiwcORHFp`(1(Z$va{p)0N!P_Hcqc8zO-ndkX@XRxZ7CN$VVmurX_nV*gaCLK~;6}f+f`0T0 z4k9lF4uJsz1p)(%f&}DF|BqlJGzbVPDF_HU@Qa%@qm#MGcawjw%nWYdtxq(^V(=R< zJD>;O1x9t|M-M#>xF&yd+?{!BCF$&nOC$#Cj@t<+w$NdK!X3;?`GHwXN%^gNP=`aA z|A1=RjbYX&lX(y2aS;8v6&~L9CJ=Av%E&r<&il6CHZZ^u<9MG?nwkSoO1>wt0Dt!I ziF7D(!lLHHLymGsa^;)imT@$$ocMwk`d@E{^PQNpZE(!ERN`2*cBn>>4Tc)O;Jsiyj8qZ5J2ax0Wq1-dac226=?^2b!&LvStxyv&H_9Z= zg0oVN|FJZbz&Uy0nS^Od2B(~aG}S@gPrDw0ZBqPXs80KkbNskJQM%ru)d$^#qU32T zh184cAJ-?&AhwG5-*5Mh{Yo0+*H@R1k39!_=-9_L_Cw${0ag5IyHtr|z#~g&TPL7hsT6RZ$GQeg0IIdS!hNxY$M@ z=EObWl;Y(|HJz-X+qxxf)_qX+ILeRJR6`09L~MkJ=@YpBf~IASm|~OpCMTA ziH}3bs4RGbXtts4?s06iy1m^-9K5?<_F*$-zQYqvndGymB(IXlCYv-7y}b>*zuvkY zcD%o>AnUyiMWvX$l={BC%{6SiCVHq_2GQugJ(jBJ`QBbJ`aZl7>2d$LhsaFcLdQc7 zlO3e+7&USeFoH|xPYX|%kS3M>3`^i=6LJ(6PQN*X$BJDcXN}H>8Ec~5`CMv-wNNWw zhT%N=!W8~_llh=*B4`E#`Bs|(UQTsrnzupXqg^KY37Wa_xT;08=weVh=eFZaq-aE*BceBC){ULUR==NoPDU z7=OOy*xH`#HqRMWz4-ePqSYqoOu5t0N#3p3^uS~jHs}g@yU!v~49zLg-}8^$u|;5c zo79GsYimW&UI&MUQ58ehnv;${LQ^#Y`5j077zC@8KdC-tYA%^tGbHNBYf$LATGZk& zO+yv-_bn*u$TAPA!lC2vEOdH^ju&^!EM(Q&M$8VWwpzwY0^L%FyDgufx-pc>cqOov zA)D>y&);pN@Xz1d|132m+rs}`@!zk{wr}(Ij`c4rGRSVF(c~?>L_a@$rl&SCvm6_Y zV=E_utz^GuM);YTXd!L${KEnw<;h(i488$lagexc&bBCg9N4eTmzqguv|v<)kwUU5 zus#m=%d4`3OoIhq`L+??#PYAgj$Jd#M0Ly^A8W zr2S0ec-!By%ym9D^Bg%ej0#fTrz7Xew$K*yJBtCnj^pBwNH-@1JY9O=WfIMWF@$Z8 zyHoP>89$~S$F1{kyJ8W!bi-OaIK1+^kc&E5(gg=_so^w#ibJ${H<*a=Z>$+EZICxn zTP(69Zuvg<-PW)njI0zjnD1YTDKHfgt0P$=(#sMasS3kkdd-2O+OKVU{3s~HjCZ-K zoP3LSh1xcKEOtAO>r;jd1x-s%?x#cRom}8)_@uDL^`ahD0_w>1{8}b*A1Qv;B)LVB z^x~BZc)H3`5D-D6l^$S>_tdAAg?3ndRmyxV|5iatWRxt*xuH0`#1oK?Xd*SR`u)3n z^GFshLbFx(U&ZsP^VZXLpUU}Uy1N0{Y70#Z5!>`L>!&T3N3>Ey>^gOmre}}wQ|ov_ zh!V$ixBIpZ;quhc+(O**eS=?rt`*XkJaPn5}p{A;b@$$fByz1E*=iuBJ`1@M88iDDmkXq)3~FQC>GONY*O9rP8DP(sOQ` zRN>kW8E|LsL=#B=iLJV*I;nBGL8|^PZ5vNfy51;XpfEeu za8!=!n)NI=JnAGXr-~r+L^qM2w+;m4MC>OA+r4mlEKsx#HuzI7f7udmkNGY9!i_0i z_1ckVU+35mfY^GoCGLz9pd*01t-?m44KSE2o9!{Eowk|tND^Em2>e*kx8q9@+e)4fCz9xG4)UhgbCZ7q&M!wttMHgWt=@x9tww%ei@K9#fY`Wi=MmxOi@%6`44k}FOH zGIQ6^E2}}E< zDrgPxjIXJ6qUZQCTi4}P!l&g9d@>5Q)YpQ8p00NXh(tx2qIxPBfde5x;;@Wv3+UAv zeyTz+8f;^8EYV7DF-FkKy`Ujo7pRt9O=e+pQiriCEj(*(ixq2O4vPHq?tCo69kmt_uPS-7~ME3E$v33IJn5kqCvW=8b@3~+0|KB zhx*&;>8Lrf^Jk0yc;O@OnQ}^~^-kzOADX|q&T>!_9P|=DA3{@9pl7#oGq7w5KRETf0*)xzAuq zhJYc8*t#Hk3wk5b=QVg9jGvEJ?qwdI$PvFSAXhKCd(ES*r6CDb(oNxNFNluRwhG>V zaflm+kUiB%v~>UFc^9aBZe!=GbFM4C&HVM4+-FY0AN?9kHfnLTnMeQ}*|!2qfThGJ zg+4x9TR3YTm^4Je!-bY1(YT;L-N7}Pi4|$S& zDFZKa_TaX8v?jfoF{a}05RLb)bY7IENYlnDl&Ni)qJuFgY!L6%=Grs%Urja(*@e*j zgaPYZ4>L`V0xD*F<-aS|lHxySDvCBP&f7v&93w@&*>O63AF2Ajy?el&o9Fb&ru$L- z)OEkm8anD}~uwSe)LiYT~584I4cq4T6Y)F*MXq$vTk(nzRyb&9BDqyySN732&5Q>Cu9 z&+M0<&fkCPCrxekl*LD(oE&7E^jYu1HLZN}{h*9K zXMz`ZjLbK!z$fx_*)*_IypaNA?Y&yFUAT)5X6Gqp4zC5xo(A^2OO^fHcVugC{ja7S z%ZpCr+^`2z+)E7=N#3#ic4SX?f3_l#tDW_ls@5N;+k=B&=5Ao4iIvd{A)y7N*+@t@ zbK&tVuH|M$O#@S-MnMGe(@+UTrg*e^){1oed2Nf1ja{8wS_z=MR??{kPM)uKW5GZ1 zaur52ru}^QrW)t(7=TNH#W4!f)o38v%4mZm%Tr-tzr3-!XIrfB+oOm;5NAM-Ipw|1 zd<5EwfiiDQNMa!@B{3`80+b`@QdjpHwb}M|phQ_2T3#p`k;UL;OEA1cvu|a<`HEow zQ7Ql>xN~C^z{3u&Q6KM6 zA2+ECe7%JEPEL`pKz-t9iMFLBc{(c^FQMf-p>DOFoN(i+0<73T(2UJNTB1b3VdQY} zI)@vlK)@0$L5^BcF^STkp(yLQnFSH#Fx&;{VhZ$_9%*OR^shcca67XS zXb+DKD3+CB^h_eLMm2*Vt#5;r*lV?I%<7-;hPqVF*;mY>f93!CcheJW3+qu)7tChP%4X zqoLzx=>ln}H8F!yQuQ}>5&!qMnl55~!Jjo~j%v%?AYX&7jqp>eoO0~KbBcF zzh+$7Ws}CXjiHk)luxdJ<}fuASnSMqwttI zSPXu0httI08PxT-aBgUs!`491OGTYBSr7_da=Jxq8~N*U!|irjBVnCluT`H&y1_mgx$ul&5y}D(k_A z6?&_Xr?&D+)bdx*&5>_^c&LZmX%WhizSQW$8l}aA8%t|-{VsSe`|6(H{P=?zQitVw zN1w1~rS3w}LW%p)uFJb7m`#Z=#uMhcad1k0l8b%UK$ShE^jB=RdwruTg73>iodZPea9&8#U-2LE z!;h&@Q|10zuCeqUDAKQyqGaXWuxDJy^?2f>gOG~HY&DO*etC02OU^d>bh#9W6(EPY zs}QipzC*?nKG}a5jSZ=D@!V{@DsF=^sTtNrje4AwiqjxI28+I^(!*=8#hDNGJmwn z(<8@~HW7r9_gu=MmMU6kwIsi9KQyHQR*%u=SQ|d<3zSbUs`Kt_s_)*ZNUP7#6DNqb zf2+*2a%LQV{q>%xHk*0&oS2jGz9YJh0w;QC2fc!Xtx{n{W>27KhqvJs|NqyTiMGVHlKKe(!tDeGg7F_~#@xWc z#8}D6!NSJuAERdUmrTs+Vp8Ef_^2=O9~w+z$(J{#;W=@sJrBSCvyk*O$KNTXrp)h;=*S1bIV(<2c`|x$D02%xlJ5L-)M-7iafZL+6&+ z5>4+}4{ugaR5#tLZBh1XD%qyR(FJV)r?4AVo5tb0dYG~{F-`A%wTE50Kf*Y#*RDOf zFw!^b{(2OFeazV5M#8`Lo}vc-*#G=?`>i(fucxm{<*(p#q}!qIrerX=leFJ_jYss{!r=rrgz2v4usa4o0|+U)s73cE1LSW+E$tG}UA~zP~U<5iGd#GNwyTEVTZdJ2h;d9#3-r(kI3J zQiI(v(npx3TcK;+asN1H`f6Wo?W26%uxzQHs0h)V&B~i3mMV%lyXMpj1B*=Z8jk^A5+D=2t155-ocKE8dw~!}UaXudY-7 zhwd#ZD;^$xrFnl{!lzdA+;mFXrkNz4{xkK_d8xM_$ZX?hqG1D?UrPI|XPUDmIgl7~ zQvas+yAPM!JnS6p7*?BVd5>cihazFo+1GNG?WF(hEayG;D#%p3`s$Vwvz+El*GQW@z5R2Xd3PcI~KPqNIpAyO~jgT=%$X%yE)BT~qazQLFMp z=e&l4nY<=P|JQJ?o+X>UG@2b6+GEEu` z(rlCE^i=8@k6ZZO1?N~9JoWKB$BK?wrhW%CwY$9&d|wgJ7VQWwPj$pctF}^YiPp5! z@7Z8Nm#w}=99v<{ttJ!P6q+KAc_#i+VCQ@xa!>AKHM1YEYHp*z!=Pit4-xNJwV#{ada-7_<$vWbPt6u;CdXKSt%?Lhk|9L7nc_i8|6`uTx*mg#P3VEt4u#qkwUrKDjQb5Jm3tv~ zWF0p3o(G&O#-8)OY1(;98m(p0Q9hF7d8FBu%%nJi2FF6W$?+L<$ezOlDkQC1F;SC- z4u%az$@FJ0ewVtd09xu2az46z3A8X&=yOw?l-B-GZAJ?Hrq$~QVbe@XZYi%{jS44w zHdtu6#q_t%g%PCpy|7Dh$V2JJC7YE;(`S=^L6*hUO?1ljK=1q~;For3Gt+tSXM+WZ?%x!*Mz9Or9!1~Y^f z&~XDy)b3AjV{-=~8+G97F7~lsE-j(Y#O0m8Rn<{`Yoh#ZpNU3ZOff~v{3R8^ey8S9 zo0tH$Oj?+Ifa+^t=XIShZ!h;YTyw0wC82K}CqrGXiTcC;qMcb}2W0|_nbUj}N z*h@*UK{`2vSoatFHw#CYtBP=FZBF=u`oCAr?}#`}tKt~O-OFtUyhvzVdT~)z?UWh2 z7OGb*fr;Vjr#7JpsAp2M+*+k(p2rWP#rW~ywS^NIXvDSfmyeL2)lFGvwXQCziV9X_Zv$(9Ituq`MIaGamU?%#&!B zuNk6J2iGS6ks`vC*NR;Gz<2q(NVAvB!-mh&!33xjp&h{EX;H|<(>krjt*7) zQU3Iy=+k%|lrj-V)Q&26wHu&(BiS%LOx4zY&cE0CA^jCO^4To!!m=L~U9}H_qI<|4 zuX8EY8EOW{>VB`XMYM$<)=-nuk=C9)w5dvAEzE|2yf7H^a=PaHZcUYDM$69~UCkZG zbcausI7yPw)CwE+^?@&0I6QwJnaHrceR}S@LPk1kf|{|Xg`5tJ$Z{5kU?+{-7To#wSr8~T9!1MJ3y4zv&MR1KmR)lMXl(mxFw^O+C%n5FF7 z#5#KbwAKB{T+K;a)OD$hprBZ#JLX;_ILn0uQJ9QN9YwJ`5>KkWZFC_XTM8VLSeurg z1ihK+T*=_bV7W6~bX@81m?1%$++t-LJ>|+DN!HW6)3x2X)ADQGT6lNamQ=S@@} z5yWE3#>$@IKGSWp046AEx{_RadURXQV!gj|(xe68$P=l4K>q9~bRRY?cR-mO_<7nj)pEfQwHsZ!T&^+zc4$eLriqZVX>cCsoCkRec2sam_hk^MV?(Du-;ubxHdTBXAGW} zPOcjl4;`3PPY_r~$8h>d(oV2aIaBMP=>&57kiG=oMsa6@rI=9NI;WHsJqbxWi&Kz> z0++sRPz7~KMc8Angc!Du^BAQi&bT`1p#I_gG@jh5Fz7_dcE7NbZ7jNsi>FTQ;X*vT zSB525b}tC0j#FMm-d*?CN`o;`*(s&@#MqS(s5Gu>>l3jn{50aUwYA{B$?kF>q=hts z&fffE8m)ZcP0QmJi$M)`lJR=>Cxi0EsW3_liHqr+gC0)U8tzN_?ZKw6Pi=+dpWUB& zJ-O)}h+ihD^7W1IJ2@j}7NZgZF;ecg`{vv3xdy(xydH(DEcvr6Ea2CbMH3STo@9YI z70SrM>4<1-DOE_3${NL6sL{MMRa$nyg|X9=tH*jr@Z2xmVZEl3$B0J|(_v8i4cP1l zi~mUw2rwqc(PKm|dek(Vs%fvpCSnM64AMyL!KD=8<}H(U zPF?7vT@+=bGyu24C3aRaMcuTuP(_Jd0BvE-T|6+|eXYPwT(y)Z$9N|~AZz*Y9si*9 z_laHcNu*^#MSyZG5s9*>fq;0S%Atn>>J#V^F6zqV$%(kR58K!EOpYpHrc(<+?LD(N zHB@H(I0~ztCQKiKW)bB=!J_M$3+o0ixzPDNVS?vR(T%a+B(_H@TQLf&sjNOdg5lQG zM$m@G)5_*{HY{kq(WoZ+}PwC6!3n+dk<>8qPGq{-7 zKG?-SkBzfT2Jcf&#LglQ@2p#{YjCfcXOMijx9s8zg^^^!GVz`5y>3X5JmCcnFLygs znNh&`RXQ@;g{|aDiB_bMJ|Mgh-5f#w%Z`o{5i0vsAYZUX`GT(r`??RBb`xR`uxLZ7 zz=7jB3H^{tF|t`M9Uq`G;c9LO-ayL`Y#zpPcl-#L^1d3P1u}=jCtR*v4J%nNBn45E zzR(IvUvciP!JL4fN7b5YtSKQvG|3A!`+y0CcH~?@TXJh03xsM_kf}7bpG!q5p^QMA zz|rbqsA!{g3?z5)+IJ|>XJmNZ!F&e&2B$uOz{(>`SJl!{ynVx-zh;;cmDSo`G_9ce zI%w6V9h~5BUFR==Fcy3D3WRg07 zQu)F?V^%$2p4NO49hoa{1_c+=iM)b{LLZ}Y^rW%%H+0%eC9?-DBG>yFp8uqjt1qcf zn?Q9X+`&EET>L0gm3dH6GF>(ieG7x64>o+3Rzd~0c+!8e;pAZbRTJsS{ta0&)W8de z`%mmod)sF|)VrSKXD~MkqN$eT;LJ8K#(-${5}q-g0h3s$Any(f_kQMai%5JNBiDh& zcIE-!QCI>;ILbw1F}!D}YWx?(!Ow_(acJmL?WFvNsecLgGWi=6ze_frw?L)_gQHP0UBaGrYr+Kv$-U^t zqSKf!tEie-6ibX=EIDPl&X1(VPE;D?GVT*Y^BO_#EbtBtVGiyA2 zW;DhdkY?Sv5IP%zk2($`UxM``===szlQRiNTTJsefWy2TY)|a~MF3oH{r0jTVYoy2 z#^Ot?DNZv%*IjhoZ6+z}#`CK%bj<6UeN<#wAof0Lf!UVHZs&c|xX^Zb6=mw@ypnqP ziUeds|FbOpn8$maL#h>{i!BEgunNV(xcr~$Olm)F6}0n}#jGyKMoN)4ZNWjU4zSrA z2?x|$=1pXWMKnm<;W)JwKqXlHTCOv`foGpTQCM48#wXg*(;1=j9~PCWUewd(a8}$u zhDAJ{B-E1cyy-UoSfNkH@N4g_J;8yhD$k;c zo~?PeW5wZm&-b67!q%eJdjywHTXsaS%pemduw~4GMxVr~Z7Yci^$`Wb; z=2t9XG?KG(qEkr_`0eIZwDD5end2hKk8J^eQRSlBGNOvD!c0?%Gg&t&R+M0r4JuqQ6<*rJQ4~PRi>iZm9c3$SK-)w?*hfYMAz2Vd<8rseG(O!k?x*_} zUGOydbrqp|mAKxp&c!3$SLn#8pDmg-zA{#>zrDTsdb~fEs%^Bsx!hw>x;m+3D_Ms2 zHV1*MkeD-*3!FYNss0rvD}gKXI%)w&x;8_B+f6;cpCW`8qeTSWLeHFlh@{Iy-jo!Z zs%!kF`4TlAtuRO8&ASR3vf%8SdmMc=go$`b6C}eCMRvs~~nv1G4lRa!quO9;wy!$IHL{B!dV1XlG}}uJq_iAPs-_v)G05` z#l4sd1iugU%-8(DSN!p#x&VfqShsT~fjFHok+Lo}qYUD<26vL&^Rq<2&*8{(DE3Tl zxcnZv2zT7XLjx8w3irOPpfj>_aR_r59!B5Sv$ozEQ64ZYSj&z627P6z_>0U9GJac3 z0fYpp^}poEn7@0m+kfkzcB0|chZ@9A28l}?(jS;4eJQ9{9Nat=mX%JXT_RZaq(is; z!&^=+Os8UtYBp1Rr&K)yTRtQDZTewf}jnK+K;)PMIS=FJZeyguc1=63n2;m#<5CtY++ zmW)|kDmq_8NCm3)HzRSmBv&g4>6cT-A{r0KclhQErv&88CaY4XOx@R`*8?$p49N9U z@f@KB){4B}Uu3V0Gp~&Bazkan%=cn3iRrPN2;7+%$uOxxW7YA`t0nq$v-WOYOoBXT zM2bTd8+`}GX8%eKH5~`?AsQwPo`pTuf$V7UytLT5@W%Cs=2@(eNnObkk03yahgB=H zo29Q)E1vxHBD>}-sxZTmij1a4=9KKE5kZl#lZulRsO>htCN|(4nh!O1E%pNIWDCKQ zWknFpJi;I>gOHZM%SkX?8qNDL^UhI?cDjFaDbNI`k5s(`KAgaIH-iRa#Z-C;`Gl&z z?|qw00wYCiU)O6HmYj{V9A?P7QE71*0yf6y+c2y@!kKG|xwbLdGy{OwLp^eL9 z&5Av7ZGseWg!BjrU!1w(c&iRYzj>-1F0W1xb0x{b9ef!rP9%K+5Q|gO^3*pqha81Z zQY&zya&+OxDk55{Y8Rd(^X-BLwI+=x!o0{99OWhB_WNV15qCb@$>vzNNAo|hjT9PY zVXh>&{GCywh>0VMTVrS(9oxqlC}N5iqKkh-)9_9Y`?`SIN%wu1F0hgow2<~TmHuul zO=yU)%MWEj1Wp{&WqOP{d5BYFkFd-EC5a!P93|-2-$`Qx62+Vf)*Nki@Mwf~%nW;+ zs%$5X^o5cLFCii_?2d*hi_jn@%w_;0!N`!)H#~G`_^LfVn!$oO!5kTuP9HnZf}s%s z?^wuoWBC1Zdb$X{8t9J*eTr-9d~}es(?>9x8wQW3EO|5+y!DreA=@Z&4m|u(x;Pu= znODl3MZv7)SH-LEli16@oGO3enYM|GN}l5)cq_nJCzWX#)*Zg$z7FLjNZmc}YU(;^ z5n?J_Iy>S7-TeYz6KMd$a*Z;N!H@TyIJL#36d}?zbq#g$p^I=>sPDaH$rhD;P4hOv zZDH|N`-P2jx*_;`f>8qL@C0OvHcI=E+(HuZlh$1I1tsyS2#k1Kp}=h~LF3PwKP!)XiK7M_1c4azzjK}IzaAk_NLFvySk|1&u737N#S4A>B zf#TW}OcJ;%8n>Xi05dS)uUgb9kBFvumP-5{GiaQtITgYfFzY2J$nBk`FoKmAjC?1p z!HUvmyF3+lk1RhP!K(Qew;BTOQJ^GiQFY^H-ul*KtTRlsgxmbZ#?GXF9`AG{`A_q& ziaKW~&f+U{G%u~YB;z|4gZ{{_qa=?41+h1S-%UKT#XA1b>q95>2Q)uhULn#cGP8x% zQnL8b3Afna4idSY=(w#5?GBUTL$b$2^L-yxC@V&}z0GnWrgTgL6Ggn5vA^><>65t zqt7_i3dz|MO3+XwBRy(neDSYx9c)j*DzRf)r0#>P^a?~nKT>w`=a{0+8-s+Os*Kuo z;GS&F$g)d+;PQBo8b;OXLwtj%smL5~yl3unf4aw~;t5ks;)zkH?(^XKJ+JqJn8633 ztWi*SY~+r?;c8-xr&W-Tb$)BbM78%@A))GMl1(;=bdoon~mY z*S}hnMjYR?mrP>k7;O;2P%F?FrEX8Zbne2EMRg^ELg-Vlp{9R$p_41VZ|8>d6enHr zuz(y(Gv&cnR7YUn#z=meYs6=6! zW_1Yf6o+-5<@B^zg_%?G2Dv!KU0{ZQ_k~?buHl8Fa^`xuRF*P~G_!M1?(*^~)=Kes z)*J9gxS=sF;8feBi6Hig(ZiunQz@S#^AXbmfUs!7nTk+EmS$oU`|5&vT+Warn@V{g zM3DU6^2sKS?VJ|j;wY!JZ0FX}N`M@L4Cxc!)s6C#`FI<~xb2+Rfy?Q`O592J+pZzr z(A|u`6Sr}OmyuYJ;V3IQo36Vkv#qxw_1J-%{u>tD0pNz>+!mb*Am|GosQiG?Oz_IE)`wlB*hstrP%{`pq0;A>D8FYfMcdSeMN1(z%0;*EW+~x<=#FG;-;mKf095Zi-L#- zQR%H_c1H}qo>nr_1%@8Pc@5*Iu(i{7GcZKaVtcnvOOD+2_)Inq1I~^@a8GEykk*7{ zB?`X$C-6gLXQK>x`oq=eZ}RvG3hROvTSJ%J?ty87T2%)@noDE23kt<4ABM!;o3DxE7g)bw}pbVI?xQ%D5Q}$z!SvWA@sZS3kiUI5v|E z7rC=@du~THJ>E;!!VJTnUSpr7}?=YW_H-aW^Vsx z26Juk2hED>$*ZMq!sIdTNAR+3odg{0;hQ=SZ4x2Acd{TNz_?nO1-V>KkO)aVXKIMp z0&)TX(2PhC)*|Ulh+uVW%ORgk#zc|J-2QL|Fw;_)184Q}jY4aoF6km7(=D072*Hn8 z3o2xS0sf*)q!E?|o3qkKNqjGQ$6ku8T^5jSg|I;BJM*DZ(#rs4T~{!2aU$pBU9=L~ zTVxW4h7dE^H_B{~v1LfCsN(vtKf|CzS|eww=UI|OX%t?1X=%*?m7^sjMPrzhhr}H1 zHM*{{ik?J2MP1??LAf{-Ea9g+eFbB(;)oiaXA~xwB@C?`4G>&*30o4DkzKGMkE}N3 z`tUBNfuPfr5kd-w>oLX|NlpgQLU3nN1vkWyC$!&>=s3%0Bohs^{L9vyO98#JUM4cV zP{a^0@ETP{Fxmv!g-lu_3!Oj(IggRtCG4^x`9l0$b$mNA|Ar16jeurUfDNr+YmeQ$1_(f#A4 zOzQHP5*^zpR=?#Amdm{J-n}}~CIfQHsG@0NL2AQQ?DIZl)~*{fTbwRxRuq$&A{@zB zlEl)W7{vcpP%-H$GL9x?UIRBL<55zy*a6jY2-=k*!bW$ww$*G;t|CyzvMEGtVd`}x zWcFz%;y5!rfKD`^AwQ-(j5w?=Gm)oEPs&pgQ%80^W0yvD85QF|O}a%SOhosUASm<% z(r9<+TAzOP?wij|p4kUgJ7$k5Dzx+IO;wK=c{>8yU@^}m0+TV69iVUi&K+&IG^arHNFdz<_c4i4NxhocA!M0p zA>+ulg4#C7KegCQn$|)eLqHE(!p>n%qZKZXNeae<<&y`-!f3k0@zbhcPC6|uVI|5D z63auniWx$vQPE@A0!*gEw>2g-9TN|}GovYo@t0snrV?|}z$;VAOK5ARBu=M1GJ<$O z^qd*1iIj#UkCi2GFeX?V6R(U39maU{zt*+ByE=vlAEqAy3%|3cx4+TO-DU=J=YT)d zmNRg@3z$PK?WdcefU`s|e?}3ftN6<_;m?o3PZrfvSVn!MM=W|jsEmRzu+0E1!@mM> zw}ZH)fJ2Mdp3B__oTWXgp3=fGGdX(Mh zt7pYW6l`~g|9`)-~7?t8R>N8wyGL=HFt zOpC*w!b(PamQfj%%M3;zAcl^E&>nL>;2{~~VqxJsI=$3#q~3U5pPW0;+jSO5Yb7hixvM!Z(JqJ~*7*ZZCk- zBI#6;%ksG#t*T+Xr=$yp@FQB_Gp9CXS2=_`Qvb@BC1h;yG?CvnVa7?uZlU$M<1#mWm^3^gB&#&L^p{-NXT8{<@NU+L@3pfuf04M5p?CKGvB7b%oiusN4`MMH&Z``-f)q1RB&Wycj7;0xdU8OO*N1m|4;I>>?*%`CNl6rhCCck64 zQIdf>Ca1lmHjHnY5 zE15=)06CL{aTPGAlE4CFlM$$6HUed{PMh7HZHETO_O|inMw+25-U;N<+8#J6twHHV z7Km+W_tT?;4r`B%SyJm!En3g3#Vv6fp_wya6)X(D9HZD8P9|iv)j3lG!$9+K>5b}x zFhVBj+}AP@FvH6ZYB^#@20>b9ElxI7y?=QuN`Ak&y+vQ;(Y7pnM_35iwdKVc0=wN3^~@=dx9DmA&m=%? zr045ddpQj2Lp@Uu4Mux_z`@;Ow$}=OcfjU&RGHH}y{U6P{PbsFLFkwZSI}sE8UlJZ zGaNR0iTte0j)Sp$xiTm7&CvhA4%J`|!res8gbBf}PizIX9z;1lt4@>{>f_(+akRiT zIrty-4v{BEgAXA-Mszb|HH~srp{;br+eth_S{|M#@V;(x(j;yHX)(lbLS$HwWuZa? zUS8yky{71lHnu7e^Rnd-2f?hd0rrd}$*{Jhq?Hf``tx>p%-X8Gga+6!Sc7e_(zmD_ zKI53}GUlE9Rm<}B-SexXrt!7G%xP5FmEfP5888y?bp!K6v}S)^q4U&yp=C6QKszno zZHrQuAB!y`CT+E#T84|*N~1hU>V#{NpqrY8=`#{v0y9RAIx# zA^4J#2o@L{+TjQCXU3(-%s)x9R|_bWd?9~9Y)%;ky&<$<#i{q+s@XY`K#=9Z|4zQ=~BebXFth(eDO7Zt>KI zzk6J-VMM2{=;@;hE-jj5^^BorKo5h5>zJ85Xu6+axfuh>`{W>tINQ`OlPUEOfRHqY zhJe$Q`5iEYAQ5IEN|sq1B*j_nq@h&D_B(N3k#SBWSjKqEklp|vP+nLzD1f*sp*UL> z@CeJAY46@S14cdn_{y^TUUjN?ugS}ev~9QkXYIcGzTSQO*N@zQcwbSo%4z$ME^><2 zJ_Ys)<_BX<5sUWEI-#Lyd*5rXp75o{3R(Ij;r0>{LQCk#R1A>KpnRn9SzFK- zdvc-Ul2Z9d*n%#^6FRbd)>xs`<_1ya=g7Ae9H+C6wh+@Ubg!kKWV&6yO+A5{FLbX8;g<@Q6qQ}{6QdHgmrP@YBb@O6sQl5rea^au zyV+us`;?>KeQBQ(0<2(|d4;sCb4U=}%YF13nfQ~WaX=4{J^AOP!hwK87qine{vsqN zcDe-Ij(q5bNZN8>0tf@NEz*Z()t63gJuyHR+ImSCctHdQiCe>4hdF5@(=bqRM*y%& z8LWQZd|h7{7Sa>iMdFBdP8@*I0xDghxm(Iqv?xWzJoDv0D&vqd-X=Xu)x`6~XJ5)- zGEs}J393fO)3Ul1e3rB%DTlUMR|%ZM`aC0KR`)Wo5clMHA+p6qonVO)sdSfAV^mQ` z2^!kar_bT=!dPTo+mVx7BQ!|_?ujrfAgoKv1lCeB@Gr*=$w)0|yeM+=5Qi6fB?1pd zIaKrk$i~bNPt);hs$kvBIC7hb!(!N+qd#cY3YqWUm zG57BnLn$+3WDM34)o%Kg%*??)N0JVe6|I2?6DtYw%x>;Tj)td@aR|bMp!02x-`LyIpgA@w{-T!N4*wiKPpcJSXT-3 zq1X|A)r>Brp`M>=9WxQ-jHooojn>kZ?P~DwBOCv65P4m};D~B*7m~gdjEgN2ww>Y7 zQ^F&HupGz9xJ+K#g(8Qr;28LXWMRs>6V@LgsK8_g4bxCfZVT4@)` z9-ZtylR)c$VY;eLRpeWBS)0E-6n7PITEbt+$p+QCixRsTdtWPfJB;2V7Z-8VEI>4f zw&2jual3JJB!Pr>ySVMA&ixciEeZ=Y8`34=rMV#vnY2QeDq|=WZDNd1_ah7Lx3aP0 zVmDjS#v7=Gn7Y-C;lcELk!Ow>5+yvjw#p~n;CFBs79G_`I6$Tss#o{j382ADGm~>n zwG`4~Td5rsRy*3G$a@TEGF?s8vN&UMgE4{YnAmVkj5a1N8WW$42@=M*T%e(|9oiTx zJjU(>BhL9Ght3w}Ib9Wp&wC3k7w)DouT16NRL5cAHVm>ctp!lEmr(YR;6d72!R>^I zEb4wzp&zJj2(i-!E!r}=X_a`!a2&PTDUedo-;w}q%CBWlEV%M0d18CUP5r+mA{(i~ z2I9b+M<|7&(u#Zcy$B85oyzHUn} zG|XPLgoGxW`alp$)qfbk-#0J!40K5P%h0H=&3vp}LT<<2n`Kvd)> zt-koj@t(cc*AqY=tkIkTJMO#C@KrwgLgTQ%x}xIBjJYa<(inxJU|Lhc1oQLJAn}tj zxwrAD<*AvNzFmd3S>w}1^Abe>AA~iDbxO@DWP}--E;LM+n)#JzX(my5|1h)GD;$|? zLE}fq^^^KbJB(U1eA~{$Z3D=F%(pl^vR@0G+YlL6VdJ5BDZ7osH6qeBnh+NdIr*G0HFftalBEep%sl-XK@})m&V@fox~2QATQ!7hvR{|kQ@}s9WnkA z;U)!n!b7(CEY6|nzL@?t8A6?BXKXV0HqZB(uNI)lr&8=)y+{+Jun6XBi3TN zt15|FC=uuj-}@zeX+MHr$4}zlcVfxNJegS)hf$O<7&W)b6M5n+|K(dweY_h~gkC*x zHi1>aO9Kx=pRA7P^l2k_X_$e}JNzC!BWm?yQR44_KZ{IyVWA(I5PxU9-jxE8{eO>5 zLPcow(b&Cro-PN);zf3F8AnY`U3Co@hcg()4x)>Q?RhA2h0=w?n##hy?ANS`>t1he z9)6=33Y`!qlHr@(_RRZ>i$AUY-h5mp^hsd-ClQx%CiCZrU#mk5nLdsXzHi$EfZ5># zzuewkZ|_#$zmQ8C3XRBT5Stnx$?&Z2pg?vi8iytM>ju;m(P3|yz6|6DsYkDkA*2TcUHjd;5+^Pm+tQ~JQZlne26;2}8|AUIHD zM3WOCH)Q**^>MR0v6hQ^r2hc!+W9-fhw1C=wOQ{M|NPp>sUPv1a@w|ji|Q$n8}V|= z1)wj0lNPOyhSLtIG?YheBdGW9!OGq$;u1}CT-DD#<3#WzDLCr@NR{Z7X>s%0B&Z0O zz(x4&X{qEPrLz~06jxSv#TC`lo!$$AyT)#@uRsC`>ljm`xr(7+p(r3?)=nIyZv#n= z#W>w`$s)+H8s?TMboLq#hGN_C#HtZqHgLjrJr+|K?Ed~+eYVM*$1Y4oq4Ty^hY>%@ zR1dqlm+$+{wkRDxRD>v)4z)=%5OT50s+BeP>lEFHAqUGm-1-Q|#g1j`es~=o6r< z0FVTynfMR%^~hboxlDb>=h%qBYIvo>OpJ?3{{+~G@gV@~u`c+~c?!ut~Z^ehT zLp6VCQkXB8sNK*JCw6<)tX~kc)~I~FLj!3Z9r48H0(W}!bDds5QiMb=R4qcXM&5$N za}D&XF468HWCY(~MT~ znSB(Vr4Q=zvu_bWM<*SRzQyt*2_AnlYU;UNC&xwvMfqtXIvs0y;U{%M_Lx;_xzyNo z1D%XfYo>An`nYLr54N+&?&Bn2-O57~by_3)?*8L@V|e|`U2!>!Mj4zKXmZ=^2I3FT z4&+wxkEn{Z26I?bW2z_>L$|^!BL{w#geB(H^9cOMu@9eqRi60VXS*sZOuT)FhOo0m zY%!d*9)4KL%h zN(*Y`$<;#Ku5VX=1#>mP%f};QPB`c}pvJ82cIfB4Vk%gV}h0ct5D~ zdbj%Vc6+`0p;K~|KlZLi?{qaCeFoFHUiKNBR%Dp?m_NX0_gVsl2=XnZP6~;LRS-Ym zr4+^U@<-8-j@k{=dm){~0KRP%;As8CA^%OEHPfRepu#hG2 ziWojl9#}HbE;o@2MSpNzd_LiTCZYR`cR4pH7*s5Q@^zXbR#o61i8BgzOYvhYkm!Wv z@sKF)moO)es1v1kvdO;fF=Dih(J*HB`*LvD&OE^LpQg)WW{cCjRFbKWcEX*VXARQY zs|kW`^TE_YJ4sO~0Tl0xsf0Xvc%_V7E~hOCE5g^p&hMxx^j-_2zjyqHd-!#Kb$0-I zTAG{=J@VctK-faaE?0@mDGCK?{?>NcBA>pnj;VPY&rdvSu8G zC2UpWFm4QWi&IKM(KInL%mxvvDO)@Rl9ogI@PKSFC#+iljJa585!WnfnVkiPP}?LCGLamCu6mp&-s{djT$^E&#qPtW+DO&=&G0L~#yYVHD8*hs&C; zYlJpX+o%z@oP$+M0>uH(^{@?QkqOep=oq8-6=BcF%)&1q|COFVfLquc9R$pmkN2%u zHORqm;?UIU%awb${$Fke(IC1HyMO#Whn30cX9V}No?!~+n)?h+k)?->an?eN#(r?qH7aMG~rRcw+iKA}bH*@73M*%ACwh;6-=y&jiY! z9)+2+Mv=^)kt;qniW??gU_jW|@(kug0)q^O7NgMyX%?@@AvgI}t@2;rhymFA`fq>K zt2BfGTodj^#cW|gP5@xHIIwWSd?2v>xP6d8$@{DANAbc8DDp?pkiXJ?TIBXd0|9Sr z85=3Tpa4y|4nE%+{mCe+QJE?2*DtPv9(@ggUitKg%`LVFR~F>4G!kDr9C`L%H}~(* zDZBr5d;9mDxzHuw_5Cva!ZxWJ5CT&6kyH_8i9(4>&yXGkG$59;y^t|^xHLvO1dg{@ zyY5hU*kY>5Or_SmgTwE*$mDYigkFP9A-2Bs=#luO#mQ@+nHAO{)*>8UhXcKOqr&p9 zkbpJyCmwI|Jr+f3;%pM5c7bs^luvGA77Cmj6p5fhf^IL6Beuha!#PG&@98V%zkv^4 zZ*JE2G%UyE({ZVcHOUdEw9}5}e!~bpHiX;s9f>-OB|;JOBtjc#$Tl8U^x^Ws zBiM8Tx+QdC-HXy}ET#BYq{YV;+9K;LuPF&(?znDCg6t^qVJ2XUNoxhU@}|L_ptWEi zYAg08FaMuy^b%5H-Qtl9|ATL%*p;%R(8KUdBdS86ajmBKL&-as?(fOeo1>{1#qLJX z&p+vKS_ZLS5;h6%o=4vo$ny*9DuPzQV)g#R0KPFvGYBDriZn&Iem!O2a z%iK*FXlTgL9D9c<%@L0&mo(BP<#New*Yh!-d+B8(Y-YEl79ZN#s8p z!qTq}98h$~fSbR(q_{`V_0SFlO%Lq0mM{ui)Kmg1TLti)O3~-H8lm*r))>{nq3U}zJwz^Q~ zsL-MDX*eO2PQBp`8-;wS?g6j+>cBIqP2u^0Xw=Uc$gP)*nsieGgoSSkL$;(|oTGUS zi#%_#3d=+d>G<>V?x<_bPN6hF?&)Gv)4%PWzbsJ z5YgHiI6e07vv|^xXa~O_E^gRb?ZXu!&ft;27)ttUA<#5c@;a#NWZlZ5B`R1XCChKg4nxcxq7R!Lj!XwYmH>YxbxsLoS|BS*Lyb)=`Y`&2KhI*g<*C2-2Q?%cgXO!R@Kc=wG zwBIqC8>DPL;oJ10HWJX+1Kn;aPS-${_$d63{m5Yr39vl&|lIUHOpe@2hgNh0RPty0smu1)Ts=ZB@rKu8ePOE8COqgcHN^ z4&o`Q1XUoF-GG=Jo)~lOWR*Kq;73i3vAMwmq-Xc`BXsV#136=qL2bGch&f75`zo>l zfWI7`9)thmKqEGWu>&4;@*sx+{pz>tt3R^0tL8ub!N4GHKQw>%&u7BU%qRj1{Z>>T zSGyM?9sco!%!n?Z@_CC?(eQil+ms7J)`a-g z01uIb(=ZFmK-Wr41Vczj838Y36@(g)g+aMJuX7K*X}|DhN&MtS66Lv{y2LjRa1i%! z43HrT3Dxrqi%Wv_99Rb|8>?jOun^T3UUDHm{&@?%Qm@WxIWeF=L^7jtZUl270ajc$ zV0D7RYX6-BtY*eGdRTqqj$Een+yWbFwBBlInjqOFrE`#zC2j|>;y{GX*))kUHX!nl z5_WS7*9ox-yoZ+EGbn!0#Pj3^LqjrRDPqI`03od_O8-(E4`)qqZe+2Zd(YreQv$p# zf&B2Sun$qj@ri7KMODl?m1z*#%q6G#*P@))h8- zxLb%jN9$Uin52<@9JeWlX=bGf!;|vXH(PGU6|Fb&cSFS;iEYEvFVnUHBnEno&JNbu zn24~$a$r>JrUBX!R8`2Se>l+il>PO#=mW)m))cHw#9x~jfl0)nQZxp5-$hoZInG&$ z1w)dK!E77X?&Wz3C#^;K+Sa)qg1{j}Q@*yn zz22cn_kF~65!=qj`>=?;mrVBHW(>o?b6~qR@MMi4naI~B$0Dbv_)4bn$AACty8kP_ zQR;Y4cEbO3q+VFSMn=-;B3CLA*=(c~-}u&N||`mEA?k{WEAdy_#b4&AKE z=En5ekj$o@zTyivU|k=xtK!4Dq&4+ds?>_1rVBB4p zD}uA^((XF&=m722&otn-j@^ zoj25R@Kt}f>MhYF+;ig1PQTXS#&QX8BZu(PA-Fr2P|(jNj{B*p$^1VL)Yg}vFP_eA zLvk4qP?$4>igJTgw`r!(-Hh4iV8dR+|+uLQ1y)eu(SQ_i91yqMj zHk|2@sx7D)g2cS4lg6rhBdI<+WOIo<0*5GotJwWc9wLV^TqwqBz{2-52G4Pvtij}Q zA7;Qrf{N*fE!1+&)QCjbn)IJ=w_D+l(QUhFel=d5%fQ=w)Y?jD_3I3wMX?w$#0tT< zVGW&d!`CS(+2M+vFq8VsRz(+4ag_Owk*4u?hZ?t#MLimMYGC7Q+8XOFkUF_XnjU+; zhnQFFTFZ^NE@*au;40CS#x=0ctvLGCAj7v?x6Gdc0E50)el%@UEF>+CWQdn$+1h9{ zQv|8jFj}&8?U6Q<1b9UM)+O$+{H>*I1-g5ysxzzIUJ~zN(o`B7kyDjYVK7GWo$vu@ zl?_Xf01rXO4{Q}8@9Hh9A zx2PorHTY)=CI#m0vmRD;lF3t&<^Q>X+yIoXyxQEoQ%#Qe?&ls z!&!mmJOFc2!zjR1W|rV`VuZ>kp(s(^RFvqud!y8`On~P>*9*XK!&ZfD1Hf@dIcQhOy!plywSG@AbC z?cv^s`U%zlD6KqeKbm*lwPsi5tlL>f2;MLC-$AH(ieFw**Vs@0o@O#u%_#^=$eXJ; zKt-)ZAULVREI=Us@crvt_#hV4z7{ZrjmGHP3>PzBVaZ2DMc=DDa6~~}Q5lwX0$v~J z1DB8hbBMD|YzcP09F4|ya@p*vF0;c5M9H#* z$*p9C9DspB1`6AUvLe6;F@8;K2LB1o0>jI+ax=lT@*Q!XM9$WDMyKH#C%?;Px4P~W)Mf3Z74a`aX z0;g}HV1>BC#1 zEt4Ys<5P#J_z$atY?@i-#Exq=qLn^3hS*??e7dNOc!=3tWR+IfJVO>t*QrMh3xn}Q zszl`)1s6(26#-miCjmPp_}_PJdIhhxB|-p*HqwcKnOZWQYn6NH8$59+1X0W7l+dNe#ouV^C2=N*T!KVk>= zr9|KD!+4R0kKts&yF%>%Nq%k*VxAoP1~_zimDM=*AiruwkRK<`2EXrm&d`f*6FQAG z7)b(PLLn|dS%jBWS{FV}mev{eSFH$B`I8*?%}u8PU>azK$k$(v*nk*R5E%!|tG$=A zoG}GR^oIBiQ6#cH5%!Vdq!vz2!WE9Z1{D=+?fm%xa2}*MR?MLb%fUL=7hQO<`$ddv zTLrwNWU1h=!viDbu#VxxCkV5ZZD>`1evp_S{u37$uO}03&!{QBzS-X0!}*>@&x@L9 z)P9`NUgb`12`!>5VYl+^3QHlvHW{{)R*-S@V0oTsF2vCuVkGGY)+!t(oXv2IC7A0+ z=*J`tm!TB{34mg{zBlp)R*c4JaZAu<8N{$amJI4Sm*wS!a13_`5UH5wZjf*Yk|Gb; zn4mpuN0QDhRS9w*c6JuXoXkg$z(tO^Fp1MPrpl709?3plg9>wiMqwIX7AW-)%0Dqt zy4$w*Y6D9ZY0+G+Ns@|!1Tinwce;a|#3jb|9w>kuvUXbq*3P=vf6WH;*rQMsI2soc zbIWv0S(!2^KSF%`4k8#arCARqP8#l-7ysq2e_mwDTL^SeM9`-|zMk;Xl(;bD0&R;- z1;C5AwBjW6In?a#DPDudYQNJ|!@BE?q;};v0y`qnJ_XRfSmfF31gdpTP)D9hv6~gL zrU8W^DdJv9T9-f;t#ZJ@yLdDSG2f)W=$8uV6NDWi2>tT%Wexf0?v+w&^6-6x=Y)!V zU@i0Ry8Eefy^{JORA7qol6x@V)ZZsADGQ)i1q^Xi_a!0^{T<~kAaF$4m`!;&3R!{b z7?nRL%d*u%hY!X`*)!Qw~Njjsk>#;c>W#2MN40qYFyUJW){ zcPePd#)n&jsm&86s zg+rTs4C^N{a;DX|t+rRov=(E$lJY(CKpC4LWUTqP~Z|_kaaXEL8ysTB=$6qyIsA|*grQg(7Um}9)Vam z^}JkPyjq*);M&K_^lKyGNc0L_h&GBUdXUz)L@xT`JnOc4FyfN@&e*>7#B3>x!Uuzs zr%<@55D|pN&cSjci6iw}?~y>Jy-2qh;53WxQ6Zm@x4IeSW3Ppxk_zdO_kzb1 zFV5ih4qj=yfn`Oc);%%|{Y&%Pt8LX=#TjzF6gnOZ)PZA?FDMEaSl$!w>X#d%r`kN| zJO#W6rS6{juZlav>qm}N)3BQl0WA72rGOEV&+W9cYW&QNAb_!_Lqg=yR%YFfKaF+nv)S1aKJYMiNZm`iZRAZv;B)Uw$AC*r@~^CYn~1Yh|~uc0au8 z+52}gCZ;5Kv%Lm|{v;y*jWJd`U>zuXyxou!bOQ1dm3b3i@!*6xqTiDUz+`^(+3hOp zzFc|FUl5xFCPS?P>}W2$r?L;(glNwE^(`<3)#DAA@A!lA9j*tKNvF<6$Y*e@9jL(s zkv-61U~-s{SyA}I4f&?N|3t6ds1(u1C*=JaI?BV%7yEBk42YKZzEeEtmw=3W_O+G_ zpWq)hu&wnsF~HMDO{`gW_NqrGyk~RJogDm`rJf0V z@WX^X)GZ9joiZKDR(gXzn(~MrFgv?s;ckm;0bYApis`MA+7&k&a9vV=7}uQ{bX;)t z&c=voA)r=_ZXrAlw#X6aGoFQtv-d!dE0$N6Tfjp?526Q{S&P_UO`*JBZIH_6LwIVv z6s1Oc6dR-Lpl`-5d2h0T$pF_IaE>Dtr>iMR(%I2DeN z#gTd_2x(CLs>i@@fuSJPdv4{_kFZyo^`%86nhhQN?#>-M=rACXIOhj+n#$NqkWy%o zEzaqE(YcXi0L`T$A_mVW$Tv2t>EIv;Z4Lx?rS|&H0Myh9Na2Aub4hFm<9U%1C)@;6 z*4e=K;{f6m2B5{R;#w_s80&F!?@k(XsOcZxGo~u%#tXYA>1{h6=GF1@X4Kky6ooxw zInkCInQ47vWs$Nr3p))ftnC7tQ}Vo^qkt&>ItgpUjB=WT?VMFl9sgM#6Dv-6b)ilm z3KSU$g!DFog4?E;o|S4G%#pB)B4Lv|p5FyG+5JY>gCwj#B!6!f3x^#Z%|_>3>iFgi zZuk{PDv~?ju0}@Ex2wOw25YUG?Tk#q(}su0*A34m?T0rfI>Vz4-&g(kFamj-?@92u}v;hUeANfVV(bloli6aba4O zh=D(nKOC{IGU4weX&Cwd)Yl1t4X%Bnm8)7e@fwjRf7x@#MIh9l>W;nJ>Mq>rIGM}x zOEp`eVikXXM0oaDC`tJV|C^t7*2fqx6Z3yWYmUuq>?yt_GUZ0U$LXZqpr&h1{yCA| z6Gr98J{Xl)@bOU{Vau#=36iRKBn~+aNIs+upUs(70A&zGne+9`6@J|JM8+Q?PF)}X z4F387tl*Wf5i$t=xuGf5NXic;-Yn9~$pIy)p)CC0o3cIq>YX(xQUjJZ6l;qh{KyPb-}f}^0~@!LlObs-6y zwRlerDc^bbA)TfZ$`*cp01mNm1VoF~th|Ld*HC#2@Z6~6mGEg#ze9j7lL%%!WsT7( zKx|=Z4YLQnzLz3Xlck*4p-uiYaKRVnw%^}++qE8ZyUbGYAQlD@l*tUM14IE+ijb*d z<1)Z@79HWtmbg1O^AfuVIiyqucebbAY?=yV2Bl_^OsDp}g9n6}IwgZju9{z?U&g-C zu*&Ju6#`whxxF?f0E2?rIq@y?j62-BLJZcX4k-y*7&Xf)A{^-RP^MYj# z(FEo`E^-uks7?Z)7qNm(6mYTeRdWPDt;&>3Mc)sgYc$|R!Mig~%mI^yhK`i_VE5&L zGe=}J&Q{wQ;9CA<=;TWm8+k7qNTWyO}gazTO6SMilbo@evUi#$V4J z-z_BZfUJ|8@FH8hRqM0m(FG1239_z%VP`~SG7l(C!2e@qtW zO9`mY3F~Hzvwn0Ow~4Ef5J^3`X!{i7u$ji@l*_P5y;@=^?1niK7l1mRIC0C|AZR2- zSP}BZWs(r^tDJ2GVmOA$#nlqpPY)|QqwHUyN-TTN7CK-Nq6Zqn>?m^Fw}W8LH|9DR zs?wk7@QQsT^9qEgD|#xFA$@KkiIn(h+B8W0A#!7(?7ONyMK|jTP*^pM28V0L>OdTP z#Cms&JozKsI;o{=OE=&Z!e)FT(Qqnnq1S-+t4)&sVWn3YMoZ3F`l zB;0-2Ts@#$Y9P)q&J3{Ot^s6X;KT+e-eCuZDsA1Vtj##~18-0B48<{&@w$>E2y$IE z-FW1^5>oi#1{>4ujp36mH;P2p%(r^NC{F7PJ~KCe4%MT^kP_D_juGAx?G-O85HW(- zKd0Q}o4PKUSGyT+=$9y|!Wtc*4FBlni+W`W%tJ z=m2AP#y#WJn@2tDy6*fC3%}RS5vYybMJJYSYzJrhvib(#jWT+Q)J^B_r|@@p!@E{S z?{Bwy^;U$6PU)~~g}}9e7D@^T`=nD=tG2g@4vT~VH0`F^yzgy6ML7m#)G0C!e`R_p z=oJgYcEp|LkuSO{sTlS29#zNlA2MU6=79on0Y#gll9X-?j;8pk_I9X{qIC{QKiR+` zWVb3~ngKBecFf?W23!TIGLoPiW=*4RO=X|9( zi3CxIzWE%K1=8qy$wE8Xk3Sjdz#zNNko04g8InihCSLAtSVLS3A*JkP|b8I81Tlos)xVZ zlvH{-g%Bfjx%3p9oP82w)OPqJSY%G0M6H>pJc(Omf#hMKc!DycTB>TrG0&UJWolg*2$j@9Gf8RzxRY`XdNo*$ltmbjWRz_@CqoK6 zRV|+Jc`K+Mc_rse-y?F1!JidPUXdRGH)~|(;#p-Qaz$#>zYzklESQ6y@l#=wUi87i{+C@O(?tg)$-N?8BX+ImG(};>!~LUaIbAEt=}2SExVrpI zSJ%01v&d6JLq@ikjLj>g217%Dr-qeWqxlEbJ*5#jYb6=j;{H=ls$Ordie-500oo;~ zDI(ogaf~B|g=$+1k3B-gru6_RQ6-!;*#=8{CKXs@vP($m1p?AQsv7=-o&enp?y4$j zQ83KVk+HRd&K)xbNb&rWO$Vl=?vk+eDw?ynmC?|uqIDhOewl22L$okVtmL(A+qP}n zwr$(CZQHhOTi>;f`QMx6%qpGJt1Oa}?xd9rhsXSNw8Ap0gCyc#Q__L=0Vjr4k0+y9C!{HxzkX|&`tqUa zzpv@Lfu0c7_`GBy587#ct9#DC3TFmW^~OGU=C%2ed2ToJx$GMwttofKNxdi#&m@!t zh&7}lQiOEu7aKiFoDjDBB*La&_ROfpYGBQ{b=~+v_Q4C^YA(2xWxRPZ7#JP_zhy>fPL|BR9NPbk%u-|LV#!wC zzZZ8Dr1`)YI6nv_RM{|(x(0%%fxv>g3E-}J8nPdt^M@u<`Rz-v#`F|U4;rbYj6|v~ ziM|511w=?J7Dr)o?}tZwg+(fIcrTn4_?TKnrr5*KR-Gl$ny4rf#cF_VPYObvfM>%x zm`QB|BZL9rJ0ly~K8u&_+9eHZ{TXN3Y=Md{MRjLmozT(rnsShQFd~!WK0|_113!H< z6~mQzWeIZX|Kr=+!v0h&;U+mYoUp&xbqyJ6^l{;63>*$}_6&rUF>?v&X8|zjD%!}S z-q0;C2s+2gWX&0}UWJJTY$)>$fZDi)KQ9tQE|7t4@CB?4HljfqDD%J$C@zpekuIVq z=b~IrVNpqN?Uz%m$xBWKT)%K@W-?|e;j2p_z<6n82SPo3m=4=YjZU9j-fDme&WY<^ z=}oW+DNh3vh`JvDNl`wGF}k^LUaq@6dXn=tONm@;DlVUh-Ih4*Dh&n^`+{Hcw%b` z&g&P%B+~!{bc~lshFjdTn3)h^72)q@EdUiR!O>X!}o-HV}h#;X{ zVtV2IWi|EC{v80Kk+jk^k(xoO{0O|m!FU}jTSO3u(JuycpVf3E%k$fl4Jsqkq`ZLO zPxa_avW5u)%xLHyd`zg=nro2GHy=y?I$0-SVgX^6T!C`uS*is;oq>)zX*N?OEm|Ia z@wwL=?p&mJ#2QjcI8rS)A)7gg5)C4d$Jv2XJZMq9(V1(RIaJ_ucOj?p#`A~m&g+EQ z=ijrdH+}Qf-3fxt|45sQWqO^-XNl6br=myvI7OIC%1Fle%-g-9j>qJJp0@}&O&}=Sy{MO(FI{atcX&6TFsk{SZ zU#CDb%G8Ljv%@Jf)?9_%gIY?ht83RQT z44^W^sxDfZ3FGGpPTP>g2W$~Vrhqi6sr=s(q7WIC=-9QE1;9@9D*bN*;vSeg#3ZUK z3KB;tlIsC{X?W+S(gVEUoOcm^gP2B!X+=|;a zx*agHWp`X$gU6>iP=op6k*8bgnX?F;1 z;;`=(w+=8}xz0^PBf92rnvEzrQha9%st)l<=;yq`(425g2Ja-SF%Yh9m;$(_$>({Fr{GfqVm@JJF34=G&is(EHdjy zq14Gm{5S0-HYfqXLu5Dqb~QSrgDKga_CHNUf=xWX=5>7mkMqt_Gg5B@#aRztDO)@4 zZY^i3)ZylbT{k9m+z*>obI!l$_>1ea?sWh^wXvrjDi0$Q;U4w^BM>GSlNM)hi}IFP znVYiClaUhx>Hz&)X6~^=RoLsYv84!J=iLxVck?&rU-HYCaXa7gYz*>klK2Fz!3FGV zq=!$gVKZ3Mv|o~qTZQ=@V+=70Vmy08;8LnWN`+4;$3RxQ_2)v+%z?XTmr+I} zvDe<*6V6^*UInm>Xg`lY(rp!GUN8}8yXf^(R~?W^1KFy-QD0`adXV!yrp*i4sCYH* zNkM`J=jC(g&v6CTJk(&;nVfgHNDGNwhwtL>g;I3IqY$5;ll*CKeiP~z( z+DEx@x`a}KsI4hz=O7o3@fb|yE&DUF<+s@e9{|a^Pbq;raM@%P!YbEvK%2;uoaNFI z0TMRSNn6}oHq2`Kl$UUZO^u)?K4Iq~vb|FPIh{zJN_eWil15VO2jT1YGN!g`crHay zUv@Sw*LYoR+HYXVf*;G`%MFQ$cu$UT?!nqn1+hMDqlgnlGkCopD)!m-wxjiUOp((U z;*@7JB}$6LsDxvw#u&pmE&rjTM4k75JV)lMj?PB{Y|3N5FA=b8p<2qo~;V}Gn18xC)wtgkJFjR_o~Bad3iot3bliP z?fT#!|4{mG@+c#cmK-MnkW?E{fMw(vaHXlHQp<1t0qz(N&CL^~@4EOquB&^+ZP)2} zb@^`Iyq)*HX~+AGV8HIz>C#$=A_hrNyz_(zFyPobwhEcEp3_Yg^9Hoci0RSyii^XX zvP{u+C^vTo(HNFIeTe0wjtdMbzT^;R&AG7be0WJjiuK8zGYqos7)k4RQfQHJ8Uo!i zNHwFKO;Tl67@b`FAlRRuPDwQi$_=*XA83q57M>)c)XFSA4{%)BA(rQ)CbA5iTvP0s zSPuG~&{)>GuNni26|>Lar>VfulcGd4ZK?-Q2i5Kxli2`xo@yRx9v^2B6pBpDr_E4} z=5bt@9bn8n_@6AD1hOOWhb)T82r?#`XtQ4L>w2>(Gi6tE#rzN~7-^-An3ly!6Ci05 z7gZ0IWb$x1=~8kS`{k~&S{)Klh~!pz3O$UVghXDRvT2Z5>CdJ91h2!}Jep>oD&?+W z1cgDM>*V=@v^7%`5^o6!G_wh3EhamOASVtUB@G5{TAhy3wdkr_ z@I2TmXP1-$`H|}^n}{3n%f*ehbDcndCi`R13jc{xpU|lo>oOfXPCo<=vkeyH270DW zldcHiAmx!z&Z3RPgbVR!vWEIc&J-$mrt5xYg($o<<^ADjujgO>u_j_$1+rN}x2E${ zml>{cy!f=frm)*tzT~=7ED}#++G6^3dcc zFTe7k0JLNiN-rgrS>R7Lr-ZBDgWF*=lz7!Ceu1sCzg4!NP2BqNI)`BRRCbXE0|oW7 zhHF&eRf3{f3hMN_SwidNa-NXTDSz2?HwR=K)`x2F$tbq^;~!bEAxh_PIyvCv86R@+lbs0>cuhz(-LM?nwTXD9*g!#DidAnriD9wrH*uEDLN6qg+eeAh@j^ zY>jkks1SoyD0BiyWRD7V;Iir1&NZ`t3wKfJ&w|G-gX%=h>w4@kdc7~s(;G=iDWLl@ zZz5p$-{YnFuK(lqziplIOEPmgCpv}ZZ?|L-))W(9l2fMIIF1?Wu9T~;f(f*bm7Rd> z209{=S0B3TmW)#z;}8|E^2o_*-4o4bocf@)$u(Q7z->rVfbgtAECLu`kTi2@r|Ae##p9NRiGn`MI>hd#UipP+( z5+OF{v$BtYa~yIw7z40Z^sK7B|GFX_BLx$1)LF9z6ha4SOkJjy+}84*V_;WLa&XsX zjg(z|0_GW1G13KWLYLxH8tJ^>S4~BY8w0km#9aD=H2oM_yz<{91fC+x+~uHo65lbc zeq5d`*Vt&gR6PN?UDCo$Q84Ix<>8V*F1UQQKvBltvtZ9x~o2q5FUypr8mY)EWu} z!2^dfR%gMYN5lNeJV;_53+5P)3#?&T$mbL!<}F6bAqEXLlnNI)rn8ojC0;kEaO{km zsmyl`$N3%I`|*E7*kx$b8cWniIPvO~5>0NWLPp2_t)1~*ca!Cs0$^bzkI%a|<>K8o z=h>)YkK3jWhLdfkQ{dj%dn`R)M$RuP!3Eps&2RvyUSqhYcioQn?La4u^ps08Sl8xa zT2`TR>K>GfJ4yd2;+LGpCCba7^I3(aTBm**-vcjpk^fhOLDE(<3f|N5tmIbS=Cu1*;RuFZ zJ6=fUV2;DWN6zX?#N*~d!Bi8E0J&ToIUuVfa3t`H^!Tqe-AK82e|tR~yuSnFA70vP z7r0nWzPH{gb*7_%>dA1v3m6$^>dj6O2mOujbY64VmAZecwqUgbRue~|h!Ls?f{<86ke1nS5x)`Va?PXc0|tswH-kfgU8qlysw5#+pZNPvPsY+31k!A! z_mac2%v-l;LmFQIHhmstyyUQ(&I= zuyg3O1Vse;<-Qc<_{44mQfLIUvobC!B0pA>vCwjYWl8tv;Ov9o#mPhX8XbnWX^{kP zB}_qLRD?U)sLJMwMS7eRkCyKz6RMD6P7O71vxf-g*zY)H64C}~F#-rzcSq+t?zOVB z*+O+9kH3P~u~eU;LbNc8C+Z2|97S2KECfqgR8COGKsge}oh^zWtqmsgyvpmCNyGS4 z@S$GOygGVi2MN*?;E9(+^mqVYn=B(k%l5GIENzmdD}OJ>}_6klEdV!}=PtOI{0z znFm_{dg+=t5p|cJS^ZSHFyDOhp>6L_mlI*){-!6vUZh%|T09+CrN}FgWC=+6E=S|F z*Me`<28xF$KK4C(nfBo;^{a@|3=eotWDbXEi18l(kxX01kKKEUvR-dqSh!lE>qzJx ziQp&zgr4_eFB99Ex|z$~r$%3QM>R}_3!axix3HokgfbeZV}w8w1R20w0UHgaU??hM zd>eLNr(AoaccIjCivK??*4u~JEe8#`Lf^s=ZBJX6R<;z9mUuP3oN#tDb~-E zp4YX=+-#l{Z{JP-wlo3T*>v6^+?9lCQPcg9c?ns{qmGscp|Cd!EH~eWk9O-(E9`Geqh*YUvib3m?l@U3q;VkuUK$+%14?zQ_Y}6{V}{PK(7> zE^T$dW=6i4hI3qcDV2}|9-$$7+`F+ycNWfu5?an=PRhw2RtPq?DM$mabvN1_g`K7F z{-<-V8n6R@ZUPP2#2>h1;+(gx?c^dg+BqNr7r?C#+;8LGY5u*DRLX{qUK@~Ei6&Vf zpy3uxtCK_6lS4~LVrV)^rbucsDTfTd=gSY0U}Y>S_V!iv?$B)L!j}cV-+jkhp#mIS zUa&uk2m>kA8q3g+Y`J#r^19qqw?}9RN$FCY(ZjeFm97KH|C=zYTIu^wNAuIMAsLuNZ^_qih!6S{y9E8wOLc~r_{lSx3VO)anM#*Zh zh;cNp7H-VsJmV)p(YLuX(_d}ZsZWfNb1J4-5&(mBPDGRRLD3{Hv&#qw6jn8j<=lq& zQZ$fb>t-37Gp@G@@J5Oknz~ZJuJ^RRcMT)4@B2Ps6F7DRMX7|NBn&w7$?*_hz8j(R zR=yWeeFC>XQDOm|{+w`zM<-O86UvnNe)?Pu)Ba6j+i-OQZ9%FIdJ~Gx3bw(0=5)ir@78HK+vkzF${|0mz5xVG5gZjOouJaA z<`{Afh51c!oU5SNi_HZIw3|xu7%M;SsfN=_xl>Z%Q%oS~2%=m@GpGv1f6SsqpD3n{ zUaXcAJg}xA~{a7f4Qe*oPy=jTS~Y(W=Np8I08F`AKsHMgK;sL_1)0dK{+* ztsBoUwCJmu=8AzLcoCgXVi7{BGEYpeI132H{9lhx zA_RM$!JsrVMUjSFRf`7Ni^#wB`?a67LtZ&|O%91SbV)*ILQT5BENRYD{_zESib6yQ zNy_CqauYr~tjam&vD3h;ep-E3oHGn~6B#d$%JfMuxdvs?dTh8hseElOX0e?=NyHHi96-59!&*qpXm0RjxbeB<# z<=@iZBF6N+y&N%hJ>-45;brdvO`T?6bqS&o&?+>l645PaB1>}F(B8j$!_UkXQTITNIJ2qCh%u*l%Pw_nFGXAZIV+(n zTQzATpI`{jJi&fi4fgz5KAVEr-;`ZHt0hX4&UGrR0xdeaL-VJ&(r}7uA&7WsNW62Te$+F38n7kxlnV9Y20>|N z>$j63x5p^%;6yz*)-4eeg@?9YiT%-&#Aq4gZ4k(NcpfU?L-h$p&}Kpw?eqfR1YW(e zVjKg=RgfQ{5MaoHE3q}8QSx$qJq@#uJk5C!-}XYXHr3yKlU(Doh2r$Yfb(TKX3Gts z1@R7z`ow$^-sm(&I#?825;htg!2xq2n87$CVnYmBr6kriZub%hb@o!&xzf8BogLqWCDHJ|7A&FD1ZwF30mxgK zva>ic86eyH925(e)tHQo@8hRi+wzOCH!)|E@H!Xh57JX;1>@4FLqMc0W;TGCvaJMg zRAW@#y8_HHM<|?E4JZj~{o$j>e%LqF4L{t%`@SD^wAqbTzb)|fn zv^iqo(E~YgS2bO1+%377%7S|U(dD4???oGcUCVjR>3D1r7${3*jIwt$Z@XfQ z6ch=dqeUdO02}FGH;WMsbQ)d7SE;a+HA5R8J?<4Eiw#T>oekW^Z2g=2g9lAX`fyR@ zdE8EWZz|nSgL|Fdru$_XddG5+Uv`>lE85K`h?^xf6T#M0c@^j z(k#1`ant^E6E1d8P9o;n7B>e|7CxkK&}Sn+$VLK`;dm{E1e;GGGMEC-kzG?OtG#Qg zCA(j^mS(W)_xQYw@;pm3*4we62po`PX*Ds2X7o1bzkwQ;+^ts%RMjjIF@`2MLEwb{ zBJha^B?$Q+{Ft_h3CRHJ3(1HTApF8B;}-_u)!ou7YCg3^NpH%%JP&Jp4$W0iAB>E+ zu+Qm2dZ2{bNWpw_EJ z8>CEwj9wlV&tOY9$2VI=EWnTj$Yc#N4$wKwY@3VvN}Rwt3cNAHETeu0QV?)Cdde8k=!C4a9e#<$De!1NB2%(~*_Vq>;8|65q%h zBj;0(uorv9^sD;NOzduB`VsJmBsx=*Z*$YkaUkynurdzLDSllgMs&F|J|m0k*eqqk zU!WRez`ZmuXj2&OIW&?o%1eFv8n}o>Hja$foWF%F433=fCm_Ma8UYhyvu4b3Ob>xc zi)c&j-#UhzXbUcojTFi4nOU9_01)K!UEz+SfjsLtkfgGjiEYABmp!$(7)k>Ab z;*KN#+~CsUYA7UIy{tlr}v|1A2lAd}r{AhRBT^&S2`4 z{-$hd*MUEowt*f=%dr~tu*t%ZfWZ*Qz_YoUH9VC9Dv6lmf*tn8KfV; zeSrahQ&63I*;@QsxA&1Co9Eri(YJbW1`}?UEQjlXRAgttP!-PdqM#_LzGvdX29B&R z0>^|rV;u44Bs7R3Gob>dELskwVBjWfUR-!cS#Xh}2@~466fmBqxZ$BP$2;cmX6{`BY{Mcy!95xq-yFoudYu|7MRHR=aFOV6I~tB5 zUa*}Plo<>k*kH8fM;?gP$l!7>Xe3UM@na0HtMM+frSx{g4h9ijNdb2BIkZ}a4RJJ46&PnMS`}XTvYdMV z9vuaiu~zpKea_M;=x#%AV_T@sm`9jO3Tf!#0d7CyW*13?)P*NV3V&3VP!reINa9VOpnYqX&iR$j(v4|+$2JsWnKHLJJN`dubJ zYN+7M%Zx|u4^6B#G7-!N1q7ILqb2WGG^~cx zMBlo1DZh2n+KX^$(E;auTib?b=6=X*ZBNO zqhxLrAjYdhw~=w^9r__7WqF0^lu0gNxf<&s!cX#ZrhC z>**$bHBpx~5Lp9?6W;1BF70d)OLZJkgUU$~^_)B}FY=h%VKIIEi#j zj?)136+s2iC1`kXKp0p9!hZ^qR{bPxn3puvw@eiUWQ(FfQ-`heX$v-JO_4>~!k~R& zB;@g9A4pOrA%NzY=z6)x(00$eiikS2Yb}xtCuBVm9}!ru@G1c=htN?!3a3i^>ql*m zx9K>P{Eg{zdf)e#(jgvPXKLD=$*O99@O?)4ACylWO~{kg1~&t4LZZmGbbxBf!XP1{ zp!*dtRUHw%!JJggF`5GLis!{LVI$8t%l0`3mNthziF9g#=ue8vHJBexdNnJ(!t+*n zHPSdN2y>dk67mr!@cKn$&?7ZJlR*-C;$4^t8eONC7!RuS5@LKNB( zUf#(~0GhoN1DHj0!_nxb)QN(QQ`jKr?F3CPr9MvAx6%^|)_RR1f0cCg38LDAZbNqL zz#r$UqK{P~CpcaXGKQfLER_ZD3z#Fp#1xD2!|q$h+TC4;i8>#DUZ{Usal&$fSWdV9ZZRn0xH!nVVBaSPZX;>zVo++`q5pNml^T|0UQ zKyKuYkB}9J;T0mx$90PK3wF2{rh*hE>VcGzvC4@f zf>~qLim^q{i*wZn$90Hn6XptKex|*rim>hD^~X2UE6o7vXQ^`-|~; zU{yi~G@@4ed2~^yAmh~#t%O&=vO*;2Knf7=cw=7n_Sp!A_557Ye#j0^;M6HnO~_DF z5Nb$C>roLuTvKZhA#qG$qEfz;U$If;6K8?g*3Ys1{L?ET297Ki3X0uw#_4xz(jn3F z*x=I|wQ2*(3W6BmrG!3%0I*Jc12X}GRzlIUkbGn1aDV^hZuG6n|9yX4x0}4QwI)0p znSFUb>Hrhu4rza*!F=6i>wQ*tANB11g~+i);;{f<`${No5H>~Kg9?t3jDy1-WbgL~ z45|hm$dv&MAA4I#e#wI$1u1-UWEp-X*h9yVq{8Q!RyqWkXo8|pm2b^r67k`0!g^G& z=DKEpU0mSkUDW%q^B)NJd{}1n6Yv=tyD#{U8MyJ`k5FmbNC4>Dlm*N2Wqow^TfmAU#|po|2MP8RUv23hLi3-4@j`sN}Kpuzv7D3#;Lf0^#z#6Hk{Hn5lw!WG; zy^$MLkv&EihG1Mj^C7)!SPe{O=m=0C&ure7L4=%X6XY*EoTygfmU<~Lqmi) z$U)80CuOC=DM~oR3BA zo%fuc22!AB=;ma^3M~f+R3q4b@qt~#uy@3XOI9qlxy09R&WM(7_0+Q;aCqcfY60(wHYTraPi> z{Nkr1QKI>NAzilAUsi7mBx^hea|Y56kNsPCL3M~F!-w_Me2$q?q%w7zC8{^?U!*d1 zOXThDN!W=aMUOt;b!h9u^MuOTg=85=;=&jkY^Ys)L{Y;XIu>|lE{cP|eDN;f-* z@8?Rl%FpkBop2#Lgjx_%Ae4tc-pRQoj?A0UD_QVvWRI|bT?URP7$3}@1@dcgBuLc& zf(ZHkj;7fBbTroF9XQ!tna2VotVoII45nQ1sANl)A&8%p@cZhlq(E@3WW7lH^l(>5 zgl`8r_U);uEJ{To^3q}CL2A|bvaJ#+FgZ$tNQ4@F2-Jf%hr0jo8~@M4y#M!f|Ic~; zulnDczW?X(Ll|6ht?~^z0l0HPbVzY6(&4F9IqH^O8VNxoS#*1J-~$jxhlEwnM{~SDLr%Cg+8m zXiExm2eS39^+cT#swpD6XO5^}=E+K%`QawBoj1!yG?hO68AAo;BB^N?O9><`Ca8#w zFjtM=RGxrmI4zbpx8koU(Dci>5;1X;hR+hOswxO6EGk zn5>z$qm(5P{!a3VZLTPUMbT5wWza^0*jjq}%zG%rlmZO04)C*i10B;yC>%XVB?haC zM!f-A1q9uNZm_oG#XkKb>r}p>re`GLL!gKj$L~MM-D>hvG0h7ma4=T^JY<^`v`@`E zIK(Y3-~a~w8o~UM48#s^Jup`s0^dlK`gZ-lU?8H)^z|5j%9jNAGuEb7Zr?c0B;hh4 z13jaLfe9WX0?;9kGK*X}!Wdqd+(>|45gDqF_Of|xfgU;p&o6m_{AqxG=cwy)cA z-6)14Awc6^{~6c(Rr{aVjwKd0jDcQ|C4$ej%pJxjfdNd$bHSPDJh@B$qr`!;2MJue z$LVlv;+4m_TmHG>kKI9i|E11r*K}H(JL`kvw~q4sv^$E z%`c8vfGP$^H5-Mt zk>0H@Li2w%&R^PvO)G&Ff`IbZ_q_t)Wzo>3qaR^74S~l8J22LWcQh7-+YG-`rb2}e zftkp!Lf!-{>O|HR8BD6c?}8YB{3WXlxDsMvo2{vqVmDz+@KHLUqPsU9pfV?LyQmJE zt03kC>ez(&ixpiKqyrCUJyu{u*_#hOqR7bEpaI5!hjJ%WrsIc=?__nl2l^N+Gs8LI zh!nM)rPd8l)uvG|3>C2cLpDxlvC(Gm53{b%Wz9J{Q^awoMJs#sySI|kTLC5gt?w^5 zGF5b+0+N2?9oC(bkJr$tKDOTGy%IJwsahX(lMj;ZGLvyp<)diRkgoBdb?10J;Pwsz zc2A?>%qNQ$T8$xhxJ-5$QKWu@E@TXO1W;FHm+Ar@*lL-0gU zi9`B|A2?Emx}3t`3V2L+WOC$aHS5S|F063fd#zG!nSpxA^G^(xK|}O+ZS(8|p(Bns zbnhC-S1xkM^XU*}w@4|15C6bfRJm=Tyex1km0Kd3yPWzACm}=QtY?`8{te9o{uqUh zIPmHdoDL#JtTOBgO@Ck|iD^=k=zDlyrvU8?Dl!u=d-)J$r8a8{SZ^BA8ZL{gDmJ(8 z9Y+nemuc1hlpcDq9=I3k#CXW2g3M&6!Q|DKa$&H)W?$AYmolcc(eKFc^$d)j0)s13 zdSy2mX#)b!)hm;Yr=Tz5uc+_OfU`BDX<3s-tMBtPeZE0}r-X9mgsL|{0erg|4{izi z00$=>?yu)vPmKC*=E}jTU3;zn1rBILAFZuGk5clrvQBx6WQ#mq^^D>yt2<)nqL_}m zy~n^W$?j(g6?i(k@ju~xQ}>#hiy6tZ>WYqV*5ff^+fT&Lpb%R$lqyj)>TcULa?x?F zfFkt;cQSsRO`4NI1t8k)Yqu>?poz1sGodoM=b+J#9!cc=f_~gA>+@h=D$89AF)|Ya~7pmxghn3Lavctcn|`@ zW+FT#cfqI^KO@%AES3~}p{z9bsQSz?zz#2!x#YQd9%wbwrB_AV!nXNfU*V#eh>p zQX`8Mn4e9Iq&J7W5=)HF+CX}!n+iF`g3pymFNSo>2-oTtB%2U4Ng{!w8=G}z{Y9`$ z`2917?*n~E zab-6}$}=U4xk2pCQC7IXcWvNZ!u-8`SxggXJhb`V*sOKvyL8WALpnI6w%?XWFZjr5 zqr88%3y?igX1URA?^!3kpxbTp8ANP3J}5?VyF}Mz+dF{mnqR!M!0pyre|9T#2fCN_ zTX=5a{D1`fl1Aa=bPt} zJNH(iyO$4g-vP(v;dOV~eSa<;I6#**@xNc)1Yh)R>B@pc;P-D2y#kGI|9 zd#n!qh*sDEoJa}DS6y7YML*g|%y(xT1Ia*hm+5Ou3P=utMrf0}5G%D_A;`|NOk9rK zqFiqq$ws(vK$Rl8pe0!3k zWlvjeL!byCg1c)T1dzdMMjic$dtfMNBETmZ1duLe&RBK;o0p7FZlkqw`z~W~YJnJ%a5F&G3_Tv{KC%Sm&@tJ}_f z#{fL0CFD~bP~g2r1kq9%hhZ#x70N#Fy^rMOg$WO`0?PX{OEsli#sBD^?PF&Ky;O4s zL|eFD9Bkd=DH$6m8+k31II0$9GaIcHBoDA*b?R1c3^o0S%q_X?F;RjTp8EQ$4a9x&PV_sdQh6 z^m=XSr;)V`nYiy%s?{&|To*wFvtEg`L~W=Bs~VknoYHyO|1`x_Te2$K6U6zr0%WPR z2tfzKniX>;d?8&Ofydk_Y9_zT&Z8nv`-@RIO|5~SDgQC&(j1tP1KSYBCV63h-XiTa z(-iOH+t;wpv!5WjJbonj6d7&toyrx4QjMHKli6Y7e$aa~~%BMI@&8zI!FuPThPjHpX9H;4L2jkcw z_IGvtx!xaII5%Mq13De7+hicUbyOYL-QVtpNmFV}x9uuz2_9jC#Bs1qHlB;rnf!5^|kh&xmV?cb=rzT zwt^x=JFZAA#>wEehGzlv2kDeqV7a(E~5FNCgKoh=4XYf(K3 zn2QEGKM8<}bn7ic|6~2Gh)mA9e|~GT^=9VFA!LkNI6cG`1}_l1BPFGS{8t$nCR-sp z%1)UCRbvk+{@d8jvjF_T^_Bi-Zr|xIeC|1Y2`7A2MtP%_v;T_^008j!2MqAvW*7(x02lzoe?B2VMa~OA&wnRUKmY*Z|Ez}% zy}P}WwX=n(sf#nczLTkqGyVTMjC3BhHgx~vhr|y;4KW~y+y(t1yxJ{!AtaXdMl4ic zfYA(qCUFfD&`97`GJs0cWV09hsC-*M1db8C?tkUH5NInVXJ?RbA&Hr^%GkHxRSKB4Fi zurLZ=p}BQrm*?BD8dx%gnQ5@(V$bmGW-$7?zC4baTJX7(MYe}K=Iw}B_1 z((g>cJWMZr^g%wX?wcM@Wt%bXVIzOi4I?bo*k32yBAEGpu@m?n_t&Twxc*c@zBb?3 zY}hm|mDroFy9YldS9yM3B#Y=-Y~CeqS1An&QF5vFO_yEBrWDY(2Q0PQ8|`_9Hs!$8rGr|vdG(}6g$XW z*NIl?{6|}d2h|aB-3+E0j8y?8aRC7-C=ER-fvRpYmXxHbXHfOdTDW-w`QLRTV|B<< zDgb9aAqB#TKtT||7>XznlzK+4!T#1lrgKxYvBe;TdM8qVq{gVz36KL~CQ1lWlE+a{ z{uG<>)eV)*9#3&D4su1)N>Tw(LRTC}>woy#44@i^QH+!<>qc^f{k1(3d>!*`*&;VI zX|nj-;=*y3nkp+QiE9hZG4M&w3JXv`!3^t3)-<3S%Qg@;ri@bD>lCraMVi?7>GAKv z^;1SnQr7VZC;?H`;Gicc2udpf3fhVZQNn+O<>fYTI_JA6?z@G@SX7zSmBa|5VNk{c zh{pm#DBGc$v2i+|zlIEcRSIq=-w*3JJ0Y^>b>XGlcn7xkwVE5Q__91>4=Zc&hV0DC z1$M^vS;-45GlXq>BfZ$|11`?)miVFIgzEhNW%~bH2Q2M5ATIw)0p|a1G5@nB_QtZN zE`}zCE{60nhDN3~l6GeH|5E}~7G&*)2@pUJstI00^0^q>Y|M2jbzeY$VOWteCKf7G zSG&>OS8xB%+?3BQ|DLw1Zi$E7j_DJ&&pb7G0gL(U*cWu6E-mTY->>$Tq}DmQAYX)G6cGtc|m*OcN%H-9Hg)LzKq|FF)w zMSRVJ1x$ZWPkNB{>!~&Chbx-PstXh6UYaGTuIilprBdRYQ|9kl6*l3GvL0SS*G#v6 z{A&K?UDTg|k3TO|J!N0(`?}=gq*5UpX%&fOG5K>RT$;Hq|5l%-J>S~DP5Q$B@0b3> z8bGPnm5$f~W!!<~g&+e5BQSshit-DJ^^^09Qb7Tuu!x0GV*vwD$;bvh6XU%P8;Bge z&${3FWcBQ2!8e^|H%{LB!l7W%53xzRO>ZnwJo)C^+q1jYp0nq7QfMiD_kLb=u;2Dw zo^}T+ug>C{sN>ElanURFnrKzrxyy!LH4ofAEi(;RC|hBYI$eC}hLA0MaP%fYlfdow%OBe5Jkkp1dh)jKuKUtwYBR6a2)`Hlzimp;7sZtY z2bfQ&Y+KqsLH%i}$?oWLg4&-RX`MZuX&5=luy^^4JyUY8^x`8o0tz>8e=v29p6KPZ2lu78v&U*#=3c!e#eY3#jr3!| zDK+vdq77;@v>zK~UA?%7+1pV3#lOOw=Zk)13slYVDp9i*?$}s$^9IjWe~(D}qknpI z85T~`k!W|eyy}PJ3nemr3Csn25di9)$+ z4&E6t1-0wS)l~T&D1Vv2EdT$0V|`4;vGy&U-p(JyUc3xg8$Eg9Gjj{JI++#G=Zt>e zd$P+kk^AfHXO9=v|2zJ%|MkzOYxZdTOjS2lyUR2HNb$AVIIfH$fEhO(V!m4F7^1D3qpCXn+)oW?e3@W{Ab0 z#xl$Ztd5v$w*9r=Z=lQbIT$2R%t_#ZI|AC=Ml`h1z49$#i{lQUqXm`F1MvwvBdF0{ zl98I53L(MGR&)cZgI7IV3~cfrc4A=QMRCSiey{<>C6&O2FSd~A%M#D_p2fgmRl)>r zB_njtmVju@NGwWC2`(wh%uB~=0(vI{VS>bFunB~^9O%A5Z@4226x{*|4)kU`x(Vp* z9fS!A+Zl1Ue$b6UZ51F4VPJ6F0X7D;jexElwSY&~zI7Lpc4%=Q;LQq5$)Nb-WrzYM K{ffPy#s&av#YkKL literal 121059 zcmeFZ^;^{4*DsEQAR##*NJvU62+~M1l)x}_r*w)m2+}1fAuTmSBQ2q{q{M)rfS`bM zC@t{agZKS8&-0w``3uhR2j;roYp=ccT6?Y6ioGv2RIsoqFs@_ZVPIe|Vq{5VS`S>q zz_`T4z#zxK!!(q2aeiv;{L~cg<7(|;%X}Ty6iaohvxxdzG6vtio@*Y<1*aw(p=`W9_P(qLJ1aF7L-Uf*mIhNaZ%su*G zZG&St;ysd2M7X=J4WIKrn|<(;s_N&X2dh@4^9C9?3ix{)t%`IL;EF9{cFpRlM zG~Eez@ILDhg!-Mw6B6D3=~69qhH6~IVWQnS^UycE!#|Gn=%|zERay<>D>1TB=p5_{ zaQt+>rR1+!NgT`Xdi^ZsT+X4oImJ)+HgnMtUh~LzzY8kh=$BX+8vhLfI%!8O_y7dB zVPRkp00=O3w|4Zn$BX{^|6Kq7Vt@ZHqL)t$D`WAIV0?S`O)T{5yP3*Ikx#$G;NjpT zo?=W`Jrff67|Mb=+)^u(r&{OyY?<`&$7^c-45xDQs#^tYy1(2s-NPRzjaOEj3@!ye z?b28MMsdqs?-!4P(UF37l4tSIiLn5|h<@jV}LSB7U# zJf=S-*#0@945;3QR`RqwwZhNcmF?CIdZ^Hw|CyyxZO?qK2K;(!jY<=Teo z--T}lnA%;+rg)Ky4HreRzhP1HO2AdH)z2lS4?V3V9w3@**&d2~Xz0n5Non=T`W!U!#MaSJd7`*5)%J6Dp!vXs`{9{O zi34LUrHr^f#;4M#w(*uYIzr`$7(*7 zE~FMdgyDL;J|Bt;e%ep{J^5!IR?6ICR6&GyO0Z|OhSVxj)f4=eX^`xt%V ztwz62y6&VBO0H>F_u}LG^hp(h! z3&&L-!r!V2(0Dh+Z0L$iTR!2sM%d{5`4L?jVJOa@5WV~&c~z?Q%=J{%NBh^(I7wf$ zuu=E!+RL*#;J7qQIxtEU;I~547&e=wytnK?&902L!)c7@>5pK8_cZV zqRsx)jNL1RK<=sDJs=Cm{GiWvJJn-uCril4Lu2BB*5f2&k)5Y9#PTN$DKZ4ffw=n} z!(-3>>=;NPt;99KCyBRX`zG{v z5`T>pT`=KJpU&I+?#*QmX1|Xy_f0mwHTXG;aa3hI&E>c}Py3q117nw4q?-!8Ax^); z#si4OSHIEkxsomQ%L+4`Bvkjye{VOMpBz5FpSyx^S+}GwIKFI(_iOIyB6!k@t-aP< z*hAhLBjlI?vo4*)#lC3wdU(*sK_475KLk&cyH#ZOjWGznned~)U_k%!xAGf7Cm#o0 zH-DQxK#Dc757CW{T272SD?961erB#)LX3=YDP~KUn|}15HS8zXv%@%#tEfPW(j%q?%=K?lf1r+>>6AZblIYdok9n%XB z=~%tzb$diyNvnT~hN4w*)N5vI_z+^Kw3t-&dgN`MMe8>~%_Hn@+HnS_{m*P=is~M# z;OCd+C9mJ%3KfW-{#HyQE;eCxCga+8PbX_RfGX>9y1{ye-M?YIbnFuj!R}<^;x+EH zN*S_0Lh+c)5rc;>Rc6cH+%0<)@&!sFf8Qpbak5M#^QjUIzHBG?N0LrgHV?v&Nra|T zbpCPByYYO>=A}cOC)ayl^1OIwzVz2aNyS zvSRVn<=EyhFeDA}Fm8bn|AZ6|TWjm59`~+(_|UN>E7{m(_C7`U&fTp?dhK_kWINNK zWfajmc2pCRRdF7eI^Tugs^w>%E_iKXRCG^jr#??6=@|7hIkO53&>-@`uq<*W7$^uO zvkj}XddKneZ*sI#PtRz)|I}FJnhMV|e1mCOLV>U5m(RGw z{0cbsD6^JU0;h>Wb?BI;Y7@8lq&PG!o;BLlFK%4-V9@Ku5xMoJ@R%;gvGbDZu`>Rf zib~_qA5A+a{1*Z_y+&C|X(tPz=K7A`q))N@6^eEoqL!cNoD$w{Cx0l~_2*f}%wrv# z^W=s36z(=2+(GN+TUH;Ls8hb*xXnGl(yVV2Q>dDz{@dO}N!&a)`c^4{LG4VmS}k8( z)rxs&pz`N0RMXvi2ST<|!cw;tq9*2^l+Iyh_73(j$NngJR&mfqwXj%=9p^~m!_1rI z|J(0(6QAxj!R>^}J{E3U61bq8;hp)PAm)P!aJwI#2`+bYB)sf)+fS+Yj z_j3FzE?J8-_5~U1xkKbcA94P+^>PD_T5_cIM?BqRLA}PL9B9;M{Ss7FAdy&-@AYsZ zLWY(gNwqirS%eu8txVl-@ny;t&2tp=Grv=xD`wE8>Zv=ao7Q(Kgg~a=mPLfX+A5}=+d-T1>JmwPA_m`Jfww5)w<;>Nbda!4B;}nza74r8|-o*PX z%QMN4oa-xEE7D{`gL99T-B0yqHyW8U8OX3lOu6mo+&v&4kq5sPE`K#HTniJ+QP-fhD*?SUv7}^ zY2){`64StogY5GoFYn9#!=OI_XB$D6`@erNT%Lg$k2fAgxhT(0qg!d&x%6wh7x{j4Bk~a}yz&tXQI9UPTGCDQyii0c6mv6sb%TpUe}gfXh!)t8yYrA%`Y3dbVS*Fq` zxE>H|(x861VQ_Gfk86*CuxD}Sme|CB+ATw%YvwLel764FY0}`90j0fX5!)!?SMw)C z{ZDqjZd@M8-SjNPKrrJ#={Te^6Wz0^Id&L)^R6c#6__GKVb3QMF$?1`?0~d$_#q9Z>$s6>lv6Ot~&*p>V5mx42?**_{G-wynzt226fKuqa zBf+^|bCbqsLqjnxUDUB#;QI>3?PKp~G&SXENFND~DxFx14xPBg`cKjcB8KCEYntN^ z>C4`VKS#`ysout3&jT zvgmsX9Mwq7e?D3qKVJ(ccHDTsnXKR%_1f{i+v{_&U*G39H7@sQf_&bc4`#24t2U3E zYaQXZb3_M{YxVAW@mUjgL~_tCYpYUAx>!g?jJC1g&&9gzv|EKy+-Jm3=MOi%X*RIy zgY)(k{Sn*B+rGINOk%KfOAC7Gq#>FO6*G$|4Dz?v)16c82BPREP+{yANOrR+QHMyx z+wgSoV`me`ob~g2PHoV-v>GXSfmu}b2#xJ3{0R}C=M>4r5RIbn7*K(XF~57Elj;k~1Gdaea8UEas9 z-Mm+mh{M)U8~8*rNcDVh6@D$i*CQ0^o(Fm_Z2#Maq@?+BWV4X zY4OGK)}hvspNDJU%b=mNDc!m3GOu8Zb>nZuD;^QsN3VkZq?^qU}X54vygXiBlU@(opNPO84=rIeGrg9 z4M=bSSr{IE8S?Bb?JVeadQvb=0{I`0NsRlNSpUihyWB@p8L%GkX<)fq1jf@~u-Qv- zJMh$$L$1v1{AKVB;nvIFxPo_{9IuvMGb_0M91-YtP3ycMeVwXDAkZ!N^({@-3K=9O z8~j7ys+MQ$nOFJQ8H%3_nUkntNkgTVOlm#uRmg89lVNpJ{oum?GG05w_r>GV`FwJF z=P}*mtZUYXFXw`0G!#^|uMaIE<_pP@UTY!ihyo#*;eb>834sFDmSXsIRrVKj)1RSV zIxN>7)Fdmgj|i{14-cPm;vP1gZZr5zJ{d2Ph~WQ7yM&F)`z&(KR;C_<+@5onQ%ERJ zwWWFUftd{TW<+mu$+_4oNsn?!x<bZG}dOhabBH>?EuQKuf8#Ui~x}D_zz-YvEKi?qu zhBmS4)ozakz6JNl;e>lgDB@63KyGQw2?liOiW;@xi?0T&W6|rWvSVraM&WY<(ep~* zhy1ti243c9m6Ad9c;s;?C((-Wr@4|oecZtqS3x$y0d7`L0nyXY4PF)BwR?{hbHn;u z@CMrt0vb`HH<)EbV8%@RKkZf8xy{r~)ANrG&78@!Qm=WG8a}@lYL7z+KU$bas|9T4 zKWdSk3-M!w{}tnZkh(k$-UBu^G_@Er7p!?vqc}k5ZC2+In=Ons4YXFYf=9tIU4CY^ zzAk=$R;2eaEm|We{C_keex;F-XYn=U5#jObn!#hR&2B`I?3D~YS2EOQTW)se=Yv0_ z(fH+qo)GU5tXy32>U0gZFX;JbMA4I$zHc%5?@aB%QW|hGY0Y4q{~s3m|0u*isCq3NTeg9JZd?&YsYDG`zQ#)z2OtQksEn>>rqMrix9HMb~l@sr=iJ@41 z8RK~Pb{HtSy0oKv@P$^gQ7W=%lQ*wgOt7fL?+|^pQf6i^yhcGxZGw%8daaS&biIa^Wl++n85SS>7VX^VTRlZ&)2l(d7g7Y2_JnZ9{7f�x zhiiOysMK=yzMPb`GgE&{IM_8Mc*A&`)*AQ^HRWXLB8QNF7-HxeE4y!8p07YiS`2^r zs{%rT^?}`#+wGn3Vu27D8tH?lH20|56|PuP7LTS?{Lkfk&q@ZKBm2zSNjWd47H*(q z^+N3{7~u{?`NdP>>dlMiTEs=cV-*owZG^- zm~S8{qZ#hmTuBI|e3E`;ILV*fBhglKKhKwJnaI??*@x}Vg?x>=*0ba4piNE2huSF8 zdRhmLhuRJ`2!mKPLDccCz;g5>$wR$-Qq%H=SC$q1#r8^oT#G1XXUHiY+Ux71=Mu1Z ziJF2De{4-hUY~*U3>Rn4`g>>Y_cJi~m4Av<(J>r^ZM;Po02;q(JMQx`p3xwRK7cpPA|UP6B>zwt#N(i2U;hv351J$eNZ;%%e*uykXCGY0-ngb> zQtP3w->`NLQz!dvzHxhpC<$&YeS~@P#+zjq=Q2QcKHU|tC{eR!2qB7R76k*^xM4LJ z)=2$XVfKCdJ5lmJIx`W_FqynppT|y*3#>1qczCol5k5VYFs@5`ImYH?JR40_o$^as zDIPboJ~-UI0g{>t*G1gzs!rh!lN9)Y7@HzneRi|3Q!6=ISq)h>>Gu$&X1}e+v@Bht zt6|%(^`?R~e&=VjO4b4&BqvjMlk>oQL<2?%@yEvp(mgm%g>FhTG+ zw7D7xk9I?9PirLQi);)v5lWt^21+JaIW#qTFk9Pf8mEdH5AQo@UBT^P#zi{i(~&an zgM43@l{V77=<=pMONl1{eQ|OMB7myDJD^n!2ijuxcZdt<#zK@%78byg*E#DkI}|8r zL?+y%dS9JtG}QM#E0{GPu6Z2CRaukY-!Mzp^F6Bs1ccqn7jT{Rr%evq>;)AE>8S=z zKouyRbrJQrtb5w)jOuX>Q(rY%Qd32%nx+)z7H&EM^YF-_$v1^vospmyg_3pA2v_An z;*lDorc+VQuSw|bWEt5UAWHKaC?}VviCe|Xb{G68d#;155(V)Lu&tw-Hf@RR!M`)p zI4#E)%-VZV97Wbt`Pp0LNHfAT5z<%OKujP}i*noQD>Zh3y2o)%fG?zQII}HECF8~ZE^US zw|6HW70h2O(=a2-Wp^i=-$bINrAQTvE^I-)l)!T?ASSBNx`bxDL-9dEy1=}3^(*mA z;GkP93=ym12QM{Rg61N?+0PnyC?*2u@?JkB+i1l4@>f`^Y@4%xRS1muimrlY6s+AS z{FG3lfZkIQ*bOI_p!mVCVa3j99*3_>A*}0N?~5>8mbr>Oab&6Gc3OS~_>(vw%2Ks} zVwB${Vh`nhCkSEE&TSKaF1iv(jVP5Z?Bq*YUr#7FR-jN;=LwT5lG$BtHVrRrvlM^a zXnp?UW7Vnhs*sj39gJlmQfBwVPuT((qlC+?Gi&ICSg)2RE=)55>KU&&=FbegMwU?% zkw7mNJJAV6iGc-5{ad!BkRGwoKW}T|N#4SbQVw%HWIh^9sBHX!UVgF=_*diOxFInV zqxW>y;3pkPyGCo9#G&8n7}i0F`q&q)D>3>^!}0F&xpxri8o76G=$yV{WMkE-6rwZ5-Upo(vlAT7cDTO^y@ul zl(xP6MI1YTw#4eYVc!rQ9fVGcH^hN0EByrzS@l%kD_lDogjyGc8&;ZEy5KhabvExu z99Ni_bY_i46`pC0>HoOX>R)$4&!vx8eD&*w_&-c3lK+hBrJg93A^GE=KUC9j&51=r>i~>wWv?oDVx*Un|)xRa8 zfd;@DP$IvpTs|=5P)QDK_3SfiTLM7+>qOBvX|J@104J-pO74v&MGf5Dg?i=~kcKd$ z;gaQ0iP3xgtEQZx3b1yx@~4piAzmMW(gBWhg{OF@S`6S=?74E^GpDA~ z=nmc8{rp!M`xj_s=op>=>%9s`8`Nl5snBAU(m-pzKK1IHcsKz{|FuEIf4&2RtA&Bl z<&y<1$`Vv2-copXfQx{X;vZ430?erOE&2o;_OS2~t+I;$3c5Kl{Ni`Wz+Bn?tp0D@ zIiROJK0py$5h~~B{{mYE3(JGpiUw5Ww!UkRuRy$9`m1N;|ImS;J0>b3dY(XsvxY`OgzdpQQ`~93fQ(809~hmPF(s6bX;#7Y|5(C+%2v+uDOP5?Ahq z3?pnTf3E(?C8=iQUn2!7chA&6(Bu4>q~rH#mdUl7Bv6@F6^ zZg$}G8zyJP38mhcFX6%pnx5Ux_>0j(>Y?+GxFphIyrtUnC_+lYW%BH|ycZ$4U3}|) zDAIQvg4l5amya%g|91Iub`f~uqrPx< zgf&j4u3psQoGRM3v1W7R<>F8#TTn|JH6Y2td6rPxK>R`LC3{LG96yTl*Jv?G=~oZd z)BvcHH3J#y5V$XC*m$Zk2nuL|JpU5Mk&#jn!#L#241Lb&?geG8Vi))D2EsYTxl0w! z-4%_zU1Z28V<=R`d5*UrkeUs363qTtdZ*`Fl%%BB<@`iSKRh*Zvc^|I3-urq+13xA zh>2H*(I&BPm9dbek_990aRr!~p#TBJ{Gkoq>_oXT#{f~UnvP`ENSay!+T zEDBjU1~+~pfNJV}Q%e!SqU^vKC08Vux4xk)6eWk^Sb%5ms|jjdXqrdMk`;}n$`!zv zG(C&s6aZ?L|Ud%9rOoyb9g zh4d>2*j5`Je9mLxdS>aSd_gT$l)WEm>p_BCZHe_zkQmc5%{KNgqP@)b?Kf^Q!i#IE z)}o#6g*4C0@?X?@iZf~M)lG>BXrYXg@i%Na{Yd>iBxV}aP77vDSiH`2&i9~9$68Pp zPS&L9VFMOUheY%mEhdG~o|02q zuATzQr~wlePQR;dqD7EkO8jGY%v8vTG1Ijg^W4tKEp1> z%3TJVaj`+X2vidI>@y_y7h+0Pa#Qz*lzX?I&G z%!vikkO+VB&-WCW+66>HtY?#gF`qFr!Zof?bXqvA+*|HpK1EX1R^x{Nx z);;(1(Z8gM$6;1wZ(tkIHGTa%o{`GK4FD|B#1Oz&_88O+3}ld3i3?n33A6TRBt{3{ z@0z~s7fF%fuR>_RTw|5(RQsU7yMP)P(}4^9Kv;@U-Uu%d)G3$lVfIm!UJS=B5rujI|V8 zI1z{6B4k5_N+@7br$)u4Sn_Vzc<{=QfXt1egrTRL*vRk{C*aJMPqd(L4j+IRk}+Lv zG9HQ1Uou)|KSDaAq)wN%9R@Z>67m%`Vp*7TkX9;-OYtj0wV*0bbKmC8z^ z*5i;q152^3pHwsRaEn&NCR3)<`{991hQG2kzON!s$~_j+LMD+`&|0DQOxOiTz z+(xv1fs%X_8!Gi@Gj|X3I9?ISS56AdR8|As@|~VJ{Dj$PGBqU6ml_mj*vr zCQ8R}+1Uzg_?4}uQ&f(}7?fFjt~Kb{Bj4s!TkkCc(*`mgNr1tPBO4e2S2IP_wQZ{{$Fa4IM_&3z~QVB~1La{v@R#i(gampKR%XNn`iPvpGZUYOAdP*~}K z^XXI-4;Wv*MvU%wnntYDQoQWvPLa{`7?CV&s07*GRb)4q9DeI7pO09jcnM_&1~EAk zA%&v-SV0{1pYmIUFZP=pwc95DW1$l(Q5i##0@YAWB0+@K*?fg;39o&ggF zoqq@5okWzVOflA{dP3ob5#JDs6d_#T{PRdkPxE?pBIH1#hpx(25l4C-q9j>#4SLTS znfVE{Bfhl)W~b~*M8d3cm|Q)`Y+wFnY#xW>QJj)wc~ufKUhcxRf*U|rp%(VSemdgt zFMlR}a0oCj#IRFJRP-4?3_&v6;)6WAXjcVd2jEpwctYpvH{AjrFhC(uO5FN5C0Eo+dP zMA_>;N+}X9Kxe$bwqb@fZ%P~74_<)O1D0(Gf3*~eF2jLuL7jTC%Vq~q#IVI%O7)(2 z=!nf3jXRpi9KYN8D(DzE`m)aAyHc%oY8*|9CN1MohCt!~QZJ@$!&!s(fqATg-I7BnxQJ|IK`IA-dgEuOUa zwB=fr;#CRk2@M8D`hoDO1TOu&D}}ctlB<6wH2_by^@dh+?hd3>xPatUJ^)ZS6jy3# zg^)3_L9(ngq@YDT!Kvb^m78SNt%4vv)$!)}Ab@c_z@ zbT4j({zDjYQnW77W9HK}65~CN)!Hgrj2UvgjteW25Q5PYD-wkFp*-AqJ{kX!9H(Li z<=7X^hh7-iiJ>sOc|itaDZ_o)8Onzy=nz?lIs;i+Fz$0w7m$Y<=aW#TFGf5i5vAXL ze8UqJ%+E;> zo3h6y>P`%u76(#A3M>F|OM2NSq<`+pwph?dvO+vEN}s9Nj#B<~C2-xcKrZ3FzL4vW-vWgRYggY#hJOIvlDfW|3{6J9NMZTZ?$wGer#YezbsSQrV11 z8lvL&Rrb4n`spm-Pq!EkxUB35C&f?150lE?XMBJb5#TsVd%anzhj|HLt+*#=Xdksl z0902MY!$58@L%S{gVQIDK_<{TQ-yCtP?QSq&s$rOe7$`)YtDu&^}@>n-o+?r4-F||SFTW0z3vHQ z1j;g)MFtWz>~*rnDyX)&sf9x(NNtVwdJ7j^GPn3bACP@~P=d~h%js74{BhV;_WWTp zF;9CMs6Obwq)n3UUu@C~ zSthN6($rEdab;_yuY;DS!UNQhErBIOktM__96f*fM*5g!yPeOD|B!9*daTV~_IN0^ zBH>lOZlQ2?TwJs;B~YcSRZp2=Z$H+l*Fzdr{gdE-k+lm%-((;k&>)-@3~!YQGm-i~ zK$i+1HhNu0}v zcTGR%MrV`=0m3J*6RM_NT6KGZy3CE)XE)!=;t;?C1-8S9>Iz`Z~=bHY@ z&YJkuQ#oaFnPizpx0SZQC^_0)4f#Kb8q?r-Rn%Mp1tH5c3m5LcHunRXb7HlPNK}C# zR%#U#^197S>$XnfeN$tq|C{&UofEWxuqL)Tqi0WFHUK81sb48yzwA41%-pU)M%3(3 z=ZVmCHf$bg;N3fA(^{+q&6-NU2D`~Rmheu&FijYL%{pf&;DOO10-@T=#ML4vh9Q&y9rY)C!}jr+9i1}wK^?m7+a9u2|U!dj!U zib^9ceYYRwjg^_>t<2{Omy{-!LvWwNyQ zK&z&(xM7J@p}}*+B-CX=qO*zJ7);-!2W3HSgOiOo3rp=cW`g_napl7*=kWq`%FbTD zl!$S)cnFrq*?<3`0QW=CYBY1D_XtE0Cer`3=UIZ9s6+QHWu_)`C^k}ZqcIiqM}(OlX=f1JoAv+Ir=wdbm3f7T1F1Wa z`EB{-7C}V%7_>;vfWw8=_bB~An{B^7^Na>reuejo&4Pv{qS|5$1uet5+g4Ppyf+UD z7@x%1$|{96EUmqK>0+>g^cIUm=;4hWwbbMvZTpV0XRXQa4<}N!7!1om0g8TcYG4Q7Hdc~jz|Pg>lQlx{OL1oy!^A( zaj}|~+jx1}wQ%ugq8688go2TJg^!^0{L+(2-*J)qx)z=7NrC7Xfl~zjy zCu8>ypl2B(hj$@pKONW<#+F2W})$}U$O z7g>U-NaNNYV52~3sJVHrXKq%VitdcS+Q@=ieuUJQ8UbaFWWt3OxxCO#oT-0zQr)cr zHi^b6k12c;(3x-+c48*Gxfmt2m?wy6I=Pcd768=$F-Debndz-By5oReOyz2^^f9@5 zf+@d(MY(1LvI2k?Q??sP;K(c(L*YZVg)P)hFB!8EZTpRxe`sJi*?yowD>M^Lnx$4F zn8Fge(=P+R2ViDM`%lfE#z(vRwRq7u4n-2Lgd*AyMXz6fJwx?MAYF@bi9{T*8Iibl zi6W1;@+(wYb)6Ygi%z*B${}sSaAZW5U=j%{DP_W7z{%7LGSTIb`T{D;4+fu}JmEHm zu1YB=d`_rPFevyvw(ln15!t}&)0qjMTC3vL>At1Q) zT*!gd{!$37+(+i`+53b%V1ImQTcAUmNe*0i;)T^Kj|9*;3a2bjL`32^z&OTqDa-FB zQ&F+dBB?(5m&k$BX=0*8+s_4>#}^a;R%LIg{^1!#^O)aO@@zcvgD=L)xleI`+Q1eZ zO@1`m-x`k!TfX?o--}m0hTiLzVg}~Z`H%IGOCm<}x%>eBifsIp#}f&?i|P5197wMJ zulbk)FB}nN1)VzEpTl>cs@<=p0aBUjSL>XjH910K9=VRT9$Nymjet1BtH%`x=Hron za_@>MRFI$i9{Oyqj7RMRtw|vu(l$+gRGPTC8s}qRs?>3Cu{UbGddzDY4`$Kf?O>)X zO&)0QLC{{{+L;;;FiB-o+I8vup_v!qS%OUDdpaaAk=I1o)i#D(j>Y6tSOm5GB5-10 zu0!tShV=M4LpTnC5a7%$z~3TVJ9U^lG)@U;?CZjScovq4|CmaEn^g+qdlIt5Xapez zWjRU*I1av{8uBeF8c1&2ufx1b5)Or<-AP7{QygUcBwL!HS0Bk^|WURo1 zplaniN3*9S27hg(eu*l=H(|(qfSGfd8sJUsf5Dq-;4~k((b*;1MCG_Ffc+{1ByzyH zfAfHedL`u_ByvOp$^h&fjZw9(#Z({f|H~74#q(JKHn(-2QzXosDDI*B4??Xo0|V>X zl0a-9no!3wV-fL%Ps>8(I9V{ma2zz7%|JKPAC~=A2k(2rzZUj0R4|F$4G5Ov04VcV zH|}1i2_Zzq{3zE#Z_tPom;|f<$owGO%?yH_ADINb5JSUZFQf*{XCt7w1%T2JSTi_M z8B(`j*YNLxJ;>mp!=dMcS$e22GdkJ%3epx)^S?U0!Wk#`4>Z!@G`7Hq0Fu||=~e5r zT4YsIPPUPSlEyN7qT?rtri3ln;A|&2Abn(qduJw~kfAY$Nx2}Ad};t~AsPpypBm*g z8qM0CFpN;-GaANO$*(7Fn&Fx9JiImX}rPMvh}I4VihREtR? zF{@<9vyxc4J;UB%>|N3MX>0@2>aM}t;PwpVD6_Gb)|9gV%*#P1oiYlH$f__&>|l?w zDg&&2{I;NbZ_PuNT8}rWHmgc)yTj%IEW_Xl_(b;Mr-A`0y1P%cj6aoZG1}Mw)lxzO zY8{7cbVs||md;L_VWF<|;K4XjReQr0+1z6aq&wdJ4n!ZU7xz|9fq(5-4>^$6s|s04 zeHEH{Hk~>XgSCIBjl?q&-v5TByZ_cHs77#kG$TIi5b|pp_kJ4K1l7oo49f(@8+!)H z+wDRA5#zVhPO-}oE%7#-*E8Cuhl`H`5H^QPk#hS(0MS6nuzvk~FuJvS1Gar&qK5Jm z&>9w z+@xC2{Fhl#&DpOWa(?OfD%}m8WQptCi3L=kmt|=JW7N=q!f!s%6d96RzE6%Cw)P9L z$k+xnK6IZep>%(zJ&s>fWI%42og5X<{~6tbR(VSd+El{nr1_AtTC(qSX2mc@;~H(e zN?$p~&(^=Mru^E*#JNXPR>Os8`fwLD*S5_UM*fD-nHt^T62(ix502*fqm77}hC`j| z@!QU3ZiJb=$|qrG$L6g4rqj(~qK>Yxvj*inJu+mda22Rw1XT!hy97Rr>!Ys}R>lUY z1P#);k8RfQ70{--kJ11wJxuKds#XpbbhD7}OY*vnpFD3oI|~D?2Xzurl?Ld?SvKez z9)z7$as9m&%OC?<=ybn#ie6aVICf+zjBG$xC@MNmUS_y=30c=e>Jv_QFz?;W7c6eO zK}((i+HsKWN7MUCJ#q@j*ZmYt=;m3z!fAf^ty$!llOZt~gdAMC^+W5)XR`7Yj`P`S z8D%RPcxzPEIPdZs)wBm3I%yjU^&(ZRJi=*w!oV9Cjj{^+y#~q9hDwpdsDUU|xLD$1 zR8OMjL#t9!`%=yDtMAcYbc}1*f}Oy9+TWRr^H0ITAZION=WIm3py@qo@libwOyO{F z%OhqiCjkvz&`IFUy}E<{``E|c4cx)Y#>vUX@@onvZd$XVTftx5pZm6pIBT7LdiVPL z)QJm|2o+(LIu?=S8yJnFV6=C_@t-F&iZ{XSt5s>@lTyhPCy7V$MGA(a>Y&Zh!-I>y z;(r2y3%D}wrdG~(+&JL?Pg;E2l`v0BK#vrxvx=a8D_l(#D%`c|jkTzZlr-YS7o)S~ zk{z1Ud9^O^bM>{5S(=Q1&oLGvB8gpM+oQG5UEXk7kSmea7hL1$N6FQv+V1b-cH*;M zC7Qpoi$Ief5TfPki|`tJzeyt@ZedC6=VdJ8GM;Fd2c8~f&l*xipTu5)0EK=%^iXWD zUMFoZ`9>AjIAv7{_q08zeN_!<*{A!tLgfl&n2LB5*oHVc8^u5!U1$(B&$Hjn!Sw^8 zTp;l6mhFJ#(D_Z6+b?MV<*>P7+zCoWU(!FWk58e3DRQpgnium!yM1qMc(Ovg7z$>I zUVg0Wf%t$@s(M&t?M;Qlws%6bQZ8Kew6H}f=p}s?wXJJ6$jWLd?RrFQ1eV2CUg7=| z2&|TtqOD{P3ZB-`*zUH}tOgTUjLHVbSaW<+TR68NUYs{j@8zkC6iktnodWr&$Am20 z**9TeO?7Z~>*+(g3Q`C5sPJ;Z*_M?`TtwE0S>{IY>k9HH`;xax4sq{glmx6Q#-;=t zC7?YPG=N@bH7CI#K;78HR1HdTeNc)I2N1(VvOfq+d);yYrJhi>8dwjH8>q-aREyox z**_urwg8MTJ8`}E?Z>7bNN^a)9SqPi`bQ3A6T?9N!E@P{-`P#RJf9`$+NcS(L$)D9 zv~#S`^EE%?4FcZ<)qm(_AlB7_lsnUpq428VP~oz$9iV!(T#B6R6v#MMaM9KE()J5* zfw6+5U` z4ow?JN0t)c5%tIL(LK!SRQO56r8DQvq3Q~5`PyIl(NguqJe+QB;4R#WcN$g!QSSHb z(y~&28}J~D$-n9}Z|~s{Fh9J(DQ5hS0wv%^h?q5uP9T)S0yhp`E|j!x<1f#9lRb1u zCYB#ui|rHtTC;=k4WOH(C`pNmZqR$T%6LP}_?hGlA-p}(6_Pr5TKLZ^JAgn*mRA>n zom@Nays`>Qtd09hMKVoG`Px6{PAC-x3K9rCI6=D-(=&Ei51T`hp^GFj`b-y=%?SGn zpl^Q=4UBjMQ_YVHfAs#nt-yo(iR(ngfZg(f-NG1Yb4IM0hT#pn)1+De5$<|ie z5~U)5o)QIQzKvg9s@IV{*UN`V1DeHL4R0L51IJ2@0PrTNjA!W3o@?9aq|F^bF1VSg z?g@Sq2j%jY?EPg^;M}_LXh9=SuGim=9Pycw3A}}X>qey1gRZ!^AO*O4k?X0E=w_C@ z=eDZMsXz@L1#kfDVr;Tz$HvDuuMpiCOvv|^P(Z(bF@XD-78e2q|9Ih%0%D6dZ4F^= z8e}H2gx}ZXMk?Z0+^3R__Jwxc{-yWg;VGS~r`u^R0RGpMde*5Cn~z*~50oa}MkvxV#v_o%E__{fx8kR4-jv?$amcjZZ6=5VxVEWhEaJZTo3WeX?}L)s zbT8Th_kcwBZ$_9g1FRo?`0s1>gSorV7Zkh)KYtD?b8ZWx9|nQvN7mdR_LXFTI3QUF z`MxU~Dc{Ydp%j)&iP~o4v;gW9Sq9;h6WcycIc~Fi)jt;k9=S9vA?U1k4)-_8j-ecI zx}+|(u;0g)U+b5mr&}FZA#WuR&J947;P%0A1pNj#F~<8NXz~w%+az9Q)QB}O9Zew1 z)jKKj``~`+d-TEfp_8?t6L>pD?=wlL89sV|NChY0{_eyW{v(|%`nI1@)kyYh$+c1! zlP`WjmXD~bnwau5_TOtxNBBPUd3v3>ETOb%)yz;otlfRxlHbHlUMim@L_b_kwolSk zp7!ic>NBYB=Jgpr%^Z<}#-Pgbz#n&*Auk9gMZ7|wJ)qCN3zW0<_>)!ZQuK55LkJGi zd5)yPW7`eiSeP28FDasds!eP*>P1c@9{_Tc$fwUb-U^xr0Xra1*o`d|9Ton&C9;q0 zHuo?+ucQH>a%0Nu-Hb>m^KrM`JOxresBeW$T{4h^0NF2>?@3z}?v5#VmM<^SZql-Mn0(*AZvjy&_eByCZw9`H;Ylv-TsEedKx)+dwn&LYk>?0zPEZY9aKR5BL<* zEgLBKFIHGnpBz4plpm@f*3v}I=;$J;Yrt&-;R6;-oT#LMikIX}l%snjv4|!SS;MWV zJ|)r^W=}khFdAFesRVX}gJXcd{{&eMnIXeJkATJt4xsl!o+#V{{69K2ruyvEUvSs6 zH%MM}Ut4aNGRAQj)XWC@}dud_8K4$7f; zdkajxwDQ8qGsjk)wtU1_j>-FKB+=b5Z9-I8DLC2PL1`ph67Wxxe18*58iSNe zkhRu|e}`}ULDdjubwM&epQ|~0Ds%D=f7yi|@5P4fo zKZYmD0JK`dlkhB;$0B-ZEHM{!U?MTUH)4nbEAb5-m9Q7GxM-NjST*Cr-Vn#u_f1RD z2aT@cSTHP*pW7h~enXl*CzUQ&COWc5xtEKdzSj^w#ef8-l;y4ely!^Y2{4$VX$~J( zwCn-1&sv)1!Z$+`kk4dBetx*I5ZN!o^MuDCuEzDZG$(6_+UOhNcx~mv#~b1G3K#h- z_WBO7savO9h|h_v5Os#a0hvOzjd(f0U@JRkJ3AZyhByv#V-8?WT%q!Uuw6x>Q>p%B z?bIy-MTP>iXtPXa8k=RkR1VmRMTrq}0|_Wr7y4_K_^yOsQef7ev&A?5b2^-_T@&`5 z3Spv31Ub~6^z=p^OWRhza0%(f?#c}fyqBA6NH?a+~8E$1swvg=0 zpb&#BBZisCzRbiJW1p;J82n!E(Y>F~_woDV-p761Gq2bCyw3Za=Xsv*dWYUBP*U^2a_$yG(o_*1^MfE2!;3P4nL0 zaszz$Rz?x*Cl@We#9%LphrR%IN?k5|%@Q@LRt?`R@vp3akVDJ!QRpK(_> z^3Ao`#xQ*yfjPyH9~+W}>5fz1n$4#H-d6I`U<9yv?12{SUoo$sejHMSDv58Rf? z10O(2qoEJnm!SPP6z5$)CB;l*J|BWaIb?j>w6<#nU;Xn>-K9gvX4aOAkDmFOO)`?FrM)TX);^;LMi^tN<2|-Q; zgl_?ZOHRu1J$CPrsJij%;Wn1IxYqtk>f!qVY-egxX^Y_Wf^#^@wQV22Jna5aQ_%b z7X0wYUFPF2QI@B?<&xlfpN@N}4pL*o?Y>ogJaRy|m7;<^IhDN~%3Zu4MNZag+%NT> z7k7W~ieoOXe@dAjZ=~lh=y|H*90s zK<^T=9v3ywPMw=@t9s!s6H$rH8N=r(=p+nOo)CVau~MLFKq!PcR>ir?Ojly_qSKB) zqZFHd(RpX0z0uL>t=MPN4R>0Ibu2($O(b~1UcA4Og5*!mr1=$LbEx=?XkO_G1l?T3 zdi)RYkl*QURq5_BGiuDTG9Z~*gJpAd9nQ5NMIg$DyOiU7lQjozTf*afQ4grXtcdPh z*B14g52n{MsQU)2oNQZILv0#56)PC_<>~Gvs+cUh5?es6aqERUI*YbUFlji0*+|pB z|IlAJeAfPyq{`~;x}y43cG8tB;>~ zp=hWha^gtjZhQOXOE=q!<&K5a;T06#Tl1y>R*t%S!d47#1Llz#Q%UTV5?M5suT&*-t)c)8>o?I+FS4p^(*H9pC5 zd45?&Z@TJXsD{{tf*&nP@0Nm9kEHYEkD)K0KE2*#o|AgOVAnfXCAMa!mexS(Zh~jc zbf2=d`AtveDOh${tL>>UL6c!82Md2uC@4uenEpKLy0$>{JAD7f4To%3*VAH;eoz-lJ_VJj(e_6fGS718EVZM|z6wH$2Y&*)AVjFgkth zOr0*PsFjI$(YKU_(I)4>59_zs>mU%|JuT!W!4gG3JKs->p|LlT8*9cPb|LQT56a`)mrlo7(*BX-0k% zJfeQxr|w=5^L}q4B)bu)ep6*xC{pM_0n$<3iC=1h_jkYP%QC(^@o9JeJULD~lZ3=H z?~cUYPy3VWRSN5JNQ%Z0sn{+gs5%Hy#@=Z+bs{%d9iAWU%fQvNv}`KWsQIj`p_<-0tqe!pZok%A`&-N2;Uo4Segiu* zqP-$g*`IW@w+0gIYwGc=%dSZeL{a{V;k?(ve|>}epQ_fkBD{=FqeH2;>?K7szpv?xo`=b=O~b&1$v zna~sQ7mpCuPtG>x?~2*`sfD7{OT=n#yFQ9r;d)l%JJd?Nc-rwyY{|^pcxej!O?v&> zxcP0{w1Cc1opg&D$yhdLht{f=_|MM*3_S#o_PZ$`C@6nZGA^5b*9~%8BO9#)USATm zRu6jX!-3{ad4gHPZPC}SptZy*8a#v!q(5(N{Ndt(Iwn_gdP1ZSd5j!uKfn{Aqwy5z z#ub@83RHK$q4m2!|C$o)cJsF%?++55kEeMh{@PMm^3v-?j^sAsC(B!d5= z)3Y?SvUtrfUN#+BB=RVsMfAwQnmDUe;-DK8n&w2+@ICyE!~!hG1#Ak?N>i%rH+t<)%s6{U>hG- zwo-LHJtD}@^(=fIVTym@vmpn154)2Co7yzF@im#R4yyX_>`mcmto@w$g+;6VHMd{& z56d~>N86h!!8@!D!sU;!a<{=7&q&(hXyzcOxC9Czvh75e&_v_29mj06V8Xa^~Wi`Lopn#3Y z(X|Zt_1gs+r?3C!Vjxx3n{4oluGj*KcAQTo|!b6 zXE)6Ust|u8-Y|5^y7IQ|34D*EpVG@~&-9zjCGITbZ9Wqr5G3tC$d~k6F1p1{S;>H% zKTYL~d`TPE&h8wOUBqN!yzJ`uYyy6bu_}bSnv9o}b$5nGYxtgsUoz|$3+De)ULztO zcj)&q;7%RNR&x`n_g?U7blPNtr%T-#*!%1*;Zini2Ee~>Q`?6_Vl|3sZbcU0HNHA` z6z*u-9PTVAVATf?_z`WQ)R)VP?KZTjnJha)UF4BpKWftpw=XZCBE;B6h!l+#Ej0r| zk*L!`fuqb!C3*;#M{R5OXqVD68MAG+X_slYj@cWyhKv z^K9)sh52~b{ngKPv(P%-qEOB{kN!?KW1y^Hq{f4S0_x z^h}1aZ3|YM+?h*n;lrE(*!xm`-K|{GVfj3uW&*M^YsumUD(_b(qq5}xQnnx4y_KYI zcOvFPJ+!oEAG<=)dvSy0ZGV3)RLHaU zU!z$YWuY#3g}^dp7dlruY-aP15j5m+dA^yHr={{NThxK(moYLU8skmHIGz@>l@h`F6bfy8@&=*uC4&(5q3 zZ&fPDj~@+&TQbR!3*{T{qEqKId5E z{s#ql-(A0tA3NB2WdDRM#H^K8JMD{o+KtEiJ@FZ#pt8B~`oqAH{qr1QczT_fSrQZF zcs%axXasGkEzwY2G3j=S@8O=DSGy2UTP6a_{C#jJ1W_r^Ptl6c4D%Xf2~pyn3u8f0`yD>#m;E z5>mHIA>j1uh4|~`rDtN#{no5MFEi0JmaBI>Eg^^>5pBhXaCxBO65F7Jojzim9(v1r zqt!<1p{@kMlNG`{8~4q?o5`c@;8G*vON(ua3qi37Uy*)z5h?K zX5i{ozdFlARAKX8D+ZNG+#tnC@3pviFHFn-t&)(&97gZFl-2y7=Q*N8NQ8Z=6;Y*s zDIbSDJ%Mj?jOJe?=4F33;#*2p>~ov^pc>ztEIMV|9v;^$5(H=wk_cnPzcHH@Z*>X6 zJaY+hvTYx@Y|oGIcv%rTt&VsHYfC(EsRD<6IDs#HUFM6EnRrEn!C!w`0ShzJN60oJ zQpX66M3u$1MCm7G%9-GQ2Lfq-S4wlTjT+*XkD%`3ZG<8)$J2*?q2{5IE=RFG6AfP< zdO?Q*D&{#B9VNzJ*LE#BX3~E8&Sa%jyeJc&@me@PqAEkp?&3;v)uNo_QM=a0ME7!9 zqd{_rp8HQLwvBmk^&lqp*Ti1;o)|zBcYZ~HUDdIrbo)EWoTG&&@I-Wso3$$oy_v^6 zRaCX&Uovzpk}=+~hOys>Fu_rdkdk(L#m)JAn$Lu56#Z+_nRH~(gwXGv%%;*gvJF4t zgoMj$pI}RWnZabZqFX>DaurX`* zclQ1mdS891fpb{bakUIO(mQ6R#L@kn-BhLs~pV-GH#V zu}e5I@KIbdikQf7ee3F^{~=l3z;5i9@_O*jjkP0zNnexHmo^VBd;HepJt5*5zWcg^ zlF*L>GLh=S1cIXu9jJWweT>30OVhnN8b7peiu}b7%wS(GGl3wYto7f6(;#B__r2W{ z-wYE7ZgV6)OKt$q>ZM&h?=_dG`^@VoA{v;cf3iKe(|9L*_8|OFvF5VpGoRB6>7DrA zrV*Q?2q&|4jAb+IbFxF-)emXgGA?cB_So)gxP^}&yvMd^A3D80qi=57?xfwF$X417ZjRA7HxZi^v3^_@5R6l#J8sXbo2lCHP3 zo4E%VL7;GY4Q4|xdS^U!c_>vQ*H%*JAt_R>FNeDBNl@nW@1Ui>5xbGDGQQ@;MyT(p z0=F_oYU?wiXDVb#mZE6~W{2baa#`I&!hLS6M?v;V)pG{`4U)gvvrtt}ymc?3E4MTPhm(P|_Fi*w7rpa^EIPskmaHT{w2e-_&yOsT4!>We404hzE-a- zA0ZYLv*UC0U7G$`w;(#}>gSS*5CQ}nB2uLew5t{Dt-we~N3W3NBT3L^M0Jd_s4F$# zf3#P0R0M>Lqdn{+ZvP^gbhtg71@w#PZ(0(4rM8s(D$_Xx2TtuFED!N->!$Y;;M9n6 zk7Csw>b&_edxtAJLTb?6IK-<`?#;-GNTC*8%SpN}gmPw%M?>&{u89nAG2qoeN2r%e z`tP|q$96Mo-To6O0GPHz`63nZD5bhfu9zA=Wc=uNKANS?YA^NWLU0f!7PoRNcfEEK zjkh!z_EPF^Ox9UG9=~4VsBuTj5a_CsmbVbbE3#kuY z^i*C6T?7d*m;7V-sg}gcgzyj16B>OQ0F;98{{CHD?t-H_!o9SC;`oJi$$QigN_^&8}EQ^Ro&fw$Qw2PRh0 z|Ec)eG@^@hm5|ngp^2ng{9^65RiAnFdrHf_Q0S*FOdnjkTF$POzkT==R0v_7k&#YV zuoyJLIX6>}D^2)fx0*Rf<_bk-(AdF- zP^eVwTtuuwxOHF0wlta-lvEcrgnfrclSW%WK_LJ=iSu7leudMOr5c(V@G?&R!MbX# zS{^M52l5@DHcJsraVxg~dRV);pb2OWI&;o!ZSHE2O(v_EE5`7%lTDFfia|5VLdY3T z!O{bN>I)huokWiJcU%T9opXU846X@)+Y=>I?V@O?m&!ykl5=d^mH|ck-i0bLzGm1? zISCz_Q%ru0=U|8CBSl6vRA&MK00+^@ovQ@^DhdEpAXG&+qov|;EC1R84KsV)1xX;K zoJA8l$vc*C)DWIYp{i1A75RN($AAn3EWdBE4XE~FiBO$A|2MHaTwH`(muSOWAS_0zoSy7S!~ zkVyUJzpK!819rs^iFhRaYsXi}ojFJeTrh_k4Kh$=sXC{;%v86K!gDKL z1W6o;9&Sy}<^2|#!T3AVdFM5s)h)V9WD2r$6X@IE=g7B6+e~WR*7`=sCS`kzS*N{O zOeMfWw%};m;`Xe`u*gol2* zuSRkEe~G!p^(H}f8r*AA@Mp!*&&&^@-)8bA0hrk7UH3}=$qTsvdM1O0ZWFwvp8m6| z4gu4Zfy-XnxktIIWr7q)-ECYL&=Hbw%snzxfxt-clg{oRYx1AL#JP*CHfb_NI((sS zydx<9@T4(YJ@w=S?LM_=t0MT1?;s?0dP##72$CV|O~Noj0j$SIxW*+ps@3&QEs!!? zQQf)q`YF$EIg)bg@gIsf|3rM4e}5GC*z$J{ZPKP<>C0<{PFJqYs`K^R-~lsYzd!u1 zJY1XVBnsGxS@vY1e93}sR(*s9+G4M(fz*6Br_Y6}6AUtmp$KVUd_nh}({Zmm^B6cB zAyQXAMj>9KHL@j@*MPw273jBVIRNNOKQCjldvQ#4!bc9m&K6hx=y(d)9J+Y3ZRyPH z>dd7zdqqu!nhd5!YfD9gcmnhWCQw*Qf2fI2s+(&O-!2$Ea1)&jUUu*!47vs)1rYRD zpxOB44lHFYtA4T8qWTJo^e9snOTTd&x+o}(Hf1dg2@VdtHkH*Sc9vFVz3%z z?F$=C!mN*9@A$C?@2JBC^2z@+f=X36-Y219A+?et)0nbIecu`HtfhInB!?j-0;759*OgBqW zYhX(dM7jpsgE0r}GAg$8WoqplK$A)PCMT;S)XJhOR`Fg!vOzPTMWm+rb?2fpS=|4S z>vZ>^aNW*s5V)X;5TuVCT=RQxhNi?wH!Z%=`DRn(57J&R9|jmXgl*_lup^ z2BNOsF3Y{TTko*Z20H$a03lc3iDh*V%R%_eXhn5J%>4FcY>NOk>4V{TUNRjB8$%Ia_Y8eHP*s6B{z|>y=rh1CKo$CJ!Z^OYob|IRVq@^Y-@*QaB*ZVfkUWJ(5 zvk-kRocwyMZ?ZNOywXFiPB=t8s4Sqis-D+o2h?fX$z?y!2v5m)E&4czk^$cWt;DdUO()^)PZe7eBE->( znxp*>vupN8l93l1JC;wKM$T~Y;Z{^>UVh7?&-|w^$*kNV1*|=6_Hpsr1Rcep%rUz? zd#rlB)}S7AKLiL|fS6HY>k^@$Td@<6Wm*ug5$2s z(@vXJ-SCACBw;p)>2G$r*69_g;H^M38%p%RGJwuQi5^%6bSh=3*6%3~ezsKq4_Mvx z!s%b)l=D!pDP-nZ=%9njLlf8v9e@^rD(UMnn!jicz zd1+&30Y&>KM1Jf!)E~vV%So7P&~1T#?>}bwALwB%%ocJO96y@Fw|-()CE#1y)X|p2 zWZ?Qgjrl*Tpoj#3wNsFBYVhG-lWfzF=;YSKpH1@r;YDg3UUbq0eX0GQCc760afzc> z!Pz)#?m-;8fLc07Q>P2wR3A-4Zk~;vXmG-6OAV~LgFF4v16ntUQqfk#Y=Enr>>#3n^#?TH$85PDDny`5eqs#d7B9ua zOzP!cQ2f5>bu!##7@GFwHH;sJT(fmLW3o*e-tuDmjF{!BpdRQ58CT*kOf^44$bQdV4@Ay6h(4)`z2Hhjlo3Ehb?`&tm5Do(n z?j<5*oZ{12%6$m}=*bofsXJc{H>gtwUMD9~)Rg#Z>uqQUVgU+=qqTg&MR2*UnEHh3 zDOVkOa7(AR4wp3P31ql`rM1sUcfBWsKyoEYfw=%v1RA(YF0VF&p~!ZC-ao5Q*$LcV zG$UOLV2lYUM{!)ndqN{>m8vg8dIDM#udw&Grw$gfx0X`=74ws1@s8V|46OiVs2$KK z7xX}gSFUzTJ+KTD_lLQX{lR3ArXwv_6%-1MiBMURlB~{lZVArr^iCrJHXu~EoXDWS zU-w(9Zx4VB*5s{oq`C?8Z+bOBR0-zyYSJF6%xmuRz@tv=O}RUSNF#z|OA(CRAlmp+ z&V&Jc#rRF1^qAEO#+~O`Ql|rU$GR*7x_90>xauxOv48uhNF939TLN00mKhxc3=q?K zNHBWsYhCp0*ARAKRrLIp>%veQYkA&Cic_MUJg9Nx!1lZUbj*ZFVZME+9f^7xqF}|6 zqQU*M7HxppC`PnrD+`@0OSH8*96Uc=@tzWq^B!AG@*T;PQEs60+pGu!=IekhCKqe zRjC3RTtlVN2R6P2u7k!Kv^FD}64%P|jb>5PFlZF}&=Tln#4$hA>pNV(O+}q8f$Q+u zoKKr?8=sv#x$k!Uil*Fk0orz-!OrRE?4^*_ zzLFF?#n(TH`KRQ_m0GYw(OO8L7^kY7@i=py3b401q)sGWt8xPc2$eU zVAi*8#&+BV36Q?^y@_8z3O*^bj$*hza2xi@tdl9}bl|rcm1nr#oM_rSML!5B)Q~}9 zF4$elhD2oVPi{T*Al+{YQa&#wcP`CW-HJol-6Vy%9P+W5_-4Bsw$*@=gWP*N{Rp=E zG}d?4P<#4i&S*B`DZf&6+rJ$9FLs>QtP zYoLMtk_J1z(V7QL5b1?P7(_B0`E1sW?8_J9+P;HOeda!a0)5(Fhn(!@P0kLh<{l2e zk=t24x4D`+obvgNlK}ewmW~~(L6$?kn>81Q^EV6NTf7ne1V$T$jpU{+knqle8lQuV zvzvNh)Wffke)F!{bo{x^hSRk0CBMIiG(qnN0RgAku>AdHrPR{ZO zpKc?gwtmnmLjWSiyQh?JJGcu^eCyU(OG$t8m20n^2A3Uh#h=~^s+PGY6uu`c5!<3Y zDmTcDnxA=eTbSTaqO9(NF!fgX^b8Jg9ysMpCDf5iIo2r{jEkXY2z{KKku7;`TI;5q z1{CPz((D5Vn2zmV`en0HLK@+5C_qB#Y9$z{HmxA}8YU)*2H!1OLR%P3EWKQJQvx%k zW(fhE?nDWI+L^iN*y>%<$}x9K(qEOVnWV`JF<3`!){M8f#7`iev6OmZysd9%`Mm6V zYSMuJMx{pc@>8ZZq*imi=z+8G8uJ>_R@!|jzs6CR32h%@O%^|W<+7=D@bA-G+WfQ& z%&kOPk)&P!q=lMz6LUZy>PUY4-I@OS+F#Ey5ZzvXJ~7jE;dx6@39h7+>?7w=l!_b6 z>It_3|>GiqfR}DHo>dv=VRRLK{2i#6WY9??f=wGr)5KX4}a~; zOiKoHIPSwhqNz_ir}nj}p)9QxJ}E{;GlTZaZ2lsDll7~!r^@PQz8fs9+80aSs=ysD zQGUq{FgninitEOR>f7WUM*@*{S!Q)_Y!r(t7W=jh)YR-dvNiKdYqj~=w3gL6>ibvKWb>S+kCQLH z-L@TGP!+6x)E$=aWgQj4lQM4PN*i723lVRE=d9|x%gq1y%I(G96uqsBxbWDP27rjrHxUHFe(MU*!z{MfBoo8 zvfL*Z|5sQWdQ{wuh)jT!wTU6f0lh*RzuKjFr%1%lh+rRnU+3-Rrl5~ad>ejH`4S8} z98~k!^-+hWAth6tv^>EHoHU*~$$cp0ufl?xu(={( zJ+N~wy-|7a&B!&pqkJ=GTIIv+gEz(lHPRV88b=7MlO7%Or<@jQeom8+c8;5Z)PZFd zQU@lv?R`W^e^a1gANiZw#qIx!MKTMW{OgbNuD7&I{B=pvY{7*)ce*3BDzu||>`ay! zDH41=7BsH=*EUlxNy2i>S!oMd31Fe(lbVyOxjLGE0$OVPj{mx6+8KSonnCwEd)_`MWfKChA! zb_h|`;^@J5*fw7AgD)M}%iMwXpvLOrgE zHv#;Ii(q2!d`JKHplabr#obPpzgw5OxazddjMYlSYe+s5iay!zo|6d zQM}n^rN&$TI(mEf&(^pu!@a^9Mgt;=qs0cXi=vPA<)U6Q#O!?d{!g^C={K~xtx-e){w1CFFAuZC3 zj~NP6Z_^9dXPzk{_l>`v`9)~*tc1S&8sFd~6v?_<@aCt$NGj1|@}1|BmP4oB!fGW} z&EdFJDsZa%WIn?)DR)cLUw!OYLg@(v+cyXtgIHi7WmLA~8R^DJ+Na;$8H5p=wX1+R z9wG3y;N4;ws8nulgZoR(F-+O0ok*HO+Y=a zpDcT0%&4e4*npG-m>X4;-`*#t_JGsW0iRB8+#&GAA>was3`XafDswQC+C zl67_9YoF#2pBH?X=pe1YKa+yBVF0um0hbvk!Ico`aKR>w{XmH$NZ2@3=Xr)wW|8N@ zxek`J=4`FAPjR1O+7k>7HKs>kDS=_9hu~s%i5f+SQW~npE}K?PD!5z~T?x0TB6qCh zod$;D%!-}pST&I$*+pfAG*{Gr$q}62dizH#(LR@s2n}{uxnhmuspa zpa-V=E4v|E;GOj$^Q}qkR3z1kcHYoEl(l!(1h0NIkfo@?m zfWs1FXV&&ZE~(_oLoi)DOxP{pg#9jjZfQpL*ESGi8qjQ{cUp6VDU?{&CT8R<>h-hL(?Cj92rq4i?z&TUj6>d%BJ%?a+XtVoy`{a7?g}~gi4+>`atYcSq8yEz7 zp(D>ewta*PEt@gqys`ZV-|zj}j44S8Ioy{E@^JWxrI~##HDWQn z(hmxj_^gkv?+#%WSuitE)ypUL;p%Cv?Zx6+lW_)$d||BSncgLLB2K){K$zAQDYCpP zK}xB1p2t9mFAP~cW5rEs0pqcZkr-Kl?U`Nh?LXx`y;}@1Ep}r$@5kOI6xoUPiZl`f zSq|GJWjY^+Yk;8X{aA_4{Ut4)Q+W&1D{x|$c;CIi^@v7x*L(lu;eZ-Roxg41uN{Ux z>r478d`LJ$A0HJW;H8&6*mwWIT{kxSnN094@NTN+hr(AB4XW ziK%GHSL92W$t<=jigA5Ii%PqG@YKrv^&m`wlt$R0!Q7aZ*$Crp+Jez`mKKT329lGm z_EuWl;e=Nym-fN@!}(hxgvBeQi%?{%kFKW0@9V5XPpz1TT}}QW5+YuO5>p7+$NO&JwYoCVCA7BrWc?0j2&C?;2uE<(Z zSF7~| z&^B{CzNXqQ&#BiPo(f#EoNV4=Ej*lD+xS9bD@|qwgT|RD(~RCV)t51Pv470?nn-+Yk4IZZ#x$)J6O+ADt0u%AmvTKa~1=KU^-q& z(rFcm*9W`urx$ zaI$T4qcr4kU{)ckXSmMb+-YWA6Ljug19t7q8m-zN_oZisI=iLKbCFwgk<}@}7C?O@ zhAEMi?SI$s`5sUSoR~@V2#GGe*mu5azCT7qby&9r9A-gw4`Rq-wfKIGCwmudgZ;RU zqH`G^y#AU*Grae{5dDi@q>(&it+_MI%nsVRn_Qm(g0`M>;~Q`*CY4zpy?xmG>w)2C zn_QTRbn$wa4)=?Erc~^M!EZl(_PfgR?$g%3)pv2K38YICZOGzsXzd*2al0y-lis$V zBq2d5IZ1j3XKosV?4*F;0(<(kB8yA9<{Axb#LXJRiiEt_i&JL6=}4E1bmyk@LbxI9 zdpPtMX?kcSRb*Pb>Jyo?Np@?8~oQ1%4=2h&`V~K1XqIz7RdItD^0rK(bvg29Vz(bKiE{R(q#CciUmlCSGCavzm{+e*X z8RPFME_~n?RIXb;+~U?X&zIP9*E&o*=kppfvS3yJ53Rqx_$)M6D_Q77b-Y-3*w<89 z;DGO0abKCop>FgffuE-{zNu9kuex?ZjuefjZMng!bj4OPr3WKxv+|hNJV^nSNmRNE zgP_(Ov{n0wTzo%B=v9RL>ii3buKobkYb4z0h!V9#j5UnZo_=6rP~7$Q21@w@ZfxXX zUxHe@80HdslsS^eeJI+yB#$v_sexn$_Np9WNv4Q8h_cyFTsNQke_I|N`W^Y0RJhWV zSDRgtyLNv%sJXg>(oSX?Of9gSzEYRnM3zIxa5!m&6meSZU>C2F{2m9qGn&i4ntscH z>K&pa$26d}ZJNmyXxF}3Pj$)u>d-JUpIaA2SjvRkGBDCJo1=!Gyj5?yysy}ZWjMv_ z4-bv3W(sH!FDV%WyLiPdoHJIGo58`eQva5ApP3gxT~l4mvaep_IaH>k!;~P!;GJ=* zMFmW6x48w$ltMO-35qMs_6^%w8Cs_eUy+&nA${v+%yeL+{Ag3c!`E4@w=K(*sMi^+ zVPG|K#|!zheVNN;I~xl4OGRD6(GfGqIwaG6D`(tz-4@zUC@s?V4Lpa5oKM1hFQ~I( zOnhmKLmBFVJG_ev}WjG3stYP1jCS|t>8dwljx$t zO|xe?W07h<_9VO93#G|mN|LjVSP{F%rw6G4-6RD}|PGT}6GfXzEOnzh9c;Yl3ojF`*4C}1&ol`4-l zsq0XFw`A?RaLc+kgQ=;70bWCD-SQm=#c~{)fOA?75!~Ze@^j||frivlYd4WqgUwoZ zoNm$mpunP+#qU36he^BKYZ}$|2L=xG&naT&58Cq=j{mcyL~LdF$LyevNHHwNJIr$~ zM!}lTq3J@%5ny6Cuv7xe8J6ha9X_|v)6Ge;#?;&Kn4m3mHYB@}W2JCB&+_q7TB zVBk}$z3UjHg}LcrNNq+ppZ4)@mPIY^YyE4I!A={Q@G4y)>-iY(m^pA(3Slvh)f}L1 z>{Juf8$>k^5wz~xxMd|z69`%aF=+dy{ifHFe=J@GQ(OKz>pUJ~a`#h^3snZ#E~uTLpkk zfN9=vB4q^!a}7cnQZmu4!Nfk%g^4;I7_o1@5H? zS@DinH$uK&I6R+;?;+!A{wuh~EMVR*rrVdO?uTBWYhTv7UPm;N(!E;#x*0hCEbUm> zdKPn+nB}IBn2kFwxlf$PuzqJH`_PPmA=rW+kFdY}b# z!u$dqdJP?uy98Eh>n&H%D1vWXaq7nq?YE5yV>FqLg+*NXE`b?rea{R$q5Hs!J4)sN zBgtKRwH!wU;>zSKKDF@#v;)h2a82&>SqJUlZRDR)bw}l0??optviK^$^6n|>;%(`4 zm90bKHu`pJpw8G6yF`F|kKA%7oF?O0Q(X4O0Y~1P`Bk(wpij!>UbKJ9)|Y^OabSlQ zyJu<4$Ffm|gop(oM7L4MO&+kS&gJrLVk3 z2_~S9B$O%XszSQW0BLQ)$Ih~k%>pah|Fd{Wx^BVddnuVvw)!z{B{lVfY;6t$c+B@m zN>fxdZ<3a~m%6d^LtBPuaW`|hz;h=ab~~_poom8sS|j->0Wut^mabTQp)~z?AdW2d zJ(B**4@nrYOGQVO@^f_&GtwWS5{P>#pSl}(l)CW}0>L?zx@yk6iAR{_tT~7YiMr>z z9l{%B=2n90u-{S>vbF|dcNDbfd<4+=(zLH*8RdD&w0UmRu?g} zo8yANaEyW>bpS7EB!8iUfY1Aw;3dPle;?fW+YbJC=^jkQ*5C2ETjT8oTglh1<>jTk zZz7+j^bbiaMFIz4Rk7@EJ^~m^l4as8>jtms6t~G!>l4a@iCyerlzd@5jr@gTP3-#E zSmc{UCeY)czAA`o7}=40@28`M09xl?J@i#^?|tC)_m z!*G_pPzYruafQ4vjjYR?qb(WL0{Dee-=P^ZQU|k3r6s?QdY@sBF8OCSPQbCUC{XCw z^<{yuVJ>2_Qm_95i*KdYhHsh{Ob4+(E7XC^%gLkj6CU^r;QI(YW#y1=oZT3L@^uT7 zbjSD!;GHWQ^R%tXY3u4%x+QQOWSm-iR}=wQc3Pg=hOFZVR#YfGLI8N*hfrQ;4fLt3 z{D*oc-USA1Y@`kE|4`H&#Hx8IKOOW#5@0t<4nV+8hR#QSNJ81SLXJ14dOmw)>D!k} zW2I!_gq74vWc)|Y-f^h^1w<(C?;zz9Nr!IccjHQwyeAd$6DkX5HuGu|NYbo~+IcAyHj)64g#7N(UWw5-i%><+khe`;5 z6J2Kv)PWcdyEXGN_3Z-#^pSnFJlVEFv(C!K5sKn@&7R8f2##^=(?RA0 zc?Pqb=ef|lp^|8~{5WOv(X)?IP%2)OxeJ@e;NyZMaQE#{W@S&H9O)_pawJeViL)~G z>7?b*SmYZ~;6d8jPT+J8&Km2+pn4EX0H%I!44fWviBv3P_R?;PiSv~ zjJarBR}2&>{%FCNTH0S5MOgVaWs?T+amdGLfF;2H&?R4)&;r;r*UywaX+1QSpUarq zCtbUS=|IV2I4;Vei!XK-0e4qj;AAs74hvAQe6mhp_pog&t`B3m4%2`l%E;OPE)-36n~B2DpG+Vm6` zuO8&Tbz|;rq}o@>VZ=>sCxw#&gG0PMsSDTV!t?XByMrU;BK*GUiA?f5P>C6yI&r8u zRqbfd_j#`;lqt#1#&5n43RK$ft0sOX>yBlf+9Ri{F&c11{`rFD-Vf1X%Z@b~xRdjC zs0&)J9vesuRu`m1d39Ygi_H&`{}2=w;FC;pANs2D|ILqHdc*8H-4_JlUb`oCjd1XR1%)D+6@^^SPRXk1 zK}qiZ>PhpOz|>FQ^kDHwYH7Eybv!b#`{U%xn*toQCKkS%2*7QpF$8nd;UTpLXIDyd zJUgGxYY1dM%rLIBi$|)rkty$=gvjaR3FeFd=iG!#o{>fG^AdiQ5y%`HG4D|%%NpaL z9rBGgGx8FOrOWccFI+R?^HM7-2EL~aWYLL?55HS70(^4~Dr)0yU9*(ev~@`s8!6jp z5AZ4;*fbQNrg!sNC#>sP$}_E9tid0yBx_sZ;HOuR^Rp^7t_csl9;6_04a#;Fzp?>~ zJH)S({q@JpdqVKR!A+^UrKR7R!2=v_tStIC`zc$3fh)0eXa~9ZBO3O$)3j?tt#Y=X zBIL&YIQhKsgWA}+78N=03~(Ifo#QO!^8@^B12^PpXvMiz3+Sdugh{>bDsM=_qosK z+~+=@`<~}<^ZQ4ZFwDy}(;w2GE@Wvoog9H#5jh1uh5H~TR{yz=s)oU#{sQ&!1iQ3< zTSS)@uhgH47*Sk^`29Gx{Lg`3)+nR3)c|p{4ua?#dx7g(la)z>$Ejbp0;SOn)XMS9 zOx$1jO3|RPMF)g<7&EO7u+eCJ?wd`~EA>z3=WItMiRxp-CZO7)N~i zxP{T}oe1doHEiFNbN#EYsSV#0^EIxNn}PnaG{4;IA1o-^e2|WR&pJ`Wpc2mCISbpH7usx&&F3CTV-Qo$|F@z z_YVp9bphW8F|j+&iuXL(BFUKh*_a~B*bP6|af;-klN;$Pk0x35W^%OQm>tB&cPfoP ze0n0#`v!UDPaz8@N8AcMg!J*p-7u9$_6iGEdRdpK|N8%KI}FziK3{{J!@Uwo9t5E!IoR zAuEH?Im@e7wp#jhu`GX`->=gIM=!!$??u)UG0!8pF_-f{+iv$N0#B$G)oSYb65<{oI-L}QN3few`KB7SN63y zI({V+<~A!eUoq^|PQo{t}piunI)(sg$W+t3VZ4!h+P^^FPM+ zBl0@&*ilPtjv8o z`t6c?9KwE+v7BVV^9#r3lhrtrAdy=C#w!GV+oOjGgm=o6pRXRHicUdKmT7!x`>uDW zI0bQj6p8hjh==~@Gdt%Laas3ku&upWVMU45@&JI?&ladz$(6zrCvnOYQafxywkRr3 zjsseQfCvtljZC$J<(H~VIh@@oYb7ak7&ebZ*#PJ#!b-yHMf*yHJQHkJ@tv#o!wM>t z7?a)*&A>=F)Z@Of;TOOh#B>(BnT9JLS1mgBG7lnpa^*rrPP@8^;g|XfWQuLwDoMjM z)%!4vOC>Ci9_0E;5av_=G00xkGa;ICJl5^J#nxk&Q;*(ps=7x$vSs%82`ip@bcGZa zU|q#E$v1I^9G+Lg5&fGFt-~wbW&E`<)Hf9%FvWIawcQ5gcjb+V6WE_3aJI0yHs4t( zu_R^6vy2icqd~KTn@(X8W_kDr0yz3U600&LD5K<#=`;_(N~=g20%=%Bd5n}qpfJl< zj^k*R96|%*G8rEo_3J1`*hEBbY`e9F>Rr`9=O>iK`~QKB$AGc7erhwVOm`I%&DS?8 z#Sx}LVS$%xG*cG40b<@LI7PzSJU}p}x-c}yoT=cfK2a$wpVidM8P~h$?ksn7^vLvE zvttr?-TH-U-4)f<P2y!C!h*3i#;95P3;R^~-YIHk$wsXHOm`MZ0V+kygg~gcG1Hidqm2$Xs6Iq6ZQ*6!3@Fm*< z8y%g+6I9PJs1BHqAlwOc8>ysYyA*6wDoEvl=OtKh2Tkw=ySfT3T zF=G+$`@7%Tq%PBnj)nAI=iyAT^{c(&YCov>=E9Y7On4+ahA+Q8pNW}aFl2J$A(i+@ zl5!;Yi79l@0UntST9wm11<%eOM-_u#ciMXv;2 zt^_qi)i9?pahP*z?OUd{>=WmrMbG03!gHGT0^kBR$^lWU+)syLA^n-H^S7sSdZLGO zGlN-?ft&IHSy2F4X>OwnQYsj9Ip6Zv7ALHye$xy1_fS>~0PrYF=3__=sOy*pc!S#qKOk zRb|SjdyO=iC`!l!6i`%frT99CY*=D_nR}a6=~A(_I8ukD3#@Fx zFnrd`lXR!!CejTE7HJFQSE|v^DCWGkT(~?Chiae>mgbDx=4n+VK~q=$Gke8ETa@1{ z=*omojOs_fFo?(N9}rTeT+1!VzXw(TenE=TT$&|vzT=CbVO{+)(kFpM!#+`FlBe^i zm;L6?8|d4)04+06LoLvy9n)(au<&0Zqn@w2F5XY5x{EA~(#}AD9-F3KHj{YFo3Pil zMF=TfUt9iM8hIqLa}{t5BM-3O=H)HNE&@j};jRJ#AI_<SpT~UF<&i$(Atyfk0CGD}XI*QmeCwM1rrc6;ifwb=Jm1pSPqUe-tmua4 z{{_Pl6Jr3UyxgE*m;VZW&Mm2Oxw>L|JFv75#4Js~GoJ-sTg!ua82l=~;k2*ruX`>O zre`pm!_NgqLfd>mkd$L^RaJ#jXoj>;EL@P{F!o8{>iQZI`>A#QP2F>L5u=qU(+|9E z-DVAEio(GbQa)yph~SL{dza@NwBu|=vk$jb5uRvuEHo%9EP#XvYK+M(fn$?%$^n*5GA2a0@biuSDyc#-T= z^lkZUw;%hM{^x&pl2r$0p#5{zA-dp6HgjSwGlQ98CnXGk6R+xHUHbzOZkI2C509>> zY7JTPk{f+*!N=(!6kb_V;sra2%V?kK%CZ0BG-^J=Y-@7I=aTUiSkR&7r=d3&C*&So zx3w|LDJ}~9{f5xpXY_MTomWTiC#g8fwW9bAzX3Z}fgmLeH^+`NnwGphhlS#KxT0;F zG;9VH3$teWqo?ZMdxkKF!HS=?zN*Tl8Wk36#gAhZnb1lp(e*`a6Gxdx3FT{Qg!YHbK6OOQq7FE(zO)>i=VA@@5;e#bKSC}&}$FWdWMWV^%q~j$9{n4<9Bk~ zSVlzQiu*_g32^^Usgu2}KsibxY)OOBFU-@MipN`RT`b)*`v%_kQ2c(eY&1#idO8Nk?6wk}~p?<#`iMfgJwI3E{2o|o2@B`?&v9{tslT)N(C!yd2X%=i@CEI3#p4GccL&cvy zv!I*QGSiShn7`K*c}QA{@1}ad^1`bW&+}e=z=96nxCq`?njJkhol5UwadODrHTYa} z{|Aj@MJl$R56oRUc%F}Ctxe{d4fLi8^00!X+V|Z3PD@-%Mr`Ydunwa!QLsGl?s`1BHg^vf$`5Y;SXHy{!UWnR5xzez|vH}}af z#5McX(a;cQnS5@}nfm!PB1agQP_2NwrE()|9LL6{4~?ZFpLOhfdAyI^So+#<>O))P zU2@vos6WEYr0Qmrq|mZJ+K7~^n~0Pv)$ga2OFti4ZE81SbdcrvazXhY`)Y0{1Kj{S zw#ygh)JhKiDgH3?wI+{-MGOFqw^E@c$6U%%2IsN&40jie_Fc9-GMvkuj|p~c+qrYM zf5D1ZQR@2n*~A_&0_$yC(@Q6h*}KR{VLySD@p#t+F!1j zO7h=t{g#Q(9eCIp!E%1siCv~Rq7d~gsAK1I(LZc3$PX*G3cb7s(fE7^sCSdLfEItT z)?I`#o3TAL(>gmkHwS#&7@(=WcE_|IT32j*+?a+(H0nko!LnWmS7?`-aMj??Y0Kt3 zP)~fn$e~x51RYLzNX28)cJ5RfQ}Iy>!|Uj#o@wcnmhN?f0EV}VLuZi1!u&|8J%CLws zy>$j_~6Ikex-`_GL$*`Kk7@9JNAW;FC-ke;`NY{0n`NC@H#g(lo1Y*0##alDSO z$`5S_h+7MM#JSZwE#J`X#hMeU>`xSI=y6!-oR;_P#D9;lt6R+in)!Y^FLH)CdGm&k zazVcGCVdz|{9RyGyKbS5c*0X25a7j_(50AT&v-*-DkTmlK7D6JP)<7;>Uj)0RjHTd zkK1vG1TXFAGySBEd}vYygzc)p5}g3+(*)>u3gq!4_2_6bgivurx$$YC@JL!BW{+TY zPxZ7AKar0!l0CHy4-WS~1h{Bdqh7fFxWIpybzE!gG^D@N`a>mjRu*2Ot%%w?EhTs< z*!D$eVX?Xx1gu6Kmb)~gz6)cnJ1+_sDmg;uPX%KiZ`42c%&_Yr8<|m!mLtN-PFb}; zRT;tg-1(jO#u^ng5=8T4n8>#$!L~!Og?&eZv32U5c?B#3MvF2E!a72IQ1tV}dp19_ zTuHlU_z6#s8B2c#a>CkJq|Q{QFKKsdW}3k@v8wt2X=CWe5v4A)-@ z-$K15q=-Nc3|&aeB*y{oqx>lX+Q39ZLA7SC3O(T~Gu?^MI9Y_Lz(aIwQhCwJTWWve(0#sz8pk$y<>EMZCCoET89yJ9=>; z$Pcupw_p1|6?thZ%udDhvHxwCD)6}!(}vpq0-r;jkSxC-W}ghvwila^yw zdaW2rx$oR|G)ObU(?S3r6ilVtpyOVYV8Hy-c#j{ z8X+LT7v}(-TiWN5c52X30Uof}gawTyR5=|jb)0J^g(UR#1TKwpVmZKh@Qqtlv1G}E zGXIaab7zCvB+#GHGx~G08*^mZ=E-3_^Cnww0TX)&Phhrp&keBh65o4Ejy&oNO@TL5 zJ~FF}q9|p!*)E!2vQX;<&FYJCmCu-;gL;y{p@1%UlLnyA>>+OgVU;=E9`0|g}4u@3FeLmHheH;o3HR}ta|5CmaO94Rma~%3} z9DHoG#L+%6mp)$L<|iIZ+M+L7-K~g68?B{tD1H?m-X7V;{2#Jd8t;FS=x{MpOt<1$ zWr`tno?PyCWwKn`B|yf~ zpDxA408Kkvn1*KCn3li%{i))eTP6-nB6jkP=WVK`fzQPeaa+7wZel7IcVGJyze&YLqgVyvnB zt8mw*WVKhWppF16i`SP;af$iQzcpzACeFd>eDjTP1K#BC`uzZ z_wZ-XEh6YI;S28 zzw*TzB~tV6N0|m0(${&=3yCwwlUJrIU)y}L0>(`FQDoj*$fQ>QLZjxuif$EW03hXzDfDQQD5DxCI*azRP*|X>VG)wbO-~zn) zziKJo$E5~ndb63_4dPR?=vuu24yDL0-?s+^Sid)7)I1?>rAya|H6C_vXp(c8TVZ!t zz#!E&LX*3i)O}XSSxfQuj$v@Wq6qjzJe;W;9DwsS4y+2GT20OeW}bxW_35h$wMVU( z*%_@w=xBdux8;-UyMf@P29knJXTuel@c706WXkPV6WCJingYP4^-EAymAO|DkH>B5 z8?3nR3-O7$?B2V`Z6e*&7{FLnvGvy95v%kyl#l>(2CQXuarMg6YJP~zkIxLxwW3#O zBSyOR#*o|1>s|i?7utBW|7L1D9Pj@ZNd5#Mm$f8IAfPMpXj0+94MTefQf+oWbBHEj zT3(?8om0?}3a*@cv`y=BJ~7Z}O}z4-JK7#-CKZdh{Z1j=hftLr00ub}t52MLY7AyV zBbVkux!sMpLO6P6WvkM~-sCw)MHJ<>9(WPBH~1}cn>srydI}IMM)PrK;%{{rNMQv^ zw5+&u8~w=agOKojmXlK;o>%kzdv>)b+|=!!-_Tu~NJ-z%TJd{0iBKBAfGB;uev1dB zLA_F5pKhl31hJzQqF4yu1f;`m(=DYL#M=2jLMk5ARUH(-y-wc`$pU3H_+3#;TEF!N z^JeRX+%4Mj+u7!`IiDLJy#E~X>bxuV6-j6$4>pJ><*e|>?=n=TojQQl2hje`xEan7xrWPAgG72P&F!kHd&jxe|kb?wo);F?>xJ#669x?K7-)r#-`;) zYWPC}R3>(|r1y3- zM?Vo`A(R-|X1UUJVs=!&D5| zAH>F|!7hH8sw!l1lTWl#b|n4Gk|yey%MU%^MgGkg-yF@1gbGI%9tMxQpQ&6(zs9*lYQ0PokJ@_4d5Rk~?vtXc8R*7oBGGBbJlYt_zn(E+py zUKPx`GI10o@z(r^_bL*xzTNoU?=ryfGa#-==NfUcoCO)hb zKc`iC#Wh_UFM>8QtGLpGkmno(2ptUhvnG6IUjVWf>+s#P$Rzdp^)f=&pr#8E9mNbI zDkA-Ve}G>~86!GWd>~-a279xaZ8XM9I1^n_u#kq#y9+FQc^|d$W}b6zp26|?=(O2P z5P{T@%x_8I{Ri@s;JJ1^jTj|hB_Mieee>C?dsP*EAfhrY_}hk6^weJgoJmL<9Is~! z@#=xC?^iJHJzFZ3G$0l>BFgC>skji{fK?gKv|L~@&ig=NDh%o?pRXT*Ks)|nePhVSPKk`>ljR0!2`=r-r$G$j#4SQsT8B7{<&18aPJ}5G1 zU7A{ZT1I)gz2&mES$h>cyUKEJ#j<{JW5Tj|aTUfjDx*Q9z87R zqdzy7l!le(L>o0}K&T|y%1QAdU`Jt3Hi?Q4^d1CuBab;qW}r?ZR7iZM{ewChTl}t!2gkx!=J1F1h!r*8hb|Mc>4>dz6!cpdP%^a@0NaXHSUBOMA6*}lGt-am zt9SIuYA|FGs|-GYreohnYPpz#8L5wHnMqK|RK2efE$B;>tpsu3ntLNqa`ge=S13n+y^xx9+mIMEh#H78b>z9aOnMtJew^+6 zTwnwmxuB+;=~Tw5>5T(MzoNjZPD=(o>e2n6x!P*Z!=H-5t~Ay|U$Cw+V*J%1qYu;x zGs`r7VuUZ<*$a3d=`d{Ms0raEH3yb@RrOxyXMgO#XdWIHhUoJyKBA>!loYp3A(}-$ z-Q7zX4U`Xj;r&!Db@Y-C?N?lDb}q@RG2-T9lcO0RsyCaQ1G&)NJ4WSp;`b3 z9U&Pso*Kc!Jd0?Y%vgQ4wJSR0jL>}+6^ok-ESR2;VVq;v1|V7zW3Iom2zm(Hzmz^n z?rLoj*-(7oQ$qwK_2_|YtFU{ z`guBaqUIkK7$kk$N@a_^2LGXr)DGSJ)QR`fLkxT>KZ-w`d}%&CqEK2%nToF$^vcMu zH>4Wr$Gw0K=aBCdKg`xDl$sAhXD@Z=@@Asv^XncZ85_$ZRRT@?TH>zGFT4ZXrnbVb z4W0FTZYNPd#urLAbeWa@E`wDWr66^vaF_ngvTwS)@ZokG6%3Rj{HoBM_01_KSYA?u z@RPhw==t?cmVQ7y7XGs@KxI;x#=ikr9l+>qjE`l|^BwSBe#M;^a#Nr!KQ|Za)bb8$ zFj++2t;GUn+wUUfywmSyVucrt*e(kbeDDV~3IKD51WOtNsG*PMCRKjdN&x*@65XMT zy_c?4n1l!6+$m!)$oYt{7e}r93eOzjICgbuu|((>Cn=|YtiS=EAUp-f|D0&sy1uB7Et|Jf@*Y|+7+|k=G?7Oeg3BgIzw9v^=~ps9kO5{KP!5K0rC^9=&)vxpDTY}M?t|MRDKpX-u7Y^S%LL!z*bJRzz;F>rrBe#|Jq7q)!0YkqG_M{CgW;2s zPnYy*6#QQCKOFrGWc%s2BO1mT&r@H(HNntnh*LCXK82p^-8ck>X?p4Yk;u>}E2PGB z#q8MDRwXA=jY{yf;H)@O&l!GbD_MPDW-j_YRpm#Lb!}ZOwG^K{@ULQ~&${=NX01P! zD{R$X8Ad^>Er8yw_*8(q3#{nSGkNJdr@H^<1g-=)vVLHXb$m#xhg?1%a*$fR`alFW zyndr#`~rih@Y1sB+!<4|JaF(N{#2gYe+iz;4QE9MIsqLh#hqdOMvD$x#8WupPbGPz zPAS1xao|`2$1A|O2V*&0d-53UT}J;G(@gAQS(EFtnF*G<65}tdUV0HM;l4_<70}^@ z8#}-3`1#UB%%wkS6%VHJ`})yp5aluYgw00 zk?Dh}ei8!h%U^l%IRn5kr$;C}u}U{D_l!K_LP{WQiKJ-F(6akG8XHl3~}l; z`4{jxEzH}nn@~JJztIky6^EI~vrXIic@~{x_EVN2`k{^$NqQdhD_zRyuAj)+BW57c zIitQ=R8|}jAq4p8rBy_uAK*&4xD&V|3k_^qBTEsyyhHDKXY-8FFla>e-E;ju4xbqJum*9I@n8hrBa z_5$fhJ*v^-nmW=rV=7u5=VbXSngFvJe03(@sYOU63uXj-w3;4**L(zYyDC3ATfrSF ztjBf1=h`O0+ktmStEW;H-WarPc5zlz3X*;gtZCx}FF!&VV79&dlSK0-$0EQjbAgY` z7tQa4Ry}5>d-~_fq4@NE=Dim6L2ScJ-n5x}`NqThp#B98`z})}#;v*${5f@o3V+FE z>$H?Bc}ziGE>^+1!hcr!PVlAQW9)Aj%4U-D^J~`B{WnyFoOqVrfcDjUAn#uoSL*<* zVxG;Fmvde9NCgikFiGJ*jBfvZnO#?w2v2(VO>22jDQl-x&!L-i_UdiE0wxR{+*t7R zCIyp|NqtSI$9UrB)d)GXFT8F)*!|J(;lDGS3-w4Raqr<1ZTdJNT!jQqfJwK6XOMh{kVE~Gb{|fYP`6D7)|XVdBOIvCN+IGqpH}nIW(Zb^`CXQ=bIOM>h1b8!{1lbqRkg|r zx*DiuvUcF8E^UOEYMnUK(n|3b3w4l^`uIkgFqSr2 zd)Ow#%JhZ*1M(r;#BTz;U)dSp9T3gGDWo}**cFKD$*0E?CZy|%6+jrU8;^DX$z*S4 ztwoRnZ7s44@7qHmy#wF2(XG9Y13cGJM<&muB@}8YqtN(MJ15`xI<`^ka_)tsoWZ}T za>e$V2aXYt>L|(}*!&l?K~u%~Atv1db36I?3)Seobe$gYXSe^Fm+4D5sy>q?S4#z{ zlEdvhGOC&UB_Z$pQWR_1?>}v=G%N9n>yQu?S->ZUjFca;EW9%H0|X?20w$a_oUk51 z3GZJDU*!!V2Y#Wx>e zeV~7fNv<~wOI!yKpd&y6nCn7`R)3B#{()b_sx!)fEPa$$U-5%iMH|{2IW7838tEr`gRC=XNp-A=L?4AUmq2e_HS+EIRGZ( zjE3ppt3kO3Q@tjj1S9O~HKbvwSSnMe^&4!=IMtu^2C=&IpX3N(!g~TzZ-L*ZwSi{> z{zYaml4t@ zxkJsf!um_uA@|Key|i+HA%b_@sz1y1t=I8G__gkMs9B~r@LrO9>2Bl$?99-V45FT5 zT@YZ}zWnQaAErcr@`2azzkX8036xY`4uj2Jw|{P&-G;Y|MX$)riaN!gw~@JP3cprI zXCdWHzQl)82C)e_CC(x*;Nx~Dj;CRNM^aXV626FtTh?>;h3_|erFLfv8{aG4EGGA&5F;B{UmTBe^0h(-~Xg!&Q zpdf1HX&z>wgtwmfyPP23k#q8&48={KybCW}FgtF%p3iCDja5c8a^izeAS-%O!vy&g zok;>3{QYSn=J3x5i$2(*ZqWg5R{XOexaH-{`Xko&d988>*t8pUO>+lqBfptFD^uyn z7u7Wyvuocr3j$}1V&li5N7=TSU$GhTNvql0>Ah?jE_m*rDC2(UU}jlPCO0dx?j>~m zW8ffJ)LHB88Qv(0WQp6<8?&+;Krh(*r5Dx)h-Tl$Y?W&kj;VRq6@NNmoUmSh(lg^z zuYnN*ltdg~-czisox0^dA71ZrzbN9qPw$vsa29q1yz(=c7$}AwaB)fZzuD`ts#0k> zth*g9>cRP}Aq}tU{E$C9<3!!w=vSG-(wY<2v5#}{eBYJ#Yjr6gdExj`ePo^9-=8h~ zH_!PfVI=ZGh1Vw^RXyZD#M5+qa0Wh@fh?UHI4-UnBOqgZLD^gLbte8tQSJXqE!^TR zHHwT$S^Q#=tKk<~QzUm8X~R1dIjpLHlS?<(VCCue`kXwj2l?Q? zixNuFWW9tlNQ6=1(weO3zuWq*(rqY)d)89RW<{m%Rk*4oIlXQ}mx?r?Zt)Q)fx>L# zNv$t;idwLXb+z8Z8+-3hU8O!TJWG#9ITCgTpIl&R4Ow5!^1FLs6v0`&{1^tX{^Cxa{WCiJ9V3j94F`P zz6{x&rT?1Av{8pD{n_&0NNXnT`?bwjO<0kxym%BsnGTJ#^{DrvOb>zQi~pK2o{V?I zp(d?yU%CojW_$SB2fT_zNz+Ca-wM9hzp9URUy9d0rz}>rhI&jZ92@^9d#vKbyCFMO zrYK(fkePeWEu6#K>F20G0{n-w~bF{?mJX4LMz+THYkx%X(}knKX1EnghtUeH8Y zi3kG2Jo#d-LQ`6%T)c)?A}l4q2tro9^N6$%-Xurk+CHAxcNMeKdajAE1^dwK`$on92bYBGhUB+pKbqgYnJRH!#!y( zRwVG=-$oUxET(jXF-b3?@mIEIp=w=;xEr12#5a^hhP#eJwbfbvSm<9R1GGnNnd)8Q zp2X;?MJ#`dGN?Y&>nYS{Z+|wMZeEG(RaJ-%ep-8pdz#sIw!h6gJoDyGM9z*9IefLW z5k$!dLYkO*f4sC}eFRf|Cc2L*zCon#hny;U>mH}!#ry$^mpdBUX`YQYCp1?3m-_T2 zI<P8q4OlbPoeFh}pmkaMR#@4Q7=j!Gt^ zu7H{Bq2^Ujv@EK7_fmQqUvO8squp_8IviTcC(mW#qRIADnBueV+W_@$Kb zzw97UldX-!&=Yqjx?bd6b@(~1$Y!vbt6S8O6(@t!tV21TCG_<~C+h3t-*7mmxVzoG zdbdbmEW*&q<5gtW;?%d{Jp0{;I}y};IN1&fS!$a&YEs&4=%ni7`tWRfspfc_?Dt$a z*{T&m@Jt;PnA-hSpL`UjQ9VS-7(rd_bE)tb#}&)9h2&Mt?)Ki2=`5{Ll5xT_RbYd=*#XR*)_rt*q_eR5g$n;eIpaJ-sHIzPwZ*Im^4#qI+cKG%>Y~_qE(}CqC?PXCopaikNyQRFiwV1 ze-=H{;-)>ylM${joZU%Qd%)?gmi8w(d%&59bL^$Ua9C>TEIsiTbFyT(-RI>6d>5!C z)w?`@v?RU{#OX~!rvS{OTzA@c;NXJc7h!RyX@W0xOo)BRHm2k_Q!)omW=Ibh?L66$ zEaNseX@av5wcs8~a`Ab`CvAu$C}SKsAMWwUOY(!)Z6>m#j0M=-6&o+(E>lq_**ps3 z^mOOrQIQ19#ez55i_{E1W1J$G#(%9A;ecks7M6>3pKCgzTa>tMel=7X0ALNx9OI{c zaj=A|>&zu_>vTumfqc08Y}918Kr17~t(PiBfAa@DEz?KYnczuY6#nZ-eh=4FeEjqM zC;AAY@%AgFmd0dx@@V6F%wNp^-k7iP@~>Rg@tMrDkUqf}ST=a#aJDV#g`5Yu;c{4K z%P3b$9BNcRVS|qK^Y6>>YeSe=DtEo%2$=Sf3Tn@&7!bj0qiPQu_|AXTyIUSZ7iA^4 zOnpf-FpJ&djaCA_!iS&Dy&#SxdPhN7Ec0%&UYdKNHo0XCz=4x7?Vh7R<76ZY5ESmG znZqldwur;!j_(Wu-@d&wQX&^0u-Si8DdBs&YxS9ZRQH}84Y(UfEqx_oXrCwmuOrJfGILQAHGD@fPeq&x7jyPp4`>$Q7~Gc>RzPgspdZK zKoyynX4+fH>hv zfL9xW6KqgZ-#i%}ck`d9DHb0J1wOJS^4;XPN3YK&`Bfy?dcIJly)?-Te|NblaF_GC zz@jbx$_3@64Z`;V0=E~J_jWD!HhR0ji-WrMe`PU<4W2t39mK1&6+hb z#tQ98+~*GKvi?PuU$OJ7vm~8bdN0C|&zIy&8-fQCj`RtWC%chI5S*;fjJ9pdzsnW1 znC~D;CYZxwY#qcG0-A|f7D#R1zPTrq-?C9J+^uh38jn>!Q{M;+;~o7dVLVNerNzQpdzLpv`hzHIZoG=@&QhozZ9p{1K+PgxG3ZvUhvQ@9mul(T2pUIj zi#mQXCd#AoOh2!ibJN$D;?n*Y%yYbo4K>r_=Dqn=&bNzaIu}1~(=6O{O7MLro1j*Y zkyg@AKxCbwB5HgA`>k?jT6U;%=5{Q3xJ#C{WG{KZ8~C@Gm`lc#EVY$lHf4KttH#l; zHttZ}^ZARxCP(O+5=Lct+gP#?k*C?5!|oO$zmM`N!c`9>h4t|U9+y4s$D-6KZT{`yqDgDjkGO;+**2zmJbp+;4bx;rRh$4_9+k zn5XVM!DxWDI`yh)O@8c_1F2hkc>9xAboV1t4ly(md_bsKiU>vbYICa1&u>2K=JmG? zP?R(BP?WpGS6@}+{I(Vb@z#M2`aVQ(n#XB8`p?h2BZu)59ce$mIq;CfxJaAAN`r^Z z3OV>>7m_P#vU5FUr;^*6wia)dfSF8(kmM}CJ>9L#a!GT^s;(6}3Q-t3Nl^JghMn`) zkydhL_VHXWO|Yvd73IWoWv{SXzHGlBVTip7CIK!m^JiZ0l43JABaNDg5!@0R(s;^4 z6VZ;1r236ie8g>6{C)0VwDdo=k6%){gjDwm%`F+zbjzEywgJ@}-`3WB5M^Hj9#X28 zEO-32M}Bk$o~Ry^xmv8&9y__U>DD_mie1#I?ysu;rb3S%N(;>&&><2t+j}skPKtu_ zm)|Y7y+qR^*-f#=)5X#eD!(Rvby+HInZ}@+bA zM1nfIx7x4QVjUhOu!`z3nDe2=5ni4EEx6*0+|{!=>z~-`Y)aWh6Y@@5FG6S8Z}03Z zr;qXyv~utDOY%CCqViw7(-K_=m81aoZ293oI&jb{u+C(+m zT%Av*+eAqu*r*mgi5jgGx;ir3Mp=0iA=D%__+-FP%|}S5*}X?7)K{&%JUe+`(L`ez zg507GM-c^1X|%`O0uJ{DY8>Nz@@W;xt9HM^)4gP9S6ZaN#m;+zaNP|-xPlAMY@2}o zIkop6l4jQBMBBIP@*qA3^J01g-CJR4uV6}@;dSFJ=C$8vRP1h)_IHKTTtx%1i9-YV*y-P2NY9@{e~+c}J5`Vo8qn4X_7Z*>Ybqz@{Isty>c{ zQr{{DF?PIRtt7_HY~}H~303yIC9Z2Q7GGs|BbekK{r4_AQHm)GF(}X3SK99;wPNHl zW!l5*WW?C#?Qbl!N=KV{w!YGO_u*@QwcQPO{_$3;aL5KsZv11UiOjs;bvW6#HOoRe z>3FO9->rh!9`3rzp#WWGw^N(P^u0SiHTm~n>(t2}A-fx8VFGa|6*1^BZv-4rhj0(_ zfqhHA+e|JlO|NcKQK_{_e=r4&E|SN*Z^Ox+M!5Y}ca3o5Pua}fmjVtdJ3>?F=giHe z18goia7>-_(-9fek<5aXMw{h6)Nr69X?=~seq(26!)uw{Uu~Xtxp}~r)BT~>tI<%e z0555~w#Ie$1zB1wI)GR;!uvssJUKl-lx>r9GeD&BX99>jH2Xh=6@h)&2C_blQ-1%h z0v{=akL)~U15t`XPs(_&Y&hcj*@Mx*#%LzCDpm~M)4=|&`|kx?MI3}DKzRm^GDCAj zdn|~W1b$tJYK`s;&%mH+bf?#4+bhQW$v^10$#@IE7o5fodmVcHo%gWH$m+`%vL5{O z&EY3Gqn-?Ql$tmWSFJVk+XX_`4I zZ%vjuc&oTcEZyJ-{Uv?BPhLlKT&k%z!g}z;%Ti%|t3qu9u&G1cbEMqT$W_L^^P6l% z10sE*G)if}Q;a0u{>hhVXL#(>&u->t!yfhs`HK>M2dZtQ9@eh)ys3AQ*r%O(<*JQ` zN#MM1xkBgD_KcbzR2Rz}Y4^vEzw`nREtkI~8n%^5?tH1gSuk@`H)`75`V#GK)WAo} zUTtSI^Qo+!dv65>F@Z6wgmhYo=ChbTKc=^K51Z6}#4Y^wa`6*==Z{qD^DDnEtdXw! zN_;3zgcr1^!`%5RThuSO15SkqQQc`%dSz|aRdHGbrs?jbuBxi0csH6P_A4tlPUxei z`y&%0p@j%kgg%zZYmhdnk#7Y$Y{8j~E=x1Ujo$;N&%Ws;>CAY8LWxZ_w5-cqOrpF5 z!QVwFCqUlTn5wPOFmx(&ugfoP(W>zQ9PlPJa&1`hA$*Mox)ixMFj19&CgjcH1`bH z$tN*&K(=L}U0V^H8fr||L#FSwW7w7wN59GokE;_3#Ue|zE-KB8-dK9EFPXv^uO(gG zj+eNojM*M4WLzl+qR^(v2$=9Xsgcme~<*d59b-f}77#_Sdt?;l<@$e^&$ zh;3b0V^Ja}w<7~~e%0(Ols`>=irFdOoT=Wn*!gvNIpe(UTE5T7beaS!cqnH3UbV~c ze45GLqg_A7=yck~stcp*g&2Bkv^U|Wnq{lryIH?x8Ad@h?J9A1X!{qvw&UvZ)F?eI z?7~>c_G;z0a+iP4z1`(j_5MfiH*0aIj_A}0*&NwRx@__IQ^((BKHI91CCGkJg14T% zc|Nh>_Bln8PnBGZZ})^SIJi(Y_O(AgWrIh##sEKbTnl(x4qcZj$ni?A2-fJXrmi;Y zfVX=sj1#BdO~j+zQSnT#x&*78_rLjV*5pY))f98b&~fo5dO6}GI!^0&%1L62IusFI zGjVVPbrR-bW;Xq;&7f}<$Y$h7A^cL~!I?MUzRfeA0NZ*i&l?^}&WVoA7ZB0#Rzz6h zN3?z_I25b74-GF)J&7O>pO&FHA4A2x6Kn!43sLT6c(^JgRI)DSc;-S>q^`)K@QekIwgjxZwT-k<<}U#N^%cb);e1Bf4(ydrpfIgZJ?9cBnM z>Jh$2>j=6wzrPX4kXwgBh zR2WhiUO`|cv!5Fpg#B^2ht)SRI6Ty= z=3HtHcqo^J)wbQcb@sG=v@8tENXR}OzWTJ9@!zlp8Rs>UIqzF4L1X_iZ{F2O z7h*dr#ia-Phd_}I1MW$biGvPEiiV?ImJ$ z4N_n38T`*<4pQ5FG&i*HR&~pa5)aX~G)HA&PI_DtPWZJj!5zBYRiEr5zlyc&?-Qe9 zduLL=w!D-A&OBEJWIzil6i1VEw4_xvVOWDS8y-C?x$*!}OkfuVjvf~pzRQiA#>S~Q z_Q;)CAWU(?Qk6~c)9^IKo#n{R2Bh4)*mqs*W73pLq)(z?(j+dxpz`!;wv~I4#Q~bm z@xXBRe&W)ITPsj$an-$&yNam^{Q!fyuwdiqc(L*2rD zc4$|2e7pqp^3yvpW0gw0-7%Bx70Fe666t4S28X|%c5q-Dkeie!LVi~HH#*dFGi&X2zTZ7{jH>;E8KB|%eF49e~HaMX~TIg-b`yr;0Ze<_qGrd=sQ-#}RborHQU}D6B$g*x^gqnL%4ySBd;|+%P)$hyRO4i{E=lZ3 zm!N1@aWPlcfiGwQ$D%nIE{^G0W!u;1oN~sw=P-vU$gLoD#vNGG&!Y0#&KoyYC*1Ie zV;q)yYZ0U9-1yua%jx_#SAtfF&X52sWxLe2vH0uY)5bTNub!mMyD z|2;d3T)$(2fByKD^s86X8jodzD~_KS_30R2#g0wGW4ne;gDLO?9?lXlaw?_A(jxhS zA|ga!B@TPUTN)mpodf1Ofab}n0jR5*``cZVA1wBFgxDT~WE|#oITqyQ?OIp9LuYl< za?xBMG>c3+l`jWy=m0qEVSS@V1JH4Y+e7ucY{gmPmgDKV)?{sUREj>XX!rfv)r*0Z z+_kq+!-h40s*3|o4GR0NT+s1kP%4v}C!Qs=ZXi(55nxx20J~zGP{@dp#OKJ!pocg~M5q=rcggBmjj3c;JyN zLFM5BPrGuY1ftS9VF1JBX{xG}67ilb$!kTy=3d=f$pyF`Rs3U%8341g@b^)rHAR@<5-*_e!kb7IU+07qXC2k>!N9C^wRIsjz+ zI?1MW@$KS2J#Djau%-ZRbo{&C{n!8M<=D$DQ%NNoqG`6tpw8vaq)zP{9|ok8dxd4j zr^Ww0g|qK2%Rp$dLXrQ(5&goFIAUN47i6?AxC_7FF9;#<|IV-}a1 znqA2f9PlCbU+fR;X5Tb!81qWwUtd0z*Pn_hY(+l2Ug1YIVQ&uYf=Qoldu}O~91buU zb7%i-ZQbe@v;g)nT|P%^Hk*Ih`hBM+%{nnq&c{imP*$HEUNYu@L`0L)w@$MallD6j zuP|d{4Mj;{XIhHYf36 znv=n!m>n!wOJqC&<Pr3b0h<1gxeAJr8U3HsSYko z%fc-%YLzmAz@+m(VSs^TC4fPG1N{O52mFr@^r&0U-wXx>gg^iUgamlU#e&ws#L&|4 zf3Ng3E|wPO>Jw3zO~_qf!(V*kT8rby?t1LgMXZmPZaWED`=Vm;f!dQceDZCSzkfg; z%}eocd{blm+SId4By)L2DS1^~|pVXbu(2h^OSbb+&#`!Dm&%=(PA=W7S zr?|4@94G>!1FK;Nmp?yf`U z0-Ts$&S=8);goD3k$pa!(>4cb#?qPJ)!4^=%=D(WF>B42^7(qn7|EHZ*Vl_F8)$vL z?e4XFHBZ(4!|?eKwv*?yp*JRgH9L4_-vf2SqG4?Ut0RDljnko*bE0qy&*ZvZRQsg_KaaZgHqx; zzI38t3-0IV(AUR<^KsYL=Ng>O=SW17;d`0)=jTGx)(T3!edG8gEKynwTVkBsBzTUX?@~MD1Ah-ujVkjBqky-8*)dbrp`c9h(?(UF- z?HP)IdvPraFoYVDOonu_b|MHl(XYWN2wScV<9Kx^?n1^MVjZ%3bYV})43d=T5@gYU zY5a&DT0lf?(_omkS5!Qea#j+w-}|SxwtJl4OCZ^B@Xe*b=3Jh=hn^Di9lUH<_|}5j z$Z%bh;`%<8F7l5(L4m|!%)cXQ_7D8P{zHd1dW|6#c`~=lSyz8{TEd`r5BME6N4r8X z#X&EMDSRP%j)PH9-or=8nWt^A^mE521#v3pE*=Cf9}ty7MUdc6Lt?DXcA4f5oFxmN z5X!N8Aq&H$% zHyNGQc)_?5EwOlue`5?f%ZH+!RFf%B#jXL*)M`dy*S;}HyejgZ7chp*3R``tVxU#y zE&qhI;6}Aps`6Rjzr+rRklDX1A*p^s=8Vr6h^_XIUaAgQRIBPAgG!u*KxP_M-R`Wu zO%Ihz#m3>;gka3Cns4Ox4})#1>{knOZ{Z`O2tXABS~AW|OC3=~Su{`$tk?Czy==r# zlxhAq3FOy*L9F{+9TMLzd68{c9~_HpN`z(7^y@GnF)AK|t{bEYmh6BfMpJx=j}aGL zz{4g58PlCQK<^`V7^LxC^1YsVEg*tu8HsC=zgS9$k>z1(!WqKS%Hv*03q!&CP1Yao z@2vZLh)F{J?sHT-c$e%8bZmQ>?suOxCXMLx8?Wq>c)iYK--WfN0-eXN~zluma*!r z0;J4mgf+A*rRN}dB>C=*mxZ32{iojSH& zBeXr?S$-jRZJ;TgHni%Pvbr^hSIrcI=Ka}*d)qnUlM%L^9`5u&>obMdINIV(zR9r0 z+nw-P%0Q1QTld(LW!_}n;se?Fw8ra>;iJR?eW*r-rSQ|6E}!qytDCi2a7*A{#tP(K zu20+BJi=+E+s@|2iX4ilp2Y&HynMn)(C%U>W?IYhVuStjkOQ~v@z&zogqC4%uhCtw z<9H?V|D5Pi>34h;fPsMMpn-s3{x{LvJGfdH+W$AjE00*M(ZP419`nMtQ>yE?G~$y7 z?}3v=7YgtF?3hI~tlJ@oRwO7o?s6t`jakc;aGMa`g&rAVg$jz(toO|WD}_;D7}!z! zhma6Jk)m1jJjd`vf`%^fSFAafX+Xp5TKMr*N&h@?t_`LD<%d5L`KGGIl*iU@Op0K3 z1?B`g1#;?OP`N5k1#@xnJr;;d5q`QyP(8#aa7MXzm|(ou&XNv+kW|%1{qz;fpnw=M zBkLu3)7o9W1{jfiK1;Sm1ha?FXz8~(c3)(5bfp!>?gu5M8sASz=TjL^d8`Xn@ zvYMuU@g25XqzOZ^KSIY=Dg3NL7Efm?DuQ)A)~1A|X97H$RO!I~DZECGUmEKo?Y;9+ z+fnhw5W@>fG>r4}wcXfh0E0oCEcQ8^eO9|wjIf07_WbJNq?1qoqm> zDKl40W2&X&KukI5YrD5U67q1hc{E~KRtuNRO$BFoU&M+lOa;au zbzE04f^Omk{V5VS+^}GkMZA#=yo+?>_VP5J63yn%IcS#LHY=EVMo`~h@2Ty0soZ2eZ7g)<~-MC2k=6KYpW>|?Ao z?bCe=bH5TInfoHM@xOz^ubN0OxkuA2WB0rTT^&Ym91YF8{SOL zTC9+?s%)v~u+-U`=xvNQm&Fn{e8(rw#Hc24Ei!qwHt0b8TYhofinQA0tK}oyupLWFocs|dVgzuh2?*?UAo`7Kb>+Amx zvp?QIaGq*`fW*v!fqwsg)@Pz;XZTma!Oqmm_uHYOK-haH*^L zDb1S4xz2qOaJyteYJ>epnETbk?Iy1W;C%nNqOpTfy>pM3Fn4Q}vNf4ZF11AKhX{2Z zE9-~!uK5eVt&Y#OwjY08+ons^I~Uv>8Ql?Gv~TzSFyFaLuT&mUUY@!0IBQR(@m4;} zT{`n0A3X8AIjnd*o}AVdU3fH@7*B>7XYr_cKAs@GTwc3c1ZQGt96%Sn(=k|UWt3>ek8?djjhyB zmY~i&S*uogFSWOR8o;P9*`PhDvKZ8-rm6d$*Y)PTq_6OiYpFe;+#6~L%HYfA(hbySKv|ce(~?Od z19{+&bq#4bgJ*~GyL+3xD!Q4e^5wgqJ}T8xQ`3d7jKkO~pi9Ph*_X_64k=rN>Y9%J zLRs*PKQ3$eJH8xwzchV4c70xSeT^+l!2B_4Q73aEk0LO){=zT9iOXZnHRB*eiQDwQMut0qi_^iPJFXcVe-4$*0<5ka+Kp0M=@YiEKz4;S9Fpg&@>A z;E#`@zL%-Y^tuc(b$EA9Gq=iGevzM8XsAq&Xh`H_tGv_KzTG&aJZjM1Y`iOQsvKV@ z4?nvBR-F)v52A=Vo2~%HZk1Datt{>6meS8q6e}2GD85P#*?+!bSxQe2*^f-o{ouA- z10}6;-I=sbThKUqfurn5Hu$Y$i88E4GJe;~1h=<5aZ6{DM*zD{0Fi)+Vklq25w5SZ zL9cgnvt?Py&aQW}fi#F>YRj-M>OFTMd35KrquHS_A&Cq_dgOj|mI}JePI%iwnkKVp z`wL{t^Bw(q2{U^$(^~pPF02oClsVAia2+s7MQ&x3VD=U5voV7mLyK5dq#Ffb_FOtB zpCR-7JaQytk&g_hIFYxvB@E}SwwSNAT@6s*Hsb=%B|V9w3&GvAtnZ8BVf_NErL{3m zJ54I8nT;cqfu?OvU@pED_5iCN%WsU5SI;tPHQg0ju+v#-q!R>fmD`BDWVE`g|8jbi zZn~_>N*s1mw^`ge5$EmwVQyRo`n8R>arb~SQJYcGc2_a$k{Z^S95VLu4?^v3>R_!= ztL7S~Hl1R9%ZZ%F{KzjdBR=X?Pz7+?3z2c3#>M#MSV#?ehby&8m3FdyLfu1P(!Zoh zFig$Gi<~x-D%Svgba7%HA}Fst6x`R+H@GiFTLwpwWVXD?w5MIst(Id!D47DCT1=59 zv(Y9PnxN;i2LUAD5Oada(T0^GA=uiHDBypa5L?;-O@rB&@(iSJs0!nAx0U8jn=KIF zW=4@3Jkw)C3`;NwdMoZbP!?yke-G)%B3?A@kBEd(;`)Djt&BG~RW3;pXRi8Igtm~P zBrFh3E?YQxcl0-zk3RUm?5KS7_H(6*=G~oSo;V{C)JzywP%&MtP>r>myVc~@y$yL` z4g$@!bhI?vnvWl`jMF#$<#{rwy-aLNS`AQU5Hxxi^D4!_YK8L%c#N65ZJocMt|`G% zs@<@WuX24tGihiyG-S<6AL5?nmp3NPl=F%D{nB!UqNdfVH0Z4@d9IZoSHwND(9K=j zeAsU~h0S(R6;8g{8s+KX$z0X{LGCC#-O(TNzSpXjjOOT?cv8}*>h2?7S#%wo+djEY zb?3>dAY37zG0%S@B`vcHmyVxiE-eY?tn0?%w?FK`Wod22C$XG&?q47|C7v`0$H8uT zr1r;WROwX2N*Of(GoaJ~Dl1xplDF75SA3VV-NGBqS_ow+J(={fn+w5fe&WGxhCR?7 z<-^W?56Q(Pb(`?UaraM6Qk$A6NN(-?QVLDzIxeWUBvm4jA9(*^s)9LL4ESGbm<#s- zS~l(~)Lj}KtH@b8(Xjck_0>6{5?l2aS7fr@rFxpN_HiYKWf9DOAz z*q6<2Y`PB;S@@J9!fPN)pLVd>#7_!8=H0iQ_h- z^{UbZ&2RCEKQ)EHHOlihRq>E7{Hl=a+>a_XMPR`j1u6>NJX*;`t2!QV1D`cDSi$~l z8{2spSvbmMVU5^wX4_gSTXa=FoNZ}miKTAxx(?zxjo%EORJPez{HTU@*1-+9DW;ZH zA9* zUvCO}{d?68d>|j`%9rVdII%a8IV=gYNmaE&2~P*{;d+YM4T)HEc<8QSVgkI1ac^w4 zg}ZA*xU{kM{Oj7(3R-_fOO3i4u;e${c69dC?DkZtHY$NjfNzf%DSs16gbj5Fy_NUc$hb-Hy7Pl#$|ufscLVb)c1?Y{l ziZk}#+1=LQA-FFm5?xsz#X}I>gf^tRf%gy1(aQj-Wv$Ag-VS6%ETj=g7Hbtg2Loz4 zV!l|92TzOn^(q;D=VvaBlYTevzf_HC6|w3dGYnUP>^2mM6EM0s-K9Mx?pUx?=YMF~ zVw2}BF%$-==$EvH^<99C1c8?;E;Uzo=#Fd?OD^j$(n?tBs{K`Mf4X4eX}<+MjIkEM zo+Wk2@zUYLZML_&EoW^poIeqXMk2MTI`FUj)dOGPpJxBTjhY^`rpWxKoXlvV;pKx6 zh1O^SDEJ)LK*L&{4GJ?ba7A6IPy2Mosxi!!!+wN&+_vv{xuAbyfKKTy;hLT<yS6;Z!89Hi;E3TLgIn%=kCRTlN6n&8)iSm@{TO+E7d-}G>oQ!3^QIZx7*v$ zb*7fv(=~#idblQGR^aPE`G4-C>Nb6tsfo(_6=}zHUa?$TjwQuNs(bGEdrnkQCOMB+l1Z~PCV5}9byC%=*Izv< zCL{JUUV^suu0WzJxg3Ac@Xn>fFX#Cf`yK6_Pn8ouhTe%+%&34Jf-Zk|xDUYDP4X5Y zd&i5dYuwbmdD@jY|B=ojCt7@*3^ct`z~Zw7p?9HbTFFeZH&d`sfvzce-pz<%%@bMA z?&v2hY`?1>?-{{$)2(=;IV|4~O%S6@i-NDTW7<2gP$;n2R0t|&?@4oI*QnzTw{G)f zxRDC@i9b`8m>1P|h~2Id2~xMV90m6D`%2Y29#@x34t|oZD+$eTaf5>AuOM1-=Y%_f5b4?6S%NUNShA^n!3iC~1QRx`0l-_FxEiwEuJbZ#lx3s8ssj@E zeVNj`I3F5NlnB_8$G!tl^fm=sEgs*RL7uZ@^SFRm0T5hsiWEIe2QM*;)tfsR>>x_& z$r_JH)cwbSHf+U3m_P^x~Dz=fE0V|jjXKjZHutEsU9U6UY?#(i(}AIIHx&PFp&Xda{YAWP}( zNk;^NvD}Fsu`7X6O5mix075Gm6UdC5eQU)v@c5i^R2Q4uu(I`OKqYp*NiAEf31bD5X0k1LREK0N6*4b zka6nivCGac){T}`UkXS@m{OH% z(JdSW6=vi4Yh`U4&(d?h0H*S&%y{Wg1LWfRp%^K1mVOh>W>wra)l7`CsJDnhGUDJJ3s&2U~JL$JD z(`0%zx&@;V9dn0aU{9r$?q2bVyL=~V9k(2s+h|zMyKrwkHDgn;J!lTpJk8@MQN<9t zCRP+K_p;HrZs=z8iQx-c`_I4E0&3-%46dq4df0AAoMT1+ zdA2%o&vRzB>|;F(RJNMJctx2so$bAF-tSq?hbyKd)bZ){q{WQ++hWlGDd>JUrL|JKft&h|ED zM^X||s;s4Z%Dq|rk=CQkiuHQgHG7p|jm+KwmBOS+LLsdXYTXCj>s%0GT8n4bK@p}~ zCSJ~ZNwo}6aYni)+BNfW^s+8cMKX90e=?uM1}mrj zTd}KWXf99_f8Hl)@0WrnbN)PXQi}H9g*%DPqZ--0xeuPuEyMI80$Ew=$Ut{1uNiDm zc^T6Afv;xK^PJ0N&rqNNbSiqVHQ4~P(B z0{<((hTz6?%gnD#y7}*_S&M)Lpmpg`Yy#)HAAN?pdDC&JmbLXU6q3JXAPjp-!|wQi zdyrifqe%aJD?B>C*Jko8#08g2=s8IHb5K&~aaj7#(P>iU0gtrZCMszIR%t{Af^!jC z93AtV0l=uJ;F`88ghNmmOV=}&dhRAit)$A2Rs#aGUZ45pQ+@#A8$M8mb=R(Ribw(gg-Q)MOS z1Uw)2Z$siKD^A$Y%BRv#(Li&WDZCe`U$AWYA(!ADc-jRhW~Sx8xWqH zb@Jb-ZYcz0(}mfmLKq-`;(z$0(C+J-z4RvWjZ{%9$YTqpZfu*?yRA3YXbA0Z~Gzmq7eFMZeHT> zf9i5(G$e-PPGn=wE5rNKaRWuO)8+B`bW8y>skrHMp;LYn_--aBOSYcBG#wGYB<|v* z?axv<>JKJlk9kGQfoDm4Fbhn%Q;UE8O$TCyOur9oejjFkIVtW}+8M|gfHs!T7@URv z9&4oi_ZzbO+QFGQ8aqrQG%SBwR!8B3h&dqMvi)ML@Dg_eO5Nk@!QJ&j{&vzXufv#? z8D4%7zkz_6IV*UVzbM|$iQIt8Rw^du7?h3G%^$mHSuyBbYtUn9f}0#=_Zw zbjCR8s0cPpJVB}^K3-3jofvZC_BR2h`8_}DL-f%M)?=(B|5wEI#!sg7X!O8QHFuhy z>oueA{vbE?HWt6(0t~1t*>m7~v1P$sA0D}{{5<+{3fEnmQ}k4ev1(}T(%}aPf@LWJ zmSdmU)j2aEYaP_hNkhRb$Pw9bJts!Q;A^TRqy@BHDL`3mKFA0(X~ZlJZHIfK-)Z&z zl80=cRpyK2>^ZzJ0Yo&_pUN0fyRqYWHU{3N%0Dm`hfCm@>nP+=;QbsUe&E4VC%5CL z2`!mIvYoKp0I`iW*QF_%+@(i%5debp*Za2|({W#LP=K4BNU+@$ww_4Zt*f0J0dB+s zXCW?$1xHN?{gG#)>>mp0(~UWAffJk}EEv9im>Tyc2-5cF5saAoZPf*HgiFEG9R)bI zZ*_?tK?*(z#2bEhy&MD>?hdVowQKSoTioT?9+x+Gf|-<56oj4DlrNWTK1EL*pCu9t zkNkp5x#Y|^pokC>xYSPlmIkX3%%YOLMd5FPrcIH5KKm>M$y;jf9`1n6GT=-SACXS^%&Qjx`#hNT`)uhCk-iEWRhf}4e6=~VCs3%SmW($u37k0Q`kKs72An55P#isSS zSU*ETp5QGy_I-LVVm%|l5Ku~^_&XOU0#en8IMcDu9Kqj-8j*#IZ0xZP3X`L(IQ@w7 zlWtt-S`SA$9s}(j2?Uoy65fa88Qfg&1ck@e^+$Z3EOBKmg@gq6h25{dSs{S<5I%u+ z`tQGFdztT%1R=fWy6W$yY5oxkbQ|C~h!J#akf@cDa{{q1s)LSJ6$(?yfcqo@fL^LU z9}$&~nK1d>k!PzWQ|#uRs%7eGbvetNfJEe0XTe6VB;?Z3l5t8wu<3O#m+v4oC?)%T zyrwZej;ShAbG)2V6scA}4BUIqHxXx+=%h-Rt0O7^m)HMS*~G+<4Fm1ku23;i4w*r= zFrg%7h9n-Bt^Rz};_HGiK-V{0{mV1!k>jT~eCvv)y`7!p@ne&wfUEdnlW%{VQ7`wf zeIphX%o6QPSU?m+pXvJQcl1y<#7$SC9b8<$$(FHt?ygdEN28uAuQ0BFJP*;&j3BL; zPq+8s?{*WrQl>zLIm2dT#s~=4sv!d!X%=E3`$k0^{S-2XkD4@n+m zHrfntF1#3_w){B-j87!Yml)O^jr?m+*`S+2ovE3}Q2`{v7VBv5I`%&&IsIY)=?>p} zX>POp4Ekg1YmsHwDvR`5NYxMMy+&CJWW5CiScQ(({nXJ>kBQH?26=hF~RA7 zw;+U@`jm;ZkpWW$5&GiELZ5@nQ9WfJcXHQFwtF8rR}nY&n6~*>$_G4Qa*`MV@-*+R zTly>@BsUr#q((AuN?+_kFqBvxH@}x0uEQs0O&T3^lT|f2@Nfy9Nvfd>MADTDeq~o= z>W=b9TAZ`}tt<$0gIzEM2&Q3VaN#C3=CgIkBY}SV&1`K-r?cZeq9%C2Gp8@CG1^Yy zE52!~wQwZ;;xXkv0^F2W9XUr(81)Nn7UXGN-^PmmP!@Xk#e;Y<`~a^43qgJ_n0W|9oQ-O{&O)RM#2#IlWjnb_Vc0y}0k8;2oVDtEb+Al%Ks2KEZ9!+|9$6-TXKmC@Uf(tqHSUNV&zq zD5|)pdlfZ~M)b=YKd;dnBcm93@9*TD;pzDf=Hn7|EL56sqgc*T8u2LP*bkvLz;6rK z7y6@xC0OBVB}<7%tI?*wUhZ?BmjQAeEbeU(IZ|4?6_7>zJlMf zX`W61NAhXr>-uAv@GV`&kgKF{Yfb|v+D#>M8bZy=%R9l}4ipPpK~WU>&|{0tp(BDl zw0U`KS#k4PG;e}1C^Wy|c>d*^VrNXS0j@B>_rb!6%DH2*={#i-FoIp){T9ovjDeRP z1b!uLG6B*eOxFEWzx;UE`KW_TE?|4b(GE-ti$g%3{Zkx#Fa(WV*E(-Ve|fz2ZD~HV zm)d^wT_1`P)sPO5a7eNh@H|4Ik6DP;7q8%A(_CQdglIax-*Maej&X1&LD<#lg0uDK zSlU%(rsvCU*+w9@dp3v^bJ;YNEhRg`zdPbTxqb<#M-4jeUKdAuvkKouu_V&5K}Fi0 zJy1!|$4J*S98f0pHz{773!@b`m?HV=nAxMSM1g1dV9We_1uz&RGoijqS&-g7^X5-pFL>tX1;RlGq&=SXEfkZi+91xFbm;#(%8#%PJ#8 zGd*d$)b#a2DF6~^D5R{tq5(A7V6sidL& zK*Z$mslS%=%SPeYOhR+W&jrS6)?_S$vLvS9>JXucBKMv7*8!VJN{UdxT2el{D1Me! zE+-F8PKveJqJ?lshr! z{dMH zHsQYt;;rTw)s5NP>aciGEq-Zi*!;C0^-m#SWeod^5Dqry6OWC?${mBaoMDL4GZag3 z6ODc+%#OfM9Xm~DjYvSA>8?8NspQO_>lWe*-1HskvO07dj!wBRO@~71H!SJ+G|am zGsp{$En-@VgBHcEqx*%z*H}f*@{Z(Sr~Bydl>N{jY^f?e!*)&KWSRJLvKB^;j5Z!c zcQWsg+jo7ELtr3+XG0Ij8Fg{|ndQGsh^y#{H7G%}gQ)WsSVf@`(iDay@sJ0NR#a*vPhXp;Ih8_N3&sCNH2AqDmx=F2fS_j+7qUlRIdm=jf9bb z{~eAq>9cKlkwb9Zy482ZPmm(jLClihzxAciMRAN$-usYO#OC`1*X`2xH*1Q4`vq$w zt*}8A)_$i4A_IV9_TeK@wL~~rVy5dQGwg$$(}yGjmd#<3l_^JXgKc2TMVLlsOXKgN zxZawHmjL1oN=~iJsdUlDmtuO(UAmVR*3Gf((2Plc0c|DJ(`(c&jUE+U8W^WY%Dm9e z7Wkk45NDr1metnLz2nXYCqO1ee~sDWoc+$KVPMKg6#*Oc!taPOq#sFImL8pOG(S!! zI-Mq^>(xcAJG}Z9UsmUjvkWPaVY_I=g|jC;inVAw-16CtBf6u*+Wty?dPWEU`+|OSJ?F zA9WU?}aXT6k8&mR=%!y3K4( z&-_uZ#Cw^J4|5XJ+HHK8QqzRXx?>n8k1gfqSL0T^fIL9xEJAlQG!e{&XE@FK4-(LQ z4T$%!4!TH?SJ>_?fP_z2r86JAaVu}XqLk$6tqtd$K5n;VIXb=-oTjy0O1z3WBaeCJ zsn3BtR=c&DL$@vc(h6OF`)Q_r{#hnlD&@SYN8VPy%=}Zroq5t3wGIwAIx8l=r$GDB ztIK>PkjeH;!v(XxD5mo8$$7&03cIULxsKBs<~mmYVj{Tfpfuzfblv zW-B$@LXQK65T-DqI?2_();H3j{Zbv2wAJk^oe0K7gEk#Q3H(HuI`yxX_3fh(w@6f( z0(~?}d!Y^|*nA<>V}`!9R?%%lyRdhV5sf&+Y>9^A(czy6eL{hmhtk5cS|)UZ7?W+4 zk_4BflU&Qzz@%BVb2(DCY1?s=mql*JAe-SX@1Kr-seeV4h6KWjmKk&NFf)HWtkj6i zmgHNCG0CA36Q60*6;A*XD3(r%HP%s+_r zvEh*a6gt~PLHBe6yau+06e5ifXMN7}>?caZL=6$go02AZH253tq=k?Nb8tfd79hch z$RH$5(+6Yc+ezW$s3leA<+6h(_ZLvY6CreaV7`;@MZc`z0Yr>rwR$A{M4BrW_*gVu z`f(v;x?46OpJICl1oT}J#Ck&#;mOtZ7p}UBF7%$QjKYavzBmMzSugL-u0T%;NQjMs4;C%JCi39h2WmTS)J77x<*Cu zglv7}fRWLWc+n_DjDj2@8kME_ z`tg^ueQnm=$X3#Am?Jf8{IqV2{1T0?hIpD65MU;Flg7|ss$=sO>VYMvpCtbzFxwuE z8Kc*$+;s5a4cJ*X92k1q$`ORMLpHm2NIGA#avYq-X*lQDe^_?itXat!k?4S2f$?GWY#U`+09>0GcJmiwTTfa6We1YZBUeHSY?H0 zY*W%8AX%Epoz327ZS4+A?;e6`mV=}z0bD?{kjJazeqh8TLWFglC`}eEnvg0Yu-5{R zHdl+S?{r&KsaV^p@HotJ4GPgt?WY=x2}#NFGg>ZN7Iz)eFgMog3>OREi2?O`UXAJxQuB^y)O|6LEIYf>p5-E>`ro1IP`Wbu!e2Q&IdADlEd_p!goGoJ zoq9Vbj&mU^`-zbRTbFDd3&Y=rT14kyxlH-kJD5m!v&#e2_&-j##sGVvr#R4&Z*utR z0dVAyAY2$Pb=JWzMUPAhK8N;ravuW*WVO0Qo2H~0dZ;jasue1uAhbbVa^?PKNMNfe z001TbzO1(9(4Lro@8!W^xTB}QsP~hm!;L9)WU(uro;&lcH^dp(6oN@dXvGQy0Th_E zW5VyzL$_ICna#H{jJ*us^^nFo^xV>5?M9d{>5Y?yb?ip*QILuREdQwFdF=_BIqXN5yL?=)x+vm5DjeN_yWVv>Dt-US1EB%(?p)FvK5U|*QH zb5ik9Z#M}M)#a!F@fHlyg*RB|CpWN;T+-ZTKa*cJDc&%CG`dAd4_II23aN%a4F3=z za1gaWW^Hkx_PZC;$3RojD!1nhqSJUm9EUv96pr@|bws8%;=P4@O_WeUI()Go%|3Zs z77;Mn+8~wPE_JC;D^1*=u686S2JQrDBDD;#H4ojSwK%lDf#@qTI}b4FK)1nI1E?9y z@aqwo95qQlI6|OQn34#_^;sR)Jgukb)6#HcMYgl?Vh-C{F}dt$nO%a#Dv!+iVA%uF z+_~;v8eJ6@+$Y+`nbI_<meXjB4NJoD!p~na$vM=+Qb^yFbeNG3&^J z;eR4a?L*)E%!iuh09GEIR-Q07sU4UG+X`j7~ht`@A}RJ*t% zq6DrurXV}WudWEly);5NrUFgC_Z-gy{5(g?5xnNVl`qEZ7d3Zt3UeXD#w?toGVay1 zWTejI1pzr`!ImGKKv?nJmVEIcL5=Txou$ssEdqQ;!fh6v=8%kz zlP=3I|7>fbDBs>d=UETxVg6Z+Z-kmGaEr)68Sg|2D4c)-?Mq(SY%aU+P{a%Q|W zYjPIS5+J1dKu?&CAdH0Y@zOyu@Ew9+0E;QQxWq2FfvqnaXADF4@SeF4GJhU0HaJ`e}&7ZAX-%0_S_70emPJMtFc4LWCZap3#e0mLGG zz}=#B{#`>DGOo}Z3nLU|K!840SNk4W3T}D)t{`z#Sj-z>bPFP~j=Lp|aZ*`UcP_pT zwZ#Z#=@e)2O6|_HLfT|Zk6QB0Xmz;O4x)007J9X@CCAhpWOw`!d7(%Nh0r;XSO%qX zw|A-cY`{7!-6}Ty4@j*(YZvyi2#c#YE^vt&yR&{SE0=ELm9LMyn`noe%XKwSUVGR# znrleS9jT*-Qy}jZq-B{w zHMv))6_^*9d-CME0A!4xrz7M8cE^mdIw!qXe=?GP(fq}FzfKXrr76BeQMS;)eM6<< z)wZgW8r1?5(E2+6XU?Wa=7Q-q%?^KaLWMX52A{8GTq;tUCGO1WkQt$EH4Ag#sl{|G zO9VnH(fqB28b<%Y``7*kK?#>t7m)rV649ZF#H2IlD*?^_T#)h6dMoCbFp}~+50L$g6sFzfjicFviF}^_`Kc;SGr|9!O zg{Ms)Va)*?Fvv?MXX$G<+hk_gz3|GDorY>N5qp`Ig3NPW4dMX1>buWLn0mMysQWed#b%AAEN(RAEWO~lT<|pBigNpf=N#fu=aL;N$Pq2Rp z9yWwR+Yi;%xajPcxVJU6GUnqk!LH&7Jw3_H4?Z{qZyAYRauQkHf#bWe##x_(m|p`G9EmGR$}HR$9f&?D57bq@>ZU21Vg^6S2`e%FuC2ePS{%m}N635l?72jc7+eZ8OYpON>{W(yIs=!cfhBZZ|onR-2 zefT;T7J=aq47IC>_Wq4~OxRJuXJiqkHz+mo%oSpw$cZ&Qtd-cTgDBsrFDsR2{WL`J ziVWNS$TFMaR$$D5Kt)^82v*c0npk#mCm}1iTy8YEBJ@P3|8oE1U!m-CQuk0>4_kEg z?(1w;W06U28A1epIc^dYQiOA9871_LY-TUfFt&i5nRQ6W5g@*gcR>S70R~3}Yhr#$XuA#bxM)Y=ybsL4{)uBh zwFS;Zanq`16CboD7L+~l625zwoGtd?&D}w~AXd%76P~dPy!3*DS`PP~w zfuPd$I(4Zxo{CCwZ}y2Ak^D%A9kAbe3|H%K{7MyK<+j~bF^lV?n9P0G5fP`&^e>hb z_X=3$mANdmE(YcZI(4saJ%h~1LXWW(lt99wDvv_8Q;q1mX170G=@+Knoks$XR?&IC z`Cn#h#$rfrZeM{P@WNk-tw0O6&w_%$uq0P&>mO>164;@1!J_z-XLAn)E9B%B#3FO_*YqczPLA;Oifxu>2BjRM&aN{R;bS_V)@coLSkTcZCh+dNAjU z1Z)4{?N_?r_c0=|dekq1QgS4wV7ratwJf@~6EUHJ*6RXf>@~;jOib&&wA`qpv~;x@ z)La&cwiK%1HD-*9Ani<~!=y1*aA7ld^m!sv+7tCd>JQrGdUh2Uy@C5|@duu%p zTV6n-zSXeL^1NYOTx-5Fp|jL3;!fVe5Ugg*4G@J}e|gyE1~QfpJ}P)NE9J`^<3|3X zlrbl#sby(3{z6$K+IA=c|Jfcj7J@w02=*tbfVkJ+Vr3tAy3dz%dCw zn7!qjTrRQoU_$wM6Z`yX{5cow@ZBe`2e~Ic67)g8Z(tf_mZdVWc45wm^30D zh#Rl{7r%R}A5*L~IcN5w?>pPLsA>xyyYrwIH=;7*heG^>V};b>)?TQXmhqUDFp>(r zFx632WEUb^K=ILzm2-e*R(~GY6*jdKEX;8sa2Eq+Gls#ZL@Gj%*4k;_uTIWN6>p@| z)>Tquss`Q?&1Qv{V8{xp`H0PG&RH5Oj)IuaVUTh4<~T=xq0uBb68nZnu&BpfbCLsL{38_Z^BX2` zlf-eDqJT+jFg>4d&i7n{8VK1&mX?@UME=)&+SAAY#>m1V1-w{tNUOUy`7{>IZRfNF z>`%jl4fBevMf&z@kt_yk+OCigQ2xXFWQpWv7)Kmwe``k8^80`xIC>3F#n4Ap-Q{+x z^>>+xa+lxCWi}BgvO6oMO`7>9unfq2{FJj{=RQT>@JP^40vY0zAj|sJ@m8a-W}WHu zSi8eN4(PQ{n`x2j2)oSPCFgAm0jB{$_0{1P+GZ%teL8J&ZGTJz#%!M+ZL^77-U6ye z^-{T(PWe{ZH}1j7xr|Y?&r3nj4umBeCYrCq+~yeMMt|8g*FmD6@%FxN9D=Ms{aG($ zqMmHZ9>p9DLS>0mC#UaSM7?}TSoocq8a5o>Il64G{Wu#QBqAEmpZ|xr(cEWu_u1H) zRY3ZU71_7Ff<$t$FYxe`w&H3&?~`9U|A7)mdUVv`&p)rg4wOtbVC27g?N}` zz~WYuh>IYQzlQAQQ#`WC@h=EeJAEj^&q}-|Dk9 zeYO8GhQD0Pf-RL#n^hx2#u>3IV2u&D z#+ILk{+VV-o|2EV?3pV;13qp+%7=)(ct6D`dNN2e$s%z>q;eitn>B7AH)S$T6aE$9 zJNN@XY~UxKv@$eff7B6+hH82|^c&hL1Onj{GxZR8EpO(vs{lV+;Fnm+U{ zHCN8O+q7vsMYBx@iN#-%>h8}tQzcnyR4iGOke-D295ki+`Q-dvQzFwu4P4R_Y+iLc zFsTT<(`LG8iZ@g_7YCzsFC$VD{KCMaASPrv#MUt^4jd!N9ic{EFzm*1T0nQ-{A zt79f|TW5&iO)llO?~%d2sG6i<^f+$6DfNS*So` zh1+93HIWHWQJ~8MnLh*f4$jX23n33gCGK<44=lMqZgqTE4OAh*7pws1z)1{()B+_> zT*ZF#!<2qjF<}xg`k(~&-2(kADO@*UVAl{Nc`2L|bqW;@eeg1+LaBxd*;#Dp!UAAQ z&kONW2MPG_!D6CbEPASZ#G8tmhUdSh{34@`8Z8E&qDREeGz#Hb;HY? zHb}QoA_!Ay>@7t%M4)G{!YS98wy*~A{Ez|9&I9Rz#it0k8}>vsA4Z|WrfY>J*WL;2!iYqWt4Do}*zRMw#rPl8-?9pfO1% z2u%l~E82t12SBxz(n{c2G6+;3MB4mJevrE*0MT#AWf%(li%Wuu=)o`&A5Qk`cpaLh zpg&GJIqNe&H?~0g-=D<~4B9$DdRj|>+=5)E4|Ol$2U8L|lg-(0kbH)8JRUrBU0b#m zdR~;fMD?@*cR}Jj{kl=*x`Sj~+KsUtM!O5tNp)ArB!L{B0Hsy~Ca`d%0iFxl*Fi#xaJ@?ZSMw#>+n<>z{-HAR9j)OKiq4H* zB`M-co%;?`)z#4QIW z8IR~`LbHQbx&i}D<#P9+0EVK?m+V=u%ChSSLk`yzDIOTFJWB5JoOF#!&t z6)eEE++WBv7+FTCB$b-*jZV_b4=gobBz`CZPM{Cc z8FgOv_!UZ+Hh*3`w)_Luk!u~CC#T%lh9f`);K8BCc#Pf*eSs$?}HmB@4HfOExOqKW6WDaDuB zOtBI}9Q)OATA}@`E_RuKa?M$cr3dske6%M0*iOu8tn+Y$Srp*D2%IPLe#gMFk8)0O zJlO`7h+Ew2S6AP9!dG=+q!5Uw4Ivb*(mHi9I7%)XNt?{VrJF}ZiZ6>i{+q{N@7iF? zH|}!jM{R>!f7T!R9440Ae=fn2sKuI=)`OTJ%A%xbDV%adsUdbdW(X- zFM}}7iR@UnxhX;TZwklKH9y$a#i2x$^?Wt2$=|pLL*;Uqu|{wBudqtnfq!|-_|^_{ ztth~A@#dl@O7u+25xG7HWQ_!ilcIAGs2s7Z=Ij*WgLw5zFv3Oun#(&b0=u_xTjH#_*9we*4I^3Y*p8U#V zY)gC4JeQ^+blti~@9a9W5`3g&`Y3}6Nsaq;Amg)$c;&qi18hP$q9ZpJcvRHUWGKKm zak5|feVTD_-KUESs{@TuaIO_)pDVz|d!LwzJi&x2_ zcXpBzZZR1qd|y!{CRZ%B?a6>EIYKIkkOy@ANj$7-DqEFj(W0Lm-as?-hr>(iX#vkH zW+pr*Vmh~#Wqr19XZ6qU0!2!Q1^94L&j3C-1YadGvvPzZ>O{Z`rEu;vbE;>=x_@xE zmj=QpBC#pk{Zi02h`f--BD~V9Act;%kt?*!MA&CuH<8i%p3f4I@H_Tjv{m z`}r{{vy2-%lAe1QITl4zPM+UgEUj)Vr3}Z?pfsLVgHT#3h2S2Tr8@W!C$zVGM9Dp# zQW=KuTNAI<^($R_{zGX@Y{c?fA~JBe(vyn!8JFn=OTN7eHJS0Vwts+*0k(bU<3kvFyK>ws*{@^dp zB^}(Oknm_eFFC6=3F0jI-xxjI>ifK^dUPE7YAfOV`_0yrWvVO&3-i(EV}-{Ae21Y!*>SatZs(r~#LLW>tF-ib)m& ztRk*<=A-v%CONP<0&K%`~6Q z-`(`UsprQSZN)|7+>-!BqJ}=0cm$v~auJSjKI93L7ze@M_rv`z8QMS62I!5x{-hLA zl58SB`+d6Je_ln6{2n^}>J;;`3gFW4kTs;DCL-5Zr}Nd_@gejU(F|Plr1{gEwC66+ z=hD!{Fe2{V`=dLMKQc81ND2KdUxvd;3VezykiX1v`77vRd)uUbDt(BRXYejpTdqeP zlfN7Jvr*$k6I;BpbgMU5Xwa}=EqI4gH41-Ky}=DM=AU&}nYXy>ByXvN#KGAR zAots*nKy~OBSMTE9s;hyu1pewXt`6PX{GRFL_91Q!WxFY6(KV9w@o(zfAkmT0ZPCr z*Q_>=XYKDphjvJ2=)Vv=S6K?j`Zrs?6N?lRE^lo=^1)T=(75kza;SL<1F_$}3{&xZ&3sJ!JN z84zg2YgQ&49}n=KI0)6@AWk-iFG0PLfxsH_Q=r2LfOycoeQnFuHByDS3|x+c&XfF^ zYKeIUI#@7jespdDHUXp;jfN!@-phXq{3VD7iEtfdWGTBJQ>U{^CfT(6qq(qg{;tCN*pP&@UG(mJ zyY=z$BSVYbP+^~~PZ9alR!f``xqS)V@mD`)62b@WZ~jOMC>PJEsYs~%Patx`Vl+r8 z&qCkzD&suRgkV3vz@C?v%(yzni`8p`*M-+=3g@+hHH|fhYe+?a-r7|!ezCzMy@PY+iZF2Q zP}7zj0ZGe@x}AV&Uf64E+FrLngT$u}kTxbIb3dRz94HD5M{3Fwm#92-J?M9?Edh;Y(0h~2Q8=BX4uD!gFI?vP>);`|2Rhhox%kt6*dA^41mIDP zFrkk|8=~$Cy%H|*3-2;BG5Ifg_|D)B8^d3$iZZHMbqZj{K`J%*z|EdS6XRjl)Gc2a zmw)_N?wGdFs@-o!tJ-JhZa=LT^m2H$m$oG;emJzmZsKAIX9w-tm**QJ%yYmF@KjmGK$bADU>2x*W z9iVNT?&vA;=oGmqw5cKqBj?IH#Ec9m!Z>Zp%t-YI?o*~S?tptbxjO>F+?rNtG`e?f zZ87$+>ufGHgSxzSr8}tSPgrg|P zg}k)Be8ENe#IrBVKNb?5K4+EO>}TP)_ywP4QD7O|!t87`muytHa1m2DW;SQBW0Dw@ zORXt5l`u)UC8aPQ*P6hn4h2JWS*$2*Q1>7rO%;(=4&x=N4Ot#7D?J4xg^b*I#4rT_ z1Sva}R$8^!9`$a}Z_^x6P@4PA9xjOtOK4rGh0~L`qQd(7OYW2>jO!-TRjG4tl3bld z=EoJ7k7zOFvqnB-;L#*C$PNv7>%)OS++>(h595{;?p?VN^cW_c>W=$6A#*ppM`0^j zz4OFhw!yehDbWU&dw4oi7=Weti%eJFArHP?>D#bR^DZx>qB)DBa&MMqEb`tVgB1lWq0geLBfXEDR0ch70m zts`fFlYyTzpMQFTc=80CB%5^OaG_`<>X^v3`j{{VnX?E zhzj`avYF^0MapUb{-pO09*k=N!Z)4O2;wpo0fL*v8dbd@dMIZs7<3`?&oJbt4Qyzx zoyu<27LdNm?dQH5CM0EG{O*lAD*~9*3nqIWm_JibZ9E z$C|{^pGi{*&Nf&ijMNVZ%fw@Wnb$dO{!K__#j}baMfGrMQkqH)=%~veTZa4SoC!rM z<}YHdk7*`1$`%IzmKXwCJh|#X4xGwYVIxtHUwu^egh+fZ&(Ei3f68usE0(?C$XKGB z8Yhru!Xk?xJZYQ98BI4V7k}fPv3*C|{e9bX%~hyfx;;OO7XH{bxgj| zk;gHpsJx2VZ{xB&xi6e;?2*DC_UCDWo9`!-hj(dP@q z1HYiq4(*yWw|&j}DrR}(tIw6d-7{djWwa|;l(y311Y9z{O=xVn0jgHQ+(0E<)}`(K zZG-wLEY9~XRt{g{3i5OOCJ$SU@4dn{g=1^ z7c~!)KoeE|E*zc3vnv$_z_7&)L`J${m&BfDmNmUk07j3na$L|?k#@naJ?|@aOn&5afE~F83UZKo_unC{%*NE( z1;$=0_Y9BMfD0jXZ#v&UXE6Ew3{j7~_M?RRhWlo#?bNe7u}ZZkr-M>Co|6px)Gki9f@AWj?;lV z;&+WYi~SXw_gUdqO8^?=dMb~XDD_jzuKVC$CL@+^cSzpwKt6rU4NMO3-{z55u?T}> zT1W!|dcWb25x?SXB`xrG@w*HOyNivkbhIAU?BJdlwW4a=$V7-A=!u41z6Cq2YCRTkq_XdJk6pG7G8f&-9o^<7&lv~umX&_Sgz#R9L%Caj{zwna{08Ix=sXd> zU?&d$cwWpz*DLtiE{uv>^O%oYs%iY>o@Zc8a)K)q$L8CS4ml^o zH1mg3ic}ZV9V_Q0^+j57O%~)3!*&PYhfBO}kmp#x5YRcSD(<{FVngB-ArSKje+*_r zGWZlljRJ8K4k7w>0C4D2Fm8t6VuOrTLtFFRw;;2t(~4XuIGo|h z!RJs-7$o5~(39K@iItH1UGnKTPf*p^V0L&w9dpk&-t7C5-Kr7^cUG)c$f;YxpU{xl zQaSQIBX9ZXZWR)t8!60OV6B8ax%zf%9BxNfaLmpM=nC?BGiY7FF7*KLNPG#4Hx919 zy{FF-=oRsnCB9e+;%Q)7wK7O&63bYirZ(pqy*1-Rt-3@>yo&%_hjGR{k>9YC8ft&m z`_;%6y#K<;NKU%tG^x$HJ?#j5zc62mHHkWgNfB5WmU70tygG)J6D#h}K42&t61|~) z{)Na}sQm=K6CU}56FZ7VQX4O);6;qP*T{4&slM0epN6WWshU52(-7_xY6uL=WSPUJ zmvrb!FWW+&jVuL7eEYQ^cc;f|e;@dkEnKk#{Eit&j(>_3{wi|#fJwm{UnfTE@uY`o z1~IhTs~4~f&E3a4+>v1rXe81DqMnuF6uiBf72`j>B*T-`0EdLay9Z>RmCtcfNm;w+d%&yT zu7AK^ty7Rvv0JAy597o#NCrdW{xq6t;k|@^Hk^U9TA6vl(FB;EjrY^(Av8KR=8~ZM?CP)Nt0-$10H~&Av^!;h%WjI+p?s#$0~Cc)qWJ za30BGp%sxvq07K~?2-1p3hAsE$GM^(3*U59(nCc)b$Y1VTakw}A<>s91RBT-o zqsi%pljG;+glB-nZ{`oU{HH<4rz#}L(syFdTPO{Of(o1SQIC?ElRXu znH#b^*+dQL2?f5f*uFsYur6HY43MHwG{4>&)IbuFxT;24@rj%h-7auM7{yVsSD(*_ldEl8FIsri`O)&7;v}^Q;62 zwl{!UlS`kzVt(OMVC!Wl#fOMAD2B*xiuoXBAosLY^cyZFO@z7rfYIFF5`lnC%f=DU zK)JJuBxYmKThOe&w4D7sF9BN@oS_0TdvYXB)hJErh9S*3ExD_|u)A!gzVZi3;0&N4 z&CipA#QB(mk>%G{LZu4Q{tYMEXGD9XvDEOzWv6PhVbd|N2ZY+v9WXCa1cTfNYH3lP zq6F@16zHF_&Af=D`Q`Dshdd*0UAm)8;uZ*zUKMDJQ~8xbh6xjt!AyC)03xQ1CAhl^ zp6CE1!2PmCQ>Oxw-ern)s&Ux26eib`c3nBT2(1*9YBG&SN>sJX<8(xlw}bXySbdsW z95rmJ1>*XnaV-v&PND+59%>F64^>7zCRR(`?)}ViJ^GIuvIWQY;U~2Kp$u>e`X-h3 zq{Ss++DT)q2qLB0XZBpO7W)^-c3Uhrlv>(TtKHiOc^8>`S)t9nveg5i6R%_A2Fr}q z7T@M1T`TB%ZaxyaSlXvlOT?NtcCR&li4B=ML}6~59%SkElGZK3ZwEE1Ou>4S=X}Ri zhNhVm$2mJPL>hOF3Pby2P_)F^eSg7bJ+JJ2-}GI4EAXTZuHdDhe$6?1OtiQBLKDpv z)YI%NR;tL~(^9Y|l-3hmDSTR%SGlYJ3#{*43Zd0#L)XQyiV^GARio7Lb_Kr~HqTRf z5+IwbzD=E_rIgWuZKvl`S~xeWeV#6b-zGo7BWXOMd}zGGnCB^jEAhJc)PMHw7x*!$ z2ahw<`Mpy_^S5ATVLm{=%%2HC=D;hXs&;v0&T)iR>yoxBC!vN*`Fz_ienC8bQm&`d zq~mFg5}namrToE#+!-q%ef3j!-f*SwI_%8;%o$IZ!#&idtrSWG_3P`eWu1@LVHdt{ zy$4rhZ#z>ey0g3Hs`2CD0qO!-5KEk_tSF1=tyT~+w=YQmfVpr_RwHEm)?HCP=!KGp z1ApQPLh7r=NykgiC$2_cv;+r{Ar8cYOu4nlAPZVXIpS#b}wsoT*-mu5}#PtNw{>8#1gUYWa-Z+Bum*i%6vI%nL-ced;slC z6E*R0odg{cy+xN{rm=*LtRz;Kj_9|Ud#nNm+1jhb14W$b|JLrz2jw$c`l+UQno17@ z4~*qnqQfbX%gnXZ`;iC<=mfCb2(C?i@Om1_b1t@%Y%HHB|2u1V=vs-e^PNO459hOj z#D7D|=a{iMQ?$F2XQkCQByIU?A<_1^O8P?8%DK`)`tej`KPR`DCBdc9$dRuhZ(iABaq`4 zAr88(muz4m#GxGrHEd^pi&`URrkGazVS8+ygs^T7Iw56Y^TTWoQIYi)fJW$qlG=a7CmMX1 z3i|=Nns{b|@7S65m2B!>y@U|mV#h3KkEE16IK)sfMBA_F#WmrIb^Q?N35uP(E3~(> zS3|?;K0pc$uZ8=E%WIrS+(FJs7;dHED2NVu8U4mtbW>q8+z*2chR@@2jT+x2!VBO3 zUuNV8`BAeTL=1GX#>vyTW=ztWZqCXiH z04LU%B7ZhdRTEV*S>k~I_lNQnm6zJ)G1KNl933JfpmJB(P1hJ!ff_om67Y)YijuiX zQ3r~Yv@Q?Z?#ag}9O~>i)t}O8M`8i(n~5h?k(*8X_=m z_jChec7L}cnQbWW8PfKbD4{L;{AEJ_J}4+gnbRd|jV zJ95nQW7_t8+qK0MG&+137O5r`g^{YsY4pG1R&_$pBPFKOq`~?v^i___jT-g(^!{bo zg61-t<6HvF8B~9;-%WC}i}nZ1C7Ab57P^(sp9K6xS}Dp%k_@Iq1Gzewc>bk;5C}7U zzyBm2DTA7On=PmNuiE6#*8#he zt(V8)(2W|8Wv+RxqpeYMJU@moz))vZ9rBJmok#%BmnL|6IevPS}sDBXrmyK4kK8WcX z(1S0P9a}{u_=27#Jd72aWb0X|v+O-#JO9o7>|Keb(xF;q4ObVWWyfcITW@Wwtgrfd zT20_)3|qlkX(yCgP~?qpaJ(1oTp?OHLy8uS@?VVTMRlV?J7-|nlVY#iQG!eZ;zg|m z5`_J%-`F8?=cYAl#3Le}4JLqb@-9w_cXXd_6oq%-PAon=y>J=@^gcVw;#vJ?cbwP? zJaQuu^{6vK*|0FonBgf*G)3{N2#Lgq9gGGNvZyrwzVZST61=|m+z(p;xG0`Y8)RR7G_ibbu>w7e^#H}qoLzc^pd8)1T+J-W$E}lmU0AQ| zuuJ1=R(TH*GD%U2L=Z9op7v&uJQD~`FO z0ZKkXD*F~;l~|!H-(hEq64))hkF>rok5pL|3aEus3s|t5zb^pU= zJ{oFvmk0zsMk|5bH+@A3TgCCC{J41U(bY_J;r{8WqGlQDD9+e_F(Qo^LKNn)lQKX% z7KL}mE@A4iWCG~byP$2b53Li^$Eov-xJv47Q;6OFQ@ghI^g@*^5T>fUekr{_0mN#? zB!gHODx8x9Nl=bFXV>Z9hwMh1rpbnM6l}^jC&$+N^X2^WAf0Odx-NhX!=w9BA36+s zTsh>{PKX%31p5s_i)n6>YwUrf38o$36FdfnG`+Ph>ew+Af!~x})6_3TEQGrc zK--h}SKuFbdii@s{(ZxJFx?~A0#AGeSUwehvg z7902Vn*IWE54Vq}gnj(mOVc7juH+eZVi|^8h4qtqB!QQx{=9Cz-A&VbA>I2Np@8k~ z!=_yOZVl~TZQWkvA5)J-;wLZUMi^XvS))Ago%aSLhp>P?Sz`@aDz{(`ObdAe{R0 z(`TBvGzPtJ@-hM+6?iEJB|LWW-tq>$i#}aD>fJo#H=_)~T=v(@0x|FYFysl*co)dM z(KstQj=JxqH{8$bj_v_{)c&)GI3 zn|)an#jtBS4j=J65g_N5D!OoX+-i=X&zp!@f{R|P#BzlCm!;KP#KAjQ8M{doo1nS7 z5~d?7nl@d7=IlTa85;*32t4pXP>*jD@WTG;Gxx(?0Yyx#S*&Hqx`ArvQ?{f~=PuyA z>)QN549~Ye{L;WpJwZ+^LI?eMow`{PItUz&mKBb80HlA%lSq8#P54^0<8TanT-m;I zu&uwFgy*AoKDk0ZPEr4ZYfXZ7H_^#X3N7WW34`9R*PVf3yQfzXT(2g8df9Qc zfT`AG;5TUr>cE*?poZ7McBFo~IoHh6Hnfuida!+*SQr{IQoG=)2;5P{-%?-Y=$KhV zYmr2AQV##VQGo1rQXH}0U*`1u)`|#i?YCp7PJ`i<*!FRE5OAAT=Anm}4f%FPM#;e5 zK6mPTY0(o&%Pf0A3{n7Dh*q@n6L-ErObSq8y^E~>7anL;-*M^ z5ZI32lZY1yc?D^Su)nAF(6jeV?Cw#!Cz9U*+d%Ptrf@C!ujxHI6Gb}U zvV~dm!SS%5i-J)|{LP_7+_3^i_(^7~m6+mtY&CV(4JtEEIKr+qMgen$3v1uT8Wf*S$l?FJ^pn0$qL}@B}+#sL_dJX9g z5j{TGOnu+V*MwEnv<7$y!|?6#jIl#X$7sK^1S2)(q9}(NSc$~i?F!2pEp+1wt{FUz zSt)*C6Pv`59>ZG7%ZWaz>W(c5nRfQ^1;HaV5Uc^!^0$j-pR2SK6-z=0#};tu0IY~p zYl(D!j>tLeG!;VCdysltljHPQKfprJSxt(nT9l_a{UOwCiMp+Lknn>NSmzJNj=X}* z?rjIfLBkD)*OfYWu)W`5n1LbC!PA&_Vo-(|1V0{TA=`>>Cj_2~QniDDkRihtQgP)T zHO5sILjcr>(I)3VfTz~GH27dqKOaU@6R(dm0y><-@_*o84z$o7Sh+*o&a)ZK8Fd5K zn&JD#O=f~k1mFlErqU>;V+JFQYuU$9ekGoQX}-X-VXy*py;e=l<+mqGpVz2bEp3Kf z&}fXUGcP&No-|ipZL?ej8pOzE5JLEvXdUq0C}nU>d0o`YlX>10(F#GK8dBUaO@L0} zmJ+P_qVs%|$+rNBJPyjl^j;Ju92cHrU@HPA76S=Pp{&>*CVCS|R)umqZNUoh4M^8_ zWQg~jJrn4i-B8))U^t#=yC6Jr(v8NnsO8t4kQr-mW#FCnD-m!)NC!F!*V6a?Rq?M$ zkUDw_?%D)vuj6gpvI~owy&$3w>ft{bxdxuI!07t!jc4kSxnHpG+^2&nkZ@$rawrlL z=j8N)doAp6CKl!1Y0-*ET=b*(ypw$ zr}UTI<^KmmJ``s{uYFjU1dig(G-xIKwI|{;7upSS zCLwIPImmIq-X{(~jK&VbPXPE5?k?eP?`0Zv&CKq)V6=j)b-TFK%t%^zCgHSVx_B%N zHKz&h)1AnDO~n17oB(raNeJpWSILYm>IA4pM5q6PrrnS4pE`V%hI;d6L`bI( zR6+rePJc+jS(GlT?GNZKZ4rWa!U5`**o~_tb%bi@eil$ztN;#%_n=LM z(2~_cm!;7-VgYgvy*6#H*$JKncn}l8;BBo`$()d+Oj2p)W#(`wZ^QB(j27^)f!rzB zOVB?dfF?Cy*qZoDobmP#+;v0F;V41mtmbmYU#m2CU=XzPX*$E#>H3;F0cb1p{rIyq zgmJTV>Q?4%x(7Q9wUl!#ZiWgEa5FbIF&~nItrXx*ahh(MM;1}o$rU%|BX-C!-Ng4) z7ip6yoW#eXKoGeD`BQU@}rekg<^t0pW ztpR06QG+z&h0d-{Vux640Txa-qV=K!Z9CCuwYqLy4t(4w$1 ze`FA6PDEHKU#=9E&(=0dix{yxeTXsQe_aEfHAYkK{@MA_b$I%+N01EsI`tSg0O3XT z`}q-!!yIQ=Q5`BK{Wn48yTDF`AibeG};&v{HO)_ zEP^=)vLVcyQV$;eWKn_1V_tqMlN?eiIV9%)-zy>#Uqtv!1cg6viaM`?7I>uh7e*Wu zEeQ7~5~k}=yUsr~{Yz(}E#mSzA4z{=nJVn~a3$FQQ?J9w3I`J=1V<+*omdDdXd{DR zx|}LbG+_mC!I7tbU1M4!Lo}kiwmq47t_kg^-eQWRvGWmSaZ$^b^gX)Mv%V;cLJkzO zG{3iZ_Kr;`Jq9Su%}Z3~fUMIU5EKd@luCZqJN6d-# ze}VrvFaaM$9nah3#tvZr+W{yxYKl{f-x6r~vV0>wC^gkIs-Ga8WR#YfQ5g>SX7Dm= zBoR;C{i6nb&L|3kzS7IUOTnhGLab0-I(}IzTtxVmDI;SlLQRrH#^#Iz|AY&gBi7F| z@}y{2K#{Tcn$b08h>TI(VrC-&RY{(4fq{(C>OJN6$MN~=!L>)pC03&r@|t|J{3w&w z9%28($W@Aml5%kjy>h}NHZQel19fvpB##O2*DwvE=yH7Wss%{H8CEE+72Aos{mqnZR&!CgbA~Ljy&qQC-jr^k36yNNSY^*AG$Gl&@1yY9)j!tW zbH?OpIMKT|6f4r=)fPd9Y$}>s=`Sqqlakib{#CIYWwFaN^)7>V|y`p+jS-cawFl-&3c<StDIHlCvlo zShIQht|!Sy@RtrH#S+X-Uc4Or5Lx2uy&U|nH(Om_8oR;tJ#082Qo~?>37`z9pO0^X z2CFo&$@=vr&hc}>5Ez z|NZUW?GB!qd1m*bsb7c5RU~e;siKoxMQ{~gbO4vE8UNrUy4=Dg`rqDbd(7kQP-XIl zYad#>d89l;eDJehMS>3jZRKm{G`Yz*4Xsd6uNmFc*2--H#A&Qm56jnQOU+K;SH?eo z;puGb5)WvJjxtzcjE4+egwKQlh$NANo>biNfUC;v)vRZ{<#bESr7R*9H1Uq=ttUI! zmAF%qoLV2w{vU1UWw8AU1a#uxtq;kb$0J|~;hiFJYrVMhzO}ok3Yqg&ifuNc2xD!_ zv6ahw*S!dqA^D(-MM)c8Ye zjjq_qThi4+Fy`7pypJVdWP=h^E^37f35Glbne+tYvxX9ESjF(=Ir_ugSgI7*nwL~X zY?Tfec^U(VQfH;NfaBp?o&8x`Z+h0cc1aq<%<$B?Vyoad`O);MF!N{TOcH{B9XvfK z>?QOaT=w#v8@;Y?#6Y!Gtgc^qG&C^h28;O=w=IS%&ib0vDDk^bN8KfTVpYRRzy2CO+{w% zm`}|zJ0{wd?Z)*Lm1`lR32G>`N*ab)bh;a*h-~4X%Pnkf&oM`ZoiweNT@bY=A3kvkj-1I0D-EUluos|CT#B{v-%f)Oi)(-M`y%F+(j=@L?i z##(eSZEdb1QhoMRa)(q4f6=v#2jptD71@QNYY4siAH)PNlSfbC%k~Q(j{Lyq7+4J( zzCq9?Hs^y}a^q;8FaF2cY3d3Y&*vyUy2W7{^)hHTl~EK1&z)kGpCNfJBsRR%9TG6^ zK9|xYPVyPa^ih@QYXT{ofa^f6rJhzVYs~JN*)?cBB1HDGoH;D#14U7QnHTXp-Be98to3wBMF zPO_0o4b&^8V7O?}#7f}=dZ^sa?MnY?jO7T#AqsqCG8J$3eQSj37V7qo7fGA#jC4pb zJ24)Hi39=A!d$;xl1{(LNs|0rEBiNG)@`us^nz0Dqqfh3R8kQRSXq#yz`{N=hYf+J z^o$gg-vlT3fcYx+5CLs7Bg{I?Q(d)l!iPEr+NqRaEOS*?GUjPo=7LXgVOA#Kvr^Sb z2<1bdRnnj~VvTe`7E(q(HWGpFnk`q|3QM=DUyIU3vx)p{tR=BE^lCK`iUWPu zk_^XRX}utV8mmoHj7Q>>ILXGO23n+*#4jd6*>fg%vZLy%vFOQaIn$k;Sh<>5jeRR~ zlV)|NYX#2ab?3ARu9rJIg)}Z{t#P#EW^$8mq`rW)_@}dSECqhuJ62%$_Y)RrFjjuo z4qVw!&;Z3ukMy9y1!A${!8X@!UhAOd#I*Jt+$lrxj zRW|QkiKXa==4_pV42Zv)1wwH&ptu;bsA-ouxZ53&u0eW$pIVGhQSSQ*X%eoUu1=Hw zdl==t$Z(M9<$Hz?-O4lG2hm;$rIsP&a2E>g$!QgHJML<#=TC~P;T-Nlw)|=Fq7sxI zf!O2*r8TW#)e8HVOyV&nfiHX?pnR_ zg9PV-^Uy=g@r`DbO%{<%iFPi25Q2-zbx7*oFctw{ry66(a%uEXDV5U|b&ZoEWEy=k zg+4#}q+rqw!Wc3gdddp(V~64<-qxQx+INLEoOr?K$YPd1>)3hNJ292FEQ+=Ad);g} z`So6+v->I8v)cEB?VhEEpttz*&GhmzZ4^HqDvLNR)if5g;}QsLoTnQ%Thn0OX3h`; zb)Fe{O0p!m+Qk!&3OD?+MNe0JKpmWh0urmFut_Q&5!2dEsC%}>uW*Zm0V*r+lybr& zxEaNGqoUpuhqTiE1+_6}mh2gLFOag#YEtjd-Se)820=~TtzN(9yhG`TADLR_mXJ#~ z1GpP4Bshj&OVWwDG20wW%`H?3HjC$sn9^AXu_#GZA@CA9aN_in2#^w~kDph(XURbUYi15h)CM)7XJ0P^RyZD}C*# zStX}2_ykU`-r;^3h<%s@T_&YLuvG|aOIaj}@88bVT|YF}*->9l%#KV4_;=(r_LOhs z+X^E@qW?SiC7&hI;!J5~h9oQQdEetlPK_*mTx8f#1s>!*CA^H#W#!SD;Yn;O@%sT% zSdzTw;2Y|O)T5K1AcQH_`TJ*rPK}DJ5lZ=Cqi|^qVxfY+2I*RrF${un%l($Vh3&Nu3eLV4^X&**I$_-#!1>naH*F z9t1}b<{J3a1FbZ3UtOF0?Ch)wYYK;vI)#N$r&eTQl=JHr>oIZxJJjp)RH6t+yicB1 zat9DH2B&N+0zYaJ`YK2~u)pW17*a$gbLvESB-`Oj-g4-xtD)#m#24L zJD=5%RG4G?cmDWu2`A-nQRR6d6*zttGn zh_5U8ScjJ(Np#wxhHn6g-ZWW<_uzB!b?Xn+M(9lmYVFYJA{3JehSwF>#y3aPNMQVP;UC!<au13k{Z0#;8UoiqT-mXhhA#Pz7u!Nx+E|*Ph70nhY=k*NNnf1?S%|ZH*#t{-vvM7$f znd-X-j%$8feh@8z-NLSU^e}F&JRr_?NpsF*rP;)k<9JbV%xvRnFEvSG%QxLK!W6KO zMS;;Qy8Tryp_RPWXRzxniA8mfa{X4}7|JY<&mDnfd9W{f1hUO)h#LD6_5#W=g7rL- zsI>KJGMR9s#O##J1?bto!~IGH%>W&{ag$f*Jrh}TrN`Eo9E41d2HkreJbXv?>C{@l zP-RC7tN>V7eDIr{-hvduscjVwUhu4-OsbD$LR|TY36Nq1K_B3p<_8Dy946?XmViA1e5;VPv zHARwA9}3;y^NIh94CIxPVB~Rg^%&*Zo`aL=_H|?O738N3%vY1KTtYs!ZDKGBqXG)Z zm~pJmB-^v(6x3kEN#rHMzY$<5pdtPtO)MqrUui76Wl-$CZk%+9FX`7rzuW0yS$vn*BflD|{ zYGL6Ie45~}Wrc%Hr=1kLxs2SJB&$8UZ<IzFKpREwdEooKh{Mz!62b z6i)@?9<&wjAr{WS5Cs_xNh3DMC1d7YMfe%MHE6(OIE7C*WU|;vJK)xvdCp zFL(g%Ak!^4Yr|UY3DLh-lDMGmN^|aH-pH4^lt0jU#!q`^tYSAsRy?$s`PZj{E!7bk1$<1D@;}nzxnJ9N zD7k;^NHesg=lIG=T(Fbuyr#AJ1LYXP18kE?;#ku$R|kV@Z&vx$Q5J_nlwDc1@Th~8R!YVU@PmQ=haXnd;dsQZv-Y+Q1*~JknYLQ~|v@$wuB!+>b zL{|sK53t)Fp66O+6JK33ZZ|Y`R{rtzWh;sM^SBe2{gh^`Mk19KNj;4RP0F_#o ztX)WkyJ>=?)b^rXj2JGbA||uB0@+@yMw*Y3a?bpS&^&3L6YK{5e(0;G{K7KgQ)6@AN512Owt}v zBMWy)kHFiMofs9{u$8%w82w^uMa*DdnZ?7O;z{S#KJM6$LKN;PAbX9R`fg0^^Qu?3^#VyUHHuD(P_8uQY)@_D`;cZJT^mvRF{7;PZS+? zs{Myj5X+DCQ7o;+vI18Y#Dj{j^?frPC6Wi*?z8&vr~jYI?)tgbv9 zKBD_m3fW)=oNlC0^u3ms(X5RveD0q;zj;R594nmk#2k~y}q6^DaTk@ zx)=SMEohzT+Vjr(WY_#nEvUa^OOYunXM`~cchyZWR0KmH-BYyUW?V0Bx;-b2$G#*L zRTlP6HIK@;J*giGxDbGT{Bl2{)I(L58djm3KHKpdotf-+8~am4)hpEah9XkZ*q*Ad zf$WnS;9BDLk;t@aXBT*G29A-Wldri8PalhntUa8}1kORz9VIYX;cb8+o7PAS|1mN0 ziC)*`MmR2}_{52kMnD1BeiAsoNF6lMW}1j* zv|A5{8hK2@7AV`o1x1hcPf90%Xv-@nMpsC9VYY5MIFy`-!oY@^Cj+b*JZqu`h2B4H zUIo|QRJ)MPkd=w+6SFAd%(FTDq#%s`OdatW90FlVY?kil0zSIO(slRQL6K`AF!&W^ z01-6ajuh48@MfPrGpj49&tQle%K5&=j-}q~9E-VwY#Z?_Xrr7A5Ro_C5B(M+LHZd1 zv8}aJ$ctq^0S1bwmdWZe%$LdDQ-&cw4r3wzgSyP9S z)|6ARD{xS*f{mc23dprII?ezJyLtmH`aUUps%w`x#W&)g)k%}oiy!1gF++^!@O9t^ ztLKBIOf7ZpL8+y=bjp~I#dJ=2e{>p)l?>URfCsp9QYKbPmf*#cvuZ2Rb(0*=6Om>r z1&|msqh^P~fLcB;>&E$c^6w!CT1dmHpISMCdJZQ~Oh?-2 zaL3DV`juFob7&J&s4rulfzLUVO(*|>$0a`^6yU#@FZ8}!Pv6B3njX_Z~v_iPv@!AsPN zZfi`I(kA(zm6wQH?Hu}(dPE?Z>rAdoEObSHN?r>s5hbHQ-|>i!cERJU`X2dxhKCMI z)|ooFwUrtq+i^#%ONE_lutY5mDQ#u<;}?UDiO}$Ya-TFsci5$d{^Lrqx~-|^prg8! zU_Oef;W{9Y9Z`5s<~^05at%XYwK9abCDfMcmbH3`X_p`ejVm;E+=O}mq;w(QM8yb+ z`6m-xiLcGn%(#giutfQJwasffn*;)*^DG|YrKh7ud+#ExVSzre7*uUG2D-nVs(8$} zaaeNce^t$&SXf*h+yI;J(SQa?Y(%Xi46OWNXfHE3`@8KTT@K) z$p9_9QP5!$#yf%u8#k-(!9t12llx@I$*y^(djBrA;^n-(?9j! z-b-`D$z{*a)=aUP4kN{E)#FsNw(vr5kDQTSC#IM|1w;vG@C_Eh##AyU@3Jv-HJ9d104B@g-X#f2^B_mPL)-HLmq=Y(%m2omj~iM zIgYEZODgn+9+kw}Al2f;_r+&XDU1jiacTyvAs@R5p+=9*?w}#$+aSL}U5f)qb&Pwl z$OHoKNj}DsqyjXj;h2meym?lakCJ|`SEywHajgWgh`5bQa_R!dwV5hC%~`#Rs)e_v zB$7s%-xS+QRN0+!8!|wi(`hOae2|Fn7;9Q!@5Mlx@0m7 z8z2Lkn?$AUo4)wuP<*kRO(usiPRCD(Yg8Ee;d4LEGr9BKL&H~86Y$Y5~O@GIccF@UT@pwZ_bN{|Iwy5wB7h%czo=x^a{?Lzx-()()=^vK| zmpK!`8sbrKB%K_E!JIv-Ko%5=ts-G%wc#1eoQj>Wj(#j3+bNne;Sv|p(qoFY3EvAc zoMuKwqGDfu9m5BIqU&)hi*)%4CI`uj(^tuZCCDUe;3D+sv5H0)jpi;nu5(yB5{`dR31e|cig9`A^ZymZH(5Q=G#?swAkpoJ9I~l zAZg>7zQuwJJ8!bqM7AOKd?;-2nhbV{PT`b^I79b*0hoC!+jBj$x&@R_Gt1h373BuWvtFa;0U0jwD`xww=G z)QO2t@<=JI4b^X+da(&gwQ35H6uOdW(@0v6tjgdCWo|)#;uoKjYhnNT6WbMAY~ko> z*avZmyS%3GqYGE>Vvh?hNqsXp7aF$ys9dkhk6KSvJG~8KBWK)BOTdi5*2Rbv(OeZF z>bV$9pqI~mLr=a1$`S+oJ2I(o7uIG2TwfdIutP4h2N2RR_FyU2r2_KTf8qQNs)cw^ z#;c*Fk{%?!$Mj5UFb`c`&V)|NlsWNZjL%H5#!z*fZ*}z^d%HzsprN{wiwJ@wzblg8 z>HrP!Bu-Mjxru?*(;IeK;NVRu){A>JP2>S=D&vy^&pl2Gh>rSA^Ai@{a~j z-mX`BGJ(+`uKd*ph$S0oJ{1;YmU`^uLId$k3%o(B8(+57nlTz#SSyjS1=Py@)PfLo zsc)13&Oy*YbuD>AHMEIW-}xW|o4_zLQtjc?61U}@L+?-@v0+h#^i{Ka-aJ$-iKcM> z1wLdoC>IiO$!+?&*aJ(v&|@|Ti_Mc$RVBrC$XLe`()M@ddByxw@im4@aXTtFw84UX zUfn>#%b_9T`Ob8Z1>0tXau9le{hR?mPt|Ab;i_xc#A4h?H|szdK*V0JtEC!GEs0p3 zZ6FpuX1V~D3(=0mjkcnZgd={6T$rNJaxw|R()4^6nh)mnCGa&0yTfj@zGf$7EF9RV zxHo*rd`C z&fDb|L__F*)gvDNVOJpGvz(e88(WLF=d=0iZz{v=-$jcV2M=PrVG){bSfe==HqKvX zA^wGP#483sY==h>$_M=7>Niv}_vG8v)WkN-FQ!!sCp*(DmX1EAXv*$N=OyL!7`Yz= zb?-KT)K%qVolRhxYK0olL}GA8k*wMr5~er)XH1ix%+I1!X2oqNmGy@xClKD5s654@ zOeP@YMg4K+G`9BAj|SurG&+U5D5{Yn`mQ(!6WUz|nM2Q!QkjR(wNI>iot->pDFjMW zBI=gqcu;@G(~H-@kJe5m>1kj^`kMU;L3AtlZkAy)UBlV{e^y^5GXxeX*T$%pgXVw@ z32P@S|{ZT&xdj?pLGwi2T1rK0*=%IpNIErRZn^4+Uk% ze>ld0_gB*v_Bb$w^=leUMLo4D4b6gv0*l7nO{s>2NcbCiH)=9tOx6rwSP0G5B{X&VHVBLVx&e>*$Yt11J>1C}!!MhPyax zg!Z23zWvc&Uen{$zWne6Lr}zR59rf|>`D2K(qHzQEF9LZc}&C-pVczc2i4=MeJG=*XG(V8_7m zYl87ddfP&2%y(3Skr-UjP1FqdAjur)P)3KHSB1*Vo#}mod%R^VT$piI&CLFn45`iC z{qLgUBGhUSVnfPR#7&xd56h;PwEi!H;Pll&5SjBC7CSKVEBu@EEUocbn|S|F8FkOY zK->f>O<1sVna@^3wN}QgE&$B~)_niTD5gf91{gw!##iQqS~V%3taqcCLV^Z(z+L|7MM+=q#8Y5MmOh~S z*?IAPGQd*M-bTY~XNm4ahreykFCrJrV=C3OBw&CG z^7}ZElo`Uq#4#TgEMn`=3HVzGM$OcQV$<#AF-Yi_@mB_xmGZ?PEh9LS=x+0Z43I`m zz#EL@Ek!4TT^d6Omb$=VRW^$`u~BOG+K5E5@kneykkI|gDe}OOFl)MC4zMa`QafX- zaH{}t92jt_UHv7+pPIg{;vvkf+dplc(M=vx+zykzfM_6fUmpyUbLp*w$a~hzJhqw~ z(=~Mfk(%-euI>Ff<~7QE5HLG1P@LXdu@t-Tp?+9o1tXu=pzd!kd%!h~6n=tIyg`AB zi_O@v-#`93pRupNl*g_x+M>K~MLw^+PqP(hMQuS$R;t851LM$UZ#slA>s zG!}d($qL(3i-k^20`1vz;KgIpZvV;l_WyI z+GLT6^6vo@IsAq!oI)pKNMWQ%)<%M2sND81!rA{mPR!T5?Y@9VrGE5OHnr*L-~s;D zz9qTXi*2b9Aw(6lE(@T%&vYi@(l+VFEeSqi+FEWx{I7Jt>)ST6&9@%mXZ1ORohG01 zfZcg1022t)^%FI?^+`a-GGPId=Wd#QydT`*dV3N6-e>(ZTbcjv`Dhays<1w8^W#k0 z5C8)+3BdT~M~8c=X=f>+t6zXw~?TCi9CQ_z(u+%!I=xHN(fE zqS4uy2NWwV1v^At_SL${ei>V&{WL5Ucl91!Cz$3S$gXABO5hhBj_D4Pfdam2cU<~8 z`#oQ{AuxRvda1 zbIzH{ByNgBgfq64v_+W1n?2`T{0og0HW-nfqY%N(V8*`r3F?ByhBAr3Fec!cK~Q4_ z+|c*UEB*7{9@VUt@Ndn)oV|%F;;bE~ckan&thNU^Iu4wKEz&gT*aDM(7j-fesp1sdjI_A>5ppJFJ%7p@D+*s~%!M8S-$#7kz2Hhzi?W{0>+m@RCM;pNQZ_Bz`TmAt zpA6H8qv@m&eXCZ1hsu&})oT0Bj3W~hZ8i+v3obI0zJPZ8`=yN6-3OVp0L^C5XQ@{l z|4>+?O(F?>L70Ea>%r6=`&$BF3#M_^^Y)k`mOcHK=1+9GM{tv!1}8Lp6jHY9HRa&)7q1`8f$oQ@W`)QHQs^AcEU zdx4Lg{?CVW#y%q6^02K$rjIK<_aBsT1nJEy0_eC2i>erk#NN(z4a5ndqTG^m!(051 zz}k$>AzIgDFF^!5H9b@RwiU3Mfk2yIv^P?G^TtHWBO7a5XXFMAH^2YnjwzKYqbkfB zhnV>K3?pc?A4)8qkj79+C$m^k!8JHSsOF;CkWlcrlfuvp@ZVsAp9ZY`5;E74DxaUyPHwS*X;WaXd4;u_xH#;%7s5z15LZ(?*jap29?Uv^D%g7dJlQ*_23i zSK2osOD%JNwP%uScKp?j6{Te)PAFjgS|l)o7zh*)?54HvsSB1}i>mfUE#Cw8i}$>n zb&O?XoM!ZZWH-SfB6b0}W(M+-&xi3N4A@@Yw9u2GDoUG$RZZy81W3p*4+SucL|_|i zYEAro`7Ce+#n(N`sSE@OVpMq%>^IFcpncf!<)M+kO;e8P61fXKZ)Sf~Y6l=sxQU%v#3~ETP zwut3FM0j#TKq*wl%GhN#8feQxaOm0qwOtT$MEHbNX4%;RLl&U3s3|W_F z^0uLShnQ=9Nm9bG1jWKloV*q`An1Q3<<}1vs`~QkMq?SZsY-qC*T9gvXft2+EMRAX z=%?!UF4`RHsK8A2lcwmbZAt_q#TKLRy6NQUe4%KYR3=_#Gwls!W*@;`h4LD^o zit5rEqcd|zm!rbo8;Z@)jNk&=HFS4oZt|xMAlrF-YhU!eT)l?PArxzI3GKrI4UV zNBRYvQ;hAwb|93oZ3)Ov?kX$`gs@ffmk6qokbqUs3b(t$mW-LpWF! zXsienRxi-J`tuFET{YdZqtfCV3q)dYO${H|Gnb((s7@(2bQ)@y19=-77_W2uYisU5 zQSYr(>!W$^xWVyS$xm{aTSgrQy`E#^$l_FH$v%Bf-TTEF)ozqYt`}6-3UHf5Z)dg;(sS#-f!J494L1M>$Bggw@ zu890#)0Q8$*t}2HopTV(z|@#8QAt7uQPtuY%w-&Uk ziqxYqa3HUvlQczaPT?!{m|^fqIeoUC!(;I^QO2YZm60J4Fl&*h4D4DBG2zz`?GcG8 z9RJGDdU3(qxUhbuID9zog(W4W~h$EBw=VV7A_50i-CLGHBWYUuB?!`<$Tn0}&a^gTb?-ffco|gyh37J}{eCip& z#$rS=(xxEc{*!!E9qSM*R>R0@Rl`;wa1P!!=@HH z7C-TIpIWC^_#TKetHt`RET-NbTwNGGAPL`Yv^0|1%(o&)u1*Y7*+uKkv=I&xuT4eQ zg_SC&?1TIIDhOWG$Y#Yip@tx2>&XnoWeFB}Al=-qlYs=1C~S5%!VQTSwPEgm?J+6&3zo*(i|f<4&QGrb0v5UIo>O=8+*D|( zB`^|taR5asGu?v_Tne%qf#*a=EQmKZr_`sa!+*6hpQ@Q*@K7|7YO#V@g>&@qW)2bD zV3S){-AeEBto!`f_pi@!k1BjLn1v;<-bp-`;f9(_%~bK1oUtPvdO`4qY!(vd1gqA z**rzej~KC3B{buhERynX+sdDgaXUGnelT*NKgk+n)uoWK=wJL;N3LkY%~V~tBFpgh zp3YZF{m-&S*6Ba3$~uSwcHqbtuF&%dEHd%wqc`Pa98Lw|pvFiMO~yt!i;|e2uIa(- zvY%b@MorwpUfMptUxQdx96^``eAdBsi=XHo7hdaH4h;!yzq7?Hrto%p{~pXP4o`&p zXB_G>YGW%udC~bXxf~3bmPGu?x1}vSy2v^F9{MjCcM~q z!$rBSx)tR_bzp9+^)|f}j=s%E^pgB=NNgcprQN8L7)gTbwb4mf z}1*X@9~Z?$@vWPaUx;(BcR-d7}(B`+&(PQ3ZWZ0iX}r5KI|OQ zV5^E-4(IaVyJF4OnkWUzOTf+v8eHyb*S<`_escm}R)4mBKi4SBJHD zPhcY{cd0j6)l&NDrt5jgO|u=%sSAUkWbj1hO+z1>#Hl~S^D03e1+HPXa=8 z7=2^ct0c*gxh1LSWc4sz{Q2-6|BLXoC;MxjF1<05fRtte+VY_?S8pVV9&^a7&**|e z|H7_~O~(?Du9ns)BV>ywn(jrM$lkN zL=ZC@LM>+ORkpz*a**V3a|wqNdvmK9aQb3|+lLz*sP~9fI<%(9$gC=KG_&XwuVQ{G znO2?~Wc}vZ*~Yks_aS4a0B}M}SsB}){**>fclOn0XZG)k3@?OZ_V0i#1U+LL_NY8n zuvZ5&Qy^sn)yx77=RE#Ch5QQ?$`iprjn{57opgnNEcmMoa59dL_G~YWZ7MdqN9p)| zx_T01)jJpT4lD|*fo;rO55;yc%_P0>oicPjjN0$EjUU&QZ&d-tg=Pd8v=oD|;*XJNy|IFVkQQ z=Z=NQ6d5Grs(8Osn$SUd5f__lQpjv z14rr>&o~c4>GMI0R8`@C<4~s>DLx<{v3s@(?2?W9kkLD^S{ag~ARzBxaB(&`2+;ke z3+2q={z&$?G8G3(j2{0wKl9b&@^1C_iot#YEPnmHe*dy8Wlz$9s!N$ladIjEfTd(% z>Td_)k*bJ5B#V(X+@H^-q}uq=wF9hdVXHlELESfbxr^I7L5|3dA1jg1g2akFA)oU% z*7#vDrP9l@e`&v2%+VH+Qgfxe^Y`%!`cwWWX7wvyoNy*Zu7W7Gt3s|%cV*Oi&kbEX z4c0FuXAWXL-Mrbu$$Wz4uGf*1OVODhu9de^dAuTsCwIsMimqx-zs>iPk$tFls-cE& zbN(yrd$e&pfGv5|-jEkVUN_No{jQcyKcSLV3*oY1z+RE&!kQ%$jtIFv9V`bM(1GrepJrnp>q<6nh5 zMic}hto_5@pQf_ClZ!{H-_=M16=Et~r>06k%RIk>nD(#x$V7K?=a1 z58Nkbw2R7l$RSiT?w4L;em#TjRJJwp;pSK6;zU8liil%EQ&)zE5aod4E-&6okKc(g zhU43=3eHf&1KnqTxk6jz60f0*s5penWJ_EVMu&hxieNSY;`~SZ*4``oWdb*XMHoOs z7PxiO874R96-`-@)pJGvv+|Pq^0Xi!1!p2!@6S zvbJaEaC`J0VM>O6FodG>-`jGzTc)$NPEI6v%tX{LH=`V6Q^QQqfA>Yu9zFmS2$nkO z+&2odzooMB>%!E|Se=`Zvf1d*>uk~>%2JqK(yg?d;l~6B;E^GohkLpsmkBcvih;vS zhoYzatkxbuc4wQ{U5v7m+py4eU$9bP*3c_NDm0^xnFHL?9nKZQUsXmfsU_>D9b#E6 z_xUPT!iy49K$Nx~d_uixdBjiWoK~f^?>YPLq*tV7LQw@y$6&*GV+ZnI(p*M-OsVj9qL9(Z%Xb^FPPVl zU)GRd_#+l;?KWvej6&86CWTVKlrq&HJnZ|j$B-!fj?Xxwtakj2DLu+ToNl9W6*WgW zmRN)szI4TDhk;Ji-T72(Jd*(2k5k(PaHY4;>Mf9{43ELiLz{t%fhYl$lcFz))mS%q z1&Ds7$Qtp1{OnEBnO<*mZgpq9pC;~rmYt>@G_>N^@l@KYwmAeL29Ev`EGZkHS_k^1mVeJr!I zd~mvED`&%p4orh=L8&0tO1stAW!xqA*t5lA)PV2Gb-T9SUDNMVW1%STn~gkQBt1;& zKXfZqP6%y-8I%}w3p7$;2P~%kOHpJerz<2HRl?CJZC0;Ay7SI^!$ak^l`|T6sOgs8P&3;hGwG^j{6OhNyB1sq}s( zdNnUJihGb4ru+>=B{5EJObvh6cBpTfwNJ{9_xpHC1QB&`3|0H=*4>-Y%ZiwQ-IKht zjvM?YR%?&NUm0g;au4cfPe%iutsu0aG_) zD_=HGlWiroL6;_VHAtFCTnlpqXnoo*6oZ-u#JOaL8Aaq|>Gj4cs~EF88+Opg^=Uz& z%`VECpJZsT4cUW&{Khq8y7c?@e=~nCt*yHKOqqD_>A7#Qvxq1h5e1z6TqDREy4?@pTROovXJ_k-Ss z+;FJ<{zVJBo>h)AM3L^AR$XPE&h@>Swl57^zeMzk5Mxm{s${^?a+Rf-ere17OP3+> z6SnSTuxtMwx%EM;_9U}K z^w*8s=+LIDPQ1BI@Dr7i(2E!N+ol#owsPi^i-tFuB3U1N`L|=V;n1A7wFhbSLIz*T zjesN#pGi@=c%=X@S_%qq<$<7O4!~=n}-Yr*>M-EDl;4 z&0lE)T1S08LJb2anAef)rE>1uQ9*w+>VP+N_>y5{$0E+zQK-X zXYv!eW( z1&DZ-2lYaC-m;&p#h`BYTac%&^$xb5UlD-~?W`~+@rB(K@e`BKuFi<5@}9q*#?YTr zAMW6uy;=LMbqDooz4c9J>7Po&PZ&3;sKxT(9}yAFca+}rh<^Eo5wO8G24~gu3qiiy-Zx2Ntd6X4c`812AyO1lH5i3%Ad^kXUdiR?C56Z4O&*PJ90 zR195Is9z~|NUgs08Q992oetQ&Ng~Tx426JTZ9pQoy)F^CI4#)8*|~al859Q8K^HBs z5|TT<2-1$bvEwY@b)o4ZvVJkm{&D_V(zOjcbGA^>Dv!?xzQkR9RPjd~YHb zg#+!0utk{x#^A!xHY*eSf9-u`SRC87ZQ~x?Ex5Y`4X(l6-CY{D0KqN6Jvf9AG)QoF z3mV*m1b63kviG@3*g5aM^ZT9EUw3tV)pOLUxyG`&Ms)=Rs}w%Boqvn?rq;4%c{G{) zI3NT($<%v5zl8kx>FMD%@`oC_lGjm&y`=+4);KCcNw{ zuo)vwnO2_VNWau9FQR9dh=>%&ob=DRcPf(G3=_ugJe^w-zOmUbBHsXHE~^6t>FK`3#a)5Dk+3d`pk-nq#Aj)wRky>kFEFh%AjF>-DUqegLr=Ww}=a;^8=X83X zjae&%f6?x+uZu`P%3W4Iw)2|pE#O^w>U_TlofF@bn^n3B7FyfHG7)%%%G#Sn^-9ef z{I^2qtd)s4^y>ARHmrStzw*mI=C7B(>nup)|O-Ocm95$QbxF84rB#U;u!J2MB<| z3kXOI05kv=0058xgjy~QWi}K-*}~?$AzH7?bgqw?I8>mxkwfycd5Wf zgh+7+@K71%Ky?+!=3@?53IUXioaIkEtiU?clpi;Ct4T;e^KOk&hM z2dj4_>4I^{-7H}Hl9(O2EPlDa(Xcea&;9J;wKpfJw@^4F?jD^}W558PuudoU`(mSI zh=QoG^z&1ydFIft=PNmx_i8q)pjO&g~Q;(k!q!H>r z#Pw}??=!9ulvPje-0XGaK4cu{eMx7kBU;7`T1BO0zA82IICBp0=Do}-kGPB$nK*jF z^AO8}r}Io9Fs#<1QY{x(W32>r++@K-#k`cwezZ1)<1=lgy~(M}QaL?vjT(s!^V6MT z^7UsS*a1ZF@xVB7!}N<2>aZ0ay=7Yh44^{(X9Z!_D86|Q4geHF0RR|((Ew;@WMk^g^keg*TBOG>*`+aKbRSUd z5u#i$e)-ZZDofj{5za2FJjV~9psaxAVwFp?nQa&$x0Jruv1ve{y1dCax#FD{u$k-j zN+?jTPrE*3JmsHJ^~|o{06j2}9&pmMn7EK*1Eeavmpi}j*gYxq(r#uSb1rP~-6<>4 zl@G`&Q>$dS;cZIHxG9_}VEEw0K9Hr4ugQ3w5MN^pjuFgm@nZ4{CP+&AE=p26l{k%~ z2-v{*!Ba7+vY{#QpnB4zdG{l3ed@LLnyu_9V>5^P>WAXUeHYtW;i5hCFsK;kA2F`qSF9MghDw#D$U~ zy7|&E8IaD)tC8sNvM9@AeO{=DYv#?jVY~%*XJ1a(qmgYdcsxG8!dHCap9H}%0we%E zs9^81P(;a5E!&hbNxa2YD$63Z=6oo{n^&~!Nc^b?vP0KjD+`LoLkz;hqqP~m#^grl zHbV_07V#O6Dt0AGs@|CZG!QV=cXb%+;T3xH=VElmE4)OHhX}62FUun7(ZRT~XtZ9; zEy;I$3+^E$UfXLTgT*z1;vX$BHt_}*QnMEhr3BWn9et&n9~X4*Db60sd z!{;bMtF&Z5?I2NxdVEf#{NfwuM031)z9Gd2gjk@yeCYfPV0QPd3rKPuiJLpvnTq;uy9@ zSK0mH6*s`Uxx({HrjHqkmxy45{Np_{&4^sd8(jz{B?zUDGuqJ2@%Zv*ij#&SzEX#n zDam>P9OJ0y7@(3g-6y74{ADeAP8Ra+AV^z`OjJ$pj-Uy1aw3m)S%=1<3bgj>>Zr{qpLM}Eo2=i zh!S)VbPqGru+J$j8;Cbn^xE1oYuc1>Euevn*V=;S?m%~&X3x_7B>95BfX_Rbrrw_{ zs>Vn@%m7s*sHtW;Tz9eFy@&L8?A%Eh0kf+2$=RC7%y@H>UaSO+IWi?Y0^!$B@4ies zPi3Z(Vjq>t${(pU608|F@2!^hifXf4CfasBivXVu#wq@?b=SC=J^?GP6u|by;K^3x zsZc##kKrgho=ODRw=40`^!F6YLk%e!P3KolzCr%`8(OxG*Th{G8?PM>!-P95+3KcxGYafBY#ulqfH-|QuP_s8Dx^T+5XuR+d?0UiA(b6CF*7XDwEQxd0d zO-6#z)gpbkpt$)~Dp`icL+gw1Q-)K9 z?O0v-a-jaTy8t%9w723;J$M29dGrMldl|=jT7}AZv~vnw2eo)DYz2%@_o+8u^@3K$ z-ao|Ad63i~T@7x9INIOu+&+V#I;f7i_0Za5`(w>97B@ST1{Jg!s1N)%HRnGn?Y!6# z>kg1a7M(D4tyqYaw(a-+>_%8gVkJ%|~(0R*iDarKJzA^x?6Rk*E4ZUh{;( z(C&wnf*nA{*=p|b*3tDo!SYCGW3Y4%tx5zo)H6uU`Mx9kRWhFaB=v(7P-$^o!5ueh1s+k*YZgpPXGcqx{{gPTA z4TtwF;H3r(5NY}$l-Td!cQS`9( zRN?xh-IdticVDCbsfDY1anF^7005W^{i#B-{U;T2SI5?VjT7x&FY7_*&_}K0*<5AC zV*9t-!e0%%SB(lAt?ZdYR`Qxom6tJ^NVj2d~|kJy{ftf0^IopCoA_@#ear{8;KZQsC$3vy#*Pbi~~^4S!WV)cBub32F*Yd}$> z!RSJMRVgNQ4%_kS246R_D+5ykbugnFrrqz%8?6q`IfLb`>>(nrbI*}Y;Gm2I%-c6% zoE&C6r00@w=(?|Dl5u8`3oeD+F%d@?ynTI}JvqyAF8#R`i63sxt6*CPoqI&@XYTUR zvCrEehpDA&s3~uHk+(1V2I+&g86|p8={qJXc9v&ks?83uQ)PjZ$(AUFiSOsCJV*=} zCD2Q@OQRTERxLED3ku%zaHhT+pP4@{Krca89!Z*8+RII*&0ZH)A0jXp8lNCFJ%jUj zC$)Y|{*>PO(2`yvzjXldRYo;(?;F!xzR^A=7)jl$169JA`xY@0&*gsSr0OkUq1W$* zCOSK{qcs{A(WWKv(FEFRnq{A{?*asF1CB_7H73NPJU+tv3Bxr>w(SV!`o$*kVwv_m zMZcC#i$IF7zR-WZ;4AwS`9-u=VgvNsEC0qOuyZqI`L{C6jttXX(fLE>^_Cu)VY1_g zd9rm9Jsdgi4e$X%!`GGfmapfRq$G_xhx5GrKyro$g{w=*h81G!nNl*hz=>PtHzX4CXsAGUMQ9p+ zofWcMK*3nEwGS-j20R_+_k10*ImGFC?>fOQa`QE08`)d^$cK-fHRAzA#?ZKJNilsj z*AREb`ISde%?#)n)1p~h@!8lk=6;dziq9YT6 zw=%X6D71=v6hv!5-F0w-66Z!nPcxrPZWn?R)Y+Wcu;!LtUL4UM#ZB6exG4?2ggEV4_^Sz-i3$*mfIcGOe;o%9y8fnA}@S z2u>x+wCrsrJeaU|`s4*H>Nz`-S5`!Z;Rsra4(We3+0Lr~;M>foH@H$^gt0jLG@a~T zGv~TRU8>lR4*$dfh#x1l{gjq)56WWSBlgAo8-zkxtqk$cEbzIyiL@H3weW^{-Mt^Z zjV1-beEQ{@XM~O@ni#Uhpe&Ed;%^&_!1yr8^U>Cj1W)y;EM)~v#lR9&p;Xkc6b4-U zAC4HavyFW21)bDH)5rgEmXp6yyIwFKV;4FigCJKY99g@0aQ*30y zJ^sl~$Yo@MRAK1D%U;O#WA5-2`2Aq8GbTN+*|jeI!7N{@SE|p=OzDb9!tv+wpVd*0 z(uce(%E9;yyK(2NeYy6g8&-LhmY{<}q)PUI*ajx4aFiMcb8!cbREzzL3t20V>C}n| z(U&KBhoYigf}cbT9lCT3a!k3Wsg__$Rn@*#erVNfg%ZxB zZF8zXgwl6*oe|hKeaI4-*?|BLzA~>cA5C z)pxs5jiKH(oMRN{4`)3y#jY!<+gHnmvls#@v@VW-NX-p3_WK2=TH@A}V_~!)ap@h? z4cvN_tXFnnP7UXrpW`Y&DT8CMIt5n3koS|QV{T-oNG#!>hET)9dVb))%6~ts&!rA7 zr#h-s+a2L_2lrxW7)*1=1>;G)poT1WA9^|IrPp<~1h;arV%e?g@NHERTUyjTxZw+S zxmR`Vq2M1hYlcY$Bcks{+lM6uj56pgA~r>%$ZoqWZ1SPu)~FBD{DeYy`p^tVmIS9u zrtawVvzvAHZ=98Vg&+7BotDWMP-l>VVMzaZ zgf^%`Nma3wtOof6=DncGHcLO0azYQj@vs5V5P@5yqd1$2(%^6X~-N+npE0%w9+s!{%mLDJ?0M%X*lamCj zhnqOH+SJL4KXyPdjfY?5BP8D@g&;m73D=h!7HP-IX7F)bbBXU-?=!y$&73{9#SKQ? zAn4zXi=<5QDFWVpTDlI~LKWE?IP(wf+tE~Lf=A{J>6Bilf%6O)$OKYgQxb-JboT9fWkb7!DXG$L8QlPsLDhgYAW&+*|lC6W$|l&Y4bzr5c_AWk`ZC= zaM~*V5pD!fXhM(4XmA-ByX^Uatr?AVQZZpA$5?ume-JO?EV0tOhU3@J^17|A^l`{O z=Sf_+lG9Yt@%U=mvsAgAv>h5x7$&?{SD6-Tz^T|-O-39+Rkzzly)L)Bdk3#qGbfNz zx84#t0W)c5d<;b(!J~XB?R4jfwiucX106k%Jw`EnVZp4Tk^$BkMrk7QdY6DsnYt93 zA+b{C4Qe@r4{qap7Tx4%l&-WGL1K5m-3KN}@3aGK$@oJw6bG74z||b^o!iOgm;w(4 z6+@+m6!pwP-r-v$8iv$Q7{ir}-0zs_zLJpUKfk$6E@gDD<=wFg4_6jIVra&-c(I@w zYgOz~9NL)uPTKvv@)ZTp1ndO;NODjw;(bOq>pP~&^-4Q!+~u=3K}tsknnfc>iKe~Y zMMI+vcSCV51JdRR23H?vK1~FwR#X!)B1Z7*;HY`kG1Ff-7-}5cw+F~Q1Lm?>UWs>n zVzUBh^di-nK;Notw~SnVIU5rud)Ej~Y6Jm?AM(NevmUp9P+i7V8tGb%AMMKB!yhMT zDQ%vp-Jl6tE9AeOp#4Xq|Bvyy)^p4l!3Qum$l@23C6^5oG~2O)hC!7squQE0a-H;j zl1^1D=Sx%#gt^wz=N`snDJRXFjh^c#5%R?``)xdyz(9-iELiqu!aKTw&*$wNgGe`1 zuu7ic;pHLKYc%`1FwUnKWOCcn>v$+AetEs(Q*Aej?J1=$R#D#>|CM8SN;CMItm;br zaLt@-(-)hFNp%b;YeEy9!1G09^H*HWFkLz}(4#BH<|RhY>Gz_OOXCQpf@9!6Qbmx{ zz!C>G)hqLB$=&g(v;+?G>&ktIQhV;K7^}S|vuSKMk=qtn4n9(_4f|{sreSUb;_2~- z3JgB>O1gj!Eo2cMf>-*PxH{6vEWAksr>iMgfad4k(Klf1# z$k(kwiC;@hq8RQ!G%%Gr%8}WDWEFZ}>080I35SU};;=|bU@k`Mpk0B6ZJOaCHcXRu zdVr1^Q=-c@O-L zSFFJvvi4LcJ1lN+8Qb7aPkN(AlVg`?P7M-xH68i#07x1`o<>?M9rPOcbPnS}qwMuQ#RX z6GA*&nc)@AReCNuGKM=KWEhs=8}%}mUGXGTwUH9vWJ4(Yx!d}qRhCnl?1uR92Dn31;B!VT=XL>$YgBqWct_a84`>-3jq4b|KBMx zR#Cp=DMrwe>@70V0mH{M9;rDBtFIB1;@0fVsC9FpPA68qfV>CPh0 zmx_6=p}*yQhLT1PARV2DeWwoP`2p()QEZrvLBp0E!vf~X(7;Jm`m=a^1oe4JX5?wz zUQj^vFENr-KP@)|i>)!2EilfmBo8flvpXGA^Lb*%b0=!u%l%qZYJq@9|Md0eE`_j- z91JK(d~59U1otlsy1tlDv2fK#EP@o#FIUC&y_M1k&`q3PLPiS7lF8cm z#;V}U#OuN;ZX=tbOW*S4g!G8;?HU99%G_MWg!Eb~>!=V8m~Y+gkQ7VMJ4A!!AEO*` zt9L9X1M`y+fPU__>N%ITDA4KBr{y%RU}Nr!Ve1Pq zCJ6}a&2AC{aKjY>$IV`ddn-=Lao)}W?xSAjBRQ@)e|sM1;b(d&^4C;egbgO`Z-SK1 zI)co-B^%tWVfCgxo~z7FnG{_?$$fi{G{JArdP8EekXjycJ$cf?%y++b+HrR5sp!ji zrEAVcv2xup=eg9ff`Y(fjGC1!|o7E5bMBrWE5r6d> zr=?D8{Dft8NSndJKBeQBpe@YY5MKAa&lBxwLf6@7;j!_!_)?~0NN7WwLRIJv++e{X z>FEqBwoC6XP;ih_j;bedYNUa=H z{9u*QcLe1H-7SXE4JC)efJ<={fH6lHfepuCfksiHQLr@?m-Bv7;O?t>3yh-MtyFT` zk~@s~k!P`HMVt@kNp6wt^028fgm$XF-HsZdm4xpU)U}M|rdDu8GwcR<~RYWM%8JR8FP7KF5-$qu*tLySmR? z5NI#iPo7a`A64O?j*RvsmVgl0Jeb77h=^*+pvm#4V%=@n$l+hH$)`VBM}MCq%E=s- zmoc?ViI_+yjWb}9MNksY8pEUMR!z3!qH7Plw-vlFEEchUN_-7Hag`!{{J@D6=yoZ# zkHy?ij5@oZL9Ns7Js4lt%Naur-Du!mn_4`NP;Y(KOe1hWgi#-_0!LprNhQw;I4CuBQ)VjNXZxvXh>Tw`4$vnLGwxrFEMe1 zcqLCFv3Z3Tl3zvFr!kGgig3i7{b00zzgl4AW!!I;jUYWiKh_y8JLgH}c#C2bLV zkYvvesITJTVCt;X7~?6MxG&e+oGtU&^_`N1-}Urcp^BI}zjC4-}w*K3=to{56*j)Sr@R9QKk4n(T zppTV=KS8@net`Z%SNIs=ce&P2djKG(4D3(ht;Ybr%b+CKYD`4+4wzj`YV80+hc$q+4v*M zWDL|?1O5+N{Y{(z diff --git a/PolicyInitiatives/ACN/ACN_B2_2_Critici_Mapping.xlsx b/PolicyInitiatives/ACN/ACN_B2_2_Critici_Mapping.xlsx index eaf16287580a9f4e6d16fa7c8d4ababa8542355f..150f2f3d2c7d57138d321f323add20b4729d600c 100644 GIT binary patch literal 63300 zcmeFYgb2K*uU`AJ*V^hlASF9bL_tJFL_~Cn$gU>nNj5PN z(NA(BA|@g#64QIGE?zb+UX~Ai-E2I~MSPr{cyh={uDmBA0rda>um6iJQ1VdIb?U~M zCi?N98(y5(Kggf?!jS(OMnpbY+S-?GCju*lkO?G+# z-NiF=#VS3+T|WwFn{=2d*v+{m;d{QvwMXx-J)t@qaAv$fKCZ!}30D0HC5TWjB9$nz z*5Za=n)*qEu>Q;==-fkE@#!~Q%?ep@$Ftt(lawSyXRAc?MTgphNMSjjvgVb=O$1-A z;3HV-Ih8WyJL=8I)|_EE3Vi5?z$ZWSj6Dj_OifIz-#MOM)IQQ&dx$qTiT8g!!uj-w zBJAr8S=YdhPv%{9BVBjS7DPHvnR*RC&I}T3UgecuX7F8WxG%5Bo%x*mr|7q*>UGl9 zG3&=PYmsM@d~>h%k3G0@L+nMnf3(-?N0uKlzt7%k;7+#@>l2xCU8zs{VshKc=gbn9 zKXJxS?Rn;#F)8!Z@fQm^GnC5nBdph|E+D_o1-DJNvK>BuwqSpL$if~SQjp9nbYV^< zQi03uS@Mf@k*@ns)L4&?P2~OijLZdzKljLIc3$z`UiOd7eSF)CvQG2npAlCOl*h-U zL^}UVX5Zv|(|Z|Y_AE$TT9Db69yU&%q9TN!|9?jRU!2DOrFu!+fI8_-1|<~v@ukHk z*{MhO5mU|KIywx6+&46Bk=beje7aLDQl%Hn3zU9zJzbqnuaE!cv{2&n;oX^igQ#K? znvICsb(l~V3pCg9s-ANBKvlkh%hhiaTL(@X_b+(bs|zv3T@iuQdL(+*5vw{Voz?FM z2`Kd9;QZ|oDNpv$afLdyp*eJC=AIU1=94m0)}_6>5gn2V$;b0_QMVj=s3LgbcdtLa znRe@~k=4poq+Ye(^)dVM0-D+v3yQt;ihTuN-!z(C^=>t{8+Pf*d)2_IMf3fMdLGp_ zwTW3AXPg{|8x~qykKH*xu!CoWS**{-tEf zCjpq>ELZ8$1#Y3h;$pxc#ouJPSG)J41vIG4A$zAyz_q^u-dfr zF234XUzT3OUZmrEETi&SrkB_2jWh?aXiup-QIZc6YLY@V2cqn~y!UY3-;|4RO$m;a zL@zRPzQ2>i$(cVa$@b$j72v5#D9WZta`^Sv;HJrP#Lc1M%xL!&i3Hjj71a^{8;c&_ zXp_2g9N*pWXXtQn2yQO(DW|w7=gu$qBk7!q@d`-LH6z#tTLHy8P37KN$GAi5& zE14%XI3Q78%O9XpEgn;+>D}is@tXUcI~31fKGAE@aMpP$tEMu(C{|zJ`8U5*NqWxB z>%U$#`DQnGkFK-j1cn|``Q}r~h$iS)@nal3>F#pPU1HoP?v!MDv0f^vLG559@RFDl zGKMqm#f=;D-}%`mx}Coe5mKpWsUu`&A3NyZ^ghqy_9LupL7NBVo4Q^Xgiw)@Q2qFW z@|WAHcN|?cm2?Nna^_cKg6ukEeAN79h8%fKv56IbE8ia7o2;og+<5F1~1%z4Ua&Ru_`B z@C?$nG{BUQJzo=3BQ{d4e*Mq+mppHBfAG(oWegpPN){#KQo9)6-cKTxIfdDXtowFd z-7H;DH^2qoEuj7Jp+DEG+s6S>zp4jz{@qGfrS#87l5#s$u#bvVc58As{rXU-_>75z zYZhh~@QB#v9NhWx#V)u*#+**1#W)pfp5C2hOS?KOTBv4w_F;h zBI<_5M*YE5#Yl*H8}=+ZeIrLM{o(hajtY`i-@iZQ8Oo732_I2X+si&{L|#g}7TGk> zK6`0)%~|@8_WzU+&P|(k7r+@KMM^}(Mnpvn65{lj`R}y&_sAgzAQI62-~FpZuiN3v z4TeuFd-QklewZz_H|Y1RZ^DN@RjOc5YzXVx6M%L2Vd#o$nXnbbt4gJ_CI#Wr% zHEhD`lY~gm*8S+DDZFF49)N3QCAU|fFb)gFs|F-nS~yu s=`$$Q>@`R%2)G=^zj zqC$#VMEh;=N`2#UoA4iFbBNnt*&fH|LFbk@e(1)jL0`rO7Js z8+-Pdk^21)s5_B?s--nUK)c%3*PnF*VmTc>_I(^GuRhwgh}Z{4eH2f1$^4r@El+m752AGF?O3+UOC zW7^y(XEkb9;R7N_!1Gdl9Lf#{7;$nd}d?g?s)LLs)gx;*ph%aj1Kl}QrVMGGlfTZ){5jLxmGLK$G z*VI2xJXtd;pzGcR$AarV)!zonlN06dBuOH!stU6w118Qqsa43s>3dGzLi2$u0IsN4$Gf0PD-y*QGzAVUNV1bTN8Y| zPChD}{N4N0*MXK{OXasuYirg$Dr@e^;aAT4hrkUty(H)t#MOt6pGgW!uecc|elSYO zbq(AWe?zj^mj|Of{JruX1sA?Is$kq(@OW;Xx7hJVZNk)Qhuyo4;KF^D+XC6IuoIyp z&!a4EoG(7!mYlhGefn+J{`!RLh!hTL!(77GIC&8BTCh_pk$B<9oA={ord9J>U&UWa zl6z9Ba3+6e<8iAc!!}Dj6Z7C0{PnWX<2;$xatHB^KU(ZpkIoDoUEz8f<02a7bJ6Av z(}LA}5YG$PpO*|Om!dco)E3k{rfzb8e?1Pzs-Az}#NDoY;e(XWTNUDVT?RodBKZ)7 zYr?FF4E?MW&{FDyxjl|c79L(}@DZZzzJw65zbbOqUfsI=1jBU46`azoh>M8!< zrU8jun7=GJuMRsLa^m28?Zbt=Y#)L#=M-kP9wDn*8$9sqPpul}x zR?E@GujrQJ{nrYCNAA1puN98h(WoP*V~l9I!qFP4`_~xiXd~-*6N6U>+COwXKG^Nb zKOQer0G}Zjs)L-lU5>}HFhR%Y24PPSFxwTUM-n7ZVJZT))Q z5f}6jCD{A1hsY|j{@}Fw+*A8mW8dw&M)XxNdD|YMhqiuhiRd*+5@_(?b`)0Qop0HV zAxQeIA!|UwDn^u;!e#b6gB5&j{9<*d??p;7jTq(&_%^R+>)lOKos_?AkEHS#>qrxv z(P!5@cR$liZ~xicfBwI-c)mqoQFV8QSfJRv6Iio65Ioh!v_ zvai)Szr2$p;+~FlgHg=UCmDiq2U)iK9cvSgC z*M=jJZ)5PmgQaJPINfEA>`M3HTme7nD=9XzKOWi8t0cNVJlFj|^j1c0tc7x+=Znrx z-RRVVpYInPCPT`u1xpu2=EgZ$_|^aAfG3ElXYh(kM)8F7X6G7|wR55xi_Tw8#W?a4 zH*I|$l3}xdmT+6;nG?sIGsS%K@1J%|fE^;jZ8;JVTZ0dDfCPD`5|I5Wo~OzXt+HO_ zsQS+P-mz0x?V)JX#isFD`iDn9%1aVo{$$s!PltqmC--E}k=1SFr%=lhR^^8^Z8Z$5 zkvQ-XOT-1UsVQO{NF9XE=}aAFuQJ7r#tlLshvqA+YWEZQa@5c1@>BnLg!N@e+-+h? z)SU?tVO8TVY?>FSuyDB#=Nkr}!}+GIk|x=k@eX)nT}LUC?0K;`2dQlTpUYy@1+iqq zs(=&j&!aKK^B1f4pKFq&_95cNE&NB&|MG_;xSEzzU+7+KV0uJOBtA7W8aD}n$Q#8I zgoE?FSJsQRctm3LFk)3P>k$c&rrNb{m|DY+kpEhTbes5mDL6m#X7V!~f7TyFEdm*> z9h9Zkzwx@6wCSQ64AY@{*N&IEpj3_5Yw4Y{=50^3pD^|6!Vqbk--#`Z&> zcM$@iRbaJ zx&*y`QY`ZUCbH~6%D0@T=pURJmMcWZk@K^J@3*W@B*1uB+wm4+4|0%5-TfS7d~kD- z)`=zOXZ?OTI-b+XQoGmD+o!B&xnFdfx;A3<{v$!+-u6WUz3HxeN-_I_I$g9Fbp|js z>`~a;KCnJAM*=K)b#YIf)GCp;9QkKl;xdF9gh7k$d-Tr#Ip#qUA`uxbCH zpd@JNkiq9A8RxgvOEC3WL>_MX=Xu5g5qt3rmb!~9VH5lOh zvw;wjn$sXPQ;#DU@){k#lmo`k+RmC<`=#99LHNAVPjf5tPsI6hi4XDQ%Z5hFk52kmA>SuahSts@9iQCMC8pc#+VTx@e@UW73G3(1f^|fb z=sgVG@Y0Zue|7cx@R*49$5-?}Ih&FNO*{Ih*P0U+@#}xv_QVrV1-M|{nf z+NJ7x;PMh0@<^MpukPC4O(Cx;Po;6f8lz+x5qbe3bygF6KJxH|SeZK8Ax-HDVS$RB zAVKT45a-FN`4nMuuRUhJiTcwo0YNYZD$9}jS@!Wh=IqbN;y8nryXR&9M{t@7h#!QOs{G>`v#?=(M~lf6x+_J5~bXi5^_U;i6x%X1k^}YdAC+#B}AWn8BaR z7B~7=Mx!u6@xMDqjF8onfl$S9FWH|@oBTxnZiAvxMm6>6oY7LExM3Mpnu}nG_Wf18 zQb$>W9xg$zygxd|RCr2^Vg{${*wEevXwImNilc@DE$M|K#8g&xMn-X^i(RdG*uU$r z$_zK;&>_lSmWp7geX*Kq!sjL4W#cD1NVa@!u44Mg9e?74ZM$c7OAaMd#u%W5JD_t4 zjO}nsjzv#gI29nz+n`r*d<-y2K9zs(GKoX-?~fm|1~C2nGl2nqHS|$HNtngI-w&Y3 zyT3j{lJ4tqL##>@8A}E}k{Wom)g(i|oYjis~&P4$tKNnHaD-`kw$pj)M zjj$dq|G{L;dw12xqA9@(IF!-w{O{!qW9Q9?6La1Yzho`wMBwog$YJ?D1H;C*vgr`e zk}*Qy)cs>|dsJ)Ot1$rj`H>p3MNwAP(0ZoNA*zgtVN^(}Fr119hv7lwR#Ue<{xSXfuKTWh<`p%Eo=Pk%;acjdOSAyskXLlMiJOt<;A6Ge+tJ_n(dbCki43wC7hKgq9J?&Ldgj`bivg z0k@)0gPpkucX(aOKisAt6VB-a0U zf9_0d{hla3=Bu=$ROD*y!(xQL)0zSe6#9=NKN74+(~J8ce7gNU&s+k*1YzEz$l^~- z+rARbs6GdnOgH6Y*w01HA{>WG5e^d8`c1-U5aar9un|&0NOBAo(~E(SK5pz+l&*h$ zU_dB43gvhH$?5FL`ka!n{WDHS*9?K8mKMG&(kTRoQvBmk5OT7H2{^y3kX}rp%nKZ6 z5;TN~;4iw#iF!i4ktGB?(G-kAGH7H!=LPOj67=)L{~`w==#^&5@T}uzsI!$!qsdM) zCnb8Hy|x-6cyAnk>h_lojr}|$e!rD=CbmXWmZngE$j9{QgTFY_@ z%TK!@!>u#xej^sNdJnilJ&?s~17-Wn5s;(oItOSQ{6-t*{v)@>nfJJ5T5@fX&TX1l zHv5DDKN-j*of^BsiU^L_z5qFO)}$PdB1f{*hvp*^5eFOMqZ^@9m-FiS#kc5H7w~A9 z@ZaMi`h&kau)Ot)JdJV>Qk$EqZR*}pbHyk>UPZv4HwCuLhBF-W#@&5-;3sr|zmc@@7C0%W$AsnmdZlRFe~%#7IciN;qHNs#dRc%r8^O*~LWYeK7t$`&(-aBKA82$Xj94x~hCNf`I{m+{~s zruOb(>V+6dgCjlHbDI0I_UDiNF7n~>2FavS1boy@z7f?RuWG91c0w~Gw}~cEYWHC8 zhk_|@!*R|2nKwx=nh$Cv=ptm^*;|XQ?KHUbZg$5XW{A%>GoD%hn8%2Rzwa87D1E2& zeML(UUWd&LWw#$hsm9;eZ<$I9cwE4WD8_l?Hqcxs? zKd1yQ?FRha&JlJZ)0*6YvO&{`FI2q1(Hk_eb?zw)6fs zhB~DVSbo2z07i;e?pm8+hXjhx2$;}Mp~V-caPBf8`kfBm!K@#Mtrw<_XwjsdI^1Sy z^39OHSE={eXLFK`%loar@8}HzqU;aE_Dr&^d%@z9#96lTtHcc&5FDIoWN&NwbK8f= zkxxXt8l;^97Qr}T>n*lEqv-Oz?}OepXV)cr!}n{c4?Hg%Z*`%L54)4MxfKr9H>0~_ znN5s){YpPA@86qhmRTnWZMLqhVupcgn88`qG#}#j z;*Y<=9Cwi9J4NNUoe@9x!(j0XLny3$6E-bhi_*cqkoL1uSW4%buHmy2huE^AaXZOh zHevB2-p-loTINyX1E0n3soS@Yw^O}`yt5rdv4-j3VfxFOnT%sniYRU`FKtnNXnpjR z0UG9Y%j~-Wfz(%Byv|s*g!u8hD1i z=m-?UDu_EpqFQY5;NS4>oh?pgxcF$=-35ZbEQl`UGuktW2JeN7KU)tLpWEJ8dbv=I zR1k8p%iyq7H|eG285O_mJWqb{Et^xu@CIZkc*^uWOO!TBb^sWyH$N-F**t1`@O!Fq zDTckRo%V)+1P}Z$qvj2Z;_)NP_$gKECf^YKn`IA#yKw94*tkpY>?4()f4fxYOFUO> znRzCx)|xm8{Xo|HtR;%gT`+w$L*=*qxXU_5d!v1zq~Kp3i=#m!2o|`AmAv8*W9I zm+xIHnw?AGLg4X}zW6!?Gk)A}Ihp2!npAE@KF9l$?ey;4IH$<-(TX zXjX$MdF>3kVLcm`7Zu6~%>$x)W~ASUo48^qrZWH$Ry28i>Mg^Y{P~Ybw;Fj8fLF3h zn;EHG98d%=kX|d)u8;S z*JRrdrO-1$=fC`p~FF^+QYiD1HpDfqLq*s=)f%F^yOy zSPhts?LINa!x+(%C5OrQK!*{Ff_HqWq=XB@7E@q=N!w!SyY;O20j;xnwuipxUS)X4IP%5q`x!RyX@zMo$D~G*!8qyzRdbi z6Ccdy_hVLhnp)I+Dx=UJZ-ip7$x{l>YWJEHhJzwy9q_FPUo3WXO|U zr8U{k43aAKm0vfn&p~~b6z7(BJtiYR^WyD!3n9dvMD*KZRI*w{>AV)({{Al+-zQY4 zmWE@#)uZ?YZK=@7tHd5wW5G3mRj`>LU6G}$TF~`_Kz!CM$UY`xxN%V$*RCV{$NLVC zlj0=bauP1&IN?ZgC>$-C>T(<6pJ%#^S=@X$hw-@IbU{R$?+b8WA2lD-m~ASEmbPmQR07 z%{oZ1v}-0P=WzLmsV*xhlcv)=s(qZsM&}o?4KUL{gBI()tWE3T0n?!&KC68u$Ri+S zMLNe?2%-CY%GveX58QKS4};*n5gST(e3qW;>(2JW17ILEg4g<#W&gA@tB#lTix>H2 z*?ZCbRe46+P&+*>nW>j@gY>&f!8pP)GnU*o7+S{+GXOIFbLovo3(!1+gwv9GWv z8zFiCjaeI?A~g00GUStFb)>(HF@ykV&h@Jncl;3vPcxS|nm2dX{bk9V+>K6~zkCI9 z9x2Ot3t~D%2L8;S_e$nf{aC@s1C_i?S7dJKfKugMMKD4K!>2UjkGy?pTm&)s9?z3` zbwA!^d+2*(D12YzUxMtLBpzeMO{r>bVwijq?_^#RK(pne2r3o4E?#+Bjnt)FB;Y_M z3*U2{_l|qxFW5DEsLU-}5JTmZCpb3aMP96e$O}qWJp)v+ z|3w9vSzvEtK(XA%mZcWC31-F{c#@qdq*D#ErjjH9k?1Z+SJ(Vy{iAAlnJZZd9!?a+ z?@3mBe)gq(EwR1M3Ne8bAj2-~E8l3J0y?l0b7-oYVA6>yYhxFKbI$&wcQE=b^^^wt zJe+`1(*67jlDZptT7YpPK#4ik>gdUA{DS_c*iJv$eYwQ`#$ggaZtmmhjDwB)KQPM( zY8S$9#-K{LRV4OSpeAP>6G#gaJ#6UxDXTncm&W`#kYbD#M;#n(7hMtAEzJw%vEIw| z*}TOcd1M%z*<&T$$@H)YO%7tTr4#SP1yC5rq_!jn{p7L$)CrE93a@#?8{;SFJWpj* zF6!ANZ2c+r)lvCJ#`N!N=22Ud-!;;tNnZR^b_85ho67AA#{L8=Pcpb77?JQ`A8*G$ zs`aHY6dk454?&g;sVD48#-Q~<&w^UyWFSn)TaY39Gl#uiCc>l8#|O@eC&Df#3oerm z22(n+p)mq{Eeb|MS~8&~&DhTz(;(M*tze35U>!sU`#ffYZ&eH)b;(zvE7r}lUM{-; zN8XRwNS7vQgXLAWH1*$K&JZ7N+57cvUB*72qmA)7$h?T#AoHkVN*XBuAj=TH<_G-Q z@-qp=ZI+pz$x)s5xYn|HZ33ZkoLHmO>Kd&HmqBBTtJ z5mt-<68{|AN~$kotd!hjjV@)zfq0?nHAg+|^|2&No1a0D5BiAK| z{5o3XQ|jcIX+Ckd*CnPn9uur%x4-u(R(V=fdp^tXoTbb2r@sx1(EOh5Z0>gO zx@zTVW70AOfBO=;^-ebT-J{0&tBw-d!4)&%wHErWdp@?NBjK`+?HLktdwK6VK@gNM zCO@jIRF<_vhGQm53efRA!!a}1X0|%hDelX8$c#TC3rI;r0>Zq)J>){gF3RYB)Y1#sz z{K?-b*}pBe(sZ1b;TwCU@(4!%AE8%U?3Q-UqgdLUMTs)CYg2_3C9!!5mOhr@`vyF9 z@f0Iv+O;4end)vqjJMeAy~qXJv~B1`YuA2ubt#mpgP>&QS%eOCO}5wvUHSmxU&QUr zK6@ErmTa|LXNg zN0PEc(}~z4h<9`xWt{7jtW=H3YCUYSYR4%RIUmc}(MGAx(m2M95IZuN29wQ&OKd|& zub^#;pOp}gS<=?jclt5ah30#f+R`%M*fHcxrmcHc#`j+e{@4}aln zoXdV*xzxyFOeYBo|(2wS5GO4F)lS~eFc4BHPg=75E943M6!ate-3Y6cU zv?Lc<*O>eGu59vQ*fk{7OK$QxGGm1K%Bnv65cd%|THMNP7F3FKY@#unpXmL1Ve=6$ zUD0hGc+nIg-oZVGVw!Aqp?~*4MJz<9E{}Wq%@QK9kH!FT!IjwF+K>m=_UnzGKXu0N z6sH+y*2;P3yn#mrt&ijwIUR*R?yRq`X6cnhL)*eitpbeRAHs@sNB48UmStN~A;mu5 zO}<^I`Bbx7>N8-*K1EVU{~I85#{|qZx90)3k|)iqfm9v(qv{_)=DN2}j$crPwX)eX zRVy2plNfg8zs7_DuJgMTCLZL%`p&mTI?EJ6|h*P(D3H!W8yyR$a7JRHOWQdUQ4mmwVTgns*AXY{w|EAc*GS0LO_*kyU`)~ zXFyz0dD0OBpxXz^l}d$l?+w?E<-DCTwHFv$YQIo1izNAr)rVKjl8KMVUbq3s&0GQDp#u$$hd2SZ2^4nj98!wwJ1QAVE@2vc=4W{A8(}NpvSm_`CNRk&8}6Bex%q62AF65T%v3HU$#tE#0#t)o>Pny?4}guVlf(>l-rlrGVdCfkIMWJtW9Sb}K;8iJ zA6}YU5SF@wKsc=K0j!~5Bq!4FKC#M)1tC`Ok6(-z9)}1!tYE>Gv}SE$g$CWXEMjr& zm6DYp8I5u=Zllj=HRh^XXwBwD+{m?!izi545UUXC1DX^prAvJG26j39{1sgc74bw6UnJXLlL$j6aJ7{UG;ldPP2+CWb#zJipK`3OwH|`l#fU(;$#2ZKm zFmkRsRP0>?EP?c;K*xmcd%DsFq4SuDAFYE~t{ z^|9u?N!OF?m>m=Ui$!D~kBo|sTK?j;u_RAEg3cEv7JXnX|GGaTPB~}3W|cP}zN0}J zSZg=3bJ(26h%{X7-np(F;iF~J%fy2v#1yp=caQimz`$c}`xiuK9dqpb?^|@bI!+eK zE#RnjzyTMt*rt(YM6yUt8Ewu;Xedq%V7s4|m zRn$_T=@SLKbI2-2MP0NIHf@mzl+tN%)!NKladnMO#*QJsAX7SzwsX0E3)>~z3HR4E z?QtB(fmR_DbQ}i}EdYef=&&y|Mp{}T0tGWIGHc})wv$$=?OOr%l(k>Mg1RnA0va%9 zQJ}ZtOqRb9Ipy#FAXzXjP^v}l4JG2vx}$nOvdazPO7-kX$LqQ6?H%e_)i3y#$yD!a z-+W5>Srs6&hq{5jda-GXih64oVnD^L;ljg$F}TD9xLAU$jeNRgx`aY70`)BOjw|J6 zWSwPtE9rN?X(;hoZB)+em3#HnQ~ENXjCFxB_Vao!8{SxX`YI`x&gcTBs}yCawLe84 zba1c$U)bcZZWHc$=L6|?a3PXu8Ia4J^d_hQlnF+s{UjhiP4Riike{4j>2Hb{QVswb zNK5EP#fqMzWI|f@`eX=E3R{xq_nOJtD_UqShA{a%Y%iT1^24qpO&eBAIvnm38vRb8*?e#<*4S4BL<cCb`GbiEi-olrO+FP zfxelyxeI<>L@uJf5iUNUp;y@g`s>i@qaDw{qe@E|Q8tAE5k2pl$JBBys*cS>_H6?J zX*+;$7>64OK)WMXoUlopJ8$*9zcUY4MH)UOR!IOS;WF>{y}j@%F8Xbfh(KL_=hWmZuj>uxOnqYOXoPvQ|oZ+j*h7$;C!qmQXWprTWnWs!NtI_CZB1U3Sc+_1+Hp> zim>}8mfQfMx=h#vKn9Gkh>Q)gTD}ElwKihl>kk5Tz9fHLO^MMnRS%kcNeYpNOg^`V z9Mn36;y}g;2$B`hpEN&ypoANTr#xd0j-;wr^5cLn;(#xBKfL0bdzPmuN4y*cy6c2J zGRhw`$$xVP@hqR?Ps>gm7nqwOxlUFPZObPAnqZo4k%ekYmGyn_UO_hT>8H`SNPso_ z2%_o{&UdDYSz+0=w?}>sOFL4?|FFtJ{FSAgeWQ}Rw3tAo_L=1nH}rZ7n$qc~`NI*h ze*Sacm^MFaInb=D>op<3;$GyYP)ISvbn25;ulxz}z17`^g?68nL&-bllc|z4lM(ua zI^3}o3V`Owc47i37|`+{NZS4G!E3GqCq*_;tL8(>Ur@KPR^H(D zWh@LW$+OvCL=}Sz1)%AtyM#We>+kqEVkopvb&`QJ9e`pi)g5@P+o#k9lpjbOvWI57 zTDuL#-YRoPkxjhG)O)K%F2!aEzkgMBEg)}1izBdT9^rmIM`Q8Rw`@fTdqUiypA5he4r zOd;bi%iKB>=sU>tm9so=aOY_(HdD@~Lf^Yk3OEe(9i)Qa6M~uDDh9CpLy;~HF@6d( z^!&%A{G}Iw$Ec)v;CI>}ptW>zMF-z%O@o*Ph5n>pL$wE21sO^~z7Kj!T5NlbHVVtf z=_cM$pFy~#H>8Rxf&+A>o#lq6^!u{%mIBs2BVAxd%uH4FwAKXiQo@MYsl&>GjXx9H zc#%V<)~t!9Xvaagy8Tz2W_(Hv%7@OknV%J)rc4-MlD3iOGVg3|YB>{3u1fZ}FSnd*J%aX6s_YQ0UCfw~X-XsI^iu3^+>Ht_J9}-UpK^X{g zZHhjog~|}lw`h)N#OKRo-}xS69`$s$bg^GcgK-UT8e4|gO=eOCTcC@ ziPw9oTx-vROp_ga3iT7@ij_Q)2-#-QQ$Vz2l&CgkR5>=8c+c-@2-SyRsN}igB)v&X z@VU$wEMk3($YJ8c>~)Z8#@>Wsph5*_cGtbZ&cI+C24&h@T%zJ6Yc# zW4{}jOY5})(2uUN_FMw4&eVGwRIIvFVYMqRk%78ESdInDi1mp}wJWzEvNp+B5N+U~ zT%?wKL8O9!%M+t{2mer~iyyJI;<=ze_u8>Gv1vlscGB*? z@RJZS{xkLKjU|!jZ^#?R6^sb(f;x}SMqm^sd_}m9nC}2|x2B1hLP-Y+`8TgcXz3Bt ztD@HrHcEDh$q35_M5HgkGG#jGsxDTz2Si8>8kP4KFrExiPbfHuPbjDWMR7B=?ZVD^ zp#CgWTRN&A_9tKA=m=}sTyrdKkyATD0!{^NPeZvqlS(TQC~LO?INm984UJvDIt$R% zN*{E7S6K&uK73ONp`&@DMVf~$BJerrXQdMGbE`x`aqQ^ARr}h5dAi+Z7P?vxrz@E~ z^xgo;L4FFO%6HqPIJ1uKs=LSXK|v&f=4Jru?e8-Zg91^CZjE$T4{=JGD?tNWDavdd zFFy=jDO=KQAA-M6vix-Em|%RWcibF3;^}vvMGd?TY+?0g&4QGa-~?QBvk2|saQsQR z=_I8@v@wz)hz-{#Z6_H}%wu>c6EH}|Ii4A?iHCZt7cjnbC>Zdi4$lDS>d59E&rxt< zvKRZns2s#!!bk_-j{{WZ7-`Jw98SPhe3Waz$GnPl1RpcrkRzxr&qKGPbYbJ4UhBdW zLLpWOb|chHUMp!(M9%vwvboVE+au`KmD${SGace`2@u?l?CbW4sJ4^kG5Qs1vy`r+e?Ri?W1yN>tGLs0hkjN z+}75n5%vW1#H??85m^`l_p%)+%OR}{#^KPnQe>x|2n#v&M8O|iwhw34%&)l}(PnT2 zZ^GaIriwwIG_!l?&Z?g5Gmq@rdm6BJp%%W=aR!_)1b>yCYLEQKUv=!>QT;hHlJlvJ z0jEQSuZJhD_)YPTE1+Nc)|;Na`=V?X_J|#{tM3RSeeRXHDzbTo!0_j%y|w?k&L@Fw z=969vEMMXN$l%Is zXwB)&@4~YV^&QdC^rHRWSVIJmZf9Ttf0^H>s9OW0X5Y=GU5(CV59qkN%WL>=O|6R!iMu!7}4( zpl=Ft>@*suQQdE^tSW=;G(6rK2MuHez^GOQ!RgkwsLa;S6QC*kT-l8b2PVwteF|Yq=7lws6`+}CpS{6=*>*f+snM>Nk!MT_%pO&E>N~aA&Ic*7afX!Jd!4r(mkE?w z$@h4RG;skqH>)wfzedgFCOS-IUKdOS+7Dl3>{PP?fb!+6T!ww^^gLaCbDKuInbj0w zM9>K;a(Lt8^Vmliq4lT;Py2Z>ly@z!)31ZxhG3BvaKEcT4E_DJvzhN`2( zr`2iOwT56jzD6GcMC1r*5e~t*dK+D@llP>RLs5ZR*&}k65XKr+Z>L5FS`q|}hW=3X zC|Az*%fD%a-%d1{PS;TLxKT?ubg2XiJEDJjvBUetrAdN1$hz`(L=J_&hWJ2+9HN5j zJ5FU0o;|_!5gOA~v)Z}gjdkQFXjMaG6#qm#14K*w;*(L!*{68NIBO4OMY$jL@nR&y zOW>UX;|^`Mn- ziI5`SI&E{`$*nl1&Vi>D_$1>CagP)pl8G*<5g~?V0cDYE)1Y zz{{@By|9WiE;)40%swi@UTCs!+9fVTn#QyaF=N923ipU1_9!+r^xinLzXM~9L6jQ$ zuywiI?#Z>vqYZmI@H|KKIpILqH@~R|D}Vb3BMIKOSjCz2?4d7TL*H8yoRYN(@Zc98 z+*>F2Un(4)2b-4m)L2BT02J2BSG#jFy}w(5rxeS*lJTcyZ&uBWTtCe|UyCa0-7I(% z#RVQk?S!Z~tW(IP0*$S(_Yar-1>Ftp^YuWza{%>jMq{npbDk1J@FW3;wSu z8{e*jDDM|5*tNovajj&uhBa*_uor-hzHT)+Y}ii8`q#oRM}=I}*DaZm{-9MOR*1=P zW8eGaq;K!V>n*Ce49mmeb~TFYi3#4i6ZP+G{)C1X?$Yi;%Q%LL_}H{LysIc&?Q<{B zRWWr=z?oc%(7Gc-3ceykq8J$PhB~xIYPV5m4pes!yUK%PpM)I^3M>VQCR+yWcLyEy zBT>f(7<@~u((Ye{$+sebyBl@QM-7+yq@I+rthC{-;`-RoV4PVjpWb;C0p{zlnT-q| zKNuHv(@P9f2&jn+(}6Jcrua@ULEdqA6@17{0Jtvh=``18qauOr#mTlCmF^!Yi@|Xx z&jx&;mN<9*X|ABYd|Ta$_dPu>Q6gk?rt zpLK{OoV{vcR`ep;CvOnouUh-C3^D;DES>;)yJ}x0)uyKcT)+RKR%@EThy%9Cg2FGs zGZk;U@YpXR!+hr^UZf81YslJAp9t6Vw3z~cdVuT%31e`hvn&qh-Z!WI7$N>iVRCb{MA!X+*A_7&`Q?J!=NXT(me1m&4C32qu~Gf--OWflfS-+(J(uhV8u$y`|V8r8j`Ufm@P>MJChWb z!%|-P!5lj&(NpMak>Z)U1v*0jPr+bXCg0AP#TatLDu2T!FO8pj1`ehYe2Vge?7NzK zX*&9H^|{_Mx59H4r#NeA3CNgVkq@-~b`s`3 zgDWu@I#dEDZjS|g@%G(FP_%twIuveqw=~IkdZVJz@<_P^v>U-hY#f!(=EeeMQG@`M znA?3=>`U_W2-I@IDwrc`NX!MQzz@v}fOZr>CtK>1$u~g`)m;8H-~_9?@IxskhxWrL zwo@s76Y%*tFkplywW@1CLXYN2!9hY;f%h zDLMq9L-)5Q@cl1Mde89;0x7|QC4{rBA=4tQ3%J(E=pdB5Qut#PhSl5WD zUsqAC>>+c%$H|j}YGhj!5;;`V2_v!s&`;%SI?^lqXNbf&HrDPK{2jE8#KB&as}ivTPE2 zcjaLs?QyUdLeqmb2KVE(*i6e~j*DwkK*fl81S9D{K^wkw_`d(0$Im0%*aKshnIPwj=SM*Krhb zG0J8w&n_>B@ltk_Ze9pN1qlCnL$b4%m-0%}9~1`gE-s`-7Sha`YwobcKdOz6+-F+f zTC)gAm4Rq+F`J zE~yy{VoYtxbE9c%Uy(Z_o5Ib3N7h3>`^9&TT(nZ>lur)0Sqqd+Kt#|rmyOL>*Y)Bh z(}2SOH8x4izf9Z?oAEr(Z|DcZyYFr&1^D@I2fVdh!_gu0=RW$;tRfx{ajTLZeN0C7 z9FKm1+zLE2SmnWFf(~N229YHY7e9S^;DR=ZDc7QPp78q3q3|?YN(gLVU{g4-ZA>b* zQy6*ja*#`vw2XU)6G2eQ4JUq43=;(kzBXekpfR{Y@&-Ccqtxmn;cyXg=}793=iU5~ zhBfOGgHALnON-S?nvoD+NV}}#OFpYlfhFD*uY5YX9`d@x5$yyN;rNIngP81J^2PWF zmd21pjz#}GJILUg6=68d?GVj(r@wB8+!}S?+cUX=8feZJV!L*b^ zw8?9&{MpVa(~J88gEVS9>so-4p#@Eer?AKSeCfidfo-4!+eE&#ys=FO-U4>#6YOgV z3BhjLt46tw(Qm-6xwsB<0a5)rJI4AAQWG2p(LyR+e?HAPYy~gmS}b{XhK-lbGMu$*ta~Y4GsFNhXmP?F)?3=<=-hnOvd)va66%Is(}# z9owDrl^uV{ILbdFaz(Y9WYh4?8Vfxno`+(_*-B;>=(tN5ku0%W2AS2PXs*zD*C(Yq z_U#zRz`E_jO;_^IG@obzDifyjIV;W5H#cRgd2v6?2^%ZWFEqGdM?z<2fdcK_0db z03vE~uyYqypDz|~KPJRMvYsN{W~zmCJmSk%!)wX2D*hri_TMhz^)6 zZ=Y$Il`A)TNF2NS8T@QV!xaM)X-D#?S9*W6FFG$d{uv*eZzYz;Pw^X}bPdItH%06o zR&|m)e`I62ZX?q`UqfvZ1{0rUUEK7M2cwcvf#UOnYyy zrbM~=@RX#GO48}&OM#FBH$@$RtA}$rismNBouY))S|`C$a*w)3aJ?*m(v2!?PHvDD zJt>(mihdCM2saLHLMUI9f^X|2l;)N)6J-zx4pQC<#ZKlr_TgvI9-bZ?yZS&Q?Z)}e z(wtb#_NIViVMAR57qL36%gv@my>F`q0yickL7Lj zm+L#nfVwx(j@{o&t$b~&`gBHe2m%Il6k+2sW=(2n?CRWr%yb3XzbQbxb95lR7?_xN zi{pEy)KJV6HF3~rMOuXH4r?YqfwHA?UZrqId5`%Z>^(KTk*x`U!#sr;80++Q14mRX zeA6zallfc-co`sx5(|nY2s$zTyhINmY!XDHU)!0{&G87C>N9)SS8q|>8tB53<|0+u zgToutEIgi)q$2qVJ<(CTA1!5Y&oIX>r3mgl)}{buu%mk)1cPIsg;ayais%5pvjNIJ zDN$F#{Mx=b_?rsKzYOF^<+|Pkwwx7uy%ipE6Q1j|LimaHx1_~DF3kw5JFP6c7%+n2 zQ`1`jH?I-Sw(03^C^&;TZLA6RcDGyDQ2-VS0W36JAuNUiYZT7A>zM)m!0!!ff5Vu6 z>Q8Q^DL@4g#^zOENkv3ir^rVr?=~+3MaA^L7okVTw;b+oX5AV1iY2X|hCtz=9H%ir zg;Jmv?Q%~^>D^2D9BTk1D47#9%>eA7TDk`&c>kRs!la2PCEHz=STNORZ9W4`k%E|= z8LVM_vWD(jb2)oiboadog+{BAd!nHz2%N~guhA4UeF+_f^nQ) zxUrLZi&}6q>QD*eWk+Jz5kOK`RsES}_Q0SQva&{6JQ6c5g*v*1 z@PkmMV>Oe#$%^uY+rU-UZ(CrZ^%+gn4Dm8pb7CbLlE<{yU_c!~K~rqyRTds)1Ud!R zNM9D&U1trMGo+G=7iEDRCzj?)xDQ-q2CMbSxQw>}MMp=e9ety2TW$&-!T@l|!d;rW z(aIp-UwM`3o1uJ4lzAXeqL^yqqAFlzeIK$i-#|AdeXzZF&^W2LW*ilZUKkxWoGszF z4*f<|bzcqAGu38rDJ0!Ut*kn4g-{ui0j+jsp4F%)u;r*H%S}}tIzcT3fsqPtRDmcn8l1xs|P6$nZ{W~6qc(D#T1Tvl~Bll%OLG$atYAy z1hm}nt?+?5>*}0$0D9){m}wJr7QO?tpi{W0yd3o%_MD`B(XiyM=$Mt$i-KRK^peU? z{%bs>XtGpAuw?jZWy=qFXb7-TA`pfr4=9t=044GoG)=Wq5KBp~S;Q0Q#2p#fQl+^4 zz_VE!HzWZ~c^*!k)8trCB0z{@aCFw<83iA0f#ebVX6G8c3tnQqng6bEA9+GOarE9) zd!cm6q9dY38XQUh<+zzl?@YzD_Y9;AJ57IMgj>dL8<)BdqEwK`LgPd43bk#)aSs&hlmlCSP5h2?K7_H5T*B_ zjV*u@)A~N%0fMcqj!U+)6mLHu3Xy+f4xBisth!R&9OF}v4jP zDeq}m@N(487;x6pz;YnB{DokoIkpOzi>Z8>kr1&3km4n_T=uV&ZkHkeJ5}#VIS|0i zBW3b-A%4gpewMI5qBT4=+4z+mN*vq}Eu8XY*S%~;$->P(t8R>or-SV-VJkVVdmLOk zjlmoFE)*_NFS)IF;jxqVqAL%^)D;;6R5Jz-6l2G0^$02K*h5;*1@@|l0a+*FpONsV zI7nr|xhIYSwK2p@dC5&p9|8A~PdFLbcISUr z)>^}4goy=Llj;ozAy2K2ySE(03%Q`vcp8rZ4Pr+|GClSU?qAdup1?%ZgCIh9%U=VQ z|Jp*;Z$_2fCk)sc-)huPd0+v&jV3^MK#BpPw`mXtQ!R;eYQ7PL7y*(?8fg3vk@o~^ ztpGllzP*%BxqcU1iH_{v<&3Fu%SeP&8CvEw!CDKL!T62qa?15v&c|h2bv?!lwczIxF$>T5QJZc6h+C!B9p!WeCSef=?vUG^6<^6O z*XYr*rFsGfn!flKsUFEq=_yQKPb7s_du__I)~09riUI;MXemv^uyKrjy>-A^C&xq> zIBNbge%22Exc7m2YyPP^>(BviCnYU{O?>3vet!%f`UBUE=VLee*Wo_cPAb7vGuRG2 z<5Xw%+-@}c25@gE$iG9F`*h?f$@&pEnN(H8li&gn9gNnvx4E=80F?Vr_^^AjkHi%y ze8BsqDLim(c8|jp`hygD1#4DzuIeI^x4o7|=iM|!pd_Umt*6!36o?10zH{!VRhiAz zluohwr$(AYnCreE4+(|&-K;x$!5z#Ckqcmqz-;=}D0!i%7n){{MEerixC3JNn@UL9 z`!8rgVxtFce;Qba4^b_#Ajkz&{jAe-Q;{aNv`>2UJHfU|TU{7(%qXsw2+`)ja0gTf<6{!^=zW&rcVb{-j*3-r5Pi7a!H|yxql;+?$0E9r^C@lNe)%?r~GV|## z;3C(&1&niZKYqKSkZOqzioDcjJfR~`tW(`Nv^^wQ`_iy3Z;t~WKs@gTK*}XPVMV;a zZm}4%(4ovfvz+Zh9Gwi8`Sv6>fDn!{*|rn?E9KIT(>Kyz9+wt=(Q}Ikc`n~4Q#L;x zz}&?l7WJ~Sbv6TIUD}BQRfv5q6}DXXyCp+UXG2x+T))y?)o37+TT*Ap9~hGMacin~ zsB(O5bf+)1#2QUZ1)qb1(t?$01SB>}$_P~A9_nXoY8m@? zeD(S2Ic-#V;Yz>M%IocMKigA6cT}w%`>^H*PF?f{MFg|f;D4IIoDv7ephH|2{d7K4 zT4w^SaA;aPsL5Co@lRQJX(Pl4lSLD2a^9Y#Wt3-nZO2`{rOKxm6%oYN2!z(=Ok-z} za^`Y@X`LKm5p6mm&??1y^OHw%vyCJ?4HAT*4F{3yE~l3E*xa``XcCx&^VX$Da9_tv zN%5oRq>2}%rvmJO;N0a36seVCq6eB8?K`t9=e9F!cg=AU`vEKU({+9aKVajIJjb}s zmAj-%Ot|c)Mn$2my)aJUCbZ1f!ww$my@sQ9n2NC|rutRzoE_rjLSrJeSVK6-geZj& z38ga=_MZl1=62O#vvw{TJ{Cw7E$W~E3bf2F$Z^dBfS?H@(=qaQEc(Et%?Gn~qJFKl zN^I`qrn5tv4+`tuqh(iq092qC>PwKzqK-ab*gJfdoWb^C2mrsKa!jtuj{uuc`(|L$ zrvd*cA-L3VOs~3QF^P7Nj_j<_okeVcVacLB;=35Yj)?>|?jNCZHHBHVY-Z{R@IyMc z-R$n+lWYvuMs@ipp96pNv%W4)s=)MjaZQ{%iKp6+Uu$QB^NN|`z&r>xeFs98 z-ry9V5{}f=)Fa~DwJUm?Q#6jSsmlMmUkm*5-Uf<-s;JcRpQu^lSzw zWl0SOybrZ#hGIEJ3&`)i1H^Emf#og0oQvsp--2R~@p2DQ03k@nOblRb0DDa87gcb? zOEGdmWu35bU&YOfQ+i&=uUw`}L>S>}H*9M!0H2#WynyAiJGLJuyBx4q)U`WRi3*JK zk(tC>zF7yp0D{6`ObX6Fs2kB%@LXp<+&6S1?MNC_K9V34lIk;AK1Ccr7_Crwh76n~ zfcC1uBlV^OWn;5hQ1EJGpTO*Sl`PsJzEgoCK!78748eCOcfjDb!Y0SjyV?@60YpO0 z5TeF2dXNf=4kPe<{rMb)RoAbh8Ce?z{9m6iig2*#9Cw@=w@x(k3go_E(Xn$M&?}u0 zHEA2MKyKrCqOQ$hJLGGuRSz5twP>;a$TX;mNOF};!GVm=xfB`9T`Y!aVfXweZ_FYE z!g4jpzzeHw%HjimM3sQD@j17Dvc?*uQkl`ih}M3*SKHYM81yNtZU-g0U|CoJb%1Xt z#|oTQ$#Gvzk+G0c!M0ywpu@dg-IH=J1T)L%sT87^^2)h4tA)O3W{7{O=O z)oEL4KqMD$Xyf1_(IhYxXPCT_P?Pf#SbURFt;|qdoSL;m@m_ENZxc&l``58JFmdI8 z#+&7^Hu$I4c!l(o)h-B6ALD1e1hzBFxSDoo8;xi*3!%@wdwM4)7m(_>b8d}Rw!>%q z)!uX2*qYticE1CXm(xZs_>=?p8gj`xK(GahG5IAvgeY@eN4OyMp?Z^}=S|f1yd36G zt^qs^zxi%tko4ep2;zaO`9-TBn?&Hbm*^EXdT{kzdyErFLG-!$RcWGQ)(=6@^(>P7=Wms}d^KT;n#X!)A655xv9R+|7aG$M>p6nnXh)pBKdpINTrj1q)L4 z3C?960nk371+UkSHH*CoE}h;EUv|)Kf)bG)V&mhegFD6X^QA{#62*zJ2MV+;CD#OM zec;ZBl2Zf4iMvBowdJX;S3pqJ9nty=3KA|)dnMWtnlZ>LJKLt=_DzPQM%VUOyh;jb zt#n@)o266lwEoI~WjTMNHF}*2lh&lapX_sb1WYO3CLt=01QEBYP;sJP588{GsP*O@ zdUqPFEX(>)h@Vp=#^iz{BX$uDWtYz9EU=S4K1Gr=Aet)Ebc&=Mj9(xzrUK()8g1gZ zYO+GvN&|{V!G;v={pVtVtSbsoG!2#^APVGdh8Pxl-1-Za4ovR08rF$mLI;q!Kyv@@ zIM#sWb+UPJeDGqq+XWlkD|A^C-7fv}X`|PJFeMd@p#AElO3F1C#WFS8d?un-9+#%V z1c9mCypw=z>x{sdzP7rHS|oFNwj{_z*l`K`2MFQ znSIwj87z_DU|gNrj59(TsP|sUwGQm$%{%Qky1LLRhojt0$6LuN@Z+w%Cod#g3VkAm zVrtviFD<}Bm>WCmr+4D0VYMo3XaV7U@xa))+VrB(0rWtQc&LPDmQ$p-P!J?cL(p2; zrDsBI6aUEVHIGAk~W08J@==4N^MCq~`jAQDN( z>HSh_%FVS261v3;{fPqwPT^2bP~bEm1!0Kz-pk6sBPGQjdBTWm9XN~EM9N5Hj#2Z= zx1sfJ{?gm!@m}St?oKT+^7)z5^v1Bt$OZcw2Bug3d;b02X_5cH8i5DpKzj9hB)% ztP_Gv2Qat@F$g$lWH)GDT0A4r1h3x27hkT1(g6kxC~O|P1eyaH<(Te!#M2h9ZQ#%z z%SH?-JSYJPpNQ7qcoH1RL9%(R-wfGPEnn_--VZD|6QI|n@FFxhov{R#9+oVwHdDyH3ysJww1Vr*@u)R*u;B(-`5_f^~{ba@EBf-!k)WHt?8hxVDb8O zVtINIbVhW!Bh-49NE+v{4B!&24aPXp&B@K|8wca}f3g0fxOnBK@~BgxGB>E@Oy0MX z8eW45-I4;w=Y4s{@E_g3ABxxg`;dI)geb`^Uel-B4w1GWHt?_S-2pKQz8_&?kim%t z`B7V7u!=?`)&OWyAuuql<#$9ds9$jxc<*qw>j3nDOekxY zcMe@ax{-`>mamapQ64sylO&D9y*fGO!uq6~4vf4@>^rM`Cg!dLT07z%aJd6W&Qs!+ z7Q&}br9ys6e*oEeCql!cR*fniwfv~2!twlD5Tiv&i|oXzEYJ!FFYLZ0z}~OkRZQ{& z9O0uXPG^vPlM+kZ@(cnD9aTIpf(p>Tp&gBYj1RvflL)tU`eC+XZoAmHdl+CDq<%_1 z1QOHj=C5cdOHt+<3Vxy-W2wzBAa%eIRG#)HkcO)9w3HRlurnCe*6KWwdQK)6TB!nL zOEs%urTLMHLVZcHz=eGZYj}3;s13=8C(&_#`8RO}Y2jz1rHIxQyv}_g0{VzZFNz6_ zrG$(|HPi&?>=}y4pLnC8pnwFSbqiQ95hySSp0Of(VJt#&)!G-RkVB#!u_d*TRq%0eVP;QbXfw1>a3KR#)DNZjH*2K29nasm299E`qrtIIpHq8`HT z4ha#z#fDZw(JZ6_;_f`|%p69YoiF`+&ty zf{!hZ1=h%;N8sfu(8HhYc5hih?0x(L^v2D8a$x}`i-wAL@+D3xo^<*_!LO-uMNX3# zK4z3yEB?T?U=p>MzkP=g5ys#c1ny{^tQU%YbU=+KxGF-Jj7Z+i*@a5p(uvuR1gT+Q zQ%}i)YSOvZ#g%;zDxXe&GDyhu9Z-4csDwswO*LDC7u7&qgR6Tn=ui8>>6q1xzJogx zQ*+82%2R<;U7+(MO+D2bEkV*w>^QdJuJ?;8#PLXteZB25qi4er3kqC2Dx|QYePPd@ zEOej)T|xj)3?l`O!3BckOtSkm{1M=KgJ8+Mi=pa}!y!okUN;mF+=I^Zc8$mwC{I^X}@`TX>=N1D&LD3b-85 z2}VfLBW+SZQS|IyH=#fJG7spWe+3hotxx7n1=^6LJ4}Hz61hVyI=zX%TJR5zK8Vth ztAzU~7MgIR6PQmCK-R5rIvh0Z_^g6J@<@^pav)8Oi33+54o@KXF`Gm#U#*7J;n{QbLWEyL5u)8uyc9-P`3Kdfx+YK5@`q5 z_K;KS)S!z4u4r&zOKvzQ`vy=&N9GmLX~O*tLTrx=M6cs|<2%~7-+Z?0Q<^Pq&qj?8iz>KKM{)rAE+GPp8V|-ulnlS8P*ERNtKsQkXZt~xrS`b$aq32lGY@}e{rOp%uP;Hp*oA(I`kU)Vo zjCSX?{Y03d@|_{c`e{8#$8*}kDg!~Yey_n;6jedSYGJwSY1!7X=lj?VFF$%bucqh8 z2WxG2hc}a=ZKO7u5XL(9OI0-M7x9$JNB|{SB2#u~KaNnc2CZd0v)y2f>)wC`efnJW zInoYqS2481LOp0{Xth3=(&Zih!_O*HgG)M`(yLGSmQ2njOMkBkREDHudj90p1Isf| zh6f+j*gF@&<}1cGmoA@$t|Ekd0Z;u?OMrjf@+?=rb&z|o>@}!UNXIFusF(l0$h`Xs$P_lJ zqB4EE9NgWKbC7tv`)^wMw2?G}lFA~?3_y;zNyu^GLporcPC>x7>TC%(kfEn#5i$t_ zaUJc8`BjW9g!R+cewhMfc~Wfzx`Z7zY`JIiAzq9`&jZbQOF>i11${Ua6I%WqDCrABR}pq7&c!2#&MyrOt$`5!9W-RKURmJ(x~6L4w38%Nza^1(a`BFAob zJS%9nq|8p382(TVNj$jmX13N5CLfd2m`q&x)b?VwKFF-wfG5M`dgE5|k?VIR0irUBj@3Re0- zf!lci)SNa+zp4JR{XYr~fMWq_vD1AE0%cSHsd#3JjdgHk|7;nJ-|~_c*E>b%NNtHd0-{relF>fl~wGUOo}G*vZ-eAuy9ie~$ep#W0ZD!Y?n4 zU*4Pfzn6!GxB6WN#;~CncOKn@SY5g^exL>I>c$3+s}llWT{@^I295&*NuXPa zXxr@!h8;1 z_gSeSkfX!K_zaMY$p7v^ltwvl6|~L^nl(7gNJJOwxx%Vv`GW;9gl(m zX6zN_Zzm+svL2ERw#SUQfhP;Hz%8p#;0AzEX(OKOba!Ky*w_Fhf6rYQkdfl^9n51T za=b&L$Brs7PFQY&1ndea2xvWM5WGRkfICsDZ)Wk__;#t6v+k*vXVkL9Lp`GlM64&= z{vC%L8>C@<%RmUkCn_)idX@$xTj0vmEjoEe$Q~hH5sfcJmCx?6au<5K+x8OXo~W@j zXcqH9&EohD&Rmvw|6m1^pzoMb=|J!rlQ@D)C$>-k`o$X4f4!`M==qPM$Ltmgv`MzK zg6Jt7RFZlB*+}EK<2nm@m5f#r;`Lm0kI@7^?-35G@e;d-xs}9f@ZSK zJbA0fpVmG-zqblZm?a+4VBmP9fQdA)gUfYoIt&ap&_W<*RR22;3E)IM6;ISN+9TtC z7@#&nX$ZU7P&@Hbvf$xnhY2v$Mp0sHWeb?x9)=_}M+{CA7c4o>KI0{X9=V>-d`>+2x# z`}=92Wuqq{$u|Du;Ht*ok6#47Q5zvavb&6De{3Jm{`kM_v*j`Y39^JAYy&O5A5UAm z546;0>{1Q5vE1XHZH6~};738Yd1C&O&j&M;f}fl3Oc` z!8K;4u)ZJe3A7zH_f0h@bW;ZjTcymiv8VYKq$K3UM&>(`x>o!;c#+e;_+ge38fWwUDWG@CVW^PEm;U~@m z$fQ&Sj~*vmp&Xd?9AWXf3$O|bBPEzwayk&;KBPq=K@MJn8FMPJRA3=np7n8H#@xH7?S)w=yLstLa;y)9pHV`!!522zkA5K@M6R#LjNdK z`;IcylZT)WXmIU106w6Ug<9?o1?3;QrXE2g=HXj&bqQB-2P}e#f)T@r9FRJ){Q<{` z`Oje(ko;#i3yJ)h&I zFGM84+>0&#R~{g(Xl?oufkOcjq_hJd9)Uj}U*vd& zvSD4+{wO_H6b|(I#rXy+vtP5mUfz)gTNl7((p<5ewFB`9hiEK?7`LJ)X{V;4l2 zB=rmT2BAa&N;wioK^Wptvna{7tT^;BS3(QQSn3l7LH&OJ0i;I8AKmd$Hb}6n1w+tP zWe)5ZnV~$^RvlYlSNJT;1j5~%ze!DYPDdC%9m#UM!wF6qP=G-BbEE&?yvRL(nfxTF zk@2R^+<6AV8%WuTG5bz2*p>cOY`ZZ!GfMeb6{JS@)6MR@iD@DR!MGrB4RIid+5DRu zO>K$N;M24roj0@V;|zOHf>mKtejlm#ccC|yb;cAU=IYQTO6R}%6;r&d1@aMe)$KM3 zU?e&dWL{u=hEuIp=?VBG#EIx=&42-v!@Z|N{5Ii)az&8Cc_i_Gq7Rf*W;%dH6ysy@ zI-88XR^mPYSz;LQQ3F6}@v``b&qBz&q!V-6chXSi0K;iN2!c3D6tiF=TKf{e6EMRB z_d!upWhz`d@<6}i?HbmvV|eeX=TC=ViFN%B-9Q`M5Qv5=u(|^v%<|iUo^ydJY#LTK zSin>H-cM@py#dWg;5r}!seR*zFU-BHR5o-JuIAlcDjn9w}=b?#^|IkOwf zczox6=Ppzu0Qh1E-a9g_$F4_n{0CZVL@*v1=}YojS>!+Cb1csbxEw(!g#5Kgj6ukgu&5 zHw|I`S9B+ZLG_?orPu>d`a?)?P!W0}3n%~21fJETKtrTFt9Q1R8w($7tZ)(q0xiXO zPFE5Bx^B2p|L#*zWp)=SvWoir*O+vDfSzCGu$p_R11mnTBayqK@ z83t^}K}ZZGV_PI6%D7}X4D^@;&mIt&;tF`ByRz=AYcAPe>79h42ht}F4?V;`wFA{F zsqwkMU#!KK7PUi>Q(K%n!R(t5fx{hyC3w{99}fZ*4{K52`!+uEhU9kQ8ui~el%xN~ z#3xPy6gk*u+jP#k9mufdu7Y=l{c|?JgigfuhHo9za@v#=L2!{{9m231{0oFne!$H3 z_mb%?pd#cJBhcC|@Xq4vJXk+A%dtYj+m;I!=jJ{d$cS5Tnz)Gj0o=%T99hA2Gu zd_!V2351n#?1U&{#~50`h?N9yCUVztOJ`@-5ri5@5G6#*taL-EX`%^rW{v%47I+6b*?6JUaW7u_tN%C%TvysTsE`mqNj?Y~q59s3OAEUS zT`W_DGy8DOG|XmX9)wmWYWWXG2Qmx0!R$&;gL8KPzD#b4Ho_ZU{N;xlfFc3~hQTQU zK{x6L&Y9rW@XqRqy>9T<>8TZg{OO$qBagsS7iyV|MzDoR$N)EPf959rr&C`+_oW`r zg;|iBe~ZH ztPTkVGa#`;4HnqLJD_GOC(KYoE8_{CIXK$lKHe!k-p>s=PCv$_s~oA|zb_a6LnpzE zvQ_o8Mh*QZf^j~+XVu4Wipi^g@}*F)ZW54poasJ5Y;kO9+W>Q7k_An5jlR>4x0)PiX(d% zO7?j!S<331?s1Ibqw85Sad8bts;M@964F1=N=FL~U0rg?Ub{~}WW1u{m{rK|XCn)QdWspwKdUaZmY$#EfWsaoA< zKZvEzf30+~(PCY}DSo5)oJM^98>ziH?Ly{e@2StX&)OIZV_z-rEew2^syFK(|9r+U z@PYOt+s*Xed7{nDZ+#cihF0^Bgj_}=O5ns+PAqax%f}_k#LX3KijJLci=`jR9QtN} zcL=NuzN#Ohbh^}--&Eapc}eELdUDWRHS=hHO*%>8jdfcqhe4G4%5)%n4E;kCL1>3v zplMY8Q`Pz;QZ6s%`&3@Uv#e(sqp)#%Z$)EqlM{arY6>!!Id zIbHd~oQp4n5d5cZX&!eDobpthba-a!t5hJ}B48=B#ikLg^YVP=w|7jMk>7X|TO^!W z)I6%}vQdRa1DVV3qUTz#w|;8wQ-fd4u9ZvEs99cvIA`NtsSDjO1Ry9g>(MI|0r{gnn(q*-@9USdreX zYc6)9IeA}~mP*r%9&*#Qt_$Qagy#hPvHG_7&Tcb&D}v(F7hX@&5n`9F_l^27k1uMC z%GO`lh`A~9V4yn{4emiSrol$!W6Q@1_ecdy)2AXgXlFYdpWUGM zeij~BslV*_xTHZFsqKgO7&+f0XJT6>o;&Gn9)9|B`Dy+gx$1rrY3Fc0tMeJJ&)usd zrRzP6jG4NZIQHd2O&N>p44F_uae!b!&vINYgD6Q8&fh7Q)@ZwysY$z`LZXz@;=`kz z8F*w>|C!QML!$8>x7j)|S2t}A^l@Y5&zdxMs;u$wh3Y)dhVbB&@PZ=iJj4Z4r2-5C zdi6k5$kxHBzx#WJr`ed1TmeF!lXj;Rm*ue*vVzVNyIZI>N>Fd09;KtsZqQ6WJJMStK5IC8YHV4Xu z*KB_rEpkZ6J4Y_NfB)cu*LG+9ugmD+p@W2;FLVSY9p?IeGNTR2g}LHXRdVZ<8m;mI zR3h1rG0!ioKOk{$^Y>0WSW{v0klXet^mwPCpKVjYPRU-f6TM!g$2akFys&)uZmY|wXbEY7PfW*`-U%?>rY=vo7@uAIbWgA#j-vhH z#P-&vds~>m`Pc_@SIWFY-pyTYn1(yfH7{4E_t>b}zhBuMjH&karMjT3&HU9e5j!4H z#cvr_Kk#}_AnVg}SORZ5dx>hGpPm3GH%aD)MaHjf)tSXHP0k92Ifo_cANja#)2_=S zZ-4oz7?DkFr`S|Eeo6B~(&bjsXZFCtLvDyeP9Z3_}>C!8AGz9?Ax3Yf)7E|1;*Y`@Etj>Ns zMDJd|9Wk+8G_25GP$m=RPV=?bVLWL6bZXZbJ-U0M3aj>~CNc*vDlv7|7%E#Xrt8?p zp5Oc|ezW4vQHJQ5mzF*a-|k*si0<;2ZKhYv&SEhdGx}z-`ZGMBqF1AWw4Ukfmoew< z_hN|WW1JOkk-E;`HO$Oi^?vx2xY>`;^yd7^x3;}d`>TqtvWGNk@UlW*|09XHOp)jJ zetAS1h5I%j_Y*CG&s-v7YMNxd`=_eT(ors;>SpQpBGNb4r)dvn7FG2%Jim1}2C=p| zo-tcQs$^hZy7SEThmF2uOa3qsgfftwl0&MJ%pAG%G(S-l;UwKIW1$g_u>My3qs_Wv z&}}&2x!M?Kl+svbHfn0|Y@OtEo(gADS7O;9C&9KPU395xl(WK@!}>r-QY>P@~cgXK;WOYi9m)T(0!hm8+6dzPv1zEy?S zt)oP#yZ(ra{?LD#8^X@?kR=+K({|sACL2&A=JX*>?+nsO+M}1l1ZMWSfxmN&)>4TcsFbQ zNRjMrP1Gv+myxB#f=~U2ve#ZInWTD>mUQvxm`UlyJVbU!=`872Xjyp=*>wX?J0WKGX;X>K&QR=|lxLNJ6d#gO@aPs%Zz2i!6*Cc9#@j<$$SYES7L|W1Ei&ehm3SkG|2OFBJ zzxCbQEdS%L${zKx#=m?MTg+c4&Gp#g-fQVvH*T?k4YJAIC-HaAdkFX1yh|JXY^Sfe zy+*b>TD2C*fA)`q#_T;VewdX-a}ix{$pN9v`ue~yk>+*ZmBD!ab1W&TZ{*zyPNhXU zka##;3_rz0x%nf4>g_(R(yT3rC-Spp=3o!_$~lYqqpy-$=YM>;p)Vu!N#4{-%t-no z)w?C@k&tzJ+H2x(*m8_x9(oe|*tCzJ3RTvbG}+DidcVfmU??ItNe#`38}i?6x%={G zC3~Iky_=U{lyU11%$nG0KPt%Vx6OR35^JlDeX@A>+Ku0Q6H)QyztDX;2ki2BVb0W( zji=(4c2Z*M-jgv4NqW3^Wm{W7eN16%X%X?!^-s~KhA$6!dOjqOr6O(?yfG#3vrK%} z=v{h|U2{YDO&EVE%@zCUu>bMz)T`RjwoEtgrEcPfp?OXYPY2?{%zsRQxmOC62GKqs)RxcnYA5np5`s`(!UiLNG$>`-kN(Y}5I~1zuT`a}3n2hLzB|bgiUQWhY$|oZn4wXRd`MXiZx@zOC4>k2c>7!gLs#&L5#}=|P3_h9^)l09FE3tyVZWKfs zb7zu;2R|_NX4HsxA+EpW&b8vNZZ7!YO$F*L*Ltn2e)Z3q#h&wG%t}8C;%hUru+e>d zq+Mh~S4G`2$ih9_Dq)rrl{AVUAA0_pnm~2^C@MO8@y3}>j9lM*h(z`l;q&;OhxK;` zb!P>Zq#4Dm3|Z0h!`!d-jecTKVD>Xz+TXTZ-@1xIuWjwc1RaD1l|3y}Qs(0x z*(o_9sMmZ>>v>+_tkvE7k>4LTZY*~86G?&_>gEyOrg)l-rQF^LO}G) ziQo@sY+P~zF)@RghRzw{JN(^E&orkqjGnNp%=7L?id)*%a-2q9%`=p4>v-E26k}s| z>om%j)$s?3hi4yoich_ke<$zPbo(<=-fHAdba`RR*96)=^B9t$q}0ORX;xF_CAl#1 zzqO2rCG9i%)X#H)xB}Dtb{fV1eg0a^-7xK*dw0U9$;2&tq=?fc=8AZ7xphJ9mW0^F zq1T?wkXh}b2>%}L;g{JPmssZ*@-M{mWLl*RBo}}_VT78pn(2mMN?H)SQoJvj-Aq!f zw@_z(D>%~7uHL0IueIfLSe^3_!u97JHz}*PYPtmzy)1#*dKa({+KpwmEuZB)Vj(fG zAmzGwc$yQHEff{(Uo4(fV`bQEG+K!;dC7h`iuCJ+a-A3Itl$=zS2@9})>g)LD?+Xp z@uaibqVz3{RKhb3wrZwDWgg*HWue6b!&F&!j1j9`YUAUsaDM3vofgwpbl@V;pBpb? z*hH5$J{$i?&glC0Z)B|F5h-5fMckfgc4a&hUpt&|4{cKmjFa+K4@%(eF1=&gl13)r z)5=C-Eyi|W;+}DbIdeHnyvAYo=3}vL22tkia{~<3Jo;sTGJfGEyF1FWx-Bshw~EkM z^L%(F^i0}+`B(VJ%l-H)pS@5i zQr(N2C@Y4x?|0;%m=x+M-(Tm`d!X5u(>ASn)Uue18;8p2JM$8?8uTlsMOGV0t4N=|COGcNo*);5AwI`z+${^zwR=LQc7DOx@#Z1XG(icRU$g?FD> zy+WgT-mZ=A0&hYSPO;-nBuAaQ&6aBNQUIy_alBY?PsAA4OvJ|AcCx(^!Gif??GT1H zg$upqH&u@HEaD=p-skMIH`vFhCfwcMqk@m0xh{oZAoAXP8!9&jzUidrP5C~$&3k%E z1!nJFq#vy`PWdutSqB}Mq?A2{4E*T!r{XvRwa+bItbbHTfJnC)tI;@pV}J8~#q$m1 zQbYNd`_KM7y_cZsYUDS%vh0`iYFANPF2EPby%QDO``bUsdTMv|cLeHk!rE5_+U?~m z>t`Wn2}IBnuZ2#bgi3<%2F5f{>4o>6d-=^t|KXOtoX!y_H~im1#Le@k>Gll>2%g<0 zBw+j-pFFgFWcR?(`;nuY13pZdc-fmYp_x{&OWdb$=2t#R3_Uviy3wU)Uy7YxX$z>` zzWe685Pw3x)V2KRz-N|xBJ@=cy(JvvdQDEVS7i|{klLG(_C;(x?epu?yfXQljz073 zmoK7>w>>dDiPtM^7jcU!$9p*RG3>L)$L)Zj;}z`Rt_dj6-w{L7a%+voi5#@@Q8(U3X zx?El{UBCVQ$8*JZzU&8+_H8TytM`}stEHN1?_=(NsG800G+9f|u$ zT{u7w?<&ggt~MbrjV4aaUKPXom9X4|&lW{ixEYJ}|0#bX9)De;CTRLeg^Ad`;uvja zs@>7AZsVeJpC%l7f}e3EO@xp8rhB~ayx>l0R3`4XY#-=_Lxdde9`7QL_mM}Nmd9<5 z!fQW%=)S9t>-A!p7rhtMU?warh?qxxxE%86NC4Nc`N!s`eDk;2=F6%RkM z8KLfPe3i(gQvNPU)}O-m%H)(tp^4jkWVfZG|LH>0=k+`62|*48s5tYoM?pt_vTDkH zmOYAkW0%vHJuO}L2;29l-jFI#s|r<>VUnsQmeC$h)iD3msoq@V=TDKG(!i3S0#ETB z=LZ$$=<4xFQ`dVpHqU1tpfBBf|6r(>>ie?u;dFeu?q>^EqwNv@cWHmZzk3G`4ItV* zU$*QARu{h*U0yJiDk&ZP5MNd2on-ly7BPjH&-s*A>fgWIKXmj(KWDWXZ5L;J!gm~`@HyeqB=c1bHKTnWiyzzFu$4>W!*4BAeD@D@V3ji6 zneSP&o%uRU5w0xmDz{2moE{|EE17eB5E^uxFL*~eA(U8YMsmgb+{@>;42s5*<4&n3 zKT3Xuj_#FAf5G(fNhKOlC78X5IQtU&{EOmfudRiC8oAq(fVbH&e`zKYv@P?aF zSNXDFoq^i><%?YXhaAC^OK8sfWDb6JFBG5cDlq4_N6QA-!hdorESj8GD|nU;`$au_ z(T720-CW}1#d~(QZXduIqlQcBu~@F4$XN5@kDPbYSZ$N|m*EqO>nMbtv-#*p7OU7) z`M$}#V#Atm!in)REyDhV0|9}LCWngmg$*o<_~ZtD`gvyAxxMImWoGA-iuGI)817~Z z@LkEjwy2W&2B~1_o<$uWU*Q_^`h9%7eTQQ&re@@A>bV*dBTnpWrcBVPRRzY@L(N0* zBl`riCwT%gTq4||0tK5EL1Zm#IK7%rScNBA)~_`-8pWF*QzepnluviQbhknXT}Bt* z^O(+=J}1N$15+Qdoc*@&MP7x{p|6grRt^1A4rVoJjg+sYLvBh}OU!l z^&)*vsjQF9o5PQmn~vuPLJl`Wj+T$Hy~j^NjutJCT$n3ib7rV>$K#eqs7e*2Xm5wx z8?Nd;JN1WUrdhSGro{TIXE~yL-ig;{SETBfY~QU>I6G4}%O`TyHGV+MvNx$+YdkSc z>PgSGTT9B_FjR=V(8RWVMQe}WS@2~Pm*@hIZ->XTXGTL?U4;@e^=B_!V*ED z`ugQpk8WPO!=R{dt~v~ave#NaG0n#%(4fK^rUUn4U9`fjVp*?SAQB&B`1=#~DNAgR zwKVpoC)s-5hRbCna4d@L=-e;al)r0{5@=%XVfy}bu3U^c)BCYR1_@E=+0FbHvzgc@ z@|6wuYAw4t7PeQPi*r~E?p~vcKJemhc~;5 z3ry?nIyU0|+^+vT_;z{t%KCd@nt1+<4Vfp`p6}K&gx@~E8vjZ}q`b`Ybo)f0B6rFs zt;3%+>aB_+;^$$K+?^`DFER`)a*y5!C!41|{QZYdq=6nODse;n@^`-~V!A8kY8^(U zBjf)MK0v|0vlx}sQzpM5??k=s?rTARk)c~7ipQOy!O@cJhZ{grCNL^&{w6mx)c~; z)6N@X)ZZ>fnA5DC6RD(*%c63VGAUeaaE+ZQ2xD?z)qWKDMR}*MZ9I#Sul-{ms<(LR z;@jdWl&dv(nSl-4BleU7V4UGKt}yNn(5AsH4RmL`cX4i7$Jn~hEE!JpDd$U^vS|f! z5u5wWykSS6jF-)VBOb)@JS)(TBQ|J~x@DbUYm%sRi=qtOIu1*P*-VRcv;yxy$dXjN zgkLVycc9Iex@ru4{BX?$X&9C`1W zOYOW{_2bv(aW))*UxJ;#zf|jQH_k6tYYsvd3NHqH)V`n58@Y3$PTtH zoKt0yB-+CyMJ$LkQw01~?50twLO%$DP)|90l0*)ldsz_pieAo88J}O_FtTb3Rf1G_ z6-LV|N>uP&)Z#3dg8pQBCm9FuMA>~`OO$=SH60YWmzO~TdKJ`6Hl9hQ{n+)u zc;h$;1Ffd4Y4-B{p7d3cr-|}1x60XwQB?zc7WgPZ&S=X(7g09NT0}qY9z1#bAAb+# zq0V&>f@xKra-*Ws`1piEeh6M$YEOIK$YC|sh-{WV@=Q0xXq-Vku74I=ti#-kRam-t zs#Di1qT2Oi@vRd!ULK^JC?jO^Rk0->>O8B+O%1}_6FJUVb}OvGSIL^Vp~vyyt1@@P zEYHPhE>hAB_^@v77lm&J2cDS2Jxm%fhEAgQL!v$!nxu^{To^NN&^zKB`0Q7!|`^TvE!QUxv;R&E_JbEL!bT#a&3uk~6^JqPgj z(BPfLG-YL6g;iF$#K-bJHKB2wmTs(yT&p~ZqH5&2z3B2c&KAJdjOx;G77V}+@qy#} z;yjUinbbPWVvHvEf*U49;^r9#wwHR9@&iTCH^OAP7kD&X1_&k1^YC&5#^I)A zz?+V9LgY$Sm0zV~NJq==&RHZ!ux^T-BmvJnk5!5VDP?oy5EGP_=D1`y=^!<_%v2ev zG#&XrWKJ%~`^omGAUIu+rW7RUEE@!bEl(>DtvvM;H;BOB@`Utpn#QTBKsL*AWI~1x z+1ux*vQlq%S67Q0=lOf_C5`2?te-wb_4fHmdfA#>=sth*7{=H&IV6)=1*zGtz-!iO zNj7uO1jAF4?B~^roXTlhnQ_`=ElO@kGBCXZXEUW61`CoY{u@`S$T>)+%Fwb}wwbtL zD^d|QA9f3!OxS8&f*7Khh8l)@r>=xqbls3%wp^~&6X(~*#JBeY+858#=a0GEfLCWc zP*T7>8EuWbYu!h~wCgx`11I!j$8@}uUhLU?Li>`?`j|b}W(Xm(0mj|&xRzsQJ?B9d zjSO6&i7;9wqj``9(g#1cj5Xo$*~t?cU!{bW#^Px6+(LdE@ds@t?ydOfhIl5Pd(T+p za(ljF3nJRPw@Lh?w7tDOl&?0~F3iEpm0*pA3WssMVh^53II01ej~GHyme2(szJ1RE ztM+)s8+(DqtjZhbrCi#5`}WPtN0vlj*niw=%#$>s%pc(KF)gcW_5;t`QvV>$8Eykp z*AW`JB%-s~IfWt(%IEo8{bY(un@R}&tZd1ff?|^y5Q@uLY>-#yq{9SI4=awsw7{>8 zIjNJ31VtA4iC;{~DaNtMDc(q;*T6wQL+cn ziHOEIFyl$#kO6D&ZSqxGmvxATRDjdrhj<=H9jw1Bh`k857MRx*un6z?UYAN#gJ3Ym z%qs|iGT3oKbCRens-iMa%P^U=u*EgMx4Dh8G7mixgK3e2(v~%Io9Cb~h2{q_E4!Q& zSthcu?{6hkL7hR=k?>Lygf)u*nj|qM>7@eJCqdn$xfQ(O-bP#aWaBbkeI1nG%0-n* z;xHl<3Zfvb{J?L)#I;GgGkIEJkrrX$5+y;2gdfLZh*-ZBF-WA!D$7S` zoM9Uaw`))M?US6;HME4t_AIhT34FfufQRtBQru`aNn)Rfl6<0{6)fer@QXAraa%|8 z`@*^=H$78FEjG?~4UB|OHEORS&Z|M`v9j<7I7{H2k}ZS1T$XWJgEe!iD8*t;)M|@@pd_2zlYAWSnVM1 z?yE1TD>(MjMt;Yf(|^tpJLjPDW*j$jjJ}#-dgmCxf_*&I2I(1w;4Is4Y+inYSd%!=$M6j~+n=erCcNy+r|gqU>6(Os#}>>yj;dA|MM8e4tMWm4F?_p*g?&`8 zC6w@w2!Z!?RYwQ(^ol88T&u1`>WviDtqtRRBd^p}R;iM3nUIHccpLvn%w}txCRJ1Y zzrqsn5;=hyyb_|HKjJx)d zD1@TpYE8Z-@*%HgNfxrW!aS z=&tj8RPlOO3Nn*u;Ojq{3QWp}hXr?b)pVG`S!O-SsEQIyT}T5^NlSr3fQFSS>Ld({ z*dLX9&9E85`TA5gerJX?^eKQby%uvG>?5S!q;B)3AYI!KD3z@$tGXHDtlCs@i= z8r78$P5lxeEK;G=P+{<(lP3{1YLy>NVjG15aeRVt7ZmnU@|C!?1i8fEzDuMCC&s6M zt^ly+7lwCIl*ot$-;7|rpR=+{53d?TLx7#g36iBkFoB$y;f9k-GP(w)s?6v| zaJ^PRVUW@>IU%xpa;<~#Y-_|#nqgYwmj3+#!9ufl$0FRWXn{*M39`dq;4S& zL4mPz(y|G}KrMx8aB6fNDr+bXEv`yYw*ae8oM#StHxBwR7&-Hbg^OfT=29tJV)uAb z3TX{_6|omvyl&BqE+1@=9R^^zt>3FLaAb;!?a|7NY$fP4)#Ep<5D$O*zPUP6>bLSp z-Q}SOr}*%9B0NXDMv{7g@^QH!5sr98bLc)tXjnAfJk*L9p(25`4o@gEe`|fQTBx;^ z&N+!?sa@4<;W2cjzK?km0*`Cig%qnC9Wa7B@fy&2qE@A24$FR$g>LtgIAQPi@7ZMh z?b7~$gn=zQ7IiABUZ8_?hn!&!Kw@A?_C?bCOg5Dqp#nsjYUN&|z@Eu>9N&WTtzgf{ zN;CAB4=;ZQu?ilO`i$|~yCWori;GA7T%%%OgqTb*`GG>u5mP$k$G)VT&YV|6@$-=)OPl#Ckrt<66qv zV?$e}&Ig&J+AYH(t4i`9el#NI-MMmvHFK)A{VZ`xP%ElAu$n5tenwi8`}Sa+gaPH| zj5kN2>G(#yJ`JcaM{G~e+*nYn&(ezU&UupF)JFMU40@5nfC!;ux>>}Sv%n99ZcoMZ zhzUNj)uUkQr(>&!q0zB!%sxgE!)wGY>=AOT8DU(ayN(hnT!r>^93G)?!?7h~R&xa; z5=C^bH@|Yy-5wo{{DL`VXU>kAv#zNz`QgiK1Q7ppmKj2Wd$qz|K@hs(0hjbh&F`74 zwpNbM5OZ7K(g>4?gGi1~II$~dbG=$zw1rUzZj9Aru@SgQ2nt)2j3%C^Vl`T^#m=b_ zDl5E!=1Q20RvHw~QhamqdW6hsYnqOkiYCt}c~Hq0jy93_I*@HIq$J$vEAAB@r%)XI zNUC=3%~-?q4x*fDlDtgGs{k#!%4nwqXr@q?8P>tb&%NttG4;C7dEjQbTkST`N3HWp z0qmbhS5&%vCj;G-30Sv($K^!=?_(}Mt2{6ZA}_CVDg*0KGzXch0v4sP<`4i;xnFow z=zYG?0J*o9TH$q}#z(S@Vr-m-2nrf{3y_VnGDMGoYWFEfy&oA0S|{jusD(40bh5is zUg_-@KlMgWTzsAm4urxWi9NTZEJNzl6RI+5<@%|vNSoUJ(R%g-WShMBegN@6Q;1 z(ODGC00mjgV!ydpK|mE`s1hLW6Cj}ChG~}KsaAoDU!4eyh^ECT9oH#Bn(+eYj`Byd zrY=bWs?svlGz$f@G4di%e&Q!jE3_U{Kd;6-*L^a=NEi><7AEe;(dxx3ts2d_1h)!g zwaSv=A%YZ2u{7N0qC`zGPO>yjseGzGRG<@$E2e)st_>8%q44xU83(?DoqZ6<*6V0J z>CU})%=gy<+O-7|eHjqH=#l~AICqsMd`XoW{)7~NN%5bpr)V7$TRLGdppkDe=Y*eg z+|4<3f*DqLj)9r8$LH+Ev+Rjc67Q$8Cl2_8ox49=(V~xT3eQM_8Ok0C`9k$IKW-QKdmktQ-A*ce{pQItsr(z^A(jFTL1|y`_t?N?5=}4!(X5t}=b2T=6&F?n z`X8DLo{+7yO1hFy?8P8!@buCIud5651?QN+mc6)_mwIDGpojf`~Kao^_u})Ck@Bx>k%_Z_^)iMpRuWr?J5PM~wdnJj?!7Yrg zERes+pX~K3xvhCJV17!?ESkR`*9hdpPTC5)fdVFlhoX^ht0YS*&?GBhO2_tNF@pVk z2AjuAlGMU*A`CUuR(pxL?PtX%Lqw`}DG&qbZx4Q(uQ?Hs*feHz1CtVzSX6fvk7SSY zq3AuRcKShKUdi@KzDX2wO|XYXrj;n2D3Xal5*}e&tRTFH{aQT}TM^BO9HFjUL-~tJ zU&uSqc%WsZxu=RWNT)E5aOUoHxVrXA#^<@ZuBZTuVI37{!%)5!3RA;Nh)*X(8lGqC zevATkx4%!K@Q8QqnXBiSc}R3M!52xSn*aDY9Ha~Z@+#wh9_b`XS0+7*fC88*agxuy zN@DaZ6IGxkn279%4gwbu5NsC?uYyObGIvhj3<<5_pY^ z-0lDa5Oo+>>ek!&qAmE+( zu*`^J$*koraF8kf21LV3yI2c^>T021PC9*z)wr*1s5#g%3~rW%9PFqYxmj9L*_{Sd z%Oa_;SUe_s zW|?r3OS?v77+o3LMoc6NC2@@Wh=#wkr??UscMTV0seF_u;XcmlyP+J^ULN)>7~{-B zQR`kQkGSumwL!$kP`DA?X$NW`fmQ8P6b7EDcAczDQA!~YnHcEisf0DU5P~vp z93>+t`K!IbkmcZVfG7WN;0j@@@pEPz}Cs8Do~>pgW9>=*jzTjFf;h&^s=BJY;f8V~gd5z^hnb z_#^@Xn1V{^WS3V&)+_=9f>!Vkq-<13kr*@Sl+!~dmQdFcB5!XmXwaXQ;0U`CBmt!2 zc-({{wdJickJ2&E?(#KaG}nMFQzB90S? z-h6~6^Sbm!mX3%hOi}n8lMW|HsN4fV4S5$^ilqdHrO=4GY-LmJE|;;oT`Pyuq_;2JcK%#%lJ0sW4*qY^596qQzP`EI3cvsA{dsgS(;R(J zBxPLi7?I3U5M@NRC8(l8nyM&5@d?(F8fKxi?nl{_&OhoKeB_q$Xy{I+PeU*4c^3SU z(4>m;0Kl>0h^K#GDol2uRFx!(;?06^@%TnEuxlksozCX{YPYDI_jF&C&7_SJVz#2~ zEP!f_1;`7R@P_rB3<_H*~{X?>?hNE*la2i`)AxozNY1wG!2z4 zF2yUvk%h2HNT$#L*sIH63{HsZC6;u+ITAtBV;zt3z^8amJ2*JMc?!%&t7(H z(&LGmbJWZ+>vQbu9D_E;w#?b?bGG7~y>XT`Im$DA%$m%NSlXfA*I^YR*Mw(Ag9wt{ zm)1RP@GqqUxR7Cz1C*uXbza)ptwdaXkF;pI`kWtt^G5Y>Mt~?WuX>70N{~ zqzR-HhY3owTwU5;@I6ghLIU)o@D+MqwQa-R=SqO?c{`Q04k?MCMc7`c`0Z7L|#wcOn(W7wiRfNx82qX7d6BPO*FsE24ek5=-JDN)LCU zT0EqFAd6g?7I_a@laEYr1JPe%MjMDWZ8-aXd51zNKq!ESX=!RFsjD1xdle9=i*-Pq z2!{;sWyz-qr>;kE(RekVP;K~#mvJC}aI&TJ0r)-#Q9T-JctT&o1f-jN3~X3ZM2k}4 z(_F6XZZQQvUceblU(l zpJ*_3N9Od_`w;b?xDSOrcid-I_?*&pkpvRO9v)d>7#RcrwP2Mrh=Gh>B$YP>-$e@g zgy~% zy`#4P9{;|(#DP!q(8_{HDwq=uKW$S&f5ivKX%Yn2rohByI?+S|@8GRY}Y;nhrvLO z`?Y9NU6)ep*~*Z&PH#`i-i-1JM|+?>sXGtzN{~P!QqdgX_7BS^sGLZbiUs({BQvZn z@o|BhKOWMHcjA7x8X2^Qpi#&J_L)7+M$_ns^>^jpZDjsz2*} zdvrFN$h|KD!xFW5GGiW0tDH7OHX*LYlD8R7TKX76J4j}Zg3CKsxUfXOY^~hUQvVZC ziBu9=<>udBNwQ>8oo{-_#U;!!Xui+LOCOCITXya0fgH;C?_O+=y+IP14^@ zd{d3TZ{dSie`#x&M3YiZ^0qa{J?iY#VXVCX=CY?m4koWD@cK3&zC49-QqR<8i&S2sD7*75$h`Xz|=( z#uC%%>9}XSMEW?OYw}sQ6UC=rRRpR&bk$jgt3Vi9=P9)}m?;1dnwP3F@MzLQb+{L# zDx5@fdWi~7#X&U%YFMSPn6RJ5BFd6kITyR1NUB8x!YDiX1oxM>*sf z-p(vuq*WLDFY(*a&O^q~N>s(YgUcp&P7# zDdc8^oGA&|L2xt-ia@-`Tub&%U@+2pe13Sn!EYftwz7A-g=D==ThyM(DwIe5oDyXv_=k40#HqO7iCIyEA>#0QC=mZ;)-G0_@2mbV4oNxGc?4%n0$Pu&Pnk;v#_aG9? zFn~cMZQfkogX#}BAqJ~0>2`=G`so3`deS>N(H`t~YtvyeQnx(K`8G!dhg8~=)aLfZ0};r zLh7yMF!cU~0osjPx-p#w)L$6lrnRMyd8?Z(&(!Kgt4B{9CTAd3#5Qh|-j>&I+Co2r z6NG+8XMCUE6d+N(1^$h>wjkdR*>jI1XCchEV``DOK|-N{+yrw;hG8EW>mWVPqy@LA zDUlNwll>XZ&#gE#@AZ^%?&wbs-XmB20M+XU2v3XH%i_U=lswICh@9?RCTAiIr?sbR zaNS61c%{7uz!gD!RziMNs>-JE;!O>2yR118_a!TqlvVpyHjvS|*A%N^MqoVhG zIi~KFoNPMWx8jkQxz8V-hwM#Tt{}}(Mx{)maDzYr%7lFDB^9xKUM1DIc;d*lh`t%E zuyef-e5@%+zd0pwFb7hc8g*6%iRy1tvKy zneQ)m8_wZYqyWX)W_u%t3(vU2v0NSeQMqCv-|*Y7nhoVwm_(^jl%G8^w7s^9OiG#M zHu@>_Gbz(DMVJ#Oxl6N`iqL*RRz~!#B@^Er_Yl;~DJoq)4qO0-vMW;MZ4DKhQ92cC z=lyEyayE)vYuu@FwW#_Z9Q7WOYvLX}Y#zxi?Ndlsl=f*S9DRrf^q?W^F4)dP>O^P1k>fXQ;yhU5Jn#lAxi_&6iZBHq z%}Q7W!V)9z#!E(+wJ73Br(rbdt(vJCo3;DfT18o-At5zDu{2RFwI~nZu9ab3XfmM! zNl!2jp~)%q4{+9H>4h4XQKOWAEU)Y!&Rh!TTn!;Hixb-FCQ}5{!uVhZ^+(A4&2{W& zv}TM%CtMnLgd}O{1b~VfPH^mnDHd)@LWHiBC(M}h&N}mFu>?#iM0O;a&cD#;?_IPt765nLulRs)`gG?0O1Sit5J`i}gH6-3C2ERv8>0Vg z#OW2rNe)vgA6Kl(CZS!Jc8cy@11Lyh5qHsulZ<>M=WKmu5QB*Ql7zhH5j*%|!V>z2 zxfLD&eHT(MNk?|fWZtEvXgf^d;7WD7NJZNn(?3WrMRbpFdyhl_nxx%raU|$07}F!yCNwKD;qx(LQdGGNPk+ zgiyfN>Rl2W(CDJ=Npk$&=XlTM3~x1_;Wp0kpXRtMb9{$6$Mu{8Q@sDF=fWK8oXoJ3 zb8OXFOvcD-{wbM^4_AzLkjvt;wg<6IC?1PyV-EHOaF0!M#xA`nP0^$Zv@b5D@6lMR z;s|rfzZt=VKc#u4>KWbePQJ+4$MHFBkW0Xj1=`(K(i=T5%f~c12HP@IDg*$0q)2m; zxK$AES&m1+tnnYTb1z=($(wfG-|qBH@6C}#=QIy%01O-}99fZ3E~K9eGMtb!>rjJf zOoEg|4f+@#IFI*2iUFRyPaAiH&7%Opu$+=N{O&3)f>`{pQ9;gKnz^Pi(Y=f`Mtmdj zPz*OgreCxZtYs$@+$GDE?B zP`F#WFP1E4?o~lOwakvQm?{+}r3UD6!@8CVGo+%jf-_W6K8J7|+HiVgs;HmwHPt3K z0wJd@qHOferOqY^b(Y0B;sWI)fXmbzbWg?8q9!J|ol){K;NYK}SIj&QzFPx_-1hu; z9q1pth5J#rm`4Q9&|S*>!1cg`frA0zQ7r{}r)?GrdZb%alP(&k!@GAz4C0|J9PusNSykG9(O96u?+POoY$An zPSt4-ls8Nb_RDAE4p1;gm2_i+_C!U@0jcb$9{IK^;9mT6;A1)8+j5^4PWZJ)oQUZ9cedL8W+)gKfxy7c10=v zy5owoOh>JK(#Fy@$je2@&+}+sLnSb39(C@gbqW*x)}c>H=jDUi#^Ge$Uy_Xe2`R-) zWE)~1-3`Bt@s?|hB)vgOgzjVIP3f@_nTAyNq!z+~hYB@$NFAlbBuc|e5N(=7!*0uy zlrjrhu_NRjQm?!n;)il8et&40mHhM z&ddwx?kP=42g*ePGwgk2i%J+_P$ThgL5H;lvZC$`#dl8M>vwMa z4Sge<5q{gLPN2B@PM7bO?3;@l6S%w{cUqC8%4*Se{1|F|?aMXHnz9;(ZQB$GIwEJv zkcYLYQVFu48b<_3_9Zo9?E%tSG0e7@rHyF%{z8L}Dub}bHhxDz>ey{HsOO*nN4gQT znzxN(bdqY-EHpI9_*k3 zckpBzX`R8di>4^ej*Mz2UWHA_i7cxn`wHiF*R{gEwmK|QJS6Xnh*}gtI~g@v&seTN z$MQ9sjEcqoPu{uhxNYZm{8fa#sRLM!c%}k0z+^m0jg1r6-fk|6#ezp$UCn49&BS)l ziv@bwH|RxC4J z&%f9oi^J4}PXTU0w;@Y2HG>k_pUfbP2Oc`@E=a;4b3Iw*?caUVqx`&1M~M8V4qZ?%u|YgzGl`Q<`1-G}yOer{}!mPoD~XCd%-ccVDRm-{qN(_l{tQ?nM-`r~iHE^N$tv>hJfY5CQXcLKF4Uq)#MGsw!RS? zrnS;;utueRCsXudH0Y~N8Na$!(cGVybvuC*48h7Jy6EPiOvX`_{W(CI!%$pWbCYX? zp`eDV&Qcw!&8gVARm&l?D!IBvDP!_K4j+X5IUjE~!Z{Jf9jH3Ah}(<}rdnzwfQ&?j zfunD|B28KI6(z^qd$K7GzU}ec=9iIdabMi^0%r3*I94EWS}qOX4O3)Nw~**?o;%}LwsM0%u?OAGj)^= zy>Oyg98kHPrR;(*iCAo65m5-sJ=x^AMV}gOIJZoVO3{_QuA*MI7TCWNPp7L}qXCsq zzQ4V(|FWmW2SQ%+tH=3&pKGhaKls|iPW~dxlR4Z0O5@OuaPUIW)Th&mnBg2gL4*-e zpNEW9c;3;ddyskIglS2^86ID%262?&NgXHisatR)I!WloSszY87-~9Kb3qYH`w3oD zwuBEExHxX%p+yI$5BC@j#~Etj9-c%=961G+;3@B-*J}_x=HXvMjF)yFmc@uiB1SnWC;KyQJh5=QP040-Iz|y0fzit z(th)kuY&BuKJ)Y&<9#FM;@J}C!#-HL@E+Hxr})Y14BAQ(rfrcz@W2xro=-w65gb~A zZsg2ICKBiHE*s^pfpfK2f2Ex`Az9supN?~|WEfzJ+v9{jGj~q&GtRkV*eEHb1~>DoIeoppv}4A`RLG_ zjOaOWiE(Ef`C`*v7aKH99k0wvfn|ye{-Iywi1wy9fZ$!9V+&X2q1y)^8^+QzefT#Y zaTJspC~2fQ!9~q!t)l+OE|o_!0Hl*QlTz_l_tUgy+GxI{E<9C z(z&kNWM_jU-#Ofj$RTH<*&HpFbZW9u*c)LirBG`=OG~AM4W5lA-61YY+(8@ zXv29&n|D9%+3xZ`5RD&NOVugRYe}8HY_sY2yzHI3vzZKp3h9em+oMKw3f`~(BzvJ}Q? zp3e|+CWnKdhp{xdv(r^;Zxz+fmP>6!#rmp%#9VFo+nS)MdE|635?kxc5s6uSRCHuX_3kI-VZ&>gIOF*vzhP5Ig$pc+sU@;TSxjt-8gP^O`D9$QdNU( zl{ZaUD%0`xUIHOJuUS=%(AHa?^?DpdrxJ}V$`uG}QEnzi{3ASi2xyA*Pk7zKZ}~){)KOdIo>DZ7_OtXhfW;Pb6U!^I41mO zUrMoo7UL}^K+>=;mFNiEAI$i zM>zG81R{9?g0O3qqYbv+YwV-7cGrr4V5iWL9Z7J96?Jy)T$IgC%V}?DMtL~YEy#o@ zc$6vKcAqj7eVP!394EqVr%3R2>@1D3HZ9vidywTb!)cF+N7lp(;;|?q&vE@w5;bR@ z;wmuf&^EtYT``^Pq4>9TvZxH0iyv#vnp|2>^Mu0NTyO{=tie3#N0gTz^QbV($6;^=-Z%v~qg)qhbT04H7psm%{ z5t*%qAr&I{oSi?_kLT!U8&DE0EPlQ`Gp#Jy*zrn1ek`{@5!-UyaUryLVY%it2&Wg% zpPjvYI^oARzc)YL*bAMV+bcYO(`k4O={7|J8Yn}$7ehJ(L(20*%HKmOzr}z8?2zi` zkaFLUTH9OLlTi8u|LYZy@T%|@$Znxa!9~7 zBpMnLa})y({ZUTWPAKt6rz^@{y-!zz+yF0HfwwJ{#ei~z+AtWB1E-ons&)dV^Y5l# zA*eSs*dRbfotFJ0jl*fVqC+tE4hVTKYVy0(WDq{mbcd@gI4-1tRfV&)U?DOkkU+JG zQY%OiBVX`W0cR>=NR8(arQxPxPLL7XkNvplg^KaiPCMLG`6tjjQ`ujd2Fif$+0pNw zPVV*HgX)Vhry7caIqD){DFKE;-Vd`3v$yXmS-zXE1;tVyF3f=^Nb@4&u zMxdj8D&t2lHRTe!m!d*`@>0Xv4A5rj1(fU&lXqqqF4-8WBs{e#(XVxy{cject(Q87oNVtGM% zCoeFk0~TF+y})*ucVaF(aNT|L7O8kuy*uwCqT{}uh_g>&)E%64%t=Q zXOZiU6UUArPt=&5^*M_gSfJwF~o=wgs zFmVlx9P1Fv1~x`}Tdo#`JwE%R_+ds2t#OgHrfAh=>w~Lpe%LFvo<#yIof!gH0}xT+ z_Z1x@BgG)x?#mU2Cjw3ed^1kjH%Wsa%h~a=NEp{NhviWal_dyQB@y_AVtxkJeOt_we_yV|zR|J@Ygn9QsLHmmd1VwyV zyd^oYOaXcT)Ou+(OOI!)Mu4CCLRitP2VRcPkpnDrised#{^Fi;mr$M$6SLqP-10tw8{c@}lCrMCcxeu#z~M25yog zf)B(SN>f@u#(+uJfz}^*QS|U@%u@G-jRQx(IC|zf`Lx8s9c-2dX;IGZD4)TZqX!Lp z_;71!XEc9Xe4PB=Btf0V(kQoyP753{a%L#Z(z3(b3v4`hUHUl)5f2OYBOS1v+mv?Y z!)+XX4uZI(F-likI3nPXP(EpO&m*Qmt~Ol<+Hv5eOTKWru_Ahw#;l_eGB7(drH_Z& z_GSsnJp~|xEMVU9EEu6j?9-)BG#YsbrwnnNg@-lq;zs1iilNqA`JdkQ&)j4Z=%iD)G4dU+n3?bW72_;~;` zH|9-;L5x5#oL>ifC;(*SyRi$J9k!4k<}_zq=RTYD_F#Wr?J36M?%_5@wm%Q8Ey|uV zS4Aa4z*r0?HWre1QJlKE-+Sfj=#L$U$z!G$?)}mWlW|N*_`6+Zn7ZRNiu_EDLU*bGs2Fd9WNL1LdSqNqYy@(w3}2|-J2b~ zO92NeIY{HOyw!j(?AWf*=YV*9NZd@5t9L+~42U3y#AEJ&&}c}UG9+vma#(BJ`kstK z&Zi+K!;tNG$Zj~wPIOdO`yeTQ-2=gZofj? z>o?C{BjnsY3Abj6wfXB4^VyETMWYl0daKbyGdc^Ehp#zE8c78;hUMk1Vy~t#pvPKd z?Di_zT4N;=WT{=;EQASC#In zo8)&Y+3-yj3$ZQuK+{UXnueO>ucG9i|_p$kBPGJ@qwJ zd#E;4Dszo`HZn)BC%V$vcaU_wK%z!no6*WTvTe;OA)Q}k&U)%vEtl5&U2C9>O`1go z#KB0;8_>f66+3I72VaPoP*3T z1-D+J0&aN7c(HZ~9n*#P?h8GJ8*iSw(EdOy2eZThwu~@v;-kKVhiMQ;agvqJesVkc zaJl?qgC|V!kH0YmdFnO4`SOmngVQW)=M{@FK@F?BhI;hhPkhxlbt9p62SQVd`+ z0GUta41l{|Drt06l3mC197I+eC+qE9g;$hY*B`o@A*H3eOR1qGM?yt%=o~r*1Qh9u zh=incNlGK#AV_yecO%{J=)Ldfm3!Cs4}9M<>se==b!Pw0v(MW5oW19n_1hVwOYsuk z?$47PBPa8Qo4+0VmF_>66UO~Y!@7E!ZaKG<5ac#FJbtfow6ETjx`{f_or$lc>kZF( zHU#W{R+TZhaY6ulh32$h5ZN%t!tTHN@^u0^AR76NkPr@&6rubuN6+;@J9c8ILJE+u zD`91QQcUe>w!fOjd@od&g5Ns#APEs?M6XS_u+1YyR|wr7sc6Xrhj+zNFEe9OAPL0T z8Hi(iFW+Xf?bD(NjP=biAGxq<``C481|t*e6(pfNHqh;uqFv>%svfl^uR*KR^AKna zNxoTxvrSPAL@VGB7eeN$Qv*ar2vdm(~Bt zqrdLup%DDffS0^-Zi6d1sazTKsBz&gk5Urf1fafX$_ja;*+od)tcDDAq2-xyevE`k z@Dg9NP*Dsx+X4F2*Tk|h8Xwins|W0HOmHxWhD55?>f|bsW@qf!UQp9xe6k!wd$@b@ zNww#BmGD^jYPQdUhs3v_mLTOoQZa=0X!kkXoYA|FI$CjCPAUjE1l@?L#yb*@n$8}k zvdV4B^eUX83LqcZTc%5}c053?3JfhkViuAFgaFPQS|wFOF99YSatPn<8M1N7?jZ1P zjJQU)(;MKemIs=g)m{#7v@^1O>1Ze+2bBjNGUha~@b{nA)u98V(jNykK>c^lzxK{p zVXy;XPdo9}sM6xG7HeHTPt@fvU$QdR>FTL#$YNnCx_^uPz&Kt}&2xacjd4I<5(o0=Dn}}*=)~92gE7@6mmh2t580Sb2{&Qw$yeN4Sg=}Ds%d zd&SZprd6A_k8L33wJ>c4eom`QGwzB1tl5--I8++}e>cRJ8oi$-PCK5AqbPZeKt2}1 zf%bWR)~X`{Oatc}}exEr+XDg>_)%3Br-K6*dF4KmppW+1n|)E_!Ew--X3((&`Cyx9L@R>Ome zcNKIzz1;mw0i6_J8+Y3Vg$jHmwJ#3KuBJum)VJ7VD0C)~Y>AVefSL5A$>=F(lza=e zOw^R!oWq)4n%c>p2#k1Gxz6i2rHJgU&UbwTa(AJnUPz+@m(x6VHtIaihUP!4z!7qe z7*^1=%_H)5#)3I%v>5|K*Qg@oqlh99f{)@pgV=nei=yBS?RknL0z>(E`!NfhSfb8z9Fg5Zu;Q5uOD zrNhlZbipPu(=)U3p(2PLsi|IQR^j_ddeld59!>3Rv!MZ6Y1U8-wY;;& zI*-HaHEymxW~eN+xN8alWca=T=uwyMTMcqV@||mJ9bz53cy#Pqbn}w+@)IF-1;b3o zSa!-f9S_{G^$w_v@p0)eK8B1s>M&j}!K5qAy3*JndE=2wsqxpR=04xL&qCW$76@^g zYaZzo+p3nCr&=o^z<=?pE)KibcwAkG52B3-b7|Zi;~EjqnK?fd$Q7qNOZG{v8D5*4 z>txFvPApnOs>Knu?I^Ifq?c*Xr+V7BU;M)km51~S;@3(ISbzLvx+v7{ll3r?pCWp6Rox>f zM`vL(wwyduGt_oMm}0o&p_R_FVq~(p^iGvz#g;gg1U$wt#~U4*q5B%jTK%aTxnj0Y z>T6J4_nebtUV+p(Gjp~F%VV1C(X|ol^O|s)veMUr#Z=L*b@{ix7CcyHN^jdCYFNKW zs=#K1@KOw~xYbm@HLu2M*>`c`^=_CjwI%EFW7xNvz(=3`QouY-W{+nxNjL0ZLaDv8 zBDkFfya@Aq61w;)XT@;F+S0 z3E0~bH!s!S3&DtLR5Db~x{sDMNJb+tmQwBLG_LtW&UqVuHKhOn`?w%zDWlB5YR&|0 zD&09D_hX5a0RKH$ON`_6phOJ-r#w&p($>Xcrhbfy2S*-8737hS;sm05z_0fG_IzCO z_N~WTL_YFmEt5%0K46mT`m3iE^lz?1qnE=Ge7irVMLp@$X-Az_VYwhrOBNN~d|iEv zB31!REy*CrUVmYrvG_v4+shEuju&>g6EDPwD@=5+ekE&qAS4Qduz__Z8COM2c3-`Y zE5Z{Y$*l=oDcu~Ot0E^#PE43f@ki4)aB4>a|47x498a8p!E09BsU}6b0N#MocaPZ> z>9LvWK9+(tfzj-_XJmC$p9#1Mfa!{F_}<7jCO1|}KfbIY=9*@Yq+a58ouE<*SM!&b z+Rl`BKMKhcxLjYtpQ)fu(@rVpO*!}jS;Y5?KFi*VgH>%a#GZ;jDE;!OY#+3$xAkyk z;_=3vTNg^QqMTn{^((DdfH=T z=7bR3SlG^%!00AGnp6kIm@k^youQW&53tqYOQoE zd5f_EAq|tc3S@=CurhKbiEFx;4G}Q?@ zgbi{xr`B}e#>qp=J zZ8K&I55DZ4-!1+LbjTC`U3Pu&K>j*f!A2!c<)be7!A9YEIq7|YZQM)q9Bb;s`@6)G zo;hjJDCkZd?qfIbjlSE{CpCA7k+dTl8FV`m|oK{B%_)N?DR# ztEESlJlHWcQ@Z;!5Kc0F#gSX1VYsqM`mf641$+a4Lj(ZkPyqiWigbY(!-=f9e>Oi= zPSTo&E(zg#a}W69AN2(jJ__MmfaSxoR zQdsrH$2*(vO4i|ce;*C}a_$(v>Mo+XJ#ijGnG(CPr;d6c5N|AAG&TFyEq-@9+Q;MU zAn0Q#i}iH=^_E}C zmDnu8v(<5%@yUD&=LD3?(cTPE>36pw+SDbfTvdKLNaoLM*E$;oY`!b45nA=Jq|1!t zcDTOw&Q)v8G!U>R<1YE4;SK~@a5Xv>#b zEbjzV=sL8&h`ea^r?DaRg}zpmxR`aVm8HRc{}s1ZPSYUF5X>4wIIn}`&4YuOPl#S( zE@+ZK`0A~I7a|(A+m5_&)w>s^Hk9*66ML5WAEE|j1m8qbIQl8eZlz15)1`)uVGk?u zK-L*2QO50ro3q4Oi>lMJv**)f$m0??9&YrV}@35I!vlGP^fHrNDla<)^J$!6oSY0A7>hJ^{Z?|aU23lgV?%UAJ0 z&}fLsE)GBHpW+NNgp!C$4@radDQ()(RMb>LCCc_QJDf`&s19bt2xd?+(po>?t|+k1 zUm#tmt|E-Yys9@B53Zx%F(g`B*1}#ppN|nv)Vu%b8t&%*+~Tb4MbJ0l>hQz2IC6Mv zYHy-y<^nN=xInm7AjW34kD%uEKUC8iP=&VA;-k#x)1LUJi1Ak1TIjRtA0s1S3lhe4 z4diN%){?r9?#eUt=A4?>_+%b%U9VeW$!A#<* z&qS$ukAW<#3e0BJ^`yf@bhu*dvI|zi&cu>Kyq&Cka%}3nIC*LGjy(-oeZfcEpR`~; z74f+gf-jC5%OUuft;BUWO4)}>yxp%^uCWuR6?bwL^vi`b#N?vwEO%D zd~iPCxq?=xy5({Z=}P#3@;+I%p8bc2q4*;Esc=?F+`?-=Zlc>c*YkfZ+#_PD3lWEp zD8RQu0suM!e1X7D_72Y6CiYHdKNf~I9T|Zo6#)Or|LrU6-DCAuTH=5?)hj%lJx;r| zukz2|i|8ZzUeGTmT{`Zj#o1{SdHcDRjxu&f63eB+ z*fWcij!K`m5fO{_mm8_(r^$*tSjra{V?xpGIUh`py*wt=BUYRufGTNu*`s%akEg~d z`+?9Lzddh%Q9Xr8*&+E1MMQmAx1fo?`9Z6fku55{7(EJ2gtDzW9B!+X=S z>8)nA(>1B$B+-~7aUwUdj)xXlKKN*-V_%vlT=j?ET#(WE2F|^I+kc%`GICiYLR+(! z1L@-i#n@mhLKSHIH2A4{Z7MM=Uis=`HeW{g>l#tZ5+^eTMKG_p3N#vW;`a_;F{v>- zO6Z#rMXG=CxH6chIdlQ!nS}ciDNHgRAg6lo_7vwB!Y$^XE=dp=sq_YJPDDrm0RG=C z4&vbO{|5KV$&w<~)t7ki+xOUa+=E}_s6hgr#F&()7l?4AYhWeS_hpti*!A$s?)Z2z zg|KY2giK$-Ja5h?H?12F<l?fHIpE)4-#etL|f`kkS868?PrI;EP|)&VoI!%0?f*}#nJEg_k7oANv0hE zr(|WMkx`LSd5@NdSFW{o_R{fwdeW%zy^ms1cT?QLxoraMSXMP3lf(raE^KZvRY22c z6SW(iqQD!sEudT?h<-tntIOkU$-cyAJvx|yN?R2cLG`(p ztJ}wSIlEjV2*El|TwO}{z3Du7yLG-&P{(p^#>~$+=Ue6jj}HGdVFW}@c%1m(GAI`1 zzQ$>ABVK@y|EPEN`=txAhq{SKSFq8dwZLIo7JxV(1HX$t1x^Hir<7K zFn!T^9K6l4I|Z#dD||ML)k48Obj| z?TtT|<8FR(7vXLY_Y1*v`zOLbL%O>VcLSzh5aK)kOZapb=J&AT7YG2LxBC<3_aNi0 k`0r=L-^Kg(|0e#|i2+tdfja{LfD8Y8fLr#v!ymo>0QB?}E&u=k literal 67937 zcmeFYi9giu_cz`mBzs24zQv$YWT&h{3NwQ&QA8R=_9aWnE^9`}l4&e6LXv$eLMWAH zkbTYDC~NlZzFwpE{rP-zs3)^?5GFmk-l$9H2cwf8f9Yp#zTx zr&DVW9yky~ci_PB1N4Wiv|L?09b7zZ(SG+GJg%Siy?0j-M{`Kx#eqZM`TzIl|6&c) zVMm+?&a$?R&}|7kv56^q`&d>tL)}w~arNbE&Q<@?uF}Y$oLbNJU=52qT9P*1cHd7N zv#Ob2d#SP^*End28nhSveO;!jFiqmCyv?0TV$0BPuMK^U52GAh^RGEoMBS==_gsQ% zk0ErTz0omoN&zWJ>C7_5Q-^EhzHd4``tEGqe&92YnZy~#viLWPao^n9>%*^oYP@mm zWOGaJz0JB)QBDXB^R2LYa~VOJmnTQH;q#gPKauK+XvuRWIaleFFLP-!EB`sar{Ej8 zg+(4OZyKi+-lKVbcCzPVqk8eP;gZ4$;ls%d_q-l=D4cwL&e$Z9K3ZA3BCo^V;Zm*M zoXD=9Y`bcP5o7oKnPb_bqiEOU4JCe|&Wy97!`yhn_beSFB_CFkou8?@PudS=VX_UB zq*1h@Yt1BwFSxet=S-!Q!LJh2zYS{(IH@*YdfVIlk%y)6_t!;%8&zC^g01HRe4WEd zT0w%357BP$r8qTI_cR`8LRPzKn%X}^NoTU;3ky!$oKliLP8 z``Dhc^Kv<6=Qqx{zUM*k1#$TN!|G4wGvfllT=(`4A29wOKHtRq#ZDIZyxZXe2aW-s zw{>^8>v85Z^!@*Q{r_SI|1Z&BegAB5SeEs`Xzi#<=wR)SVvR`8ff)KDM-n#=e81(b zAlDu$N?!earBLSt1>R?$)IRx~`&`<+S2s(zaN_36ZYJ*GSChJni#9sPgFKrp41tfk zUt5;ZRezq9eI@JL#g1oo`GL2TVq)aykxP}D+COr_t|jO_GvZ<3MB0R#`6fs?nV=o~ zWSZ7^1NuALe-eM*EIzGhbvH0*L!&yZg@%EhUjLw;`Yj8Da&HqStEHj5xoGy1_n;n! z#pf0`9>3*p=-H6IN$snHtYq4A~1>AIyU<=+>EBlZi6ZN-0EHPAZGPX?)@=a9+DcRqUw3(M(PG zCx_-)guiV`eE0c3de{c6_0(tJU6+p@IKTp)@V$G+$JO20&ehc!%BZhQ?-|Wr;Mi5a zvnSNyb6ln5igvX@zvqdgtRc)5Mju5_mm|hMc{@qH-D{Y@OP=$tQaKUyKv!-1Rp{GGJxRekaJ05bi8Sdn&f-fEoW*1(T18ksJk0YMz& zKMpqf_n>JsgKKn*Q0*g>zP~3YrM1#nWV+u;D zzGBU1{9*jBn-tE51ark6DEBWGWvx4dJ3=>Nz4gnpMao;jxEFWtfsXT2LPrIh=xO8r zxr4y>9(}hj;>eG3i#Dk~FOe^qeO*5ub@g_`e?)s@Z4M>s`JVky98p?IV~58&zR5}d zto`y)#Fo#F#I*mfAC?E2i%zcUwTT_Rd9ZP`=xeudPCO-@QciBiM7}uG&LWb@R8Q`$yJ*SGQ&ur&e&$t{@Qjx!q}p$1tb^zIGjZ(Kqb@cfj!LjS(UA9# zuryh0@nyT7t-)W8 zgc^vyccldp|t?ACllUL%(V*Ty&(<}!b3@6*2FK2VRgsP4Iex=dx%jJ67p4L9P zr#FAAh~8)7e=2xx`eImX8DYoZ&5e+HMV-WXy^q;P&U2g*=XalWmNuQYE> znN_UnSu^|YJl{j|roZ3lh&yJVmZ~!8r@#3twvE9O_Co&qO1SKMm%Gw^X0{STYZpCS z2AAD<#`^RW*A7h@*_}X6R6G6rGNc;0d0CxLihn)D3jizJ5=d!2XkAJpU-X@=L9{Vt3 zbe^bEa6C`@&+>=2F*}r-Zt~K*j+W`$cj0^TYqv zX$YvY<#o=maa{i6yY=U%_)cKj-UXYnZTpK6q0cMw3Fo^ff1UY1dj1IhwgeBzt+!|n z9N;-Xe-L>7etP|H|Nl4D9t34Ic=rG9KXu7hoSV-whR;9Vp_|yki4N7Aqx?BXTkpdC z3&T70xYheL`QFCbdG5<7i63Hr>=Hsp)=ER`h5~0(0&&Z+@*$^8K5_Fn#I&MA8mG_r zoa|E7M}6$!;i%L5;`8J8=T(@M{#a7U^RBWNc6FojCTldKrm>crAHAJ4bKhRQ%#c&~ z;weQ?DpW46cQlVjRptAwEzSFtXUsCD0#9V@^;S6ikO-)t6ny)7YR1V5h4{TrF-i0FlaR$Z)a_~FYdwEp2TR|!xs>X zI29*5b+h18)2kA-EYD(jmfpOy-=BAI&rz2nT259k$Qqt-O5b&6%GhE00cDK;f7KSw zJr=a!c;LYA(ZdJ0z!QISiieYfgQv$C>OZnja>;mVRrnGr(@(6bAcpJBie$AmAuNsVMykJr%t<#dxq!YY?yK0-Y?{yUAd}xMvz&~kh9KW zdb0OR?sGQ1ll>fTQC@|;Xaw{8&h7t);hiGF$@41QzCUN)+3eAa{--i>>$%AW z#*b0ut6qfE=d`#`KY2N9*oNz4VgrMxMHNxV&Te1Cs*%#j zGmQm0bqDkAz#XHTO?~FCCx#9V8-Hs3wYgAR(VPgFA7CZAZ3k~sI-&-pGC`8l; zDR?tp-+9QBdeHM|l>MzOn8EqSHM(BBH${BZYLnc*-?4QweR!cCqkOW1ape7-9l5zN z+J72*`mcWNZRBYbuuZzwe|0Y}jwO;cQcK3eSxBX_M?p zK5HRzC_8R+=uBj$9?OL}znjDiZArI2vy+m$88)G}f9OB-vpm>ZCdjyHlPq>K3D+zl z$sdEYQ@uQq)ywkuQpw&muIwuE4 zV2I8a@Qt)HulK&jk<(}h@xcjUB;`EFfL;9gjV*WRF zx$mwTiCI?2);F%EXZ_6kR_M6z2%m`c3?Hbp-J8hX+x|Tz(6}?PRk^pTvA5>Bx3iYb ztg-XEcW<*Tc-Mc&cF%ir#&vK0_0Ghz;H{Cp<)tsS!5h=TyQ^#2{JXvG+cR60w!=Sy zgCo}Bt@q+>OZGOm)*@Ur_I7s$zBFzNW+f>OvVYN+uKaMBeO6{M{e$=AIx)BHr|TP= z`Fk5{XDWmDg01)7EH7p;&kNL$$IzaLacj@@$Lkvro@Z7BY-Tm;0yiU`H{Sf*IJP)8 zJhHHxGtfAO+zl7y?;Kg6Tbv#--Wx05Z63%EuG%oq15=U%pMMa&f(#1j)gB6a(YC3JU4C7f#-ez+~)a>dO8Q!h@xqpQ67!Elyc`WWSxo%lD+dMq__+VZs zSHyT}t7_{m;Q{WQOPIuKRQU^BNx2zXwj3XQ2Sd5p;rlzg=9GbdiB@FNC$m}jW2y6VCVM7IGNiJKrM(uTgMRwq&%y6kvLy%n5hAI$heu74 zj{1Z&q@=1loyucLb=fqm?$z3S&vC>s@{p~?6^2bq;^l+KFX$Lfqw)-Y3EjIHeMnqe zUp$Z@bwTn*Q~tx5fR5y6YIqexlXsyK_tQ+A-fQO^IUdGoh;n)+saG3Jd?oF*!iLge zLj^{sS~|6mG^O$+-*zUy9MbSI;^6%qCUJvkWMW(XHJT6xByu{T*#CXVzG??miQ}DR zOG)()7t5Oq{6I<<&g-+4B zq@;7@;Bon>$JKG08rifNxV#sc#d+_(F-IoNoz*#b94G1#oqk9h!;o4ad7~!%ke-U5 zK}|CxbJ8b5dgT#AdDk0VD^K(d?T0xP`wyCQN99S}&`iG7^&j!foyPwAeR}&sb6B3e zo)h+xk5z1FUr|5VfhxdH!9uw(@35EkXF7HXR@v?ZBcBhXrwX!O_(+0?jv=3HZej z$Q1$ABo>neoBo@CY{&jU@K)&9N;jnn9{?Gf7HBu4`B`*ruL zNHjd8EI(BU_}$zM8f#%2CG9w47(v{9N!OPj!BmP}@Cf*Tmj^AbMJma{BaLR$|PB9LI0Nc^UgOe@%nK zPDPy+H8IX7Ln&{r6j)SLO77JLQ;OxP@Cjg9?MblAm6do*A;)oSI8Su}+Vb6Kp4`K6 z+K8GMDc(>Fw>SwqCV8Un{Z&V9PL6U~<3Pg=+#Dq=!Ti#S??17|=HdAP3$$8k-SiB1 z4)Dzm>komiDC6XtUcF%5sk-;bJh>1}o{Mb~%^{RI{gD|ihifuk4!#}7T-~$COKc2x zz9Ln1k(cvpf`vI8t_?vXCRY)cRAa>Bl<}KMmdd6Ih7ujGYn(e4+&Y-%vui3f*@)fr z(Rv1<#FLyHELeJZhjqoN@HL|$tm6l!!d&0i+65^$HOm=~V>%YtT-FzYu20(TS>D~d z_AO5x<}ZvUPM^=Ii4x{$rfscJPxeDye&*8mjyc}x@QLUB^bGe7T&FAra&Sz5LpXV9 zsOpgb|2NtT7s}Z<`VZ8QR<@LxTqyG-7+BQOvB#Gl^y%ae(9A<-N$qMkMn#Tvv!uvv5Ywqc1D~; z8h;wF`0&D=GdZy@zB+z5F+cK#@%v@479;Z?BKki>42rt;s8{*52H%U%JXtG_1>w#~js>*$p|P-hP6`>F@)pGIawMcV%K6d?PJY$76mVQ88bZTGq;c zXn21aVI}snMz3X0KIclQ!ndUC^IZlBmiIHF- zGH^ljUMmx$P)f^#i+5sei#(}A$-2gf^W%|gXDo7~&Z)X1pQNNj6f-un zu^+$Gw+efql!iD$~Xot_|vT<}jSs&ZEJiOc-ien5O%UD085n!9X zgIWt<%7MqeP!tzO$BWaG&lwh!HlOGlJ9uaGrakG`74sdyq{6F|@#IuvndVR)g@7~_ zv0)9fy`J9GFL>mCIAJlgf7B7*hJ>z09VKfT7A!VD zt459Q*!#4_GP*g56sTXn;p4T#$)Rywko0QgFReULg!$fq7S|J`>)YOsfb)6v#y$tj zVg_A4NkTrfz8F#yBXEY5D5aR=DB?wB#oK4_@6{_a2Jx{m z#HB!W%;h6qCp2sYIcAe-EU-{`am+ZUOcm3Y2EG^*c6U<=CIYD%Sk6~*b8wfG^j zF25YK=bW)m8hddReG}8;}`3X=yF^#fs+Pz&a=5x?4F*8GX5l)HeJJFet9wa zhNi3w>AHf;R+RxRQ_mjlWgz1t_VuzPdlF=b8nMv}7DgzQYny zqaw|$&H-f%MvK25s?rXd=BRe68FfD6#ZIpMJUO2lpQ5*kd=ox(;2m7NA zr^ub>W>Lhcv9*3mzXQ>tuK3JidWO^4>QpD3JIAAFrp-2mB6c$T3cTW1d2> zvCdm(l6jpmg&NzB~B zZvQ70whHBciLtRj{8Gr}+_9)gPwN@D1%M3U>(DD7Nr z93_UAnI3CJnb)@k98pTK|Gm)KwhI>P=3S~MvcGa*VpRP|?0ox2k$+!pT#b{gI&Cgz z;-(rXNbbQ^$DE`K>mUnATARyN^%U^*gh4+)Ep2*~D|tT!BvK z(E+5?|48Dd!VAu?e5B4iQQ$@aKMdk4(oG`i8w-ekAW}V`**$ z^XH*SMZupgk5m_`xh}mJC#(FD4Klh3U%kBvQr50vqR(NW)h#O_N~yL%Xlk{X*dZ)i zR0xjYXtc0sLE$Ba#*;~O{3n(oqmPDPs}Zv?_6)r4dvzwV?JO)tZGa-4hFb_14LM#s z&*@*&@RB#!?1#Jh(~kPI{^-Jb7b!Zn2J>2lfr)W(vvVIl$t2Lvl{-GP7CQth(K`>5 z;vR^`K0#L|$#|SlW8RwXNRt;0DGb+sVJC))C`~%rVIf|)H|_3ITWkAs&YyP`m@}OX z_flkspqI(YDal=%(xk<~#(Ot48zYQ+LhwZEqA_!TIVIMv5-6z?tx^6YmaVLI?D5o+Y#S*+zSc0!XXH3k`<} z61^G)&W*ve^d%7zy>|NrTU0~6N29jmAwixawCR6)Tm&Pr%n zIsaPFcaT9^U6(=DjeOJ>abN0@=a))~Zi{}AqIyRZ_M8PN`wijsoTX)(NuNf65pt}h zkx~sU%@Ll1^>j$dME|>D-7*P}9n89qJQkJdrNRt>udAZY49gmVfkIwxbE}a+d!Fl`>I*Jhjq|6=e0m|y_2d9TW zpjakn^o6UO5i}*wjnux1tlq}E;|OiuxGPx}A^}G1GcS}*St6@7v?8iCj{jBed1smh zeSYvl!A!w66w9B;9d5!aElO#T)>DOxtRGHAjouJqD;Ufsv<+rQbpYZVk<9-}0TnTM z<@<%`4t-kq+U>{#A9kOh{e@Th{DgIm#7VDz9Bh^VhD3e7FFP?BsZA`@iDu+Ya{6c? zlH>Y0N*9h{BR~{ODuuaj&*t4>_Vu34GV&?Zl*V?M#N97nMfkx3e!9fW+w*x9$vC#K z$<$8oF=9di8Zq5ps)DkrRuRE65ZcUy)+uaZw^C6;CWM5za(j>P?M8Wp+xR!EAgHsB zef8HC+L%Hk&~O^~nj_-ihv6sa9-)=K9-%5|*|Ys+uO{*izd6u5n7;F3?(XM4vr74a z$E)I$1YQrgC>++UHl5*sbFV&uEi*)`bdDD4wI(o9DF$!_M|!SLv1u=o>4wTFqp$t7 z`TVBPdT8QPQqmd`E1UY|Gs1xh8GoG#`Dyf_CSvyS31JvRRL4DTg6~~%c%=ir=3ZJ8 ztsX~GcARYJt;X^Ow?7+#a32T!_}Of{;jmJodoXi$rRpV!3cqmjszkv-yGOV$(UgC+?f@9~9X2Ys2UT5i6BUoUdra9!~f zggslG;{N zxkb+ohtT$JJ5(2JJ17ynWtuOoL~6Qs5Wu<6qZ_W!>W4TtTnR@PJ5WlmcaG)*!BBwn zT+J8V#v-2gujpNY_nrfZ(P4ok!q6_0uZcqn8E>5C#xoRyZ=?l*Y;R70nJB(sP1=2( zlE?srW|`M-!Cpg}5cIvUmY2f7GE^IvCVaFePt!>%*r%jo$!84*KKL4gqN*lfCn?aG zvKDNHyrS~DnO<&=G9mmhGbdmz6>$jx_n|XAoKtP%pWBfJC@-Q zvGGhpoRG;FL0>0VoNPu>GKzh7(Uc-&R8(==?a*bol)V3|O2jbp-NGW0;!A#REv+n` znGhn$X_h_9^4|6F00deswiX`BuaVh0G|X*=8;jHgk8C_b(%(~SEjw4fG81@Aaba+;sdDb8E}CUZJ+_hZZ-91)C@NM<%?h%yM%4inIHA6rfEqQ6Hz$?i%A zr0Z>|3_{38iZJB*V5w&u@k$Ff?#GQ|t@QWXAtv-=W?5BN5V=>)YslH+wzH61qk+bi z!Y@vpHxDdX&5w@O<~5PHPT+vfqvLilz3Sl7vuM1#3@ZLNS4cj8_0K4drXqETdS;wl ziB+Jn|MgGWQ-bW+$Mk6YyVq?-8Z%O1^m+aWkeHId*22acd3>TLT@u^<1+gy?YThrM z;+Zn4+~cY)A++J5?ASYJ@pjI-@CrwKP0^2Amg5HrkCW)*l%N!K>N|d%BNm;3OQc-= zCa!gyB~mt7`)p4FJz728EPlf&9j&?`NalO_+al!rai%P#PWdDTlVY7I=4^Dbvq|-u zAo;hNxCjSJq%cV$eDP^t4p_`TY*k zqL^%NRXkP{A(|8w+v)UCkpwc-hOgzlsfmAyZbxsuvleN-Ul^a9&5R#cK;u&G$Kl_A z;x^v{ZB^tk=yB|FIll=#KPPlblM(jEVjk*n=^-tmNcL7yKbc>#`4`C29J4y^lEs2K z)?nhT82GY4S{s+H`BuVdahGdzz3+FSD^dvM#hA!2;6&`#MU^wBVJKg587*vKH`44= z0_AMH48y*fRq0m1ioc<~V)J- z4+BvT!Lk+sF|6r)IuYBCMiEYgNykahoMMCw)}6dEHrsZhh=FWyk7$NL-OCLx1hQ0c zP%Vz!xzV}R8Ela9o-^(n+6+?;oRn}`@EAL1C2EC~N0DSB+<%fsv=@Z|vQ8b8lWkm4F?7qmxv~8mK+1G#4EQIcmm~25?(S3eYmfZ z3s#PCk`F|e zp_O&Z%R}usAkM5JeyYl|AFtdj!{&#fHwudx#z>0%SDzDmZy7r9A>;4yr7x2r&roGd z;C1N%VUKI2o??U@;RG23&=98k@)vkMp|~AuL%?Sf{O`_w&B)i4%i&1MzZy1qf0jj+ zb0zim6FekNmn{66+Y6*f1~npSw>+K+1AOkwZ}}sd8o({X>9t-t;JRg#fN*fQJfRpV zWeE(U8cIZQLVlD262dGLI=)0Sh}*9~+#Ym?;x;=hj_qb7Q1rgWLST9vAuPoj^?{ZN z9#xsMUrr!$?a@}?m~!n!$vrtBaNloYVtDVTC1gCqMYhk9P5N6tP7@MeNra7F&-stc zfEx@|t|}bZH2i-b&KqV>N-%%+!-(=32>F^zh(?@@Gf~Ui=Wdp3T2&qg%Vn*T;z(+a zJ+BMt0XNF^&3?_kMdw@eVQ20)M{`&S*E+QUOOQO^%&zB}y%~?xTp(4a2)$!1tS_kA zKV~?u2&9Q?KojdXfQz&xWcVoR-V$n}>IoP@hiSlJbQ@OpDspeSY8w1J^|)73 z<4nM*BQxy>AJca#fuy`dnrbAQQd6Pl6O0s}$luEDzcR1V;Qc3&hJ%zCP1_SliwF=E zB1Q=yW$zmquuWlEx6A(?IEdFE(|1Cd9>J`@D*{3}FkHYHNHlif82+w;>^<>oRqkKo zBaHoLL-#7TV0yPGD|M_mNN#H0Sj(Jfkh!p|g=z$21jPLq7d7FUVjSRc5~4y3 zN;-CtQ=8pDDC1%_O2~MzLvhu&T^3*AP9@gXXK-n`cPfQLb;&r^?btci%FBb7L|}jq zmvZy0@poOY(l8z^$mt7wO~2##C&bR-$HmU&)sTZ&1i|9_xhwLny~?7Xm{FSl?}*_s zO`<MW-rM($>tJYnvw{)3Wb$Wp!GM0cXI&a&kqOrH3uKJ zA{Kw<*df+<7Ly2s4j*VHa;nd^9B~Wf(OM{uCm18!A{2Kn#;)%6*9SAjE;@>qKbwUx!MaYDY7M2i&lYf#j^sH3|PlKR1(W-P5k z7W81Up&p=yrWObUR#mS$O`l7KWO2MB46P*QD-WAqzgwu%mK}q#W<^MZ zO=5x3uyKCm7m@yo{&X&I%ShpX%j{R{jPa0*nv$X=8K6S+VYBI*$oGNoEW~WutkAxD zK7hH+eU(5*VLfy-mo>w=_!h=FR*jC(=aInBh#)Sv93`NPX}rzot0=k{x?K&cS+QrDeJLq95sMcyMs#g<31p%*nlBay>e zFj&bD9VjITw)K)qYvR!R^XOO?TjN#X$s0O=n@?|mQk}FupL>hlGAjq4Rjx0;^ver(GG6LB<+OfHcXzR%~osi7M%Gj$;`!Czoiw6<`hm_FJ_gz;-)Q3!>%ce z1o+foHArLHa5x*Gm|gO!8$$R8#rJOfV3Yk$&iiGYXLG=$0i2&MG5Sb0x^h&?2t1(l z6Cf|3D6RIuWSkCDRSkh|?tPr=?e;k~%(1DSwJ6e)!r?j4X4z z1H}uX5*Z3y7xizhMYC%EveBQC0~N8{;}ZTPM2eCaJCwKPx+Hp@-$R(o6u zC|Oj>qmCUZJJ!-*F<5aVdODhepeUO7$_pSt03ADd4KK#;ariR)RJ#A&Q#`L$613g( zB>_}KkDj}cSm*nRPnwY7L@5Pe%`nf8Fv~BV)|mic=R&ey}?ls(H3K6*T!NV%RP7NztFXFxJ%)e1GoUIR^T1diju18`+Sgrd61l z-If7-I@SN~bl>13dCgPf3>a$7|3nT+QG-lv(&y`ix(7fB;S;9$!hM;@zdR;I z@C2xen^s{H$2_=+At05aOiUnHh9O#p$>{6thGYvzVwwY>f`EPu3g|+{rCvMhxT!|{ zyVtM$7q#i&dB|C3EWK7@1Z>~J(E@&{#Gr5Ji4*3K)5(n&Xz-MH$ig(OO5Gf+AO%_T zTp+(%rEZ;Me%k7v{P@;+DZI$<8dnD^tD#D2E-EQ@_9lZ zplz94Kjs(}mu zR7nH38)8~qLb|MkuXN}+D|6&nf&PAk(E-AWmhg(uCx*3c^0Z9D0QpLbL2HGbm$TeG!E`E;@;yg^l+so>=^m7jqy-2dAR-EO%mgBux^tujm?1a8oklPp8 z?M=)0buCG`$pW(3oRvPAuDB2c%_NNZ7Klt|HTMbIeO_Wf5di1#I+a^Qs@YoPKfYG- zoyP1ICx86Pb*H=zQq}3TI|P`jqDW>2qC_mhM?+T>R994>-d+AUHp>KE?1-x& z8{UkLI2e_n7ij`@u(0_XHu_-zhs;YvS7w0tgb?1KaOp(KsPdzP-+Dzavy^*9uRKA& zx{a?{F?5U8VsAf3of{a--(Gjnp&c(3mu*ZUrpdYH)f~BZ+Q>~ucue+rD)ep#0$fIIx%s7BcZt4yfYUAA7PhiUtXsejX zq7ea~p&vnlb$=K8-6-N;{=h?$wE0q%L`ewBvD*56GNGYxl)Sdq*Qus<=;p<+LPb%w?Xv(Scqu_ZslU+W9G4t!txE#S ziBi2Cro2h?s~qf622n}ME%A@dLxr-&y*}mPtjmhP&ex!wQ3w!Z4JgShHxko)JLq2H z#_u&t5h|>WYMjC4LhFe^o^ohsKF#?2Dsoj)hkFtKfVshP1m1xxMz;c{*h!}`RP?!*aVBf zm~4JW1r{v-`L_8xEE2WDJycd;pJgq=w&<&GE2@!w{0ds-oA{8t9iy1ZrlY36bawr4Z$x7gErMa#W$kkTwvsw<4VihS|0Vk=GdXQ(499zg z+tp@P)v;m_8bZwk!{2Fdi-w4_O0Z*(GofAV6Jva%6)cPK;J`4QEBIR7$sAoaYiV78 zOt%u-23!AC*GzF@wnWsZ7X(@V4}za}tdq9B=!xgl?Z|)=ohcxORq?4W#ffDSQIqdc zAQi`&#se;}Q=oR8^6$PbLZs@o91HjzE7o_YZe7DvmNHoKF6w-Qhic>PI1;0s;~&z`fZcG7C4`*PbuCmE0OZ^hjsUO^ea$2(q%Es1gKmnHPHKX zMVgT6h*vh3d-k?Un9qcv-7;TOakxwE)e_f)+Q_C&Te{=6BQev#qqivW0jNq}p@cGA zra8^@W2(c%U|ArAN39-cF0mEYodb<{>D93NRhcT_>^{+zZrW5o79(5W)ZX3K6jJ*6 ziUg&U>PI@=<1<1RUgO^&3)?D?U#?f`=H;{|-1UOM@e+#cTFGBZvl+|wS=#mpB%&CE zZtQ?LI5l(R4AdbK#)zQTyWV9X4gef%t@$mPaUp5KD-xx&kmO+zBh}3y8xA3m?#l-7 zE*_n!pIFeqPru z_rh$US~o-P*MxjWt5Od!n2Py6QtN-(*-giCjIev_S37#}t=ZC;*s25GopEMWA0Q{c zxze|eiX^e*LJ5V2xLYviU>a`~CsdBLN1#>0?_X1U-7ivP3{YgiN<~#s34djk&}FE5 z{Eg87puioVXaEEmuQ1j3%8J6x9~iHcBVF&#e(xM`ITP}0Ec7_m(nTp~@zG>6DsZZM z8BT0yohGvSzdEDgD~~O#2iWKqKpozKa>S3qtL0u*odTgrP^(wW{27u~YQOntyVi+l zvDAh4fSTCy!n2Ah;gWr>K-&owIcNx-|7U15sGeD!muDgh`3VP|xN(B+_4*_O4Sa>A##=g;s}eK<``tu0i;&P_GFZ0`>T`kg z%U0Hj<^>kC5iu5dvjStlBC?wPg;YR)i`J5)nP&iqkVp9mtTUKFc50V9{{T=?K@PPZ zs)5)?NN?KvbRZzW{sipaOi5pxdSNoO6%?eS|p}0_1Ay z%WNE@{UBoVaA85*Vaj7_J|`i4x|kCAyt}xZp(Eu=EiM%5=G#H!VjK&KX0<3%Z(f= zd!y#MFzdo58-_##DZ>mXn^#|RU8IgHpCpV!QJR-n(^=8hd z7G&7t-1&}^yUt~p#7ofV?Q?&J?>H9FtlPB9XSufjfQ}3gb!5rOJ+dZaoQbcitljxg zR=<^LHPmpdypsD3nLe$=bn5nlSN5C8V9m-eiom%EJZ>vs~k>z1#W`;H8LihOvOn9m~&|=D!6q7CcXXAHO38 z^I5!fZ@RBEDVj$cj$tJf(@H`JT$LGhIi}FH!`Ff>0)R{x>(Zk=geu6H$9_vbZaEe! zLBm2d4IDsII)DweB@}owj&-#Gp*kR;Xc&N}sXFU8jT5q1>Wc9FvY{#hA`I^nLB|aM zmCMpA^xCS|?TSvpg3{5``D=1bQ5NF)8CXlOl&Db+ltK>sSoN1U-Q2Bj2E zvIl`iR}E)egOmhk5z@@0@%Fc5f@uyV!q8OX7I9H)AS+nWB%*uF0H_2Yn`$q2*KrUT z5hiesyq00-NhNot(D+TAier^LO*4<|38e_%oKU4uhhKH^>-_)Jk&x zFl(`Iaif0yX3n4Y)0@vpw@sF`e)M?nW5i>n~kv~UT->?6?%;T$DY6t*5#Ce+GW#z>OfVI}yhX|9mwD;lBT=ZKM6^n83>8f80S{J)@WUYB*D4^mmD$0ERS2$MH*)Z(F7 zZ^yWg!TVDFX#Mk_kkkK^_7ngYyP#+lk{`F6!;~25r+y1ARqlURO1_IQuVFICYU~?S zaLOr#x_UwPR4WOMLrJq_+(_9llb~~Zqj}~O`l-7hM7#)YEGSC6Rn4YQx zMG#o0weZRs_`6i--=0yZX<<8oVJsY>dS>7&Cv`DIc7n+J<4IL75Ur(}SP~gDw28}F z9_`U5*%{?Kq0~c_A7YXU6c3BAH_mY-zVa=0o%HWVV0YHbfQWC8?29^p$zM0O8hH)9GHK1o%5wUs#nuwrshe! z72ir_)JcEUspWG3MTPA5XBQ#SZ9f+(TCWS4%s_|5PTtI^_P~4q$f_R&f`PjtI6_mW zwQ!>mUjZ1_IXsv@%t2H<+nHcMH6Q~;L%?U&v%gYypg~)frQCB)`$X34mO{3|5nd=M zo!a<|<_l9{fvCuKLCz`<_G(8V_%AI=V%`52eJR{ zksdx82?(Gl34pC-pn3yhK?H$P9vokR6f!B&M6D4NK5zmIA0q)O1I~#swV=%_V{NYZ zD^t<{M1eBJ#|y~-mInumoJYA*+>UDed0b;wF|xb+y+k8$Z*^dZ;`l&CL{n-lXcX zJjkgFCDLbH#+b!Z#)$sBT?OKrRCxi2TwsnZ0YPul&~&Lap}@DcR~Nnwa9;@dE)s=c z5Q0aF(CdW^5NGR#oJC;Rbo4K4>UbQ|4qcm){1QVhYkzcQrVB=DcuogCJm&xn4@`I! z+x1w-sv8n#?})&@{MK*57{S|EtpfsQr=B;OtAs=7e~1*Q-hjH?HbIHAEbG!1Nt}0} z&a&%eDXV|%jrg`VJsyO@FpTeOdn#+xT%BgQxR2$zGdje#X@ThxD8OpB9)VJq3Urfw zxa#jx7CH8PE>ocYJI$$9R%=Pew1NzW7gtL?bbgI({G}ENKr8W}a`H8Q0xGb;OHc*2 zLv=k%4H_d5w8ji%!=ZZ+ropBGK$qZk77^M2CqD=c5+1RFI3*!U;dSPQ#x3OM7hF#g zx>zJNz!~_0TI{2w>a_H6*!S_7k{Y(*Svz*!K)0a8$><*M~_OldghHYiR9 zz(8*4IH+}fVryT2R3&j~S|w&z5sE$<$$_Q!pjjUK_9iBtMw6TaT?`P`aHF0CbtKoS zwDJ)Q>$+s+CJBj-zH!?hV$o)lUyJM;QJC4K8HK^hTIQ)!0K=%vU|{mY+~T)^mSeHX z59&w{hI`8m(N=`%Ih07gaoOFEsFy{TCr`QHn@~?X3_x?YG^2l;TgxMhM=1>HM5U^O z@;ECUykXnsnHE^7D(_A$oOP|94Guty)NI^czf{y1>;z>gE*6IE*iRL4g4iA=aL6l4 zAqK@m{b8BIZZ)jgkKuKqQ{?ke? z#72||#QG#hlWa)MvV4TqYWeb1ck{TwERByeM9CO31)E#p<0cqb(UZ(&H1D7n?=qc_`JTS;Hf)2Q= z0L}9LN`$cZfMKB|8F4^*fXvHhv$TypC{RW#eJoe~NC1f5luc<$2DoF9=>f($7T|W1 z!+f~6=Kin`mZb3obXB*xB|e=q0l^6P0uAtms;N!U4dw8prhOGpaUsD42r!nN&!zOf z`QFL}S#H-!uYaAP+{1~ zRHr=Zc+RxGI&IXLRzFk?*KoVBucByK8cK%3$^Va+b)|r)mA{Z=Pft>Ey^s)Hul6^j zZGT`3TgtEm(F}xbh^brrS<8-x_o?;M>_PQNkuKx?W9fR%1SN~VBk>G?+q!oyUcPY) zhDjOwq~dzvMbWZ78ncoL-tJY)>>vR_|3R5$5nlkW^y zE$;_%08^PY(=)@EfcrQq`3;PI81UFPv*EkOR*CuziJ-jVA23h@J0Ty48 zYRHMeK%mW5bX=6ARub~fto+Izq0KOV023s$2W2-;>$z#ML-hhk7SN&v(tf^Mv5p%L z7X_HWbSA^hoL)vyL0iD>f5p~g2pVD$ilT~Ljs@bh%+USS7jMf!jZm--_!t@RCkUC^ zzH7xnu9fBQT9-xsDgAvYUUA15FmnkF9wPfu)R6b>QXrRwHKAhmC7yUd9=YCl54y($ zJWoF~-GSPO1A75?pTH<&C?3EBVDQamkdxzqq4MF7s~f*UOYs7uRH+rv*|Fzv@PLa; zQrXo>Ku1=5U|>~_g*=J;AKt_Af36YR2Tl_5kOJ73zQHnE>wWd7qVp)0j>N2>ROt2x zxV4dP5IA_4t#R9?FFxKh%s?mLoat_@2E=I|Mf$wy?KFa83g5IlhlaYhEw%peDJv8} z#&2}dBHhZ~gPVEx*CuwKo5UgH>oVM_*DLg=KGUxFzM9YR0|QNjT7^A5z*4Dq7C=ew ze@t&be?T`ndV~gdxS-+$>N94HeZF5qhM%1&c|4V#Dy-W#4?q!B9O1INMTdyGNE_2+J zZ^EQK7GkA|mk z8X+8sm~YmH zSL~-gpvicIFa*8u+?!H4NwOclJGvGPlwD(>_Uxta5Nx#KJ}@h#&aY;5WslTaKhuJ1 zbSw4hV(M6n3jis>6hPUHY&LkeYVQ3~qkiD@ZXs|840I zcA5ZwGh*l&5glmb_&1rm zgXv0=Rh;slJ*C=azUo-#qwh-C*AL?OE^E0T(z)pEP#=-QRn_SJ=;Okb;azv7H)R7W znZIuCEynB2$mI`8b8dN-C74&qw6kJby21-FEea=}FyuNG84$29`)(p!l(;c|7(CBU zg_FhFVaVe!gDdDn{3z9rzxvD&pY56&mIZl%h77gZ3D>+Lf52a}HNti)|Qjl=lVeD1+Rd z$cZl69%94OV6_msQ$LNJGkFN%OIk!wOOzwQQ&`IaNVxUwJA1*`)wj1-&IIqRP1`mE z?o0_hNci5I?NhYjn72M^oM>7`G>Q+kr(>5bsXT`1D<<9_4U zoave{dvyPJs>g0ixj}BLvKL?+No72fi$KzBsjctktVCnT#AHjQXr}N4ZTdC@`YayZ zJow`xx^Ccq*o$hNkh)Exc~x${8S&=aT|xNp?zQtHsaZ zg}R?InY2w^`5?YXOQetL99jifm6K>GpkZ*B;1uH#@0Ww<^+UUJQu57;pjS%Bo8*wR zu?DeTlrCPdrKl)|Imc}7t}&GgFV~gE^30O>!Y#9S{KD)IDzZ(eLbEJOK{(b@B!%jw z+6A?*AY-Dw#IgX|lt8+cKlcf|Lw7ajC-4)XDuv4s&v} z>jhRw>cYVvFL+y+f%C-HY08FLf@3RpzkL`I*VF)n2xhG!FOUSIg-9KlOvDwTWa_*2 zeNH|ZS=qBM6HpD?1bAZ)97<Y1T?lGQgQZWF>>||3TX_@-=k9oR0X8Py1`iWIN)E0%nKap+^9L4EL zJLr$Fx%nGN6wUuXBXGeD=hcDQA6tn}Tvhc}*_yua;l#;% zge7u8P0g)7b)f41LTg&K^M-m4UZE{+5_)l??+x8_ykR$M)NiiwyQvj#t7n5Y@qGXw z{qvv^q70jgYhlZuwHl9~Kx+I!g=+k<*>eUGl79UtitQ*0{5{fv0;eNH3QhK~D!je1 znRABXA6@Grdy6XJ&ynBmc`X{e>EP+DQN80hbm3j=Zj=XG5R2HNQfBY~)i2aRPCqZe zHzuA#h%)Vw+okh_s4EyT032ClN%;pP95KW`sY4KJQCrOAw_f9 z94csD^1}z*3>Ay-XIF3Xn;N%fa-w)#@vegp;nTve*pARW(5!rgYI%U`WsKSX$q^bo zyc7t@#Fi=p1!#T5C6UThrOq3}dG93x3)Zg}Kg+!w z*mN7?`K!-2F$%~0T_6}S&u1c@Y6WA8dj#<&HF(~H1Xt0u4D9GYxd1J5)Hu6DbJYK6 zg=IT4ii0v>BQu65RdlE{;tZ{7Ul@qpsL}yjJS_Hb-H|+wOtJZ_@^uCxo{cg2J9j9m zPF~^I9h1B4>c6l;h;DaGVE4z}xPG_=7fcq$IY{I~)XToi5-AOc%>nRhL>ooYqeZN^ z>Kg>|LTPdgB&y%=j0bexK5u3l=N4QM69Tvsi;-J`A#X!xq>eokkUV1ZuW$JRLOZYP zjmTA6B2ZO%54X?I$|Uf+bj4JFAU#5qWrU21;SiK>g*^PC1mJ3UF+>@}aj_&@a9Fyt zWO^Jyh07dUFQYyPYbD49d>RW8k|1lYRC}QV!M^{5$=9JkqFwKFoo=8XDAqk`P`c^4sse$x z#R;4Bjwox*@26t65+19&RW`hQGbR1$;dSLbzeh@Dc%E6wjdR{hBdA8vUx|J|`i1Z~ zz(DdXLH-pm!ZI~Q~6V3Vco6+d4LvaI0(gQJPUG?-X63ld;na`;H5h-s?~iCOCqFe*%AH}VV( z&jkk!hA}V*J|MOb`?1nLziu!ngi}O?H83_|&Jfmya~lPa>y`kAp?|LRf0&$_zM>Og zJJ@KTZG~-`wJg6Lj-M7P5Tdkf3Rxu+vQt94vN19l=-w2U@!nKK6u9VKiLhI68Yfh3 zC?^D~8Cm+jKdqkxaQ@Qb1njj9c^2C}b1SmxGmsN51~J31fhDXhfolp~?nwep9#W_$ z5V{oxf&2|L0tplWaFxH|ekS0Tgd4XhbXL^l5u9}V@M7g8zi@D_i(_D=c?WZ0&z9^HU0K?V^O z${K}ndhMVPRSkgl1_R6oumglp)ccJQWde&p!2pQq#h^yf9r0pTQ`bw%)`6t#ar#F6 zos6kdQI2e(0w-NUfC%UT*{yz4Lr@q%vrq{zok9$KKW0#Da?QU+2uq-YG#w-q%=~m} zzpuaZ2huUXa3B?h9%YUVK$!=;aR4X7K282di1()?=>Pf5JUt004i~VnOif{NBY>AQ z2)Bu{%Wp)iu}{;gS<~r#+(vY7`Sk)hV1sP}fi)1~ww3x~z^>Sf7t$-G=pUAA0rpRV zFborXE98QivG!Zf*0GA`58z~yTwpLjs1xQ4V1s>YogRF;g{DrPA0;U-0PT+^RH&uW zGZ$(JDnpj)wr3)dZvqR1LE#~e&^XU5p}?R*M+t}m|E2LvkxcynQjv?nAgKTrqyDi) zE><)cr-Xht3SkaL?Cn8JQ~Z{jmMIs2W$vIT<{%FrJ_WA(-zb}Bc77x62b4E8A zw5iKhlkP6KmazrlBeB3b7>Msog-lyR^Uo|Hchez38z3DS41s>|z4`kM8~92k_Q=B} z$|MQEL_1^)R}XufML5D;tC^^AlABRPPq1(0iqu}*F1Rjvku3XhmJ$zGW62HNtB z2`r%YTrG&rz*i!w@*e-w2H|wxNmh^8@*Y`hmhvi>)qq3@Ze0IBu9&HIHK?-hMS1Bm zg$Hqge}LSGkAZ;4eU%n)w{8&4KVA$$jr9M88o(P1Rj&rafjI2J56MUWwSTcUBz*1z z9xLwn7YcZ^+${m9_a+c*|AVTY+e&|+CIF~nAK4UyYyTIAjA*f#|L7%2^S_b}qB<3; z(8T}FF3cPVGwmqAI~o2Ebz}nc66i6Y3<)EEN0TI=cuVB#7q|h|F^o5jo2{%_*D_Eq+%QLIb)Bh>rym7=tT4nMN5>Qq5 zfTz15N`xSiQjtR+NTjUyS0Xt;iKY}-ex2P3+`@dxvH$=g{epmb_5(!}P6wn0`Zo%e z;$0OmOgI%VnG=9GE-3k>my#I`gd_Fg&QwZh2pGi~$YR6^yn?`u*iTCVDcb}#Z<$Q! zmmxmJcgSjVSf{HBJeUJE=G>2yQWWYrrgRed> z;QCKw0s#1u3^pgd0iT0Y9Ib@ZV}O$5q`U}E!@O}m|BF}uC%QU-QX_1?5LgZV_z!d! zO^DeQTyU%a*Qr_V1r;j*Fe^M0c5n+u5Q3zn5c4F+ParkJe?{Y7{ZJQl`+rjX|Ash# zh{dh|LM39OQbx2m2UuiwU^#KygF(PfJY?rW_NA7TQXi^C&V*RtU%{vfz6(O(DVvh` zIHfxSAvBLnkSz^}ih%;JM47)5Rw1N9w1Y1&lJqY16akGsPCAw zD}8a`|5lT6p|Fq$Jre>5S}lNVPB^`2A}+lSsF3W4tZr20p9P!mFHSky&N!bhl%IA7 zi};)Q)bocrN6ulEogNBTo{Ic%Q|F(Gyv3VuRM*q5^jV)QpH=CfF7DK+^2$$(Vg>5D z`@dxcP^?a#!R+z3f}Spvvs#+&CQpjMw5zuiL_&8qQ3fq27~JAd0)U8Cyy=za>gU2! z`TH{W)4Wx6UcBmHeQ165QgVJesrUGkURTfRnx9AKZ*Puj=4_oLK17*oyE&nP41QW}Tj4d)MAIOgj-*Cp;jiBeAQ3))A%h?tiwt$SLlhl@ zE;)Zdln~Vo-33Pn6W|CqQd8h>C_q)XniX|Z`wiyVsYKVYa^{KlhF`%KcqK_>^NkOY zE8`A|0z?+2VgihUh(`Z-s_~G6tMSh86iH;{n*Dt}Oz?F8xPc8cMtCv&lT3l(E| zr_$gT>dp5wrX^`PAILhC;$WpUiHoOlID1PR`4;VHd&9I60fCj>SqIxAWWwsm#UGrz>-8H42s; zTC{OI4GK0J75C2~Wxaqgn`-`FlDeaN!KT1lryCi0h|tyPZS zuob$zrk?UpjW!6(2|sSZBCMB*ubkN=O1=mE?i9PEGgx1ceCd!3bQsyYYQ9;Z>Gu%# z)$ewWhcsuqW0eCJAcJ?-*em|J^0ReVY39$jr~GBe@Z&EU)wc*5naf2=(A+dmP1lgo zrX_>IEO)Bbfnj^PZDPl|ZBm!uKS&iIO_aSQ&0V#B>!KB}ZOxD08@9@Emv=i>-Ssgj zSZ`L{KSOyP3QaSuz3d_Tq7JI#=8x@uWyd*>31MLyZ`hopp$CtCDfTNR@9on{q7`mf z47io`VUvp64@T+cSk>;xcoUWddA+LNLqhW{PS7A|149nWL|$$l3r z=J{^_4o{w)^fH*Fb4~9pjYllC;_B<~10Qp&;&=yCC4C9PH)50{PByko6V5Ew&r0pzP54(=>SzZ0XRQ`FIiuZ#DfI{K(1o!LebA)xyxYT8<5fCH z()<~M+2*@e(@E=>uqP>F>w%w2LG<|opmdl(xokAUYp=r{c8h#TNnWrhi;r;Q` z;UA{x6zYWg*|KS+QS6C_d1j)KBR@cXa5Ckv8U!C3fR33qI9={KgM&HB1vq6I8ay}8 zr6)%gu+l=&V|&w@9bL@wF+24lM;%Uo0dzzQhgd>s}g_8XHmk4POZruQPS(oPV8dV^sg#oehOHKDp6(h*M> zg#@%PJ9>AiUG!K@G-=uq4X69>_U&2tNR+zgn~k7&Ue1a6-c+fy$@rpZtf~}AmHzR? zWR7U4epD}4d*JqEJxG^`2WG_WC-1^pOq`h&4_Y0WBgR^TlSH)BXi(#6$PkxgHqf(x zi#460sdD9TZimSTg3!`j?7K)J*Xsx4e9hP=%YW?-)em06KBpu~S5I*!z)FL)DCm!8 zxk~-a+0oqs?uTQ;qkYxFmFfeLOoi+-wqgw1(GBN^S!nQc3=QKEi&DQ&yyxZ_ckA^O z8p^;YGXQ3ZaZDl7Z9-g_Dy^JHuTBbUPdA>rtz(tedXX_dyiudu!GNR2NuKk`c?*r! zX#}9LVjv~I}eX`FO?dn|{tv;b>k{+P)DVn_@GPPM^hO|Hr?Jj8j0>k`t>}b^11spImP4+_ zWuwtlg{`(*SBVZdj#@h^@B)jwIg=*ssL4y?W^Y`^+$sP}R8^oM4``4#MT=jO0brIs zsHhVqBH^`nYo|77lWUl{9^g;NUOaVLuS+FC3%EW1h!w;ZPO0K_%DwVwLp(yTqxTdh zSP;i>sj(2miRT&-RPKcX)-n=7(*AYZ^5)xB9WGnbDnDF+4S7f=fR1R#E$b~*F%HHA zi^>?1j%bp!*r5VoTYxk(nj{mFVLPLY`rJea!T7tsHg0~TsrCoY50iq1fq>i8cJA;k zi`x64iUWq=ys!K(ECAQwkT}kav0>7}v)2xAKdG7EStAgo!?nzrLe-gwFz?$={Hv*ipuTTPe~J zFvdvA^cf&)H;KiAsGIjSSo(BetVB>84HQPy0lsf0si555ZBo3jS%RA1DjNn=sAlnZfqLjdC$iH zQRKHhgD$lsmjjyv9gKtM^2XD8FYNN0c>J0XGp2PW^JptFaiO?#iz93DO49x)PmV3c zeQPsn1cxuChPbNDlf$Nlr4liu;+36$^PSkxjn{xiB;{HCZ2L6Xq<;XHX1W3DR%Aw{B5`t-He?U56ZqH2-$^vB z7QgV2 zr9C4rFuD2AQTC#<-Itam7>`u287^-B-isc^%LIne|sEUd49Z2um%2lcW>FZ$JN!*d-er>uZO$5 zZ%>zjtzQsF76SqYj9=r~#8I?Yrdg^?{4!3st>(7laNtH`2uvvzMf>6$Euskd z^*GcQo~z)-H<>?xK*?Ptinio5L>gdjBdN6geJjA|wq7%HY=XvsOjZNUc3i|EjRiHH z#YxV>rsP5(ent#xLW$5ekZKUEI5!d;%zp48liyVUVzp(V!2+VnzI-~H{lFf!{2 zDq@*ME_pbV=?&pkXh$rU>Dg==H6&Lv?Bph=3rDtc5r=2K%$~2x^g=1}Fmuucuh2V_ zg0xZqTI*_#Y-IyKet^;qJK(v7gITLbFM94>A*fQEbD_lY(<)AkO0-H;Wi*1hkjY$y zUd&;?+XA!PbuBGqeDOo}JaOT6Uy>?Z7I0OoW%{e(BeT~CjQnxg^;F`JQE|+7Xd(q# z_%nc-P%w-}1hboWtq2QUc%UtR2W2fGd$d(cq2yTEX*ukZSz?x>oGVKvFGNvr8oo~y zhGRUgKhulddNk_Axg_dta?$}H6~c+xqs?5nJ%IB$7^gcsrXq2EaAMJ2Ga0&AYm~=_ z!rV+{G>Lf@O{50d+NPOd_)WZ#_g34Mvxw9P%Cy6lOfi&V33|%)PXgO!jtWbSD-QV_ zOB?ar4Mas=^N~I&lx|_*88#2QHJ(WCUkx9(e5Y;FEYFk(7XEUc)045rItCO+S^K0l!IVb|!dd}cXrLBiP0HgdX zOv~?71<%_2#r7yVH*b&E!mRD+haP9YjAJ|B-#0PBGV5@b(eQ;87&(otIB!VHm5V5Y ztAfi-s0^h|!k6fsH0Fjb^`Xq@5?pb}3!B!#!~0O;EPsHVgMP)1_#3UcT*@IGUt-X* zRuCxN;bd);P~Xk?7+RUic71DlxP0!{8x8Mb_3kl5F_x~uQ#snd3j!6-p|bRzKQ3_c@D7cNIa1hXlF-Nz0Ivx7?ur= zU4wn{h|u?v-9#_qUF>+z@Q&Fl#&8t|vFM=u;g6)e#*gS_Q z4d$@uM`sIZC1CnZRj0($z8^wyq#XSF^(51I$!xjnA#3r4?8zzt*ubb8-Oz1iyfn|2 zn8pj;&=L-on)kJ*Yam6U#;J(LS!_8X=}Kfl@UWo>nIvw-ngyMLgEB4|2NMm4(eF*N zhwqS?An+S#Y{G24VP(%z454uSYJpxw>#*Pttesy5%!8_S2Jp%_v3m2Mh?f3xi=tQW zRzy^akKRB7Uz;f(a_3L}N@aZzFYokNJl#o2{G0^z(hz5)0ffg9DkPc(Qqb7^r09sI zu)%u&t^a25LN016ZvQV(f|j3yNod^m4l&IW&F;uMJJ@m5Zpr;Eon5oq<-kCR zV-jq;nu49{hOlCyq4B0uO8yn$@@nuqZZ~2YHz{mSbR(wKlpv{S;5NwkqSj4RJ10wi zj_k$X{-^^6Pjtgw7+7h30gYXlt(gvtd@Arxdkh7wbSFE2AIL}T^q0c$;JMm9JFZj6 zU{fee%}4gmtfYCVX%$8qjv6Ia)uIRF!(5eNOv&om@l#b-;O%r%N4cRonQapd4ghDU z*lL_UB!>2j?`D!@HQHvZiD`l->|N!lL_kI+^;mouyN+Vp{CRX4=YRj%;QsiI;A+h!?AxDjvp0Er%ZfQ zga{hN+>KhrhuD~MN8Hxeg!g%&Er%mpSI4NJl;T`+ zUrFC0gu_aQ*YT1bvv-_%lhEkFV(Yq5AG06a@0^f6!$YuBe#~|Kf#kD&KW{e#{&pKX zOSR9pn+f{-&ky^f=}*83gU`<|hl$99YQuL3Ad1$aRlZsvCXW66>M{sK3lHNN<(Xk!jdGg*_Jrr`rm=Xm8`(i>ak|AQX3|y{k z%gv}MG@gz6?Xq{zG!}Te5$+C1TMc)cIC@#q@I!1(z{yGf|0y|F2GxRfz*(lK#E|n$ zUrxz!v@rc*O8@fz%KX;-iYWX=$}NdS(9^49)}Y7AX#q?v}`3FmIChUC?%8OA8f z6Z;o?icgDXCp05iZFgybl8~`ZHg@VQGxJ&@-b*L-S=Bb=Yw$d zN*|3hKsTBDw_Bq{%Z=LIF!datq@>)@Yln8?s$r(>9y(27IF*UUQI`oKYK>d_=YFel6B3(Fn+T?4F|Vl2lsI9 z3hvg)8|d-!Fgo6D9||k|;_e$9EaO)epE^UxB}$Yl+n9sa^a|@lgh9#yvmd4GI>-?3 z4N(MkrXRoF+tP%;hozJJtk))TglNepF#;v4I_vRDs~K%$lYOPh_385G_Osh*Hx@nk z8G&Hj^cRzA{34NDylFk*(^K#B+{pXd;O>WumsbGqHj-6)3qy)vF;jH{#1HT zw?*pu-!9MSzui0$>T^|JLxJO0(Q(m(<@(6nhm2hXjNw!GlR{D?Wr$^H;qZUh1nxzJ z(ERPkWyUI%w?^l~h&0t{yDu`woUM{5{@^t9zz{DV(CjbI&N89nX?^td=uxE^|AXKIH|D zsFzF{dD2(`hJ^nZQCK_uXDq?5HKr-+dHJJB`vrj;9bz4oZ9{_ILW!n5_pUi#50p6D z8L9CeV2k=h&#Y<9Ocy0UCl}ES;bIQNInrBE-?wQwABh6GwjA#nwR_o=DBX`H-26D{ zNdg}{QC2ye>~kemdb~lSL?Vn_n*-4NTUYSo*MDJB51g)*rD$AQ`A~U&K&j`dKm|RS zlHs>B$=5Z1oVETDOg(rZVr@DL&KTL*DT`OLAVlprAp@iPfIasN#Opj^-Ha<54ZYZ|PUkEWIM_(p2id*~+eITuzt1G z7>fC`53vDxVit*d12pR3qkqt{df40mRc$%em(_Qap~dbLx&8Yg>F6|2tq*Qi>F?Dp z>o8iSo2%%{@b!x9uU5VNYlczEqLtq)^xLd8(0;Lz#yfs)sh+Qmw?#-^@Y(vEVb|>A z73q_kZjh)C+|c12T)&?bnD8yu*^0` zpJG&n3y)iJ6?jr3 zM?7o)R(c@GhinIJ#ufJGh%j@ib2Ics*ea78k?Sw->kezUKze4fN{nZ=0x}FGq>50c zpDD#Lw-mV{uw535mlx-@oj=IPgH1NL${oKIYzQ^~^|st-+y9-=ZzO0|cyK)t^xM%H zfr?KWb3{MvX2G|HRR2fgXx1%Ra%G%rC{Y(~iGYWT92q_#R8rCQhmp?TNyR~}pShL6 zk0rvT#DvE2VjL?<1M@t-DM+T$y^CMIC^QVF;~+MC?$}j2E9LmbYIo>i%t3Fpu`QuRx zE7d6P5V7<-#cvYLw(-(;@iKp!yDPVx<%ccu$e{Ux=N)2nFNz$hIt}-s8Qfyh1QRbt zPpvYa{&s?lSupu|J)KmQ%2Of@N}9e?^O!2k_u=UQL6(CA)i#RM~hwbhg;v_xG#Y0`j7E zV|^{2*qxRr+S@DqiKl6{pVo$d%%TrVECKCk00I}Rz89Ms`Tg@H%_mWEuUo}+nWPf z>@xHHU(fq`pIYoR2M6u8oK>e|@fUjW{~ltD#klID3>>k_fcWYa(!WIS;OJ&;>Hs+d z??A2J1~{s^8Ec0h_{)-7M)kjmsDjpEDI;@5*WWZxpqW;!5=W{K=k2t*P`X7eWJ$XZ zi>@K|_p&1d#^_Z0WWy99DKmAiYJNwJ^9LpAr<%`G5xs;#6jhV^F4|4T4rI^HTmSCAH25cO)*za0P9Mb`8s{ z_<$7j>8_=qStvMJByQ5c2k11FM( zV0Nv@>V81Khg%2H>8=$X02+-Qo2t<*g2us%t2?{ix+H1dsf!m$wbliU`cQ5H@ z3tek}*UHTxttOQaxh$S{psLwnY5F7IY(MN?TeZ_Ar`Z2PUvzX-O|&1kvU_Cbt05}N zZI>f>&r-Sa1^9lkjgA&tWyFMjPD6euVdu_|Wmx!6C?&lg+rYk6PXw4X)32ZTok^5t zJw5v8wc!7ltHwt*2YqBMNT@!n9LAYY^SMYdLIMFjd+svd);{ce&nx$LwsO3SdbLw18b5~1}3b< zKH2B{fBJEQNAloB`e0m??gfzP|DR@i1rMaq>b!cjGV%J=hyQq=g`vHviL#@;rH%PN zCrn!i$M20RJ!UUoA!^5qdKEKtE*Qz0Au%W%N{0IDpxxjTY*bX#uwP-(A18|>pE9#| z=lFOnf8Guu94s6TK4N-DKb8a)8>^WH?^;;}S$1YLG=hkkN!H6}TAwbvl zhOiE;?}}hnWB&dy&vjR;oh;Jly;-W&zw3T$TcI+kC2OX9UIcSIwAQ}j1)NgYYyPu) zBKy$svHR0*4SQnB9tTZL>4`cFdf7!?J*027VQy-sB(epXhhQiYfb9u_5 zN+aKGzo35uT`xNMH~-@=ZzIo8aTn&Yl6r%M>g4^ghXI;+mdig>wz2_R6y5KYkF6%$ zs|r~MkD||NgN-JJrYCf2Lb%ViXk)U|+-i39_vM%QT>#I!7Aw_up%3{yGMsgp%UsH( ze~P)JZ(}y;U%0{fbXN9!{mqWwp4rp?=bj6OvEhZ)GTlmlo$KJVeSh`=B3fD>%vQV@ zwP>C+^K)=(LA_3HTB0^tGcU_eijNM7RLm*NBkmIesvj5V?fb<)vV*;QJrYMs7pRO) zV06TMeMP(bhV5`ZLlS}h`F*Fd|0iGYa=bMz4UCh zwj2)Dto-LtlHA@rbM4s-T5_w;^DvO$GWa_8`Y zyZRPJX%A>kf_+VI?~$!*hpX)5s@o_|Y7cUAH4m~pTJgUo&X@6o96}@3zYYSoug6_^ zcb%`kA&*hXE*(@Q7^&M-m~+5$k}UrDo48rGLw*qIJ0iDqImI*SuWcDnW55=Z0^U@7 zKHF}68U*(6SDu>Azfz1sIZ#uOVQn3(k2R>qU~D69KTdsCJ9xAYl1?Ac{>{$(ZX~TU z#axllkrDIy=V`W9Xt&FyEaxI(Z2^xI*m_6Uwk>yL^=fP* zyOC6C+j-7bhJ{F%a}I6Fm1x@X*MT*))lU)f>TWwj0yj=Ho3&A#r+avt#MdfNSUraZyn%#5NbqQg%y!sfH2VNVo9}tXMUDY`hr=Cu8l1;!V zTalFphK4Urm4>x;)uZKkkz?vzbCu+Mtw}@TAi{R18QDDeI>M9FPs`4z&+}L~eLinA zLzB*55ggtITeuo$hv8EmH-8jXgVO8hs>%N7sjz-Anlt3{SvjI?a-&6D*(3 z`^-e+114e2l7CIWr@KgrgiTb{H)K2PJIWq0emhW88-Tb`2|hlgi7}u2<3VOlp3zox zdtg;s+Wa$AA*PU&(d}@%KIDN^K2%?n{0d!phqO=ymwfs!?53jI&21td%sXFd25kB~ zoM<0g z5*WRZN1{&Njz;AxfcoC7ix-SM(u4}}OYC>3i$=2=CU)6*x#tl~y2_-?ZvAHEH_Dq{ z-s{m4XiK%ZoU0OM5WD?q?5<<>_{%hgJ=gN#(;DT#MBN3+(uTLG3Rumpr(#N*Fy)dt z_cW1>o@1Y)3QykhwJgmQ@y?}gxO6@-Mi=OGFxrc4_-BXwAj{Q$R(~Z!m~Sy39RD{i z$e1IPr~38spW)gI?De%?f;IGJ_vDR{gENk*>gu%R5PqHA-qDRzB$(XIUwQIe^IES~ zg88?T^rC?MFkaxRfsVzC1O~q5f~{ZkRa^x?)bOZZ(%ddao2=*>g4u>>k2g8k14}&cRi1dd?TRMj7NA97kkRQK{UQTBcM z%yI*f>R1l7Ye??!%QfoWU=AL;EU$4NBT;M0Ed0c-h=MC3mZipTL%Gg{jVlW^lmO}a zE6z{ZX}#y-GMvE625=PmT79nO&+kF!b`cMfc6hTx`7Ul}zWUG(LF259(#g7kto91Y$&WqC;X4jry}Ky3VY1KtyY>=noAdmJY;TU)kw#dkBTz0( z%_7){W|B{1KAAz|6vq;GoQxVNf3U>qtvH&$@SsyjzWDBEA(Adk5({hgHISN8Ev(;B zFUTqVMp8GIk6P+J7vz}1xG2SYaQ#d2y$a#v_FwD|F5K_jGVCAlujEq+S|w6CMt{hJdqs#z2?zA z`TE5W+M#+}_#=5(O~*xF(Zhut5d+VO1|g%zGhd)}8O!zt3cjXwpt-ZGt51$MbfZ-T zX@f(OtdP0kD^j&LF4)DvG=rYg2I?E8Ih6|A15oZ`Qv+vUD!$y&ADMsQ5xW!6FSD<4 z#p`UoIBqhD2TZ8OCw(U&F(lsbe*;yd%r9?`5vYjYZ8jG=aQ1Nt#rvxd%;khC&HxJPC^(UWq2cVoA^eBh43iV=it?Ud z<3|-KUy66Ey>becx$P%I{q9?{iF|=Qbm-^%a%OTWae@Weh_Sp@iJWzm{&33tpF$FH zHSuwr%$A^du^>@Vo-pX=#A?1s0sGc$ZHEw<5XnM+8MI)-qEBHJ)2NEVjZ;53dJ5^Z z5dJ+G2p`NcIRub>hYlge}k$uO!BqcePtSoY-UhXAa4U z*mdEFM(g|gAFwuS9ax-MYXNf@#jp91IWmNEr1|Lvlz1LN6e{7Pv*t}MsWer@xtGzthHl_UW_x$dY6Qzj!}j;vJ3BN<$sKlm*J>@S}?EYKC+A z?r|9!4TJ(PJ=#9sSAP0R3=?v=z36pPCD!i=rLIRzl3w6cSLawbY9nmSFprECz<3|| zFvpI^u8%4`kG{jBu}flX`J{CgpT%&19*F&L(4++#snAoC9XKp(ukiuj^+b95M7QOu zs5%t-*CIdDgA{ruA6{mUy$cmr8C4xNP#D&7B8A@g4&U=;C;Vdze9|4;r;9DO36#@GF*xYOrf`-A_YMwO7;8 z#^KZp7Jz#VNYYDj3%Yqlf?})x1n{ z?%##N{H*vWC{3}pd!GUkXQ7-3edaZ!jd3F^tMt%e&^yE=W)|O-=}HM0R3y{TztyY2 z+7f)lg~|x)T}q-RqxI(PY+-39S0Is#do4C3)9VZ8m60E=9lF;qPV*Evgv-z_n88hJ zK)VIcB6$mE^z8`kiflgWwADm#LXx!axgXS_n|6txxzlQr(5ITA&ql$fAI-dDQOszW z`=Z^zTZQCzrI)+HPBQC?SbqJEqBCg+1+1Dx>e13+${ZiqJkB4m1^0*dw#?2(Jf74Z z+&tt6Nk>}UmdSbrsC_!fch{qtz9CeEd_di=rR&%A+50r_y?~FIz#~sg;F-M+#~8mz zs;oCL;h$E0sz(6*rM(0d^}}|YBfkB&z7kZnB{>_OsbZYs4=GYmF8db5p&RqXNiM&< z@uIbN1eYZEdcPpp+V1T*L@&8SPCUn#HFUY3Hq>_U^oOsQL1|v&*({M?>MJ#*9$P#3 z&CCmNf4muO&I>msFO#d>a$ydM;M>>Jdv2?0_yuk;X*Vuodc~EN_}vS>e`<}jEDq7N z+j)cZKA+q|{Eo*Smab?!pT;LUUo+}WiaT-eXo?7R%7+HIs=YVCM|%X_r{58&>Me$5 zS)C@b&}Nxe>*r-Y%7wnoe48*@KP>!)6ZH*Yb!VXMGE>zat<=*WR+~dd&uuTVr90c@ zrl&o{1ipRyriihN1L7OsY0-T1S{lD*7Ul8i$a_6yk=Y?G+ln&~S(57{)fZX%h%d2l zC@f?mOooD8tj>yhtDo``12kW&=Sp@7JM2qu?!ow>tF$;Bwg)60U}`ood<*#$D_^> z#Bs~yE4pQ;V9#a}{|Y?Chl0B7YX@bqNc0gC^*E7RP1eTuTySzolEQkL$B;_kb|CV& zpsM_pfOZp&Mj-m6twhl<B}`~wE?TKw0q-yc~+sSvP2*W3A!!KarSzK%44$$*V0Bz{Jz{(`MH z?2gwBEL7}MOxW6pSO$FN2!_l(`Gns^5f_$};T!M=GDWk!fWM0;up7KXUu4pK9R$WM z8}WYdl%9b~J;w;_cO_trFi5T6vF-pzVCu$p!Zm1)k+7-&JPL6ip}=rdZoBTl!U1^P z4hgP`^Qb)C)DqSm)|`O`N%D~ z^Ok+SlG^hSM6OHBw|O*j=70WV5?H<@EI%T9vvUu=bm3p+4~HX!ORZDfbA%Vq7mT{G z%;BZ&YfuwhO4QLJly;oX(O)2&TLch8sCan5f<5`NUfYLoqG3ngY8lUJaBHC!Oj916?z%PAU6MB16c*%Y<$c<=em zGE)J+p(cLpbJUQ~O&nZJPQ;QRFFKN6?Ct>QPVPIVtnxV`PjdRqG!NMlXq}R*gFZxk+$>{l=!OTjdP;V93crYXN?Lqwi@{gc@4m`|FoY=UhyU>)g8|$ z7VV0t7F?Zp6>es@&Mq1-A&r;~>^|z=e>c!Krer=|+5W2mOL|AtlO-S_(f77PmjcKD zEI+U-lvHE7?cxH=FXAV%U_wj)RO0>=5{S}&Ry1Pj!oT)QSPan=-b)}d&F+D2_S^7M zeT9~XNi&Ti`zcRM6GQc&+gCsn^=b$D^!}RDs49-?T-x@x6PTrDV<#Z_t4fxU;^JzP z5HgYU*yqAd6Al;h!_Q5S5WuGyR{OsEH;A+Wg<#-8OhH^>W(>xJ#F$hhqmY<9b2@2E zdT}8T@cFt?*n=m*tHrty+%*SL^g$w;`XEiEd&br+LBzdyaHb=s_{}h6d3+=fTkmT} zMMVA12wB+DUibBK@^^mZcv z>=BtPc9ffMu)c?hJuMi9-^)#FB1#gIhAFelhcH$dQ8qxYZ`UW!*&pELfS^{75 ztEmyK+0i#Xkh9<6U=@ckRCgMLt%vrj*2P7#= z?fPKlnF(s$b2Hz6x9^QF+-nvFsh3b`KX2I+PI^)VLnk`QbDo^{+R25Q|0wxvM>h_& zQ0yWAydXCh5x3G*H#HMAHp5!I+p0QTH4C>?gtkeC#de`(CzELm1`mV*T}s4O%vD}) ztq5V7KenyrgvaEJ)#N+Oh*%y}0W!Ab)aI#o4cxZE(4bo2e1Od(aMoF0q3{)phdC5XCv-*0&cxr=Y%G8*JZJQ zVoT0)ryRfsaj^Mvg8R(XzDvTtBAdX#(m+*Hl8%(}ir~=sduAGKIrXFlq<>x_RBQPf zh3{D_@{y5Rj%Y6F;y14p%*mCh_N3gnRZ$gI1Ks78?K*ogNyH}maJ9R2s|_XgX+=Xj zt&MdwE?Sw(M4r++qCY0(!%17~6+=Vk)Y{exjW5n>92FmmWD*LYHgkVEHE2q-h@aWq ztL-|={%P*+0S`%qhscs7T~jY1hm!!|^Sx+2EepSb1t#8Z&@+a|({kd@ESqd*je4QL#}Dp2!gXY&06Je+6`kVwqP zOq0%FSS*`J1ANL;M}ctZoBOcO$1l*V)6TPje5WtAQV9eLYSo*mDB*qkOMLiroH8b< zj0L&@fq0TB?D58?YDy-W=4>|cCfXQkt8;PS5a&3-h1zkK*pt7w7CYjm@PYOkc3W(b zjXUy(JQUzBGApxo=Vvp{HxnrIL9Zm|Wh!-D*|IfUf+f6%+sjZ6$Mm$45%RT!hmwwl zE2)oXt0i3~@j?=|_C+NP)L1cYls(;R9|__YO-TsO;Iyw&6y5{*7q+lQ`;DCX>spH| zrfYprsg7F!16l$KR*KRok~q}H`$WWtc-TAfHwOE><>>Z$ST`ns4j`xT6!+ViolCYcaH8odOCg7V!go&*5;**8Jd1H+C{ zw-GH~ptJps1v-0zi&FHHf1zPG>2>Z6$GJT}xsB(aIH=l$ zJze^VMO{6AUwe1HqDYP1d zyd3LnTeZGM^%2>G#?eKMvSIYBL|MT4ltUU4`!&P8@XBfaI(c|AD0NBF*i78bT^o*D zecBAKtY2FK^+dCsD_S{fg?s&MF_CHM!M=yqd3yOH`6lr09Vm+fLokg<;4p-0isl<6dRi^P(_%{zfK@A+#Q;kO4rsMz%JCK z0USc;>qAo4vzQ1;GEH8`0ZlX@kwg_m?&#)b*GjBV0Vn2_e_(v2EGU%toOK`PQet~` z<_C+!^4g1bWGp3Ur2bF@xs~0$`!8Vf@T;$B{@yO9Do+e7Lk zRNq)WjmE*|tFg zsueUEY(-Zo$q1FsXi9-TARBFkB+Ro__Ya%op-Q~PKf%CD0w{oG=tQd6!vz(Pw}`nZ@|ujZ1L5H%SR{vzCEyDH z7tYtaSlOBQN`S&jfuh(>Pw||_+*$u_7$mlT7z`yU|eyh;i#t!nqt z*UO^|_}?{3k%}hFXrLr4y9C%q=F_#dgRsegWd40YZ1w zqKt`p?+vy;i+S{|l?RxAT>MUnn~{Sk3IrROsxJzWPhP3J8I*{LH`XxUnusDAh@`v! z31^~^8FtN=W2#q8RjD5!UsM(s%_?+fDtGYZ)SF-m3_2&Vm;arr zfo&O;s9>f5t{X9b*Exo39xjt8=}8okY7##IC^cd{wu z-bL9KmDzRvLM+gcjo#{6OadJOt}=QEsLIEXG78C^nJ zU`Gu_y$zUXDUiwfnSzuLFz^T`nouaTi{S1zKu3(5*SkT!U|YOr#d+@PffJ=cSZqsS z@{Ol?WR!y;FvaF+m~Zu;M6v@8L)l+WaWVq;?z28qO2Z;+H45v=|a3mvs=$#Ep&2_mxLi5nVau*pto(g>X@g^o%`N^IrQ1y^dNx}MX4J{Z>!J@5m0bB2>w@G7A$w;+b1&L^S#!mljm-XetVxOd%l#1FelD11uLnLa4s^cAB z6njxbv>XFsH_R}~b!qMxbM9;)d;}x#x3{nlxn$o@%1)WwRD`g3 zWKXh42&Vx!C`C1eQskJ5p;r(S@_ce|_8*J^v9-E=9#y~m^mh$DUNa$@R%pa8!V>2R zCWCX8QMhWres2XWamthv*H%m{txY#e%3EvxqonAlq3Q&X*qwuG8`kpf)`*}#D^>L` z_1jNXZkK|06=Wr$6VcT1=|n4OOxiGk9pqJTLHd=r=pAH2Vg=5+=ZnFFlEyx_09|=( z?MrWDqPlYoHrd5XY(V4@?S}Xn^0NdLLcc{Fz18 z@Lx!184P&kW`|@xjS+*WUo46+8i39#F%VV>p((>VW{1jO5tJ>i2L>7aS2|aH%g0`$ zyEw#{(jhBr;8ubq$ z!~eQ6TBq1G4j*^z{b-qEUGzba669eGJd#+M$O@pt9w!l6s|frmojqoZ9&I{LkygK6 zJYZC6ds2whxy9T5q`pY9t!I1cxed;|-AO3bA6Hwve%p>F_v0ji{+z8Nb!~DFFK)!s#&p)&wwo5FK%Tzc-gkgW4d@Ox z_^%P^$Zv&OdVg4n<^9IR^4ZpoTzT;mWz06{W(Wqyq2uFP%|kogN3KqVVXZ8w6ClEX zq)=D=dZoYC*;Jo5*=E~%0z`H1uWA^xA1^!T9tL98FoNrnonXav`F*@!fU6BTkm1uZG12D7R=v0$iR9$%n^OPQtNHLkGAJf6NQ zLi_U`tz_TR85ODr62n%c$ig}CE=hAH3W1FJ;|(@g97XxU3l)Q6$oqz{(TjzUAcW|;IOv&3E<3&+0=KLwIkCb&G5J=Y9m?XizXoQ3)p>wlwiu9!V0U!t| zsRR>)un;2c=mYbNkdFW6>pS+f%3;Fs6LPK7My7st7}2F}z8w)u`$^__bK|W&Dg;@O zo8^}lms08RwX~kiM6ZvWb!!{iiPqY3JXS1|t5KuNYWJC0r-h!9{P=*j@8uSum9GE0 z(Ta)vF`Qrk=wjO5N@b#vyI`za9ZgI=V+matheGjdmWu#VYpy>2WtTY zE@{E8zG_$_<-Fhs!Wm%oq_gjr?WYPWSH2@M;J@``;A4HSWFqEtRoSUH&|ogY%{YI2 z%W?_7^~!_O3BP_Ubae)l&}#gQKVBanv>i>k1<%*P!nyrglKswva-ED3<3UrkM|uKP ztGt>XBjDJ3f5ti%QUcZ@PNSt?aUr?MyF8PmZehbb%I zPAxT*!<)wb#0{IH?tX+z0v--robiKi@R1Nyvw$0aK}=4IJZsFUI}NaX6)6K&8wqP} zUi%Ti^08Uv7KzA1b1f`f>pH`g$p$|7f^>y3Q$%ZWWFD}oG3WUn1+ z$_Ac6RG~~v@AG)8ew~L`%dNwn=h!-j8F~Xa1&_c)feKK$s*ozY#3drJZ9tH2J%_Rc z+mu)SptneFpjW1{2NZe!pQ{ve>Y+jWU0`p?2c9eVMW&hlBWI*f=Izc zOGTw>(L{p{;Sgo)32EuU-Agrq(nYaFs1p0~XixMINWUqOIRV7SXvfH7v-|Gm2!TQt z55hFf7i{HqhJYDgC&ftL66D1i3%uR!|#IhG3^_z>%*Yr0KRvNDA~`FP3VV>JSb?#Fbf?W_DESfB!AFy zJiq}4Lg`PmP)wfFN+%gv8~n-bel{JlgPKe54lWCMOVA)u=)l*?`^_Zb)f&}n+%>O> zwcmVq=q>2_%{ZG)!O@h=35n>;YW}+iECk#SEl0iaHm>Jxrye^LA1>d14OA5(7Q~cy zYj3u^iLfY2@i)-kkRD&6 zzcfujvP_!hqN4b10ul5$j@hUOkDSc@q^LOGzH{^bp18gs&|dVeHR#mXOk1R0ck=?< zFZB}qYhEw$x7C%XfHuZ&&x8r#abDCs4?W!ViX!v4$1B_Z=YBm?U2QsB#+^Ju^ufCl z7-IM);KrbG%thU?17~_cF_0bK-xM>fA+)iYCNUpJ!rF${?42fsM_C;udS-1_qBy%Q#9@MNW@1tYQSKVgJeai_Jghyg)}ZWo;( zKlvB&OS?f{CUKo;u};*qR3ogrkD-!J5l8-(1eV+9InP7g&8;{{`*O=~zlAl#GC5k9 zpF~KEeqIF_E09H`I5`oN29cXsBzOm>{P7Ew3c4A>Aj@2Oj*?kmnlNfVaQKqQP~N8*-)grxX(k zo?F>t=}L)51e|M1Rgh^|3T0OZA<0laNhk+9))4)=-;_+5{71@HDULf%Xm)ls)yVzJ z>>wVUl-cG$iAP~}N8N^Bz;MQuG3u1xgBK@ZLNU^j{rLw^Da@wgl1f{7&+U-yK0#GS z^fHvnvZ%+T!^(=(zY0(!AtW9-6OsQ|cE? z{*=8%MXUi9(gE8kk+dSW^lGqOb#k|v5kuDx*=^`DQD}85Hns6N^|if+ix}4+%M3OG zit~xRybbSh*>CA%ITNN+%0(+8x>HuTJ*QJTjT6lSh3Nv9DNL^@VT_O3nMg8rY0vp# z3j{^oiS~40%#|5r=E}C&eXWhf@-EVhVl-Cy=82wT6*A zj?&NEleqO#Id0vs$1lzOeG+r)nIC8 zTKy%{cO4E2u2~={&VU#$7g#MTL55he2NjnJ0Z{_CIcJU`1UmP z4%Y`fDs{mRF{xM+YI`j#S%}<25fdfJ&VGTbqOTl4JGHz6CE8R%n37xsjIX&^eytKGz^pO-ly=>3HbJ7Pi^GEpeUtzM>4IkD&(N1^ z2ft3gx{N``q~q|F$dX4QtCMFH(d0ZObwCo6&`|SBl+24cOFx9{X+Qd(UfV`uZ?H*@$^P^q{Il&ph-dAxTx)$T2OYG&KPXFO|V!ThY>nq&A%#t~$uIgpw@AB2MMpWQgImc*Zd;>+T-T3*f~UO|14 z?B=R(UUpG#&LoO9Dn_!p8Cp1`mdH!-@I+EsGGW8GZ`B^SpVO>hnG3)ZhQc#35ME;-@F*fXE@w z{qlX8sUD4f>^jsB9+Nc@NILa~ngha-bPd+1w{CwCRm61GY22s7IC3(@YPX8?iPL#5 z*d*y=AGqc#&sIozp0E*oPY(ZFWSaJ*!4i1-S-vH`0B8TmZG>&oV59S?bbt@ z^psSyETAdPW`_)Mr2=uQb|#p!T?a|KFgpIp;Q<+JwX%VsYA#p6ea_&$0hJPp^1!qS z^D8xj<3>n33I3Q~%bv|uj3|$E&#xS8pD|MQJEMa_kbON1 zH+*cI3xUt<{2vo>Azq4LOBtMS}m#RCo% zVcsiDPlF6gS{8FGA&Oe?yGiccBtm6Ks`E zJ!8|pUh}9AV7HfO0UTREic9c|ao}#A0oWwM;z)Lax6;qqPGr!KO#D<-6)(=cHKK^{ z#%Uzv6jMlXgROAZ4Hq((g9J+twl|#U2yZBW!=hVqdOIMR0uyzir$!l&$gqN_`q60| zyW55B<5mcxjdi#zF;d&?%=0RdMQ~;bLymniyU_@{eJ zwC<@lS%bHf51q&AA7kFE`BQ9s5fZkaxU&t&QnN|)W?>s$+U?S^I`&NuLMgwDVySOd zIyTuwva%iNg0P5XTl`T-cZw!2)-|@?J`U1=tmT=thgJ3U32Q#Um(H)SS9PDC(c|av zJSsr%u>0qgrE+;5eP^vMj6FYE`6`+`M37xtlPmbeW?lFDN;PuQA4d8Q%kZhL?m%&z zUM`a_s&05|`6NKU&^K1F<(*xeSUaGN$f){fZ@ethgyRr0yPkts2d;0SRao_#>7_dD zo%!57)UK;LoPcweS@^P5riO6MW1@}6Z_ZcBaaI`*mHj zS+kZMNod!}5UKt`ulypyYZm4`S;k&|Bw4F=P*EIfsH7HzXj0w-%U8#zMAIJz-1=eO zQ9n{kd72u2Dgp$}fDl5yHG`-M!jhRd)jdwp1HOtp`(j0%(q#@WYRrRIn;T9xNgd00 zUqZvryrJ7pv5D{n64erh!h?i5Gnj*Lt|F84;=_TTpSx4Qzb6}wmuPpEh5CS^axsX> z7QURZtnahLGJ7^MDFd}($O9!tSX=;vfKF@92C?V#tgLCdl(pGLXu6!10A$vsP>Tk# zP{L1Lk4@f4O)N&$6cu%^M$8-1mae6}gt!Jx)P2V%pn_Jmuh+D}u-$elJv<%$ok}Ja^oU{Jei#HPcS|+~!+P5C2 z;M?gO(+1|o&|f3N3h(z4@sbh$q&g3m0s_B_E`!9NT*lqupjW77NXNlL?T%e-A^eNX zkyDHI4iW=Mf4ZpOw#xWbE!`}^s>{^C`R#)hXngj5=i|HI^FgMovA(VAAjf2 zzG2s%d2Cu*E!a?a@42kvjqf|_w3B#uNQKU@D&!KTyBkg%u8pEHo)|uv=C?7GzssEg zIT7Xf@a+9C!}qzJc^uv&v0HwedjPxv;nQZ;+wNVe`KG=rfi9=++q{Jxp4p>3DQ7Hf z-sVWajB@-ZL&Q%w3)rpK^oTn}qD&zYLr$wOaKJMjUDp_4jUtYP(zEfxv)$8JnTU@@ zYKOY+e$VV^1eN+on(eD6#{?$At~&a1Kw@Zl-Kc%sYG=?%G?j4HA{*V$Aa`c3bDGV* zF;gD(Y}hX{xU_?HLQV(7vg}y`{xGG8pel>Sp`BG7DI*G2RVEY(szqrX$ zpD?82^4uu>P9WMZ^qgFiaZ6^(%t+fB&YH}-9E}}1s=xOS>%)`n|9vYE2z_~YY?Af- zrOagV5%{iACz=nUym`F|M+5Q+axh*@g#C{xYM(y--qZ~1-?iB}*_E6SU&P8bk{sFZK*zMh* zL#|?+@#}MU1t$y3r8aaK(4&oNYAnNk=!$N=uZ|ZsLe`xKU<*y~TR1X25=eNI(XyIW z3<-+~%W(kpjunBF5F+rX*sdLOR!vnIJu<$dRf3_8PFOw$Y13YX9e3S?1ZPRU()@3T z&YxhxD5QmMaGN*UX9=j#(mWLCy>O-|MtR{A5lGk|GmslZ?M@FDH5gLWtO@XX`_KNY zaimwwQHi%uU=-3sgG7pbIBSwq7hQ43a@ZewpM|dH3^IQr5RvU{-Mb9mYyEso*c+Dd z9-(nsIfvQ&0pvx=2x=xR3_tj-3I@kDhXk9hy?umZPe9n<@+Mj}786MFpwke=Z4k@) z#YP{jEYbatn2on4V*HC-HSFcD-T({~A@I~8ZhJwF+Q_UKlsr_#U+fGNYY7GAI{J-`1G{}|BXKIeo zv?NbzyUv1?oO3TAV`7RL##={AIl0*>|FyIOewE%p_Up}!Q3u-i7erebdQQ@E-FDwH z73FV>WR5PN+W;zWr^|+aU-W&KI)bcd{ZDGGojtRHfKxW8ab>1WC#clR`4W$JIvwlU zF2m)JZyF?ekY>;hsJ=O9jAEz&7(-2C(BsOJ!t8y0&aA0&9}*pa2F`+=5=;@D!Eh;O zR)VX@5sUT1>oj^HD6Lu(ZpTsg%l=z7&XOv2U^r~!d&!C!os1%FI!6~EkTbvXO(z8R zI#sot<337>rT#t59<%GKb}biR0v@-ufS&q?GW!Q^Z`#z02ARb z+iH}2<9zL?2_DpwFy`Q`6N^twMIfdqINoBfsicQw_t=o%;WZGqw~K^ zsOxve7G*bvqMs#CDf)`lF>j1-*l{JE!lgoiZ2rPO^N-aD!vbyJSFQ+B+SaZeYh2OM zOFZc+W|NF*o&@_`5KE%-C}~!qx|t)|v3xy~&I=Wu7K1^fk`1-8oSrU{D1V+oUm|pi z^S4;XE{I!F3lVwOz?V$i-l;@Q2$d8#HsdMluezRdF4ezbF$kK7&L$~3y*V1A`XtZ$_zIHOYRRG5eb;OoJY9An{l?BK}we1#}6IX$u%q2sH`>+1JO|6V+AA5Duy zFb2D%)uzk&oQc0D3R%HV7ma^zRKaHK(BCB)cakBF9p4E5Wntlk%H2nYPeSLhXDR|~ zwxbdq5$8CMKC2zKK06Y|a;xN1nWA|j2~_x$#A)8q5TbVt4;UM@Zz zwp>(4E%ml!Qc20K$gVk_QN9Q?ai(0MC&U?zA3<_XTwwr}$zjC9zTYhd4~UAih)jrd zfR%xk$t!tkgoX5+lKOd%h`2{9o*>Nv_S3D;cR(ze+#R4`HYQc&Y$m9!h?g1nn-Zj$ zV2J($!b22EK@dMR=ZLLUzp>@~$C{7ZbS-1LA=6h5FEgfO=~wEqClQ32>e86P@4^Ey z;7clSowTGV)CMe0TNwJ8O2_4zF`O)Yz{qh(l37uflr z0>>+9VohzFVmX=EX?D`})!$FEV-0Zu+H7lpNxm^>3H#_SfsEI}9F+xB3}tf2m)RCe zYQ|3`$Fn1h$A;udtsdkQ!k%0y)EV>;{~4A3GnfVpx1k256orHU>-Jv%ujvrkRuve4B?GkwLMwB9nv+ z9mRVw9)B1k-6i^C@OOR7*@nV<-89yQkm#879N#PhdksXPL|M=!mPC`Qee8e<8 zu5nq*Rfk7p+a++2R)Nhb@rr|*9K&2!_50oc zrH3D#oSlU4kQvrjz@V>{s=FwKP<~Yu;LeU88dA@l1XJiX_TO@`Xq{3EhMJTJD;JD+dy@Azv#Ii1SNJZ%;jxh=O)y9U&O?qG z|L@pGz~C5zwE#0mJ(h!W>0g9ij6tJX4cIa=dEtWAwa&OnLH`TONw6D{!T?$o+4QK| zZsK5HqFJeTt(qKp^IJ~@P8WBcPDBzD4eiN%?ZSJDK`!L?x z>#pkiRe|~PBHiG6;w>HDXVGe<9ZuCo$hqzvr{U(N4Yr5(m3rA^J6Ka(1O=f9I0NZR z4{C$cc_=EqIQG)Ni+IE~(GKK5>1_UC8YZ`2ycG0}(@bVY;xG<&riX?$S4Ifxf*3~o zghmS@ggwl^uwt*Y0TA}dvU=mJn)MivRn+p!5u$c+rzj zR0L`daKo-M|70BdY@YFZ>8$L(nZTMNQb2g+2l{~r`tf$;?JZ7U$%cTSE0ZdX>mb9D zQt_dbQh2IzHfRDqcB&&rKDe;UQWBV*$m5%~Z)#t=01fBf_;v3fx{#rA57bB{pOqP~ zqc?Az{Fr=GejtvpGfYx=4igSj|t*FV8n&C}0mA&N|ts?Y8$#V{i~CwXDZ;|!1&zYJZbVOZzycGZK_CAR~? zKwf207clvVczz@fw9tJNixA*$6Bp-Bj54ivY@F4s|8uyeRe}#_)T`M5qU1|uaL*{l z1}T&zyg3n-0!hga$SKU_fBo8+ekiM{jNh89Z(BRTPUOgr+6&oh!wWiTWOYbgk3=&d z^&jrd+^tHhDy6J}pE0p`e-6v_K=Oe|NJb(LMWqDZ6aeuZPx|Yx zaGQYzN@^%FZRuu>QWvxGcrn}e9-zdkZQ0Ikxkdv=jxt6_`iyCf1tW%`XNngi4cO*o!ej(P$ycBrR?oNU{by1=~Q#u&G?}cW-G=MEA6c%54xoSzKSp z)=mLx@Q3$iU8SV{bnP~6N&jbm3N#}QC9*j<9lSJbe@7WbUzcH!nu4g1k42aG4WcI^ zAVgo^OB%nq$KDbEtIqhQO46Db-2n|F66oW1^rB?Ve+G5$8KIsPgPYMRqNyLZCFC9= zVygq1VPW#^=bb;SJ3YI;DEYMp8&-T-h>3vb5Q;AJt`^jD%h5Bwg#|7zphk@muR!8ml^F4i<^XTp2jQgFo z4t4-qNn2UXjvnl27XNh%C&QAu!XKx)HF@)8+xsY``jJrDOZBRL)%42 z?|O%9F2s9NnE2|VCb@8W+CJxzgfwt8m4Q7Od47BqsDG7utg+xxH-wxXjoKzWt?IN*WHsCPLQ9scsoqVRj@-OnUvxY;+eshA#p5o#RM{C+Uw$Zd{s=|WrXE$xs9#YH ze=jfm5B&$aFHQ9-+RYs z#KmJ;Ca|-x?KRAwTbg>fb3F1qaQrn*P*W%j(T4MaXGJK$iC}|V=$4Vr(_cC1Qgnt3ojNRdg z?O?KXr9R$q!T_h{Gdd0;oKZ4K#F}gjR1gtVC_p%M9}-mE7=KwVN{f=^0GapKzhEnf zmirv-wB68ARAgY0dS^x%$Sx5jIYKn35cy-ngvc0Ea0==U#EW4C8&D~B-$vxdr}?M; zUzA0oX=Rt(`C7yvci`H*#B-QpiF|S+2U90EjYf1pp0cKb$y01Vi8V;UN`UeJH$_v; zS}YR!U!pZe)do(LV>o!-)IpAv=tq?{Kn6%aBYTatt; zbwUacAfU+wj6nhzvfs$}r2pT8@et|xAfCNk$c-zwL=n__q5BaSnpHp{7vX2@U$#%f z>@MoKH65F0|3O9M+pPDIv@A@2p77fEbYi7~s-OGGRjW#Ugij5n6wW_sv`Fyx*H%#oHM7g##ysA;%S>IJhDcL|G;vnPNS zxG|fN{9W$?n}7CGbClip%)J$*r7o;;IF_vQI~PJ9@RlIuXGt>ucUy?k;L}yj$tFHP z;St{|xn?DW0^sl{m3`#A;_{SxxoRH_6oFcQA; za0o=~9$va+WQ5kHk25V(tZpjy%59VhG#|ZEPK*DM2?|t4sCzL^Nje)zT7Lr1!Iv%L3CpLKo?XID!kiT+;5&9RwHmf$g&0@BU{K1 zIhKR4PtX+IJ2PGde(Jj~(v&f!Lwe zp5QsFAKFC(T8};64o!7)^zW4SP|w75j*C4jD*y0R-b1U?gse;FW&CSey-&x-*u05@ z9F=5sp;xb_vsgA|CXI}sjbOb73aE6eP-QTifGRl~-wHGKQN4 z$}l2axIC))bf+04J;kdSwLJA1?DlyOi#qwr{8}uqoW)4pWQk2iV7Z8-anU+GQ*A38 z#2qQa8jFLmpTB$8b6@-691$7BB_UBPyy4fYMh#qqCmNPpgFCQY#&6dGV%Y27?2;Ki zmqWpo;k)Tfb<+_uRxDYY>yXG#d(>=6Uz-?NbU@URbV2G1YaO+D?S*pNbvoQ<>}XoV zX~`D>4>FRE!+Lh*%`}4tGcJy;CBp^{g^e1s=_Py_?B|X%8w}aS(BJX=B~jG4wbsh+ zb6HW}!Jis+b1~ok=VuuK%#|LKh%_aM6&&ZBPTdLAnr{=zZIgOx*-eLF;ozhJ9bubitt-2VSMsP6cxB#!we+Ec1 zK+1}aMj&42oWi!X9wxG~ZBpOX=xGe)M~yNof0Iwy(iOS00K3v%`dy1JARu$t@W3n2SWKsB;n>n>Ai3h3iK^jayB zDZq$${gQ+N%4!nE>y6oFxtl2i|Jcu)vvHn9Hi6B}^YdjsI#9RQ+hAvkli`80-qS1y zG6;yg73n{=zCZZo2}bW)fFI3KdI36=;t!~4CHTY7ozU?Y) zi){f+WcoV+gk{EX5VBc?uRH6b?(&l^S#)>7Agy4FXrX~e-uN5Pyf zcRO$UM*5cB{AVQ``i7&8JRu8A?8K-7bed`~H*7jAJ!$@sI)W*zizUR0b%s}f^vHqi zUs2qb(B17$uag0xsZltmsOl0}GWcnoQ}jnWPJAeRKFu%J#&IG9?$6cTX`2zxTTUTl z>m7YaV##_uITpkoyJ+(04388tK0MC~f*kG5maIYxk!$`t8{O*_q9p|Y7j?NuLj~nZ zE$bvj`+xdfwcgqd5{F=Wq^#5+#a{i|xAO4$Gh;Em3{~IuykcVf=fQ7{IFM18`ZF<= zfLF;hKCzi4zgI2AhFuE5Xfr(EZk3k&_Uasm=4@f}Kgdk|$5!7!!Xfw(X>K?@w=nNd z_Z^K3(yH551=PM1x+DTO!;v=spnu0vkizzffI&l{#H(Zrd&g9Qg>xh|%tlQa@U;V| z3opGp&DSV4k?M(<4Kh9ygdX;J&3|Zo$hd5o;8nIqbc!$yuBo(i z2BNgX67UpJUmZE8&pF@%fR2-l+GQ{lm_MAGI|_R!9WITLH)dfR^(|~ux{_uYv`ewV zNXq_Y1BnQsCa%u2!}b9pm_OK~pN$Go?qzWR4*+niHbwr)U ztGzp6>>JUuI5!+b*r&U%`cU3MAwq=rX2*|7B?r;5JA^^=y%NW~=b@X}ZpS@q@ z5S1GYzenWu$orqRDgDso-M;oUr{Z6}^HbL*xO4Gh8$7h^@Qu1IYi&hyDbt3TF|Q3%@FF~#wFAEZ;Us%RA7nFe7LOhFE(s!w-^;6 zUH%hqqgEMZJFvJPiT6WggM7D2C zgUY}6fm(Nmk+*tX64Pg1_E#L4cFThQNoQIV4CdH|`-+q~lp1hM8aPf|cK-^MbEd!N zK3-i?ZW_D$l{}uHdkky)`WX0Z>T1ie*!OP1|3G{azTrYgSG#PS+_M~~z^kzoc>Qs| z?RtyuK?ts!lpOX|E^BofSV1i{rH#hxyoS$mE!*gDp7!7*JL*#l?b#F0U6#k+lXY{P z=f2>}*-*0fB6Cz0GbqcfeJ9z}YzYfXabZ;-&mSh%kIvfJY(ZTXU1#at7&^e7YFcy< zBb~*KE_BOq+geW(;!aCoz=DNdcC8kMk>#5nNc4I*d8J1tAvT_RPYsdP^Gehl7&|x> z{Xx{*Rk2c{y=F~gu0Ch4=kq;HZXuP&YS=O9WYeNI+iY+OmtxSoMHOZ=H>VEGAcDM7 zkr^M3*Vyh)_ZM{BV49d;VY*I*u5rDRUEk;9;`lKgL-}vI*K8Q$eWqUFr{YVGRA8qf z&IO33;SoChvyA>Ysxnln$CUCZC)WP*1Q@UrR8@^MFm@g#(W0gx?}xdd#c%3?eEL=# zKeQ*m`1$O6Z)!2m;znOD+Ld{oin-|RJwM1)(Ybv*t!4xsHFv*cPbK1`-@>*_yin{* zy;?adHg1Km2k)tUDiDUl{_$}JDmlK;V&Huteyg|W@B-DLFqQ}_5Q=$9#Mq9KM@wL` z-lh+~_Zyf^C%)eW2a{*rTq^RfGXW~kEFy(?- z%AP|Mke6dMH5^Rdx7bEd-~Tgr8725tNW?DP97JU}RPb>DBY>wj@v2ElSDpqXwsmjucRQoINUoVh~OJMB{}x zz7BPML`=+HL~@}frC)@`ev|Sg^G&ciANRik-yAP5(@669@=C^H=*-)&;&nu`$^zY7`8NC^Ozk0L5 zp%1iD=H>RjssC&5tK+JCx_!5#bR!@wNVk-Lbc1wB$ELeGq`Nz$yF}P@NSAbobf+NQ zaJTxNtMc=lbKk%3JA7aR&z|oyv!3tFthHwCS$Pn>n&!RjQ2x)kfb|XPkf(Y!sTifg zzNZkkCOwbVsnK$F#roFz(;VVtu! zA&fqGMWlpcEf5*Ib^9D`&?g#7=$M46^2m_}T~NFg`#Rc1atWAWE-d_pe?=a9ft)HI z-HlcktzQNFVVsH6q9QcGN3k)huKcfPv4kBN3)^#f{B1jsD`HM2+)07GQdNo>I#Ei| zd5`ZBvU~fi#tk$mT0_?I8r@4iaji?5?ROQ#^oXln7a2xZEVy?)F=fu(N#Hh$G^Yic zPn8&u9-a2`OdnB*pYwX$ZNxvnB@6fzWo$^EL%le>>Twu|KY8+W|1R@dG zJV$>w<|+FOZcNY8Wy8=yGpnecA?~@rN3`7V)7}oaU(#9FsPHc$ zRO9uJdRjO#H0iAuHPB*!)Nu17jOxT?C`&a+rx?g7w%_(%weUx7+P?Q!)Y)m`gUdCz zz{tZ3QLtbEGP)qjiC@$2N!=I<)>#zv^nSdat1OSG7ESGx)6tm@a3F6Ts44(X*p^8J zR?^7rPVa)2UtLNJOe0DZ49wxAtYm8)O$EIeU4f&S->3Zgy zW8Nv1>41E8E^7u$)`mH7X8c_=R>+4II;9 z(?tRB;b4`oL;?CR`sL*I)r4J0c~3+IKR#8fbM{NOdyW;|_}RW3Sh~d&D|ha}-Il)l zL_V38XihucfUWY{ubvGvb9ZMya|b;<+`lmG6wm}dR-7E15l8+DD>V4fh=+WhdACC@ZEM{S`?6gG~rfG z5IHY-XV05itIs#sVkLP=725}daD!|zbNTzv1Hf4)ZfFY|z@G(18CsTisq)51iS6;m6C5E~mw5T76-}3^<_p$}3dwq~8;fo++^IE-p6yqGle& z+E<~JoT*A0A@yu=6Oboc_u28uyUqirYR3YcJ`BIJOn2TfSh7NK#G_AFm(K2Glbk_t%TclYX7$Fxb@^tL zThtMltNJ-FuKXYyM*#0s0BKoEcZ}WZ*%-pHeltY)zDj!$#Uxejyoo>mqSVH)FPpyd zxV8S<@Q+q2Pwhw+O1h0p)SXtlNasPt;GCMI=(v~J-BV4H%l8x6qIB;P-&|<9NwcU$ zMz+cd>^5}b@?nyDce=nGaSZV#V=9T1#3`{}62SOwdDukihu@tE%qUTSw1?k{fX1V8 z#M7D4VP12M&bZxPRZdiRwsj3)I3tvoN$asuz*bxqD%5!3A1!RdK+qhK-BSfN9 zxvh`5^U%jfr4eM@1qYOepAXq3qL-@j)gWZ!(fAniiF?A{GFQ+f5vOIsYspHOJk3$I z+zg5ZMVr-)dWmYFv&0zLAUO{*Yh&_zV`%x%3e#o@4^c8i)LAtsd}5;nmcX#Kze)(K zIJ{|Ebm3qaqh+w=lU;F1Q}#B3gCg{W*OJ%ha1zx#+6U5v-=pqt$F)0$ztn*Hbz`))G;%1vsx`w`khwhJ^wckqK+YNlSZL9O_TX7;W_7m1jH&;0%NF%kDjoBl(hkFdnjlbA8 zJ;SUI%C_mlNX{m}%QhzRJ!Lu-Z;!8_4ENaN6K8h4zjZo@2yR4Gro!w(@v9ORKYQHa zcl}f|tScQ$6m2lQ8@Ao+)E&JJ&Muwlo%A^xEQ1UPMov{#y>D)a%TU^;HvM+o%<%sUD&pteE8?@^Yx|_Mp!+3J`5o(B10z~=z zx)){pqHmDaf16&k_k^}%^8L=zj8u)`w z`V^h_BdA51{ly-D_vY;(Nr38vNVrQiyq5r6v)IQSz8tTZL@sP#A2G%iIGzY8)a+dQ z)x4)PF$y^EcS0k~yGx&@=0|6S3Nr7c7;WgLyCU*F88w)=WCTl(f6JAw6YXKmc5Z}! z%Rh8gb!QSawA*Ey8y=G7AeyqCSafNESOqMRvz=9Cm*#sPmY`V8(m{65(a#oi6W z@-e_z*;sp*cNvo>bLS>6F>oY+FQEygYYJ;^I#ocqpoxJ(0MSO@iZ9zHSj~st zineF%1TDgef{|)8nbgh?i$FcnLpYFy!+Vm=ldT?*YPiaUsURj~)^=zEby<5|nivp} z9*_ZmVD6WBy5NIupn&}5B1GUHsWvTh_Q)0OJn=;!l`y)35Viuf z8YCU4Wf#4Uf8BIR>bXr2M3(4K9rw~BFX&uEOT8FC)n@W*8(D}m0WmtyFiJEXLGzjr zRS)*6PwHJl6k*hPlkM8x`hnNGyWufLJCbwp>QmEd=WAkl>Et(5@&0SyZnQ5qhcmoh z?n7Um>7FmJ%;YO{CGU+XT$^@UInLw?oR12@0+ud93t~bf|$fN&t%MAY^ zc{5#>Fto{GMchrJ-Xm^IvOM%vB)$`E3KMBQpzx!3C1^!uY}o+^pZlXK1H%zIV$W8n z;TVJA7ii-d&cwy95vS$pP|zGAC?ZVJXOGQayf*^jJZ(3uC5h`Zwo|XIG%JoRl2(iy zWR3U8{<1$Y!ryOa9vX?{v|xeBf;P;LF<>W!l_~^_rXH9APBo%uz&T!T$?q_{PAdDU z%)1w={fILp8Gb+D(J6zL+n3cYp218{3O}V+hCrG^l8~pfdF*x1M`#1R3$rmtAFtoq zsb8!{cRyBGp~mlE75pH5Ph<|8STI6~gSD^&NBZW)DF@1%T!s@<21L)75j*7X+eLXu zguw!S@>9U%tt;r$7_y4-)y^>GV^CuXJg^0zAa}q-jw&_JYrG849(<C&lNTJ2brEDVB7 zpS6sY$hg#uPiBJ-qq=xhr5|eXZSt}0o!bNLkaW8D)FPB|e6eIBdNC^cKap$+FX-q?R{JF@JgRx7E*`#PSp4W)BS>DK{p$+ZhSX%xYEb~wdnJV4 zcxr(uDRLMQ`nYw(0ahWj3i#2Tfad^gmu4Hz{tF)KNg?+=qm>h~5zRO&=W;cxXPE&W z5!pQ*TFeJGgYX^eWoZ(%6okP@3oTsQW;v(c7&VT(B~}o@A0hEzvf(HkAP7#;DxG~v zo?_Gta`5)j82Cptdp?MDW5qUw9N=g(OS5gJ2a|X4*J8Vx#r)#K8qG0rM zDB{9)(s2-93*uYLG&rZZQsM5ZT-7-zC{-Z9NT_*x#q#1l%2`FMC7TUh?WKxndp)%c zHw%UG+_&?xaQ`EmyG~}0-!K($AnfD&zKbVGB-Uz!?+wFQ_4ih2#4e#{<@-a-+bfv3 zrJ!wrqbA!7kHQt$DX~Tc=lXUyTeUAtsyxok8RDytK21_8Jf%;@ z(W|!usEo6i9A@zygj!s>N(_`iKtW;@#|8n^g^m95mizKgFGjIThXve2s6X%wb0Xku z6KFB$4KATPsd#l@VMt|`SWHmGI+pgq$Da%F3z7Vss?A1FW!+X++Bj67-6Sqt=}C&v zcw7zjY0B%J)Ez2USO&Z{N2yjbz=`lFC_NVcL$}j)RP@#bzyXKIvQFWE6if}g8VOX@;cb3nB@s5YhAn=6)NKBxSK!UzdKFO1cX2qF%oJyHW3=SB%&LHVN9G z005kSDE_jxR@Qd^miAvAr)f6(-3EreMiDu$qV?*dcaTUikX6kxCpb}#j=*4%WR96L z54%0@v+UVQiSbzYEVj{fz*#|fd9xC`ljBxd&eFjD;zA}HMi?i zPL*~@Cht$Rrv0=vj1sjI7;+E7> z3u54#u)>zp{9%otyQn00plroylv`Cbg8cd=*6Kb#hu8!@KLo8HCYBD(R-s}tU!4c{ zicXc+Z*V0Q9sBsk2A&YCkVE@;63&2g3LJ6y6PDUi&_o1cW88pn;gbO={oi%blb;R3qwcgn2<;Md;;x9mMki%^L1d&V3v6OvY0jJQ)r-#t!pUO_w3QPhh#U(P;U94;+$ZYYlHFP_ zG`>sb@}vNswyw^0odoz{8-l%E|ILi>Z$0tcm;qBr5*+_?|CWxW1&$$U3IlXo z6XHhsH(OKAeUEdHO$D+}=69nk$Ht@^ar1$9m< z7u!xjol!9<@pYE~wJH!C#>8nQ1 zEQEwJ*n{51HoLGws=jt9AD5B$SLYPwa=Y#5GTzs;rXH$e(S}i}jEJh+%}soi|gQ_$hRQGSE<7+6`b6OF=^iov7wKF~#H~#dh6ELe1^? zt;VG0qpIc@&YrKLHWN=H*W?7J#)nTpagrNiLM#4h3Zl19?lpQ4_%66C7yjDOm%>p- zN8l?mU{d}!g#5R9YY@e6=EsQYf8c)yo7^Z;@~I)Tp)RO$dQ6~#B*LuCfGl``KJUIc zIs?RmWJP$~(xcdu3Jwl=Q_wpRMNTDTOor62VS3?wu!>H)>5tnf1!Kkt)w6L~gg2*) zs>LCLJxu6;iA_Cdr_wRK8&Rw2MZF4Ix6r`UBus4L=(;WyJLVa7)!J_%fj7p`(?E(n zAMjzKpqOYUug-+q5K~3~A11+wCrbYQS-t6tjOJV_BU>cr+ae=l(5u#ID~<-ydL{L; zE74JjH?}XXgklUW(XpS%liZ}RhP#MWUR>J;`LwfbqrUY$#plcf=yzH4` z&v{4sPzR(G-4cA0R>qPeo~V*KQbKfwxa9NaSj!^DxeRwEW!_p_F* zf2AB}O9hV@SUg7HIS>u-_z_q{KU5(GeJfkw&yfZ7h%yrZe#`&gB`iixvV#%Re-Zj# zu+J^Edfvbf1Q~z1!dIPrfgRIW_L+=4*zx*2|En_BhHqs3=Gp*fqQO9Osjn3yXpCCa zMo1PAVkTE)5ur7pRLAGzAO)vv2F>}>TXc8a-;L`aVCS)%J|B5t~LE#+mk!gaM zpEGoovb$9aR^$sW!%2T96^)azdx8EOmHIb+{CPL^@NSSr4%=7#iyJ0SZQhm>r49*) z#ue`nDeHbD#scX>4RLI4V>&*dGxLF?D$DMa=X@%B=hx*qS1LDCZ9P8U$L_Q*<2b0S zw&y+S1%w4+)Wl*KGvdjzj-RIF6V2}$oi`?R@DZ}y_$JZzJM+V38N4FN00;*#w1^yn zHL8D(P+f62)L<~T(7;zwf2W_Wwe^44_iMzZ#qe9rG9vmPKwc3c&Ohaxmqqj`)e}=W z0Vl>t|Jw1(incO-F)8CuUrC!q?oKuY|E-NeK2{ z&K4@!7Z#{6X%Z*TxiEs>!^}>E)yRmc@pj#W(E+kz%##B2InRg8&V?C7A)jn^ljuO` zF5}y5_Cns7vOOQ?>Kx!a>}5QB%`xj^_0n#LT`O7Uio%Vc(V#urU*WXF-^g98(b?>= z*0jqj#n~x?!b|AayRVQYc&wPONet#wDg&=3k6RhJ?^aJbPLEvWJn1hrjabMR@2c*= zTSot+Z4F-6jWwyAo+sbSHS~bAV(zty^8>xfYef9>(n5O&Kuh?O{gx)vu znp%vwGNL4as0JOk=`q6eObUXz;Wxyvbg zv04l5Q2A*JsyIQYRh&tR-D<=D8GQH6GLdr?gPh&IbdN9EFjnj`yh~3;B&OMM-Km}_ zC!j?@ROQh=wyA^LN~4EN(~)BHQ>y;lBETp$00q&N7wJinlEM3!W|l4!g%rxGGi(_e+C3(?%e&lp-uBY{q#1=5 zBZ{n)VG*uGqL93s2b0*Cq2bNxRM|ch%zKUN**weUd9;UX7$w<4Y>dIV=~H{p5ff-6 za0U!A@k`^FBVVdH)jZpA(6q9@v*0_|Ef%yQCc1)|xJ;Hfx@SZ3b-EDV$7bv&Li;kW zN~zKAJ{VWm%N9uq)1>2En^HW7&|r4j<2C=+nMNalg0$m*VZje$^*=25{`mh@z$^ey zI$##KWgY0)Yp0ztN(7Hf;;ylYAT;BNic9Gas7jbDdgd2k!*EFmEHbbLx+P5_vABi6 zuqh$I=j1H(jJ92#oW6(b($lvx3Nc>tK@48-0enC40mGe4yvSxa)C`~`@)ogv_;F=qA(<SYmKq@%Y{5VLj4I#kDOg-L>zc$?Sy5bfbe)G=-$L$y*=YONY4-@e}H25zLfM0*n zK=%g??7!1sfD%jt*hV~2n?bz+)g9HJG~oG8gVVspx?&<)d`jG{6l~1rq6%UQZJXN{ zO<)>~8>mPaFTF(!Ts9f^S~AU}KSXCPDJEm93|ecR+QSY@c-o(|V~~$tHc{oAUUm&4 zJOx>3JJhr4)Uix*;8Lzm_`KA#mG(3r=Y|cmS{p)(y}`(uPxfC?(O5(PmRHdccJZNx zO;1TG96kHH-x0r<{sCN+XrgizS;n#aSUE@)+G545z` zR&=oj+G&2*Lu4iY1Zc+})?)$#*nl-}@Qm|YIRXFY=hE_nL=P)oVs%q|0>4EP4gdf* z?zf^0Zi}-y!}m}*Ju54-zuk2)*N74id{+ao6CUrkssMm2xDnvWKX3dy#9tc`fV=GZ z%@6?ix&#UKl>A8u71qy|MZ-bAOYBM=O zHP*ES8YtM?nphhB72#o&;xB}RxrZ|NYs})q-aL%_`vn*~|5F?f;{YEb{25&Jt3Ci= zy9D@KsMSM&KR0Q92QULWa(<~k-<6(UTQ(0-{`BJijuN&15aq|B`4Hew&+zX69^W1U z{Ak8sQU3H>{*FQp_VWGNnIDt(!)E;H5Bwbf`S>Bgk7oQ8<)Ihs7mn7+|KJmQ*qA>( zMZZ7*0H4zzFn{`u9#;R;(*M0W;NrLH|FZiZ*8bDb`n`7R)o-2Y7b- zyD0yrQ$NJ|Qy2RkiweB;`0Kg;!uq9|J;eHRLH`|#@zJBdV*Pl=|C$t`VZPUR0{+4T M|Hcjpo>>9^2g-#2)Bpeg diff --git a/PolicyInitiatives/ACN/Initiative A2_1_Ordinari.json b/PolicyInitiatives/ACN/Initiative A2_1_Ordinari.json index f700a93..1d7abf7 100644 --- a/PolicyInitiatives/ACN/Initiative A2_1_Ordinari.json +++ b/PolicyInitiatives/ACN/Initiative A2_1_Ordinari.json @@ -1,1066 +1,1164 @@ { "properties": { - "displayName": "ACN_A2_1_QI1_Ordinari", - "policyType": "Custom", - "description": "This initiative includes policies that address the ACN controls for Qualifications QI1.", - "metadata": { - "version": "1.1.0", - "category": "Regulatory Compliance" - }, - "policyDefinitionGroups": [ - { - "name": "ACN-A2-1-A.AA-2_1", - "displayName": "ACN-A2-1-A.AA-2_1", - "description": "Alta affidabilità | [A.AA-2] Sono disponibili soluzioni per la configurazione dei servizi in alta affidabilità | [1] Il Centro di elaborazione dati (CED) deve essere dotato di soluzioni hardware e software (apparati di rete e sicurezza, storage, servizi di virtualizzazione, etc.) per la configurazione dei servizi in alta affidabilità. Devono essere inoltre messe a disposizione capability e funzionalità a supporto di configurazioni dei servizi in alta affidabilità quali" - }, - { - "name": "ACN-A2-1-PR.AC-2_1", - "displayName": "ACN-A2-1-PR.AC-2_1", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-2] L'accesso fisico alle risorse è protetto e amministrato | [1] Con riferimento ai censimenti della sottocategoria ID.AM-1, esiste un documento aggiornato di dettaglio contenente almeno:" - }, - { - "name": "ACN-A2-1-PR.AC-2_2", - "displayName": "ACN-A2-1-PR.AC-2_2", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-2] L'accesso fisico alle risorse è protetto e amministrato | [2] È definito un perimetro di sicurezza fisico al fine di salvaguardare il personale, i dati e i sistemi informativi." - }, - { - "name": "ACN-A2-1-DE.CM-8_1", - "displayName": "ACN-A2-1-DE.CM-8_1", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-8] Vengono svolte scansioni per l'identificazione di vulnerabilità | [1] In base all'analisi del rischio, sulle piattaforme e sulle applicazioni software ritenute critiche sono eseguiti penetration test e vulnerability assessment, prima della loro messa in esercizio." - }, - { - "name": "ACN-A2-1-DE.CM-8_2", - "displayName": "ACN-A2-1-DE.CM-8_2", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-8] Vengono svolte scansioni per l'identificazione di vulnerabilità | [2] Sono eseguiti periodicamente penetration test e vulnerability assessment in relazione alla criticità delle piattaforme e delle applicazioni software." - }, - { - "name": "ACN-A2-1-DE.CM-8_3", - "displayName": "ACN-A2-1-DE.CM-8_3", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-8] Vengono svolte scansioni per l'identificazione di vulnerabilità | [3] Esiste un documento aggiornato recante la tipologia di penetration test e vulnerability assessment previsti." - }, - { - "name": "ACN-A2-1-DE.CM-8_4", - "displayName": "ACN-A2-1-DE.CM-8_4", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-8] Vengono svolte scansioni per l'identificazione di vulnerabilità | [4] Esiste un registro aggiornato dei penetration test e vulnerability assessment eseguiti corredato dalla relativa documentazione." - }, - { - "name": "ACN-A2-1-RS.MI-3_1", - "displayName": "ACN-A2-1-RS.MI-3_1", - "description": "Mitigation (RS.MI): Vengono eseguite azioni per prevenire l'espansione di un evento di sicurezza, per mitigare i suoi effetti e per risolvere l'incident | [RS.MI-3] Le nuove vulnerabilità sono mitigate o documentate come rischio accettato | [1] Le vulnerabilità sono mitigate secondo quanto previsto dal piano di gestione delle vulnerabilità (PR.IP-12), ovvero ne viene documentato e accettato il rischio residuo derivante dalla mancata mitigazione." - }, - { - "name": "ACN-A2-1-RS.MI-3_2", - "displayName": "ACN-A2-1-RS.MI-3_2", - "description": "Mitigation (RS.MI): Vengono eseguite azioni per prevenire l'espansione di un evento di sicurezza, per mitigare i suoi effetti e per risolvere l'incident | [RS.MI-3] Le nuove vulnerabilità sono mitigate o documentate come rischio accettato | [2] Sono definite ed implementate procedure e misure tecniche per consentire azioni di risposta (programmate o al sopraggiungere di emergenze) in caso di vulnerabilità identificate, in base al rischio." - }, - { - "name": "ACN-A2-1-S.DC-01_1", - "displayName": "ACN-A2-1-S.DC-01_1", - "description": "Data Center Security | [S.DC-01] I Centri di elaborazione dati (CED) rispettano livelli minimi di sicurezza fisica e infrastrutturale | [1] Il soggetto garantisce il presidio operativo del Data Center 24/7/365." - }, - { - "name": "ACN-A2-1-S.DC-01_2", - "displayName": "ACN-A2-1-S.DC-01_2", - "description": "Data Center Security | [S.DC-01] I Centri di elaborazione dati (CED) rispettano livelli minimi di sicurezza fisica e infrastrutturale | [2] Il Data Center è stato progettato e realizzato secondo standard di riferimento infrastrutturali, ad esempio ANSI/BICSI 002, TIA-942, EN 50600, Uptime Institute Tier Certification o analoghi." - }, - { - "name": "ACN-A2-1-S.DC-01_3", - "displayName": "ACN-A2-1-S.DC-01_3", - "description": "Data Center Security | [S.DC-01] I Centri di elaborazione dati (CED) rispettano livelli minimi di sicurezza fisica e infrastrutturale | [3] Nei locali ospitanti i Data Center sono presenti pavimenti flottanti qualora la distribuzione dell’alimentazione elettrica e del cablaggio non avvenga per via aerea." - }, - { - "name": "ACN-A2-1-S.DC-01_4", - "displayName": "ACN-A2-1-S.DC-01_4", - "description": "Data Center Security | [S.DC-01] I Centri di elaborazione dati (CED) rispettano livelli minimi di sicurezza fisica e infrastrutturale | [4] Il soggetto garantisce le caratteristiche antincendio del Data Center in conformità alle norme antincendio vigenti." - }, - { - "name": "ACN-A2-1-S.DC-01_5", - "displayName": "ACN-A2-1-S.DC-01_5", - "description": "Data Center Security | [S.DC-01] I Centri di elaborazione dati (CED) rispettano livelli minimi di sicurezza fisica e infrastrutturale | [5] Il soggetto garantisce che tutti i server dei Data Center sono connessi ad apparati per la continuità elettrica (UPS)." - }, - { - "name": "ACN-A2-1-S.DC-02_1", - "displayName": "ACN-A2-1-S.DC-02_1", - "description": "Data Center Security | [S.DC-02] Sono adottate misure di sicurezza fisica e ambientale | [1] Esiste un documento di dettaglio che definisce politiche e procedure inerenti allo spostamento sicuro di supporti fisici. Queste policy e procedure dovranno essere riviste su base almeno annuale." - }, - { - "name": "ACN-A2-1-S.DC-02_2", - "displayName": "ACN-A2-1-S.DC-02_2", - "description": "Data Center Security | [S.DC-02] Sono adottate misure di sicurezza fisica e ambientale | [2] Sono implementati, manutenuti e adottati sistemi di sorveglianza all'esterno dei data center e in tutti i punti di ingresso e uscita al fine di rilevare ogni tentativo di ingresso non autorizzato." - }, - { - "name": "ACN-A2-1-S.DC-02_3", - "displayName": "ACN-A2-1-S.DC-02_3", - "description": "Data Center Security | [S.DC-02] Sono adottate misure di sicurezza fisica e ambientale | [3] Sono implementati, mantenuti e adottati, all'interno dei Data Center, i sistemi di controllo ambientale al fine di monitorare e testare l'adeguatezza delle temperature e le condizioni di umidità all'interno dell'area, nel rispetto dei principali standard di settore." - }, - { - "name": "ACN-A2-1-CE.CE-01_1", - "displayName": "ACN-A2-1-CE.CE-01_1", - "description": "Capacità elaborativa | [CE.CE-01] Gestione della capacità di elaborazione conformemente agli standard o le best practice di settore | [1] La capacità elaborativa dell'Infrastruttura Digitale è gestita attraverso un processo formale aderente alle best practice sul capacity management ITIL o alle linee guida presenti alla ISO/IEC 20000-2." - }, - { - "name": "ACN-A2-1-RE.GE-01_1", - "displayName": "ACN-A2-1-RE.GE-01_1", - "description": "Risparmio energetico | [RE.GE-01] Gestione energetica condotta in aderenza agli standard di settore | [1] Il soggetto ha formalmente adottato procedure per la gestione delle emissioni dei gas prodotti dai suoi Data Center (es. ISO 14064), o per la gestione dell’energia dei propri Data Center (es. ISO 50001), o per la gestione ambientale dei propri Data Center (es. ISO 14001)." - }, - { - "name": "ACN-A2-1-A2.T1-01", - "displayName": "ACN-A2-1-A2.T1-01", - "description": "Indicatori minimi di servizio dell’Infrastruttura | [A2.T1-01] Disponibilità: La percentuale di tempo in un anno in cui l'infrastruttura risulta essere accessibile e usabile | [1] 99,98% al netto dei fermi programmati (ovvero pari a 17h, 31m, 53s in un anno solare), 99,6 % comprendendo i fermi programmati (ovvero pari a 1 giorno 11h, 3m, 47s in unanno solare)" - }, - { - "name": "ACN-A2-1-A2.T1-02", - "displayName": "ACN-A2-1-A2.T1-02", - "description": "Indicatori minimi di servizio dell’Infrastruttura | [A2.T1-02] Attività di supporto - Support hours emergenze: L’orario in cui il servizio di supporto tecnico è operativo per emergenze. | [1] 24x7" - }, - { - "name": "ACN-A2-1-A2.T1-03", - "displayName": "ACN-A2-1-A2.T1-03", - "description": "Indicatori minimi di servizio dell’Infrastruttura | [A2.T1-03] Attività di supporto - Support hours (minime): L’orario minimo in cui il servizio di supporto tecnico è operativo | [1] Business hours: lunedì-venerdì, dalle 8 alle 18" - }, - { - "name": "ACN-A2-1-A2.T1-04", - "displayName": "ACN-A2-1-A2.T1-04", - "description": "Indicatori minimi di servizio dell’Infrastruttura | [A2.T1-04] Attività di supporto - First Support Response Time: Il tempo massimo che intercorre tra la segnalazione di un evento con impatto critico sull'operatività dell'Amministrazione e la risposta iniziale alla segnalazione da parte del soggetto | [1] 1h" - }, - { - "name": "ACN-A2-1-A2.T1-05", - "displayName": "ACN-A2-1-A2.T1-05", - "description": "Indicatori minimi di servizio dell’Infrastruttura | [A2.T1-05] Recovery Time Objective (RTO): Il tempo massimo necessario a ripristinare completamente il servizio dopo un’interruzione dovuta ad un “evento catastrofico” che ha innescato l’attivazione di un ambiente di erogazione secondario (disaster recovery). | [1] 4h" - }, - { - "name": "ACN-A2-1-A2.T1-06", - "displayName": "ACN-A2-1-A2.T1-06", - "description": "Indicatori minimi di servizio dell’Infrastruttura | [A2.T1-06] Recovery Point Objective (RPO): L’intervallo massimo di tempo che precede un “evento catastrofico” rispetto al quale si può verificare la perdita delle modifiche ai dati come conseguenza delle attività di ripristino del servizio (disaster recovery). | [1] 4h" - }, - { - "name": "ACN-A2-1-A2.T1-07", - "displayName": "ACN-A2-1-A2.T1-07", - "description": "Indicatori minimi di servizio dell’Infrastruttura | [A2.T1-07] Backup testing: Il numero minimo di test di restore (a partire dai dati di backup) eseguiti in un anno. | [1] 1" - }, - { - "name": "ACN-A2-1-A2.T1-08", - "displayName": "ACN-A2-1-A2.T1-08", - "description": "Indicatori minimi di servizio dell’Infrastruttura | [A2.T1-08] Comunicazione incidenti e data breach: L'intervallo di tempo massimo per notificare l'Amministrazione di un incidente o data breach, a valle della registrazione della segnalazione e classificazione dell'evento | [1] 1h dalla registrazione della segnalazione" + "displayName": "ACN_A2_1_QI1_Ordinari", + "policyType": "Custom", + "description": "This initiative includes policies that address the ACN controls for Qualifications QI1.", + "metadata": { + "category": "Regulatory Compliance", + "version": "1.2.0", + "preview": false + }, + "version": "1.2.0", + "policyDefinitionGroups": [ + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A.AA_1_1", + "name": "ACN_A2_1_A.AA_1_1", + "description": "L’indice di disponibilità dell'Infrastruttura Digitale deve essere stato almeno pari al valore di riferimento corrispondente per il servizio (SL1) così come indicato in Tabella 1 \"Indicatori minimi di Servizio dell’infrastruttura.\"", + "category": "Alta affidabilitÃ" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A.AA_2_1", + "name": "ACN_A2_1_A.AA_2_1", + "description": "Il Centro di elaborazione dati (CED) deve essere dotato di soluzioni hardware e software (apparati di rete e sicurezza, storage, servizi di virtualizzazione, etc.) per la configurazione dei servizi in alta affidabilità. Devono essere inoltre messe a disposizione capability e funzionalità a supporto di configurazioni dei servizi in alta affidabilità quali", + "category": "Alta affidabilitÃ" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A.PS_1_1", + "name": "ACN_A2_1_A.PS_1_1", + "description": "Il soggetto deve fornire connettività su rete pubblica e rete privata. La rete privata deve consentire al soggetto di fruire di servizi di connettività dedicati e con le seguenti prestazioni minime garantite: bandwidth di base 500 Mbps, con possibilità di incrementare la banda fino a 10 Gbps.", + "category": "Performance e scalabilitÃ" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A2.T1_01_1", + "name": "ACN_A2_1_A2.T1_01_1", + "description": "99,98% al netto dei fermi programmati (ovvero pari a 17h, 31m, 53s in un anno solare), 99,6 % comprendendo i fermi programmati (ovvero pari a 1 giorno 11h, 3m, 47s in unanno solare)", + "category": "Indicatori minimi di servizio dell’Infrastruttura" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A2.T1_02_1", + "name": "ACN_A2_1_A2.T1_02_1", + "description": "24x7", + "category": "Indicatori minimi di servizio dell’Infrastruttura" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A2.T1_03_1", + "name": "ACN_A2_1_A2.T1_03_1", + "description": "Business hours: lunedì-venerdì, dalle 8 alle 18", + "category": "Indicatori minimi di servizio dell’Infrastruttura" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A2.T1_04_1", + "name": "ACN_A2_1_A2.T1_04_1", + "description": "1h", + "category": "Indicatori minimi di servizio dell’Infrastruttura" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A2.T1_05_1", + "name": "ACN_A2_1_A2.T1_05_1", + "description": "4h", + "category": "Indicatori minimi di servizio dell’Infrastruttura" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A2.T1_06_1", + "name": "ACN_A2_1_A2.T1_06_1", + "description": "4h", + "category": "Indicatori minimi di servizio dell’Infrastruttura" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A2.T1_07_1", + "name": "ACN_A2_1_A2.T1_07_1", + "description": "1", + "category": "Indicatori minimi di servizio dell’Infrastruttura" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_A2.T1_08", + "name": "ACN_A2_1_A2.T1_08", + "description": "1h dalla registrazione della segnalazione", + "category": "Indicatori minimi di servizio dell’Infrastruttura" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_DE.CM_4_2", + "name": "ACN_A2_1_DE.CM_4_2", + "description": "Il codice malevolo viene rilevato | [2] Sono presenti politiche di protezione anti-malware, le quali dovranno essere riviste almeno su base annuale.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_DE.CM_8_1", + "name": "ACN_A2_1_DE.CM_8_1", + "description": "Vengono svolte scansioni per l'identificazione di vulnerabilità | [1] In base all'analisi del rischio, sulle piattaforme e sulle applicazioni software ritenute critiche sono eseguiti penetration test e vulnerability assessment, prima della loro messa in esercizio.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_DE.CM_8_2", + "name": "ACN_A2_1_DE.CM_8_2", + "description": "Vengono svolte scansioni per l'identificazione di vulnerabilità | [2] Sono eseguiti periodicamente penetration test e vulnerability assessment in relazione alla criticità delle piattaforme e delle applicazioni software.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_DE.CM_8_3", + "name": "ACN_A2_1_DE.CM_8_3", + "description": "Vengono svolte scansioni per l'identificazione di vulnerabilità | [3] Esiste un documento aggiornato recante la tipologia di penetration test e vulnerability assessment previsti.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_DE.CM_8_4", + "name": "ACN_A2_1_DE.CM_8_4", + "description": "Vengono svolte scansioni per l'identificazione di vulnerabilità | [4] Esiste un registro aggiornato dei penetration test e vulnerability assessment eseguiti corredato dalla relativa documentazione.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_PR.AC_1_6", + "name": "ACN_A2_1_PR.AC_1_6", + "description": "Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [6] Esiste una pianificazione aggiornata degli audit di sicurezza delle identità digitali previsti e un registro degli audit effettuati con la relativa documentazione.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_PR.AC_2_1", + "name": "ACN_A2_1_PR.AC_2_1", + "description": "L'accesso fisico alle risorse è protetto e amministrato | [1] Con riferimento ai censimenti della sottocategoria ID.AM-1, esiste un documento aggiornato di dettaglio contenente almeno:", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_PR.AC_2_2", + "name": "ACN_A2_1_PR.AC_2_2", + "description": "L'accesso fisico alle risorse è protetto e amministrato | [2] È definito un perimetro di sicurezza fisico al fine di salvaguardare il personale, i dati e i sistemi informativi.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_RC.RP_1_1", + "name": "ACN_A2_1_RC.RP_1_1", + "description": "Esiste un piano di ripristino (recovery plan) e viene eseguito durante o dopo un incidente di cybersecurity | [1] Esiste un piano di ripristino che prevede, almeno, i processi e le procedure necessarie al ripristino del normale funzionamento della porzione dell’infrastruttura coinvolta da un incidente di cybersecurity.", + "category": "Recovery Planning (RC.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_RE.GE_01_1", + "name": "ACN_A2_1_RE.GE_01_1", + "description": "Il soggetto ha formalmente adottato procedure per la gestione delle emissioni dei gas prodotti dai suoi Data Center (es. ISO 14064), o per la gestione dell’energia dei propri Data Center (es. ISO 50001), o per la gestione ambientale dei propri Data Center (es. ISO 14001).", + "category": "Risparmio energetico" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_RE_GE_02_1", + "name": "ACN_A2_1_RE_GE_02_1", + "description": "Il soggetto determina con frequenza annuale l'efficienza energetica del proprio Data Center, ricorrendo al calcolo dell'indicatore Power Usage Effectiveness (PUE), che deve assumere valore massimo pari a 1,5. Il PUE mette in relazione la spesa energetica dell’infrastruttura, compresa di apparati IT, impianto di climatizzazione e impianti ausiliari, con la spesa esclusivamente riferita agli apparati IT. Nello specifico, è calcolato come il rapporto tra la spesa energetica sostenuta per tutta l'infrastruttura del DC e quella sostenuta per gli apparati.", + "category": "Risparmio energetico" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_RS.MI_3_1", + "name": "ACN_A2_1_RS.MI_3_1", + "description": "Le nuove vulnerabilità sono mitigate o documentate come rischio accettato | [1] Le vulnerabilità sono mitigate secondo quanto previsto dal piano di gestione delle vulnerabilità (PR.IP-12), ovvero ne viene documentato e accettato il rischio residuo derivante dalla mancata mitigazione.", + "category": "Mitigation (RS.MI)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_RS.MI_3_2", + "name": "ACN_A2_1_RS.MI_3_2", + "description": "Le nuove vulnerabilità sono mitigate o documentate come rischio accettato | [2] Sono definite ed implementate procedure e misure tecniche per consentire azioni di risposta (programmate o al sopraggiungere di emergenze) in caso di vulnerabilità identificate, in base al rischio.", + "category": "Mitigation (RS.MI)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_S.DC_01_1", + "name": "ACN_A2_1_S.DC_01_1", + "description": "Il soggetto garantisce il presidio operativo del Data Center 24/7/365.", + "category": "Data Center Security" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_S.DC_01_2", + "name": "ACN_A2_1_S.DC_01_2", + "description": "Il Data Center è stato progettato e realizzato secondo standard di riferimento infrastrutturali, ad esempio ANSI/BICSI 002, TIA-942, EN 50600, Uptime Institute Tier Certification o analoghi.", + "category": "Data Center Security" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_S.DC_01_3", + "name": "ACN_A2_1_S.DC_01_3", + "description": "Nei locali ospitanti i Data Center sono presenti pavimenti flottanti qualora la distribuzione dell’alimentazione elettrica e del cablaggio non avvenga per via aerea.", + "category": "Data Center Security" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_S.DC_01_4", + "name": "ACN_A2_1_S.DC_01_4", + "description": "Il soggetto garantisce le caratteristiche antincendio del Data Center in conformità alle norme antincendio vigenti.", + "category": "Data Center Security" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_S.DC_01_5", + "name": "ACN_A2_1_S.DC_01_5", + "description": "Il soggetto garantisce che tutti i server dei Data Center sono connessi ad apparati per la continuità elettrica (UPS).", + "category": "Data Center Security" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_S.DC_02_1", + "name": "ACN_A2_1_S.DC_02_1", + "description": "Esiste un documento di dettaglio che definisce politiche e procedure inerenti allo spostamento sicuro di supporti fisici. Queste policy e procedure dovranno essere riviste su base almeno annuale.", + "category": "Data Center Security" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_S.DC_02_2", + "name": "ACN_A2_1_S.DC_02_2", + "description": "Sono implementati, manutenuti e adottati sistemi di sorveglianza all'esterno dei data center e in tutti i punti di ingresso e uscita al fine di rilevare ogni tentativo di ingresso non autorizzato.", + "category": "Data Center Security" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_1_S.DC_02_3", + "name": "ACN_A2_1_S.DC_02_3", + "description": "Sono implementati, mantenuti e adottati, all'interno dei Data Center, i sistemi di controllo ambientale al fine di monitorare e testare l'adeguatezza delle temperature e le condizioni di umidità all'interno dell'area, nel rispetto dei principali standard di settore.", + "category": "Data Center Security" + } + ], + "parameters": { + "LinuxJavaVersion-1": { + "type": "String", + "metadata": { + "displayName": "Linux Java version", + "description": "Specify a supported Java version for Function apps" + }, + "defaultValue": "" + }, + "LinuxPHPVersion-1": { + "type": "String", + "metadata": { + "displayName": "Linux PHP version", + "description": "Specify a supported PHP version for App Service" + }, + "defaultValue": "" + }, + "LinuxPythonVersion-1": { + "type": "String", + "metadata": { + "displayName": "Linux Python version", + "description": "Specify a supported Python version for Function apps" + }, + "defaultValue": "" + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1297 - Information System Recovery And Reconstitution - Restore Within Time Period", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_A.AA_1_1", + "ACN_A2_1_A2.T1_04_1", + "ACN_A2_1_A2.T1_05_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439" + }, + { + "groupNames": [ + "ACN_A2_1_A.AA_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142", + "policyDefinitionReferenceId": "Microsoft Managed Control 1293 - Information System Backup - Separate Storage For Critical Information", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1292 - Information System Backup - Test Restoration Using Sampling", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_A.AA_2_1", + "ACN_A2_1_A2.T1_06_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836" + }, + { + "groupNames": [ + "ACN_A2_1_A.AA_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912", + "policyDefinitionReferenceId": "Microsoft Managed Control 1291 - Information System Backup - Testing For Reliability - Integrity", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A.AA_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1287 - Information System Backup", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A.AA_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59", + "policyDefinitionReferenceId": "Microsoft Managed Control 1278 - Alternate Processing Site - Preparation For Use", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A.PS_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1254 - Contingency Plan - Resume All Missions - Business Functions", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_01_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311", + "policyDefinitionReferenceId": "Microsoft Managed Control 1253 - Contingency Plan - Resume Essential Missions - Business Functions", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1252 - Contingency Plan - Capacity Planning", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_A2.T1_01_1", + "ACN_A2_1_A2.T1_08" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1242 - Contingency Planning Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_A2.T1_01_1", + "ACN_A2_1_A2.T1_05_1", + "ACN_A2_1_A2.T1_06_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_01_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f", + "policyDefinitionReferenceId": "Microsoft Managed Control 1376 - Incident Response Assistance - Coordination With External Providers", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1375 - Incident Response Assistance - Automation Support For Availability Of Information - Support", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_A2.T1_02_1", + "ACN_A2_1_A2.T1_08" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1374 - Incident Response Assistance", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_A2.T1_02_1", + "ACN_A2_1_A2.T1_03_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_05_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1294 - Information System Backup - Transfer To Alternate Storage Site", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1270 - Alternate Storage Site - Recovery Time - Point Objectives", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_A2.T1_05_1", + "ACN_A2_1_A2.T1_06_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_07_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431", + "policyDefinitionReferenceId": "Microsoft Managed Control 1261 - Contingency Plan Testing", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_07_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1378 - Incident Response Plan", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_08" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9", + "policyDefinitionReferenceId": "Microsoft Managed Control 1373 - Incident Reporting - Automated Reporting", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_08" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726", + "policyDefinitionReferenceId": "Microsoft Managed Control 1372 - Incident Reporting", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_08" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417", + "policyDefinitionReferenceId": "Microsoft Managed Control 1371 - Incident Reporting", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_A2.T1_08" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed", + "policyDefinitionReferenceId": "Microsoft Managed Control 1369 - Incident Monitoring", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "SQL databases should have vulnerability findings resolved", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_4_2", + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc" + }, + { + "policyDefinitionReferenceId": "Vulnerability assessment should be enabled on your SQL servers", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9" + }, + { + "policyDefinitionReferenceId": "Vulnerabilities in container security configurations should be remediated", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933" + }, + { + "policyDefinitionReferenceId": "Vulnerabilities in security configuration on your machines should be remediated", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15" + }, + { + "policyDefinitionReferenceId": "System updates on virtual machine scale sets should be installed", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe" + }, + { + "policyDefinitionReferenceId": "Function apps that use Java should use a specified -Java version-", + "parameters": { + "LinuxJavaVersion": { + "value": "[parameters('LinuxJavaVersion-1')]" } - ], - "parameters": {}, - "policyDefinitions": [ - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1485", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1270", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-05", - "ACN-A2-1-A2.T1-06" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1542", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1464", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1673", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1669", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1373", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-08" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1292", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A.AA-2_1", - "ACN-A2-1-A2.T1-07" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1448", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1374", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-02", - "ACN-A2-1-A2.T1-03", - "ACN-A2-1-A2.T1-04" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1737", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bd6a378-4173-411d-a958-dc699b0ee2fd", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1604", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1252", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-01", - "ACN-A2-1-CE.CE-01_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1598", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1287", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A.AA-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1478", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1459", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-PR.AC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1672", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1541", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1375", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-02", - "ACN-A2-1-A2.T1-03", - "ACN-A2-1-A2.T1-08" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1486", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1291", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A.AA-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1474", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1242", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-01", - "ACN-A2-1-A2.T1-05", - "ACN-A2-1-A2.T1-06" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1157", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1670", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1451", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1549", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1369", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-08" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1253", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-01" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1294", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-05" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1479", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1738", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f01608c-5f35-492d-8763-8edf0080cc38", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1472", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1480", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1475", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1453", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-PR.AC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1482", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1463", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1165", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1376", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-02" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1446", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-PR.AC-2_1", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1473", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1454", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1671", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1371", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-08" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1477", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1447", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1476", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1372", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-08" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1484", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1445", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-PR.AC-2_1", - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1166", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1668", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1378", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-08" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1465", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1293", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A.AA-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1254", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-01" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1483", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1469", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1470", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1278", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A.AA-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1471", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-S.DC-01_1", - "ACN-A2-1-S.DC-01_2", - "ACN-A2-1-S.DC-01_3", - "ACN-A2-1-S.DC-01_4", - "ACN-A2-1-S.DC-01_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1297", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A.AA-2_1", - "ACN-A2-1-A2.T1-05", - "ACN-A2-1-A2.T1-06" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1603", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_1", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1261", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-A2.T1-07" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ACF1481", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RE.GE-01_1", - "ACN-A2-1-S.DC-02_1", - "ACN-A2-1-S.DC-02_2", - "ACN-A2-1-S.DC-02_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:e8cbc669-f12d-49eb-93e7-9273119e9933", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:7261b898-8a84-4db8-9e04-18527132abb3", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:86b3d65f-7626-441e-b690-81a8b71cff60", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:7238174a-fd10-4ef0-817e-fc820a951d73", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:c3f317a7-a95c-4547-b7e7-11017ebdf2fe", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:3c5e0e1a-216f-8f49-0a15-76ed0d8b8e1f", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c5e0e1a-216f-8f49-0a15-76ed0d8b8e1f", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:496223c3-ad65-4ecd-878a-bae78737e9ed", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:7008174a-fd10-4ef0-817e-fc820a951d73", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:e3905a3c-97e7-0b4f-15fb-465c0927536f", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3905a3c-97e7-0b4f-15fb-465c0927536f", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:501541f7-f7e7-4cd6-868c-4190fdad3ac9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4", - "ACN-A2-1-RS.MI-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:feedbf84-6b99-488c-acc2-71c829aa5ffc", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:88999f4c-376a-45c8-bcb3-4058f713cf39", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:0fc39691-5a3f-4e3e-94ee-2e6447309ad9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0fc39691-5a3f-4e3e-94ee-2e6447309ad9", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:74c3584d-afae-46f7-a20a-6f8adba71a16", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:6ba6d016-e7c3-4842-b8f2-4992ebc0d72d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:5f0f936f-2f01-4bf5-b6be-d423792fa562", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-1:1b7aa243-30e4-4c9e-bca8-d0d3022b634a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a", - "parameters": {}, - "groupNames": [ - "ACN-A2-1-DE.CM-8_1", - "ACN-A2-1-DE.CM-8_2", - "ACN-A2-1-DE.CM-8_3", - "ACN-A2-1-DE.CM-8_4", - "ACN-A2-1-RS.MI-3_2" - ] + }, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc" + }, + { + "policyDefinitionReferenceId": "System updates should be installed on your machines", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60" + }, + { + "policyDefinitionReferenceId": "App Service apps that use PHP should use a specified -PHP version-", + "parameters": { + "LinuxPHPVersion": { + "value": "[parameters('LinuxPHPVersion-1')]" + } + }, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3" + }, + { + "policyDefinitionReferenceId": "Function apps that use Python should use a specified -Python version-", + "parameters": { + "LinuxPythonVersion": { + "value": "[parameters('LinuxPythonVersion-1')]" } - ] + }, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73" + }, + { + "policyDefinitionReferenceId": "App Service apps that use Python should use a specified -Python version-", + "parameters": { + "LinuxPythonVersion": { + "value": "[parameters('LinuxPythonVersion-1')]" + } + }, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73" + }, + { + "policyDefinitionReferenceId": "SQL servers on machines should have vulnerability findings resolved", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d" + }, + { + "policyDefinitionReferenceId": "A vulnerability assessment solution should be enabled on your virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9" + }, + { + "policyDefinitionReferenceId": "App Service apps that use Java should use a specified -Java version-", + "parameters": { + "LinuxJavaVersion": { + "value": "[parameters('LinuxJavaVersion-1')]" + } + }, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed" + }, + { + "policyDefinitionReferenceId": "Vulnerabilities in security configuration on your virtual machine scale sets should be remediated", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4" + }, + { + "policyDefinitionReferenceId": "Vulnerability assessment should be enabled on SQL Managed Instance", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_DE.CM_8_1", + "ACN_A2_1_DE.CM_8_2", + "ACN_A2_1_DE.CM_8_3", + "ACN_A2_1_DE.CM_8_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1446 - Physical And Environmental Protection Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_PR.AC_1_6", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1445 - Physical And Environmental Protection Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_PR.AC_2_1", + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37" + }, + { + "groupNames": [ + "ACN_A2_1_PR.AC_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0", + "policyDefinitionReferenceId": "Microsoft Managed Control 1459 - Access Control For Transmission Medium", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_PR.AC_2_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011", + "policyDefinitionReferenceId": "Microsoft Managed Control 1453 - Physical Access Control", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1484 - Water Damage Protection - Automation Support", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RC.RP_1_1", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1483 - Water Damage Protection", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1482 - Temperature And Humidity Controls - Monitoring With Alarms - Notifications", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1481 - Temperature And Humidity Controls", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1480 - Temperature And Humidity Controls", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1479 - Fire Protection - Automatic Fire Suppression", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_RS.MI_3_2", + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1478 - Fire Protection - Suppression Devices - Systems", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1477 - Fire Protection - Detection Devices - Systems", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1476 - Fire Protection", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE.GE_01_1", + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1738 - Plan Of Action And Milestones Process", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RE_GE_02_1", + "ACN_A2_1_RS.MI_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f01608c-5f35-492d-8763-8edf0080cc38" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1737 - Plan Of Action And Milestones Process", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RS.MI_3_1", + "ACN_A2_1_RS.MI_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bd6a378-4173-411d-a958-dc699b0ee2fd" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844", + "policyDefinitionReferenceId": "Microsoft Managed Control 1673 - Flaw Remediation - Automated Flaw Remediation Status", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301", + "policyDefinitionReferenceId": "Microsoft Managed Control 1672 - Flaw Remediation - Central Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698", + "policyDefinitionReferenceId": "Microsoft Managed Control 1671 - Flaw Remediation", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1670 - Flaw Remediation", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RS.MI_3_1", + "ACN_A2_1_RS.MI_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1669 - Flaw Remediation", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1668 - Flaw Remediation", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RS.MI_3_1", + "ACN_A2_1_RS.MI_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f", + "policyDefinitionReferenceId": "Microsoft Managed Control 1604 - Developer Security Testing And Evaluation", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1603 - Developer Security Testing And Evaluation", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RS.MI_3_1", + "ACN_A2_1_RS.MI_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3", + "policyDefinitionReferenceId": "Microsoft Managed Control 1598 - Developer Configuration Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a", + "policyDefinitionReferenceId": "Microsoft Managed Control 1549 - Vulnerability Scanning", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1542 - Risk Assessment", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434", + "policyDefinitionReferenceId": "Microsoft Managed Control 1541 - Risk Assessment", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1166 - Continuous Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_RS.MI_3_1", + "ACN_A2_1_RS.MI_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1165 - Continuous Monitoring", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_1_RS.MI_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a", + "policyDefinitionReferenceId": "Microsoft Managed Control 1157 - Plan Of Action And Milestones", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1475 - Emergency Lighting", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1474 - Emergency Power - Long-Term Alternate Power Supply - Minimal Operational Capability", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1473 - Emergency Power", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1472 - Emergency Shutoff", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1471 - Emergency Shutoff", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1470 - Emergency Shutoff", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1469 - Power Equipment And Cabling", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_01_1", + "ACN_A2_1_S.DC_01_2", + "ACN_A2_1_S.DC_01_3", + "ACN_A2_1_S.DC_01_4", + "ACN_A2_1_S.DC_01_5", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1486 - Alternate Work Site", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_01_5", + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1485 - Delivery And Removal", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1465 - Monitoring Physical Access - Monitoring Physical Access To Information Systems", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1464 - Monitoring Physical Access - Intrusion Alarms - Surveillance Equipment", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1463 - Monitoring Physical Access", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1454 - Physical Access Control", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1451 - Physical Access Control", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1448 - Physical Access Authorizations", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1447 - Physical Access Authorizations", + "parameters": {}, + "groupNames": [ + "ACN_A2_1_S.DC_02_1", + "ACN_A2_1_S.DC_02_2", + "ACN_A2_1_S.DC_02_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a" + } + ] }, - "id": "providers/Microsoft.Authorization/policySetDefinitions/ACN-A2-1-QI1-Ordinari", - "type": "Microsoft.Authorization/policySetDefinitions", - "name": "ACN-A2-1-QI1-Ordinari" -} \ No newline at end of file + "id": "/providers/Microsoft.Authorization/policySetDefinitions/8f7aa6f4-c8f8-48e3-8a93-fb2b995b2ed5", + "name": "8f7aa6f4-c8f8-48e3-8a93-fb2b995b2ed5" + } + \ No newline at end of file diff --git a/PolicyInitiatives/ACN/Initiative A2_2_Critici.json b/PolicyInitiatives/ACN/Initiative A2_2_Critici.json index adfd21b..517417b 100644 --- a/PolicyInitiatives/ACN/Initiative A2_2_Critici.json +++ b/PolicyInitiatives/ACN/Initiative A2_2_Critici.json @@ -1,200 +1,224 @@ { "properties": { - "displayName": "ACN_A2_2_QI2_Critici", - "policyType": "Custom", - "description": "This initiative includes policies that address the ACN controls for Qualifications QI2.", - "metadata": { - "version": "1.1.0", - "category": "Regulatory Compliance" - }, - "policyDefinitionGroups": [ - { - "name": "ACN-A2-2-PR.AC-2_3", - "displayName": "ACN-A2-2-PR.AC-2_3", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-2] L'accesso fisico alle risorse è protetto e amministrato | [3] È definito un perimetro di sicurezza tra le aree amministrative e le aree di data storage e processing." - }, - { - "name": "ACN-A2-2-A.BC-3_1", - "displayName": "ACN-A2-2-A.BC-3_1", - "description": "Business Continuity e Disaster Recovery | [A.BC-3] Sono disponibili soluzioni di Disaster Recovery con tempi di ripristino garantiti | [1] Provider di infrastruttura: L'infrastruttura digitale è dotata di soluzioni di DR e deve garantire tempi di ripristino (RTO e RPO) variabili in funzione della criticità dell'applicazione ospitata conformemente con quanto definito nella BIA. Devono comunque essere garantiti almeno i seguenti parametri di ripristino in caso di disastro: RTO 12 ore e RPO 12 ore." - }, - { - "name": "ACN-A2-2-A.BC-3_2", - "displayName": "ACN-A2-2-A.BC-3_2", - "description": "Business Continuity e Disaster Recovery | [A.BC-3] Sono disponibili soluzioni di Disaster Recovery con tempi di ripristino garantiti | [2] Public Cloud provider: devono essere presenti servizi cloud di Disaster Recovery." - } - ], - "parameters": {}, - "policyDefinitions": [ - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1270", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1464", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-PR.AC-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1272", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1273", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1248", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1267", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1459", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-PR.AC-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1242", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1457", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-PR.AC-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1253", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1294", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1255", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1453", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-PR.AC-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1251", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1293", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1277", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1244", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1295", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_1", - "ACN-A2-2-A.BC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-A2-2:ACF1297", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439", - "parameters": {}, - "groupNames": [ - "ACN-A2-2-A.BC-3_2" - ] - } - ] + "displayName": "ACN_A2_2_QI2_Critici", + "policyType": "Custom", + "description": "This initiative includes policies that address the ACN controls for Qualifications QI2.", + "metadata": { + "category": "Regulatory Compliance", + "version": "1.2.0", + "preview": false + }, + "version": "1.2.0", + "policyDefinitionGroups": [ + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_2_PR.AC_2_3", + "name": "ACN_A2_2_PR.AC_2_3", + "description": "L'accesso fisico alle risorse è protetto e amministrato | [3] È definito un perimetro di sicurezza tra le aree amministrative e le aree di data storage e processing.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_2_A.BC_3_1", + "name": "ACN_A2_2_A.BC_3_1", + "description": "Provider di infrastruttura: L'infrastruttura digitale è dotata di soluzioni di DR e deve garantire tempi di ripristino (RTO e RPO) variabili in funzione della criticità dell'applicazione ospitata conformemente con quanto definito nella BIA. Devono comunque essere garantiti almeno i seguenti parametri di ripristino in caso di disastro: RTO 12 ore e RPO 12 ore.", + "category": "Business Continuity e Disaster Recovery" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_A2_2_A.BC_3_2", + "name": "ACN_A2_2_A.BC_3_2", + "description": "Public Cloud provider: devono essere presenti servizi cloud di Disaster Recovery.", + "category": "Business Continuity e Disaster Recovery" + } + ], + "parameters": {}, + "policyDefinitions": [ + { + "groupNames": [ + "ACN_A2_2_PR.AC_2_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac", + "policyDefinitionReferenceId": "Microsoft Managed Control 1464 - Monitoring Physical Access - Intrusion Alarms - Surveillance Equipment", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_2_PR.AC_2_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0", + "policyDefinitionReferenceId": "Microsoft Managed Control 1459 - Access Control For Transmission Medium", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_2_PR.AC_2_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305", + "policyDefinitionReferenceId": "Microsoft Managed Control 1457 - Physical Access Control", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_A2_2_PR.AC_2_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011", + "policyDefinitionReferenceId": "Microsoft Managed Control 1453 - Physical Access Control", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1270 - Alternate Storage Site - Recovery Time - Point Objectives", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1272 - Alternate Processing Site", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1273 - Alternate Processing Site", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1248 - Contingency Plan", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1267 - Alternate Storage Site", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1242 - Contingency Planning Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1253 - Contingency Plan - Resume Essential Missions - Business Functions", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1294 - Information System Backup - Transfer To Alternate Storage Site", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1255 - Contingency Plan - Continue Essential Missions - Business Functions", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1251 - Contingency Plan - Coordinate With Related Plans", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1293 - Information System Backup - Separate Storage For Critical Information", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1277 - Alternate Processing Site - Priority Of Service", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1244 - Contingency Plan", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1295 - Information System Recovery And Reconstitution", + "parameters": {}, + "groupNames": [ + "ACN_A2_2_A.BC_3_1", + "ACN_A2_2_A.BC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9" + }, + { + "groupNames": [ + "ACN_A2_2_A.BC_3_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439", + "policyDefinitionReferenceId": "Microsoft Managed Control 1297 - Information System Recovery And Reconstitution - Restore Within Time Period", + "definitionVersion": "1.*.*" + } + ] }, - "id": "providers/Microsoft.Authorization/policySetDefinitions/ACN-A2-2-QI2-Critici", - "type": "Microsoft.Authorization/policySetDefinitions", - "name": "ACN-A2-2-QI2-Critici" -} \ No newline at end of file + "id": "/providers/Microsoft.Authorization/policySetDefinitions/0c7dcabf-d049-434c-9136-52c419eb4619", + "name": "0c7dcabf-d049-434c-9136-52c419eb4619" + } + \ No newline at end of file diff --git a/PolicyInitiatives/ACN/Initiative B2_1_Ordinari.json b/PolicyInitiatives/ACN/Initiative B2_1_Ordinari.json index 2091ab0..b504835 100644 --- a/PolicyInitiatives/ACN/Initiative B2_1_Ordinari.json +++ b/PolicyInitiatives/ACN/Initiative B2_1_Ordinari.json @@ -1,6122 +1,7443 @@ { "properties": { - "displayName": "ACN_B2_1_QC1_Ordinari", - "policyType": "Custom", - "description": "This initiative includes policies that address the ACN controls for Qualifications QC1.", - "metadata": { - "version": "1.1.0", - "category": "Regulatory Compliance" - }, - "policyDefinitionGroups": [ - { - "name": "ACN-B2-1-QU.SE-2_1", - "displayName": "ACN-B2-1-QU.SE-2_1", - "description": "Qualità del servizio | [QU.SE-2] Viene fornito un adeguato servizio di assistenza e supporto | [1] È garantito il servizio di supporto e assistenza all’Amministrazione per il servizio cloud." + "displayName": "ACN_B2_1_QC1_Ordinari", + "policyType": "Custom", + "description": "This initiative includes policies that address the ACN controls for Qualifications QC1. This policy set includes definitions that have a Deny effect by default.", + "metadata": { + "category": "Regulatory Compliance", + "version": "1.2.0", + "preview": false + }, + "version": "1.2.0", + "policyDefinitionGroups": [ + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_QU.SE_2_1", + "name": "ACN_B2_1_QU.SE_2_1", + "description": "È garantito il servizio di supporto e assistenza all’Amministrazione per il servizio cloud.", + "category": "Qualità del servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_QU.SE_2_2", + "name": "ACN_B2_1_QU.SE_2_2", + "description": "Il servizio di supporto e assistenza di cui al punto 1 è fornito almeno in lingua italiana tutti i giorni dell’anno a qualsiasi orario (24/7/365).", + "category": "Qualità del servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_QU.SE_2_3", + "name": "ACN_B2_1_QU.SE_2_3", + "description": "Il servizio di supporto e assistenza di cui al punto 1 è accessibile almeno tramite recapito telefonico e posta elettronica.", + "category": "Qualità del servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_QU.SE_2_4", + "name": "ACN_B2_1_QU.SE_2_4", + "description": "Il servizio di supporto e assistenza di cui al punto 1 prevede, inoltre, un sistema di risoluzione dei problemi (troubleshooting) a disposizione dell’Amministrazione, garantendone anche l'esposizione tramite API per permettere l'interazione programmatica con i sistemi di gestione dei problemi (Case Management System).", + "category": "Qualità del servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_QU.SE_4_1", + "name": "ACN_B2_1_QU.SE_4_1", + "description": "Devono essere rese disponibili all'Amministrazione le linee guida per una gestione sicura del servizio cloud oggetto di qualificazione, indirizzando, ove applicabile, i seguenti aspetti:", + "category": "Qualità del servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_QU.LS_4_1", + "name": "ACN_B2_1_QU.LS_4_1", + "description": "Il soggetto rende disponibile all'Amministrazione l’accesso ad uno o più strumenti di monitoraggio per il servizio cloud. Essi devono consentire attività di raccolta, monitoraggio, filtraggio, creazione di report attraverso parametri predefiniti o parametrizzabili e consentire all‘Amministrazione di impostare allarmi personalizzati. La granularità massima delle operazioni non deve essere superiore al minuto (ad es., deve essere possibile filtrare o raccogliere gli eventi ogni minuto). In aggiunta, il soggetto specifica l'eventuale disponibilità di API e strumenti di monitoraggio di terze parti integrate nativamente con il servizio qualificato.", + "category": "Livello del servizio (SLA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_1_1", + "name": "ACN_B2_1_ID.AM_1_1", + "description": "Tutti i sistemi e gli apparati fisici sono censiti ed esiste un elenco di quelli approvati da attori interni al soggetto.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_1_2", + "name": "ACN_B2_1_ID.AM_1_2", + "description": "Tutti i sistemi e gli apparati fisici presenti sulle reti sono censiti e l'accesso alla rete è consentito esclusivamente a quelli approvati.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_2_1", + "name": "ACN_B2_1_ID.AM_2_1", + "description": "Tutte le piattaforme e le applicazioni software installate sono censite ed esiste un elenco di quelle approvate da attori interni al soggetto.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_2_2", + "name": "ACN_B2_1_ID.AM_2_2", + "description": "L'installazione delle piattaforme e delle applicazioni software è consentito esclusivamente per quelle approvate.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_2_3", + "name": "ACN_B2_1_ID.AM_2_3", + "description": "Esistono politiche che limitino l'aggiunta, rimozione o aggiornamento, nonché la gestione non autorizzata degli asset dell'organizzazione.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_3_1", + "name": "ACN_B2_1_ID.AM_3_1", + "description": "Tutti i flussi informativi, inclusi quelli verso l'esterno e relativi al servizio cloud, sono identificati e approvati da attori interni al soggetto.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_6_1", + "name": "ACN_B2_1_ID.AM_6_1", + "description": "È definita e resa nota alle articolazioni competenti del soggetto l'organizzazione di cybersecurity, anche con riferimento ai ruoli e alle responsabilità, per tutto il personale e per eventuali terze parti.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_6_2", + "name": "ACN_B2_1_ID.AM_6_2", + "description": "È nominato, nell'ambito dell'articolazione di cui al punto 1, un incaricato, e un eventuale sostituto, con il compito di gestire l'attuazione delle disposizioni del Regolamento in possesso di specifiche professionalità e competenze nella materia della sicurezza cibernetica, che riferisce direttamente al vertice gerarchico del soggetto ed assicura l'efficace implementazione delle misure di sicurezza di cui al presente Allegato.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_6_3", + "name": "ACN_B2_1_ID.AM_6_3", + "description": "Sono nominati, nell'ambito dell'articolazione di cui al punto 1, un referente tecnico, e almeno un suo sostituto, in possesso di competenze tecnico-specialistiche nella materia della sicurezza cibernetica, per lo svolgimento delle funzioni di interlocuzione con il CSIRT Italia ai fini della gestione degli incidenti aventi impatto sul servizio cloud.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.AM_6_4", + "name": "ACN_B2_1_ID.AM_6_4", + "description": "L'incaricato di cui al punto 2 e il referente tecnico di cui al punto 3 operano in stretto raccordo.", + "category": "Asset Management (ID.AM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.GV_1_1", + "name": "ACN_B2_1_ID.GV_1_1", + "description": "Esiste un documento aggiornato che descrive le politiche, i processi e le procedure di cybersecurity.", + "category": "Governance (ID.GV)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.GV_1_2", + "name": "ACN_B2_1_ID.GV_1_2", + "description": "Il Documento di cui al punto 1 deve essere approvato dal soggetto e aggiornato almeno su base annuale o in corrispondenza di sostanziali variazioni all'interno dell'organizzazione.", + "category": "Governance (ID.GV)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.GV_4_1", + "name": "ACN_B2_1_ID.GV_4_1", + "description": "Il documento aggiornato che descrive i processi di gestione del rischio include la parte relativa ai rischi legati alla cybersecurity.", + "category": "Governance (ID.GV)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.GV_4_2", + "name": "ACN_B2_1_ID.GV_4_2", + "description": "Esiste un programma formale di Enterprise Risk Management (ERM) che include politiche e procedure per l'identificazione, la valutazione, la proprietà, il trattamento e l'accettazione dei rischi di sicurezza e privacy del cloud.", + "category": "Governance (ID.GV)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.RA_1_1", + "name": "ACN_B2_1_ID.RA_1_1", + "description": "Esiste un piano aggiornato di verifica e test di sicurezza che descrive l'insieme delle attività finalizzate alla valutazione del livello di sicurezza cibernetica dell’Infrastruttura digitale e dell'efficacia delle misure di sicurezza tecniche e procedurali che contiene, inoltre, la periodicità e le modalità di esecuzione.", + "category": "Risk Assessment (ID.RA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.RA_1_2", + "name": "ACN_B2_1_ID.RA_1_2", + "description": "Esistono procedure, da aggiornare almeno su base annuale, per la gestione dei rischi associati a variazioni nell'ambito di asset organizzativi, ivi incluse applicazioni, sistemi, infrastrutture, configurazioni, ecc., indipendentemente dal fatto che gli asset siano gestiti internamente o esternamente (cioè in outsourcing).", + "category": "Risk Assessment (ID.RA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.RA_5_1", + "name": "ACN_B2_1_ID.RA_5_1", + "description": "L'analisi del rischio è svolta in funzione delle minacce, delle vulnerabilità, delle relative probabilità di accadimento e dei conseguenti impatti derivanti dal loro sfruttamento alla luce delle minacce considerate.", + "category": "Risk Assessment (ID.RA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.RA_5_2", + "name": "ACN_B2_1_ID.RA_5_2", + "description": "L’analisi del rischio tiene conto delle dipendenze interne ed esterne dell’Infrastruttura digitale.", + "category": "Risk Assessment (ID.RA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.RA_5_3", + "name": "ACN_B2_1_ID.RA_5_3", + "description": "Dopo aver identificato tutti i fattori di rischio e averli analizzati viene effettuata una ponderazione per determinare il livello di rischio.", + "category": "Risk Assessment (ID.RA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.SC_1_1", + "name": "ACN_B2_1_ID.SC_1_1", + "description": "Esiste un documento aggiornato di dettaglio che descrive i processi di gestione del rischio inerente la catena di approvvigionamento cyber", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_ID.SC_1_2", + "name": "ACN_B2_1_ID.SC_1_2", + "description": "Tali processi sono validati e approvati da parte dei vertici del soggetto", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_1_1", + "name": "ACN_B2_1_PR.AC_1_1", + "description": "Le credenziali di accesso sono individuali per il personale del soggetto e rispettano il principio di segregazione delle funzioni. Le credenziali sono aggiornate con una cadenza proporzionata ai privilegi dell'utenza.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_1_2", + "name": "ACN_B2_1_PR.AC_1_2", + "description": "Esistono politiche e procedure per la gestione delle credenziali di cui al punto 1, le quali dovranno essere aggiornate almeno su base annuale e rese disponibili, per la consultazione, all’Amministrazione.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_1_3", + "name": "ACN_B2_1_PR.AC_1_3", + "description": "Sono definiti meccanismi di gestione, memorizzazione e revisione delle informazioni in materia di credenziali, identità di sistema e livello di accesso.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_1_4", + "name": "ACN_B2_1_PR.AC_1_4", + "description": "Le credenziali sono aggiornate tempestivamente e senza ingiustificato ritardo qualora vi siano variazioni dell’utenza (es., trasferimento di personale).", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_1_5", + "name": "ACN_B2_1_PR.AC_1_5", + "description": "Le identità di sistema sono gestite impiegando certificati digitali o tecniche alternative che assicurano un livello equivalente di sicurezza.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_1_6", + "name": "ACN_B2_1_PR.AC_1_6", + "description": "Esiste una pianificazione aggiornata degli audit di sicurezza delle identità digitali previsti e un registro degli audit effettuati con la relativa documentazione.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_3_1", + "name": "ACN_B2_1_PR.AC_3_1", + "description": "Gli accessi da remoto effettuati sono monitorati da parte dell'organizzazione di cybersecurity.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_3_2", + "name": "ACN_B2_1_PR.AC_3_2", + "description": "Fatti salvi documentati limiti tecnici, sono implementate adeguate misure di controllo dell'accesso, adottando sistemi di autenticazione, autorizzazione e registrazione/contabilizzazione centralizzati degli accessi, coadiuvati da sistemi di autenticazione, la cui sicurezza è proporzionale al rischio.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_3_3", + "name": "ACN_B2_1_PR.AC_3_3", + "description": "È definito e implementato un modello di gestione degli accessi centralizzato volto ai processi di autorizzazione, logging e comunicazione degli accessi alle risorse e ai dati dell’Amministrazione.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_3_4", + "name": "ACN_B2_1_PR.AC_3_4", + "description": "Esiste un log degli accessi eseguiti da remoto.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_4_1", + "name": "ACN_B2_1_PR.AC_4_1", + "description": "Sono definite, con riferimento ai censimenti di cui alla categoria ID.AM, almeno:", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_4_2", + "name": "ACN_B2_1_PR.AC_4_2", + "description": "Nell'ambito di implementazione dell'accesso al sistema informativo, vengono osservati principi di separazione delle funzioni e del privilegio minimo in relazione al rischio organizzativo.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_4_3", + "name": "ACN_B2_1_PR.AC_4_3", + "description": "Sono definite e implementate politiche e procedure, misure tecniche per la segregazione dei ruoli di accesso privilegiato in modo che l'accesso amministrativo ai dati, le capacità di crittografia e gestione delle chiavi e le capacità di registrazione siano distinte e separate.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_5_1", + "name": "ACN_B2_1_PR.AC_5_1", + "description": "Sono presenti politiche e procedure per la sicurezza dell'infrastruttura di rete, le quali dovranno essere aggiornate almeno su base annuale.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_5_2", + "name": "ACN_B2_1_PR.AC_5_2", + "description": "È definito un piano per il monitoraggio della disponibilità, qualità e l'adeguata capacità delle risorse al fine di fornire le prestazioni di sistema richieste.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_7_1", + "name": "ACN_B2_1_PR.AC_7_1", + "description": "Sono definite e implementate politiche e procedure per l'accesso ai sistemi, alle applicazioni e ai dati, compresa l'autenticazione multifattoriale almeno per gli utenti privilegiati e l'accesso a dati.", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AC_7_2", + "name": "ACN_B2_1_PR.AC_7_2", + "description": "In relazione al servizio cloud, deve essere garantita all’Amministrazione la funzionalità di autenticazione a più fattori o l'uso di soluzioni di autenticazione a più fattori di terze parti. Devono essere rese disponibili informazioni trasparenti in merito alle funzionalità di autenticazione a più fattori accessibili all'Agenzia per la Cybersicurezza Nazionale (ACN) e all’Amministrazione, con specifiche sui meccanismi adoperati per l'autenticazione (es. e-mail, sms o check biometrico).", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AT_1_1", + "name": "ACN_B2_1_PR.AT_1_1", + "description": "Esiste un documento aggiornato di dettaglio che indica i contenuti dell'addestramento e della formazione fornita al personale del soggetto e le modalità di verifica dell'acquisizione dei contenuti.", + "category": "Awareness and Training (PR.AT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AT_1_2", + "name": "ACN_B2_1_PR.AT_1_2", + "description": "L’addestramento e la formazione di cui al punto 1 fornita agli utenti del soggetto, in relazione ai ruoli, prevede, almeno, le seguenti tematiche:\n\n\n\na. la tutela della confidenzialità di dati in chiaro o cifrati.\n\nb. la restituzione dei beni di natura aziendale al termine del rapporto di lavoro\n\nd. la definizione di ruoli e delle responsabilità\n\ne. politiche di accesso a sistemi, asset e risorse\n\nf. politiche di gestione delle informazioni e della sicurezza\n\ng. processi di comunicazione di ruoli e responsabilità ai dipendenti che hanno accesso ad asset informativi\n\nh. requisiti per la non divulgazione/confidenzialità di informazioni", + "category": "Awareness and Training (PR.AT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AT_2_1", + "name": "ACN_B2_1_PR.AT_2_1", + "description": "Sono definiti i contenuti dell'istruzione fornita al personale del soggetto con privilegi e le modalità di verifica dell'acquisizione dei contenuti.", + "category": "Awareness and Training (PR.AT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.AT_2_2", + "name": "ACN_B2_1_PR.AT_2_2", + "description": "Sono definiti, per ogni membro del personale del soggetto, i privilegi e le istruzioni ricevute.", + "category": "Awareness and Training (PR.AT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_1_1", + "name": "ACN_B2_1_PR.DS_1_1", + "description": "Sono definite, anche in relazione alla categoria ID.AM, almeno", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_1_2", + "name": "ACN_B2_1_PR.DS_1_2", + "description": "Con riferimento alle infrastrutture impiegate per l’erogazione del servizio cloud al trattamento dei dati e dei servizi dell’Amministrazione, fermo restando quanto previsto dall'allegato B al Regolamento, requisito SC-SI-PR.DS-1-01, qualora sussistano motivate e documentate limitazioni di carattere tecnico, eventuali metadati necessari per l’erogazione del servizio cloud possono essere trattati mediante l’impiego di infrastrutture fisiche e tecnologiche localizzate al di fuori del territorio dell’Unione europea. In tal caso, i citati metadati non possono contenere, anche in parte, i dati dell’Amministrazione.", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_1_3", + "name": "ACN_B2_1_PR.DS_1_3", + "description": "Con riferimento all’accesso ai dati da parte di entità extra-UE, il soggetto", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_1_4", + "name": "ACN_B2_1_PR.DS_1_4", + "description": "Il soggetto garantisce autonomia all’Amministrazione nella gestione delle proprie chiavi crittografiche e, in particolare", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_1_5", + "name": "ACN_B2_1_PR.DS_1_5", + "description": "Sono presenti processi, procedure e misure tecniche per revocare e rimuovere le chiavi crittografiche prima della fine del loro periodo di validità, quando una chiave è compromessa, o un'entità non fa più parte dell'organizzazione, conformemente a requisiti legali e normativi", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_1_6", + "name": "ACN_B2_1_PR.DS_1_6", + "description": "Sono definiti e implementati processi, procedure e misure per la creazione, disattivazione di chiavi al momento della scadenza, eventuali sospensioni e meccanismi di gestione per le chiavi d'accesso a repository", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_2_1", + "name": "ACN_B2_1_PR.DS_2_1", + "description": "Sono utilizzati canali di comunicazione sicuri e criptati durante la migrazione di server, servizi, applicazioni o dati in ambienti cloud. Tali canali devono includere solo protocolli aggiornati e approvati.", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_3_1", + "name": "ACN_B2_1_PR.DS_3_1", + "description": "Sono definite in relazione alla categoria ID.AM", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_5_1", + "name": "ACN_B2_1_PR.DS_5_1", + "description": "Sono definite in relazione alla categoria ID.AM, almeno", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_5_2", + "name": "ACN_B2_1_PR.DS_5_2", + "description": "Sono adottate politiche di Data Loss Prevention coerentemente con la valutazione dei rischi", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_6_1", + "name": "ACN_B2_1_PR.DS_6_1", + "description": "Sono definiti in relazione alla categoria ID.AM, almeno", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.DS_7_1", + "name": "ACN_B2_1_PR.DS_7_1", + "description": "Sono definite in relazione alla categoria ID.AM", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_1_1", + "name": "ACN_B2_1_PR.IP_1_1", + "description": "Sono definite politiche e procedure con riferimento alla sicurezza delle applicazioni per fornire un adeguato supporto alla pianificazione, realizzazione e manutenzione delle funzionalità di sicurezza delle applicazioni, le quali dovranno essere riviste e aggiornate almeno su base annuale.[IaaS,SaaS]", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_3_1", + "name": "ACN_B2_1_PR.IP_3_1", + "description": "Sono definite", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_3_2", + "name": "ACN_B2_1_PR.IP_3_2", + "description": "È implementata una procedura per la gestione delle eccezioni, incluse emergenze, nel processo di modifica e configurazione", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_3_3", + "name": "ACN_B2_1_PR.IP_3_3", + "description": "Sono definiti e implementati piani di ripristino allo stato precedente (cd. rollback) in caso di errori o problemi di sicurezza", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_4_1", + "name": "ACN_B2_1_PR.IP_4_1", + "description": "Sono definite, anche in relazione alla categoria ID.AM, almeno", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_4_2", + "name": "ACN_B2_1_PR.IP_4_2", + "description": "Viene effettuato periodicamente un backup dei dati memorizzati nel cloud. Viene assicurata la riservatezza, l’integrità e la disponibilità dei dati dei backup", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_4_3", + "name": "ACN_B2_1_PR.IP_4_3", + "description": "Le copie di backup di informazioni, software e immagini di sistema del servizio cloud sono protette con crittografia forte ed archiviate regolarmente in siti remoti (nel rispetto di quanto previsto dalla categoria PR.DS). Qualora i backup siano trasmessi ad un sito remoto tramite rete, la trasmissione deve essere protetta con crittografia forte", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_4_4", + "name": "ACN_B2_1_PR.IP_4_4", + "description": "Viene verificato periodicamente il ripristino (test di restore) delle copie di backup come da obiettivo (SLO) identificato per il corrispondente indicatore di servizio (SLI) riportato alla Tabella 1 \"Indicatori minimi della qualità del Servizio\"", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_9_1", + "name": "ACN_B2_1_PR.IP_9_1", + "description": "L'impatto derivante da interruzioni di business ed eventuali rischi è determinato al fine di stabilire i criteri per sviluppare strategie e capacità di business continuity.", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_9_2", + "name": "ACN_B2_1_PR.IP_9_2", + "description": "Esiste un documento aggiornato di dettaglio contenente i piani di continuità operativa, nonché quelli di risposta in caso di incidenti, che comprende almeno", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_9_3", + "name": "ACN_B2_1_PR.IP_9_3", + "description": "Esiste un documento aggiornato recante l'elenco delle attività di istruzione, formazione ed esercitazione svolte.", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_9_4", + "name": "ACN_B2_1_PR.IP_9_4", + "description": "I piani di business continuity sono collaudati e comunicati alle parti interessate.", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_9_5", + "name": "ACN_B2_1_PR.IP_9_5", + "description": "La documentazione di cui al punto 2 è resa disponibile, ove richiesto, all’Amministrazione e rivista periodicamente.", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_12_1", + "name": "ACN_B2_1_PR.IP_12_1", + "description": "Esiste un documento aggiornato di dettaglio che indica almeno", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.IP_12_2", + "name": "ACN_B2_1_PR.IP_12_2", + "description": "Sono definite ed implementate procedure e misure tecniche volte all'aggiornamento degli strumenti di rilevamento, delle threat signatures e degli indicatori di compromissione, le quali dovranno essere riviste e aggiornate frequentemente o su base settimanale.", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.MA_1_1", + "name": "ACN_B2_1_PR.MA_1_1", + "description": "Sono definite anche in relazione alla categoria ID.AM, almeno", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.MA_2_1", + "name": "ACN_B2_1_PR.MA_2_1", + "description": "La manutenzione delle risorse e dei sistemi (ivi incluse le attività relative alle funzioni di sicurezza) svolta da remoto è eseguita nel rispetto delle misure di cui alla sottocategoria PR.AC-3 e dei seguenti punti.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.MA_2_2", + "name": "ACN_B2_1_PR.MA_2_2", + "description": "Tutti gli accessi eseguiti da remoto da personale di terze parti sono autorizzati dall'organizzazione di cybersecurity e limitati ai soli casi essenziali.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.MA_2_3", + "name": "ACN_B2_1_PR.MA_2_3", + "description": "Sono adottati stringenti meccanismi di protezione per l'autenticazione, l'identificazione e per il tracciamento degli eventi.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.MA_2_4", + "name": "ACN_B2_1_PR.MA_2_4", + "description": "Sono adottati meccanismi di gestione e controllo delle utenze privilegiate, in termini di limitazioni di natura temporale e delle funzionalità amministrative disponibili.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.MA_2_5", + "name": "ACN_B2_1_PR.MA_2_5", + "description": "Tutti i log relativi alle sessioni di comunicazione remota e alle attività eseguite sui sistemi remoti, sono prodotti e custoditi su sistemi separati da quelli oggetto di intervento e non accessibili dalle utenze remote.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.PT_1_1", + "name": "ACN_B2_1_PR.PT_1_1", + "description": "I log sono conservati in modo sicuro, possibilmente centralizzato, per almeno 24 mesi.", + "category": "Protective Technology (PR.PT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.PT_1_2", + "name": "ACN_B2_1_PR.PT_1_2", + "description": "Sono definite", + "category": "Protective Technology (PR.PT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.PT_5_1", + "name": "ACN_B2_1_PR.PT_5_1", + "description": "In relazione ai piani previsti dalla sottocategoria PR.IP-9", + "category": "Protective Technology (PR.PT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.PT_5_2", + "name": "ACN_B2_1_PR.PT_5_2", + "description": "Esistono meccanismi per garantire la continuità di servizio, nel rispetto delle misure di sicurezza qui elencate.", + "category": "Protective Technology (PR.PT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PR.PT_5_3", + "name": "ACN_B2_1_PR.PT_5_3", + "description": "Sono definite", + "category": "Protective Technology (PR.PT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.AE_3_1", + "name": "ACN_B2_1_DE.AE_3_1", + "description": "Ai fini di rilevare tempestivamente incidenti con impatto sul servizio cloud, sono adottati gli strumenti tecnici e procedurali", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.AE_3_2", + "name": "ACN_B2_1_DE.AE_3_2", + "description": "Le attività di analisi e correlazione di cui al punto precedente sono monitorate e registrate. La relativa documentazione, anche elettronica, è conservata per almeno 24 mesi.", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.AE_3_3", + "name": "ACN_B2_1_DE.AE_3_3", + "description": "Sono definite", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.AE_3_4", + "name": "ACN_B2_1_DE.AE_3_4", + "description": "Sono presenti politiche e procedure di logging, monitoraggio, sicurezza e conservazione di registri di accesso, le quali dovranno essere aggiornate almeno su base annuale.", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.AE_3_5", + "name": "ACN_B2_1_DE.AE_3_5", + "description": "È adottato un sistema di auditing per il rilevamento di informazioni inerenti alla sicurezza, il monitoraggio degli accessi, modifiche o cancellazioni non autorizzate di dati o metadati", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.AE_3_6", + "name": "ACN_B2_1_DE.AE_3_6", + "description": "Sono definiti e valutati processi, procedure e misure tecniche per la segnalazione di anomalie e guasti del sistema di monitoraggio e in grado di fornire una notifica immediata al soggetto responsabile.", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.AE_3_7", + "name": "ACN_B2_1_DE.AE_3_7", + "description": "Nell'ambito delle attività di logging e monitoraggio, in relazione al servizio cloud sono forniti strumenti di gestione degli errori e logging che consentono all’Amministrazione di definire il periodo di custodia (retention) desiderato e di ottenere informazioni sullo stato di sicurezza del servizio cloud, nonché sui dati e le funzioni che fornisce. Le informazioni devono essere sufficientemente dettagliate da consentire la verifica dei seguenti aspetti, nella misura in cui sono applicabili al servizio cloud:", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.AE_3_8", + "name": "ACN_B2_1_DE.AE_3_8", + "description": "Per il servizio oggetto di qualificazione deve essere garantita la possibilità di integrare i log nel sistema SIEM di gestione e monitoraggio dell'Amministrazione e che i file di log siano facilmente esportabili dall'Amministrazione, preferibilmente tramite API.", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.CM_1_1", + "name": "ACN_B2_1_DE.CM_1_1", + "description": "Sono presenti sistemi di rilevamento delle intrusioni (Intrusion Detection Systems - IDS)", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.CM_1_2", + "name": "ACN_B2_1_DE.CM_1_2", + "description": "Sono presenti dei processi per il monitoraggio degli eventi relativi alla sicurezza delle applicazioni e dell'infrastruttura sottostante", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.CM_1_3", + "name": "ACN_B2_1_DE.CM_1_3", + "description": "È previsto un sistema di monitoraggio degli accessi al fine di rilevare attività sospette e stabilire un processo definito per l'adozione di azioni appropriate e tempestive in risposta alle anomalie rilevate", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.CM_4_1", + "name": "ACN_B2_1_DE.CM_4_1", + "description": "Sono implementati ed utilizzati appositi strumenti per la prevenzione e il rilevamento di malware, nonché sistemi di protezione delle postazioni terminali (Endpoint Protection Systems - EPS)", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.CM_4_2", + "name": "ACN_B2_1_DE.CM_4_2", + "description": "Sono presenti politiche di protezione anti-malware, le quali dovranno essere riviste almeno su base annuale", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.DP_1_1", + "name": "ACN_B2_1_DE.DP_1_1", + "description": "Le nomine di cui alla sottocategoria ID.AM-6 sono rese note all'interno del soggetto.", + "category": "Detection Processes (DE.DP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.DP_1_2", + "name": "ACN_B2_1_DE.DP_1_2", + "description": "I ruoli, i processi e le responsabilità per le attività propedeutiche al rilevamento di incidenti con impatto sul servizio cloud sono ben definiti e resi noti alle articolazioni competenti del soggetto.", + "category": "Detection Processes (DE.DP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.DP_1_3", + "name": "ACN_B2_1_DE.DP_1_3", + "description": "Esiste un documento aggiornato di dettaglio che indica almeno:", + "category": "Detection Processes (DE.DP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_DE.DP_1_4", + "name": "ACN_B2_1_DE.DP_1_4", + "description": "È definito ed implementato un sistema per la notifica all’Amministrazione degli eventi anomali che coinvolgono le applicazioni e l’infrastruttura sottostante, identificati sulla base di metriche previamente concordate PaaS, SaaS.", + "category": "Detection Processes (DE.DP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.RP_1_1", + "name": "ACN_B2_1_RS.RP_1_1", + "description": "Il piano di risposta prevede l'esecuzione tempestiva della valutazione degli eventi rilevati tramite l'analisi e la correlazione di cui alla categoria DE nonché la disseminazione immediata degli esiti verso le articolazioni competenti del soggetto, anche ai fini della notifica all’Amministrazione e, su base volontaria, al CSIRT Italia, degli incidenti con impatto sul servizio cloud.", + "category": "Response Planning (RS.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.CO_1_1", + "name": "ACN_B2_1_RS.CO_1_1", + "description": "I ruoli e le responsabilità per lo svolgimento delle fasi e dei processi di cui al punto 1 sono ben definiti e resi noti alle articolazioni competenti del soggetto.", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.CO_1_2", + "name": "ACN_B2_1_RS.CO_1_2", + "description": "Sono eseguite periodicamente esercitazioni.", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.CO_1_3", + "name": "ACN_B2_1_RS.CO_1_3", + "description": "Esiste un documento aggiornato di dettaglio che indica almeno:", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.CO_5_1", + "name": "ACN_B2_1_RS.CO_5_1", + "description": "Sono definiti e mantenuti contatti con gruppi di interesse legati al cloud e altre entità rilevanti e in linea con il contesto del soggetto.", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.CO_5_2", + "name": "ACN_B2_1_RS.CO_5_2", + "description": "Sono definiti e mantenuti punti di contatto con le autorità di regolamentazione applicabili, le forze dell'ordine nazionali e locali e altre autorità giurisdizionali legali.", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.AN_5_1", + "name": "ACN_B2_1_RS.AN_5_1", + "description": "Gli esiti delle valutazioni di cui alla sottocategoria DE.AE-3 e dei penetration test e vulnerability assessment di cui alla sottocategoria DE.CM-8, qualora disponibili, sono diffusi alle articolazioni competenti del soggetto.", + "category": "Analysis (RS.AN)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.AN_5_2", + "name": "ACN_B2_1_RS.AN_5_2", + "description": "I canali di comunicazione del CSIRT Italia di cui all'articolo 4 del decreto del Presidente del Consiglio dei ministri 8 agosto 2019, dell'Autorità di riferimento del proprio settore produttivo, nonché di eventuali CERT e Information Sharing & Analysis Centre (ISAC) di riferimento sono monitorati.", + "category": "Analysis (RS.AN)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RS.AN_5_3", + "name": "ACN_B2_1_RS.AN_5_3", + "description": "Esiste un documento aggiornato che descrive, almeno:", + "category": "Analysis (RS.AN)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_RC.RP_1_1", + "name": "ACN_B2_1_RC.RP_1_1", + "description": "Esiste un piano di ripristino che prevede, almeno, i processi e le procedure necessarie al ripristino del normale funzionamento dei servizi cloud coinvolti da un incidente di cybersecurity.", + "category": "Recovery Planning (RC.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_PS.SC_1_1", + "name": "ACN_B2_1_PS.SC_1_1", + "description": "Il soggetto comunica all’Amministrazione:", + "category": "Performance e scalabilità: Caratteristiche del servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_IP.PO_2_1", + "name": "ACN_B2_1_IP.PO_2_1", + "description": "Sono definite politiche e procedure per l'interoperabilità e la portabilità, le quali vengono riviste e aggiornate almeno su base annuale, compresi requisiti per:", + "category": "Interoperabilità e portabilità: PortabilitÃ" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_IP.PO_2_2", + "name": "ACN_B2_1_IP.PO_2_2", + "description": "Sono implementati protocolli di rete cifrati e standardizzati per la gestione, l'importazione e l'esportazione dei dati PaaS, SaaS", + "category": "Interoperabilità e portabilità: PortabilitÃ" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_IP.PO_2_3", + "name": "ACN_B2_1_IP.PO_2_3", + "description": "Sono incluse, all'interno degli accordi disposizioni che specifichino l'accesso dell’Amministrazione ai dati al termine del contratto, inclusi:", + "category": "Interoperabilità e portabilità: PortabilitÃ" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_B2.T1_01_1", + "name": "ACN_B2_1_B2.T1_01_1", + "description": "99.0%", + "category": "Indicatori minimi della qualità del Servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_B2.T1_02_1", + "name": "ACN_B2_1_B2.T1_02_1", + "description": "24x7", + "category": "Indicatori minimi della qualità del Servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_B2.T1_03_1", + "name": "ACN_B2_1_B2.T1_03_1", + "description": "<1h", + "category": "Indicatori minimi della qualità del Servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_B2.T1_04_1", + "name": "ACN_B2_1_B2.T1_04_1", + "description": "3 giorni", + "category": "Indicatori minimi della qualità del Servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_B2.T1_05_1", + "name": "ACN_B2_1_B2.T1_05_1", + "description": "1 mese", + "category": "Indicatori minimi della qualità del Servizio" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_1_B2.T1_06_1", + "name": "ACN_B2_1_B2.T1_06_1", + "description": "1", + "category": "Indicatori minimi della qualità del Servizio" + } + ], + "parameters": { + "minPort-1": { + "type": "Integer", + "metadata": { + "displayName": "Min host port", + "description": "The minimum value in the allowable host port range that pods can use in the host network namespace.", + "portalReview": true + }, + "defaultValue": 0 + }, + "operationName-2": { + "type": "String", + "metadata": { + "displayName": "Operation Name", + "description": "Policy Operation name for which activity log alert should exist" + }, + "allowedValues": [ + "Microsoft.Authorization/policyAssignments/write", + "Microsoft.Authorization/policyAssignments/delete" + ] + }, + "excludedContainers-1": { + "type": "Array", + "metadata": { + "displayName": "Containers exclusions", + "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces." + }, + "defaultValue": [] + }, + "fsGroupRanges-1": { + "type": "Object", + "metadata": { + "displayName": "Allowed file system group ID ranges", + "description": "The file system group ranges that are allowed for pods to use. Set 'max' as '-1' to skip max limit evaluation. Empty array blocks every defined value for 'MustRunAs' and 'MayRunAs'.", + "portalReview": true + }, + "defaultValue": { + "ranges": [] + }, + "schema": { + "type": "object", + "properties": { + "ranges": { + "type": "array", + "items": { + "type": "object", + "properties": { + "min": { + "type": "integer" + }, + "max": { + "type": "integer" + } + }, + "required": [ + "min", + "max" + ], + "additionalProperties": false + } + } }, - { - "name": "ACN-B2-1-QU.SE-2_2", - "displayName": "ACN-B2-1-QU.SE-2_2", - "description": "Qualità del servizio | [QU.SE-2] Viene fornito un adeguato servizio di assistenza e supporto | [2] Il servizio di supporto e assistenza di cui al punto 1 è fornito almeno in lingua italiana tutti i giorni dell’anno a qualsiasi orario (24/7/365)." + "required": [ + "ranges" + ], + "additionalProperties": false + } + }, + "MinimumTLSVersion-1": { + "type": "String", + "metadata": { + "displayName": "Minimum TLS version", + "description": "The minimum TLS protocol version that should be enabled. Windows machines with lower TLS versions will be marked as non-compliant." + }, + "allowedValues": [ + "1.1", + "1.2" + ], + "defaultValue": "1.2" + }, + "maxPort-1": { + "type": "Integer", + "metadata": { + "displayName": "Max host port", + "description": "The maximum value in the allowable host port range that pods can use in the host network namespace.", + "portalReview": true + }, + "defaultValue": 0 + }, + "runAsGroupRanges-1": { + "type": "Object", + "metadata": { + "displayName": "Allowed group ID ranges", + "description": "The group ID ranges that are allowed for containers to use. Set 'max' as '-1' to skip max limit evaluation. Empty array blocks every defined value for 'MustRunAs' and 'MayRunAs'.", + "portalReview": true + }, + "defaultValue": { + "ranges": [] + }, + "schema": { + "type": "object", + "properties": { + "ranges": { + "type": "array", + "items": { + "type": "object", + "properties": { + "min": { + "type": "integer" + }, + "max": { + "type": "integer" + } + }, + "required": [ + "min", + "max" + ], + "additionalProperties": false + } + } }, - { - "name": "ACN-B2-1-QU.SE-2_3", - "displayName": "ACN-B2-1-QU.SE-2_3", - "description": "Qualità del servizio | [QU.SE-2] Viene fornito un adeguato servizio di assistenza e supporto | [3] Il servizio di supporto e assistenza di cui al punto 1 è accessibile almeno tramite recapito telefonico e posta elettronica." + "required": [ + "ranges" + ], + "additionalProperties": false + } + }, + "excludedNamespaces-1": { + "type": "Array", + "metadata": { + "displayName": "Namespace exclusions", + "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove." + }, + "defaultValue": [ + "kube-system", + "gatekeeper-system", + "azure-arc", + "azure-extensions-usage-system" + ] + }, + "operationName-1": { + "type": "String", + "metadata": { + "displayName": "Operation Name", + "description": "Administrative Operation name for which activity log alert should be configured" + }, + "allowedValues": [ + "Microsoft.Sql/servers/firewallRules/write", + "Microsoft.Sql/servers/firewallRules/delete", + "Microsoft.Network/networkSecurityGroups/write", + "Microsoft.Network/networkSecurityGroups/delete", + "Microsoft.ClassicNetwork/networkSecurityGroups/write", + "Microsoft.ClassicNetwork/networkSecurityGroups/delete", + "Microsoft.Network/networkSecurityGroups/securityRules/write", + "Microsoft.Network/networkSecurityGroups/securityRules/delete", + "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write", + "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete" + ] + }, + "excludedImages-1": { + "type": "Array", + "metadata": { + "displayName": "Image exclusions", + "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.", + "portalReview": true + }, + "defaultValue": [] + }, + "runAsUserRanges-1": { + "type": "Object", + "metadata": { + "displayName": "Allowed user ID ranges", + "description": "The user ID ranges that are allowed for containers to use. Set 'max' as '-1' to skip max limit evaluation. Empty array blocks every defined value for 'MustRunAs'.", + "portalReview": true + }, + "defaultValue": { + "ranges": [] + }, + "schema": { + "type": "object", + "properties": { + "ranges": { + "type": "array", + "items": { + "type": "object", + "properties": { + "min": { + "type": "integer" + }, + "max": { + "type": "integer" + } + }, + "required": [ + "min", + "max" + ], + "additionalProperties": false + } + } }, - { - "name": "ACN-B2-1-QU.SE-2_4", - "displayName": "ACN-B2-1-QU.SE-2_4", - "description": "Qualità del servizio | [QU.SE-2] Viene fornito un adeguato servizio di assistenza e supporto | [4] Il servizio di supporto e assistenza di cui al punto 1 prevede, inoltre, un sistema di risoluzione dei problemi (troubleshooting) a disposizione dell’Amministrazione, garantendone anche l'esposizione tramite API per permettere l'interazione programmatica con i sistemi di gestione dei problemi (Case Management System)." + "required": [ + "ranges" + ], + "additionalProperties": false + } + }, + "source-1": { + "type": "String", + "metadata": { + "displayName": "Source", + "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones." + }, + "allowedValues": [ + "All", + "Generated", + "Original" + ], + "defaultValue": "Original" + }, + "allowedContainerImagesRegex-1": { + "type": "String", + "metadata": { + "displayName": "Allowed registry or registries regex", + "description": "The RegEx rule used to match allowed container image field in a Kubernetes cluster. For example, to allow any Azure Container Registry image by matching partial path: ^[^\\/]+\\.azurecr\\.io\\/.+$ and for multiple registries: ^([^\\/]+\\.azurecr\\.io|registry\\.io)\\/.+$", + "portalReview": true + } + }, + "labelSelector-1": { + "type": "Object", + "metadata": { + "displayName": "Kubernetes label selector", + "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources." + }, + "defaultValue": {}, + "schema": { + "description": "A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all resources.", + "type": "object", + "properties": { + "matchLabels": { + "description": "matchLabels is a map of {key,value} pairs.", + "type": "object", + "additionalProperties": { + "type": "string" + }, + "minProperties": 1 + }, + "matchExpressions": { + "description": "matchExpressions is a list of values, a key, and an operator.", + "type": "array", + "items": { + "type": "object", + "properties": { + "key": { + "description": "key is the label key that the selector applies to.", + "type": "string" + }, + "operator": { + "description": "operator represents a key's relationship to a set of values.", + "type": "string", + "enum": [ + "In", + "NotIn", + "Exists", + "DoesNotExist" + ] + }, + "values": { + "description": "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty.", + "type": "array", + "items": { + "type": "string" + } + } + }, + "required": [ + "key", + "operator" + ], + "additionalProperties": false + }, + "minItems": 1 + } }, - { - "name": "ACN-B2-1-QU.SE-4_1", - "displayName": "ACN-B2-1-QU.SE-4_1", - "description": "Qualità del servizio | [QU.SE-4] Linee guida e raccomandazioni sull'uso sicuro di soluzioni cloud | [1] Devono essere rese disponibili all'Amministrazione le linee guida per una gestione sicura del servizio cloud oggetto di qualificazione, indirizzando, ove applicabile, i seguenti aspetti:" + "additionalProperties": false + } + }, + "IncludeArcMachines-1": { + "type": "String", + "metadata": { + "displayName": "Include Arc connected servers", + "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.", + "portalReview": "true" + }, + "allowedValues": [ + "true", + "false" + ], + "defaultValue": "false" + }, + "supplementalGroupsRule-1": { + "type": "String", + "metadata": { + "displayName": "Supplemental group rule", + "description": "The 'SupplementalGroups' rule that containers are allowed to run with. MustRunAs requires at least one range to be specified. MayRunAs does not require that 'SupplementalGroups' be specified. RunAsAny allows any", + "portalReview": true + }, + "allowedValues": [ + "MustRunAs", + "MayRunAs", + "RunAsAny" + ], + "defaultValue": "RunAsAny" + }, + "runAsUserRule-1": { + "type": "String", + "metadata": { + "displayName": "Run as user rule", + "description": "The 'RunAsUser' rule that containers are allowed to run with. MustRunAs requires at least one range to be specified. MustRunAsNonRoot requires the pod be submitted with non-zero runAsUser or have USER directive defined (using a numeric UID) in the image. RunAsAny allows any runAsUser to be specified", + "portalReview": true + }, + "allowedValues": [ + "MustRunAs", + "MustRunAsNonRoot", + "RunAsAny" + ], + "defaultValue": "MustRunAsNonRoot" + }, + "NotAvailableMachineState-1": { + "type": "String", + "metadata": { + "displayName": "Status if Windows Defender is not available on machine", + "description": "Windows Defender Exploit Guard is only available starting with Windows 10/Windows Server with update 1709. Setting this value to 'Non-Compliant' shows machines with older versions on which Windows Defender Exploit Guard is not available (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' shows these machines as compliant." + }, + "allowedValues": [ + "Compliant", + "Non-Compliant" + ], + "defaultValue": "Compliant" + }, + "runAsGroupRule-1": { + "type": "String", + "metadata": { + "displayName": "Run as group rule", + "description": "The 'RunAsGroup' rule that containers are allowed to run with. MustRunAs requires at least one range to be specified. MayRunAs does not require that 'RunAsGroup' be specified. RunAsAny allows any", + "portalReview": true + }, + "allowedValues": [ + "MustRunAs", + "MayRunAs", + "RunAsAny" + ], + "defaultValue": "RunAsAny" + }, + "memoryLimit-1": { + "type": "String", + "metadata": { + "displayName": "Max allowed memory bytes", + "description": "The maximum memory bytes allowed for a container. E.g. 1Gi. For more information, please refer https://aka.ms/k8s-policy-pod-limits", + "portalReview": true + } + }, + "setting-1": { + "type": "String", + "metadata": { + "displayName": "Desired Auditing setting" + }, + "allowedValues": [ + "enabled", + "disabled" + ], + "defaultValue": "enabled" + }, + "fsGroupRule-1": { + "type": "String", + "metadata": { + "displayName": "File system group rule", + "description": "The 'FSGroup' rule that containers are allowed to run with. MustRunAs requires at least one range to be specified. MayRunAs does not require that 'FSGroup' be specified. RunAsAny allows any", + "portalReview": true + }, + "allowedValues": [ + "MustRunAs", + "MayRunAs", + "RunAsAny" + ], + "defaultValue": "RunAsAny" + }, + "allowHostNetwork-1": { + "type": "Boolean", + "metadata": { + "displayName": "Allow host network usage", + "description": "Set this value to true if pod is allowed to use host network otherwise false.", + "portalReview": true + }, + "defaultValue": false + }, + "namespaces-1": { + "type": "Array", + "metadata": { + "displayName": "Namespace inclusions", + "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces." + }, + "defaultValue": [] + }, + "requiredDropCapabilities-1": { + "type": "Array", + "metadata": { + "displayName": "Required drop capabilities", + "description": "The list of capabilities that must be dropped by a container.", + "portalReview": true + }, + "defaultValue": [] + }, + "allowedCapabilities-1": { + "type": "Array", + "metadata": { + "displayName": "Allowed capabilities", + "description": "The list of capabilities that are allowed to be added to a container. Provide empty list as input to block everything.", + "portalReview": true + }, + "defaultValue": [] + }, + "approvedExtensions-1": { + "type": "Array", + "metadata": { + "description": "The list of approved extension types that can be installed. Example: AzureDiskEncryption", + "displayName": "Approved extensions" + } + }, + "excludedKinds-1": { + "type": "Array", + "metadata": { + "displayName": "Excluded Kinds", + "description": "The list of excluded API kinds for customer-managed key, default is the list of API kinds that don't have data stored in Cognitive Services" + }, + "defaultValue": [ + "CognitiveServices", + "ContentSafety", + "ImmersiveReader", + "HealthInsights", + "LUIS.Authoring", + "LUIS", + "QnAMaker", + "QnAMaker.V2", + "AIServices", + "MetricsAdvisor", + "SpeechTranslation", + "Internal.AllInOne", + "ConversationalLanguageUnderstanding", + "knowledge", + "TranscriptionIntelligence", + "HealthDecisionSupport" + ] + }, + "cpuLimit-1": { + "type": "String", + "metadata": { + "displayName": "Max allowed CPU units", + "description": "The maximum CPU units allowed for a container. E.g. 200m. For more information, please refer https://aka.ms/k8s-policy-pod-limits", + "portalReview": true + } + }, + "maximumValidityInMonths-1": { + "type": "Integer", + "metadata": { + "displayName": "The maximum validity in months", + "description": "The limit to how long a certificate may be valid for. Certificates with lengthy validity periods aren't best practice." + }, + "defaultValue": 12 + }, + "allowedProfiles-1": { + "type": "Array", + "metadata": { + "displayName": "Allowed AppArmor profiles", + "description": "The list of AppArmor profiles that containers are allowed to use. E.g. [ \"runtime/default\", \"docker/default\" ]. Provide empty list as input to block everything.", + "portalReview": true + }, + "defaultValue": [ + "runtime/default" + ] + }, + "allowedHostPaths-1": { + "type": "Object", + "metadata": { + "displayName": "Allowed host paths", + "description": "The host paths allowed for pod hostPath volumes to use. Provide an empty paths list to block all host paths.", + "portalReview": true + }, + "defaultValue": { + "paths": [] + }, + "schema": { + "type": "object", + "properties": { + "paths": { + "type": "array", + "items": { + "type": "object", + "properties": { + "pathPrefix": { + "type": "string" + }, + "readOnly": { + "type": "boolean" + } + }, + "required": [ + "pathPrefix", + "readOnly" + ], + "additionalProperties": false + } + } }, - { - "name": "ACN-B2-1-QU.LS-4_1", - "displayName": "ACN-B2-1-QU.LS-4_1", - "description": "Livello del servizio (SLA) | [QU.LS-4] È disponibile un servizio di monitoraggio (allarmi e parametri) e sono rese note eventuali integrazioni native con soluzioni leader di mercato. | [1] Il soggetto rende disponibile all'Amministrazione l’accesso ad uno o più strumenti di monitoraggio per il servizio cloud. Essi devono consentire attività di raccolta, monitoraggio, filtraggio, creazione di report attraverso parametri predefiniti o parametrizzabili e consentire all‘Amministrazione di impostare allarmi personalizzati. La granularità massima delle operazioni non deve essere superiore al minuto (ad es., deve essere possibile filtrare o raccogliere gli eventi ogni minuto). In aggiunta, il soggetto specifica l'eventuale disponibilità di API e strumenti di monitoraggio di terze parti integrate nativamente con il servizio qualificato." + "required": [ + "paths" + ], + "additionalProperties": false + } + }, + "supplementalGroupsRanges-1": { + "type": "Object", + "metadata": { + "displayName": "Allowed supplemental group ID ranges", + "description": "The supplemental group ID ranges that are allowed for containers to use. Set 'max' as '-1' to skip max limit evaluation. Empty array blocks every defined value for 'MustRunAs' and 'MayRunAs'.", + "portalReview": true + }, + "defaultValue": { + "ranges": [] + }, + "schema": { + "type": "object", + "properties": { + "ranges": { + "type": "array", + "items": { + "type": "object", + "properties": { + "min": { + "type": "integer" + }, + "max": { + "type": "integer" + } + }, + "required": [ + "min", + "max" + ], + "additionalProperties": false + } + } }, - { - "name": "ACN-B2-1-ID.AM-1_1", - "displayName": "ACN-B2-1-ID.AM-1_1", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-1] Sono censiti i sistemi e gli apparati fisici in uso nell'organizzazione | [1] Tutti i sistemi e gli apparati fisici sono censiti ed esiste un elenco di quelli approvati da attori interni al soggetto." + "required": [ + "ranges" + ], + "additionalProperties": false + } + }, + "warn-1": { + "type": "Boolean", + "metadata": { + "displayName": "Warn", + "description": "Whether or not to return warnings back to the user in the kubectl cli" + }, + "defaultValue": false + }, + "allowedServicePortsList-1": { + "type": "Array", + "metadata": { + "displayName": "Allowed service ports list", + "description": "The list of service ports allowed in a Kubernetes cluster. Array only accepts strings. Example: [\"443\", \"80\"]", + "portalReview": true + } + }, + "requiredRetentionDays-1": { + "type": "String", + "metadata": { + "displayName": "Required retention (days)", + "description": "The required resource logs retention in days" + }, + "defaultValue": "365" + }, + "operationName-3": { + "type": "String", + "metadata": { + "displayName": "Operation Name", + "description": "Security Operation name for which activity log alert should exist" + }, + "allowedValues": [ + "Microsoft.Security/policies/write", + "Microsoft.Security/securitySolutions/write", + "Microsoft.Security/securitySolutions/delete" + ] + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1374 - Incident Response Assistance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_2_1", + "ACN_B2_1_QU.SE_2_2", + "ACN_B2_1_QU.SE_2_3", + "ACN_B2_1_QU.SE_2_4", + "ACN_B2_1_B2.T1_02_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1376 - Incident Response Assistance - Coordination With External Providers", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_2_1", + "ACN_B2_1_QU.SE_2_2", + "ACN_B2_1_QU.SE_2_3", + "ACN_B2_1_QU.SE_2_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1375 - Incident Response Assistance - Automation Support For Availability Of Information - Support", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_2_1", + "ACN_B2_1_QU.SE_2_2", + "ACN_B2_1_QU.SE_2_3", + "ACN_B2_1_QU.SE_2_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1001 - Access Control Policy And Procedures Requirements", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_4_1", + "ACN_B2_1_ID.GV_1_1", + "ACN_B2_1_ID.GV_1_2", + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1615 - System And Communications Protection Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_4_1", + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2", + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1174 - Configuration Management Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_4_1", + "ACN_B2_1_PR.IP_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1666 - System And Information Integrity Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_4_1", + "ACN_B2_1_PR.DS_6_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e" + }, + { + "groupNames": [ + "ACN_B2_1_QU.SE_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65", + "policyDefinitionReferenceId": "Microsoft Managed Control 1101 - Audit And Accountability Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1100 - Audit And Accountability Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_4_1", + "ACN_B2_1_PR.AC_3_4", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1298 - Identification And Authentication Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_4_1", + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_1_6", + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1667 - System And Information Integrity Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_4_1", + "ACN_B2_1_PR.DS_6_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1000 - Access Control Policy And Procedures Requirements", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.SE_4_1", + "ACN_B2_1_ID.GV_1_1", + "ACN_B2_1_ID.GV_1_2", + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5", + "ACN_B2_1_PR.AT_2_1", + "ACN_B2_1_PR.AT_2_2", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406" + }, + { + "groupNames": [ + "ACN_B2_1_QU.SE_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c", + "policyDefinitionReferenceId": "Microsoft Managed Control 1175 - Configuration Management Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Defender for Containers should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38" + }, + { + "policyDefinitionReferenceId": "Resource logs in Event Hub should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a" + }, + { + "policyDefinitionReferenceId": "Azure Defender for SQL should be enabled for unprotected Azure SQL servers", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9" + }, + { + "policyDefinitionReferenceId": "An activity log alert should exist for specific Administrative operations", + "parameters": { + "operationName": { + "value": "[parameters('operationName-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a" + }, + { + "policyDefinitionReferenceId": "Develop an incident response plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_RS.RP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b4e134f-1e4c-2bff-573e-082d85479b6e" + }, + { + "policyDefinitionReferenceId": "Resource logs in Batch accounts should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d" + }, + { + "policyDefinitionReferenceId": "Resource logs in Azure Stream Analytics should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46" + }, + { + "policyDefinitionReferenceId": "Resource logs in Search services should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4" + }, + { + "policyDefinitionReferenceId": "[Preview]: Network traffic data collection agent should be installed on Windows virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "1.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d" + }, + { + "policyDefinitionReferenceId": "[Preview]: Azure Arc enabled Kubernetes clusters should have Microsoft Defender for Cloud extension installed", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1" + ], + "definitionVersion": "6.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f" + }, + { + "policyDefinitionReferenceId": "Azure Defender for App Service should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb" + }, + { + "policyDefinitionReferenceId": "Azure Defender for Key Vault should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047" + }, + { + "policyDefinitionReferenceId": "Resource logs in Logic Apps should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d" + }, + { + "policyDefinitionReferenceId": "Azure Defender for servers should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d" + }, + { + "policyDefinitionReferenceId": "Resource logs in Azure Kubernetes Service should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c" + }, + { + "policyDefinitionReferenceId": "Resource logs in Service Bus should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45" + }, + { + "policyDefinitionReferenceId": "Azure Defender for open-source relational databases should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835" + }, + { + "policyDefinitionReferenceId": "Resource logs in Data Lake Analytics should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c" + }, + { + "policyDefinitionReferenceId": "Azure Defender for SQL should be enabled for unprotected SQL Managed Instances", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9" + }, + { + "policyDefinitionReferenceId": "Alert personnel of information spillage", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9622aaa9-5c49-40e2-5bf8-660b7cd23deb" + }, + { + "policyDefinitionReferenceId": "Resource logs in Key Vault should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21" + }, + { + "policyDefinitionReferenceId": "An activity log alert should exist for specific Policy operations", + "parameters": { + "operationName": { + "value": "[parameters('operationName-2')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858" + }, + { + "groupNames": [ + "ACN_B2_1_QU.LS_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f26af0b1-65b6-689a-a03f-352ad2d00f98", + "policyDefinitionReferenceId": "Audit privileged functions", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Azure Defender for Resource Manager should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99" + }, + { + "policyDefinitionReferenceId": "[Preview]: Network traffic data collection agent should be installed on Linux virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "1.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602" + }, + { + "policyDefinitionReferenceId": "An activity log alert should exist for specific Security operations", + "parameters": { + "operationName": { + "value": "[parameters('operationName-3')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052" + }, + { + "policyDefinitionReferenceId": "Windows Defender Exploit Guard should be enabled on your machines", + "parameters": { + "IncludeArcMachines": { + "value": "[parameters('IncludeArcMachines-1')]" + }, + "NotAvailableMachineState": { + "value": "[parameters('NotAvailableMachineState-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40" + }, + { + "groupNames": [ + "ACN_B2_1_QU.LS_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7b28ba4f-0a87-46ac-62e1-46b7c09202a8", + "policyDefinitionReferenceId": "Monitor account activity", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Resource logs in IoT Hub should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4" + }, + { + "policyDefinitionReferenceId": "App Service apps should have resource logs enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510" + }, + { + "policyDefinitionReferenceId": "Resource logs in Azure Data Lake Store should be enabled", + "parameters": { + "requiredRetentionDays": { + "value": "[parameters('requiredRetentionDays-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb" + }, + { + "policyDefinitionReferenceId": "Azure Kubernetes Service clusters should have Defender profile enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01" + }, + { + "policyDefinitionReferenceId": "Azure Defender for SQL servers on machines should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b" + }, + { + "policyDefinitionReferenceId": "Auditing on SQL server should be enabled", + "parameters": { + "setting": { + "value": "[parameters('setting-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9" + }, + { + "policyDefinitionReferenceId": "Azure Defender for Azure SQL Database servers should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_QU.LS_4_1", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.DP_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1455 - Physical Access Control", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_1_1", + "ACN_B2_1_ID.AM_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1456 - Physical Access Control", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_1_1", + "ACN_B2_1_ID.AM_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1489 - Location Of Information System Components", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_1_1", + "ACN_B2_1_ID.AM_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1397 - Controlled Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_1_1", + "ACN_B2_1_ID.AM_1_2", + "ACN_B2_1_PR.MA_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1458 - Physical Access Control - Information System Access", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_1_1", + "ACN_B2_1_ID.AM_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1451 - Physical Access Control", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_1_1", + "ACN_B2_1_ID.AM_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1398 - Controlled Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_1_1", + "ACN_B2_1_ID.AM_1_2", + "ACN_B2_1_PR.MA_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1445 - Physical And Environmental Protection Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_1_1", + "ACN_B2_1_ID.AM_1_2", + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1238 - User-Installed Software", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1220 - Least Functionality - Authorized Software - Whitelisting", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2", + "ACN_B2_1_ID.AM_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1218 - Least Functionality - Prevent Program Execution", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2", + "ACN_B2_1_ID.AM_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1219 - Least Functionality - Authorized Software - Whitelisting", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2", + "ACN_B2_1_ID.AM_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7" + }, + { + "policyDefinitionReferenceId": "[Preview]: Secure Boot should be enabled on supported Windows virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "4.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster pods and containers should only run with approved user and group IDs", + "parameters": { + "excludedImages": { + "value": "[parameters('excludedImages-1')]" }, - { - "name": "ACN-B2-1-ID.AM-1_2", - "displayName": "ACN-B2-1-ID.AM-1_2", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-1] Sono censiti i sistemi e gli apparati fisici in uso nell'organizzazione | [2] Tutti i sistemi e gli apparati fisici presenti sulle reti sono censiti e l'accesso alla rete è consentito esclusivamente a quelli approvati." + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-ID.AM-2_1", - "displayName": "ACN-B2-1-ID.AM-2_1", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-2] Sono censite le piattaforme e le applicazioni software in uso nell'organizzazione | [1] Tutte le piattaforme e le applicazioni software installate sono censite ed esiste un elenco di quelle approvate da attori interni al soggetto." + "fsGroupRule": { + "value": "[parameters('fsGroupRule-1')]" }, - { - "name": "ACN-B2-1-ID.AM-2_2", - "displayName": "ACN-B2-1-ID.AM-2_2", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-2] Sono censite le piattaforme e le applicazioni software in uso nell'organizzazione | [2] L'installazione delle piattaforme e delle applicazioni software è consentito esclusivamente per quelle approvate." + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-ID.AM-2_3", - "displayName": "ACN-B2-1-ID.AM-2_3", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-2] Sono censite le piattaforme e le applicazioni software in uso nell'organizzazione | [3] Esistono politiche che limitino l'aggiunta, rimozione o aggiornamento, nonché la gestione non autorizzata degli asset dell'organizzazione." + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-ID.AM-3_1", - "displayName": "ACN-B2-1-ID.AM-3_1", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-3] I flussi di dati e comunicazioni inerenti all’organizzazione sono identificati | [1] Tutti i flussi informativi, inclusi quelli verso l'esterno e relativi al servizio cloud, sono identificati e approvati da attori interni al soggetto." + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-ID.AM-6_1", - "displayName": "ACN-B2-1-ID.AM-6_1", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-6] Sono definiti e resi noti ruoli e responsabilità inerenti la cybersecurity per tutto il personale e per eventuali terze parti rilevanti (es. fornitori, clienti, partner) | [1] È definita e resa nota alle articolazioni competenti del soggetto l'organizzazione di cybersecurity, anche con riferimento ai ruoli e alle responsabilità, per tutto il personale e per eventuali terze parti." + "supplementalGroupsRanges": { + "value": "[parameters('supplementalGroupsRanges-1')]" }, - { - "name": "ACN-B2-1-ID.AM-6_2", - "displayName": "ACN-B2-1-ID.AM-6_2", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-6] Sono definiti e resi noti ruoli e responsabilità inerenti la cybersecurity per tutto il personale e per eventuali terze parti rilevanti (es. fornitori, clienti, partner) | [2] È nominato, nell'ambito dell'articolazione di cui al punto 1, un incaricato, e un eventuale sostituto, con il compito di gestire l'attuazione delle disposizioni del Regolamento in possesso di specifiche professionalità e competenze nella materia della sicurezza cibernetica, che riferisce direttamente al vertice gerarchico del soggetto ed assicura l'efficace implementazione delle misure di sicurezza di cui al presente Allegato." + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-ID.AM-6_3", - "displayName": "ACN-B2-1-ID.AM-6_3", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-6] Sono definiti e resi noti ruoli e responsabilità inerenti la cybersecurity per tutto il personale e per eventuali terze parti rilevanti (es. fornitori, clienti, partner) | [3] Sono nominati, nell'ambito dell'articolazione di cui al punto 1, un referente tecnico, e almeno un suo sostituto, in possesso di competenze tecnico-specialistiche nella materia della sicurezza cibernetica, per lo svolgimento delle funzioni di interlocuzione con il CSIRT Italia ai fini della gestione degli incidenti aventi impatto sul servizio cloud." + "supplementalGroupsRule": { + "value": "[parameters('supplementalGroupsRule-1')]" }, - { - "name": "ACN-B2-1-ID.AM-6_4", - "displayName": "ACN-B2-1-ID.AM-6_4", - "description": "Asset Management (ID.AM): I dati, il personale, i dispositivi e i sistemi e le facilities necessari all'organizzazione sono identificati e gestiti in coerenza con gli obiettivi e con la strategia di rischio dell'organizzazione | [ID.AM-6] Sono definiti e resi noti ruoli e responsabilità inerenti la cybersecurity per tutto il personale e per eventuali terze parti rilevanti (es. fornitori, clienti, partner) | [4] L'incaricato di cui al punto 2 e il referente tecnico di cui al punto 3 operano in stretto raccordo." + "runAsUserRule": { + "value": "[parameters('runAsUserRule-1')]" }, - { - "name": "ACN-B2-1-ID.GV-1_1", - "displayName": "ACN-B2-1-ID.GV-1_1", - "description": "Governance (ID.GV): Le politiche, le procedure e i processi per gestire e monitorare i requisiti dell'organizzazione (organizzativi, legali, relativi al rischio, ambientali) sono compresi e utilizzati nella gestione del rischio di cybersecurity | [ID.GV-1] È identificata e resa nota una policy di cybersecurity | [1] Esiste un documento aggiornato che descrive le politiche, i processi e le procedure di cybersecurity." + "runAsUserRanges": { + "value": "[parameters('runAsUserRanges-1')]" }, - { - "name": "ACN-B2-1-ID.GV-1_2", - "displayName": "ACN-B2-1-ID.GV-1_2", - "description": "Governance (ID.GV): Le politiche, le procedure e i processi per gestire e monitorare i requisiti dell'organizzazione (organizzativi, legali, relativi al rischio, ambientali) sono compresi e utilizzati nella gestione del rischio di cybersecurity | [ID.GV-1] È identificata e resa nota una policy di cybersecurity | [2] Il Documento di cui al punto 1 deve essere approvato dal soggetto e aggiornato almeno su base annuale o in corrispondenza di sostanziali variazioni all'interno dell'organizzazione." + "runAsGroupRanges": { + "value": "[parameters('runAsGroupRanges-1')]" }, - { - "name": "ACN-B2-1-ID.GV-4_1", - "displayName": "ACN-B2-1-ID.GV-4_1", - "description": "Governance (ID.GV): Le politiche, le procedure e i processi per gestire e monitorare i requisiti dell'organizzazione (organizzativi, legali, relativi al rischio, ambientali) sono compresi e utilizzati nella gestione del rischio di cybersecurity | [ID.GV-4] La governance ed i processi di risk management includono la gestione dei rischi legati alla cybersecurity | [1] Il documento aggiornato che descrive i processi di gestione del rischio include la parte relativa ai rischi legati alla cybersecurity." + "fsGroupRanges": { + "value": "[parameters('fsGroupRanges-1')]" }, - { - "name": "ACN-B2-1-ID.GV-4_2", - "displayName": "ACN-B2-1-ID.GV-4_2", - "description": "Governance (ID.GV): Le politiche, le procedure e i processi per gestire e monitorare i requisiti dell'organizzazione (organizzativi, legali, relativi al rischio, ambientali) sono compresi e utilizzati nella gestione del rischio di cybersecurity | [ID.GV-4] La governance ed i processi di risk management includono la gestione dei rischi legati alla cybersecurity | [2] Esiste un programma formale di Enterprise Risk Management (ERM) che include politiche e procedure per l'identificazione, la valutazione, la proprietà, il trattamento e l'accettazione dei rischi di sicurezza e privacy del cloud." + "runAsGroupRule": { + "value": "[parameters('runAsGroupRule-1')]" }, - { - "name": "ACN-B2-1-ID.RA-1_1", - "displayName": "ACN-B2-1-ID.RA-1_1", - "description": "Risk Assessment (ID.RA): L'impresa comprende il rischio di cybersecurity inerente all'operatività dell'organizzazione (incluse la mission, le funzioni, l'immagine o la reputazione), gli asset e gli individui. | [ID.RA-1] Le vulnerabilità delle risorse (es. sistemi, locali, dispositivi) dell'organizzazione sono identificate e documentate | [1] Esiste un piano aggiornato di verifica e test di sicurezza che descrive l'insieme delle attività finalizzate alla valutazione del livello di sicurezza cibernetica dell’Infrastruttura digitale e dell'efficacia delle misure di sicurezza tecniche e procedurali che contiene, inoltre, la periodicità e le modalità di esecuzione." - }, - { - "name": "ACN-B2-1-ID.RA-1_2", - "displayName": "ACN-B2-1-ID.RA-1_2", - "description": "Risk Assessment (ID.RA): L'impresa comprende il rischio di cybersecurity inerente all'operatività dell'organizzazione (incluse la mission, le funzioni, l'immagine o la reputazione), gli asset e gli individui. | [ID.RA-1] Le vulnerabilità delle risorse (es. sistemi, locali, dispositivi) dell'organizzazione sono identificate e documentate | [2] Esistono procedure, da aggiornare almeno su base annuale, per la gestione dei rischi associati a variazioni nell'ambito di asset organizzativi, ivi incluse applicazioni, sistemi, infrastrutture, configurazioni, ecc., indipendentemente dal fatto che gli asset siano gestiti internamente o esternamente (cioè in outsourcing)." - }, - { - "name": "ACN-B2-1-ID.RA-5_1", - "displayName": "ACN-B2-1-ID.RA-5_1", - "description": "Risk Assessment (ID.RA): L'impresa comprende il rischio di cybersecurity inerente all'operatività dell'organizzazione (incluse la mission, le funzioni, l'immagine o la reputazione), gli asset e gli individui. | [ID.RA-5] Le minacce, le vulnerabilità, le relative probabilità di accadimento e conseguenti impatti sono utilizzati per determinare il rischio | [1] L'analisi del rischio è svolta in funzione delle minacce, delle vulnerabilità, delle relative probabilità di accadimento e dei conseguenti impatti derivanti dal loro sfruttamento alla luce delle minacce considerate." - }, - { - "name": "ACN-B2-1-ID.RA-5_2", - "displayName": "ACN-B2-1-ID.RA-5_2", - "description": "Risk Assessment (ID.RA): L'impresa comprende il rischio di cybersecurity inerente all'operatività dell'organizzazione (incluse la mission, le funzioni, l'immagine o la reputazione), gli asset e gli individui. | [ID.RA-5] Le minacce, le vulnerabilità, le relative probabilità di accadimento e conseguenti impatti sono utilizzati per determinare il rischio | [2] L’analisi del rischio tiene conto delle dipendenze interne ed esterne dell’Infrastruttura digitale." - }, - { - "name": "ACN-B2-1-ID.RA-5_3", - "displayName": "ACN-B2-1-ID.RA-5_3", - "description": "Risk Assessment (ID.RA): L'impresa comprende il rischio di cybersecurity inerente all'operatività dell'organizzazione (incluse la mission, le funzioni, l'immagine o la reputazione), gli asset e gli individui. | [ID.RA-5] Le minacce, le vulnerabilità, le relative probabilità di accadimento e conseguenti impatti sono utilizzati per determinare il rischio | [3] Dopo aver identificato tutti i fattori di rischio e averli analizzati viene effettuata una ponderazione per determinare il livello di rischio." - }, - { - "name": "ACN-B2-1-ID.SC-1_1", - "displayName": "ACN-B2-1-ID.SC-1_1", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-1] I processi di gestione del rischio inerenti la catena di approvvigionamento cyber sono identificati, ben definiti, validati, gestiti e approvati da attori interni all'organizzazione | [1] Esiste un documento aggiornato di dettaglio che descrive i processi di gestione del rischio inerente la catena di approvvigionamento cyber" - }, - { - "name": "ACN-B2-1-ID.SC-1_2", - "displayName": "ACN-B2-1-ID.SC-1_2", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-1] I processi di gestione del rischio inerenti la catena di approvvigionamento cyber sono identificati, ben definiti, validati, gestiti e approvati da attori interni all'organizzazione | [2] Tali processi sono validati e approvati da parte dei vertici del soggetto" - }, - { - "name": "ACN-B2-1-PR.AC-1_1", - "displayName": "ACN-B2-1-PR.AC-1_1", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-1] Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [1] Le credenziali di accesso sono individuali per il personale del soggetto e rispettano il principio di segregazione delle funzioni. Le credenziali sono aggiornate con una cadenza proporzionata ai privilegi dell'utenza." - }, - { - "name": "ACN-B2-1-PR.AC-1_2", - "displayName": "ACN-B2-1-PR.AC-1_2", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-1] Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [2] Esistono politiche e procedure per la gestione delle credenziali di cui al punto 1, le quali dovranno essere aggiornate almeno su base annuale e rese disponibili, per la consultazione, all’Amministrazione." - }, - { - "name": "ACN-B2-1-PR.AC-1_3", - "displayName": "ACN-B2-1-PR.AC-1_3", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-1] Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [3] Sono definiti meccanismi di gestione, memorizzazione e revisione delle informazioni in materia di credenziali, identità di sistema e livello di accesso." - }, - { - "name": "ACN-B2-1-PR.AC-1_4", - "displayName": "ACN-B2-1-PR.AC-1_4", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-1] Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [4] Le credenziali sono aggiornate tempestivamente e senza ingiustificato ritardo qualora vi siano variazioni dell’utenza (es., trasferimento di personale)." - }, - { - "name": "ACN-B2-1-PR.AC-1_5", - "displayName": "ACN-B2-1-PR.AC-1_5", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-1] Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [5] Le identità di sistema sono gestite impiegando certificati digitali o tecniche alternative che assicurano un livello equivalente di sicurezza." - }, - { - "name": "ACN-B2-1-PR.AC-1_6", - "displayName": "ACN-B2-1-PR.AC-1_6", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-1] Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [6] Esiste una pianificazione aggiornata degli audit di sicurezza delle identità digitali previsti e un registro degli audit effettuati con la relativa documentazione." - }, - { - "name": "ACN-B2-1-PR.AC-3_1", - "displayName": "ACN-B2-1-PR.AC-3_1", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-3] L'accesso remoto alle risorse è amministrato | [1] Gli accessi da remoto effettuati sono monitorati da parte dell'organizzazione di cybersecurity." - }, - { - "name": "ACN-B2-1-PR.AC-3_2", - "displayName": "ACN-B2-1-PR.AC-3_2", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-3] L'accesso remoto alle risorse è amministrato | [2] Fatti salvi documentati limiti tecnici, sono implementate adeguate misure di controllo dell'accesso, adottando sistemi di autenticazione, autorizzazione e registrazione/contabilizzazione centralizzati degli accessi, coadiuvati da sistemi di autenticazione, la cui sicurezza è proporzionale al rischio." - }, - { - "name": "ACN-B2-1-PR.AC-3_3", - "displayName": "ACN-B2-1-PR.AC-3_3", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-3] L'accesso remoto alle risorse è amministrato | [3] È definito e implementato un modello di gestione degli accessi centralizzato volto ai processi di autorizzazione, logging e comunicazione degli accessi alle risorse e ai dati dell’Amministrazione." - }, - { - "name": "ACN-B2-1-PR.AC-3_4", - "displayName": "ACN-B2-1-PR.AC-3_4", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-3] L'accesso remoto alle risorse è amministrato | [4] Esiste un log degli accessi eseguiti da remoto." + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "6.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042" + }, + { + "policyDefinitionReferenceId": "Azure Arc enabled Kubernetes clusters should have the Azure Policy extension installed", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b2122c1-8120-4ff5-801b-17625a355590" + }, + { + "policyDefinitionReferenceId": "[Preview]: Guest Attestation extension should be installed on supported Linux virtual machines scale sets", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "5.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster containers should only use allowed capabilities", + "parameters": { + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-PR.AC-4_1", - "displayName": "ACN-B2-1-PR.AC-4_1", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-4] I diritti di accesso alle risorse e le relative autorizzazioni sono amministrati secondo il principio del privilegio minimo e della separazione delle funzioni | [1] Sono definite, con riferimento ai censimenti di cui alla categoria ID.AM, almeno:" + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-PR.AC-4_2", - "displayName": "ACN-B2-1-PR.AC-4_2", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-4] I diritti di accesso alle risorse e le relative autorizzazioni sono amministrati secondo il principio del privilegio minimo e della separazione delle funzioni | [2] Nell'ambito di implementazione dell'accesso al sistema informativo, vengono osservati principi di separazione delle funzioni e del privilegio minimo in relazione al rischio organizzativo." + "allowedCapabilities": { + "value": "[parameters('allowedCapabilities-1')]" }, - { - "name": "ACN-B2-1-PR.AC-4_3", - "displayName": "ACN-B2-1-PR.AC-4_3", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-4] I diritti di accesso alle risorse e le relative autorizzazioni sono amministrati secondo il principio del privilegio minimo e della separazione delle funzioni | [3] Sono definite e implementate politiche e procedure, misure tecniche per la segregazione dei ruoli di accesso privilegiato in modo che l'accesso amministrativo ai dati, le capacità di crittografia e gestione delle chiavi e le capacità di registrazione siano distinte e separate." + "requiredDropCapabilities": { + "value": "[parameters('requiredDropCapabilities-1')]" }, - { - "name": "ACN-B2-1-PR.AC-5_1", - "displayName": "ACN-B2-1-PR.AC-5_1", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-5] L'integrità di rete è protetta (es. segregazione di rete, segmentazione di rete) | [1] Sono presenti politiche e procedure per la sicurezza dell'infrastruttura di rete, le quali dovranno essere aggiornate almeno su base annuale." + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.AC-5_2", - "displayName": "ACN-B2-1-PR.AC-5_2", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-5] L'integrità di rete è protetta (es. segregazione di rete, segmentazione di rete) | [2] È definito un piano per il monitoraggio della disponibilità, qualità e l'adeguata capacità delle risorse al fine di fornire le prestazioni di sistema richieste." + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-PR.AC-7_1", - "displayName": "ACN-B2-1-PR.AC-7_1", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-7] Le modalità di autenticazione (es. autenticazione a fattore singolo o multiplo) per gli utenti del soggetto, i dispositivi e altri asset sono commisurate al rischio della transazione (es. rischi legati alla sicurezza e privacy degli individui e altri rischi dell'organizzazione) | [1] Sono definite e implementate politiche e procedure per l'accesso ai sistemi, alle applicazioni e ai dati, compresa l'autenticazione multifattoriale almeno per gli utenti privilegiati e l'accesso a dati." + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-PR.AC-7_2", - "displayName": "ACN-B2-1-PR.AC-7_2", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-7] Le modalità di autenticazione (es. autenticazione a fattore singolo o multiplo) per gli utenti del soggetto, i dispositivi e altri asset sono commisurate al rischio della transazione (es. rischi legati alla sicurezza e privacy degli individui e altri rischi dell'organizzazione) | [2] In relazione al servizio cloud, deve essere garantita all’Amministrazione la funzionalità di autenticazione a più fattori o l'uso di soluzioni di autenticazione a più fattori di terze parti. Devono essere rese disponibili informazioni trasparenti in merito alle funzionalità di autenticazione a più fattori accessibili all'Agenzia per la Cybersicurezza Nazionale (ACN) e all’Amministrazione, con specifiche sui meccanismi adoperati per l'autenticazione (es. e-mail, sms o check biometrico)." + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-PR.AT-1_1", - "displayName": "ACN-B2-1-PR.AT-1_1", - "description": "Awareness and Training (PR.AT): Il personale e le terze parti sono sensibilizzate in materia di cybersecurity e vengono addestrate per adempiere ai loro compiti e ruoli coerentemente con le politiche, le procedure e gli accordi esistenti | [PR.AT-1] Il personale del soggetto è informato e addestrato | [1] Esiste un documento aggiornato di dettaglio che indica i contenuti dell'addestramento e della formazione fornita al personale del soggetto e le modalità di verifica dell'acquisizione dei contenuti." + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "6.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c" + }, + { + "policyDefinitionReferenceId": "Function apps should have remote debugging turned off", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster pod hostPath volumes should only use allowed host paths", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-PR.AT-1_2", - "displayName": "ACN-B2-1-PR.AT-1_2", - "description": "Awareness and Training (PR.AT): Il personale e le terze parti sono sensibilizzate in materia di cybersecurity e vengono addestrate per adempiere ai loro compiti e ruoli coerentemente con le politiche, le procedure e gli accordi esistenti | [PR.AT-1] Il personale del soggetto è informato e addestrato | [2] L’addestramento e la formazione di cui al punto 1 fornita agli utenti del soggetto, in relazione ai ruoli, prevede, almeno, le seguenti tematiche:\n\na. la tutela della confidenzialità di dati in chiaro o cifrati.\nb. la restituzione dei beni di natura aziendale al termine del rapporto di lavoro\nd. la definizione di ruoli e delle responsabilità\ne. politiche di accesso a sistemi, asset e risorse\nf. politiche di gestione delle informazioni e della sicurezza\ng. processi di comunicazione di ruoli e responsabilità ai dipendenti che hanno accesso ad asset informativi\nh. requisiti per la non divulgazione/confidenzialità di informazioni" + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-PR.AT-2_1", - "displayName": "ACN-B2-1-PR.AT-2_1", - "description": "Awareness and Training (PR.AT): Il personale e le terze parti sono sensibilizzate in materia di cybersecurity e vengono addestrate per adempiere ai loro compiti e ruoli coerentemente con le politiche, le procedure e gli accordi esistenti | [PR.AT-2] Gli utenti con privilegi (es. Amministratori di Sistema) comprendono i loro ruoli e responsabilità | [1] Sono definiti i contenuti dell'istruzione fornita al personale del soggetto con privilegi e le modalità di verifica dell'acquisizione dei contenuti." + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.AT-2_2", - "displayName": "ACN-B2-1-PR.AT-2_2", - "description": "Awareness and Training (PR.AT): Il personale e le terze parti sono sensibilizzate in materia di cybersecurity e vengono addestrate per adempiere ai loro compiti e ruoli coerentemente con le politiche, le procedure e gli accordi esistenti | [PR.AT-2] Gli utenti con privilegi (es. Amministratori di Sistema) comprendono i loro ruoli e responsabilità | [2] Sono definiti, per ogni membro del personale del soggetto, i privilegi e le istruzioni ricevute." + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-PR.DS-1_1", - "displayName": "ACN-B2-1-PR.DS-1_1", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-1] I dati memorizzati sono protetti | [1] Sono definite, anche in relazione alla categoria ID.AM, almeno" + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-PR.DS-1_2", - "displayName": "ACN-B2-1-PR.DS-1_2", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-1] I dati memorizzati sono protetti | [2] Con riferimento alle infrastrutture impiegate per l’erogazione del servizio cloud al trattamento dei dati e dei servizi dell’Amministrazione, fermo restando quanto previsto dall'allegato B al Regolamento, requisito SC-SI-PR.DS-1-01, qualora sussistano motivate e documentate limitazioni di carattere tecnico, eventuali metadati necessari per l’erogazione del servizio cloud possono essere trattati mediante l’impiego di infrastrutture fisiche e tecnologiche localizzate al di fuori del territorio dell’Unione europea. In tal caso, i citati metadati non possono contenere, anche in parte, i dati dell’Amministrazione." + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-PR.DS-1_3", - "displayName": "ACN-B2-1-PR.DS-1_3", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-1] I dati memorizzati sono protetti | [3] Con riferimento all’accesso ai dati da parte di entità extra-UE, il soggetto" + "allowedHostPaths": { + "value": "[parameters('allowedHostPaths-1')]" }, - { - "name": "ACN-B2-1-PR.DS-1_4", - "displayName": "ACN-B2-1-PR.DS-1_4", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-1] I dati memorizzati sono protetti | [4] Il soggetto garantisce autonomia all’Amministrazione nella gestione delle proprie chiavi crittografiche e, in particolare" + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "6.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75" + }, + { + "policyDefinitionReferenceId": "Kubernetes clusters should not allow container privilege escalation", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-PR.DS-1_5", - "displayName": "ACN-B2-1-PR.DS-1_5", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-1] I dati memorizzati sono protetti | [5] Sono presenti processi, procedure e misure tecniche per revocare e rimuovere le chiavi crittografiche prima della fine del loro periodo di validità, quando una chiave è compromessa, o un'entità non fa più parte dell'organizzazione, conformemente a requisiti legali e normativi" + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-PR.DS-1_6", - "displayName": "ACN-B2-1-PR.DS-1_6", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-1] I dati memorizzati sono protetti | [6] Sono definiti e implementati processi, procedure e misure per la creazione, disattivazione di chiavi al momento della scadenza, eventuali sospensioni e meccanismi di gestione per le chiavi d'accesso a repository" + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.DS-2_1", - "displayName": "ACN-B2-1-PR.DS-2_1", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-2] I dati sono protetti durante la trasmissione | [1] Sono utilizzati canali di comunicazione sicuri e criptati durante la migrazione di server, servizi, applicazioni o dati in ambienti cloud. Tali canali devono includere solo protocolli aggiornati e approvati." + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-PR.DS-3_1", - "displayName": "ACN-B2-1-PR.DS-3_1", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-3] Il trasferimento fisico, la rimozione e la distruzione dei dispositivi atti alla memorizzazione di dati sono gestiti attraverso un processo formale | [1] Sono definite in relazione alla categoria ID.AM" + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-PR.DS-5_1", - "displayName": "ACN-B2-1-PR.DS-5_1", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-5] Sono implementate tecniche di protezione (es. controllo di accesso) contro la sottrazione dei dati (data leak) | [1] Sono definite in relazione alla categoria ID.AM, almeno" + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-PR.DS-5_2", - "displayName": "ACN-B2-1-PR.DS-5_2", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-5] Sono implementate tecniche di protezione (es. controllo di accesso) contro la sottrazione dei dati (data leak) | [2] Sono adottate politiche di Data Loss Prevention coerentemente con la valutazione dei rischi" + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "7.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster containers should not share host process ID or host IPC namespace", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-PR.DS-6_1", - "displayName": "ACN-B2-1-PR.DS-6_1", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-6] Sono impiegati meccanismi di controllo dell'integrità dei dati per verificare l'autenticità di software, firmware e delle informazioni | [1] Sono definiti in relazione alla categoria ID.AM, almeno" + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-PR.DS-7_1", - "displayName": "ACN-B2-1-PR.DS-7_1", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni | [PR.DS-7] Gli ambienti di sviluppo e test sono separati dall'ambiente di produzione | [1] Sono definite in relazione alla categoria ID.AM" + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.IP-1_1", - "displayName": "ACN-B2-1-PR.IP-1_1", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-1] Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [1] Sono definite politiche e procedure con riferimento alla sicurezza delle applicazioni per fornire un adeguato supporto alla pianificazione, realizzazione e manutenzione delle funzionalità di sicurezza delle applicazioni, le quali dovranno essere riviste e aggiornate almeno su base annuale.[IaaS,SaaS]" + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-PR.IP-3_1", - "displayName": "ACN-B2-1-PR.IP-3_1", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-3] Sono attivi processi di controllo della modifica delle configurazioni | [1] Sono definite" + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-PR.IP-3_2", - "displayName": "ACN-B2-1-PR.IP-3_2", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-3] Sono attivi processi di controllo della modifica delle configurazioni | [2] È implementata una procedura per la gestione delle eccezioni, incluse emergenze, nel processo di modifica e configurazione" + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8" + }, + { + "policyDefinitionReferenceId": "Function apps should use latest -HTTP Version-", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c" + }, + { + "policyDefinitionReferenceId": "[Preview]: vTPM should be enabled on supported virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "2.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3" + }, + { + "policyDefinitionReferenceId": "Linux machines should meet requirements for the Azure compute security baseline", + "parameters": { + "IncludeArcMachines": { + "value": "[parameters('IncludeArcMachines-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd" + }, + { + "policyDefinitionReferenceId": "Windows machines should meet requirements of the Azure compute security baseline", + "parameters": { + "IncludeArcMachines": { + "value": "[parameters('IncludeArcMachines-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc" + }, + { + "policyDefinitionReferenceId": "Kubernetes clusters should not grant CAP_SYS_ADMIN security capabilities", + "parameters": { + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.IP-3_3", - "displayName": "ACN-B2-1-PR.IP-3_3", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-3] Sono attivi processi di controllo della modifica delle configurazioni | [3] Sono definiti e implementati piani di ripristino allo stato precedente (cd. rollback) in caso di errori o problemi di sicurezza" + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-PR.IP-4_1", - "displayName": "ACN-B2-1-PR.IP-4_1", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-4] I backup delle informazioni sono eseguiti, amministrati e verificati | [1] Sono definite, anche in relazione alla categoria ID.AM, almeno" + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-PR.IP-4_2", - "displayName": "ACN-B2-1-PR.IP-4_2", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-4] I backup delle informazioni sono eseguiti, amministrati e verificati | [2] Viene effettuato periodicamente un backup dei dati memorizzati nel cloud. Viene assicurata la riservatezza, l’integrità e la disponibilità dei dati dei backup" + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-PR.IP-4_3", - "displayName": "ACN-B2-1-PR.IP-4_3", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-4] I backup delle informazioni sono eseguiti, amministrati e verificati | [3] Le copie di backup di informazioni, software e immagini di sistema del servizio cloud sono protette con crittografia forte ed archiviate regolarmente in siti remoti (nel rispetto di quanto previsto dalla categoria PR.DS). Qualora i backup siano trasmessi ad un sito remoto tramite rete, la trasmissione deve essere protetta con crittografia forte" + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626" + }, + { + "policyDefinitionReferenceId": "Virtual machines- Guest Configuration extension should be deployed with system-assigned managed identity", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a" + }, + { + "policyDefinitionReferenceId": "[Preview]: Guest Attestation extension should be installed on supported Windows virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "4.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster containers should only use allowed images", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-PR.IP-4_4", - "displayName": "ACN-B2-1-PR.IP-4_4", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-4] I backup delle informazioni sono eseguiti, amministrati e verificati | [4] Viene verificato periodicamente il ripristino (test di restore) delle copie di backup come da obiettivo (SLO) identificato per il corrispondente indicatore di servizio (SLI) riportato alla Tabella 1 \"Indicatori minimi della qualità del Servizio\"" + "allowedContainerImagesRegex": { + "value": "[parameters('allowedContainerImagesRegex-1')]" }, - { - "name": "ACN-B2-1-PR.IP-9_1", - "displayName": "ACN-B2-1-PR.IP-9_1", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [1] L'impatto derivante da interruzioni di business ed eventuali rischi è determinato al fine di stabilire i criteri per sviluppare strategie e capacità di business continuity." + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-PR.IP-9_2", - "displayName": "ACN-B2-1-PR.IP-9_2", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [2] Esiste un documento aggiornato di dettaglio contenente i piani di continuità operativa, nonché quelli di risposta in caso di incidenti, che comprende almeno" + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.IP-9_3", - "displayName": "ACN-B2-1-PR.IP-9_3", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [3] Esiste un documento aggiornato recante l'elenco delle attività di istruzione, formazione ed esercitazione svolte." + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-PR.IP-9_4", - "displayName": "ACN-B2-1-PR.IP-9_4", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [4] I piani di business continuity sono collaudati e comunicati alle parti interessate." + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-PR.IP-9_5", - "displayName": "ACN-B2-1-PR.IP-9_5", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [5] La documentazione di cui al punto 2 è resa disponibile, ove richiesto, all’Amministrazione e rivista periodicamente." + "source": { + "value": "[parameters('source-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "9.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469" + }, + { + "policyDefinitionReferenceId": "[Preview]: Guest Attestation extension should be installed on supported Windows virtual machines scale sets", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "3.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42" + }, + { + "policyDefinitionReferenceId": "App Service apps should have remote debugging turned off", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71" + }, + { + "policyDefinitionReferenceId": "[Preview]: Guest Attestation extension should be installed on supported Linux virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "6.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff" + }, + { + "policyDefinitionReferenceId": "App Service apps should not have CORS configured to allow every resource to access your apps", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9" + }, + { + "policyDefinitionReferenceId": "Adaptive application controls for defining safe applications should be enabled on your machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc" + }, + { + "policyDefinitionReferenceId": "App Service apps should use latest -HTTP Version-", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster should not allow privileged containers", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-PR.IP-12_1", - "displayName": "ACN-B2-1-PR.IP-12_1", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-12] Viene sviluppato e implementato un piano di gestione delle vulnerabilità | [1] Esiste un documento aggiornato di dettaglio che indica almeno" + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-PR.IP-12_2", - "displayName": "ACN-B2-1-PR.IP-12_2", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli asset | [PR.IP-12] Viene sviluppato e implementato un piano di gestione delle vulnerabilità | [2] Sono definite ed implementate procedure e misure tecniche volte all'aggiornamento degli strumenti di rilevamento, delle threat signatures e degli indicatori di compromissione, le quali dovranno essere riviste e aggiornate frequentemente o su base settimanale." + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.MA-1_1", - "displayName": "ACN-B2-1-PR.MA-1_1", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-1] La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [1] Sono definite anche in relazione alla categoria ID.AM, almeno" + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-PR.MA-2_1", - "displayName": "ACN-B2-1-PR.MA-2_1", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-2] La manutenzione remota delle risorse e dei sistemi è approvata, documentata e svolta in modo da evitare accessi non autorizzati | [1] La manutenzione delle risorse e dei sistemi (ivi incluse le attività relative alle funzioni di sicurezza) svolta da remoto è eseguita nel rispetto delle misure di cui alla sottocategoria PR.AC-3 e dei seguenti punti." + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-PR.MA-2_2", - "displayName": "ACN-B2-1-PR.MA-2_2", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-2] La manutenzione remota delle risorse e dei sistemi è approvata, documentata e svolta in modo da evitare accessi non autorizzati | [2] Tutti gli accessi eseguiti da remoto da personale di terze parti sono autorizzati dall'organizzazione di cybersecurity e limitati ai soli casi essenziali." + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-PR.MA-2_3", - "displayName": "ACN-B2-1-PR.MA-2_3", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-2] La manutenzione remota delle risorse e dei sistemi è approvata, documentata e svolta in modo da evitare accessi non autorizzati | [3] Sono adottati stringenti meccanismi di protezione per l'autenticazione, l'identificazione e per il tracciamento degli eventi." + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "9.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4" + }, + { + "policyDefinitionReferenceId": "Kubernetes clusters should not use the default namespace", + "parameters": { + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-PR.MA-2_4", - "displayName": "ACN-B2-1-PR.MA-2_4", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-2] La manutenzione remota delle risorse e dei sistemi è approvata, documentata e svolta in modo da evitare accessi non autorizzati | [4] Sono adottati meccanismi di gestione e controllo delle utenze privilegiate, in termini di limitazioni di natura temporale e delle funzionalità amministrative disponibili." + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.MA-2_5", - "displayName": "ACN-B2-1-PR.MA-2_5", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-2] La manutenzione remota delle risorse e dei sistemi è approvata, documentata e svolta in modo da evitare accessi non autorizzati | [5] Tutti i log relativi alle sessioni di comunicazione remota e alle attività eseguite sui sistemi remoti, sono prodotti e custoditi su sistemi separati da quelli oggetto di intervento e non accessibili dalle utenze remote." + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-PR.PT-1_1", - "displayName": "ACN-B2-1-PR.PT-1_1", - "description": "Protective Technology (PR.PT): Le soluzioni tecniche di sicurezza sono gestite per assicurare sicurezza e resilienza di sistemi e asset, in coerenza con le relative politiche, procedure ed accordi | [PR.PT-1] Esiste ed è attuata una policy per definire, implementare e revisionare i log dei sistemi | [1] I log sono conservati in modo sicuro, possibilmente centralizzato, per almeno 24 mesi." + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-PR.PT-1_2", - "displayName": "ACN-B2-1-PR.PT-1_2", - "description": "Protective Technology (PR.PT): Le soluzioni tecniche di sicurezza sono gestite per assicurare sicurezza e resilienza di sistemi e asset, in coerenza con le relative politiche, procedure ed accordi | [PR.PT-1] Esiste ed è attuata una policy per definire, implementare e revisionare i log dei sistemi | [2] Sono definite" + "namespaces": { + "value": "[parameters('namespaces-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373" + }, + { + "policyDefinitionReferenceId": "Audit VMs that do not use managed disks", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster containers should run with a read only root file system", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-PR.PT-5_1", - "displayName": "ACN-B2-1-PR.PT-5_1", - "description": "Protective Technology (PR.PT): Le soluzioni tecniche di sicurezza sono gestite per assicurare sicurezza e resilienza di sistemi e asset, in coerenza con le relative politiche, procedure ed accordi | [PR.PT-5] Sono implementati meccanismi (es. failsafe, load balancing, hot swap) che permettono di soddisfare requisiti di resilienza sia durante il normale esercizio che in situazioni avverse | [1] In relazione ai piani previsti dalla sottocategoria PR.IP-9" + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-PR.PT-5_2", - "displayName": "ACN-B2-1-PR.PT-5_2", - "description": "Protective Technology (PR.PT): Le soluzioni tecniche di sicurezza sono gestite per assicurare sicurezza e resilienza di sistemi e asset, in coerenza con le relative politiche, procedure ed accordi | [PR.PT-5] Sono implementati meccanismi (es. failsafe, load balancing, hot swap) che permettono di soddisfare requisiti di resilienza sia durante il normale esercizio che in situazioni avverse | [2] Esistono meccanismi per garantire la continuità di servizio, nel rispetto delle misure di sicurezza qui elencate." + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-PR.PT-5_3", - "displayName": "ACN-B2-1-PR.PT-5_3", - "description": "Protective Technology (PR.PT): Le soluzioni tecniche di sicurezza sono gestite per assicurare sicurezza e resilienza di sistemi e asset, in coerenza con le relative politiche, procedure ed accordi | [PR.PT-5] Sono implementati meccanismi (es. failsafe, load balancing, hot swap) che permettono di soddisfare requisiti di resilienza sia durante il normale esercizio che in situazioni avverse | [3] Sono definite" + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-DE.AE-3_1", - "displayName": "ACN-B2-1-DE.AE-3_1", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [1] Ai fini di rilevare tempestivamente incidenti con impatto sul servizio cloud, sono adottati gli strumenti tecnici e procedurali" + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-DE.AE-3_2", - "displayName": "ACN-B2-1-DE.AE-3_2", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [2] Le attività di analisi e correlazione di cui al punto precedente sono monitorate e registrate. La relativa documentazione, anche elettronica, è conservata per almeno 24 mesi." + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-DE.AE-3_3", - "displayName": "ACN-B2-1-DE.AE-3_3", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [3] Sono definite" + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "6.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster containers CPU and memory resource limits should not exceed the specified limits", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-DE.AE-3_4", - "displayName": "ACN-B2-1-DE.AE-3_4", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [4] Sono presenti politiche e procedure di logging, monitoraggio, sicurezza e conservazione di registri di accesso, le quali dovranno essere aggiornate almeno su base annuale." + "memoryLimit": { + "value": "[parameters('memoryLimit-1')]" }, - { - "name": "ACN-B2-1-DE.AE-3_5", - "displayName": "ACN-B2-1-DE.AE-3_5", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [5] È adottato un sistema di auditing per il rilevamento di informazioni inerenti alla sicurezza, il monitoraggio degli accessi, modifiche o cancellazioni non autorizzate di dati o metadati" + "cpuLimit": { + "value": "[parameters('cpuLimit-1')]" }, - { - "name": "ACN-B2-1-DE.AE-3_6", - "displayName": "ACN-B2-1-DE.AE-3_6", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [6] Sono definiti e valutati processi, procedure e misure tecniche per la segnalazione di anomalie e guasti del sistema di monitoraggio e in grado di fornire una notifica immediata al soggetto responsabile." + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-DE.AE-3_7", - "displayName": "ACN-B2-1-DE.AE-3_7", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [7] Nell'ambito delle attività di logging e monitoraggio, in relazione al servizio cloud sono forniti strumenti di gestione degli errori e logging che consentono all’Amministrazione di definire il periodo di custodia (retention) desiderato e di ottenere informazioni sullo stato di sicurezza del servizio cloud, nonché sui dati e le funzioni che fornisce. Le informazioni devono essere sufficientemente dettagliate da consentire la verifica dei seguenti aspetti, nella misura in cui sono applicabili al servizio cloud:" + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-DE.AE-3_8", - "displayName": "ACN-B2-1-DE.AE-3_8", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [8] Per il servizio oggetto di qualificazione deve essere garantita la possibilità di integrare i log nel sistema SIEM di gestione e monitoraggio dell'Amministrazione e che i file di log siano facilmente esportabili dall'Amministrazione, preferibilmente tramite API." + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-DE.CM-1_1", - "displayName": "ACN-B2-1-DE.CM-1_1", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-1] Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [1] Sono presenti sistemi di rilevamento delle intrusioni (Intrusion Detection Systems - IDS)" + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-DE.CM-1_2", - "displayName": "ACN-B2-1-DE.CM-1_2", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-1] Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [2] Sono presenti dei processi per il monitoraggio degli eventi relativi alla sicurezza delle applicazioni e dell'infrastruttura sottostante" + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-DE.CM-1_3", - "displayName": "ACN-B2-1-DE.CM-1_3", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-1] Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [3] È previsto un sistema di monitoraggio degli accessi al fine di rilevare attività sospette e stabilire un processo definito per l'adozione di azioni appropriate e tempestive in risposta alle anomalie rilevate" + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "9.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164" + }, + { + "policyDefinitionReferenceId": "Azure Policy Add-on for Kubernetes service (AKS) should be installed and enabled on your clusters", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d" + }, + { + "policyDefinitionReferenceId": "Guest Configuration extension should be installed on your machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c" + }, + { + "policyDefinitionReferenceId": "Only approved VM extensions should be installed", + "parameters": { + "approvedExtensions": { + "value": "[parameters('approvedExtensions-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432" + }, + { + "policyDefinitionReferenceId": "Kubernetes clusters should disable automounting API credentials", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-DE.CM-4_1", - "displayName": "ACN-B2-1-DE.CM-4_1", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-4] Il codice malevolo viene rilevato | [1] Sono implementati ed utilizzati appositi strumenti per la prevenzione e il rilevamento di malware, nonché sistemi di protezione delle postazioni terminali (Endpoint Protection Systems - EPS)" + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-DE.CM-4_2", - "displayName": "ACN-B2-1-DE.CM-4_2", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-4] Il codice malevolo viene rilevato | [2] Sono presenti politiche di protezione anti-malware, le quali dovranno essere riviste almeno su base annuale" + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-DE.DP-1_1", - "displayName": "ACN-B2-1-DE.DP-1_1", - "description": "Detection Processes (DE.DP): Sono adottati, mantenuti e verificati processi e procedure di monitoraggio per assicurare la comprensione di eventi anomali | [DE.DP-1] Ruoli e responsabilità per i processi di monitoraggio sono ben definiti al fine di garantire l'accountability | [1] Le nomine di cui alla sottocategoria ID.AM-6 sono rese note all'interno del soggetto." + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-DE.DP-1_2", - "displayName": "ACN-B2-1-DE.DP-1_2", - "description": "Detection Processes (DE.DP): Sono adottati, mantenuti e verificati processi e procedure di monitoraggio per assicurare la comprensione di eventi anomali | [DE.DP-1] Ruoli e responsabilità per i processi di monitoraggio sono ben definiti al fine di garantire l'accountability | [2] I ruoli, i processi e le responsabilità per le attività propedeutiche al rilevamento di incidenti con impatto sul servizio cloud sono ben definiti e resi noti alle articolazioni competenti del soggetto." + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-DE.DP-1_3", - "displayName": "ACN-B2-1-DE.DP-1_3", - "description": "Detection Processes (DE.DP): Sono adottati, mantenuti e verificati processi e procedure di monitoraggio per assicurare la comprensione di eventi anomali | [DE.DP-1] Ruoli e responsabilità per i processi di monitoraggio sono ben definiti al fine di garantire l'accountability | [3] Esiste un documento aggiornato di dettaglio che indica almeno:" + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423" + }, + { + "policyDefinitionReferenceId": "Function apps should not have CORS configured to allow every resource to access your apps", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster containers should only use allowed AppArmor profiles", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-DE.DP-1_4", - "displayName": "ACN-B2-1-DE.DP-1_4", - "description": "Detection Processes (DE.DP): Sono adottati, mantenuti e verificati processi e procedure di monitoraggio per assicurare la comprensione di eventi anomali | [DE.DP-1] Ruoli e responsabilità per i processi di monitoraggio sono ben definiti al fine di garantire l'accountability | [4] È definito ed implementato un sistema per la notifica all’Amministrazione degli eventi anomali che coinvolgono le applicazioni e l’infrastruttura sottostante, identificati sulla base di metriche previamente concordate PaaS, SaaS." + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-RS.RP-1_1", - "displayName": "ACN-B2-1-RS.RP-1_1", - "description": "Response Planning (RS.RP): Procedure e processi di risposta sono eseguiti e mantenuti per assicurare una risposta agli incidenti di cybersecurity rilevati | [RS.RP-1] Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [1] Il piano di risposta prevede l'esecuzione tempestiva della valutazione degli eventi rilevati tramite l'analisi e la correlazione di cui alla categoria DE nonché la disseminazione immediata degli esiti verso le articolazioni competenti del soggetto, anche ai fini della notifica all’Amministrazione e, su base volontaria, al CSIRT Italia, degli incidenti con impatto sul servizio cloud." + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-RS.CO-1_1", - "displayName": "ACN-B2-1-RS.CO-1_1", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-1] Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [1] I ruoli e le responsabilità per lo svolgimento delle fasi e dei processi di cui al punto 1 sono ben definiti e resi noti alle articolazioni competenti del soggetto." + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-RS.CO-1_2", - "displayName": "ACN-B2-1-RS.CO-1_2", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-1] Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [2] Sono eseguite periodicamente esercitazioni." + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-RS.CO-1_3", - "displayName": "ACN-B2-1-RS.CO-1_3", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-1] Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [3] Esiste un documento aggiornato di dettaglio che indica almeno:" + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-RS.CO-5_1", - "displayName": "ACN-B2-1-RS.CO-5_1", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-5] È attuata una condivisione spontanea delle informazioni con le parti interessate esterne all'organizzazione (information sharing) per ottenere una maggior consapevolezza della situazione (c.d. situational awareness) | [1] Sono definiti e mantenuti contatti con gruppi di interesse legati al cloud e altre entità rilevanti e in linea con il contesto del soggetto." + "allowedProfiles": { + "value": "[parameters('allowedProfiles-1')]" }, - { - "name": "ACN-B2-1-RS.CO-5_2", - "displayName": "ACN-B2-1-RS.CO-5_2", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-5] È attuata una condivisione spontanea delle informazioni con le parti interessate esterne all'organizzazione (information sharing) per ottenere una maggior consapevolezza della situazione (c.d. situational awareness) | [2] Sono definiti e mantenuti punti di contatto con le autorità di regolamentazione applicabili, le forze dell'ordine nazionali e locali e altre autorità giurisdizionali legali." + "excludedImages": { + "value": "[parameters('excludedImages-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "6.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster services should listen only on allowed ports", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-RS.AN-5_1", - "displayName": "ACN-B2-1-RS.AN-5_1", - "description": "Analysis (RS.AN): Vengono condotte analisi per assicurare un'efficace riposta e supporto alle attività di ripristino | [RS.AN-5] Sono definiti processi per ricevere, analizzare e rispondere a informazioni inerenti vulnerabilità rese note da fonti interne o esterne all'organizzazione (es. test interni, bollettini di sicurezza, o ricercatori in sicurezza) | [1] Gli esiti delle valutazioni di cui alla sottocategoria DE.AE-3 e dei penetration test e vulnerability assessment di cui alla sottocategoria DE.CM-8, qualora disponibili, sono diffusi alle articolazioni competenti del soggetto." + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-RS.AN-5_2", - "displayName": "ACN-B2-1-RS.AN-5_2", - "description": "Analysis (RS.AN): Vengono condotte analisi per assicurare un'efficace riposta e supporto alle attività di ripristino | [RS.AN-5] Sono definiti processi per ricevere, analizzare e rispondere a informazioni inerenti vulnerabilità rese note da fonti interne o esterne all'organizzazione (es. test interni, bollettini di sicurezza, o ricercatori in sicurezza) | [2] I canali di comunicazione del CSIRT Italia di cui all'articolo 4 del decreto del Presidente del Consiglio dei ministri 8 agosto 2019, dell'Autorità di riferimento del proprio settore produttivo, nonché di eventuali CERT e Information Sharing & Analysis Centre (ISAC) di riferimento sono monitorati." + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-RS.AN-5_3", - "displayName": "ACN-B2-1-RS.AN-5_3", - "description": "Analysis (RS.AN): Vengono condotte analisi per assicurare un'efficace riposta e supporto alle attività di ripristino | [RS.AN-5] Sono definiti processi per ricevere, analizzare e rispondere a informazioni inerenti vulnerabilità rese note da fonti interne o esterne all'organizzazione (es. test interni, bollettini di sicurezza, o ricercatori in sicurezza) | [3] Esiste un documento aggiornato che descrive, almeno:" + "allowedServicePortsList": { + "value": "[parameters('allowedServicePortsList-1')]" }, - { - "name": "ACN-B2-1-RC.RP-1_1", - "displayName": "ACN-B2-1-RC.RP-1_1", - "description": "Recovery Planning (RC.RP): I processi e le procedure di ripristino sono eseguite e mantenute per assicurare un recupero dei sistemi o asset coinvolti da un incidente di cybersecurity | [RC.RP-1] Esiste un piano di ripristino (recovery plan) e viene eseguito durante o dopo un incidente di cybersecurity | [1] Esiste un piano di ripristino che prevede, almeno, i processi e le procedure necessarie al ripristino del normale funzionamento dei servizi cloud coinvolti da un incidente di cybersecurity." + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-PS.SC-1_1", - "displayName": "ACN-B2-1-PS.SC-1_1", - "description": "Performance e scalabilità: Scalabilità del servizio | [PS.SC-1] Trasparenza sulle modalità e meccanismi di scalabilità | [1] Il soggetto comunica all’Amministrazione:" + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "8.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44" + }, + { + "policyDefinitionReferenceId": "Kubernetes cluster pods should only use approved host network and port range", + "parameters": { + "namespaces": { + "value": "[parameters('namespaces-1')]" }, - { - "name": "ACN-B2-1-IP.PO-2_1", - "displayName": "ACN-B2-1-IP.PO-2_1", - "description": "Interoperabilità e portabilità: Portabilità | [IP.PO-2] L’interoperabilità e la portabilità dei dati sono gestite mediante procedure e politiche regolarmente aggiornate. La portabilità dei dati prevede l’applicazione di protocolli di rete sicuri e l’accesso ai dati al termine dei rapporti contrattuali è gestito mediante accordi specifici. | [1] Sono definite politiche e procedure per l'interoperabilità e la portabilità, le quali vengono riviste e aggiornate almeno su base annuale, compresi requisiti per:" + "allowHostNetwork": { + "value": "[parameters('allowHostNetwork-1')]" }, - { - "name": "ACN-B2-1-IP.PO-2_2", - "displayName": "ACN-B2-1-IP.PO-2_2", - "description": "Interoperabilità e portabilità: Portabilità | [IP.PO-2] L’interoperabilità e la portabilità dei dati sono gestite mediante procedure e politiche regolarmente aggiornate. La portabilità dei dati prevede l’applicazione di protocolli di rete sicuri e l’accesso ai dati al termine dei rapporti contrattuali è gestito mediante accordi specifici. | [2] Sono implementati protocolli di rete cifrati e standardizzati per la gestione, l'importazione e l'esportazione dei dati PaaS, SaaS" + "minPort": { + "value": "[parameters('minPort-1')]" }, - { - "name": "ACN-B2-1-IP.PO-2_3", - "displayName": "ACN-B2-1-IP.PO-2_3", - "description": "Interoperabilità e portabilità: Portabilità | [IP.PO-2] L’interoperabilità e la portabilità dei dati sono gestite mediante procedure e politiche regolarmente aggiornate. La portabilità dei dati prevede l’applicazione di protocolli di rete sicuri e l’accesso ai dati al termine dei rapporti contrattuali è gestito mediante accordi specifici. | [3] Sono incluse, all'interno degli accordi disposizioni che specifichino l'accesso dell’Amministrazione ai dati al termine del contratto, inclusi:" + "maxPort": { + "value": "[parameters('maxPort-1')]" }, - { - "name": "ACN-B2-1-B2.T1-01", - "displayName": "ACN-B2-1-B2.T1-01", - "description": "Indicatori minimi della qualità del Servizio | [B2.T1-01] Disponibilità: La percentuale di tempo in un mese in cui il servizio cloud risulta essere accessibile e usabile. Il tempo totale del periodo di riferimento, che funge da base di calcolo del dato percentuale, non tiene conto degli eventi catastrofici. Per eventi catastrofici si intendono eventi che rendono indisponibili per un periodo di tempo prolungato le infrastrutture impiegate per l’erogazione del servizio e al verificarsi dei quali è attivata la soluzione di Disaster Recovery. | [1] 99.0%" + "warn": { + "value": "[parameters('warn-1')]" }, - { - "name": "ACN-B2-1-B2.T1-02", - "displayName": "ACN-B2-1-B2.T1-02", - "description": "Indicatori minimi della qualità del Servizio | [B2.T1-02] Attività di supporto - Support hours emergenze: L’orario in cui il servizio di supporto tecnico è operativo per emergenze. | [1] 24x7" + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "name": "ACN-B2-1-B2.T1-03", - "displayName": "ACN-B2-1-B2.T1-03", - "description": "Indicatori minimi della qualità del Servizio | [B2.T1-03] Attività di supporto - First Support Response Time: Il tempo massimo che intercorre tra la segnalazione di un evento con impatto critico sull'operatività dell'Amministrazione e la risposta iniziale alla segnalazione da parte del soggetto | [1] <1h" + "excludedContainers": { + "value": "[parameters('excludedContainers-1')]" }, - { - "name": "ACN-B2-1-B2.T1-04", - "displayName": "ACN-B2-1-B2.T1-04", - "description": "Indicatori minimi della qualità del Servizio | [B2.T1-04] Minor Release: L'intervallo di tempo massimo di preavviso previsto per dare comunicazione, accompagnata da release note, alla Amministrazione di Minor Release. Per Minor Release si intendono modifiche al servizio che riguardano principalmente correzioni di malfunzionamenti del software (bug) o comunque aggiunta di nuove funzionalità retrocompatibili. | [1] 3 giorni" + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "name": "ACN-B2-1-B2.T1-05", - "displayName": "ACN-B2-1-B2.T1-05", - "description": "Indicatori minimi della qualità del Servizio | [B2.T1-05] Major Release: L'intervallo di tempo massimo di preavviso previsto per dare comunicazione, accompagnata da release note, alla Amministrazione di Major Release. Per Minor Release si intendono modifiche al servizio che riguardano una sostanziale evoluzione delle funzionalità del servizio rispetto alla versione precedente. | [1] 1 mese" + "source": { + "value": "[parameters('source-1')]" }, - { - "name": "ACN-B2-1-B2.T1-06", - "displayName": "ACN-B2-1-B2.T1-06", - "description": "Indicatori minimi della qualità del Servizio | [B2.T1-06] Numero minimo di test della procedura di restore eseguiti in un anno | [1] 1" + "excludedImages": { + "value": "[parameters('excludedImages-1')]" } - ], - "parameters": { - "operationName_b954148f-4c11-4c38-8221-be76711e194a": { - "type": "String", - "allowedValues": [ - "Microsoft.Sql/servers/firewallRules/write", - "Microsoft.Sql/servers/firewallRules/delete", - "Microsoft.Network/networkSecurityGroups/write", - "Microsoft.Network/networkSecurityGroups/delete", - "Microsoft.ClassicNetwork/networkSecurityGroups/write", - "Microsoft.ClassicNetwork/networkSecurityGroups/delete", - "Microsoft.Network/networkSecurityGroups/securityRules/write", - "Microsoft.Network/networkSecurityGroups/securityRules/delete", - "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write", - "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete" - ], - "metadata": { - "displayName": "An activity log alert should exist for specific Administrative operations : [Operation Name]", - "description": "Administrative Operation name for which activity log alert should be configured" - } - }, - "allowedContainerImagesRegex_febd0533-8e55-448f-b837-bd0e06f16469": { - "type": "String", - "allowedValues": null, - "metadata": { - "portalReview": true, - "displayName": "Kubernetes cluster containers should only use allowed images : [Allowed registry or registries regex]", - "description": "The RegEx rule used to match allowed container image field in a Kubernetes cluster. For example, to allow any Azure Container Registry image by matching partial path: ^[^\\/]+\\.azurecr\\.io\\/.+$ and for multiple registries: ^([^\\/]+\\.azurecr\\.io|registry\\.io)\\/.+$" - } - }, - "operationName_c5447c04-a4d7-4ba8-a263-c9ee321a6858": { - "type": "String", - "allowedValues": [ - "Microsoft.Authorization/policyAssignments/write", - "Microsoft.Authorization/policyAssignments/delete" - ], - "metadata": { - "displayName": "An activity log alert should exist for specific Policy operations : [Operation Name]", - "description": "Policy Operation name for which activity log alert should exist" - } - }, - "cpuLimit_e345eecc-fa47-480f-9e88-67dcc122b164": { - "type": "String", - "allowedValues": null, - "metadata": { - "portalReview": true, - "displayName": "Kubernetes cluster containers CPU and memory resource limits should not exceed the specified limits : [Max allowed CPU units]", - "description": "The maximum CPU units allowed for a container. E.g. 200m. For more information, please refer https://aka.ms/k8s-policy-pod-limits" - } - }, - "memoryLimit_e345eecc-fa47-480f-9e88-67dcc122b164": { - "type": "String", - "allowedValues": null, - "metadata": { - "portalReview": true, - "displayName": "Kubernetes cluster containers CPU and memory resource limits should not exceed the specified limits : [Max allowed memory bytes]", - "description": "The maximum memory bytes allowed for a container. E.g. 1Gi. For more information, please refer https://aka.ms/k8s-policy-pod-limits" - } - }, - "operationName_3b980d31-7904-4bb7-8575-5665739a8052": { - "type": "String", - "allowedValues": [ - "Microsoft.Security/policies/write", - "Microsoft.Security/securitySolutions/write", - "Microsoft.Security/securitySolutions/delete" - ], - "metadata": { - "displayName": "An activity log alert should exist for specific Security operations : [Operation Name]", - "description": "Security Operation name for which activity log alert should exist" - } - }, - "approvedExtensions_c0e996f8-39cf-4af9-9f45-83fbde810432": { - "type": "Array", - "allowedValues": null, - "metadata": { - "displayName": "Only approved VM extensions should be installed : [Approved extensions]", - "description": "The list of approved extension types that can be installed. Example: AzureDiskEncryption" - } - }, - "allowedServicePortsList_233a2a17-77ca-4fb1-9b6b-69223d272a44": { - "type": "Array", - "allowedValues": null, - "metadata": { - "portalReview": true, - "displayName": "Kubernetes cluster services should listen only on allowed ports : [Allowed service ports list]", - "description": "The list of service ports allowed in a Kubernetes cluster. Array only accepts strings. Example: [\"443\", \"80\"]" - } + }, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "6.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe" + }, + { + "policyDefinitionReferenceId": "Storage accounts should allow access from trusted Microsoft services", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd" + }, + { + "policyDefinitionReferenceId": "Allowlist rules in your adaptive application control policy should be updated", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_2_1", + "ACN_B2_1_ID.AM_2_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1028 - Information Flow Enforcement", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_3_1", + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2", + "ACN_B2_1_PR.DS_5_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475" + }, + { + "groupNames": [ + "ACN_B2_1_ID.AM_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1152 - System Interconnections", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_ID.AM_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c", + "policyDefinitionReferenceId": "Microsoft Managed Control 1172 - Internal System Connections", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_ID.AM_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1", + "policyDefinitionReferenceId": "Microsoft Managed Control 1030 - Information Flow Enforcement - Physical - Logical Separation Of Information Flows", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1029 - Information Flow Enforcement - Security Policy Filters", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_3_1", + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2", + "ACN_B2_1_PR.DS_5_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69" + }, + { + "groupNames": [ + "ACN_B2_1_ID.AM_6_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993", + "policyDefinitionReferenceId": "Microsoft Managed Control 1530 - Third-Party Personnel Security", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1087 - Security Awareness And Training Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_6_1", + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4", + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2", + "ACN_B2_1_PR.AT_2_1", + "ACN_B2_1_PR.AT_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1529 - Third-Party Personnel Security", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_6_1", + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1748 - Security Authorization Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f3b7f51-9620-4c71-b887-48a6838c68b8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1584 - Information System Documentation", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1747 - Security Authorization Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bd38f52-1833-42b2-b9aa-e1b9dcd0143b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1351 - Incident Response Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4", + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_DE.DP_1_4", + "ACN_B2_1_RS.RP_1_1", + "ACN_B2_1_RS.CO_1_1", + "ACN_B2_1_RS.CO_1_2", + "ACN_B2_1_RS.CO_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1490 - Security Planning Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4", + "ACN_B2_1_ID.RA_1_1", + "ACN_B2_1_RS.CO_1_1", + "ACN_B2_1_RS.CO_1_2", + "ACN_B2_1_RS.CO_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1230 - Configuration Management Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.AM_6_2", + "ACN_B2_1_ID.AM_6_3", + "ACN_B2_1_ID.AM_6_4", + "ACN_B2_1_PR.IP_3_1", + "ACN_B2_1_PR.IP_3_2", + "ACN_B2_1_PR.IP_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071" + }, + { + "policyDefinitionReferenceId": "Establish an information security program", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_1_1", + "ACN_B2_1_ID.GV_1_2", + "ACN_B2_1_PR.IP_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84245967-7882-54f6-2d34-85059f725b47" + }, + { + "policyDefinitionReferenceId": "Develop and establish a system security plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_1_1", + "ACN_B2_1_ID.GV_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b2ea1058-8998-3dd1-84f1-82132ad482fd" + }, + { + "policyDefinitionReferenceId": "Develop information security policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_1_1", + "ACN_B2_1_ID.GV_1_2", + "ACN_B2_1_PR.MA_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af227964-5b8b-22a2-9364-06d2cb9d6d7c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1536 - Risk Assessment Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2", + "ACN_B2_1_ID.RA_5_1", + "ACN_B2_1_ID.RA_5_2", + "ACN_B2_1_ID.RA_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1745 - Risk Management Strategy", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2", + "ACN_B2_1_ID.SC_1_1", + "ACN_B2_1_ID.SC_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a36eb487-cbd1-4fe7-a3df-2efc6aa2c2b6" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1744 - Risk Management Strategy", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2", + "ACN_B2_1_ID.SC_1_1", + "ACN_B2_1_ID.SC_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/07458826-9325-4481-abaf-bc9ed043459d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1545 - Risk Assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.RA_5_1", + "ACN_B2_1_ID.RA_5_2", + "ACN_B2_1_ID.RA_5_3", + "ACN_B2_1_PR.DS_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1743 - Risk Management Strategy", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2", + "ACN_B2_1_ID.SC_1_1", + "ACN_B2_1_ID.SC_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/66a56404-7b65-4e33-b371-28d069172dd4" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1537 - Risk Assessment Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1" + }, + { + "policyDefinitionReferenceId": "Conduct Risk Assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.RA_5_1", + "ACN_B2_1_ID.RA_5_2", + "ACN_B2_1_ID.RA_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/677e1da4-00c3-287a-563d-f4a1cf9b99a0" + }, + { + "policyDefinitionReferenceId": "Review and update risk assessment policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/20012034-96f0-85c2-4a86-1ae1eb457802" + }, + { + "policyDefinitionReferenceId": "Perform a risk assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.RA_5_1", + "ACN_B2_1_ID.RA_5_2", + "ACN_B2_1_ID.RA_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c5d3d8d-5cba-0def-257c-5ab9ea9644dc" + }, + { + "policyDefinitionReferenceId": "Implement the risk management strategy", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6fe3856-4635-36b6-983c-070da12a953b" + }, + { + "policyDefinitionReferenceId": "Conduct risk assessment and document its results", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2", + "ACN_B2_1_ID.RA_5_1", + "ACN_B2_1_ID.RA_5_2", + "ACN_B2_1_ID.RA_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1dbd51c2-2bd1-5e26-75ba-ed075d8f0d68" + }, + { + "policyDefinitionReferenceId": "Establish a risk management strategy", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d36700f2-2f0d-7c2a-059c-bdadd1d79f70" + }, + { + "policyDefinitionReferenceId": "Conduct risk assessment and distribute its results", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_1", + "ACN_B2_1_ID.GV_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7c1ecc3-2980-a079-1569-91aec8ac4a77" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1541 - Risk Assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_2", + "ACN_B2_1_ID.RA_5_1", + "ACN_B2_1_ID.RA_5_2", + "ACN_B2_1_ID.RA_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434" + }, + { + "groupNames": [ + "ACN_B2_1_ID.GV_4_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7cb8a3d2-a208-4b6f-95e8-e8f0bb85a7a6", + "policyDefinitionReferenceId": "Microsoft Managed Control 1807 - Governance And Privacy Program", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_ID.GV_4_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9834600a-668a-482c-9310-a89861b29e06", + "policyDefinitionReferenceId": "Microsoft Managed Control 1805 - Governance And Privacy Program", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1542 - Risk Assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.GV_4_2", + "ACN_B2_1_ID.RA_5_1", + "ACN_B2_1_ID.RA_5_2", + "ACN_B2_1_ID.RA_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d" + }, + { + "groupNames": [ + "ACN_B2_1_ID.GV_4_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28aa060e-25c7-6121-05d8-a846f11433df", + "policyDefinitionReferenceId": "Review and update planning policies and procedures", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1546 - Vulnerability Scanning", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.RA_1_1", + "ACN_B2_1_ID.RA_1_2", + "ACN_B2_1_PR.IP_12_2", + "ACN_B2_1_RS.AN_5_1", + "ACN_B2_1_RS.AN_5_2", + "ACN_B2_1_RS.AN_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1" + }, + { + "policyDefinitionReferenceId": "Develop security assessment plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.RA_1_1", + "ACN_B2_1_PR.IP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c258345-5cd4-30c8-9ef3-5ee4dd5231d6" + }, + { + "groupNames": [ + "ACN_B2_1_ID.RA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8a63511-66f1-503f-196d-d6217ee0823a", + "policyDefinitionReferenceId": "Require developers to produce evidence of security assessment plan execution", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1543 - Risk Assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.RA_5_1", + "ACN_B2_1_ID.RA_5_2", + "ACN_B2_1_ID.RA_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1559 - System And Services Acquisition Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.SC_1_1", + "ACN_B2_1_ID.SC_1_2", + "ACN_B2_1_PR.IP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1560 - System And Services Acquisition Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.SC_1_1", + "ACN_B2_1_ID.SC_1_2", + "ACN_B2_1_PR.IP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1608 - Supply Chain Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_ID.SC_1_1", + "ACN_B2_1_ID.SC_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274", + "policyDefinitionReferenceId": "Microsoft Managed Control 1312 - Identifier Management", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1040 - Least Privilege - Review Of User Privileges", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1005 - Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_3_3", + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1031 - Separation Of Duties", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3", + "ACN_B2_1_PR.DS_5_1", + "ACN_B2_1_PR.DS_7_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14", + "policyDefinitionReferenceId": "Microsoft Managed Control 1015 - Account Management - Disable Inactive Accounts", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1032 - Separation Of Duties", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1010 - Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_3_3", + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1004 - Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1006 - Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_1_6", + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1039 - Least Privilege - Review Of User Privileges", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1033 - Separation Of Duties", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65", + "policyDefinitionReferenceId": "Microsoft Managed Control 1002 - Account Management", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1317 - Authenticator Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1011 - Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1007 - Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1034 - Least Privilege", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3", + "ACN_B2_1_PR.AT_2_1", + "ACN_B2_1_PR.AT_2_2", + "ACN_B2_1_PR.DS_5_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329" + }, + { + "policyDefinitionReferenceId": "Define access authorizations to support separation of duties", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/341bc9f1-7489-07d9-4ec6-971573e1546a" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7805a343-275c-41be-9d62-7215b96212d8", + "policyDefinitionReferenceId": "Reassign or remove user privileges as needed", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1301 - User Identification And Authentication - Network Access To Privileged Accounts", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1303 - User Identification And Authentication - Local Access To Privileged Accounts", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1299 - Identification And Authentication Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1003 - Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1300 - User Identification And Authentication", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1027 - Access Enforcement", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5", + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_3_3", + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3", + "ACN_B2_1_PR.DS_5_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1311 - Identifier Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1325 - Authenticator Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1346 - Identification And Authentication (Non-Organizational Users)", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1306 - User Identification And Authentication - Network Access To Privileged Accounts - Replay...", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff" + }, + { + "policyDefinitionReferenceId": "Review access control policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03d550b4-34ee-03f4-515f-f2e2faf7a413" + }, + { + "policyDefinitionReferenceId": "Review and update identification and authentication policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/29acfac0-4bb4-121b-8283-8943198b1549" + }, + { + "policyDefinitionReferenceId": "Develop access control policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_2", + "ACN_B2_1_PR.AC_1_3", + "ACN_B2_1_PR.AC_1_4", + "ACN_B2_1_PR.AC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/59f7feff-02aa-6539-2cf7-bea75b762140" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_1_6" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295", + "policyDefinitionReferenceId": "Microsoft Managed Control 1314 - Identifier Management", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1008 - Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_6", + "ACN_B2_1_PR.AC_3_4", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1016 - Account Management - Automated Audit Actions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_6", + "ACN_B2_1_PR.AC_3_3", + "ACN_B2_1_PR.AC_3_4", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1013 - Account Management - Automated System Account Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_1_6", + "ACN_B2_1_PR.AC_4_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_1_6" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a28323fe-276d-3787-32d2-cef6395764c4", + "policyDefinitionReferenceId": "Develop audit and accountability policies and procedures", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1064 - Remote Access - Privileged Commands - Access", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1062 - Remote Access - Protection Of Confidentiality - Integrity Using Encryption", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1308 - User Identification And Authentication - Remote Access - Separate Device", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1063 - Remote Access - Managed Access Control Points", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1059 - Remote Access", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1060 - Remote Access", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1065 - Remote Access - Privileged Commands - Access", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1061 - Remote Access - Automated Monitoring - Control", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5", + "ACN_B2_1_DE.CM_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914" + }, + { + "policyDefinitionReferenceId": "Service Fabric clusters should only use Azure Active Directory for client authentication", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0" + }, + { + "policyDefinitionReferenceId": "Authentication to Linux machines should require SSH keys", + "parameters": { + "IncludeArcMachines": { + "value": "[parameters('IncludeArcMachines-1')]" } + }, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6" }, - "policyDefinitions": [ - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1686", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_3", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1247", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1301", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1191", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1312", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1" - ] + { + "policyDefinitionReferenceId": "Cosmos DB database accounts should have local authentication methods disabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2" + }, + { + "policyDefinitionReferenceId": "Function apps should have authentication enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_3_3" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8" + }, + { + "policyDefinitionReferenceId": "An Azure Active Directory administrator should be provisioned for SQL servers", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9" + }, + { + "policyDefinitionReferenceId": "App Service apps should have authentication enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_1", + "ACN_B2_1_PR.AC_3_2", + "ACN_B2_1_PR.AC_3_3" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1686 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_3", + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1035 - Least Privilege - Authorize Access To Security Functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_3_3", + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_3_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7", + "policyDefinitionReferenceId": "Microsoft Managed Control 1019 - Account Management - Role-Based Schemes", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_3_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57", + "policyDefinitionReferenceId": "Microsoft Managed Control 1102 - Audit Events", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/74520428-3aa8-449c-938d-93f51940759e", + "policyDefinitionReferenceId": "Microsoft Managed Control 1739 - Information System Inventory", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71", + "policyDefinitionReferenceId": "Microsoft Managed Control 1036 - Least Privilege - Non-Privileged Access For Nonsecurity Functions", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AC_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10", + "policyDefinitionReferenceId": "Microsoft Managed Control 1024 - Account Management - Account Monitoring - Atypical Usage", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1018 - Account Management - Role-Based Schemes", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1206 - Access Restrictions For Change - Limit Production - Operational Privileges", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_4_1", + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1043 - Least Privilege - Prohibit Non-Privileged Users From Executing Privileged Functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1037 - Least Privilege - Network Access To Privileged Commands", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1042 - Least Privilege - Auditing Use Of Privileged Functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1202 - Access Restrictions For Change", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a" + }, + { + "policyDefinitionReferenceId": "Document separation of duties", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_4_2", + "ACN_B2_1_PR.AC_4_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6f7b584-877a-0d69-77d4-ab8b923a9650" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1621 - Resource Availability", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2", + "ACN_B2_1_PS.SC_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1616 - System And Communications Protection Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2", + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1624 - Boundary Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1622 - Boundary Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1227 - Information System Component Inventory - Automated Unauthorized Component Detection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1623 - Boundary Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1631 - Boundary Protection - Deny By Default - Allow By Exception", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1638 - Boundary Protection - Dynamic Isolation - Segregation", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f" + }, + { + "policyDefinitionReferenceId": "[Preview]: All Internet traffic should be routed via your deployed Azure Firewall", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "3.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c" + }, + { + "policyDefinitionReferenceId": "Internet-facing virtual machines should be protected with network security groups", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c" + }, + { + "policyDefinitionReferenceId": "Management ports should be closed on your virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917" + }, + { + "policyDefinitionReferenceId": "IP Forwarding on your virtual machine should be disabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744" + }, + { + "policyDefinitionReferenceId": "Management ports of virtual machines should be protected with just-in-time network access control", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c" + }, + { + "policyDefinitionReferenceId": "All network ports should be restricted on network security groups associated to your virtual machine", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6" + }, + { + "policyDefinitionReferenceId": "Non-internet-facing virtual machines should be protected with network security groups", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6" + }, + { + "policyDefinitionReferenceId": "Subnets should be associated with a Network Security Group", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_5_1", + "ACN_B2_1_PR.AC_5_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1302 - User Identification And Authentication - Network Access To Non-Privileged Accounts", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1330 - Authenticator Management - Password-Based Authentication", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1342 - Authenticator Management - Hardware Token-Based Authentication", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1304 - User Identification And Authentication - Local Access To Non-Privileged Accounts", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1045 - Unsuccessful Logon Attempts", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1318 - Authenticator Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AC_7_1", + "ACN_B2_1_PR.AC_7_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1814 - Privacy Awareness And Training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b61f773-2042-46a8-b489-106d850d6d4e" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1094 - Role-Based Security Training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1095 - Role-Based Security Training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AT_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4b0d8d1d-7800-4b62-b4bf-6eecde12b2af", + "policyDefinitionReferenceId": "Microsoft Managed Control 1813 - Privacy Awareness And Training", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1089 - Security Awareness", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AT_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f", + "policyDefinitionReferenceId": "Microsoft Managed Control 1611 - Developer-Provided Training", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1093 - Role-Based Security Training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf" + }, + { + "policyDefinitionReferenceId": "Provide security training before providing access", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b05dca2-25ec-9335-495c-29155f785082" + }, + { + "policyDefinitionReferenceId": "Provide periodic role-based security training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9ac8621d-9acd-55bf-9f99-ee4212cc3d85" + }, + { + "policyDefinitionReferenceId": "Provide privacy training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/518eafdd-08e5-37a9-795b-15a8d798056d" + }, + { + "policyDefinitionReferenceId": "Provide role-based security training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_1", + "ACN_B2_1_PR.AT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4c385143-09fd-3a34-790c-a5fd9ec77ddc" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AT_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/676c3c35-3c36-612c-9523-36d266a65000", + "policyDefinitionReferenceId": "Require developers to provide training", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AT_1_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a", + "policyDefinitionReferenceId": "Microsoft Managed Control 1426 - Media Protection Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AT_1_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1", + "policyDefinitionReferenceId": "Microsoft Managed Control 1498 - Rules Of Behavior", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AT_1_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/516be556-1353-080d-2c2f-f46f000d5785", + "policyDefinitionReferenceId": "Provide periodic security awareness training", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.AT_1_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1cb7bf71-841c-4741-438a-67c65fdd7194", + "policyDefinitionReferenceId": "Provide security training for new users", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Document security and privacy training activities", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_1_2", + "ACN_B2_1_PR.AT_2_1", + "ACN_B2_1_PR.AT_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/524e7136-9f6a-75ba-9089-501018151346" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1091 - Security Awareness", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_2_1", + "ACN_B2_1_PR.AT_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d" + }, + { + "policyDefinitionReferenceId": "Implement training for protecting authenticators", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.AT_2_1", + "ACN_B2_1_PR.AT_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e4b00788-7e1c-33ec-0418-d048508e095b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1647 - Use of Cryptography", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1643 - Cryptographic Key Establishment And Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1663 - Protection Of Information At Rest", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1640 - Transmission Confidentiality And Integrity", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.DS_6_1", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1645 - Cryptographic Key Establishment And Management - Symmetric Keys", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c" + }, + { + "policyDefinitionReferenceId": "Transparent Data Encryption on SQL databases should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12" + }, + { + "policyDefinitionReferenceId": "Key vaults should have deletion protection enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53" + }, + { + "policyDefinitionReferenceId": "Certificates should have the specified maximum validity period", + "parameters": { + "maximumValidityInMonths": { + "value": "[parameters('maximumValidityInMonths-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560" + }, + { + "policyDefinitionReferenceId": "App Service apps should require FTPS only", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b" + }, + { + "policyDefinitionReferenceId": "Azure Cosmos DB accounts should use customer-managed keys to encrypt data at rest", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f" + }, + { + "policyDefinitionReferenceId": "SQL managed instances should use customer-managed keys to encrypt data at rest", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac01ad65-10e5-46df-bdd9-6b0cad13e1d2" + }, + { + "policyDefinitionReferenceId": "Function apps should use the latest TLS version", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193" + }, + { + "policyDefinitionReferenceId": "Key Vault keys should have an expiration date", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0" + }, + { + "policyDefinitionReferenceId": "Define cryptographic use", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c4ccd607-702b-8ae6-8eeb-fc3339cd4b42" + }, + { + "policyDefinitionReferenceId": "SQL servers should use customer-managed keys to encrypt data at rest", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a370ff3-6cab-4e85-8995-295fd854c5b8" + }, + { + "policyDefinitionReferenceId": "Key Vault secrets should have an expiration date", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37" + }, + { + "policyDefinitionReferenceId": "Function apps should only be accessible over HTTPS", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "5.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab" + }, + { + "policyDefinitionReferenceId": "Container registries should be encrypted with a customer-managed key", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580" + }, + { + "policyDefinitionReferenceId": "MySQL servers should use customer-managed keys to encrypt data at rest", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833" + }, + { + "policyDefinitionReferenceId": "Only secure connections to your Azure Cache for Redis should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb" + }, + { + "policyDefinitionReferenceId": "Kubernetes clusters should be accessible only over HTTPS", + "parameters": { + "source": { + "value": "[parameters('source-1')]" }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1421", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] + "labelSelector": { + "value": "[parameters('labelSelector-1')]" }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1314", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_6" - ] + "warn": { + "value": "[parameters('warn-1')]" }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1290", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] + "excludedNamespaces": { + "value": "[parameters('excludedNamespaces-1')]" }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1697", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1814", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b61f773-2042-46a8-b489-106d850d6d4e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1001", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-1_1", - "ACN-B2-1-ID.GV-1_2", - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3", - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1211", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1411", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1238", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1374", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-02", - "ACN-B2-1-QU.SE-2_1", - "ACN-B2-1-QU.SE-2_2", - "ACN-B2-1-QU.SE-2_3", - "ACN-B2-1-QU.SE-2_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1698", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1739", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/74520428-3aa8-449c-938d-93f51940759e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1632", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1139", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1702", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1040", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1399", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1265", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1135", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1209", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1406", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1035", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_3", - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1541", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_2", - "ACN-B2-1-ID.RA-5_1", - "ACN-B2-1-ID.RA-5_2", - "ACN-B2-1-ID.RA-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1748", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f3b7f51-9620-4c71-b887-48a6838c68b8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1005", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-3_3", - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1031", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3", - "ACN-B2-1-PR.DS-5_1", - "ACN-B2-1-PR.DS-7_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1220", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2", - "ACN-B2-1-ID.AM-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1431", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1303", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1409", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1827", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86cd0591-5076-4447-aeff-2557def90353", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1756", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d4de5955-e00f-414d-9c16-f569c6a99c10", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.CO-5_1", - "ACN-B2-1-RS.CO-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1807", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7cb8a3d2-a208-4b6f-95e8-e8f0bb85a7a6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1676", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1008", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_6", - "ACN-B2-1-PR.AC-3_4", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1289", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-4_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1282", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1615", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1028", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-3_1", - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2", - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1559", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.SC-1_1", - "ACN-B2-1-ID.SC-1_2", - "ACN-B2-1-PR.IP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1242", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-01", - "ACN-B2-1-PR.IP-4_1", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3", - "ACN-B2-1-RC.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1299", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1362", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1036", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1621", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2", - "ACN-B2-1-PS.SC-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1584", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1359", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1408", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1747", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bd38f52-1833-42b2-b9aa-e1b9dcd0143b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1064", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1043", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1689", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1626", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1143", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-12_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1552", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-12_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1174", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1", - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1294", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1132", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1677", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-4_1", - "ACN-B2-1-DE.CM-4_2", - "ACN-B2-1-PR.IP-12_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1432", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1259", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1255", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1176", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1634", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-5_1", - "ACN-B2-1-PR.DS-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1684", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1455", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-1_1", - "ACN-B2-1-ID.AM-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1680", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1805", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9834600a-668a-482c-9310-a89861b29e06", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1003", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1251", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3", - "ACN-B2-1-RC.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1382", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_1", - "ACN-B2-1-DE.DP-1_2", - "ACN-B2-1-DE.DP-1_3", - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1111", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1536", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2", - "ACN-B2-1-ID.RA-5_1", - "ACN-B2-1-ID.RA-5_2", - "ACN-B2-1-ID.RA-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1745", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a36eb487-cbd1-4fe7-a3df-2efc6aa2c2b6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2", - "ACN-B2-1-ID.SC-1_1", - "ACN-B2-1-ID.SC-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1400", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1297", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1526", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1113", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1266", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1062", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1015", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1102", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1263", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.CO-1_1", - "ACN-B2-1-RS.CO-1_2", - "ACN-B2-1-RS.CO-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1288", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-4_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1037", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1300", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1032", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1360", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1094", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1091", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-2_1", - "ACN-B2-1-PR.AT-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1260", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1423", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1410", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1641", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1252", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1440", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1016", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.AC-1_6", - "ACN-B2-1-PR.AC-3_3", - "ACN-B2-1-PR.AC-3_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1705", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-RS.CO-5_1", - "ACN-B2-1-RS.CO-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1351", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4", - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-RS.CO-1_1", - "ACN-B2-1-RS.CO-1_2", - "ACN-B2-1-RS.CO-1_3", - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1666", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1136", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1101", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1152", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1308", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1172", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1683", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3", - "ACN-B2-1-RS.AN-5_1", - "ACN-B2-1-RS.AN-5_2", - "ACN-B2-1-RS.AN-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1647", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1027", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-3_3", - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3", - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1302", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1100", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.AC-3_4", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1142", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-12_1", - "ACN-B2-1-RS.AN-5_1", - "ACN-B2-1-RS.AN-5_2", - "ACN-B2-1-RS.AN-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1551", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-12_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1030", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1422", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1184", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1181", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_2", - "ACN-B2-1-PR.IP-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1412", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1311", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1599", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1131", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1564", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-04", - "ACN-B2-1-B2.T1-05", - "ACN-B2-1-PR.IP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1063", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1024", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1029", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-3_1", - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2", - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1330", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1678", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1547", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.AN-5_1", - "ACN-B2-1-RS.AN-5_2", - "ACN-B2-1-RS.AN-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1456", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-1_1", - "ACN-B2-1-ID.AM-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1275", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1010", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-3_3", - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1643", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1757", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6c657baf-0693-455a-8bb2-7b4bdf79fd0e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.CO-5_1", - "ACN-B2-1-RS.CO-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1231", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1372", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-RS.CO-5_1", - "ACN-B2-1-RS.CO-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1342", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1115", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1264", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3", - "ACN-B2-1-RS.CO-1_1", - "ACN-B2-1-RS.CO-1_2", - "ACN-B2-1-RS.CO-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1405", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1616", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1254", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1624", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1530", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1713", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1201", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-7_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1836", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5bef3414-50bc-4fc0-b3db-372bb8fe0796", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1149", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.AN-5_1", - "ACN-B2-1-RS.AN-5_2", - "ACN-B2-1-RS.AN-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1059", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1424", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1490", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4", - "ACN-B2-1-ID.RA-1_1", - "ACN-B2-1-RS.CO-1_1", - "ACN-B2-1-RS.CO-1_2", - "ACN-B2-1-RS.CO-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1066", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1363", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1004", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1403", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1060", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1404", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1218", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2", - "ACN-B2-1-ID.AM-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1087", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-6_1", - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4", - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2", - "ACN-B2-1-PR.AT-2_1", - "ACN-B2-1-PR.AT-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1744", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/07458826-9325-4481-abaf-bc9ed043459d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2", - "ACN-B2-1-ID.SC-1_1", - "ACN-B2-1-ID.SC-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1325", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1418", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1133", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1711", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1267", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1287", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-4_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1346", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1095", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1565", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1006", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-1_6", - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1256", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1246", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1407", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1693", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1361", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1679", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1425", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1019", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1622", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1304", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1712", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1039", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1625", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1045", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1018", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1434", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1197", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-7_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1685", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1186", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1417", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1691", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1366", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1042", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1695", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1426", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1663", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1682", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1033", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1438", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1269", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1376", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-QU.SE-2_1", - "ACN-B2-1-QU.SE-2_2", - "ACN-B2-1-QU.SE-2_3", - "ACN-B2-1-QU.SE-2_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1835", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/56a838e0-0a5d-49a8-ab74-bf6be81b32f5", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1837", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7d66d05-bf34-4555-b5f2-8b749def4098", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1119", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1371", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1137", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1489", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-1_1", - "ACN-B2-1-ID.AM-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1232", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1420", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1546", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.RA-1_1", - "ACN-B2-1-ID.RA-1_2", - "ACN-B2-1-PR.IP-12_2", - "ACN-B2-1-RS.AN-5_1", - "ACN-B2-1-RS.AN-5_2", - "ACN-B2-1-RS.AN-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1352", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1612", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1358", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1378", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-03", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-RS.CO-1_1", - "ACN-B2-1-RS.CO-1_2", - "ACN-B2-1-RS.CO-1_3", - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1002", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1306", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1293", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1227", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1834", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12a4a4dd-6c65-4900-9d7e-63fed5da791e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1185", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1", - "ACN-B2-1-PR.IP-3_2", - "ACN-B2-1-PR.IP-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1397", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-1_1", - "ACN-B2-1-ID.AM-1_2", - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1633", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1560", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.SC-1_1", - "ACN-B2-1-ID.SC-1_2", - "ACN-B2-1-PR.IP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1623", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1298", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-1_6", - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2", - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1261", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-RS.CO-1_1", - "ACN-B2-1-RS.CO-1_2", - "ACN-B2-1-RS.CO-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1317", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1011", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1545", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.RA-5_1", - "ACN-B2-1-ID.RA-5_2", - "ACN-B2-1-ID.RA-5_3", - "ACN-B2-1-PR.DS-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1542", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_2", - "ACN-B2-1-ID.RA-5_1", - "ACN-B2-1-ID.RA-5_2", - "ACN-B2-1-ID.RA-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1065", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1690", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1681", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-4_1", - "ACN-B2-1-DE.CM-4_2", - "ACN-B2-1-PR.IP-12_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1640", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1667", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1", - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1631", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1529", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-6_1", - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1373", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1413", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1292", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-06", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4", - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1608", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.SC-1_1", - "ACN-B2-1-ID.SC-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1210", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_2", - "ACN-B2-1-PR.IP-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1414", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1688", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1439", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1743", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/66a56404-7b65-4e33-b371-28d069172dd4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2", - "ACN-B2-1-ID.SC-1_1", - "ACN-B2-1-ID.SC-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1646", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1416", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1375", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-QU.SE-2_1", - "ACN-B2-1-QU.SE-2_2", - "ACN-B2-1-QU.SE-2_3", - "ACN-B2-1-QU.SE-2_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1813", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4b0d8d1d-7800-4b62-b4bf-6eecde12b2af", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1498", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1828", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/51f2fa3e-cd5f-4713-a9ce-177ee7a22d48", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1458", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-1_1", - "ACN-B2-1-ID.AM-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1000", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-1_1", - "ACN-B2-1-ID.GV-1_2", - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3", - "ACN-B2-1-PR.AT-2_1", - "ACN-B2-1-PR.AT-2_2", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1000:2", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-2_5", - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1219", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2", - "ACN-B2-1-ID.AM-2_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1257", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1202", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1110", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1013", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_6", - "ACN-B2-1-PR.AC-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1365", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1291", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4", - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1394", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1742", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d461dd50-c8fb-4ccb-93bf-61f53b44e54d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1189", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1283", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1007", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1161", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.AN-5_1", - "ACN-B2-1-RS.AN-5_2", - "ACN-B2-1-RS.AN-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1199", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1451", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-1_1", - "ACN-B2-1-ID.AM-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1401", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1190", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1645", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1369", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1034", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3", - "ACN-B2-1-PR.AT-2_1", - "ACN-B2-1-PR.AT-2_2", - "ACN-B2-1-PR.DS-5_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1318", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-7_1", - "ACN-B2-1-PR.AC-7_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1230", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4", - "ACN-B2-1-PR.IP-3_1", - "ACN-B2-1-PR.IP-3_2", - "ACN-B2-1-PR.IP-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1089", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1638", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1253", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5", - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1402", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1537", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1396", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1061", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1543", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.RA-5_1", - "ACN-B2-1-ID.RA-5_2", - "ACN-B2-1-ID.RA-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1433", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1398", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-1_1", - "ACN-B2-1-ID.AM-1_2", - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1415", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1694", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1419", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.MA-1_1", - "ACN-B2-1-PR.MA-2_1", - "ACN-B2-1-PR.MA-2_2", - "ACN-B2-1-PR.MA-2_3", - "ACN-B2-1-PR.MA-2_4", - "ACN-B2-1-PR.MA-2_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1381", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1445", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-1_1", - "ACN-B2-1-ID.AM-1_2", - "ACN-B2-1-ID.AM-6_2", - "ACN-B2-1-ID.AM-6_3", - "ACN-B2-1-ID.AM-6_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1206", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1258", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1244", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3", - "ACN-B2-1-RC.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1295", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-5_1", - "ACN-B2-1-PR.PT-5_2", - "ACN-B2-1-PR.PT-5_3", - "ACN-B2-1-RC.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1175", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-QU.SE-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1187", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1611", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ACF1093", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:17k78e20-9358-41c9-923c-fb736d382a12", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0b60c0b2-2dc2-4e1c-b5c9-abbed971de53", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1c988dd6-ade4-430f-a608-2a3e5b0a6d38", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:e3576e28-8b17-4677-84c3-db2990658d64", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:83a214f7-d01a-484b-91a9-ed54470c9a6a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1c258345-5cd4-30c8-9ef3-5ee4dd5231d6", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c258345-5cd4-30c8-9ef3-5ee4dd5231d6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.RA-1_1", - "ACN-B2-1-PR.IP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0a075868-4c26-42ef-914c-5bc007359560", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:97566dd7-78ae-4997-8b36-1c7bfe0d8121", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:fc5e4038-4584-4632-8c85-c0448d374b2c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:03d550b4-34ee-03f4-515f-f2e2faf7a413", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03d550b4-34ee-03f4-515f-f2e2faf7a413", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c4ebc54a-46e1-481a-bee2-d4411e95d828", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:171e377b-5224-4a97-1eaa-62a3b5231dac", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/171e377b-5224-4a97-1eaa-62a3b5231dac", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:bd6cbcba-4a2d-507c-53e3-296b5c238a8e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd6cbcba-4a2d-507c-53e3-296b5c238a8e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RC.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:f06ddb64-5fa3-4b77-b166-acb36f7f6042", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1f905d99-2ab7-462c-a6b0-f709acca6c8f", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:db28735f-518f-870e-15b4-49623cbe3aa0", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/db28735f-518f-870e-15b4-49623cbe3aa0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ac01ad65-10e5-46df-bdd9-6b0cad13e1d2", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac01ad65-10e5-46df-bdd9-6b0cad13e1d2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1f7c564c-0a90-4d44-b7e1-9d456cffaee8", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-4_1", - "ACN-B2-1-DE.CM-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:7c1b1214-f927-48bf-8882-84f0af6588b1", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:b54ed75b-3e1a-44ac-a333-05ba39b99ff0", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:82339799-d096-41ae-8538-b108becf0970", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-06", - "ACN-B2-1-PR.DS-5_2", - "ACN-B2-1-PR.IP-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:6b2122c1-8120-4ff5-801b-17625a355590", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b2122c1-8120-4ff5-801b-17625a355590", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:a21f8c92-9e22-4f09-b759-50500d1d2dda", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:f6de0be7-9a8a-4b8a-b349-43cf02d22f7c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:f9d614c5-c173-4d56-95a7-b4437057d193", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c4ccd607-702b-8ae6-8eeb-fc3339cd4b42", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c4ccd607-702b-8ae6-8eeb-fc3339cd4b42", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:b954148f-4c11-4c38-8221-be76711e194a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", - "parameters": { - "operationName": { - "value": "[parameters('operationName_b954148f-4c11-4c38-8221-be76711e194a')]" - } - }, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c26596ff-4d70-4e6a-9a30-c2506bd2f80c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0e60b895-3786-45da-8377-9c6b4b6ac5f9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:098fc59e-46c7-4d99-9b16-64990e543d75", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0a370ff3-6cab-4e85-8995-295fd854c5b8", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a370ff3-6cab-4e85-8995-295fd854c5b8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:98728c90-32c7-4049-8429-847dc0f4fe37", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:2b4e134f-1e4c-2bff-573e-082d85479b6e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b4e134f-1e4c-2bff-573e-082d85479b6e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-QU.LS-4_1", - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:991310cd-e9f3-47bc-b7b6-f57b557d07db", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1b7aa243-30e4-4c9e-bca8-d0d3022b634a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:9297c21d-2ed6-4474-b48f-163f75654ce3", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:428256e6-1fac-4f48-a757-df34c2b3336d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1c6e92c9-99f0-4e55-9cf2-0c234dc48f99", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:b269a749-705e-8bff-055a-147744675cdf", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b269a749-705e-8bff-055a-147744675cdf", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:4f23967c-a74b-9a09-9dc2-f566f61a87b9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f23967c-a74b-9a09-9dc2-f566f61a87b9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:f9be5368-9bf5-4b84-9e0a-7850da98bb46", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:677e1da4-00c3-287a-563d-f4a1cf9b99a0", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/677e1da4-00c3-287a-563d-f4a1cf9b99a0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.RA-5_1", - "ACN-B2-1-ID.RA-5_2", - "ACN-B2-1-ID.RA-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:29acfac0-4bb4-121b-8283-8943198b1549", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/29acfac0-4bb4-121b-8283-8943198b1549", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:e2c1c086-2d84-4019-bff3-c44ccd95113c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1c30f9cd-b84c-49cc-aa2c-9288447cc3b3", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:fc9b3da7-8347-4380-8e70-0a0361d8dedd", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:4078e558-bda6-41fb-9b3c-361e8875200d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:28aa060e-25c7-6121-05d8-a846f11433df", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28aa060e-25c7-6121-05d8-a846f11433df", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:37546841-8ea1-5be0-214d-8ac599588332", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/37546841-8ea1-5be0-214d-8ac599588332", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-RS.RP-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:b4330a05-a843-4bc8-bf9a-cacce50c67f4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:9a1b8c48-453a-4044-86c3-d8bfd823e4f5", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0c192fe8-9cbb-4516-85b3-0ade8bd03886", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:89099bee-89e0-4b26-a5f4-165451757743", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:72650e9f-97bc-4b2a-ab5f-9781a9fcecbc", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:e4b00788-7e1c-33ec-0418-d048508e095b", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e4b00788-7e1c-33ec-0418-d048508e095b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-2_1", - "ACN-B2-1-PR.AT-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:20012034-96f0-85c2-4a86-1ae1eb457802", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/20012034-96f0-85c2-4a86-1ae1eb457802", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:59f7feff-02aa-6539-2cf7-bea75b762140", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/59f7feff-02aa-6539-2cf7-bea75b762140", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_2", - "ACN-B2-1-PR.AC-1_3", - "ACN-B2-1-PR.AC-1_4", - "ACN-B2-1-PR.AC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:83cef61d-dbd1-4b20-a4fc-5fbc7da10833", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0961003e-5a0a-4549-abde-af6a37f2724d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:501541f7-f7e7-4cd6-868c-4190fdad3ac9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:2f2ee1de-44aa-4762-b6bd-0893fc3f306d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:22bee202-a82f-4305-9a2a-6d7f44d4dedb", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d2e7ea85-6b44-4317-a0be-1b951587f626", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:af6cd1bd-1635-48cb-bde7-5b15693900b9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-4_1", - "ACN-B2-1-DE.CM-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:8dfab9c4-fe7b-49ad-85e4-1e9be085358f", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:2b05dca2-25ec-9335-495c-29155f785082", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b05dca2-25ec-9335-495c-29155f785082", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:8c5d3d8d-5cba-0def-257c-5ab9ea9644dc", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c5d3d8d-5cba-0def-257c-5ab9ea9644dc", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.RA-5_1", - "ACN-B2-1-ID.RA-5_2", - "ACN-B2-1-ID.RA-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:2913021d-f2fd-4f3d-b958-22354e2bdbcb", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c6fe3856-4635-36b6-983c-070da12a953b", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6fe3856-4635-36b6-983c-070da12a953b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d158790f-bfb0-486c-8631-2dc6b4e8e6af", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:cb8841d4-9d13-7292-1d06-ba4d68384681", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb8841d4-9d13-7292-1d06-ba4d68384681", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0e6763cc-5078-4e64-889d-ff4d9a839047", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0ec47710-77ff-4a3d-9181-6aa50af424d0", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-06", - "ACN-B2-1-PR.DS-5_2", - "ACN-B2-1-PR.IP-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:34f95f76-5386-4de7-b824-0d8478470c9d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:564feb30-bf6a-4854-b4bb-0d2d2d1e6c66", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:84245967-7882-54f6-2d34-85059f725b47", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84245967-7882-54f6-2d34-85059f725b47", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-1_1", - "ACN-B2-1-ID.GV-1_2", - "ACN-B2-1-PR.IP-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:f8a63511-66f1-503f-196d-d6217ee0823a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8a63511-66f1-503f-196d-d6217ee0823a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.RA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:22730e10-96f6-4aac-ad84-9383d35b5917", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:4da35fc9-c9e7-4960-aec9-797fe7d9051d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:bd352bd5-2853-4985-bf0d-73806b4a5744", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:48af4db5-9b8b-401c-8e74-076be876a430", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-06", - "ACN-B2-1-PR.DS-5_2", - "ACN-B2-1-PR.IP-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:245fc9df-fa96-4414-9a0b-3738c2f7341c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:399b2637-a50f-4f95-96f8-3a145476eb15", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:e9c8d085-d9cc-4b17-9cdc-059f1f01f19e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d26f7642-7545-4e18-9b75-8c9bbdee3a9a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:404c3081-a854-4457-ae30-26a93ef643f9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:630c64f9-8b6b-4c64-b511-6544ceff6fd6", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d93fe1be-13e4-421d-9c21-3158e2fa2667", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d93fe1be-13e4-421d-9c21-3158e2fa2667", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-12_1", - "ACN-B2-1-PR.IP-12_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:58a51cde-008b-1a5d-61b5-d95849770677", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58a51cde-008b-1a5d-61b5-d95849770677", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:f8d36e2f-389b-4ee4-898d-21aeb69a0f45", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:5450f5bd-9c72-4390-a9c4-a7aba4edfdd2", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1cb4d9c2-f88f-4069-bee0-dba239a57b09", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:febd0533-8e55-448f-b837-bd0e06f16469", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469", - "parameters": { - "allowedContainerImagesRegex": { - "value": "[parameters('allowedContainerImagesRegex_febd0533-8e55-448f-b837-bd0e06f16469')]" - } - }, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0a9fbe0d-c5c4-4da8-87d8-f4fd77338835", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:9c93ef57-7000-63fb-9b74-88f2e17ca5d2", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c93ef57-7000-63fb-9b74-88f2e17ca5d2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:6bededc0-2985-54d5-4158-eb8bad8070a0", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6bededc0-2985-54d5-4158-eb8bad8070a0", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-6_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:f655e522-adff-494d-95c2-52d4f6d56a42", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:a28323fe-276d-3787-32d2-cef6395764c4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a28323fe-276d-3787-32d2-cef6395764c4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:cb510bfd-1cba-4d9f-a230-cb0976f4bb71", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:3657f5a0-770e-44a3-b44e-9431ba1e9735", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c95c74d9-38fe-4f0d-af86-0c7d626a315c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:b0f33259-77d7-4c9e-aac6-3aabcfae693c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:672fe5a1-2fcd-42d7-b85d-902b6e28c6ff", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1e7fed80-8321-4605-b42c-65fc300f23a3", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:358c20a6-3f9e-4f0e-97ff-c6ce485e2aac", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:9ac8621d-9acd-55bf-9f99-ee4212cc3d85", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9ac8621d-9acd-55bf-9f99-ee4212cc3d85", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1f314764-cb73-4fc9-b863-8eca98ac36e9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:9622aaa9-5c49-40e2-5bf8-660b7cd23deb", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9622aaa9-5c49-40e2-5bf8-660b7cd23deb", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:5744710e-cc2f-4ee8-8809-3b11e89f4bc9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:bdc59948-5574-49b3-bb91-76b7c986428d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:341bc9f1-7489-07d9-4ec6-971573e1546a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/341bc9f1-7489-07d9-4ec6-971573e1546a", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1", - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:47a6b606-51aa-4496-8bb7-64b11cf66adc", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:8c122334-9d20-4eb8-89ea-ac9a705b74ae", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:9daedab3-fb2d-461e-b861-71790eead4f6", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:cf820ca0-f99e-4f3e-84fb-66e913812d21", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:95edb821-ddaf-4404-9732-666045e056b4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:b2ea1058-8998-3dd1-84f1-82132ad482fd", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b2ea1058-8998-3dd1-84f1-82132ad482fd", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-1_1", - "ACN-B2-1-ID.GV-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c5447c04-a4d7-4ba8-a263-c9ee321a6858", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858", - "parameters": { - "operationName": { - "value": "[parameters('operationName_c5447c04-a4d7-4ba8-a263-c9ee321a6858')]" - } - }, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:fbb99e8e-e444-4da0-9ff1-75c92f5a85b2", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:eaebaea7-8013-4ceb-9d14-7eb32271373c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:9f061a12-e40d-4183-a00e-171812443373", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:f26af0b1-65b6-689a-a03f-352ad2d00f98", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f26af0b1-65b6-689a-a03f-352ad2d00f98", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:06a78e20-9358-41c9-923c-fb736d382a4d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:842c54e8-c2f9-4d79-ae8d-38d8b8019373", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:7805a343-275c-41be-9d62-7215b96212d8", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7805a343-275c-41be-9d62-7215b96212d8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:df49d893-a74c-421d-bc95-c663042e5b80", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c3d20c29-b36d-48fe-808b-99a87530ad99", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1dbd51c2-2bd1-5e26-75ba-ed075d8f0d68", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1dbd51c2-2bd1-5e26-75ba-ed075d8f0d68", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2", - "ACN-B2-1-ID.RA-5_1", - "ACN-B2-1-ID.RA-5_2", - "ACN-B2-1-ID.RA-5_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:04c4380f-3fae-46e8-96c9-30193528f602", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:e345eecc-fa47-480f-9e88-67dcc122b164", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164", - "parameters": { - "cpuLimit": { - "value": "[parameters('cpuLimit_e345eecc-fa47-480f-9e88-67dcc122b164')]" - }, - "memoryLimit": { - "value": "[parameters('memoryLimit_e345eecc-fa47-480f-9e88-67dcc122b164')]" - } - }, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-4_1", - "ACN-B2-1-DE.CM-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:aa633080-8b72-40c4-a2d7-d00c03e80bed", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d661e9eb-4e15-5ba1-6f02-cdc467db0d6c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d661e9eb-4e15-5ba1-6f02-cdc467db0d6c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:516be556-1353-080d-2c2f-f46f000d5785", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/516be556-1353-080d-2c2f-f46f000d5785", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0a15ec92-a229-4763-bb14-0ea34a568f8d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:6fac406b-40ca-413b-bf8e-0bf964659c25", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:518eafdd-08e5-37a9-795b-15a8d798056d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/518eafdd-08e5-37a9-795b-15a8d798056d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:308fbb08-4ab8-4e67-9b29-592e93fb94fa", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:3b980d31-7904-4bb7-8575-5665739a8052", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052", - "parameters": { - "operationName": { - "value": "[parameters('operationName_3b980d31-7904-4bb7-8575-5665739a8052')]" - } - }, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ba769a63-b8cc-4b2d-abf6-ac33c7204be8", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:bd4dc286-2f30-5b95-777c-681f3a7913d3", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd4dc286-2f30-5b95-777c-681f3a7913d3", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-3_2", - "ACN-B2-1-PR.IP-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ae89ebca-1c92-4898-ac2c-9f63decb045c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:bed48b13-6647-468e-aa2f-1af1d3f4dd40", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:e6f7b584-877a-0d69-77d4-ab8b923a9650", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6f7b584-877a-0d69-77d4-ab8b923a9650", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-4_2", - "ACN-B2-1-PR.AC-4_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c0e996f8-39cf-4af9-9f45-83fbde810432", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432", - "parameters": { - "approvedExtensions": { - "value": "[parameters('approvedExtensions_c0e996f8-39cf-4af9-9f45-83fbde810432')]" - } - }, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:1cb7bf71-841c-4741-438a-67c65fdd7194", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1cb7bf71-841c-4741-438a-67c65fdd7194", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d9edcea6-6cb8-0266-a48c-2061fbac4310", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9edcea6-6cb8-0266-a48c-2061fbac4310", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:7ded6497-815d-6506-242b-e043e0273928", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7ded6497-815d-6506-242b-e043e0273928", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.IP-9_1", - "ACN-B2-1-PR.IP-9_2", - "ACN-B2-1-PR.IP-9_3", - "ACN-B2-1-PR.IP-9_4", - "ACN-B2-1-PR.IP-9_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d36700f2-2f0d-7c2a-059c-bdadd1d79f70", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d36700f2-2f0d-7c2a-059c-bdadd1d79f70", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:423dd1ba-798e-40e4-9c4d-b6902674b423", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:475aae12-b88a-4572-8b36-9b712b2b3a17", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:7b28ba4f-0a87-46ac-62e1-46b7c09202a8", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7b28ba4f-0a87-46ac-62e1-46b7c09202a8", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d7c1ecc3-2980-a079-1569-91aec8ac4a77", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7c1ecc3-2980-a079-1569-91aec8ac4a77", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-4_1", - "ACN-B2-1-ID.GV-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:bb91dfba-c30d-4263-9add-9c2384e659a6", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:5bb220d9-2698-4ee4-8404-b9c30c9df609", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:524e7136-9f6a-75ba-9089-501018151346", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/524e7136-9f6a-75ba-9089-501018151346", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_2", - "ACN-B2-1-PR.AT-2_1", - "ACN-B2-1-PR.AT-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:26a828e1-e88f-464e-bbb3-c134a282b9de", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-4_1", - "ACN-B2-1-DE.CM-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:383856f8-de7f-44a2-81fc-e5135b5c2aa4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:18adea5e-f416-4d0f-8aa8-d24321e3e274", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:e71308d3-144b-4262-b144-efdc3cc90517", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-5_1", - "ACN-B2-1-PR.AC-5_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0820b7b9-23aa-4725-a1ce-ae4558f718e5", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:e802a67a-daf5-4436-9ea6-f6d821dd0c5d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:511f5417-5d12-434d-ab2e-816901e72a5e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:0f4fa857-079d-9d3d-5c49-21f616189e03", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0f4fa857-079d-9d3d-5c49-21f616189e03", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:233a2a17-77ca-4fb1-9b6b-69223d272a44", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44", - "parameters": { - "allowedServicePortsList": { - "value": "[parameters('allowedServicePortsList_233a2a17-77ca-4fb1-9b6b-69223d272a44')]" - } - }, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:91a78b24-f231-4a8a-8da9-02c35b2b6510", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:617c02be-7f02-4efd-8836-3180d47b6c68", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:95bccee9-a7f8-4bec-9ee9-62c3473701fc", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AC-3_1", - "ACN-B2-1-PR.AC-3_2", - "ACN-B2-1-PR.AC-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:057ef27e-665e-4328-8ea3-04b3122bd9fb", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_1", - "ACN-B2-1-DE.AE-3_2", - "ACN-B2-1-DE.AE-3_3", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:4c385143-09fd-3a34-790c-a5fd9ec77ddc", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4c385143-09fd-3a34-790c-a5fd9ec77ddc", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1", - "ACN-B2-1-PR.AT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:a830fe9e-08c9-a4fb-420c-6f6bf1702395", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a830fe9e-08c9-a4fb-420c-6f6bf1702395", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:055aa869-bc98-4af8-bafc-23f1ab6ffe2c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:82985f06-dc18-4a48-bc1c-b9f4f0098cfe", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:b8689b2e-4308-a58b-a0b4-6f3343a000df", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b8689b2e-4308-a58b-a0b4-6f3343a000df", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.DP-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:013e242c-8828-4970-87b3-ab247555486d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-B2.T1-06", - "ACN-B2-1-PR.DS-5_2", - "ACN-B2-1-PR.IP-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:a4fe33eb-e377-4efb-ab31-0784311bc499", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:676c3c35-3c36-612c-9523-36d266a65000", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/676c3c35-3c36-612c-9523-36d266a65000", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.AT-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:a3a6ea0c-e018-4933-9ef0-5aaa1501449b", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_2", - "ACN-B2-1-DE.CM-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:c9d007d0-c057-4772-b18c-01e546713bcd", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:a1840de2-8088-4ea8-b153-b4c723e9cb01", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:6581d072-105e-4418-827f-bd446d56421b", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:af227964-5b8b-22a2-9364-06d2cb9d6d7c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af227964-5b8b-22a2-9364-06d2cb9d6d7c", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.GV-1_1", - "ACN-B2-1-ID.GV-1_2", - "ACN-B2-1-PR.MA-1_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.AE-3_4", - "ACN-B2-1-DE.AE-3_5", - "ACN-B2-1-DE.AE-3_6", - "ACN-B2-1-DE.AE-3_7", - "ACN-B2-1-DE.AE-3_8", - "ACN-B2-1-PR.PT-1_1", - "ACN-B2-1-PR.PT-1_2", - "ACN-B2-1-QU.LS-4_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:67121cc7-ff39-4ab8-b7e3-95b84dab487d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:123a3936-f020-408a-ba0c-47873faf1534", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-ID.AM-2_1", - "ACN-B2-1-ID.AM-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:b7ddfbdc-1260-477d-91fd-98bd9be789a6", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:a4af4a39-4135-47fb-b175-47fbdf85311d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:5752e6d6-1206-46d8-8ab1-ecc2f71a8112", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-IP.PO-2_1", - "ACN-B2-1-IP.PO-2_2", - "ACN-B2-1-IP.PO-2_3", - "ACN-B2-1-PR.DS-1_1", - "ACN-B2-1-PR.DS-1_2", - "ACN-B2-1-PR.DS-1_3", - "ACN-B2-1-PR.DS-1_4", - "ACN-B2-1-PR.DS-1_5", - "ACN-B2-1-PR.DS-1_6", - "ACN-B2-1-PR.DS-2_1", - "ACN-B2-1-PR.IP-4_2", - "ACN-B2-1-PR.IP-4_3", - "ACN-B2-1-PR.IP-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-1:7fe3b40f-802b-4cdd-8bd4-fd799c948cc2", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2", - "parameters": {}, - "groupNames": [ - "ACN-B2-1-DE.CM-1_1", - "ACN-B2-1-DE.DP-1_4", - "ACN-B2-1-QU.LS-4_1" - ] + "namespaces": { + "value": "[parameters('namespaces-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "8.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d" + }, + { + "policyDefinitionReferenceId": "Enforce SSL connection should be enabled for PostgreSQL database servers", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af" + }, + { + "policyDefinitionReferenceId": "Function apps should require FTPS only", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15" + }, + { + "policyDefinitionReferenceId": "Secure transfer to storage accounts should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9" + }, + { + "policyDefinitionReferenceId": "Automation account variables should be encrypted", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735" + }, + { + "policyDefinitionReferenceId": "Key vaults should have soft delete enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d" + }, + { + "policyDefinitionReferenceId": "Storage account containing the container with activity logs must be encrypted with BYOK", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2" + }, + { + "policyDefinitionReferenceId": "Define organizational requirements for cryptographic key management", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d661e9eb-4e15-5ba1-6f02-cdc467db0d6c" + }, + { + "policyDefinitionReferenceId": "Storage accounts should use customer-managed key for encryption", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25" + }, + { + "policyDefinitionReferenceId": "Azure Machine Learning workspaces should be encrypted with a customer-managed key", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8" + }, + { + "policyDefinitionReferenceId": "PostgreSQL servers should use customer-managed keys to encrypt data at rest", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274" + }, + { + "policyDefinitionReferenceId": "Enforce SSL connection should be enabled for MySQL database servers", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d" + }, + { + "policyDefinitionReferenceId": "Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68" + }, + { + "policyDefinitionReferenceId": "Azure AI Services resources should encrypt data at rest with a customer-managed key (CMK)", + "parameters": { + "excludedKinds": { + "value": "[parameters('excludedKinds-1')]" + } + }, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d" + }, + { + "policyDefinitionReferenceId": "App Service apps should only be accessible over HTTPS", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d" + }, + { + "policyDefinitionReferenceId": "Windows machines should be configured to use secure communication protocols", + "parameters": { + "MinimumTLSVersion": { + "value": "[parameters('MinimumTLSVersion-1')]" + }, + "IncludeArcMachines": { + "value": "[parameters('IncludeArcMachines-1')]" } - ] + }, + "groupNames": [ + "ACN_B2_1_PR.DS_1_1", + "ACN_B2_1_PR.DS_1_2", + "ACN_B2_1_PR.DS_1_3", + "ACN_B2_1_PR.DS_1_4", + "ACN_B2_1_PR.DS_1_5", + "ACN_B2_1_PR.DS_1_6", + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "4.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1641 - Transmission Confidentiality And Integrity - Cryptographic Or Alternate Physical Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_2_1", + "ACN_B2_1_PR.DS_6_1", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a", + "policyDefinitionReferenceId": "Microsoft Managed Control 1646 - Cryptographic Key Establishment And Management - Asymmetric Keys", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4", + "policyDefinitionReferenceId": "Microsoft Managed Control 1431 - Media Storage", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1432 - Media Storage", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953", + "policyDefinitionReferenceId": "Microsoft Managed Control 1440 - Media Sanitization And Disposal - Review - Approve - Track - Document - Verify", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1836 - Data Retention And Disposal", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_3_1", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5bef3414-50bc-4fc0-b3db-372bb8fe0796" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f", + "policyDefinitionReferenceId": "Microsoft Managed Control 1434 - Media Transport", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6", + "policyDefinitionReferenceId": "Microsoft Managed Control 1438 - Media Sanitization And Disposal", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45", + "policyDefinitionReferenceId": "Microsoft Managed Control 1439 - Media Sanitization And Disposal", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65", + "policyDefinitionReferenceId": "Microsoft Managed Control 1433 - Media Transport", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_5_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335", + "policyDefinitionReferenceId": "Microsoft Managed Control 1697 - Information System Monitoring - Analyze Traffic - Covert Exfiltration", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_5_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2", + "policyDefinitionReferenceId": "Microsoft Managed Control 1632 - Boundary Protection - Prevent Split Tunneling For Remote Devices", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_5_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341", + "policyDefinitionReferenceId": "Microsoft Managed Control 1626 - Boundary Protection - External Telecommunications Services", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1634 - Boundary Protection - Prevent Unauthorized Exfiltration", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_5_1", + "ACN_B2_1_PR.DS_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_5_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605", + "policyDefinitionReferenceId": "Microsoft Managed Control 1625 - Boundary Protection - Access Points", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_5_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a", + "policyDefinitionReferenceId": "Microsoft Managed Control 1633 - Boundary Protection - Route Traffic To Authenticated Proxy Servers", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Geo-redundant backup should be enabled for Azure Database for MySQL", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_5_2", + "ACN_B2_1_PR.IP_4_1", + "ACN_B2_1_B2.T1_06_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970" + }, + { + "policyDefinitionReferenceId": "Conduct backup of information system documentation", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_5_2", + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b269a749-705e-8bff-055a-147744675cdf" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_5_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f23967c-a74b-9a09-9dc2-f566f61a87b9", + "policyDefinitionReferenceId": "Establish backup policies and procedures", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Geo-redundant backup should be enabled for Azure Database for MariaDB", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_5_2", + "ACN_B2_1_PR.IP_4_1", + "ACN_B2_1_B2.T1_06_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0" + }, + { + "policyDefinitionReferenceId": "Geo-redundant backup should be enabled for Azure Database for PostgreSQL", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_5_2", + "ACN_B2_1_PR.IP_4_1", + "ACN_B2_1_B2.T1_06_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430" + }, + { + "policyDefinitionReferenceId": "Azure Backup should be enabled for Virtual Machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.DS_5_2", + "ACN_B2_1_PR.IP_4_1", + "ACN_B2_1_B2.T1_06_1" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_6_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86cd0591-5076-4447-aeff-2557def90353", + "policyDefinitionReferenceId": "Microsoft Managed Control 1827 - Data Integrity And Data Integrity Board", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_6_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945", + "policyDefinitionReferenceId": "Microsoft Managed Control 1599 - Developer Configuration Management - Software - Firmware Integrity Verification", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_6_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0", + "policyDefinitionReferenceId": "Microsoft Managed Control 1713 - Software & Information Integrity - Integrity Checks", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_6_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0", + "policyDefinitionReferenceId": "Microsoft Managed Control 1712 - Software & Information Integrity", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_6_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/51f2fa3e-cd5f-4713-a9ce-177ee7a22d48", + "policyDefinitionReferenceId": "Microsoft Managed Control 1828 - Data Integrity And Data Integrity Board", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_6_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/db28735f-518f-870e-15b4-49623cbe3aa0", + "policyDefinitionReferenceId": "Verify software- firmware and information integrity", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_6_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6bededc0-2985-54d5-4158-eb8bad8070a0", + "policyDefinitionReferenceId": "Review and update information integrity policies and procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_7_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1", + "policyDefinitionReferenceId": "Microsoft Managed Control 1201 - Security Impact Analysis - Separate Test Environments", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.DS_7_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c", + "policyDefinitionReferenceId": "Microsoft Managed Control 1197 - Configuration Change Control - Test - Validate - Document Changes", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1564 - System Development Life Cycle", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_1_1", + "ACN_B2_1_B2.T1_04_1", + "ACN_B2_1_B2.T1_05_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1565 - System Development Life Cycle", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5", + "policyDefinitionReferenceId": "Microsoft Managed Control 1612 - Developer Security Architecture And Design", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7", + "policyDefinitionReferenceId": "Microsoft Managed Control 1191 - Configuration Change Control - Automated Document - Notification - Prohibition Of Changes", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50", + "policyDefinitionReferenceId": "Microsoft Managed Control 1211 - Configuration Settings", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1209 - Configuration Settings", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd", + "policyDefinitionReferenceId": "Microsoft Managed Control 1176 - Baseline Configuration", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20", + "policyDefinitionReferenceId": "Microsoft Managed Control 1184 - Configuration Change Control", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1231 - Configuration Management Plan", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1186 - Configuration Change Control", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272", + "policyDefinitionReferenceId": "Microsoft Managed Control 1232 - Configuration Management Plan", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1185 - Configuration Change Control", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_3_1", + "ACN_B2_1_PR.IP_3_2", + "ACN_B2_1_PR.IP_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1189 - Configuration Change Control", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e", + "policyDefinitionReferenceId": "Microsoft Managed Control 1199 - Configuration Change Control - Cryptography Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892", + "policyDefinitionReferenceId": "Microsoft Managed Control 1190 - Configuration Change Control", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85", + "policyDefinitionReferenceId": "Microsoft Managed Control 1187 - Configuration Change Control", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1181 - Baseline Configuration - Retention Of Previous Configurations", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_3_2", + "ACN_B2_1_PR.IP_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1210 - Configuration Settings", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_3_2", + "ACN_B2_1_PR.IP_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8" + }, + { + "policyDefinitionReferenceId": "Establish and document change control processes", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_3_2", + "ACN_B2_1_PR.IP_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd4dc286-2f30-5b95-777c-681f3a7913d3" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1289 - Information System Backup", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1242 - Contingency Planning Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_1", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3", + "ACN_B2_1_RC.RP_1_1", + "ACN_B2_1_B2.T1_01_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1288 - Information System Backup", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1287 - Information System Backup", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_1", + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1290 - Information System Backup", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1294 - Information System Backup - Transfer To Alternate Storage Site", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1269 - Alternate Storage Site - Separation From Primary Site", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1293 - Information System Backup - Separate Storage For Critical Information", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1292 - Information System Backup - Test Restoration Using Sampling", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_B2.T1_06_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1291 - Information System Backup - Testing For Reliability - Integrity", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_4_2", + "ACN_B2_1_PR.IP_4_3", + "ACN_B2_1_PR.IP_4_4", + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1362 - Incident Handling", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1359 - Incident Response Testing - Coordination With Related Plans", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_RS.RP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1259 - Contingency Training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1255 - Contingency Plan - Continue Essential Missions - Business Functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1251 - Contingency Plan - Coordinate With Related Plans", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3", + "ACN_B2_1_RC.RP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1297 - Information System Recovery And Reconstitution - Restore Within Time Period", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1360 - Incident Handling", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_RS.RP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1260 - Contingency Training - Simulated Events", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1264 - Contingency Plan Testing - Coordinate With Related Plans", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3", + "ACN_B2_1_RS.CO_1_1", + "ACN_B2_1_RS.CO_1_2", + "ACN_B2_1_RS.CO_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1256 - Contingency Plan - Identify Critical Assets", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1352 - Incident Response Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1358 - Incident Response Testing", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1261 - Contingency Plan Testing", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_RS.CO_1_1", + "ACN_B2_1_RS.CO_1_2", + "ACN_B2_1_RS.CO_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1257 - Contingency Training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1253 - Contingency Plan - Resume Essential Missions - Business Functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5", + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1258 - Contingency Training", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff" + }, + { + "policyDefinitionReferenceId": "Perform a business impact assessment and application criticality assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb8841d4-9d13-7292-1d06-ba4d68384681" + }, + { + "policyDefinitionReferenceId": "Test the business continuity and disaster recovery plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58a51cde-008b-1a5d-61b5-d95849770677" + }, + { + "policyDefinitionReferenceId": "Plan for continuance of essential business functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9edcea6-6cb8-0266-a48c-2061fbac4310" + }, + { + "policyDefinitionReferenceId": "Plan for resumption of essential business functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_9_1", + "ACN_B2_1_PR.IP_9_2", + "ACN_B2_1_PR.IP_9_3", + "ACN_B2_1_PR.IP_9_4", + "ACN_B2_1_PR.IP_9_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7ded6497-815d-6506-242b-e043e0273928" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_12_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e", + "policyDefinitionReferenceId": "Microsoft Managed Control 1143 - Certification- Authorization- Security Assessment Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1142 - Certification- Authorization- Security Assessment Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_12_1", + "ACN_B2_1_RS.AN_5_1", + "ACN_B2_1_RS.AN_5_2", + "ACN_B2_1_RS.AN_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147" + }, + { + "policyDefinitionReferenceId": "Implement plans of action and milestones for security program process", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_12_1", + "ACN_B2_1_PR.IP_12_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d93fe1be-13e4-421d-9c21-3158e2fa2667" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_12_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da", + "policyDefinitionReferenceId": "Microsoft Managed Control 1552 - Vulnerability Scanning - Update By Frequency - Prior To New Scan - When Identified", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1677 - Malicious Code Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_12_2", + "ACN_B2_1_DE.CM_4_1", + "ACN_B2_1_DE.CM_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923" + }, + { + "groupNames": [ + "ACN_B2_1_PR.IP_12_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7", + "policyDefinitionReferenceId": "Microsoft Managed Control 1551 - Vulnerability Scanning - Update Tool Capability", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1681 - Malicious Code Protection - Automatic Updates", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.IP_12_2", + "ACN_B2_1_DE.CM_4_1", + "ACN_B2_1_DE.CM_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6", + "policyDefinitionReferenceId": "Microsoft Managed Control 1421 - Maintenance Personnel", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1411 - Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3", + "policyDefinitionReferenceId": "Microsoft Managed Control 1399 - Controlled Maintenance", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa", + "policyDefinitionReferenceId": "Microsoft Managed Control 1406 - Maintenance Tools - Inspect Media", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6", + "policyDefinitionReferenceId": "Microsoft Managed Control 1409 - Maintenance Tools - Prevent Unauthorized Removal", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2", + "policyDefinitionReferenceId": "Microsoft Managed Control 1408 - Maintenance Tools - Prevent Unauthorized Removal", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424", + "policyDefinitionReferenceId": "Microsoft Managed Control 1400 - Controlled Maintenance", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20", + "policyDefinitionReferenceId": "Microsoft Managed Control 1423 - Maintenance Personnel - Individuals Without Appropriate Access", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be", + "policyDefinitionReferenceId": "Microsoft Managed Control 1410 - Maintenance Tools - Prevent Unauthorized Removal", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11", + "policyDefinitionReferenceId": "Microsoft Managed Control 1422 - Maintenance Personnel", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1412 - Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1405 - Maintenance Tools - Inspect Tools", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283", + "policyDefinitionReferenceId": "Microsoft Managed Control 1424 - Maintenance Personnel - Individuals Without Appropriate Access", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7", + "policyDefinitionReferenceId": "Microsoft Managed Control 1403 - Controlled Maintenance - Automated Maintenance Activities", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1404 - Maintenance Tools", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1418 - Remote Maintenance - Comparable Security - Sanitization", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976", + "policyDefinitionReferenceId": "Microsoft Managed Control 1407 - Maintenance Tools - Prevent Unauthorized Removal", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1425 - Timely Maintenance", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1417 - Remote Maintenance - Comparable Security - Sanitization", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404", + "policyDefinitionReferenceId": "Microsoft Managed Control 1420 - Maintenance Personnel", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1413 - Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1414 - Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1416 - Remote Maintenance - Document Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94", + "policyDefinitionReferenceId": "Microsoft Managed Control 1394 - System Maintenance Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847", + "policyDefinitionReferenceId": "Microsoft Managed Control 1401 - Controlled Maintenance", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9", + "policyDefinitionReferenceId": "Microsoft Managed Control 1402 - Controlled Maintenance - Automated Maintenance Activities", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_PR.MA_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f", + "policyDefinitionReferenceId": "Microsoft Managed Control 1396 - Controlled Maintenance", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1415 - Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1419 - Remote Maintenance - Cryptographic Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_1_1", + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1526 - Access Agreements", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1066 - Remote Access - Disconnect - Disable Access", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.MA_2_1", + "ACN_B2_1_PR.MA_2_2", + "ACN_B2_1_PR.MA_2_3", + "ACN_B2_1_PR.MA_2_4", + "ACN_B2_1_PR.MA_2_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1139 - Audit Generation", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1135 - Non-Repudiation", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1132 - Protection Of Audit Information - Audit Backup On Separate Physical Systems - Components", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1113 - Response To Audit Processing Failures - Audit Storage Capacity", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1136 - Audit Record Retention", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1131 - Protection Of Audit Information", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1133 - Protection Of Audit Information - Cryptographic Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1110 - Audit Storage Capacity", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7" + }, + { + "policyDefinitionReferenceId": "SQL servers with auditing to storage account destination should be configured with 90 days retention or higher", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743" + }, + { + "policyDefinitionReferenceId": "Review account provisioning logs", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_1_1", + "ACN_B2_1_PR.PT_1_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a830fe9e-08c9-a4fb-420c-6f6bf1702395" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1247 - Contingency Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1265 - Contingency Plan Testing - Alternate Processing Site", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1282 - Telecommunications Services - Single Points Of Failure", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1266 - Contingency Plan Testing - Alternate Processing Site", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1252 - Contingency Plan - Capacity Planning", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1275 - Alternate Processing Site - Separation From Primary Site", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1254 - Contingency Plan - Resume All Missions - Business Functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1267 - Alternate Storage Site", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1246 - Contingency Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1742 - Critical Infrastructure Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d461dd50-c8fb-4ccb-93bf-61f53b44e54d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1283 - Telecommunications Services - Separation Of Primary - Alternate Providers", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1244 - Contingency Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3", + "ACN_B2_1_RC.RP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1295 - Information System Recovery And Reconstitution", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_PR.PT_5_1", + "ACN_B2_1_PR.PT_5_2", + "ACN_B2_1_PR.PT_5_3", + "ACN_B2_1_RC.RP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1698 - Information System Monitoring - Individuals Posing Greater Risk", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1702 - Information System Monitoring - Indicators Of Compromise", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1689 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1684 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1705 - Security Alerts & Advisories", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_RS.CO_5_1", + "ACN_B2_1_RS.CO_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1683 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3", + "ACN_B2_1_RS.AN_5_1", + "ACN_B2_1_RS.AN_5_2", + "ACN_B2_1_RS.AN_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1695 - Information System Monitoring - Wireless Intrusion Detection", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1690 - Information System Monitoring - System-Wide Intrusion Detection System", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1688 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f" + }, + { + "policyDefinitionReferenceId": "Endpoint protection should be installed on your machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_4_1", + "ACN_B2_1_DE.CM_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8" + }, + { + "policyDefinitionReferenceId": "Vulnerability assessment should be enabled on SQL Managed Instance", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a" + }, + { + "policyDefinitionReferenceId": "A vulnerability assessment solution should be enabled on your virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9" + }, + { + "policyDefinitionReferenceId": "Monitor missing Endpoint Protection in Azure Security Center", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_4_1", + "ACN_B2_1_DE.CM_4_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9" + }, + { + "policyDefinitionReferenceId": "Endpoint protection health issues should be resolved on your machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_4_1", + "ACN_B2_1_DE.CM_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2" + }, + { + "policyDefinitionReferenceId": "Endpoint protection solution should be installed on virtual machine scale sets", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_4_1", + "ACN_B2_1_DE.CM_4_2" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de" + }, + { + "policyDefinitionReferenceId": "Vulnerability assessment should be enabled on your SQL servers", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_1", + "ACN_B2_1_DE.AE_3_2", + "ACN_B2_1_DE.AE_3_3", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1115 - Audit Review- Analysis- And Reporting", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1137 - Audit Generation", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.AE_3_4", + "ACN_B2_1_DE.AE_3_5", + "ACN_B2_1_DE.AE_3_6", + "ACN_B2_1_DE.AE_3_7", + "ACN_B2_1_DE.AE_3_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c" + }, + { + "policyDefinitionReferenceId": "Web Application Firewall (WAF) should be enabled for Application Gateway", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66" + }, + { + "policyDefinitionReferenceId": "Azure Web Application Firewall should be enabled for Azure Front Door entry-points", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_1", + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1111 - Response To Audit Processing Failures", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1693 - Information System Monitoring - System-Generated Alerts", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1685 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1691 - Information System Monitoring - Automated Tools For Real-Time Analysis", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1119 - Audit Review- Analysis- And Reporting - Central Review And Analysis", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1373 - Incident Reporting - Automated Reporting", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1369 - Incident Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1694 - Information System Monitoring - Analyze Communications Traffic Anomalies", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0" + }, + { + "policyDefinitionReferenceId": "[Preview]: Log Analytics extension should be installed on your Linux Azure Arc machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373" + }, + { + "policyDefinitionReferenceId": "Auto provisioning of the Log Analytics agent should be enabled on your subscription", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17" + }, + { + "policyDefinitionReferenceId": "[Preview]: Log Analytics extension should be installed on your Windows Azure Arc machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.CM_1_2", + "ACN_B2_1_DE.CM_1_3" + ], + "definitionVersion": "1.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e" + }, + { + "groupNames": [ + "ACN_B2_1_DE.CM_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1676 - Malicious Code Protection", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_DE.CM_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38", + "policyDefinitionReferenceId": "Microsoft Managed Control 1680 - Malicious Code Protection - Central Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_DE.CM_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7", + "policyDefinitionReferenceId": "Microsoft Managed Control 1678 - Malicious Code Protection", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_DE.CM_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88", + "policyDefinitionReferenceId": "Microsoft Managed Control 1679 - Malicious Code Protection", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_DE.CM_4_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198", + "policyDefinitionReferenceId": "Microsoft Managed Control 1682 - Malicious Code Protection - Nonsignature-Based Detection", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1382 - Incident Response Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.DP_1_1", + "ACN_B2_1_DE.DP_1_2", + "ACN_B2_1_DE.DP_1_3", + "ACN_B2_1_RS.RP_1_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1372 - Incident Reporting", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.DP_1_4", + "ACN_B2_1_RS.CO_5_1", + "ACN_B2_1_RS.CO_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726" + }, + { + "groupNames": [ + "ACN_B2_1_DE.DP_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417", + "policyDefinitionReferenceId": "Microsoft Managed Control 1371 - Incident Reporting", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1378 - Incident Response Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_DE.DP_1_4", + "ACN_B2_1_RS.RP_1_1", + "ACN_B2_1_RS.CO_1_1", + "ACN_B2_1_RS.CO_1_2", + "ACN_B2_1_RS.CO_1_3", + "ACN_B2_1_B2.T1_03_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d" + }, + { + "groupNames": [ + "ACN_B2_1_DE.DP_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/171e377b-5224-4a97-1eaa-62a3b5231dac", + "policyDefinitionReferenceId": "Generate internal security alerts", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_DE.DP_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c93ef57-7000-63fb-9b74-88f2e17ca5d2", + "policyDefinitionReferenceId": "Disseminate security alerts to personnel", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_DE.DP_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0f4fa857-079d-9d3d-5c49-21f616189e03", + "policyDefinitionReferenceId": "Provide real-time alerts for audit event failures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_DE.DP_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b8689b2e-4308-a58b-a0b4-6f3343a000df", + "policyDefinitionReferenceId": "Use automated mechanisms for security alerts", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_RS.RP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd", + "policyDefinitionReferenceId": "Microsoft Managed Control 1363 - Incident Handling - Automated Incident Handling Processes", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_RS.RP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde", + "policyDefinitionReferenceId": "Microsoft Managed Control 1711 - Security Functionality Verification", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_RS.RP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67", + "policyDefinitionReferenceId": "Microsoft Managed Control 1361 - Incident Handling", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_RS.RP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc", + "policyDefinitionReferenceId": "Microsoft Managed Control 1366 - Incident Handling - Information Correlation", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_RS.RP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5", + "policyDefinitionReferenceId": "Microsoft Managed Control 1365 - Incident Handling - Continuity Of Operations", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_RS.RP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab", + "policyDefinitionReferenceId": "Microsoft Managed Control 1381 - Incident Response Plan", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_1_RS.RP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/37546841-8ea1-5be0-214d-8ac599588332", + "policyDefinitionReferenceId": "Maintain incident response plan", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1263 - Contingency Plan Testing", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_RS.CO_1_1", + "ACN_B2_1_RS.CO_1_2", + "ACN_B2_1_RS.CO_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1756 - Contacts With Security Groups And Associations", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_RS.CO_5_1", + "ACN_B2_1_RS.CO_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d4de5955-e00f-414d-9c16-f569c6a99c10" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1757 - Contacts With Security Groups And Associations", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_RS.CO_5_1", + "ACN_B2_1_RS.CO_5_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6c657baf-0693-455a-8bb2-7b4bdf79fd0e" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1547 - Vulnerability Scanning", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_RS.AN_5_1", + "ACN_B2_1_RS.AN_5_2", + "ACN_B2_1_RS.AN_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1149 - Security Assessments - Specialized Assessments", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_RS.AN_5_1", + "ACN_B2_1_RS.AN_5_2", + "ACN_B2_1_RS.AN_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1161 - Continuous Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_RS.AN_5_1", + "ACN_B2_1_RS.AN_5_2", + "ACN_B2_1_RS.AN_5_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a" + }, + { + "groupNames": [ + "ACN_B2_1_RC.RP_1_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd6cbcba-4a2d-507c-53e3-296b5c238a8e", + "policyDefinitionReferenceId": "Develop and document a business continuity and disaster recovery plan", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1835 - Data Retention And Disposal", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/56a838e0-0a5d-49a8-ab74-bf6be81b32f5" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1837 - Data Retention And Disposal - System Configuration", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7d66d05-bf34-4555-b5f2-8b749def4098" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1834 - Data Retention And Disposal", + "parameters": {}, + "groupNames": [ + "ACN_B2_1_IP.PO_2_1", + "ACN_B2_1_IP.PO_2_2", + "ACN_B2_1_IP.PO_2_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12a4a4dd-6c65-4900-9d7e-63fed5da791e" + } + ] }, - "id": "providers/Microsoft.Authorization/policySetDefinitions/ACN-B2-1-QC1-Ordinari", - "type": "Microsoft.Authorization/policySetDefinitions", - "name": "ACN-B2-1-QC1-Ordinari" -} \ No newline at end of file + "id": "/providers/Microsoft.Authorization/policySetDefinitions/e33583f6-3cb9-493a-adb9-00607d27691e", + "name": "e33583f6-3cb9-493a-adb9-00607d27691e" + } + \ No newline at end of file diff --git a/PolicyInitiatives/ACN/Initiative B2_2_Critici.json b/PolicyInitiatives/ACN/Initiative B2_2_Critici.json index 612705a..76f9236 100644 --- a/PolicyInitiatives/ACN/Initiative B2_2_Critici.json +++ b/PolicyInitiatives/ACN/Initiative B2_2_Critici.json @@ -1,2932 +1,3193 @@ { "properties": { - "displayName": "ACN_B2_2_QC2_Critici", - "policyType": "Custom", - "description": "This initiative includes policies that address the ACN controls for Qualifications QC2.", - "metadata": { - "version": "1.1.0", - "category": "Regulatory Compliance" - }, - "policyDefinitionGroups": [ - { - "name": "ACN-B2-2-ID.GV-1_3", - "displayName": "ACN-B2-2-ID.GV-1_3", - "description": "Governance (ID.GV): Le politiche, le procedure e i processi per gestire e monitorare i requisiti dell'organizzazione (organizzativi, legali, relativi al rischio, ambientali) sono compresi e utilizzati nella gestione del rischio di cybersecurity | [ID.GV-1] È identificata e resa nota una policy di cybersecurity | [3] Ogni scostamento dai livelli minimi di sicurezza definito internamente nel documento di cui al punto 1 deve essere identificato, gestito ed eventualmente autorizzato dal soggetto attraverso un processo di governance strutturato" - }, - { - "name": "ACN-B2-2-ID.GV-1_4", - "displayName": "ACN-B2-2-ID.GV-1_4", - "description": "Governance (ID.GV): Le politiche, le procedure e i processi per gestire e monitorare i requisiti dell'organizzazione (organizzativi, legali, relativi al rischio, ambientali) sono compresi e utilizzati nella gestione del rischio di cybersecurity | [ID.GV-1] È identificata e resa nota una policy di cybersecurity | [4] Esiste un documento aggiornato recante indicazioni in merito alla pianificazione, ai ruoli, all'implementazione, operazione, valutazione, e miglioramento di programmi di cybersecurity sia in relazione al personale interno che per eventuali terze parti" - }, - { - "name": "ACN-B2-2-ID.RA-1_3", - "displayName": "ACN-B2-2-ID.RA-1_3", - "description": "Risk Assessment (ID.RA): L'impresa comprende il rischio di cybersecurity inerente all’operatività dell'organizzazione (incluse la mission, le funzioni, l'immagine o la reputazione), gli asset e gli individui | [ID.RA-1] Le vulnerabilità delle risorse (es. sistemi, locali, dispositivi) dell'organizzazione sono identificate e documentate | [3] Le relazioni periodiche delle verifiche e dei test di cui al punto 1 devono contenere almeno" - }, - { - "name": "ACN-B2-2-ID.RA-1_4", - "displayName": "ACN-B2-2-ID.RA-1_4", - "description": "Risk Assessment (ID.RA): L'impresa comprende il rischio di cybersecurity inerente all’operatività dell'organizzazione (incluse la mission, le funzioni, l'immagine o la reputazione), gli asset e gli individui | [ID.RA-1] Le vulnerabilità delle risorse (es. sistemi, locali, dispositivi) dell'organizzazione sono identificate e documentate | [4] Esiste un documento per la correzione delle vulnerabilità che prevede anche, la notifica alle parti interessate" - }, - { - "name": "ACN-B2-2-ID.RA-5_4", - "displayName": "ACN-B2-2-ID.RA-5_4", - "description": "Risk Assessment (ID.RA): L'impresa comprende il rischio di cybersecurity inerente all’operatività dell'organizzazione (incluse la mission, le funzioni, l'immagine o la reputazione), gli asset e gli individui | [ID.RA-5] Le minacce, le vulnerabilità, le relative probabilità di accadimento e conseguenti impatti sono utilizzati per determinare il rischio | [4] Esiste un documento aggiornato di valutazione del rischio (risk assessment) che comprende almeno" - }, - { - "name": "ACN-B2-2-ID.SC-1_3", - "displayName": "ACN-B2-2-ID.SC-1_3", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-1] I processi di gestione del rischio inerenti la catena di approvvigionamento cyber sono identificati, ben definiti, validati, gestiti e approvati da attori interni all'organizzazione | [3] Sono presenti politiche e procedure per la definizione, implementazione e applicazione del modello di responsabilità della sicurezza condivisa (Shared Security Responsibility Model-SSRM) all'interno dell'organizzazione, le quali dovranno essere riviste e aggiornate almeno su base annuale." - }, - { - "name": "ACN-B2-2-ID.SC-1_4", - "displayName": "ACN-B2-2-ID.SC-1_4", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-1] I processi di gestione del rischio inerenti la catena di approvvigionamento cyber sono identificati, ben definiti, validati, gestiti e approvati da attori interni all'organizzazione | [4] Il modello SSRM è applicato a tutta la catena di approvvigionamento cyber, ivi inclusi altri servizi cloud utilizzati dall'organizzazione." - }, - { - "name": "ACN-B2-2-ID.SC-1_5", - "displayName": "ACN-B2-2-ID.SC-1_5", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-1] I processi di gestione del rischio inerenti la catena di approvvigionamento cyber sono identificati, ben definiti, validati, gestiti e approvati da attori interni all'organizzazione | [5] È fornita una chiara definizione in merito alla condivisione delle responsabilità." - }, - { - "name": "ACN-B2-2-ID.SC-2_1", - "displayName": "ACN-B2-2-ID.SC-2_1", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-2] I fornitori e i partner terzi di sistemi informatici, componenti e servizi sono identificati, prioritizzati e valutati utilizzando un processo di valutazione del rischio inerente la catena di approvvigionamento cyber | [1] In merito all'affidamento di forniture per i servizi cloud sono adottate misure in materia di sicurezza della catena di approvvigionamento cyber attraverso" - }, - { - "name": "ACN-B2-2-ID.SC-2_2", - "displayName": "ACN-B2-2-ID.SC-2_2", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-2] I fornitori e i partner terzi di sistemi informatici, componenti e servizi sono identificati, prioritizzati e valutati utilizzando un processo di valutazione del rischio inerente la catena di approvvigionamento cyber | [2] Esiste un elenco aggiornato dei fornitori e partner terzi affidatari per la fornitura di servizi cloud, nonché di dipendenze esterne, corredato dalla relativa documentazione del processo di valutazione di cui al punto 1." - }, - { - "name": "ACN-B2-2-ID.SC-3_1", - "displayName": "ACN-B2-2-ID.SC-3_1", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-3] I contratti con i fornitori e i partner terzi sono utilizzati per realizzare appropriate misure progettate per rispettare gli obiettivi del programma di cybersecurity dell'organizzazione e del Piano di Gestione del Rischio della catena di approvvigionamento cyber. | [1] Le misure di sicurezza implementate dal soggetto in relazione a dipendenze interne sono coerenti, anche in relazione agli esiti dell'analisi del rischio, con le misure di sicurezza applicate al servizio cloud. A tal fine, i contratti, gli accordi o le convenzioni sono aggiornati di conseguenza." - }, - { - "name": "ACN-B2-2-ID.SC-4_1", - "displayName": "ACN-B2-2-ID.SC-4_1", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-4] Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [1] Esiste un documento aggiornato che descrive il processo, le modalità, la cadenza delle valutazioni per i fornitori e partner terzi, proporzionate agli esiti dell'analisi del rischio effettuata." - }, - { - "name": "ACN-B2-2-ID.SC-4_2", - "displayName": "ACN-B2-2-ID.SC-4_2", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-4] Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [2] Esiste una pianificazione aggiornata degli audit, delle verifiche o di altre forme di valutazione previste, nonché un registro di quelli effettuati e la relativa documentazione." - }, - { - "name": "ACN-B2-2-ID.SC-4_3", - "displayName": "ACN-B2-2-ID.SC-4_3", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-4] Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [3] È definito ed implementato un processo di Audit Management al fine di consentire lo svolgimento di valutazioni indipendenti e di garanzia, nel rispetto dei principali standard di settore, almeno su base annuale e secondo una pianificazione che tenga conto del rischio." - }, - { - "name": "ACN-B2-2-ID.SC-4_4", - "displayName": "ACN-B2-2-ID.SC-4_4", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-4] Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [4] Le politiche e procedure di audit e garanzia degli standard, devono essere stabilite, documentate, approvate, mantenute e riviste almeno annualmente." - }, - { - "name": "ACN-B2-2-ID.SC-4_5", - "displayName": "ACN-B2-2-ID.SC-4_5", - "description": "Supply Chain Risk Management (ID.SC): Le priorità, i vincoli, le tolleranze al rischio e le ipotesi dell'organizzazione sono stabilite e utilizzate per supportare le decisioni di rischio associate alla gestione del rischio legato alla catena di approvvigionamento. L'organizzazione ha definito e implementato i processi atti a identificare, valutare e gestire il rischio legato alla catena di approvvigionamento | [ID.SC-4] Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [5] È definito, documentato, approvato, comunicato, applicato e mantenuto un piano di Remediation." - }, - { - "name": "ACN-B2-2-PR.AC-1_7", - "displayName": "ACN-B2-2-PR.AC-1_7", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-1] Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [7] Esiste un documento aggiornato di dettaglio contenente almeno" - }, - { - "name": "ACN-B2-2-PR.AC-3_5", - "displayName": "ACN-B2-2-PR.AC-3_5", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-3] L'accesso remoto alle risorse è amministrato | [5] Esiste un documento aggiornato di dettaglio contenente almeno" - }, - { - "name": "ACN-B2-2-PR.AC-4_4", - "displayName": "ACN-B2-2-PR.AC-4_4", - "description": "Identity Management, Authentication and Access Control (PR.AC): L'accesso agli asset fisici e logici ed alle relative risorse è limitato al personale, ai processi e ai dispositivi autorizzati, ed è gestito in maniera coerente con la valutazione del rischio di accesso non autorizzato alle attività ed alle transazioni autorizzate | [PR.AC-4] I diritti di accesso alle risorse e le relative autorizzazioni sono amministrati secondo il principio del privilegio minimo e della separazione delle funzioni | [4] Esiste un documento aggiornato di dettaglio recante i processi di cui al punto 1" - }, - { - "name": "ACN-B2-2-PR.AT-1_3", - "displayName": "ACN-B2-2-PR.AT-1_3", - "description": "Awareness and Training (PR.AT): Il personale e le terze parti sono sensibilizzate in materia di cybersecurity e vengono addestrate per adempiere ai loro compiti e ruoli coerentemente con le politiche, le procedure e gli accordi esistenti | [PR.AT-1] Il personale del soggetto è informato e addestrato | [3] Per ogni membro del personale del soggetto, esiste un registro aggiornato, comprensivo delle istruzioni ricevute" - }, - { - "name": "ACN-B2-2-PR.DS-1_7", - "displayName": "ACN-B2-2-PR.DS-1_7", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni. | [PR.DS-1] I dati memorizzati sono protetti | [7] Nel caso di dati e di servizi critici delle Amministrazioni, non trovano applicazione le previsioni del requisito di cui alla sezione 2.2.7, PR.DS-1, punto 2. Con riferimento alle infrastrutture impiegate per l’erogazione del servizio cloud, nonché al trattamento dei dati e dei servizi dell’Amministrazione, ivi inclusi i metadati, resta fermo, pertanto, quanto previsto dall'allegato B al Regolamento, requisito SC-SI-PR.DS-1-01" - }, - { - "name": "ACN-B2-2-PR.DS-1_8", - "displayName": "ACN-B2-2-PR.DS-1_8", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni. | [PR.DS-1] I dati memorizzati sono protetti | [8] Esiste un documento aggiornato di dettaglio che indica, anche in relazione alla categoria ID.AM, almeno" - }, - { - "name": "ACN-B2-2-PR.DS-1_9", - "displayName": "ACN-B2-2-PR.DS-1_9", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni. | [PR.DS-1] I dati memorizzati sono protetti | [9] Il servizio cloud supporta un meccanismo di cifratura di tipo Bring Your Own Key (BYOK), che consente all’Amministrazione di generare autonomamente, almeno la chiave principale di cifratura (root key), attraverso un HSM ospitato, alternativamente, presso" - }, - { - "name": "ACN-B2-2-PR.DS-1_10", - "displayName": "ACN-B2-2-PR.DS-1_10", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni. | [PR.DS-1] I dati memorizzati sono protetti | [10] Il soggetto mette a disposizione la funzionalità di importazione sicura delle chiavi di cui al punto 10 nel cloud, per l’esercizio di tutte le operazioni di gestione delle chiavi e della cifratura nel cloud" - }, - { - "name": "ACN-B2-2-PR.DS-1_11", - "displayName": "ACN-B2-2-PR.DS-1_11", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni. | [PR.DS-1] I dati memorizzati sono protetti | [11] Sono definite ed implementate procedure e misure tecniche misure per la distruzione delle chiavi memorizzate al di fuori di un ambiente sicuro e revocare le chiavi memorizzate nei moduli di sicurezza hardware (HSM) quando non sono più necessari, in conformità con requisiti legali e normativi" - }, - { - "name": "ACN-B2-2-PR.DS-1_12", - "displayName": "ACN-B2-2-PR.DS-1_12", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni. | [PR.DS-1] I dati memorizzati sono protetti | [12] Esiste un documento aggiornato di dettaglio recante i processi di cui al punto 1" - }, - { - "name": "ACN-B2-2-PR.DS-3_2", - "displayName": "ACN-B2-2-PR.DS-3_2", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni. | [PR.DS-3] Il trasferimento fisico, la rimozione e la distruzione dei dispositivi atti alla memorizzazione di dati sono gestiti attraverso un processo formale | [2] Sono abilitate capacità di geo-localizzazione remota per tutti i dispositivi mobili gestiti [SaaS]" - }, - { - "name": "ACN-B2-2-PR.DS-3_3", - "displayName": "ACN-B2-2-PR.DS-3_3", - "description": "Data Security (PR.DS): I dati sono memorizzati e gestiti in accordo alla strategia di gestione del rischio dell'organizzazione, al fine di garantire l'integrità, la confidenzialità e la disponibilità delle informazioni. | [PR.DS-3] Il trasferimento fisico, la rimozione e la distruzione dei dispositivi atti alla memorizzazione di dati sono gestiti attraverso un processo formale | [3] Sono definite ed implementate adeguate tecniche di cancellazione dei dati dell’Amministrazione da remoto [SaaS]" - }, - { - "name": "ACN-B2-2-PR.IP-1_2", - "displayName": "ACN-B2-2-PR.IP-1_2", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-1] Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [2] Esiste un documento aggiornato di dettaglio che indica, anche in relazione alla categoria ID.AM, almeno" - }, - { - "name": "ACN-B2-2-PR.IP-1_3", - "displayName": "ACN-B2-2-PR.IP-1_3", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-1] Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [3] Sono definiti e documentati requisiti di base per la sicurezza delle diverse applicazioni" - }, - { - "name": "ACN-B2-2-PR.IP-1_4", - "displayName": "ACN-B2-2-PR.IP-1_4", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-1] Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [4] Sono definite ed implementate metriche tecniche e operative in linea con i requisiti di sicurezza e gli obblighi di conformità" - }, - { - "name": "ACN-B2-2-PR.IP-1_5", - "displayName": "ACN-B2-2-PR.IP-1_5", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-1] Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [5] Esiste un processo di mitigazione e ripristino per la sicurezza delle applicazioni, automatizzando la mitigazione automatizzata delle vulnerabilità quando possibile" - }, - { - "name": "ACN-B2-2-PR.IP-1_6", - "displayName": "ACN-B2-2-PR.IP-1_6", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-1] Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [6] È presente un processo per la convalida della compatibilità del dispositivo con sistemi operativi e applicazioni [PaaS, SaaS]" - }, - { - "name": "ACN-B2-2-PR.IP-1_7", - "displayName": "ACN-B2-2-PR.IP-1_7", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-1] Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [7] È presente un sistema di gestione delle variazioni in termini di sistema operativo, patching e/o applicazioni [PaaS, SaaS]" - }, - { - "name": "ACN-B2-2-PR.IP-2_1", - "displayName": "ACN-B2-2-PR.IP-2_1", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-2] Viene implementato un processo per la gestione del ciclo di vita dei sistemi (System Development Life Cycle) | [1] Sono implementate linee guida e misure tecniche/organizzative per lo sviluppo sicuro del servizio cloud, in aderenza alle linee guida OWASP in merito alla sicurezza nello sviluppo del software (requisiti, progettazione, implementazione, test e verifica). Devono essere resi disponibili all'Agenzia per la Cybersicurezza Nazionale (ACN) e alla Amministrazione i report sui test OWASP condotti, garantendo l'assenza di vulnerabilità di tipo \"high\" o \"critical\"" - }, - { - "name": "ACN-B2-2-PR.IP-4_5", - "displayName": "ACN-B2-2-PR.IP-4_5", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-4] I backup delle informazioni sono eseguiti, amministrati e verificati | [5] Esiste un documento aggiornato di dettaglio che indica, anche in relazione alla categoria ID.AM, almeno" - }, - { - "name": "ACN-B2-2-PR.IP-4_6", - "displayName": "ACN-B2-2-PR.IP-4_6", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-4] I backup delle informazioni sono eseguiti, amministrati e verificati | [6] Esiste un documento aggiornato di dettaglio recante i processi di cui al punto 1" - }, - { - "name": "ACN-B2-2-PR.IP-9_6", - "displayName": "ACN-B2-2-PR.IP-9_6", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [6] Esiste un documento aggiornato di dettaglio che indica i livelli di servizio attesi dal servizio cloud e, se previsti, dalle hot-replica e/o cold-replica nonché dal sito(i) di disaster recovery" - }, - { - "name": "ACN-B2-2-PR.IP-9_7", - "displayName": "ACN-B2-2-PR.IP-9_7", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [7] Esiste un documento aggiornato di dettaglio contenente i piani di disaster recovery, nonché quelli di risposta e di recupero in caso di incidenti, che comprende almeno" - }, - { - "name": "ACN-B2-2-PR.IP-9_8", - "displayName": "ACN-B2-2-PR.IP-9_8", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [8] Esiste un documento aggiornato recante l'elenco delle attività di istruzione, formazione ed esercitazione svolte" - }, - { - "name": "ACN-B2-2-PR.IP-9_9", - "displayName": "ACN-B2-2-PR.IP-9_9", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [9] Le strategie di disaster recovery sono collaudate e comunicate alle parti interessate" - }, - { - "name": "ACN-B2-2-PR.IP-9_10", - "displayName": "ACN-B2-2-PR.IP-9_10", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-9] Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [10] I dispositivi critici per il funzionamento del servizio cloud sono ridondati e, se situati in località diverse, ad una distanza in linea con le migliori pratiche del settore" - }, - { - "name": "ACN-B2-2-PR.IP-12_3", - "displayName": "ACN-B2-2-PR.IP-12_3", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-12] Viene sviluppato e implementato un piano di gestione delle vulnerabilità | [3] Sono definite ed implementate misure tecniche per l'identificazione degli aggiornamenti per le applicazioni che usano librerie di terze parti o open, nel rispetto delle politiche interne di vulnerability management" - }, - { - "name": "ACN-B2-2-PR.IP-12_4", - "displayName": "ACN-B2-2-PR.IP-12_4", - "description": "Information Protection Processes and Procedures (PR.IP): Sono attuate e adeguate nel tempo politiche di sicurezza (che indirizzano scopo, ambito, ruoli e responsabilità, impegno da parte del management e coordinamento tra le diverse entità organizzative), processi e procedure per gestire la protezione dei sistemi informativi e degli assets. | [PR.IP-12] Viene sviluppato e implementato un piano di gestione delle vulnerabilità | [4] Il documento di cui al punto 1 della misura PR.IP-12 dovrà essere aggiornato su base semestrale." - }, - { - "name": "ACN-B2-2-PR.MA-1_2", - "displayName": "ACN-B2-2-PR.MA-1_2", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-1] La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [2] Esiste un documento aggiornato di dettaglio recante i processi e le politiche di cui al punto 1." - }, - { - "name": "ACN-B2-2-PR.MA-1_3", - "displayName": "ACN-B2-2-PR.MA-1_3", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-1] La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [3] Le attività di cui al punto 3 sono volte a verificare anche aspetti di sicurezza." - }, - { - "name": "ACN-B2-2-PR.MA-1_4", - "displayName": "ACN-B2-2-PR.MA-1_4", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-1] La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [4] Gli aggiornamenti software sono consentiti solo da fonti pre-autorizzate." - }, - { - "name": "ACN-B2-2-PR.MA-1_5", - "displayName": "ACN-B2-2-PR.MA-1_5", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-1] La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [5] Tutti i log relativi alle attività di manutenzione e aggiornamento sono prodotti e custoditi su sistemi separati da quelli oggetto di intervento e non accessibili dalle utenze che svolgono tali attività." - }, - { - "name": "ACN-B2-2-PR.MA-1_6", - "displayName": "ACN-B2-2-PR.MA-1_6", - "description": "Maintenance (PR.MA): La manutenzione dei sistemi informativi e di controllo industriale è fatta in accordo con le politiche e le procedure esistenti | [PR.MA-1] La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [6] Esiste un documento aggiornato che descrive, almeno, i processi e gli strumenti tecnici impiegati per realizzare i punti 3, 4 e 5." - }, - { - "name": "ACN-B2-2-PR.PT-5_1-bis", - "displayName": "ACN-B2-2-PR.PT-5_1-bis", - "description": "Protective Technology (PR.PT): Le soluzioni tecniche di sicurezza sono gestite per assicurare sicurezza e resilienza di sistemi e asset, in coerenza con le relative politiche, procedure ed accordi | [PR.PT-5] Sono implementati meccanismi (es. failsafe, load balancing, hot swap) che permettono di soddisfare requisiti di resilienza sia durante il normale esercizio che in situazioni avverse | [1-bis] In relazione ai piani previsti dalla sottocategoria PR.IP-9:" - }, - { - "name": "ACN-B2-2-DE.AE-3_9", - "displayName": "ACN-B2-2-DE.AE-3_9", - "description": "Anomalies and Events (DE.AE): Le attività anomale sono rilevate e il loro impatto potenziale viene analizzato. | [DE.AE-3] Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [9] Esiste un repository centralizzato che contiene i log di accesso degli utenti del soggetto, gestito direttamente dal soggetto e segregato a livello logico rispetto ai sistemi a cui terze parti hanno accesso diretto" - }, - { - "name": "ACN-B2-2-DE.CM-1_5", - "displayName": "ACN-B2-2-DE.CM-1_5", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-1] Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [5] Il traffico in ingresso e uscita, le attività dei sistemi perimetrali, quali router e firewall, gli eventi amministrativi di rilievo, nonché gli accessi eseguiti o falliti alle risorse di rete e alle postazioni terminali sono monitorati e correlati al fine di identificare eventi di cybersecurity." - }, - { - "name": "ACN-B2-2-DE.CM-1_6", - "displayName": "ACN-B2-2-DE.CM-1_6", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-1] Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [6] Gli strumenti tecnici di cui ai punti 1, 3, 4 e 5 sono aggiornati, manutenuti e ben configurati, nel rispetto delle politiche di cui alle categorie PR.AC, PR.DS, PR.IP e PR.MA e concorrono al rispetto delle politiche di cui alla categoria ID.AM, ID.GV, ID.SC, PR.AC e PR.DS." - }, - { - "name": "ACN-B2-2-DE.CM-1_7", - "displayName": "ACN-B2-2-DE.CM-1_7", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-1] Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [7] Gli strumenti tecnici di cui ai punti 1, 3, 4 e 5sono impiegati anche per i fini di cui alla categoria DE.AE" - }, - { - "name": "ACN-B2-2-DE.CM-1_8", - "displayName": "ACN-B2-2-DE.CM-1_8", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-1] Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [8] Esiste un documento aggiornato che descrive, almeno:" - }, - { - "name": "ACN-B2-2-DE.CM-4_4", - "displayName": "ACN-B2-2-DE.CM-4_4", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-4] Il codice malevolo viene rilevato | [4] Sono configurati appositi software firewall su tutti i dispositivi." - }, - { - "name": "ACN-B2-2-DE.CM-4_5", - "displayName": "ACN-B2-2-DE.CM-4_5", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-4] Il codice malevolo viene rilevato | [5] I file in ingresso (tramite posta elettronica, download, dispositivi removibili, etc.) sono analizzati, anche tramite sandbox." - }, - { - "name": "ACN-B2-2-DE.CM-4_6", - "displayName": "ACN-B2-2-DE.CM-4_6", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-4] Il codice malevolo viene rilevato | [6] Gli strumenti tecnici di cui ai punti 1,4 e 5 sono aggiornati, mantenuti e ben configurati, nel rispetto delle politiche di cui alle categorie PR.AC, PR.DS, PR.IP e PR.MA e concorrono al rispetto delle politiche di cui alle categorie ID.AM, ID.GV, ID.SC, PR.AC e PR.DS." - }, - { - "name": "ACN-B2-2-DE.CM-4_7", - "displayName": "ACN-B2-2-DE.CM-4_7", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-4] Il codice malevolo viene rilevato | [7] Esiste un documento aggiornato che descrive, almeno:" - }, - { - "name": "ACN-B2-2-DE.CM-7_1", - "displayName": "ACN-B2-2-DE.CM-7_1", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-7] Viene svolto il monitoraggio per rilevare personale, connessioni, dispositivi o software non autorizzati | [1] Con riferimento alla sottocategoria PR.AC-3, viene rilevata la presenza di personale con potenziale accesso fisico o remoto non autorizzato alle risorse. A tal fine, sono presenti sistemi di sorveglianza e controllo di accesso, anche automatizzati." - }, - { - "name": "ACN-B2-2-DE.CM-7_2", - "displayName": "ACN-B2-2-DE.CM-7_2", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-7] Viene svolto il monitoraggio per rilevare personale, connessioni, dispositivi o software non autorizzati | [2] Con riferimento alla sottocategoria ID.AM-1, vengono rilevati dispositivi (anche fisici) non approvati. A tal fine, fatti salvi documentati limiti tecnici, sono presenti almeno dei sistemi di controllo di accesso di rete." - }, - { - "name": "ACN-B2-2-DE.CM-7_3", - "displayName": "ACN-B2-2-DE.CM-7_3", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-7] Viene svolto il monitoraggio per rilevare personale, connessioni, dispositivi o software non autorizzati | [3] Gli strumenti tecnici di cui ai punti 1e 2 sono aggiornati, mantenuti e ben configurati, nel rispetto delle politiche di cui alle categorie PR.AC, PR.DS, PR.IP e PR.MA e concorrono al rispetto delle politiche di cui alle categorie ID.AM, ID.GV, ID.SC, PR.AC e PR.DS." - }, - { - "name": "ACN-B2-2-DE.CM-7_4", - "displayName": "ACN-B2-2-DE.CM-7_4", - "description": "Security Continuous Monitoring (DE.CM): I sistemi informativi e gli asset sono monitorati per indentificare eventi di cybersecurity e per verificare l'efficacia delle misure di protezione | [DE.CM-7] Viene svolto il monitoraggio per rilevare personale, connessioni, dispositivi o software non autorizzati | [4] Esiste un documento aggiornato che descrive, almeno:" - }, - { - "name": "ACN-B2-2-RS.RP-1_2", - "displayName": "ACN-B2-2-RS.RP-1_2", - "description": "Response Planning (RS.RP): Procedure e processi di risposta sono eseguiti e mantenuti per assicurare una risposta agli incidenti di cybersecurity rilevati. | [RS.RP-1] Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [2] Le politiche e procedure per la gestione tempestiva degli incidenti di sicurezza sono riviste almeno su base annuale." - }, - { - "name": "ACN-B2-2-RS.RP-1_3", - "displayName": "ACN-B2-2-RS.RP-1_3", - "description": "Response Planning (RS.RP): Procedure e processi di risposta sono eseguiti e mantenuti per assicurare una risposta agli incidenti di cybersecurity rilevati. | [RS.RP-1] Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [3] Il piano di risposta e le politiche e procedure di cui ai punti 1 e 2 includono dipartimenti interni critici, l’Amministrazione (se impattata) e tutte le terze parti interessate." - }, - { - "name": "ACN-B2-2-RS.RP-1_4", - "displayName": "ACN-B2-2-RS.RP-1_4", - "description": "Response Planning (RS.RP): Procedure e processi di risposta sono eseguiti e mantenuti per assicurare una risposta agli incidenti di cybersecurity rilevati. | [RS.RP-1] Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [4] I piani di risposta agli incidenti sono collaudati e aggiornati ad intervalli pianificati o in caso di cambiamenti organizzativi o ambientali significativi." - }, - { - "name": "ACN-B2-2-RS.RP-1_5", - "displayName": "ACN-B2-2-RS.RP-1_5", - "description": "Response Planning (RS.RP): Procedure e processi di risposta sono eseguiti e mantenuti per assicurare una risposta agli incidenti di cybersecurity rilevati. | [RS.RP-1] Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [5] Sono definite e monitorate le metriche degli incidenti rilevanti in materia di cybersecurity." - }, - { - "name": "ACN-B2-2-RS.RP-1_6", - "displayName": "ACN-B2-2-RS.RP-1_6", - "description": "Response Planning (RS.RP): Procedure e processi di risposta sono eseguiti e mantenuti per assicurare una risposta agli incidenti di cybersecurity rilevati. | [RS.RP-1] Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [6] Sono definiti e implementati processi, procedure e misure di supporto ai processi aziendali per il triage degli eventi legati alla sicurezza." - }, - { - "name": "ACN-B2-2-RS.RP-1_7", - "displayName": "ACN-B2-2-RS.RP-1_7", - "description": "Response Planning (RS.RP): Procedure e processi di risposta sono eseguiti e mantenuti per assicurare una risposta agli incidenti di cybersecurity rilevati. | [RS.RP-1] Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [7] Deve essere implementato un Computer Emergency Response Team (CERT), a coordinamento della fase di risoluzione degli incidenti e in aderenza a quanto definito dalle linee guida ISO/IEC 27035-2. Inoltre, deve essere previsto il coinvolgimento periodico dell’Amministrazione in momenti di condivisione e revisione dello stato degli incidenti di interesse e, ove opportuno, nella risoluzione di tali incidenti, anche secondo gli accordi contrattuali in materia." - }, - { - "name": "ACN-B2-2-RS.CO-1_4", - "displayName": "ACN-B2-2-RS.CO-1_4", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-1] Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [4] Esiste un registro aggiornato delle esercitazioni effettuate e dei partecipanti, con le relative lezioni apprese (lessons learned)." - }, - { - "name": "ACN-B2-2-RS.CO-1_5", - "displayName": "ACN-B2-2-RS.CO-1_5", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-1] Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [5] Sono presenti politiche e procedure per la gestione degli incidenti di sicurezza, E-Discovery e Cloud Forensics, le quali dovranno essere riviste e aggiornate almeno su base annuale." - }, - { - "name": "ACN-B2-2-RS.CO-1_6", - "displayName": "ACN-B2-2-RS.CO-1_6", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-1] Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [6] Sono definiti ed implementati processi, procedure e misure tecniche per le notifiche di violazione della sicurezza." - }, - { - "name": "ACN-B2-2-RS.CO-1_7", - "displayName": "ACN-B2-2-RS.CO-1_7", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-1] Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [7] È previsto un meccanismo di segnalazione per ogni violazione della sicurezza, reale o presunta, comprese eventuali violazioni inerenti la supply chain, nel rispetto di SLA, leggi e regolamenti applicabili." - }, - { - "name": "ACN-B2-2-RS.CO-1_8", - "displayName": "ACN-B2-2-RS.CO-1_8", - "description": "Communications (RS.CO): Le attività di risposta sono coordinate con le parti interne ed esterne (es. eventuale supporto da parte degli organi di legge o dalle forze dell'ordine) | [RS.CO-1] Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [8] Le attività di risposta condotte a seguito di un incidente vengono comunicate alle parti interessate interne ed esterne all'organizzazione, inclusi i dirigenti ed i vertici dell'organizzazione. In particolare, le attività di ripristino a seguito di un incidente sono comunicate alle parti interne ed esterne interessate (es. le vittime, gli ISP, i proprietari dei sistemi attaccati, i vendor, i CERT/CSIRT), ivi incluse le articolazioni competenti del soggetto, anche ai fini dell'eventuale interlocuzione con il CSIRT Italia." - }, - { - "name": "ACN-B2-2-RC.RP-1_3", - "displayName": "ACN-B2-2-RC.RP-1_3", - "description": "Recovery Planning (RC.RP): I processi e le procedure di ripristino sono eseguite e mantenute per assicurare un recupero dei sistemi o asset coinvolti da un incidente di cybersecurity | [RC.RP-1] Esiste un piano di ripristino (recovery plan) e viene eseguito durante o dopo un incidente di cybersecurity | [3] Il piano di ripristino viene testato, su base semestrale, nell’ambito di due esercitazioni annuali." - }, - { - "name": "ACN-B2-2-RC.CO-3_1", - "displayName": "ACN-B2-2-RC.CO-3_1", - "description": "Communications (RC.CO): Le attività di ripristino a seguito di un incidente sono coordinate con le parti interne ed esterne (es. le vittime, gli ISP, i proprietari dei sistemi attaccati, i vendor, i CERT/CSIRT) | [RC.CO-3] Le attività di ripristino condotte a seguito di un incidente vengono comunicate alle parti interessate interne ed esterne all'organizzazione, inclusi i dirigenti ed i vertici dell'organizzazione | [1] Le attività di ripristino a seguito di un incidente sono comunicate alle parti interne ed esterne interessate (es. le vittime, gli ISP, i proprietari dei sistemi attaccati, i vendor, i CERT/CSIRT)." - } - ], - "parameters": {}, - "policyDefinitions": [ - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1686", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1247", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RC.RP-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1312", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1314", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1692", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1635", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1411", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-3_2", - "ACN-B2-2-PR.DS-3_3", - "ACN-B2-2-PR.MA-1_2", - "ACN-B2-2-PR.MA-1_3", - "ACN-B2-2-PR.MA-1_4", - "ACN-B2-2-PR.MA-1_5", - "ACN-B2-2-PR.MA-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1001", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4", - "ACN-B2-2-PR.AC-1_7", - "ACN-B2-2-PR.AC-3_5", - "ACN-B2-2-PR.AC-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1238", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-12_3", - "ACN-B2-2-PR.IP-12_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1574", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1178", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1243", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1541", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1005", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1811", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d1d4ce2-71ea-4578-bbb4-fe76215d45ac", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1676", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-4_5", - "ACN-B2-2-DE.CM-4_6", - "ACN-B2-2-DE.CM-4_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1615", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1559", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5", - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2", - "ACN-B2-2-ID.SC-3_1", - "ACN-B2-2-PR.IP-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1570", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1299", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1157", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1242", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8", - "ACN-B2-2-PR.IP-9_9", - "ACN-B2-2-PR.IP-9_10" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1362", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1296", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e57b98a0-a011-4956-a79d-5d17ed8b8e48", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.PT-5_1-bis" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1359", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1670", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1143", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_1", - "ACN-B2-2-ID.SC-4_2", - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5", - "ACN-B2-2-PR.IP-12_3", - "ACN-B2-2-PR.IP-12_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1145", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1174", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_2", - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1675", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1255", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_9", - "ACN-B2-2-PR.IP-9_10", - "ACN-B2-2-PR.PT-5_1-bis" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1572", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1806", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/956b00aa-7977-4214-a0f5-e0428c1f9bff", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.GV-1_3", - "ACN-B2-2-ID.GV-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1684", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1680", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-4_5", - "ACN-B2-2-DE.CM-4_6", - "ACN-B2-2-DE.CM-4_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1098", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AT-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1573", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1251", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1536", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1168", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1249", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_9", - "ACN-B2-2-PR.IP-9_10" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1146", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1109", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1263", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.CO-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1360", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1248", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_9", - "ACN-B2-2-PR.IP-9_10" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1666", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1351", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8", - "ACN-B2-2-RC.CO-3_1", - "ACN-B2-2-RS.CO-1_5", - "ACN-B2-2-RS.CO-1_6", - "ACN-B2-2-RS.CO-1_7", - "ACN-B2-2-RS.CO-1_8", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1148", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1683", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1647", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1100", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1142", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_1", - "ACN-B2-2-ID.SC-4_2", - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5", - "ACN-B2-2-PR.IP-12_3", - "ACN-B2-2-PR.IP-12_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1030", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1412", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-3_2", - "ACN-B2-2-PR.DS-3_3", - "ACN-B2-2-PR.MA-1_2", - "ACN-B2-2-PR.MA-1_3", - "ACN-B2-2-PR.MA-1_4", - "ACN-B2-2-PR.MA-1_5", - "ACN-B2-2-PR.MA-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1311", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1729", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f5a44e7d-77a2-474e-b2e3-4e8c42ba514b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.GV-1_3", - "ACN-B2-2-ID.GV-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1564", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1678", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-4_5", - "ACN-B2-2-DE.CM-4_6", - "ACN-B2-2-DE.CM-4_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1550", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1165", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1010", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1643", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1372", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RC.CO-3_1", - "ACN-B2-2-RS.CO-1_5", - "ACN-B2-2-RS.CO-1_6", - "ACN-B2-2-RS.CO-1_7", - "ACN-B2-2-RS.CO-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1668", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4", - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1264", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.CO-1_4", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1405", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.MA-1_2", - "ACN-B2-2-PR.MA-1_3", - "ACN-B2-2-PR.MA-1_4", - "ACN-B2-2-PR.MA-1_5", - "ACN-B2-2-PR.MA-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1616", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1151", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1531", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1530", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1603", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1149", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_3", - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1395", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.MA-1_2", - "ACN-B2-2-PR.MA-1_3", - "ACN-B2-2-PR.MA-1_4", - "ACN-B2-2-PR.MA-1_5", - "ACN-B2-2-PR.MA-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1490", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-4_5", - "ACN-B2-2-DE.CM-4_6", - "ACN-B2-2-DE.CM-4_7", - "ACN-B2-2-ID.GV-1_3", - "ACN-B2-2-ID.GV-1_4", - "ACN-B2-2-ID.SC-4_1", - "ACN-B2-2-ID.SC-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1588", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1273", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.PT-5_1-bis" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1569", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1810", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/395736bb-aa8b-45f0-b9cc-06af26b2b1d4", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1006", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1256", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_9", - "ACN-B2-2-PR.IP-9_10" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1361", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1693", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1622", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1417", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-3_2", - "ACN-B2-2-PR.DS-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1549", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4", - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1685", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1600", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1856", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2d5600ed-575a-4723-9ff4-52d694be0a59", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.CO-1_5", - "ACN-B2-2-RS.CO-1_6", - "ACN-B2-2-RS.CO-1_7", - "ACN-B2-2-RS.CO-1_8", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1366", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1695", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1571", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1376", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.CO-1_5", - "ACN-B2-2-RS.CO-1_6", - "ACN-B2-2-RS.CO-1_7", - "ACN-B2-2-RS.CO-1_8", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1553", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1371", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.CO-1_5", - "ACN-B2-2-RS.CO-1_6", - "ACN-B2-2-RS.CO-1_7", - "ACN-B2-2-RS.CO-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1546", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_3", - "ACN-B2-2-PR.IP-12_3", - "ACN-B2-2-PR.IP-12_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1352", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8", - "ACN-B2-2-RS.CO-1_5", - "ACN-B2-2-RS.CO-1_6", - "ACN-B2-2-RS.CO-1_7", - "ACN-B2-2-RS.CO-1_8", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1380", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.CO-1_5", - "ACN-B2-2-RS.CO-1_6", - "ACN-B2-2-RS.CO-1_7", - "ACN-B2-2-RS.CO-1_8", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1358", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1378", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1002", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1687", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1278", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.PT-5_1-bis" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1633", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1298", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1261", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8", - "ACN-B2-2-PR.IP-9_9", - "ACN-B2-2-PR.IP-9_10", - "ACN-B2-2-RC.RP-1_3", - "ACN-B2-2-RS.CO-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1317", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1011", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1674", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1545", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1542", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1690", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1144", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_1", - "ACN-B2-2-ID.SC-4_2", - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5", - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1667", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1631", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1529", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2", - "ACN-B2-2-ID.SC-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1237", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-12_3", - "ACN-B2-2-PR.IP-12_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1373", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1608", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5", - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2", - "ACN-B2-2-ID.SC-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1740", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e4df5fb7-58e9-41de-9399-f043c7a931f8", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1073", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1700", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-4_4", - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1737", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bd6a378-4173-411d-a958-dc699b0ee2fd", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1533", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1414", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.MA-1_2", - "ACN-B2-2-PR.MA-1_3", - "ACN-B2-2-PR.MA-1_4", - "ACN-B2-2-PR.MA-1_5", - "ACN-B2-2-PR.MA-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1672", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1416", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-3_2", - "ACN-B2-2-PR.DS-3_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1000", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4", - "ACN-B2-2-PR.AC-1_7", - "ACN-B2-2-PR.AC-3_5", - "ACN-B2-2-PR.AC-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1365", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1586", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1730", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1fa50212-51a9-471b-95cf-3a23410ec9e9", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.GV-1_3", - "ACN-B2-2-ID.GV-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1394", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.MA-1_2", - "ACN-B2-2-PR.MA-1_3", - "ACN-B2-2-PR.MA-1_4", - "ACN-B2-2-PR.MA-1_5", - "ACN-B2-2-PR.MA-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1491", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-4_5", - "ACN-B2-2-DE.CM-4_6", - "ACN-B2-2-DE.CM-4_7", - "ACN-B2-2-ID.GV-1_3", - "ACN-B2-2-ID.GV-1_4", - "ACN-B2-2-ID.SC-4_1", - "ACN-B2-2-ID.SC-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1007", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1161", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1150", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5", - "ACN-B2-2-PR.IP-12_3", - "ACN-B2-2-PR.IP-12_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1369", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.CO-1_5", - "ACN-B2-2-RS.CO-1_6", - "ACN-B2-2-RS.CO-1_7", - "ACN-B2-2-RS.CO-1_8", - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1253", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1548", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1537", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1396", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.MA-1_2", - "ACN-B2-2-PR.MA-1_3", - "ACN-B2-2-PR.MA-1_4", - "ACN-B2-2-PR.MA-1_5", - "ACN-B2-2-PR.MA-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1543", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1694", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1381", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1258", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1244", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8", - "ACN-B2-2-RC.CO-3_1", - "ACN-B2-2-RS.CO-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1175", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1169", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ACF1587", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:0b60c0b2-2dc2-4e1c-b5c9-abbed971de53", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:1c988dd6-ade4-430f-a608-2a3e5b0a6d38", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:e714b481-8fac-64a2-14a9-6f079b2501a4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e714b481-8fac-64a2-14a9-6f079b2501a4", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:fc5e4038-4584-4632-8c85-c0448d374b2c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:bd6cbcba-4a2d-507c-53e3-296b5c238a8e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd6cbcba-4a2d-507c-53e3-296b5c238a8e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.PT-5_1-bis" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:70a7a065-a060-85f8-7863-eb7850ed2af9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/70a7a065-a060-85f8-7863-eb7850ed2af9", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:037c0089-6606-2dab-49ad-437005b5035f", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/037c0089-6606-2dab-49ad-437005b5035f", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:f6de0be7-9a8a-4b8a-b349-43cf02d22f7c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:318b2bd9-9c39-9f8b-46a7-048401f33476", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/318b2bd9-9c39-9f8b-46a7-048401f33476", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:2b4e134f-1e4c-2bff-573e-082d85479b6e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b4e134f-1e4c-2bff-573e-082d85479b6e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:98728c90-32c7-4049-8429-847dc0f4fe37", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:51e4b233-8ee3-8bdc-8f5f-f33bd0d229b7", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/51e4b233-8ee3-8bdc-8f5f-f33bd0d229b7", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:8d140e8b-76c7-77de-1d46-ed1b2e112444", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d140e8b-76c7-77de-1d46-ed1b2e112444", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:677e1da4-00c3-287a-563d-f4a1cf9b99a0", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/677e1da4-00c3-287a-563d-f4a1cf9b99a0", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:4078e558-bda6-41fb-9b3c-361e8875200d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:28aa060e-25c7-6121-05d8-a846f11433df", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28aa060e-25c7-6121-05d8-a846f11433df", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.GV-1_3", - "ACN-B2-2-ID.GV-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ff136354-1c92-76dc-2dab-80fb7c6a9f1a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ff136354-1c92-76dc-2dab-80fb7c6a9f1a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:b28c8687-4bbd-8614-0b96-cdffa1ac6d9c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b28c8687-4bbd-8614-0b96-cdffa1ac6d9c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:37546841-8ea1-5be0-214d-8ac599588332", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/37546841-8ea1-5be0-214d-8ac599588332", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:526ed90e-890f-69e7-0386-ba5c0f1f784f", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/526ed90e-890f-69e7-0386-ba5c0f1f784f", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:ef5a7059-6651-73b1-18b3-75b1b79c1565", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef5a7059-6651-73b1-18b3-75b1b79c1565", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:59f7feff-02aa-6539-2cf7-bea75b762140", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/59f7feff-02aa-6539-2cf7-bea75b762140", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.GV-1_3", - "ACN-B2-2-ID.GV-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:e3905a3c-97e7-0b4f-15fb-465c0927536f", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3905a3c-97e7-0b4f-15fb-465c0927536f", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:2f2ee1de-44aa-4762-b6bd-0893fc3f306d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:8dfab9c4-fe7b-49ad-85e4-1e9be085358f", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:8c5d3d8d-5cba-0def-257c-5ab9ea9644dc", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c5d3d8d-5cba-0def-257c-5ab9ea9644dc", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:433de59e-7a53-a766-02c2-f80f8421469a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/433de59e-7a53-a766-02c2-f80f8421469a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:0d04cb93-a0f1-2f4b-4b1b-a72a1b510d08", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0d04cb93-a0f1-2f4b-4b1b-a72a1b510d08", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:3153d9c0-2584-14d3-362d-578b01358aeb", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3153d9c0-2584-14d3-362d-578b01358aeb", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AT-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:2913021d-f2fd-4f3d-b958-22354e2bdbcb", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:c6fe3856-4635-36b6-983c-070da12a953b", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6fe3856-4635-36b6-983c-070da12a953b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:cb8841d4-9d13-7292-1d06-ba4d68384681", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb8841d4-9d13-7292-1d06-ba4d68384681", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_9", - "ACN-B2-2-PR.IP-9_10" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:0e6763cc-5078-4e64-889d-ff4d9a839047", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:564feb30-bf6a-4854-b4bb-0d2d2d1e6c66", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:22730e10-96f6-4aac-ad84-9383d35b5917", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:4da35fc9-c9e7-4960-aec9-797fe7d9051d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:bd352bd5-2853-4985-bf0d-73806b4a5744", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:58a51cde-008b-1a5d-61b5-d95849770677", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58a51cde-008b-1a5d-61b5-d95849770677", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8", - "ACN-B2-2-PR.IP-9_9", - "ACN-B2-2-PR.IP-9_10", - "ACN-B2-2-PR.PT-5_1-bis" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:0a9fbe0d-c5c4-4da8-87d8-f4fd77338835", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:a28323fe-276d-3787-32d2-cef6395764c4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a28323fe-276d-3787-32d2-cef6395764c4", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:b0f33259-77d7-4c9e-aac6-3aabcfae693c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8", - "ACN-B2-2-DE.CM-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:1e7fed80-8321-4605-b42c-65fc300f23a3", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:bdc59948-5574-49b3-bb91-76b7c986428d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:341bc9f1-7489-07d9-4ec6-971573e1546a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/341bc9f1-7489-07d9-4ec6-971573e1546a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:9daedab3-fb2d-461e-b861-71790eead4f6", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:b2ea1058-8998-3dd1-84f1-82132ad482fd", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b2ea1058-8998-3dd1-84f1-82132ad482fd", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_1", - "ACN-B2-2-ID.SC-4_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:6625638f-3ba1-7404-5983-0ea33d719d34", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6625638f-3ba1-7404-5983-0ea33d719d34", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:842c54e8-c2f9-4d79-ae8d-38d8b8019373", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:1a2a03a4-9992-5788-5953-d8f6615306de", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1a2a03a4-9992-5788-5953-d8f6615306de", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.GV-1_3", - "ACN-B2-2-ID.GV-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:c3d20c29-b36d-48fe-808b-99a87530ad99", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:1dbd51c2-2bd1-5e26-75ba-ed075d8f0d68", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1dbd51c2-2bd1-5e26-75ba-ed075d8f0d68", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:4a6f5cbd-6c6b-006f-2bb1-091af1441bce", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4a6f5cbd-6c6b-006f-2bb1-091af1441bce", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_3" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:04c4380f-3fae-46e8-96c9-30193528f602", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:d661e9eb-4e15-5ba1-6f02-cdc467db0d6c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d661e9eb-4e15-5ba1-6f02-cdc467db0d6c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.DS-1_7", - "ACN-B2-2-PR.DS-1_8", - "ACN-B2-2-PR.DS-1_9", - "ACN-B2-2-PR.DS-1_10", - "ACN-B2-2-PR.DS-1_11", - "ACN-B2-2-PR.DS-1_12" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:308fbb08-4ab8-4e67-9b29-592e93fb94fa", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:3f1216b0-30ee-1ac9-3899-63eb744e85f5", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3f1216b0-30ee-1ac9-3899-63eb744e85f5", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-1_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:bd4dc286-2f30-5b95-777c-681f3a7913d3", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd4dc286-2f30-5b95-777c-681f3a7913d3", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-1_3", - "ACN-B2-2-PR.IP-1_4", - "ACN-B2-2-PR.IP-1_5", - "ACN-B2-2-PR.IP-1_6", - "ACN-B2-2-PR.IP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:bed48b13-6647-468e-aa2f-1af1d3f4dd40", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:e6f7b584-877a-0d69-77d4-ab8b923a9650", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6f7b584-877a-0d69-77d4-ab8b923a9650", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-4_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:d9edcea6-6cb8-0266-a48c-2061fbac4310", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9edcea6-6cb8-0266-a48c-2061fbac4310", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-9_6", - "ACN-B2-2-PR.IP-9_7", - "ACN-B2-2-PR.IP-9_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:2c6bee3a-2180-2430-440d-db3c7a849870", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2c6bee3a-2180-2430-440d-db3c7a849870", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:b470a37a-7a47-3792-34dd-7a793140702e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b470a37a-7a47-3792-34dd-7a793140702e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:d36700f2-2f0d-7c2a-059c-bdadd1d79f70", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d36700f2-2f0d-7c2a-059c-bdadd1d79f70", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4", - "ACN-B2-2-ID.SC-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:475aae12-b88a-4572-8b36-9b712b2b3a17", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:d7c1ecc3-2980-a079-1569-91aec8ac4a77", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7c1ecc3-2980-a079-1569-91aec8ac4a77", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:bb91dfba-c30d-4263-9add-9c2384e659a6", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:67ada943-8539-083d-35d0-7af648974125", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/67ada943-8539-083d-35d0-7af648974125", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:b3c8cc83-20d3-3890-8bc8-5568777670f4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b3c8cc83-20d3-3890-8bc8-5568777670f4", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-4_3", - "ACN-B2-2-ID.SC-4_4", - "ACN-B2-2-ID.SC-4_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:23d1a569-2d1e-7f43-9e22-1f94115b7dd5", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/23d1a569-2d1e-7f43-9e22-1f94115b7dd5", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:2401b496-7f23-79b2-9f80-89bb5abf3d4a", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2401b496-7f23-79b2-9f80-89bb5abf3d4a", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-RS.RP-1_2", - "ACN-B2-2-RS.RP-1_3", - "ACN-B2-2-RS.RP-1_4", - "ACN-B2-2-RS.RP-1_5", - "ACN-B2-2-RS.RP-1_6", - "ACN-B2-2-RS.RP-1_7" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:0dcbaf2f-075e-947b-8f4c-74ecc5cd302c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0dcbaf2f-075e-947b-8f4c-74ecc5cd302c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-1_3", - "ACN-B2-2-ID.SC-1_4", - "ACN-B2-2-ID.SC-1_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:e71308d3-144b-4262-b144-efdc3cc90517", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:b7897ddc-9716-2460-96f7-7757ad038cc4", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b7897ddc-9716-2460-96f7-7757ad038cc4", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.RA-5_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:6de65dc4-8b4f-34b7-9290-eb137a2e2929", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6de65dc4-8b4f-34b7-9290-eb137a2e2929", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-2_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:aeed863a-0f56-429f-945d-8bb66bd06841", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aeed863a-0f56-429f-945d-8bb66bd06841", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.AC-3_5" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:055aa869-bc98-4af8-bafc-23f1ab6ffe2c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-1_5", - "ACN-B2-2-DE.CM-1_6", - "ACN-B2-2-DE.CM-1_7", - "ACN-B2-2-DE.CM-1_8" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:9150259b-617b-596d-3bf5-5ca3fce20335", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9150259b-617b-596d-3bf5-5ca3fce20335", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-ID.SC-2_1", - "ACN-B2-2-ID.SC-2_2", - "ACN-B2-2-ID.SC-3_1" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:a4fe33eb-e377-4efb-ab31-0784311bc499", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:a3a6ea0c-e018-4933-9ef0-5aaa1501449b", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.AE-3_9" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:a1840de2-8088-4ea8-b153-b4c723e9cb01", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:6581d072-105e-4418-827f-bd446d56421b", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:af227964-5b8b-22a2-9364-06d2cb9d6d7c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af227964-5b8b-22a2-9364-06d2cb9d6d7c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.IP-4_5", - "ACN-B2-2-PR.IP-4_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:42116f15-5665-a52a-87bb-b40e64c74b6c", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42116f15-5665-a52a-87bb-b40e64c74b6c", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-PR.MA-1_2", - "ACN-B2-2-PR.MA-1_3", - "ACN-B2-2-PR.MA-1_4", - "ACN-B2-2-PR.MA-1_5", - "ACN-B2-2-PR.MA-1_6" - ] - }, - { - "policyDefinitionReferenceId": "ACN-B2-2:7fe3b40f-802b-4cdd-8bd4-fd799c948cc2", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2", - "parameters": {}, - "groupNames": [ - "ACN-B2-2-DE.CM-7_1", - "ACN-B2-2-DE.CM-7_2", - "ACN-B2-2-DE.CM-7_3", - "ACN-B2-2-DE.CM-7_4" - ] + "displayName": "ACN_B2_2_QC2_Critici", + "policyType": "Custom", + "description": "This initiative includes policies that address the ACN controls for Qualifications QC2.", + "metadata": { + "category": "Regulatory Compliance", + "version": "1.2.0", + "preview": false + }, + "version": "1.2.0", + "policyDefinitionGroups": [ + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.GV_1_3", + "name": "ACN_B2_2_ID.GV_1_3", + "description": "È identificata e resa nota una policy di cybersecurity | [3] Ogni scostamento dai livelli minimi di sicurezza definito internamente nel documento di cui al punto 1 deve essere identificato, gestito ed eventualmente autorizzato dal soggetto attraverso un processo di governance strutturato", + "category": "Governance (ID.GV)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.GV_1_4", + "name": "ACN_B2_2_ID.GV_1_4", + "description": "È identificata e resa nota una policy di cybersecurity | [4] Esiste un documento aggiornato recante indicazioni in merito alla pianificazione, ai ruoli, all'implementazione, operazione, valutazione, e miglioramento di programmi di cybersecurity sia in relazione al personale interno che per eventuali terze parti", + "category": "Governance (ID.GV)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.RA_1_3", + "name": "ACN_B2_2_ID.RA_1_3", + "description": "Le vulnerabilità delle risorse (es. sistemi, locali, dispositivi) dell'organizzazione sono identificate e documentate | [3] Le relazioni periodiche delle verifiche e dei test di cui al punto 1 devono contenere almeno", + "category": "Risk Assessment (ID.RA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.RA_1_4", + "name": "ACN_B2_2_ID.RA_1_4", + "description": "Le vulnerabilità delle risorse (es. sistemi, locali, dispositivi) dell'organizzazione sono identificate e documentate | [4] Esiste un documento per la correzione delle vulnerabilità che prevede anche, la notifica alle parti interessate", + "category": "Risk Assessment (ID.RA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.RA_5_4", + "name": "ACN_B2_2_ID.RA_5_4", + "description": "Le minacce, le vulnerabilità, le relative probabilità di accadimento e conseguenti impatti sono utilizzati per determinare il rischio | [4] Esiste un documento aggiornato di valutazione del rischio (risk assessment) che comprende almeno", + "category": "Risk Assessment (ID.RA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_1_3", + "name": "ACN_B2_2_ID.SC_1_3", + "description": "I processi di gestione del rischio inerenti la catena di approvvigionamento cyber sono identificati, ben definiti, validati, gestiti e approvati da attori interni all'organizzazione | [3] Sono presenti politiche e procedure per la definizione, implementazione e applicazione del modello di responsabilità della sicurezza condivisa (Shared Security Responsibility Model-SSRM) all'interno dell'organizzazione, le quali dovranno essere riviste e aggiornate almeno su base annuale.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_1_4", + "name": "ACN_B2_2_ID.SC_1_4", + "description": "I processi di gestione del rischio inerenti la catena di approvvigionamento cyber sono identificati, ben definiti, validati, gestiti e approvati da attori interni all'organizzazione | [4] Il modello SSRM è applicato a tutta la catena di approvvigionamento cyber, ivi inclusi altri servizi cloud utilizzati dall'organizzazione.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_1_5", + "name": "ACN_B2_2_ID.SC_1_5", + "description": "I processi di gestione del rischio inerenti la catena di approvvigionamento cyber sono identificati, ben definiti, validati, gestiti e approvati da attori interni all'organizzazione | [5] È fornita una chiara definizione in merito alla condivisione delle responsabilità.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_2_1", + "name": "ACN_B2_2_ID.SC_2_1", + "description": "I fornitori e i partner terzi di sistemi informatici, componenti e servizi sono identificati, prioritizzati e valutati utilizzando un processo di valutazione del rischio inerente la catena di approvvigionamento cyber | [1] In merito all'affidamento di forniture per i servizi cloud sono adottate misure in materia di sicurezza della catena di approvvigionamento cyber attraverso", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_2_2", + "name": "ACN_B2_2_ID.SC_2_2", + "description": "I fornitori e i partner terzi di sistemi informatici, componenti e servizi sono identificati, prioritizzati e valutati utilizzando un processo di valutazione del rischio inerente la catena di approvvigionamento cyber | [2] Esiste un elenco aggiornato dei fornitori e partner terzi affidatari per la fornitura di servizi cloud, nonché di dipendenze esterne, corredato dalla relativa documentazione del processo di valutazione di cui al punto 1.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_3_1", + "name": "ACN_B2_2_ID.SC_3_1", + "description": "I contratti con i fornitori e i partner terzi sono utilizzati per realizzare appropriate misure progettate per rispettare gli obiettivi del programma di cybersecurity dell'organizzazione e del Piano di Gestione del Rischio della catena di approvvigionamento cyber. | [1] Le misure di sicurezza implementate dal soggetto in relazione a dipendenze interne sono coerenti, anche in relazione agli esiti dell'analisi del rischio, con le misure di sicurezza applicate al servizio cloud. A tal fine, i contratti, gli accordi o le convenzioni sono aggiornati di conseguenza.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_4_1", + "name": "ACN_B2_2_ID.SC_4_1", + "description": "Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [1] Esiste un documento aggiornato che descrive il processo, le modalità, la cadenza delle valutazioni per i fornitori e partner terzi, proporzionate agli esiti dell'analisi del rischio effettuata.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_4_2", + "name": "ACN_B2_2_ID.SC_4_2", + "description": "Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [2] Esiste una pianificazione aggiornata degli audit, delle verifiche o di altre forme di valutazione previste, nonché un registro di quelli effettuati e la relativa documentazione.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_4_3", + "name": "ACN_B2_2_ID.SC_4_3", + "description": "Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [3] È definito ed implementato un processo di Audit Management al fine di consentire lo svolgimento di valutazioni indipendenti e di garanzia, nel rispetto dei principali standard di settore, almeno su base annuale e secondo una pianificazione che tenga conto del rischio.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_4_4", + "name": "ACN_B2_2_ID.SC_4_4", + "description": "Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [4] Le politiche e procedure di audit e garanzia degli standard, devono essere stabilite, documentate, approvate, mantenute e riviste almeno annualmente.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_ID.SC_4_5", + "name": "ACN_B2_2_ID.SC_4_5", + "description": "Fornitori e partner terzi sono regolarmente valutati utilizzando audit, verifiche, o altre forme di valutazione per confermare il rispetto degli obblighi contrattuali | [5] È definito, documentato, approvato, comunicato, applicato e mantenuto un piano di Remediation.", + "category": "Supply Chain Risk Management (ID.SC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.AC_1_7", + "name": "ACN_B2_2_PR.AC_1_7", + "description": "Le identità digitali e le credenziali di accesso per gli utenti, i dispositivi e i processi autorizzati sono amministrate, verificate, revocate e sottoposte ad audit di sicurezza | [7] Esiste un documento aggiornato di dettaglio contenente almeno", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.AC_3_5", + "name": "ACN_B2_2_PR.AC_3_5", + "description": "L'accesso remoto alle risorse è amministrato | [5] Esiste un documento aggiornato di dettaglio contenente almeno", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.AC_4_4", + "name": "ACN_B2_2_PR.AC_4_4", + "description": "I diritti di accesso alle risorse e le relative autorizzazioni sono amministrati secondo il principio del privilegio minimo e della separazione delle funzioni | [4] Esiste un documento aggiornato di dettaglio recante i processi di cui al punto 1", + "category": "Identity Management, Authentication and Access Control (PR.AC)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.AT_1_3", + "name": "ACN_B2_2_PR.AT_1_3", + "description": "Il personale del soggetto è informato e addestrato | [3] Per ogni membro del personale del soggetto, esiste un registro aggiornato, comprensivo delle istruzioni ricevute", + "category": "Awareness and Training (PR.AT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.DS_1_7", + "name": "ACN_B2_2_PR.DS_1_7", + "description": "I dati memorizzati sono protetti | [7] Nel caso di dati e di servizi critici delle Amministrazioni, non trovano applicazione le previsioni del requisito di cui alla sezione 2.2.7, PR.DS-1, punto 2. Con riferimento alle infrastrutture impiegate per l’erogazione del servizio cloud, nonché al trattamento dei dati e dei servizi dell’Amministrazione, ivi inclusi i metadati, resta fermo, pertanto, quanto previsto dall'allegato B al Regolamento, requisito SC-SI-PR.DS-1-01", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.DS_1_8", + "name": "ACN_B2_2_PR.DS_1_8", + "description": "I dati memorizzati sono protetti | [8] Esiste un documento aggiornato di dettaglio che indica, anche in relazione alla categoria ID.AM, almeno", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.DS_1_9", + "name": "ACN_B2_2_PR.DS_1_9", + "description": "I dati memorizzati sono protetti | [9] Il servizio cloud supporta un meccanismo di cifratura di tipo Bring Your Own Key (BYOK), che consente all’Amministrazione di generare autonomamente, almeno la chiave principale di cifratura (root key), attraverso un HSM ospitato, alternativamente, presso", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.DS_1_10", + "name": "ACN_B2_2_PR.DS_1_10", + "description": "I dati memorizzati sono protetti | [10] Il soggetto mette a disposizione la funzionalità di importazione sicura delle chiavi di cui al punto 10 nel cloud, per l’esercizio di tutte le operazioni di gestione delle chiavi e della cifratura nel cloud", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.DS_1_11", + "name": "ACN_B2_2_PR.DS_1_11", + "description": "I dati memorizzati sono protetti | [11] Sono definite ed implementate procedure e misure tecniche misure per la distruzione delle chiavi memorizzate al di fuori di un ambiente sicuro e revocare le chiavi memorizzate nei moduli di sicurezza hardware (HSM) quando non sono più necessari, in conformità con requisiti legali e normativi", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.DS_1_12", + "name": "ACN_B2_2_PR.DS_1_12", + "description": "I dati memorizzati sono protetti | [12] Esiste un documento aggiornato di dettaglio recante i processi di cui al punto 1", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.DS_3_2", + "name": "ACN_B2_2_PR.DS_3_2", + "description": "Il trasferimento fisico, la rimozione e la distruzione dei dispositivi atti alla memorizzazione di dati sono gestiti attraverso un processo formale | [2] Sono abilitate capacità di geo-localizzazione remota per tutti i dispositivi mobili gestiti [SaaS]", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.DS_3_3", + "name": "ACN_B2_2_PR.DS_3_3", + "description": "Il trasferimento fisico, la rimozione e la distruzione dei dispositivi atti alla memorizzazione di dati sono gestiti attraverso un processo formale | [3] Sono definite ed implementate adeguate tecniche di cancellazione dei dati dell’Amministrazione da remoto [SaaS]", + "category": "Data Security (PR.DS)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_1_2", + "name": "ACN_B2_2_PR.IP_1_2", + "description": "Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [2] Esiste un documento aggiornato di dettaglio che indica, anche in relazione alla categoria ID.AM, almeno", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_1_3", + "name": "ACN_B2_2_PR.IP_1_3", + "description": "Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [3] Sono definiti e documentati requisiti di base per la sicurezza delle diverse applicazioni", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_1_4", + "name": "ACN_B2_2_PR.IP_1_4", + "description": "Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [4] Sono definite ed implementate metriche tecniche e operative in linea con i requisiti di sicurezza e gli obblighi di conformitÃ", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_1_5", + "name": "ACN_B2_2_PR.IP_1_5", + "description": "Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [5] Esiste un processo di mitigazione e ripristino per la sicurezza delle applicazioni, automatizzando la mitigazione automatizzata delle vulnerabilità quando possibile", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_1_6", + "name": "ACN_B2_2_PR.IP_1_6", + "description": "Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [6] È presente un processo per la convalida della compatibilità del dispositivo con sistemi operativi e applicazioni [PaaS, SaaS]", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_1_7", + "name": "ACN_B2_2_PR.IP_1_7", + "description": "Sono definite e gestite delle pratiche di riferimento (c.d. baseline) per la configurazione dei sistemi IT e di controllo industriale che incorporano principi di sicurezza (es. principio di minima funzionalità) | [7] È presente un sistema di gestione delle variazioni in termini di sistema operativo, patching e/o applicazioni [PaaS, SaaS]", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_2_1", + "name": "ACN_B2_2_PR.IP_2_1", + "description": "Viene implementato un processo per la gestione del ciclo di vita dei sistemi (System Development Life Cycle) | [1] Sono implementate linee guida e misure tecniche/organizzative per lo sviluppo sicuro del servizio cloud, in aderenza alle linee guida OWASP in merito alla sicurezza nello sviluppo del software (requisiti, progettazione, implementazione, test e verifica). Devono essere resi disponibili all'Agenzia per la Cybersicurezza Nazionale (ACN) e alla Amministrazione i report sui test OWASP condotti, garantendo l'assenza di vulnerabilità di tipo \"high\" o \"critical\"", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_4_5", + "name": "ACN_B2_2_PR.IP_4_5", + "description": "I backup delle informazioni sono eseguiti, amministrati e verificati | [5] Esiste un documento aggiornato di dettaglio che indica, anche in relazione alla categoria ID.AM, almeno", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_4_6", + "name": "ACN_B2_2_PR.IP_4_6", + "description": "I backup delle informazioni sono eseguiti, amministrati e verificati | [6] Esiste un documento aggiornato di dettaglio recante i processi di cui al punto 1", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_9_6", + "name": "ACN_B2_2_PR.IP_9_6", + "description": "Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [6] Esiste un documento aggiornato di dettaglio che indica i livelli di servizio attesi dal servizio cloud e, se previsti, dalle hot-replica e/o cold-replica nonché dal sito(i) di disaster recovery", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_9_7", + "name": "ACN_B2_2_PR.IP_9_7", + "description": "Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [7] Esiste un documento aggiornato di dettaglio contenente i piani di disaster recovery, nonché quelli di risposta e di recupero in caso di incidenti, che comprende almeno", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_9_8", + "name": "ACN_B2_2_PR.IP_9_8", + "description": "Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [8] Esiste un documento aggiornato recante l'elenco delle attività di istruzione, formazione ed esercitazione svolte", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_9_9", + "name": "ACN_B2_2_PR.IP_9_9", + "description": "Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [9] Le strategie di disaster recovery sono collaudate e comunicate alle parti interessate", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_9_10", + "name": "ACN_B2_2_PR.IP_9_10", + "description": "Sono attivi ed amministrati piani di risposta (Incident Response e Business Continuity) e recupero (Incident Recovery e Disaster Recovery) in caso di incidente/disastro | [10] I dispositivi critici per il funzionamento del servizio cloud sono ridondati e, se situati in località diverse, ad una distanza in linea con le migliori pratiche del settore", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_12_3", + "name": "ACN_B2_2_PR.IP_12_3", + "description": "Viene sviluppato e implementato un piano di gestione delle vulnerabilità | [3] Sono definite ed implementate misure tecniche per l'identificazione degli aggiornamenti per le applicazioni che usano librerie di terze parti o open, nel rispetto delle politiche interne di vulnerability management", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.IP_12_4", + "name": "ACN_B2_2_PR.IP_12_4", + "description": "Viene sviluppato e implementato un piano di gestione delle vulnerabilità | [4] Il documento di cui al punto 1 della misura PR.IP-12 dovrà essere aggiornato su base semestrale.", + "category": "Information Protection Processes and Procedures (PR.IP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.MA_1_2", + "name": "ACN_B2_2_PR.MA_1_2", + "description": "La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [2] Esiste un documento aggiornato di dettaglio recante i processi e le politiche di cui al punto 1.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.MA_1_3", + "name": "ACN_B2_2_PR.MA_1_3", + "description": "La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [3] Le attività di cui al punto 3 sono volte a verificare anche aspetti di sicurezza.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.MA_1_4", + "name": "ACN_B2_2_PR.MA_1_4", + "description": "La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [4] Gli aggiornamenti software sono consentiti solo da fonti pre-autorizzate.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.MA_1_5", + "name": "ACN_B2_2_PR.MA_1_5", + "description": "La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [5] Tutti i log relativi alle attività di manutenzione e aggiornamento sono prodotti e custoditi su sistemi separati da quelli oggetto di intervento e non accessibili dalle utenze che svolgono tali attività.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.MA_1_6", + "name": "ACN_B2_2_PR.MA_1_6", + "description": "La manutenzione e la riparazione delle risorse e dei sistemi è eseguita e registrata con strumenti controllati ed autorizzati | [6] Esiste un documento aggiornato che descrive, almeno, i processi e gli strumenti tecnici impiegati per realizzare i punti 3, 4 e 5.", + "category": "Maintenance (PR.MA)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_PR.PT_5_1_bis", + "name": "ACN_B2_2_PR.PT_5_1_bis", + "description": "Sono implementati meccanismi (es. failsafe, load balancing, hot swap) che permettono di soddisfare requisiti di resilienza sia durante il normale esercizio che in situazioni avverse | [1-bis] In relazione ai piani previsti dalla sottocategoria PR.IP-9:", + "category": "Protective Technology (PR.PT)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.AE_3_9", + "name": "ACN_B2_2_DE.AE_3_9", + "description": "Le informazioni relative agli eventi sono raccolte e correlate da sensori e sorgenti multiple | [9] Esiste un repository centralizzato che contiene i log di accesso degli utenti del soggetto, gestito direttamente dal soggetto e segregato a livello logico rispetto ai sistemi a cui terze parti hanno accesso diretto", + "category": "Anomalies and Events (DE.AE)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_1_5", + "name": "ACN_B2_2_DE.CM_1_5", + "description": "Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [5] Il traffico in ingresso e uscita, le attività dei sistemi perimetrali, quali router e firewall, gli eventi amministrativi di rilievo, nonché gli accessi eseguiti o falliti alle risorse di rete e alle postazioni terminali sono monitorati e correlati al fine di identificare eventi di cybersecurity.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_1_6", + "name": "ACN_B2_2_DE.CM_1_6", + "description": "Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [6] Gli strumenti tecnici di cui ai punti 1, 3, 4 e 5 sono aggiornati, manutenuti e ben configurati, nel rispetto delle politiche di cui alle categorie PR.AC, PR.DS, PR.IP e PR.MA e concorrono al rispetto delle politiche di cui alla categoria ID.AM, ID.GV, ID.SC, PR.AC e PR.DS.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_1_7", + "name": "ACN_B2_2_DE.CM_1_7", + "description": "Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [7] Gli strumenti tecnici di cui ai punti 1, 3, 4 e 5sono impiegati anche per i fini di cui alla categoria DE.AE", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_1_8", + "name": "ACN_B2_2_DE.CM_1_8", + "description": "Viene svolto il monitoraggio della rete informatica per rilevare potenziali eventi di cybersecurity | [8] Esiste un documento aggiornato che descrive, almeno:", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_4_4", + "name": "ACN_B2_2_DE.CM_4_4", + "description": "Il codice malevolo viene rilevato | [4] Sono configurati appositi software firewall su tutti i dispositivi.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_4_5", + "name": "ACN_B2_2_DE.CM_4_5", + "description": "Il codice malevolo viene rilevato | [5] I file in ingresso (tramite posta elettronica, download, dispositivi removibili, etc.) sono analizzati, anche tramite sandbox.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_4_6", + "name": "ACN_B2_2_DE.CM_4_6", + "description": "Il codice malevolo viene rilevato | [6] Gli strumenti tecnici di cui ai punti 1,4 e 5 sono aggiornati, mantenuti e ben configurati, nel rispetto delle politiche di cui alle categorie PR.AC, PR.DS, PR.IP e PR.MA e concorrono al rispetto delle politiche di cui alle categorie ID.AM, ID.GV, ID.SC, PR.AC e PR.DS.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_4_7", + "name": "ACN_B2_2_DE.CM_4_7", + "description": "Il codice malevolo viene rilevato | [7] Esiste un documento aggiornato che descrive, almeno:", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_7_1", + "name": "ACN_B2_2_DE.CM_7_1", + "description": "Viene svolto il monitoraggio per rilevare personale, connessioni, dispositivi o software non autorizzati | [1] Con riferimento alla sottocategoria PR.AC-3, viene rilevata la presenza di personale con potenziale accesso fisico o remoto non autorizzato alle risorse. A tal fine, sono presenti sistemi di sorveglianza e controllo di accesso, anche automatizzati.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_7_2", + "name": "ACN_B2_2_DE.CM_7_2", + "description": "Viene svolto il monitoraggio per rilevare personale, connessioni, dispositivi o software non autorizzati | [2] Con riferimento alla sottocategoria ID.AM-1, vengono rilevati dispositivi (anche fisici) non approvati. A tal fine, fatti salvi documentati limiti tecnici, sono presenti almeno dei sistemi di controllo di accesso di rete.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_7_3", + "name": "ACN_B2_2_DE.CM_7_3", + "description": "Viene svolto il monitoraggio per rilevare personale, connessioni, dispositivi o software non autorizzati | [3] Gli strumenti tecnici di cui ai punti 1e 2 sono aggiornati, mantenuti e ben configurati, nel rispetto delle politiche di cui alle categorie PR.AC, PR.DS, PR.IP e PR.MA e concorrono al rispetto delle politiche di cui alle categorie ID.AM, ID.GV, ID.SC, PR.AC e PR.DS.", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_DE.CM_7_4", + "name": "ACN_B2_2_DE.CM_7_4", + "description": "Viene svolto il monitoraggio per rilevare personale, connessioni, dispositivi o software non autorizzati | [4] Esiste un documento aggiornato che descrive, almeno:", + "category": "Security Continuous Monitoring (DE.CM)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.RP_1_2", + "name": "ACN_B2_2_RS.RP_1_2", + "description": "Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [2] Le politiche e procedure per la gestione tempestiva degli incidenti di sicurezza sono riviste almeno su base annuale.", + "category": "Response Planning (RS.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.RP_1_3", + "name": "ACN_B2_2_RS.RP_1_3", + "description": "Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [3] Il piano di risposta e le politiche e procedure di cui ai punti 1 e 2 includono dipartimenti interni critici, l’Amministrazione (se impattata) e tutte le terze parti interessate.", + "category": "Response Planning (RS.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.RP_1_4", + "name": "ACN_B2_2_RS.RP_1_4", + "description": "Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [4] I piani di risposta agli incidenti sono collaudati e aggiornati ad intervalli pianificati o in caso di cambiamenti organizzativi o ambientali significativi.", + "category": "Response Planning (RS.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.RP_1_5", + "name": "ACN_B2_2_RS.RP_1_5", + "description": "Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [5] Sono definite e monitorate le metriche degli incidenti rilevanti in materia di cybersecurity.", + "category": "Response Planning (RS.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.RP_1_6", + "name": "ACN_B2_2_RS.RP_1_6", + "description": "Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [6] Sono definiti e implementati processi, procedure e misure di supporto ai processi aziendali per il triage degli eventi legati alla sicurezza.", + "category": "Response Planning (RS.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.RP_1_7", + "name": "ACN_B2_2_RS.RP_1_7", + "description": "Esiste un piano di risposta (response plan) e questo viene eseguito durante o dopo un incidente | [7] Deve essere implementato un Computer Emergency Response Team (CERT), a coordinamento della fase di risoluzione degli incidenti e in aderenza a quanto definito dalle linee guida ISO/IEC 27035-2. Inoltre, deve essere previsto il coinvolgimento periodico dell’Amministrazione in momenti di condivisione e revisione dello stato degli incidenti di interesse e, ove opportuno, nella risoluzione di tali incidenti, anche secondo gli accordi contrattuali in materia.", + "category": "Response Planning (RS.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.CO_1_4", + "name": "ACN_B2_2_RS.CO_1_4", + "description": "Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [4] Esiste un registro aggiornato delle esercitazioni effettuate e dei partecipanti, con le relative lezioni apprese (lessons learned).", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.CO_1_5", + "name": "ACN_B2_2_RS.CO_1_5", + "description": "Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [5] Sono presenti politiche e procedure per la gestione degli incidenti di sicurezza, E-Discovery e Cloud Forensics, le quali dovranno essere riviste e aggiornate almeno su base annuale.", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.CO_1_6", + "name": "ACN_B2_2_RS.CO_1_6", + "description": "Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [6] Sono definiti ed implementati processi, procedure e misure tecniche per le notifiche di violazione della sicurezza.", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.CO_1_7", + "name": "ACN_B2_2_RS.CO_1_7", + "description": "Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [7] È previsto un meccanismo di segnalazione per ogni violazione della sicurezza, reale o presunta, comprese eventuali violazioni inerenti la supply chain, nel rispetto di SLA, leggi e regolamenti applicabili.", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RS.CO_1_8", + "name": "ACN_B2_2_RS.CO_1_8", + "description": "Il personale conosce il proprio ruolo e le operazioni che deve svolgere in caso sia necessaria una risposta ad un incidente | [8] Le attività di risposta condotte a seguito di un incidente vengono comunicate alle parti interessate interne ed esterne all'organizzazione, inclusi i dirigenti ed i vertici dell'organizzazione. In particolare, le attività di ripristino a seguito di un incidente sono comunicate alle parti interne ed esterne interessate (es. le vittime, gli ISP, i proprietari dei sistemi attaccati, i vendor, i CERT/CSIRT), ivi incluse le articolazioni competenti del soggetto, anche ai fini dell'eventuale interlocuzione con il CSIRT Italia.", + "category": "Communications (RS.CO)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RC.RP_1_3", + "name": "ACN_B2_2_RC.RP_1_3", + "description": "Esiste un piano di ripristino (recovery plan) e viene eseguito durante o dopo un incidente di cybersecurity | [3] Il piano di ripristino viene testato, su base semestrale, nell’ambito di due esercitazioni annuali.", + "category": "Recovery Planning (RC.RP)" + }, + { + "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/ACN_B2_2_RC.CO_3_1", + "name": "ACN_B2_2_RC.CO_3_1", + "description": "Le attività di ripristino condotte a seguito di un incidente vengono comunicate alle parti interessate interne ed esterne all'organizzazione, inclusi i dirigenti ed i vertici dell'organizzazione | [1] Le attività di ripristino a seguito di un incidente sono comunicate alle parti interne ed esterne interessate (es. le vittime, gli ISP, i proprietari dei sistemi attaccati, i vendor, i CERT/CSIRT).", + "category": "Communications (RC.CO)" + } + ], + "parameters": { + "IncludeArcMachines-1": { + "type": "String", + "metadata": { + "displayName": "Include Arc connected servers", + "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.", + "portalReview": "true" + }, + "allowedValues": [ + "true", + "false" + ], + "defaultValue": "false" + }, + "NotAvailableMachineState-1": { + "type": "String", + "metadata": { + "displayName": "Status if Windows Defender is not available on machine", + "description": "Windows Defender Exploit Guard is only available starting with Windows 10/Windows Server with update 1709. Setting this value to 'Non-Compliant' shows machines with older versions on which Windows Defender Exploit Guard is not available (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' shows these machines as compliant." + }, + "allowedValues": [ + "Compliant", + "Non-Compliant" + ], + "defaultValue": "Compliant" + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1806 - Governance And Privacy Program", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.GV_1_3", + "ACN_B2_2_ID.GV_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/956b00aa-7977-4214-a0f5-e0428c1f9bff" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1729 - Information Security Program Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.GV_1_3", + "ACN_B2_2_ID.GV_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f5a44e7d-77a2-474e-b2e3-4e8c42ba514b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1490 - Security Planning Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.GV_1_3", + "ACN_B2_2_ID.GV_1_4", + "ACN_B2_2_ID.SC_4_1", + "ACN_B2_2_ID.SC_4_2", + "ACN_B2_2_DE.CM_4_5", + "ACN_B2_2_DE.CM_4_6", + "ACN_B2_2_DE.CM_4_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1730 - Information Security Program Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.GV_1_3", + "ACN_B2_2_ID.GV_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1fa50212-51a9-471b-95cf-3a23410ec9e9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1491 - Security Planning Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.GV_1_3", + "ACN_B2_2_ID.GV_1_4", + "ACN_B2_2_ID.SC_4_1", + "ACN_B2_2_ID.SC_4_2", + "ACN_B2_2_DE.CM_4_5", + "ACN_B2_2_DE.CM_4_6", + "ACN_B2_2_DE.CM_4_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b" + }, + { + "policyDefinitionReferenceId": "Review and update planning policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.GV_1_3", + "ACN_B2_2_ID.GV_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28aa060e-25c7-6121-05d8-a846f11433df" + }, + { + "policyDefinitionReferenceId": "Develop access control policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.GV_1_3", + "ACN_B2_2_ID.GV_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/59f7feff-02aa-6539-2cf7-bea75b762140" + }, + { + "policyDefinitionReferenceId": "Govern policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.GV_1_3", + "ACN_B2_2_ID.GV_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1a2a03a4-9992-5788-5953-d8f6615306de" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9", + "policyDefinitionReferenceId": "Microsoft Managed Control 1550 - Vulnerability Scanning", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1149 - Security Assessments - Specialized Assessments", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.RA_1_3", + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62", + "policyDefinitionReferenceId": "Microsoft Managed Control 1553 - Vulnerability Scanning - Breadth - Depth Of Coverage", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1546 - Vulnerability Scanning", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.RA_1_3", + "ACN_B2_2_PR.IP_12_3", + "ACN_B2_2_PR.IP_12_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb", + "policyDefinitionReferenceId": "Microsoft Managed Control 1548 - Vulnerability Scanning", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/70a7a065-a060-85f8-7863-eb7850ed2af9", + "policyDefinitionReferenceId": "Produce Security Assessment report", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ff136354-1c92-76dc-2dab-80fb7c6a9f1a", + "policyDefinitionReferenceId": "Observe and report security weaknesses", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4a6f5cbd-6c6b-006f-2bb1-091af1441bce", + "policyDefinitionReferenceId": "Review malware detections report weekly", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a", + "policyDefinitionReferenceId": "Microsoft Managed Control 1157 - Plan Of Action And Milestones", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c", + "policyDefinitionReferenceId": "Microsoft Managed Control 1670 - Flaw Remediation", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1", + "policyDefinitionReferenceId": "Microsoft Managed Control 1675 - Flaw Remediation - Time To Remediate Flaws - Benchmarks For Corrective Actions", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1668 - Flaw Remediation", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.RA_1_4", + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac", + "policyDefinitionReferenceId": "Microsoft Managed Control 1603 - Developer Security Testing And Evaluation", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1549 - Vulnerability Scanning", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.RA_1_4", + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002", + "policyDefinitionReferenceId": "Microsoft Managed Control 1674 - Flaw Remediation - Time To Remediate Flaws - Benchmarks For Corrective Actions", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3905a3c-97e7-0b4f-15fb-465c0927536f", + "policyDefinitionReferenceId": "Correlate Vulnerability scan information", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3f1216b0-30ee-1ac9-3899-63eb744e85f5", + "policyDefinitionReferenceId": "Obtain Admin documentation", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434", + "policyDefinitionReferenceId": "Microsoft Managed Control 1541 - Risk Assessment", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502", + "policyDefinitionReferenceId": "Microsoft Managed Control 1536 - Risk Assessment Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1", + "policyDefinitionReferenceId": "Microsoft Managed Control 1545 - Risk Assessment", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d", + "policyDefinitionReferenceId": "Microsoft Managed Control 1542 - Risk Assessment", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1", + "policyDefinitionReferenceId": "Microsoft Managed Control 1537 - Risk Assessment Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624", + "policyDefinitionReferenceId": "Microsoft Managed Control 1543 - Risk Assessment", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/677e1da4-00c3-287a-563d-f4a1cf9b99a0", + "policyDefinitionReferenceId": "Conduct Risk Assessment", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c5d3d8d-5cba-0def-257c-5ab9ea9644dc", + "policyDefinitionReferenceId": "Perform a risk assessment", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6fe3856-4635-36b6-983c-070da12a953b", + "policyDefinitionReferenceId": "Implement the risk management strategy", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1dbd51c2-2bd1-5e26-75ba-ed075d8f0d68", + "policyDefinitionReferenceId": "Conduct risk assessment and document its results", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Establish a risk management strategy", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.RA_5_4", + "ACN_B2_2_ID.SC_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d36700f2-2f0d-7c2a-059c-bdadd1d79f70" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7c1ecc3-2980-a079-1569-91aec8ac4a77", + "policyDefinitionReferenceId": "Conduct risk assessment and distribute its results", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_ID.RA_5_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b7897ddc-9716-2460-96f7-7757ad038cc4", + "policyDefinitionReferenceId": "Assign risk designations", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1574 - Acquisitions Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1559 - System And Services Acquisition Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5", + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2", + "ACN_B2_2_ID.SC_3_1", + "ACN_B2_2_PR.IP_2_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1570 - Acquisitions Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1572 - Acquisitions Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1573 - Acquisitions Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1569 - Acquisitions Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1571 - Acquisitions Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1608 - Supply Chain Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5", + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2", + "ACN_B2_2_ID.SC_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f" + }, + { + "policyDefinitionReferenceId": "Define information security roles and responsibilities", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef5a7059-6651-73b1-18b3-75b1b79c1565" + }, + { + "policyDefinitionReferenceId": "Identify individuals with security roles and responsibilities", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_1_3", + "ACN_B2_2_ID.SC_1_4", + "ACN_B2_2_ID.SC_1_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0dcbaf2f-075e-947b-8f4c-74ecc5cd302c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1811 - Privacy Requirements for Contractors And Service Providers", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d1d4ce2-71ea-4578-bbb4-fe76215d45ac" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1151 - System Interconnections", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1531 - Third-Party Personnel Security", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1530 - Third-Party Personnel Security", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1588 - External Information System Services", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1810 - Privacy Requirements for Contractors And Service Providers", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/395736bb-aa8b-45f0-b9cc-06af26b2b1d4" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1529 - Third-Party Personnel Security", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2", + "ACN_B2_2_ID.SC_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1533 - Third-Party Personnel Security", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1586 - External Information System Services", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1587 - External Information System Services", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c" + }, + { + "policyDefinitionReferenceId": "Determine supplier contract obligations", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/67ada943-8539-083d-35d0-7af648974125" + }, + { + "policyDefinitionReferenceId": "Establish policies for supply chain risk management", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_2_1", + "ACN_B2_2_ID.SC_2_2", + "ACN_B2_2_ID.SC_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9150259b-617b-596d-3bf5-5ca3fce20335" + }, + { + "groupNames": [ + "ACN_B2_2_ID.SC_3_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0d04cb93-a0f1-2f4b-4b1b-a72a1b510d08", + "policyDefinitionReferenceId": "Assess risk in third party relationships", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1143 - Certification- Authorization- Security Assessment Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_1", + "ACN_B2_2_ID.SC_4_2", + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5", + "ACN_B2_2_PR.IP_12_3", + "ACN_B2_2_PR.IP_12_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1142 - Certification- Authorization- Security Assessment Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_1", + "ACN_B2_2_ID.SC_4_2", + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5", + "ACN_B2_2_PR.IP_12_3", + "ACN_B2_2_PR.IP_12_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1144 - Security Assessments", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_1", + "ACN_B2_2_ID.SC_4_2", + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5", + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51" + }, + { + "policyDefinitionReferenceId": "Develop and establish a system security plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_1", + "ACN_B2_2_ID.SC_4_2" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b2ea1058-8998-3dd1-84f1-82132ad482fd" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1145 - Security Assessments", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1168 - Continuous Monitoring - Independent Assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1146 - Security Assessments", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1148 - Security Assessments - Independent Assessors", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1150 - Security Assessments - External Organizations", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5", + "ACN_B2_2_PR.IP_12_3", + "ACN_B2_2_PR.IP_12_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb" + }, + { + "policyDefinitionReferenceId": "Develop audit and accountability policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a28323fe-276d-3787-32d2-cef6395764c4" + }, + { + "policyDefinitionReferenceId": "Review audit data", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6625638f-3ba1-7404-5983-0ea33d719d34" + }, + { + "policyDefinitionReferenceId": "Establish requirements for audit review and reporting", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_ID.SC_4_3", + "ACN_B2_2_ID.SC_4_4", + "ACN_B2_2_ID.SC_4_5" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b3c8cc83-20d3-3890-8bc8-5568777670f4" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274", + "policyDefinitionReferenceId": "Microsoft Managed Control 1312 - Identifier Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295", + "policyDefinitionReferenceId": "Microsoft Managed Control 1314 - Identifier Management", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1001 - Access Control Policy And Procedures Requirements", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.AC_1_7", + "ACN_B2_2_PR.AC_3_5", + "ACN_B2_2_PR.AC_4_4", + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1", + "policyDefinitionReferenceId": "Microsoft Managed Control 1005 - Account Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89", + "policyDefinitionReferenceId": "Microsoft Managed Control 1299 - Identification And Authentication Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6", + "policyDefinitionReferenceId": "Microsoft Managed Control 1311 - Identifier Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62", + "policyDefinitionReferenceId": "Microsoft Managed Control 1010 - Account Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8", + "policyDefinitionReferenceId": "Microsoft Managed Control 1006 - Account Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65", + "policyDefinitionReferenceId": "Microsoft Managed Control 1002 - Account Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee", + "policyDefinitionReferenceId": "Microsoft Managed Control 1298 - Identification And Authentication Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775", + "policyDefinitionReferenceId": "Microsoft Managed Control 1317 - Authenticator Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5", + "policyDefinitionReferenceId": "Microsoft Managed Control 1011 - Account Management", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1000 - Access Control Policy And Procedures Requirements", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.AC_1_7", + "ACN_B2_2_PR.AC_3_5", + "ACN_B2_2_PR.AC_4_4", + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add", + "policyDefinitionReferenceId": "Microsoft Managed Control 1007 - Account Management", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_1_7" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2c6bee3a-2180-2430-440d-db3c7a849870", + "policyDefinitionReferenceId": "Document security operations", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_3_5" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aeed863a-0f56-429f-945d-8bb66bd06841", + "policyDefinitionReferenceId": "Authorize access to security functions and information", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_4_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/341bc9f1-7489-07d9-4ec6-971573e1546a", + "policyDefinitionReferenceId": "Define access authorizations to support separation of duties", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AC_4_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6f7b584-877a-0d69-77d4-ab8b923a9650", + "policyDefinitionReferenceId": "Document separation of duties", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AT_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822", + "policyDefinitionReferenceId": "Microsoft Managed Control 1098 - Security Training Records", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.AT_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3153d9c0-2584-14d3-362d-578b01358aeb", + "policyDefinitionReferenceId": "Retain training records", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1647 - Use of Cryptography", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1643 - Cryptographic Key Establishment And Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c" + }, + { + "policyDefinitionReferenceId": "Key vaults should have deletion protection enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53" + }, + { + "policyDefinitionReferenceId": "Key Vault keys should have an expiration date", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0" + }, + { + "policyDefinitionReferenceId": "Key Vault secrets should have an expiration date", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37" + }, + { + "policyDefinitionReferenceId": "Define a physical key management process", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/51e4b233-8ee3-8bdc-8f5f-f33bd0d229b7" + }, + { + "policyDefinitionReferenceId": "Restrict access to private keys", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d140e8b-76c7-77de-1d46-ed1b2e112444" + }, + { + "policyDefinitionReferenceId": "Key vaults should have soft delete enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d" + }, + { + "policyDefinitionReferenceId": "Define organizational requirements for cryptographic key management", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_1_7", + "ACN_B2_2_PR.DS_1_8", + "ACN_B2_2_PR.DS_1_9", + "ACN_B2_2_PR.DS_1_10", + "ACN_B2_2_PR.DS_1_11", + "ACN_B2_2_PR.DS_1_12" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d661e9eb-4e15-5ba1-6f02-cdc467db0d6c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1411 - Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_3_2", + "ACN_B2_2_PR.DS_3_3", + "ACN_B2_2_PR.MA_1_2", + "ACN_B2_2_PR.MA_1_3", + "ACN_B2_2_PR.MA_1_4", + "ACN_B2_2_PR.MA_1_5", + "ACN_B2_2_PR.MA_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1412 - Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_3_2", + "ACN_B2_2_PR.DS_3_3", + "ACN_B2_2_PR.MA_1_2", + "ACN_B2_2_PR.MA_1_3", + "ACN_B2_2_PR.MA_1_4", + "ACN_B2_2_PR.MA_1_5", + "ACN_B2_2_PR.MA_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1417 - Remote Maintenance - Comparable Security - Sanitization", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_3_2", + "ACN_B2_2_PR.DS_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1416 - Remote Maintenance - Document Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.DS_3_2", + "ACN_B2_2_PR.DS_3_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1174 - Configuration Management Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_2", + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f" + }, + { + "groupNames": [ + "ACN_B2_2_PR.IP_1_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c", + "policyDefinitionReferenceId": "Microsoft Managed Control 1175 - Configuration Management Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.IP_1_2" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/526ed90e-890f-69e7-0386-ba5c0f1f784f", + "policyDefinitionReferenceId": "Establish and document a configuration management plan", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1178 - Baseline Configuration - Reviews And Updates", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1615 - System And Communications Protection Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7", + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1165 - Continuous Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1740 - Information Security Measures Of Performance", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e4df5fb7-58e9-41de-9399-f043c7a931f8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1737 - Plan Of Action And Milestones Process", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bd6a378-4173-411d-a958-dc699b0ee2fd" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1672 - Flaw Remediation - Central Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1161 - Continuous Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1169 - Continuous Monitoring - Trend Analyses", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5" + }, + { + "policyDefinitionReferenceId": "Establish and document change control processes", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_1_3", + "ACN_B2_2_PR.IP_1_4", + "ACN_B2_2_PR.IP_1_5", + "ACN_B2_2_PR.IP_1_6", + "ACN_B2_2_PR.IP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd4dc286-2f30-5b95-777c-681f3a7913d3" + }, + { + "groupNames": [ + "ACN_B2_2_PR.IP_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801", + "policyDefinitionReferenceId": "Microsoft Managed Control 1564 - System Development Life Cycle", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.IP_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6", + "policyDefinitionReferenceId": "Microsoft Managed Control 1600 - Developer Security Testing And Evaluation", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.IP_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/318b2bd9-9c39-9f8b-46a7-048401f33476", + "policyDefinitionReferenceId": "Address coding vulnerabilities", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_PR.IP_2_1" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6de65dc4-8b4f-34b7-9290-eb137a2e2929", + "policyDefinitionReferenceId": "Develop and document application security requirements", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Develop information security policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_4_5", + "ACN_B2_2_PR.IP_4_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af227964-5b8b-22a2-9364-06d2cb9d6d7c" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1243 - Contingency Planning Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1242 - Contingency Planning Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8", + "ACN_B2_2_PR.IP_9_9", + "ACN_B2_2_PR.IP_9_10" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1362 - Incident Handling", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8", + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1251 - Contingency Plan - Coordinate With Related Plans", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1351 - Incident Response Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8", + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7", + "ACN_B2_2_RS.CO_1_5", + "ACN_B2_2_RS.CO_1_6", + "ACN_B2_2_RS.CO_1_7", + "ACN_B2_2_RS.CO_1_8", + "ACN_B2_2_RC.CO_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1361 - Incident Handling", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8", + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1352 - Incident Response Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8", + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7", + "ACN_B2_2_RS.CO_1_5", + "ACN_B2_2_RS.CO_1_6", + "ACN_B2_2_RS.CO_1_7", + "ACN_B2_2_RS.CO_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1261 - Contingency Plan Testing", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8", + "ACN_B2_2_PR.IP_9_9", + "ACN_B2_2_PR.IP_9_10", + "ACN_B2_2_RS.CO_1_4", + "ACN_B2_2_RC.RP_1_3" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1253 - Contingency Plan - Resume Essential Missions - Business Functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1258 - Contingency Training", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1244 - Contingency Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8", + "ACN_B2_2_RS.CO_1_4", + "ACN_B2_2_RC.CO_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937" + }, + { + "policyDefinitionReferenceId": "Test the business continuity and disaster recovery plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8", + "ACN_B2_2_PR.IP_9_9", + "ACN_B2_2_PR.IP_9_10", + "ACN_B2_2_PR.PT_5_1_bis" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58a51cde-008b-1a5d-61b5-d95849770677" + }, + { + "policyDefinitionReferenceId": "Plan for continuance of essential business functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_6", + "ACN_B2_2_PR.IP_9_7", + "ACN_B2_2_PR.IP_9_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9edcea6-6cb8-0266-a48c-2061fbac4310" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1255 - Contingency Plan - Continue Essential Missions - Business Functions", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_9", + "ACN_B2_2_PR.IP_9_10" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1249 - Contingency Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_9", + "ACN_B2_2_PR.IP_9_10" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1248 - Contingency Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_9", + "ACN_B2_2_PR.IP_9_10" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1256 - Contingency Plan - Identify Critical Assets", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_9", + "ACN_B2_2_PR.IP_9_10" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980" + }, + { + "policyDefinitionReferenceId": "Perform a business impact assessment and application criticality assessment", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_9_9", + "ACN_B2_2_PR.IP_9_10" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb8841d4-9d13-7292-1d06-ba4d68384681" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1238 - User-Installed Software", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_12_3", + "ACN_B2_2_PR.IP_12_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1237 - Software Usage Restrictions - Open Source Software", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.IP_12_3", + "ACN_B2_2_PR.IP_12_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1405 - Maintenance Tools - Inspect Tools", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.MA_1_2", + "ACN_B2_2_PR.MA_1_3", + "ACN_B2_2_PR.MA_1_4", + "ACN_B2_2_PR.MA_1_5", + "ACN_B2_2_PR.MA_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1395 - System Maintenance Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.MA_1_2", + "ACN_B2_2_PR.MA_1_3", + "ACN_B2_2_PR.MA_1_4", + "ACN_B2_2_PR.MA_1_5", + "ACN_B2_2_PR.MA_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1414 - Remote Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.MA_1_2", + "ACN_B2_2_PR.MA_1_3", + "ACN_B2_2_PR.MA_1_4", + "ACN_B2_2_PR.MA_1_5", + "ACN_B2_2_PR.MA_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1394 - System Maintenance Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.MA_1_2", + "ACN_B2_2_PR.MA_1_3", + "ACN_B2_2_PR.MA_1_4", + "ACN_B2_2_PR.MA_1_5", + "ACN_B2_2_PR.MA_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1396 - Controlled Maintenance", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.MA_1_2", + "ACN_B2_2_PR.MA_1_3", + "ACN_B2_2_PR.MA_1_4", + "ACN_B2_2_PR.MA_1_5", + "ACN_B2_2_PR.MA_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f" + }, + { + "policyDefinitionReferenceId": "Develop acceptable use policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_PR.MA_1_2", + "ACN_B2_2_PR.MA_1_3", + "ACN_B2_2_PR.MA_1_4", + "ACN_B2_2_PR.MA_1_5", + "ACN_B2_2_PR.MA_1_6" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42116f15-5665-a52a-87bb-b40e64c74b6c" + }, + { + "groupNames": [ + "ACN_B2_2_PR.PT_5_1_bis" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd6cbcba-4a2d-507c-53e3-296b5c238a8e", + "policyDefinitionReferenceId": "Develop and document a business continuity and disaster recovery plan", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_DE.AE_3_9" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec", + "policyDefinitionReferenceId": "Microsoft Managed Control 1109 - Content Of Audit Records - Centralized Management Of Planned Audit Record Content", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_DE.AE_3_9" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4", + "policyDefinitionReferenceId": "Microsoft Managed Control 1100 - Audit And Accountability Policy And Procedures", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_DE.AE_3_9" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373", + "policyDefinitionReferenceId": "[Preview]: Log Analytics extension should be installed on your Linux Azure Arc machines", + "definitionVersion": "1.*.*-preview" + }, + { + "groupNames": [ + "ACN_B2_2_DE.AE_3_9" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17", + "policyDefinitionReferenceId": "Auto provisioning of the Log Analytics agent should be enabled on your subscription", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_DE.AE_3_9" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e", + "policyDefinitionReferenceId": "[Preview]: Log Analytics extension should be installed on your Windows Azure Arc machines", + "definitionVersion": "1.*.*-preview" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1686 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1692 - Information System Monitoring - Inbound And Outbound Communications Traffic", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1684 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1666 - System And Information Integrity Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1683 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1616 - System And Communications Protection Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1693 - Information System Monitoring - System-Generated Alerts", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1622 - Boundary Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1685 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1695 - Information System Monitoring - Wireless Intrusion Detection", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1687 - Information System Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1633 - Boundary Protection - Route Traffic To Authenticated Proxy Servers", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1690 - Information System Monitoring - System-Wide Intrusion Detection System", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1667 - System And Information Integrity Policy And Procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1700 - Information System Monitoring - Unauthorized Network Services", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_4_4", + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1694 - Information System Monitoring - Analyze Communications Traffic Anomalies", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0" + }, + { + "policyDefinitionReferenceId": "[Preview]: All Internet traffic should be routed via your deployed Azure Firewall", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_4_4" + ], + "definitionVersion": "3.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c" + }, + { + "policyDefinitionReferenceId": "Internet-facing virtual machines should be protected with network security groups", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c" + }, + { + "policyDefinitionReferenceId": "[Preview]: Network traffic data collection agent should be installed on Windows virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d" + }, + { + "policyDefinitionReferenceId": "Web Application Firewall (WAF) should be enabled for Application Gateway", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66" + }, + { + "policyDefinitionReferenceId": "Management ports should be closed on your virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_4_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917" + }, + { + "policyDefinitionReferenceId": "IP Forwarding on your virtual machine should be disabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_4_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744" + }, + { + "policyDefinitionReferenceId": "Management ports of virtual machines should be protected with just-in-time network access control", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8", + "ACN_B2_2_DE.CM_4_4" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c" + }, + { + "policyDefinitionReferenceId": "All network ports should be restricted on network security groups associated to your virtual machine", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6" + }, + { + "policyDefinitionReferenceId": "[Preview]: Network traffic data collection agent should be installed on Linux virtual machines", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602" + }, + { + "policyDefinitionReferenceId": "Non-internet-facing virtual machines should be protected with network security groups", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6" + }, + { + "policyDefinitionReferenceId": "Subnets should be associated with a Network Security Group", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "3.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517" + }, + { + "policyDefinitionReferenceId": "Azure Web Application Firewall should be enabled for Azure Front Door entry-points", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_1_5", + "ACN_B2_2_DE.CM_1_6", + "ACN_B2_2_DE.CM_1_7", + "ACN_B2_2_DE.CM_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c" + }, + { + "groupNames": [ + "ACN_B2_2_DE.CM_4_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e", + "policyDefinitionReferenceId": "Microsoft Managed Control 1635 - Boundary Protection - Host-Based Protection", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_DE.CM_4_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1", + "policyDefinitionReferenceId": "Microsoft Managed Control 1030 - Information Flow Enforcement - Physical - Logical Separation Of Information Flows", + "definitionVersion": "1.*.*" + }, + { + "groupNames": [ + "ACN_B2_2_DE.CM_4_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c", + "policyDefinitionReferenceId": "Microsoft Managed Control 1631 - Boundary Protection - Deny By Default - Allow By Exception", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1676 - Malicious Code Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_4_5", + "ACN_B2_2_DE.CM_4_6", + "ACN_B2_2_DE.CM_4_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1680 - Malicious Code Protection - Central Management", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_4_5", + "ACN_B2_2_DE.CM_4_6", + "ACN_B2_2_DE.CM_4_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1678 - Malicious Code Protection", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_4_5", + "ACN_B2_2_DE.CM_4_6", + "ACN_B2_2_DE.CM_4_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1073 - Access Control for Portable And Mobile Systems", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c" + }, + { + "policyDefinitionReferenceId": "Microsoft Defender for Containers should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38" + }, + { + "policyDefinitionReferenceId": "Use privileged identity management", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e714b481-8fac-64a2-14a9-6f079b2501a4" + }, + { + "policyDefinitionReferenceId": "Azure Defender for SQL should be enabled for unprotected Azure SQL servers", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9" + }, + { + "policyDefinitionReferenceId": "[Preview]: Azure Arc enabled Kubernetes clusters should have Microsoft Defender for Cloud extension installed", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "6.*.*-preview", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f" + }, + { + "policyDefinitionReferenceId": "Azure Defender for App Service should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb" + }, + { + "policyDefinitionReferenceId": "Azure Defender for Key Vault should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047" + }, + { + "policyDefinitionReferenceId": "Azure Defender for servers should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d" + }, + { + "policyDefinitionReferenceId": "Azure Defender for open-source relational databases should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835" + }, + { + "policyDefinitionReferenceId": "Azure Defender for SQL should be enabled for unprotected SQL Managed Instances", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9" + }, + { + "policyDefinitionReferenceId": "Azure Defender for Resource Manager should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99" + }, + { + "policyDefinitionReferenceId": "Windows Defender Exploit Guard should be enabled on your machines", + "parameters": { + "IncludeArcMachines": { + "value": "[parameters('IncludeArcMachines-1')]" + }, + "NotAvailableMachineState": { + "value": "[parameters('NotAvailableMachineState-1')]" } - ] + }, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40" + }, + { + "policyDefinitionReferenceId": "Azure Kubernetes Service clusters should have Defender profile enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "2.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01" + }, + { + "policyDefinitionReferenceId": "Azure Defender for SQL servers on machines should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b" + }, + { + "policyDefinitionReferenceId": "Azure Defender for Azure SQL Database servers should be enabled", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_DE.CM_7_1", + "ACN_B2_2_DE.CM_7_2", + "ACN_B2_2_DE.CM_7_3", + "ACN_B2_2_DE.CM_7_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1359 - Incident Response Testing - Coordination With Related Plans", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1360 - Incident Handling", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1264 - Contingency Plan Testing - Coordinate With Related Plans", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7", + "ACN_B2_2_RS.CO_1_4" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1856 - Privacy Incident Response", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7", + "ACN_B2_2_RS.CO_1_5", + "ACN_B2_2_RS.CO_1_6", + "ACN_B2_2_RS.CO_1_7", + "ACN_B2_2_RS.CO_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2d5600ed-575a-4723-9ff4-52d694be0a59" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1366 - Incident Handling - Information Correlation", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1376 - Incident Response Assistance - Coordination With External Providers", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7", + "ACN_B2_2_RS.CO_1_5", + "ACN_B2_2_RS.CO_1_6", + "ACN_B2_2_RS.CO_1_7", + "ACN_B2_2_RS.CO_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1380 - Incident Response Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7", + "ACN_B2_2_RS.CO_1_5", + "ACN_B2_2_RS.CO_1_6", + "ACN_B2_2_RS.CO_1_7", + "ACN_B2_2_RS.CO_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1358 - Incident Response Testing", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1378 - Incident Response Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1373 - Incident Reporting - Automated Reporting", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1365 - Incident Handling - Continuity Of Operations", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1369 - Incident Monitoring", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7", + "ACN_B2_2_RS.CO_1_5", + "ACN_B2_2_RS.CO_1_6", + "ACN_B2_2_RS.CO_1_7", + "ACN_B2_2_RS.CO_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1381 - Incident Response Plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab" + }, + { + "policyDefinitionReferenceId": "Identify incident response personnel", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/037c0089-6606-2dab-49ad-437005b5035f" + }, + { + "policyDefinitionReferenceId": "Develop an incident response plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b4e134f-1e4c-2bff-573e-082d85479b6e" + }, + { + "policyDefinitionReferenceId": "Review and update incident response policies and procedures", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b28c8687-4bbd-8614-0b96-cdffa1ac6d9c" + }, + { + "policyDefinitionReferenceId": "Maintain incident response plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/37546841-8ea1-5be0-214d-8ac599588332" + }, + { + "policyDefinitionReferenceId": "Implement incident handling", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/433de59e-7a53-a766-02c2-f80f8421469a" + }, + { + "policyDefinitionReferenceId": "Establish relationship between incident response capability and external providers", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b470a37a-7a47-3792-34dd-7a793140702e" + }, + { + "policyDefinitionReferenceId": "Identify classes of Incidents and Actions taken", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/23d1a569-2d1e-7f43-9e22-1f94115b7dd5" + }, + { + "policyDefinitionReferenceId": "Protect incident response plan", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.RP_1_2", + "ACN_B2_2_RS.RP_1_3", + "ACN_B2_2_RS.RP_1_4", + "ACN_B2_2_RS.RP_1_5", + "ACN_B2_2_RS.RP_1_6", + "ACN_B2_2_RS.RP_1_7" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2401b496-7f23-79b2-9f80-89bb5abf3d4a" + }, + { + "groupNames": [ + "ACN_B2_2_RS.CO_1_4" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17", + "policyDefinitionReferenceId": "Microsoft Managed Control 1263 - Contingency Plan Testing", + "definitionVersion": "1.*.*" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1372 - Incident Reporting", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.CO_1_5", + "ACN_B2_2_RS.CO_1_6", + "ACN_B2_2_RS.CO_1_7", + "ACN_B2_2_RS.CO_1_8", + "ACN_B2_2_RC.CO_3_1" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726" + }, + { + "policyDefinitionReferenceId": "Microsoft Managed Control 1371 - Incident Reporting", + "parameters": {}, + "groupNames": [ + "ACN_B2_2_RS.CO_1_5", + "ACN_B2_2_RS.CO_1_6", + "ACN_B2_2_RS.CO_1_7", + "ACN_B2_2_RS.CO_1_8" + ], + "definitionVersion": "1.*.*", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417" + }, + { + "groupNames": [ + "ACN_B2_2_RC.RP_1_3" + ], + "parameters": {}, + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b", + "policyDefinitionReferenceId": "Microsoft Managed Control 1247 - Contingency Plan", + "definitionVersion": "1.*.*" + } + ] }, - "id": "providers/Microsoft.Authorization/policySetDefinitions/ACN-B2-2-QC2-Critici", - "type": "Microsoft.Authorization/policySetDefinitions", - "name": "ACN-B2-2-QC2-Critici" -} \ No newline at end of file + "id": "/providers/Microsoft.Authorization/policySetDefinitions/5da183f5-326f-4871-95e9-c34db82565c2", + "name": "5da183f5-326f-4871-95e9-c34db82565c2" + } + \ No newline at end of file diff --git a/PolicyInitiatives/ISM/NewZealandISM.json b/PolicyInitiatives/ISM/NewZealandISM.json deleted file mode 100644 index 8cb4a79..0000000 --- a/PolicyInitiatives/ISM/NewZealandISM.json +++ /dev/null @@ -1,2895 +0,0 @@ -{ - "properties": { - "displayName": "New Zealand ISM", - "policyType": "Custom", - "description": "New Zealand Information Security Manual (ISM) policy initiative. This policy set includes definitions that have a Deny effect by default", - "metadata": { - "category": "Regulatory Compliance", - "version": "1.0.0-preview", - "preview": true - }, - "version": "1.0.0-preview", - "policyDefinitionGroups": [ - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_06.2.5.C.01", - "description": "A baseline or known point of origin is the basis of any comparison and allows measurement of changes and improvements when further information security monitoring activities are conducted.", - "name": "New_Zealand_ISM_06.2.5.C.01", - "category": "06. Information security monitoring" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_06.2.6.C.01", - "description": "Vulnerabilities may occur as a result of poorly designed or implemented information security practices", - "name": "New_Zealand_ISM_06.2.6.C.01", - "category": "06. Information security monitoring" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_06.4.5.C.01", - "description": "Availability and recovery requirements will vary based on each agency s business needs and are likely to be widely variable across government. Agencies will determine their own availability and recovery requirements and implement measures consistent with the agency's SRMP to achieve them as part of their risk management and governance processes.", - "name": "New_Zealand_ISM_06.4.5.C.01", - "category": "06. Information security monitoring" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_07.1.7.C.02", - "description": "Processes and procedures for the detection of information security incidents will assist in mitigating attacks using the most common vectors in systems exploits.", - "name": "New_Zealand_ISM_07.1.7.C.02", - "category": "07. Information Security Incidents" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_07.2.22.C.01", - "description": "In the case of outsourcing of information technology services and functions", - "name": "New_Zealand_ISM_07.2.22.C.01", - "category": "07. Information Security Incidents" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_10.8.35.C.01", - "description": "Security architectures MUST apply the principles of separation and segregation.", - "name": "New_Zealand_ISM_10.8.35.C.01", - "category": "10. Infrastructure" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_12.4.4.C.02", - "description": "The assurance provided by an evaluation is related to the date at which the results were issued. Over the course of a normal product lifecycle", - "name": "New_Zealand_ISM_12.4.4.C.02", - "category": "12. Product Security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_14.1.8.C.01", - "description": "Antivirus and anti-malware software", - "name": "New_Zealand_ISM_14.1.8.C.01", - "category": "14. Software security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_14.1.9.C.01", - "description": "Whilst a SOE can be sufficiently hardened when it is deployed", - "name": "New_Zealand_ISM_14.1.9.C.01", - "category": "14. Software security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_14.2.4.C.01", - "description": "Application access control can be an effective mechanism to prevent the successful compromise of an agency system resulting from the exploitation of a vulnerability in an application or the execution of malicious code.", - "name": "New_Zealand_ISM_14.2.4.C.01", - "category": "14. Software security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_14.5.8.C.01", - "description": "The Open Web Application Security Project guide provides a comprehensive resource to consult when developing Web applications.", - "name": "New_Zealand_ISM_14.5.8.C.01", - "category": "14. Software security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_16.1.32.C.01", - "description": "Agencies MUST ensure that all system users are uniquely identifiable; and authenticated on each occasion that access is granted to a system.", - "name": "New_Zealand_ISM_16.1.32.C.01", - "category": "16. Access Control and Passwords" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_16.3.5.C.02", - "description": "Inappropriate use of any feature or facility of a system that enables a privileged user to override system or application controls can be a major contributory factor to failures", - "name": "New_Zealand_ISM_16.3.5.C.02", - "category": "16. Access Control and Passwords" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_16.4.30.C.01", - "description": "The requirement for an agency security policy is discussed and described in Chapter 5 Information Security Documentation.  A fundamental part of any security policy is the inclusion of requirements for the treatment of Privileged Accounts.  This is most conveniently contained in a Privileged Access Management (PAM) section within the agency s security policy.  A PAM policy is a fundamental component of an agency s IT Governance.", - "name": "New_Zealand_ISM_16.4.30.C.01", - "category": "16. Access Control and Passwords" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_16.4.32.C.01", - "description": "The approval and authorisation process for the granting of privileged access should be based on the requirement to manage and protect agency systems and assets or as an operational necessity only.", - "name": "New_Zealand_ISM_16.4.32.C.01", - "category": "16. Access Control and Passwords" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.1.55.C.03", - "description": "When encryption is applied to information being communicated over networks", - "name": "New_Zealand_ISM_17.1.55.C.03", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.1.58.C.01", - "description": "All cryptographic keys have a limited useful life after which the key should be replaced or retired. Typically the useful life of the cryptographic key (cryptoperiod) is use", - "name": "New_Zealand_ISM_17.1.58.C.01", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.2.19.C.01", - "description": "While ECDH should be used in preference to DH", - "name": "New_Zealand_ISM_17.2.19.C.01", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.2.22.C.01", - "description": "A field/key size of at least 384 bits for ECDH is now considered good practice by the cryptographic community.", - "name": "New_Zealand_ISM_17.2.22.C.01", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.2.24.C.01", - "description": "A modulus of at least 3072 bits for RSA is considered good practice by the cryptographic community.", - "name": "New_Zealand_ISM_17.2.24.C.01", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.4.16.C.01", - "description": "Whilst version 1.0 of SSL was never released", - "name": "New_Zealand_ISM_17.4.16.C.01", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.5.6.C.01", - "description": "The configuration directives provided are based on the OpenSSH implementation of SSH. Agencies implementing SSH will need to adapt these settings to suit other SSH implementations.", - "name": "New_Zealand_ISM_17.5.6.C.01", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.5.7.C.01", - "description": "Public key-based systems have greater potential for strong authentication", - "name": "New_Zealand_ISM_17.5.7.C.01", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.9.35.C.01", - "description": "The cryptographic system administrator is a highly privileged position which involves granting privileged access to a cryptographic system. Therefore extra precautions need to be put in place surrounding the security and vetting of the personnel as well as the access control procedures for individuals designated as cryptographic system administrators.", - "name": "New_Zealand_ISM_17.9.35.C.01", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_17.9.36.C.02", - "description": "As cryptographic equipment contains particularly sensitive information additional physical security measures need to be applied to the equipment.", - "name": "New_Zealand_ISM_17.9.36.C.02", - "category": "17. Cryptography" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_18.1.10.C.01", - "description": "If the network is not centrally managed", - "name": "New_Zealand_ISM_18.1.10.C.01", - "category": "18. Network security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_18.1.13.C.02", - "description": "If an attacker has limited opportunities to connect to a given network", - "name": "New_Zealand_ISM_18.1.13.C.02", - "category": "18. Network security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_18.4.7.C.02", - "description": "An IDS/IPS when configured correctly", - "name": "New_Zealand_ISM_18.4.7.C.02", - "category": "18. Network security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_18.4.8.C.01", - "description": "If the firewall is configured to block all traffic on a particular range of port numbers", - "name": "New_Zealand_ISM_18.4.8.C.01", - "category": "18. Network security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_22.1.24.C.03", - "description": "Cloud service providers may not provide adequate physical security and physical and logical access controls to meet agencies requirements.  An assessment of cloud service risks will include physical and systems security.  Refer also to Chapter 19 Gateway Security", - "name": "New_Zealand_ISM_22.1.24.C.03", - "category": "22. Enterprise systems security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_22.1.24.C.04", - "description": "Cloud service providers may not provide adequate physical security and physical and logical access controls to meet agencies requirements.  An assessment of cloud service risks will include physical and systems security.  Refer also to Chapter 19 Gateway Security", - "name": "New_Zealand_ISM_22.1.24.C.04", - "category": "22. Enterprise systems security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_23.3.19.C.01", - "description": "Credentials used to access public cloud services can be reused across cloud service providers", - "name": "New_Zealand_ISM_23.3.19.C.01", - "category": "23. Public Cloud Security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_23.4.10.C.01", - "description": "Many public cloud services are designed to make customer data directly accessible through multiple interfaces. These service endpoints may be internet-accessible by default", - "name": "New_Zealand_ISM_23.4.10.C.01", - "category": "23. Public Cloud Security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_23.4.9.C.01", - "description": "Agencies remain accountable for the confidentiality", - "name": "New_Zealand_ISM_23.4.9.C.01", - "category": "23. Public Cloud Security" - }, - { - "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/New_Zealand_ISM_23.5.11.C.01", - "description": "It may not be possible", - "name": "New_Zealand_ISM_23.5.11.C.01", - "category": "23. Public Cloud Security" - } - ], - "parameters": { - "modeRequirement-1": { - "type": "String", - "metadata": { - "displayName": "Mode Requirement", - "description": "Mode required for all WAF policies" - }, - "allowedValues": [ - "Prevention", - "Detection" - ], - "defaultValue": "Detection" - }, - "audit_effect-1": { - "type": "String", - "metadata": { - "displayName": "Effect", - "description": "Enable or disable the execution of the policy" - }, - "allowedValues": [ - "Audit", - "Disabled" - ], - "defaultValue": "Audit" - }, - "deny_effect-1": { - "type": "String", - "metadata": { - "displayName": "Audit, deny or disable the execution of the policy", - "description": "Audit, deny or disable the execution of the policy" - }, - "allowedValues": [ - "Audit", - "Deny", - "Disabled" - ], - "defaultValue": "Deny" - }, - "evaluatedSkuNames-2": { - "type": "Array", - "metadata": { - "displayName": "Azure Spring Cloud SKU Names", - "description": "List of Azure Spring Cloud SKUs against which this policy will be evaluated." - }, - "allowedValues": [ - "Standard", - "Enterprise" - ], - "defaultValue": [ - "Standard", - "Enterprise" - ] - }, - "allowedIPAddresses-1": { - "type": "Array", - "metadata": { - "displayName": "Allowed IP addresses", - "description": "Array with allowed public IP addresses. An empty array is evaluated as to allow all IPs." - }, - "defaultValue": [] - }, - "IncludeArcMachines-1": { - "type": "String", - "metadata": { - "displayName": "Include Arc connected servers", - "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.", - "portalReview": "true" - }, - "allowedValues": [ - "true", - "false" - ], - "defaultValue": "false" - }, - "minimumTlsVersion-2": { - "type": "String", - "metadata": { - "displayName": "Minimum TLS Version", - "description": "Minimum version of TLS required to access data in this storage account" - }, - "allowedValues": [ - "TLS1_0", - "TLS1_1", - "TLS1_2" - ], - "defaultValue": "TLS1_2" - }, - "forbiddenIPAddresses-1": { - "type": "Array", - "metadata": { - "displayName": "Forbidden IP addresses", - "description": "Array with forbidden public IP addresses. An empty array is evaluated as there are no forbidden IP addresses." - }, - "defaultValue": [] - }, - "LinuxPythonVersion-1": { - "type": "String", - "metadata": { - "displayName": "Linux Python version", - "description": "Specify a supported Python version for App Service" - }, - "defaultValue": "" - }, - "excludedNamespaces-1": { - "type": "Array", - "metadata": { - "displayName": "Namespace exclusions", - "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove." - }, - "defaultValue": [ - "kube-system", - "gatekeeper-system", - "azure-arc", - "azure-extensions-usage-system" - ] - }, - "minimumRSAKeySize-1": { - "type": "Integer", - "metadata": { - "displayName": "Minimum RSA key size", - "description": "The minimum key size for RSA keys." - }, - "allowedValues": [ - 2048, - 3072, - 4096 - ] - }, - "excludedImages-1": { - "type": "Array", - "metadata": { - "displayName": "Image exclusions", - "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.", - "portalReview": true - }, - "defaultValue": [] - }, - "LinuxJavaVersion-1": { - "type": "String", - "metadata": { - "displayName": "Linux Java version", - "description": "Specify a supported Java version for App Service" - }, - "defaultValue": "" - }, - "allowedECNames-1": { - "type": "Array", - "metadata": { - "displayName": "Allowed elliptic curve names", - "description": "The list of allowed curve names for elliptic curve cryptography certificates." - }, - "allowedValues": [ - "P-256", - "P-256K", - "P-384", - "P-521" - ], - "defaultValue": [ - "P-256", - "P-256K", - "P-384", - "P-521" - ] - }, - "namespaces-1": { - "type": "Array", - "metadata": { - "displayName": "Namespace inclusions", - "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces." - }, - "defaultValue": [] - }, - "LinuxPHPVersion-1": { - "type": "String", - "metadata": { - "displayName": "Linux PHP version", - "description": "Specify a supported PHP version for App Service" - }, - "defaultValue": "" - }, - "evaluatedSkuNames-1": { - "type": "Array", - "metadata": { - "displayName": "API Management SKU Names", - "description": "List of API Management SKUs against which this policy will be evaluated." - }, - "allowedValues": [ - "Developer", - "Basic", - "Standard", - "Premium", - "Consumption" - ], - "defaultValue": [ - "Developer", - "Premium" - ] - }, - "MinimumTLSVersion-1": { - "type": "String", - "metadata": { - "displayName": "Minimum TLS version", - "description": "The minimum TLS protocol version that should be enabled. Windows machines with lower TLS versions will be marked as non-compliant." - }, - "allowedValues": [ - "1.1", - "1.2" - ], - "defaultValue": "1.2" - }, - "endpointType-1": { - "type": "String", - "metadata": { - "displayName": "Public Endpoint Type", - "description": "Public Endpoint Type for which to enforce the access check" - }, - "allowedValues": [ - "Management", - "Git", - "Gateway Configuration" - ], - "defaultValue": "Management" - }, - "labelSelector-1": { - "type": "Object", - "metadata": { - "displayName": "Kubernetes label selector", - "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources." - }, - "defaultValue": {}, - "schema": { - "description": "A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all resources.", - "type": "object", - "properties": { - "matchLabels": { - "description": "matchLabels is a map of {key,value} pairs.", - "type": "object", - "additionalProperties": { - "type": "string" - }, - "minProperties": 1 - }, - "matchExpressions": { - "description": "matchExpressions is a list of values, a key, and an operator.", - "type": "array", - "items": { - "type": "object", - "properties": { - "key": { - "description": "key is the label key that the selector applies to.", - "type": "string" - }, - "operator": { - "description": "operator represents a key's relationship to a set of values.", - "type": "string", - "enum": [ - "In", - "NotIn", - "Exists", - "DoesNotExist" - ] - }, - "values": { - "description": "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty.", - "type": "array", - "items": { - "type": "string" - } - } - }, - "required": [ - "key", - "operator" - ], - "additionalProperties": false - }, - "minItems": 1 - } - }, - "additionalProperties": false - } - }, - "restrictIPAddresses-1": { - "type": "String", - "metadata": { - "displayName": "Would you like to restrict specific IP addresses?", - "description": "Select (Yes) to allow or forbid a list of IP addresses. If (No), the list of IP addresses won't have any effect in the policy enforcement" - }, - "allowedValues": [ - "Yes", - "No" - ], - "defaultValue": "No" - }, - "requiredRetentionDays-1": { - "type": "String", - "metadata": { - "displayName": "Required retention (days)", - "description": "The required resource logs retention in days" - }, - "defaultValue": "365" - }, - "setting-1": { - "type": "String", - "metadata": { - "displayName": "Desired Auditing setting" - }, - "allowedValues": [ - "enabled", - "disabled" - ], - "defaultValue": "enabled" - }, - "excludedContainers-1": { - "type": "Array", - "metadata": { - "displayName": "Containers exclusions", - "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces." - }, - "defaultValue": [] - }, - "warn-1": { - "type": "Boolean", - "metadata": { - "displayName": "Warn", - "description": "Whether or not to return warnings back to the user in the kubectl cli" - }, - "allowedValues": [ - true, - false - ], - "defaultValue": false - }, - "excludedKinds-1": { - "type": "Array", - "metadata": { - "displayName": "Excluded Kinds", - "description": "The list of excluded API kinds for customer-managed key, default is the list of API kinds that don't have data stored in Cognitive Services" - }, - "defaultValue": [ - "CognitiveServices", - "Knowledge", - "LUIS", - "QnAMaker", - "TextAnalytics", - "ComputerVision", - "HealthDecisionSupport", - "ImmersiveReader" - ] - }, - "NotAvailableMachineState-1": { - "type": "String", - "metadata": { - "displayName": "Status if Windows Defender is not available on machine", - "description": "Windows Defender Exploit Guard is only available starting with Windows 10/Windows Server with update 1709. Setting this value to 'Non-Compliant' shows machines with older versions on which Windows Defender Exploit Guard is not available (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' shows these machines as compliant." - }, - "allowedValues": [ - "Compliant", - "Non-Compliant" - ], - "defaultValue": "Compliant" - } - }, - "policyDefinitions": [ - { - "policyDefinitionReferenceId": "A vulnerability assessment solution should be enabled on your virtual machines", - "groupNames": [ - "New_Zealand_ISM_06.2.5.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Vulnerability assessment should be enabled on SQL Managed Instance", - "groupNames": [ - "New_Zealand_ISM_06.2.5.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Vulnerability assessment should be enabled on your SQL servers", - "groupNames": [ - "New_Zealand_ISM_06.2.5.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "SQL databases should have vulnerability findings resolved", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc", - "definitionVersion": "4.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "SQL servers on machines should have vulnerability findings resolved", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Vulnerabilities in container security configurations should be remediated", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Vulnerabilities in security configuration on your machines should be remediated", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Vulnerabilities in security configuration on your virtual machine scale sets should be remediated", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Machines should have secret findings resolved", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3ac7c827-eea2-4bde-acc7-9568cd320efa", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure registry container images should have vulnerabilities resolved (powered by Microsoft Defender Vulnerability Management)", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/090c7b07-b4ed-4561-ad20-e9075f3ccaff", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure running container images should have vulnerabilities resolved (powered by Microsoft Defender Vulnerability Management)", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17f4b1cc-c55c-4d94-b1f9-2978f6ac2957", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Configure Microsoft Defender for Containers to be enabled", - "groupNames": [ - "New_Zealand_ISM_06.2.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9ddb292-b203-4738-aead-18e2716e858f", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Audit virtual machines without disaster recovery configured", - "groupNames": [ - "New_Zealand_ISM_06.4.5.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for App Service should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for Azure SQL Database servers should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for Key Vault should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for open-source relational databases should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for Resource Manager should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for servers should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for SQL servers on machines should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for SQL should be enabled for unprotected Azure SQL servers", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for SQL should be enabled for unprotected SQL Managed Instances", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Kubernetes Service clusters should have Defender profile enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Microsoft Defender for Containers should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Microsoft Defender for Storage should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/640d2586-54d2-465f-877f-9ffc1d2109f4", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Microsoft Defender for APIs should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7926a6d1-b268-4586-8197-e8ae90c877d7", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Microsoft Defender for Azure Cosmos DB should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/adbe85b5-83e6-4350-ab58-bf3a4f736e5e", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Microsoft Defender for SQL should be enabled for unprotected Synapse workspaces", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d31e5c31-63b2-4f12-887b-e49456834fa1", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Defender for SQL should be enabled for unprotected PostgreSQL flexible servers", - "groupNames": [ - "New_Zealand_ISM_07.1.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d38668f5-d155-42c7-ab3d-9b57b50f8fbf", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Email notification for high severity alerts should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.2.22.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Email notification to subscription owner for high severity alerts should be enabled", - "groupNames": [ - "New_Zealand_ISM_07.2.22.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Subscriptions should have a contact email address for security issues", - "groupNames": [ - "New_Zealand_ISM_07.2.22.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management services should use a virtual network", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b", - "definitionVersion": "1.*.*", - "parameters": { - "evaluatedSkuNames": { - "value": "[parameters('evaluatedSkuNames-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "App Configuration should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure API for FHIR should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Cache for Redis should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Event Grid domains should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Event Grid topics should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Key Vaults should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6abeaec-4d90-4a02-805f-6b26c4d3fbe9", - "definitionVersion": "1.*.*", - "parameters": { - "audit_effect": { - "value": "[parameters('audit_effect-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Azure Machine Learning workspaces should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/45e05259-1eb5-4f70-9574-baf73e9d219b", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure SignalR Service should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2393d2cf-a342-44cd-a2e2-fe0188fd1234", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Spring Cloud should use network injection", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4", - "definitionVersion": "1.*.*", - "parameters": { - "evaluatedSkuNames": { - "value": "[parameters('evaluatedSkuNames-2')]" - } - } - }, - { - "policyDefinitionReferenceId": "Container registries should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Private endpoint connections on Azure SQL Database should be enabled", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Private endpoint connections on Batch accounts should be enabled", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Private endpoint should be enabled for MariaDB servers", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Private endpoint should be enabled for MySQL servers", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Private endpoint should be enabled for PostgreSQL servers", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Public network access should be disabled for MySQL flexible servers", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Public network access should be disabled for PostgreSQL flexible servers", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Storage accounts should restrict network access using virtual network rules", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Storage accounts should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "VM Image Builder templates should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Databricks Clusters should disable public IP", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/51c1490f-3319-459c-bbbc-7f391bbed753", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Databricks Workspaces should disable public network access", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e7849de-b939-4c50-ab48-fc6b0f5eeba2", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Databricks Workspaces should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/258823f2-4595-4b52-b333-cc96192710d8", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Machine Learning Workspaces should disable public network access", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/438c38d2-3772-465a-a9cc-7a6666a275ce", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Cosmos DB should disable public network access", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Databricks Workspaces should be in a virtual network", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c25c9e4-ee12-4882-afd2-11fb9d87893f", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure SQL Managed Instances should disable public network access", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9dfea752-dd46-4766-aed1-c355fa93fb91", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Cognitive Services should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cddd188c-4b82-4c48-a19d-ddf74ee66a01", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management should disable public network access to the service configuration endpoints", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df73bd95-24da-4a4f-96b9-4e8b94b402bd", - "definitionVersion": "1.*.*", - "parameters": { - "endpointType": { - "value": "[parameters('endpointType-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "CosmosDB accounts should use private link", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Machine Learning Computes should be in a virtual network", - "groupNames": [ - "New_Zealand_ISM_10.8.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7804b5c7-01dc-4723-969b-ae300cc07ff1", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "System updates on virtual machine scale sets should be installed", - "groupNames": [ - "New_Zealand_ISM_12.4.4.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "System updates should be installed on your machines", - "groupNames": [ - "New_Zealand_ISM_12.4.4.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60", - "definitionVersion": "4.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Machines should be configured to periodically check for missing system updates", - "groupNames": [ - "New_Zealand_ISM_12.4.4.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd876905-5b84-4f73-ab2d-2e7a7c4568d9", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Machine Learning compute instances should be recreated to get the latest software updates", - "groupNames": [ - "New_Zealand_ISM_12.4.4.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f110a506-2dcb-422e-bcea-d533fc8c35e2", - "definitionVersion": "1.*.*", - "parameters": { - "effects": { - "value": "[parameters('audit_effect-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "App Service apps should have remote debugging turned off", - "groupNames": [ - "New_Zealand_ISM_14.1.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps should have remote debugging turned off", - "groupNames": [ - "New_Zealand_ISM_14.1.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Management ports should be closed on your virtual machines", - "groupNames": [ - "New_Zealand_ISM_14.1.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Policy Add-on for Kubernetes service (AKS) should be installed and enabled on your clusters", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Role-Based Access Control (RBAC) should be used on Kubernetes Services", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Endpoint protection health issues should be resolved on your machines", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Endpoint protection should be installed on your machines", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Endpoint protection solution should be installed on virtual machine scale sets", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Guest Configuration extension should be installed on your machines", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Kubernetes cluster containers should not share host process ID or host IPC namespace", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8", - "definitionVersion": "5.*.*", - "parameters": { - "excludedNamespaces": { - "value": "[parameters('excludedNamespaces-1')]" - }, - "excludedImages": { - "value": "[parameters('excludedImages-1')]" - }, - "labelSelector": { - "value": "[parameters('labelSelector-1')]" - }, - "namespaces": { - "value": "[parameters('namespaces-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Kubernetes cluster containers should run with a read only root file system", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80", - "definitionVersion": "6.*.*", - "parameters": { - "warn": { - "value": "[parameters('warn-1')]" - }, - "excludedNamespaces": { - "value": "[parameters('excludedNamespaces-1')]" - }, - "namespaces": { - "value": "[parameters('namespaces-1')]" - }, - "excludedContainers": { - "value": "[parameters('excludedContainers-1')]" - }, - "excludedImages": { - "value": "[parameters('excludedImages-1')]" - }, - "labelSelector": { - "value": "[parameters('labelSelector-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Kubernetes cluster should not allow privileged containers", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4", - "definitionVersion": "9.*.*", - "parameters": { - "excludedNamespaces": { - "value": "[parameters('excludedNamespaces-1')]" - }, - "excludedImages": { - "value": "[parameters('excludedImages-1')]" - }, - "labelSelector": { - "value": "[parameters('labelSelector-1')]" - }, - "excludedContainers": { - "value": "[parameters('excludedContainers-1')]" - }, - "namespaces": { - "value": "[parameters('namespaces-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Kubernetes clusters should be accessible only over HTTPS", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d", - "definitionVersion": "8.*.*", - "parameters": { - "excludedNamespaces": { - "value": "[parameters('excludedNamespaces-1')]" - }, - "labelSelector": { - "value": "[parameters('labelSelector-1')]" - }, - "namespaces": { - "value": "[parameters('namespaces-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Kubernetes clusters should disable automounting API credentials", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423", - "definitionVersion": "4.*.*", - "parameters": { - "excludedNamespaces": { - "value": "[parameters('excludedNamespaces-1')]" - }, - "excludedImages": { - "value": "[parameters('excludedImages-1')]" - }, - "labelSelector": { - "value": "[parameters('labelSelector-1')]" - }, - "namespaces": { - "value": "[parameters('namespaces-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Kubernetes clusters should not allow container privilege escalation", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99", - "definitionVersion": "7.*.*", - "parameters": { - "excludedNamespaces": { - "value": "[parameters('excludedNamespaces-1')]" - }, - "excludedImages": { - "value": "[parameters('excludedImages-1')]" - }, - "labelSelector": { - "value": "[parameters('labelSelector-1')]" - }, - "excludedContainers": { - "value": "[parameters('excludedContainers-1')]" - }, - "namespaces": { - "value": "[parameters('namespaces-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Kubernetes clusters should not grant CAP_SYS_ADMIN security capabilities", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626", - "definitionVersion": "5.*.*", - "parameters": { - "excludedNamespaces": { - "value": "[parameters('excludedNamespaces-1')]" - }, - "excludedImages": { - "value": "[parameters('excludedImages-1')]" - }, - "labelSelector": { - "value": "[parameters('labelSelector-1')]" - }, - "excludedContainers": { - "value": "[parameters('excludedContainers-1')]" - }, - "namespaces": { - "value": "[parameters('namespaces-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Kubernetes clusters should not use the default namespace", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373", - "definitionVersion": "4.*.*", - "parameters": { - "excludedNamespaces": { - "value": "[parameters('excludedNamespaces-1')]" - }, - "labelSelector": { - "value": "[parameters('labelSelector-1')]" - }, - "namespaces": { - "value": "[parameters('namespaces-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Management ports of virtual machines should be protected with just-in-time network access control", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Microsoft Antimalware for Azure should be configured to automatically update protection signatures", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Microsoft IaaSAntimalware extension should be deployed on Windows servers", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Monitor missing Endpoint Protection in Azure Security Center", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Virtual machines- Guest Configuration extension should be deployed with system-assigned managed identity", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Windows Defender Exploit Guard should be enabled on your machines", - "groupNames": [ - "New_Zealand_ISM_14.1.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40", - "definitionVersion": "2.*.*", - "parameters": { - "IncludeArcMachines": { - "value": "[parameters('IncludeArcMachines-1')]" - }, - "NotAvailableMachineState": { - "value": "[parameters('NotAvailableMachineState-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Adaptive application controls for defining safe applications should be enabled on your machines", - "groupNames": [ - "New_Zealand_ISM_14.2.4.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Allowlist rules in your adaptive application control policy should be updated", - "groupNames": [ - "New_Zealand_ISM_14.2.4.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service apps should have authentication enabled", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service apps should not have CORS configured to allow every resource to access your apps", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service apps should only be accessible over HTTPS", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d", - "definitionVersion": "4.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service apps should require FTPS only", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service apps should use latest -HTTP Version-", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae", - "definitionVersion": "4.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service apps that use Java should use a specified -Java version-", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed", - "definitionVersion": "3.*.*", - "parameters": { - "LinuxJavaVersion": { - "value": "[parameters('LinuxJavaVersion-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "App Service apps that use PHP should use a specified -PHP version-", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3", - "definitionVersion": "3.*.*", - "parameters": { - "LinuxPHPVersion": { - "value": "[parameters('LinuxPHPVersion-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "App Service apps that use Python should use a specified -Python version-", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73", - "definitionVersion": "4.*.*", - "parameters": { - "LinuxPythonVersion": { - "value": "[parameters('LinuxPythonVersion-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Function apps should have authentication enabled", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps should not have CORS configured to allow every resource to access your apps", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps should only be accessible over HTTPS", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab", - "definitionVersion": "5.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps should require FTPS only", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps should use latest -HTTP Version-", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c", - "definitionVersion": "4.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps that use Java should use a specified -Java version-", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc", - "definitionVersion": "3.*.*", - "parameters": { - "LinuxJavaVersion": { - "value": "[parameters('LinuxJavaVersion-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Function apps that use Python should use a specified -Python version-", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73", - "definitionVersion": "4.*.*", - "parameters": { - "LinuxPythonVersion": { - "value": "[parameters('LinuxPythonVersion-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "App Service apps should have Client Certificates (Incoming client certificates) enabled", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/19dd1db6-f442-49cf-a838-b0786b4401ef", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service app slots should have Client Certificates (Incoming client certificates) enabled", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b0bd968-5cb5-4513-8987-27786c6f0df8", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps should have Client Certificates (Incoming client certificates) enabled", - "groupNames": [ - "New_Zealand_ISM_14.5.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ab6a902f-9493-453b-928d-62c30b11b5a6", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service apps should use managed identity", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure SQL Database should have Microsoft Entra-only authentication enabled during creation", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abda6d70-9778-44e7-84a8-06713e6db027", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Cosmos DB database accounts should have local authentication methods disabled", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps should use managed identity", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Service Fabric clusters should only use Azure Active Directory for client authentication", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management calls to API backends should be authenticated", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c15dcc82-b93c-4dcb-9332-fbf121685b54", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Storage accounts should prevent shared key access", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure SQL Managed Instance should have Microsoft Entra-only authentication enabled", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0c28c3fb-c244-42d5-a9bf-f35f2999577b", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "A Microsoft Entra administrator should be provisioned for MySQL servers", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/146412e9-005c-472b-9e48-c87b72ac229e", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Synapse Workspaces should use only Microsoft Entra identities for authentication during workspace creation", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2158ddbe-fefa-408e-b43f-d4faef8ff3b8", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure MySQL flexible server should have Microsoft Entra Only Authentication enabled", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40e85574-ef33-47e8-a854-7a65c7500560", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Synapse Workspaces should have Microsoft Entra-only authentication enabled", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ea81a52-5ca7-4575-9669-eaa910b7edf8", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure AI Services resources should have key access disabled (disable local authentication)", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/71ef260a-8f18-47b7-abcb-62d0673d94dc", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure SQL Managed Instances should have Microsoft Entra-only authentication enabled during creation", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/78215662-041e-49ed-a9dd-5385911b3a1f", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure SQL Database should have Microsoft Entra-only authentication enabled", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b3a22bc9-66de-45fb-98fa-00f5df42f41a", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "A Microsoft Entra administrator should be provisioned for PostgreSQL servers", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4dec045-250a-48c2-b5cc-e0c4eec8b5b4", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Machine Learning Computes should have local authentication methods disabled", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API endpoints in Azure API Management should be authenticated", - "groupNames": [ - "New_Zealand_ISM_16.1.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8ac833bd-f505-48d5-887e-c993a1d3eea0", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "A maximum of 3 owners should be designated for your subscription", - "groupNames": [ - "New_Zealand_ISM_16.3.5.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Blocked accounts with owner permissions on Azure resources should be removed", - "groupNames": [ - "New_Zealand_ISM_16.4.30.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0cfea604-3201-4e14-88fc-fae4c427a6c5", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Blocked accounts with read and write permissions on Azure resources should be removed", - "groupNames": [ - "New_Zealand_ISM_16.4.30.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d7e1fde-fe26-4b5f-8108-f8e432cbc2be", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Guest accounts with owner permissions on Azure resources should be removed", - "groupNames": [ - "New_Zealand_ISM_16.4.30.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/339353f6-2387-4a45-abe4-7f529d121046", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Guest accounts with read permissions on Azure resources should be removed", - "groupNames": [ - "New_Zealand_ISM_16.4.30.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9ac8f8e-ce22-4355-8f04-99b911d6be52", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Guest accounts with write permissions on Azure resources should be removed", - "groupNames": [ - "New_Zealand_ISM_16.4.30.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/94e1c2ac-cbbe-4cac-a2b5-389c812dee87", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "There should be more than one owner assigned to your subscription", - "groupNames": [ - "New_Zealand_ISM_16.4.30.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "An Azure Active Directory administrator should be provisioned for SQL servers", - "groupNames": [ - "New_Zealand_ISM_16.4.32.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management APIs should use only encrypted protocols", - "groupNames": [ - "New_Zealand_ISM_17.1.55.C.03" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ee7495e7-3ba7-40b6-bfee-c29e22cc75d4", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Key Vault keys should have an expiration date", - "groupNames": [ - "New_Zealand_ISM_17.1.58.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Key Vault secrets should have an expiration date", - "groupNames": [ - "New_Zealand_ISM_17.1.58.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Storage account keys should not be expired", - "groupNames": [ - "New_Zealand_ISM_17.1.58.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/044985bb-afe1-42cd-8a36-9d5d42424537", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Keys using RSA cryptography should have a specified minimum key size", - "groupNames": [ - "New_Zealand_ISM_17.2.19.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82067dbb-e53b-4e06-b631-546d197452d9", - "definitionVersion": "1.*.*", - "parameters": { - "minimumRSAKeySize": { - "value": "[parameters('minimumRSAKeySize-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Keys using elliptic curve cryptography should have the specified curve names", - "groupNames": [ - "New_Zealand_ISM_17.2.22.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ff25f3c8-b739-4538-9d07-3d6d25cfb255", - "definitionVersion": "1.*.*", - "parameters": { - "allowedECNames": { - "value": "[parameters('allowedECNames-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Certificates using RSA cryptography should have the specified minimum key size", - "groupNames": [ - "New_Zealand_ISM_17.2.24.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cee51871-e572-4576-855c-047c820360f0", - "definitionVersion": "2.*.*", - "parameters": { - "minimumRSAKeySize": { - "value": "[parameters('minimumRSAKeySize-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "App Service apps should use the latest TLS version", - "groupNames": [ - "New_Zealand_ISM_17.4.16.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Function apps should use the latest TLS version", - "groupNames": [ - "New_Zealand_ISM_17.4.16.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Windows machines should be configured to use secure communication protocols", - "groupNames": [ - "New_Zealand_ISM_17.4.16.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112", - "definitionVersion": "4.*.*", - "parameters": { - "IncludeArcMachines": { - "value": "[parameters('IncludeArcMachines-1')]" - }, - "MinimumTLSVersion": { - "value": "[parameters('MinimumTLSVersion-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Azure SQL Database should be running TLS version 1.2 or newer", - "groupNames": [ - "New_Zealand_ISM_17.4.16.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Storage accounts should have the specified minimum TLS version", - "groupNames": [ - "New_Zealand_ISM_17.4.16.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe83a0eb-a853-422d-aac2-1bffd182c5d0", - "definitionVersion": "1.*.*", - "parameters": { - "minimumTlsVersion": { - "value": "[parameters('minimumTlsVersion-2')]" - } - } - }, - { - "policyDefinitionReferenceId": "IP Forwarding on your virtual machine should be disabled", - "groupNames": [ - "New_Zealand_ISM_17.5.6.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Authentication to Linux machines should require SSH keys", - "groupNames": [ - "New_Zealand_ISM_17.5.7.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6", - "definitionVersion": "3.*.*", - "parameters": { - "IncludeArcMachines": { - "value": "[parameters('IncludeArcMachines-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Azure Key Vault should use RBAC permission model", - "groupNames": [ - "New_Zealand_ISM_17.9.35.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management secret named values should be stored in Azure Key Vault", - "groupNames": [ - "New_Zealand_ISM_17.9.36.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f1cc7827-022c-473e-836e-5a51cae0b249", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Adaptive network hardening recommendations should be applied on internet facing virtual machines", - "groupNames": [ - "New_Zealand_ISM_18.1.10.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "All network ports should be restricted on network security groups associated to your virtual machine", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Authorized IP ranges should be defined on Kubernetes Services", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure AI Services resources should restrict network access", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Cosmos DB accounts should have firewall rules", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb", - "definitionVersion": "2.*.*", - "parameters": { - "effect": { - "value": "[parameters('deny_effect-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Azure Key Vault should have firewall enabled", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490", - "definitionVersion": "3.*.*", - "parameters": { - "allowedIPAddresses": { - "value": "[parameters('allowedIPAddresses-1')]" - }, - "forbiddenIPAddresses": { - "value": "[parameters('forbiddenIPAddresses-1')]" - }, - "restrictIPAddresses": { - "value": "[parameters('restrictIPAddresses-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Container registries should not allow unrestricted network access", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "CORS should not allow every domain to access your API for FHIR", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Enforce SSL connection should be enabled for MySQL database servers", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Enforce SSL connection should be enabled for PostgreSQL database servers", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Internet-facing virtual machines should be protected with network security groups", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Non-internet-facing virtual machines should be protected with network security groups", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Only secure connections to your Azure Cache for Redis should be enabled", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Public network access on Azure SQL Database should be disabled", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Public network access should be disabled for MariaDB servers", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Public network access should be disabled for MySQL servers", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Public network access should be disabled for PostgreSQL servers", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Secure transfer to storage accounts should be enabled", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Storage accounts should restrict network access", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Subnets should be associated with a Network Security Group", - "groupNames": [ - "New_Zealand_ISM_18.1.13.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure DDoS Protection should be enabled", - "groupNames": [ - "New_Zealand_ISM_18.4.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Connection throttling should be enabled for PostgreSQL database servers", - "groupNames": [ - "New_Zealand_ISM_18.4.7.C.02" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "All authorization rules except RootManageSharedAccessKey should be removed from Service Bus namespace", - "groupNames": [ - "New_Zealand_ISM_18.4.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Web Application Firewall should be enabled for Azure Front Door entry-points", - "groupNames": [ - "New_Zealand_ISM_18.4.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Web Application Firewall (WAF) should be enabled for Application Gateway", - "groupNames": [ - "New_Zealand_ISM_18.4.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Web Application Firewall (WAF) should use the specified mode for Application Gateway", - "groupNames": [ - "New_Zealand_ISM_18.4.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096", - "definitionVersion": "1.*.*", - "parameters": { - "modeRequirement": { - "value": "[parameters('modeRequirement-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Web Application Firewall (WAF) should use the specified mode for Azure Front Door Service", - "groupNames": [ - "New_Zealand_ISM_18.4.8.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8", - "definitionVersion": "1.*.*", - "parameters": { - "modeRequirement": { - "value": "[parameters('modeRequirement-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "API endpoints that are unused should be disabled and removed from the Azure API Management service", - "groupNames": [ - "New_Zealand_ISM_22.1.24.C.03" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c8acafaf-3d23-44d1-9624-978ef0f8652c", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Virtual machines and virtual machine scale sets should have encryption at host enabled", - "groupNames": [ - "New_Zealand_ISM_22.1.24.C.04" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Accounts with owner permissions on Azure resources should be MFA enabled", - "groupNames": [ - "New_Zealand_ISM_23.3.19.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3e008c3-56b9-4133-8fd7-d3347377402a", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Accounts with read permissions on Azure resources should be MFA enabled", - "groupNames": [ - "New_Zealand_ISM_23.3.19.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/81b3ccb4-e6e8-4e4a-8d05-5df25cd29fd4", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Accounts with write permissions on Azure resources should be MFA enabled", - "groupNames": [ - "New_Zealand_ISM_23.3.19.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/931e118d-50a1-4457-a5e4-78550e086c52", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management minimum API version should be set to 2019-12-01 or higher", - "groupNames": [ - "New_Zealand_ISM_23.4.10.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/549814b6-3212-4203-bdc8-1548d342fb67", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management subscriptions should not be scoped to all APIs", - "groupNames": [ - "New_Zealand_ISM_23.4.10.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3aa03346-d8c5-4994-a5bc-7652c2a2aef1", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management direct management endpoint should not be enabled", - "groupNames": [ - "New_Zealand_ISM_23.4.10.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b741306c-968e-4b67-b916-5675e5c709f4", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "API Management calls to API backends should not bypass certificate thumbprint or name validation", - "groupNames": [ - "New_Zealand_ISM_23.4.10.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/92bb331d-ac71-416a-8c91-02f2cb734ce4", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Automation account variables should be encrypted", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Cosmos DB accounts should use customer-managed keys to encrypt data at rest", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Key Vault Managed HSM should have purge protection enabled", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Azure Machine Learning workspaces should be encrypted with a customer-managed key", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Cognitive Services accounts should enable data encryption with a customer-managed key", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d", - "definitionVersion": "2.*.*", - "parameters": { - "excludedKinds": { - "value": "[parameters('excludedKinds-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Container registries should be encrypted with a customer-managed key", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Disk encryption should be enabled on Azure Data Explorer", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Key vaults should have deletion protection enabled", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Key vaults should have soft delete enabled", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "MySQL servers should use customer-managed keys to encrypt data at rest", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "PostgreSQL servers should use customer-managed keys to encrypt data at rest", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Require encryption on Data Lake Store accounts", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "SQL managed instances should use customer-managed keys to encrypt data at rest", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac01ad65-10e5-46df-bdd9-6b0cad13e1d2", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "SQL servers should use customer-managed keys to encrypt data at rest", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a370ff3-6cab-4e85-8995-295fd854c5b8", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Storage accounts should use customer-managed key for encryption", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Transparent Data Encryption on SQL databases should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.4.9.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12", - "definitionVersion": "2.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "App Service apps should have resource logs enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510", - "definitionVersion": "2.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Audit usage of custom RBAC roles", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Auditing on SQL server should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9", - "definitionVersion": "2.*.*", - "parameters": { - "setting": { - "value": "[parameters('setting-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Auto provisioning of the Log Analytics agent should be enabled on your subscription", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Disconnections should be logged for PostgreSQL database servers.", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Log connections should be enabled for PostgreSQL database servers", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Resource logs in Azure Data Lake Store should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Azure Kubernetes Service should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c", - "definitionVersion": "1.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Azure Stream Analytics should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Batch accounts should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Data Lake Analytics should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Event Hub should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in IoT Hub should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4", - "definitionVersion": "3.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Key Vault should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Logic Apps should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Search services should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "Resource logs in Service Bus should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45", - "definitionVersion": "5.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - }, - { - "policyDefinitionReferenceId": "SQL servers with auditing to storage account destination should be configured with 90 days retention or higher", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743", - "definitionVersion": "3.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "SQL server-targeted autoprovisioning should be enabled for SQL servers on machines plan", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c6283572-73bb-4deb-bf2c-7a2b8f7462cb", - "definitionVersion": "1.*.*", - "parameters": {} - }, - { - "policyDefinitionReferenceId": "Resource logs in Azure Machine Learning Workspaces should be enabled", - "groupNames": [ - "New_Zealand_ISM_23.5.11.C.01" - ], - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/afe0c3be-ba3b-4544-ba52-0c99672a8ad6", - "definitionVersion": "1.*.*", - "parameters": { - "requiredRetentionDays": { - "value": "[parameters('requiredRetentionDays-1')]" - } - } - } - ] - }, - "id": "/providers/Microsoft.Authorization/policySetDefinitions/4f5b1359-4f8e-4d7c-9733-ea47fcde891e", - "name": "4f5b1359-4f8e-4d7c-9733-ea47fcde891e" - } \ No newline at end of file