MCCAPreview

1.6.1

Checks/check-IP101.ps1

                                using module "..\MCCA.psm1"

class IP101 : MCCACheck {

    <#

    #>

    IP101() {

        $this.Control = "IP-101"

        $this.ParentArea = "Microsoft Information Protection"

        $this.Area = "Information Protection"

        $this.Name = "Create Sensitivity Labels for Sensitive or Critical Data"

        $this.PassText = "Your organization is using sensitivity labels to classify your information"

        $this.FailRecommendation = "Your organization should be using sensitivity labels to classify your information"

        $this.Importance = "Your organization should use sensitivity labels and policies to classify your information in SharePoint Online, OneDrive for Business, and Exchange Online. This helps categorize your most important data and effectively protect it from illicit access; it can also make it easier to investigate discovered breaches."

        $this.ExpandResults = $True

        $this.CheckType = [CheckType]::ObjectPropertyValue

        $this.ObjectType = "Label Policy"

        $this.ItemName = "Labels"

        $this.DataType = "Remarks"

        if($this.ExchangeEnvironmentNameForCheck -ieq "O365USGovGCCHigh")

        {

            $this.Links = @{

                "Overview of sensitivity labels "  = "https://aka.ms/mcca-ip-docs-sensitivity-labels"

                "How to configure classifications for your Microsoft 365 environment" = "https://aka.ms/mcca-ip-docs-action-how-to-classification"

                "Compliance Center - Information Protection"  = "https://aka.ms/mcca-gcch-ip-compliance-center"

                "Compliance Manager - IP Actions" = "https://aka.ms/mcca-gcch-ip-compliance-manager"

            }

        }elseif ($this.ExchangeEnvironmentNameForCheck -ieq "O365USGovDoD") 

        {

            $this.Links = @{

                "Overview of sensitivity labels "   = "https://aka.ms/mcca-ip-docs-sensitivity-labels"

                "How to configure classifications for your Microsoft 365 environment" = "https://aka.ms/mcca-ip-docs-action-how-to-classification"

                "Compliance Center - Information Protection"  = "https://aka.ms/mcca-dod-ip-compliance-center"

                "Compliance Manager - IP Actions" = "https://aka.ms/mcca-dod-ip-compliance-manager"

            }   

        }else

        {

        $this.Links = @{

            "Overview of sensitivity labels "                                     = "https://aka.ms/mcca-ip-docs-sensitivity-labels"

            "How to configure classifications for your Microsoft 365 environment" = "https://aka.ms/mcca-ip-docs-action-how-to-classification"

            "Compliance Center - Information Protection"                         = "https://aka.ms/mcca-ip-compliance-center"

            "Compliance Manager - IP Actions" = "https://aka.ms/mcca-ip-compliance-manager"

        }

        }

    }

    <#

        RESULTS

    #>

    GetResults($Config) {

        if (($Config["GetLabel"] -eq "Error") -or ($Config["GetLabelPolicy"] -eq "Error")) {

            $this.Completed = $false

        }

        else {

            $ConfigObjectList = @()

            $LabelPolicyExists = $False

            $UtilityFiles = Get-ChildItem "$PSScriptRoot\..\Utilities"

            ForEach ($UtilityFile in $UtilityFiles) {

                . $UtilityFile.FullName

            }

            $LogFile = $this.LogFile

            $LabelAssociation = Get-LabelClassification -LogFile $LogFile

            $SubLabels = $LabelAssociation.sublabels

            $ParentLabels = $LabelAssociation.parentlabels

            $ParentSubLabelAssociation = $LabelAssociation.parentsublabelassociation

            $ParentNameForSubLabelAssociation = $LabelAssociation.parentnameforsublabelassociation

            $AllGlobalPolicy = 0

            $ScopedGlobalPolicy = 0

            ForEach ($Policies in $Config["GetLabelPolicy"]) {   

                $LabelPolicy = $Policies

                $ConfigObject = [MCCACheckConfig]::new()

                $PolicyParentLabelCount = 0

                $PolicySubLabelCount = 0

                $ParentLabelsDefinedinPolicy = "None"

                $SubLabelsDefinedinPolicy = "None"

                if ($LabelPolicy.Enabled -eq $true) {

                    foreach ($LabelConfigured in $LabelPolicy.Labels) {  

                        if ($SubLabels.containsKey($LabelConfigured)) {

                            $PolicySubLabelCount++

                            if ($SubLabelsDefinedinPolicy -eq "None") {

                                $SubLabelsDefinedinPolicy = $LabelConfigured 

                            }

                            else {

                                $SubLabelsDefinedinPolicy += ", $LabelConfigured"

                            }

                        }

                        if ($ParentLabels.containsKey($LabelConfigured)) {

                            $PolicyParentLabelCount++

                            if ($ParentLabelsDefinedinPolicy -eq "None") {

                                $ParentLabelsDefinedinPolicy = $LabelConfigured 

                            }

                            else {

                                $ParentLabelsDefinedinPolicy += ", $LabelConfigured"

                            }

                        }

                    }

                    $ExchangeLocation = $($LabelPolicy.ExchangeLocation)

                    if ((@($ExchangeLocation) -like 'All').Count -gt 0) {

                        $AllGlobalPolicy++

                    }

                    else {

                        $ScopedGlobalPolicy++

                    }

                    if ($PolicyParentLabelCount -le 9) {

                        $ConfigObject.Object = $LabelPolicy.Name

                        $ConfigObject.ConfigItem = "<B>Parent Labels</B> : $ParentLabelsDefinedinPolicy <BR> <B>Sub Labels</B> : $SubLabelsDefinedinPolicy"

                        $ConfigObject.ConfigData = "<B>Enabled Workload:</B> $($LabelPolicy.ExchangeLocation) $($LabelPolicy.ModernGroupLocation)"

                        $ConfigObject.SetResult([MCCAConfigLevel]::Ok, "Pass")

                        $ConfigObjectList += $ConfigObject 

                    }

                    else {

                        $ConfigObject.Object = "$($LabelPolicy.Name)"

                        $ConfigObject.ConfigItem = "<B>Parent Labels</B> : $ParentLabelsDefinedinPolicy <BR> <B>Sub Labels</B> : $SubLabelsDefinedinPolicy"

                        $ConfigObject.ConfigData = "No of parent Labels is more than 8."

                        $ConfigObject.InfoText = "You currently have $($PolicyParentLabelCount) Global policies defined. We have found 8 parent labels to be optimal for most organizations"

                        $ConfigObject.SetResult([MCCAConfigLevel]::Recommendation, "Fail")

                        $ConfigObjectList += $ConfigObject 

                    }

                    $LabelPolicyExists = $true

                }

                else {

                    $ConfigObject.Object = "$($LabelPolicy.Name)"

                    $ConfigObject.ConfigItem = "$($LabelPolicy.Labels)"

                    $ConfigObject.ConfigData = " <B>Policy is not enabled </B>"   

                    $ConfigObject.SetResult([MCCAConfigLevel]::Ok, "Fail")      

                    $ConfigObjectList += $ConfigObject 

                }

                $this.AddConfig($ConfigObject)

                $LabelPolicyExists = $true

            }

            if ($AllGlobalPolicy -gt 5) {

                $ConfigObject = [MCCACheckConfig]::new()

                $ConfigObject.Object = "<B>High Number of Global policies defined<B>"

                $ConfigObject.ConfigItem = "No of policies : $AllGlobalPolicy "

                $ConfigObject.ConfigData = "<B>No of Global policies defined is more than 5.</B>"

                $ConfigObject.InfoText = "You currently have $($AllGlobalPolicy) Global policies defined. We have found 5 Global Policy to be optimal for most organizations. Please consider reducing your current global policies count."

                $ConfigObject.SetResult([MCCAConfigLevel]::Recommendation, "Fail")  

                $ConfigObjectList += $ConfigObject 

                $this.AddConfig($ConfigObject)

            }

            elseif ($AllGlobalPolicy -gt 10 ) {                    

                $ConfigObject = [MCCACheckConfig]::new()

                $ConfigObject.Object = "<B>High Number of Global policies defined<B>"

                $ConfigObject.ConfigItem = "No of policies : $AllGlobalPolicy "

                $ConfigObject.ConfigData = "You currently have $($AllGlobalPolicy) Global policies defined. We have found 5 Global Policy to be optimal for most organizations"

                $ConfigObject.SetResult([MCCAConfigLevel]::Ok, "Fail")  

                $ConfigObjectList += $ConfigObject 

                $this.AddConfig($ConfigObject)

            }

            if ($ScopedGlobalPolicy -gt 10 -and $ScopedGlobalPolicy -lt 30 ) {

                $ConfigObject = [MCCACheckConfig]::new()

                $ConfigObject.Object = "<B>High Number of Scoped policies defined<B>"

                $ConfigObject.InfoText = "You currently have $($ScopedGlobalPolicy) Scoped policies defined. We have found 10 Scoped Policy to be optimal for most organizations. Please consider reducing your current scoped policies count."

                $ConfigObject.ConfigItem = "No of policies : $ScopedGlobalPolicy "

                $ConfigObject.ConfigData = "<B>No of parent Labels defined is more than 10.</B>"

                $ConfigObject.SetResult([MCCAConfigLevel]::Recommendation, "Fail")   

                $ConfigObjectList += $ConfigObject 

                $this.AddConfig($ConfigObject)

            }

            elseif ($ScopedGlobalPolicy -gt 29 ) {                    

                $ConfigObject = [MCCACheckConfig]::new()

                $ConfigObject.Object = "<B>High Number of Scoped policies defined<B>"

                $ConfigObject.ConfigItem = "No of policies : $ScopedGlobalPolicy "

                $ConfigObject.ConfigData = "You currently have $($ScopedGlobalPolicy) Scoped policies defined. We have found 10 Scoped Policy to be optimal for most organizations."

                $ConfigObject.SetResult([MCCAConfigLevel]::Ok, "Fail")  

                $ConfigObjectList += $ConfigObject 

                $this.AddConfig($ConfigObject)

            }

            if ($ParentLabels.count -gt 5) {

                $ConfigObject = [MCCACheckConfig]::new()

                $ConfigObject.Object = "<B>High number of parent labels defined<B>"

                $ParentLabelsString = $null

                foreach ($ParentLabelkey in $ParentLabels.Keys) {

                    if ($null -ne $ParentLabelsString) {

                        $ParentLabelsString += ", $ParentLabelkey"

                    }

                    else {

                        $ParentLabelsString += "$ParentLabelkey"

                    }

                }

                $ConfigObject.ConfigItem = "Parent Labels : $($ParentLabelsString)"

                $ConfigObject.ConfigData = "<B>No. of parent labels defined is more than 5.</B>"

                $ConfigObject.InfoText = "You currently have $($ParentLabels.count) parent labels defined. We have found 5 parent labels to be optimal for most organizations. Please consider reducing your current label count. "

                $ConfigObject.SetResult([MCCAConfigLevel]::Recommendation, "Pass")   

                $ConfigObjectList += $ConfigObject 

                $this.AddConfig($ConfigObject)

            }

            elseif ($ParentLabels.count -gt 10 ) {                    

                $ConfigObject = [MCCACheckConfig]::new()

                $ConfigObject.Object = "High number of parent labels defined"

                $ParentLabelsString = $null

                foreach ($ParentLabelkey in $ParentLabels.Keys) {

                    if ($null -ne $ParentLabelsString) {

                        $ParentLabelsString += ", $ParentLabelkey"

                    }

                    else {

                        $ParentLabelsString += "$ParentLabelkey"

                    }

                }

                $ConfigObject.ConfigItem = "<B>Parent Labels</B> : $($ParentLabelsString)"

                $ConfigObject.ConfigData = "You currently have $($ParentLabels.count) parent labels defined. We have found 5 parent labels to be optimal for most organizations."

                $ConfigObject.SetResult([MCCAConfigLevel]::Ok, "Fail")  

                $ConfigObjectList += $ConfigObject 

                $this.AddConfig($ConfigObject)

            }

            # For >5 sublabel count

            if ($($($ParentSubLabelAssociation.Keys).count) -gt 0) {

                $ParentLabelsWithHighSublabelCountString = $null

                foreach ($ParentLabelID in $($ParentSubLabelAssociation.Keys)) {

                    $AllSubLabels = $ParentSubLabelAssociation[$ParentLabelID] #all sublabels within a parent label

                    if ($($AllSubLabels.count) -gt 5) {

                        if ($null -ne $ParentLabelsWithHighSublabelCountString) {

                            $ParentLabelsWithHighSublabelCountString += ", $($ParentNameForSubLabelAssociation[$ParentLabelID])"

                        }

                        else {

                            $ParentLabelsWithHighSublabelCountString += "$($ParentNameForSubLabelAssociation[$ParentLabelID])"

                        }

                    }

                }

                if ($null -ne $ParentLabelsWithHighSublabelCountString) {

                    $ConfigObject = [MCCACheckConfig]::new()

                    $ConfigObject.Object = "<B>High number of sub-labels defined</B>"

                    $ConfigObject.ConfigItem = "Parent Labels : $($ParentLabelsWithHighSublabelCountString)"

                    $ConfigObject.ConfigData = "<B>No. of sub-labels defined is more than 5.</B>"

                    $ConfigObject.InfoText = "You currently have more than 5 sub-labels defined for 1 or more parent labels. We have found 5 sub-labels to be optimal for most organizations. Please consider reducing your current sub-label count."

                    $ConfigObject.SetResult([MCCAConfigLevel]::Recommendation, "Pass") 

                    $ConfigObjectList += $ConfigObject 

                    $this.AddConfig($ConfigObject)

                }

            }

            If ($LabelPolicyExists -eq $False) {

                $ConfigObject = [MCCACheckConfig]::new()

                $ConfigObject.Object = "No Active Policy defined"

                $ConfigObject.ConfigItem = "No Active Policy defined"

                $ConfigObject.SetResult([MCCAConfigLevel]::Ok, "Fail")     

                $ConfigObjectList += $ConfigObject        

                $this.AddConfig($ConfigObject)

            }

            $hasRemediation = $this.Config | Where-Object { $_.RemediationAction -ne ''}

            if ($($hasremediation.count) -gt 0)

            {

                $this.MCCARemediationInfo = New-Object -TypeName MCCARemediationInfo -Property @{

                    RemediationAvailable = $True

                    RemediationText      = "You need to connect to Security & Compliance Center PowerShell to execute the below commands. Please follow steps defined in <a href = 'https://docs.microsoft.com/en-us/powershell/exchange/connect-to-scc-powershell?view=exchange-ps'> Connect to Security & Compliance Center PowerShell</a>."

                }

            }

            $this.Completed = $True

        }

    }

}

# SIG # Begin signature block

# MIIhkgYJKoZIhvcNAQcCoIIhgzCCIX8CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDS6yLPZkxyUDEo

# b3joQSfyOzJ9UiTNJGzKRH/TQYitJKCCC4QwggUAMIID6KADAgECAhMzAAAEU+We

# zhfpk+4QAAAAAARTMA0GCSqGSIb3DQEBCwUAMHkxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xIzAhBgNVBAMTGk1pY3Jvc29mdCBUZXN0aW5nIFBD

# QSAyMDEwMB4XDTIwMTIxNTE5NDMyN1oXDTIxMTIwMjE5NDMyN1owfDELMAkGA1UE

# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc

# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdQ29kZSBTaWdu

# IFRlc3QgKERPIE5PVCBUUlVTVCkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK

# AoIBAQDIbLqmXHPCGqCpfikwr9Gwu7mmwKaRk2l2c7HiFdxA4N/5QBm3ZfoonyX/

# oaX3WbsvBD3MoCMZJCYGVJeCkW0Iy0ahCtcxjmCmy9T7g0Du1vR29P+TTghXQ4ZP

# fVj+XDxo82IsqpD7uxaa/VujruYpxvYfwRZB11kf0SpaRLae1TvONYQZ/eNifGSx

# zUridwIkDPogu1vzsehp1O+SMhv3foM6Rz95ajbWOJMxgooE+LoAapjHe8jDciok

# 4jPC/5F5HGbf50i6Wj/QLN3VKLQFsSBzBC1RFqUITmcRP4ngQeDvLpvTluC8KFmy

# IlZunmBqGx2ynTmebwVysIa+qV/NAgMBAAGjggF8MIIBeDATBgNVHSUEDDAKBggr

# BgEFBQcDAzAdBgNVHQ4EFgQUrvqOOBCgPTy+cAoXZUhGw1P2yF4wUAYDVR0RBEkw

# R6RFMEMxKTAnBgNVBAsTIE1pY3Jvc29mdCBPcGVyYXRpb25zIFB1ZXJ0byBSaWNv

# MRYwFAYDVQQFEw0yMzAwNzIrNDYzMDE4MB8GA1UdIwQYMBaAFN3WR4sjFC/YOGhC

# oz5tw/CQ9yzQMFkGA1UdHwRSMFAwTqBMoEqGSGh0dHA6Ly93d3cubWljcm9zb2Z0

# LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRlc3RpbmclMjBQQ0ElMjAyMDEw

# LmNybDBmBggrBgEFBQcBAQRaMFgwVgYIKwYBBQUHMAKGSmh0dHA6Ly93d3cubWlj

# cm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGVzdGluZyUyMFBD

# QSUyMDIwMTAuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBACnT

# 9Iwyq9Jk/Ee6QBrLTjw5+p0XjjxX7Oocz1R/iNdfx7iJtSf4VHWcDGXr92BPQLgl

# MOdq6PCrIRstWMg1aBQ4eH9Q6VfiWZq3FyaQNpDG4g/+Z6Zo5A6LgbtEnZB5tboP

# ZsE4o0wDlIXX5pGCsCTIiVMtJqbCZPn5hLG5V7wMlLae9A4xOW+JyBy8vA/FpE+A

# QQoHSJ4LrC22bwpn2+cQRF5SlFRIqZVx+wclji96Nerfosz2ZPLfydHvs8jH65dA

# 2WFAMvN8/KxdX7fp98Bzk+vhCPYc4/CKyPdscD7yJvOxveEAzDiLyyWrnbFU9qP7

# aI/JTxrVA5IGS7wIJKwwggZ8MIIEZKADAgECAgphEYRvAAAAAAADMA0GCSqGSIb3

# DQEBCwUAMIGQMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTow

# OAYDVQQDEzFNaWNyb3NvZnQgVGVzdGluZyBSb290IENlcnRpZmljYXRlIEF1dGhv

# cml0eSAyMDEwMB4XDTEwMDcwMTIxMjMwMVoXDTI1MDcwMTIxMzMwMVoweTELMAkG

# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx

# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEjMCEGA1UEAxMaTWljcm9z

# b2Z0IFRlc3RpbmcgUENBIDIwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK

# AoIBAQDBvSHVS2YGAJIwORjKy3NCWbHvmyeo4OhVvSmw+SQfOtHow1mJ7ZG2wegz

# Y/ZaZBniLnwMkIAFOL8cproNai/vJ5er3vbvUPOD59fDRTciPxi1wpYRto0Sg1mL

# J1EGVnW5YGoTDtUmPy2WqgXMoYc/vk807wxMb8wE1KHmZ80KJzOf46+bb2h8vLQM

# czSMWoH5h/tUHMVHbOqfV7RZ/c4ZqXd8h0KftXmUvMt2ktuWl6FfBCQ5/qGV4Z+G

# 417ZXFbfQ5CfyRTq0fWgW6vzCATdKK8b4qouE6AK7dKZRCr1mUT7K6RP8bthwh0t

# 9SUnAqh475M59F51ge7S4HYMWyPvAgMBAAGjggHsMIIB6DAQBgkrBgEEAYI3FQEE

# AwIBADAdBgNVHQ4EFgQU3dZHiyMUL9g4aEKjPm3D8JD3LNAwGQYJKwYBBAGCNxQC

# BAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYD

# VR0jBBgwFoAUowEEfjCIM+u5MZzK64V2Z/xltNEwWQYDVR0fBFIwUDBOoEygSoZI

# aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljVGVz

# Um9vQ2VyQXV0XzIwMTAtMDYtMTcuY3JsMF0GCCsGAQUFBwEBBFEwTzBNBggrBgEF

# BQcwAoZBaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNUZXNS

# b29DZXJBdXRfMjAxMC0wNi0xNy5jcnQwgaAGA1UdIAEB/wSBlTCBkjCBjwYJKwYB

# BAGCNy4DMIGBMD0GCCsGAQUFBwIBFjFodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v

# UEtJL2RvY3MvQ1BTL2RlZmF1bHQuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBn

# AGEAbABfAFAAbwBsAGkAYwB5AF8AUwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqG

# SIb3DQEBCwUAA4ICAQBAYQU+N90ze1LCSGuA92ADFrbJLol+vdlYHGPT9ZLS9loE

# DQjuh7/rmDQ6ZXxQ5MgbKVB5VXsYOZG1QSbzF3+YlWd8TN1y5B21BM3DSPb6r+3b

# rl50kW2t1JqACtiLbZnmhmh5hkdJi8HYUfLQ7xKcP0g1CIJP9CyKil7UJv/HnMXK

# igTGiBaHjfVtVwG5k8roymrEirpBDcOMVB0OZiTXxYIHDbM4v7LItZYIISdPs6+L

# wxwzwdroMdpj42+3dWQBumpRGQAgqJ9i5UiBQtUM+9vLpKIRnujnWfQxbaIuIt2H

# RLFpHUYKGOXRlf148o+71dX3YWap88+ocaxkM8rkavgDNkcWSe9Dpoq8a3tS2P9B

# pxewDV+iSzF0JRo9UOZeciaSQDZvrkQskxJjtdO725L6E5Fu1Ti+lGl6exRCnhPb

# ooxCqHEGLRdiwXkrmLp+huTGAK8zmfEt0d1JFrrDdu5kqoG3OVT2dN4JVFNpOFvC

# U/LNiVDCyCIcG0cSRVtDjyNckMhu1PcPtberjr1mcL8RkTzvonoH4pIvQk1k4IOL

# pdxslOj2oigApZjqCBJA3mIEZHlnwRuglg4Er74nSmL6953C0r1Vwl7T0vXnQO8i

# zb+incAb1r6Y+45N5aVXww+PqHJBRjvhjyBKG+1aDLVM3ixjV9P6OZkOvp4uozGC

# FWQwghVgAgEBMIGQMHkxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xIzAhBgNVBAMTGk1pY3Jvc29mdCBUZXN0aW5nIFBDQSAyMDEwAhMzAAAEU+We

# zhfpk+4QAAAAAARTMA0GCWCGSAFlAwQCAQUAoIGwMBkGCSqGSIb3DQEJAzEMBgor

# BgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqGSIb3

# DQEJBDEiBCAAFRJtjEQYRpg0+m+palgzGJjYQvrBaLWr/cZXjPFjOzBEBgorBgEE

# AYI3AgEMMTYwNKAUgBIATQBpAGMAcgBvAHMAbwBmAHShHIAaaHR0cHM6Ly93d3cu

# bWljcm9zb2Z0LmNvbSAwDQYJKoZIhvcNAQEBBQAEggEASIUmJF0mReDkUCaicsEt

# 1KVEpFOH76iZ82erejsnh6j2ORRkcm8BVHGqtITwo2DLiheCWhgboZFU5HEcCehj

# YdKXJfXDZtgqVgFBguOYIQdiGMvbGk3HM+tg9wwxJsdesPkmJhieNKDk0cTCheHJ

# EUxHFVIpqkXjguFVPICXOjFps/L5tyycToJv4DXfKYd1GJODsHuVE3wUTP/rItMM

# 6dv0cGME++PPR/aaToXs5UY4oYxml5ZDupMxz1TSdkMqnBo3bOemlu7dJgMha4LF

# 7XGCaCkkIawHquJ6X2RGBlfT9yqimTiqsJ9Y17IYlDon7/QdBS9QrloyMWZGGgEh

# 7aGCEvEwghLtBgorBgEEAYI3AwMBMYIS3TCCEtkGCSqGSIb3DQEHAqCCEsowghLG

# AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFVBgsqhkiG9w0BCRABBKCCAUQEggFAMIIB

# PAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDz9y4lyR24M4Oxx8h3

# JcE6ypkI+1dHctVDouwZXqE6vwIGYNOPwUjhGBMyMDIxMDcwOTA2MDk0NS4wMzFa

# MASAAgH0oIHUpIHRMIHOMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMSkwJwYDVQQLEyBNaWNyb3NvZnQgT3BlcmF0aW9ucyBQdWVydG8gUmljbzEm

# MCQGA1UECxMdVGhhbGVzIFRTUyBFU046RDlERS1FMzlBLTQzRkUxJTAjBgNVBAMT

# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2Wggg5EMIIE9TCCA92gAwIBAgIT

# MwAAAWH1ojNeoCokaQAAAAABYTANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yMTAxMTQxOTAyMjFaFw0yMjA0MTExOTAyMjFa

# MIHOMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSkwJwYDVQQL

# EyBNaWNyb3NvZnQgT3BlcmF0aW9ucyBQdWVydG8gUmljbzEmMCQGA1UECxMdVGhh

# bGVzIFRTUyBFU046RDlERS1FMzlBLTQzRkUxJTAjBgNVBAMTHE1pY3Jvc29mdCBU

# aW1lLVN0YW1wIFNlcnZpY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQCXiJ2oQa1P/xs06ocVMgAvFF3LelCQpG9sRGSld4I4IJiwIXga8SZO7R/j8NrU

# 3Mmqy0X5ldsaOaAZOaVvznA3P5/03E3kFOiSDeT5U3J9AvUZSkOrfTrlP1gMgMRk

# 4yhOBDZ1I17cYjZQ/ytmRjC746UTgSoe07ZFCSumRlsP7k0WmzQcUYNd0745Bh1x

# FBAyfIpmnMPQQnkfS+rp3a99rY+HbjhSBw/JtXrN0jTffGauCAwT9wnG/h0IMaW3

# hyFJStMus5syJL3ze92ccHxrxb9PzGse/ViWNHA/KaAp2RYo3Ilq39Hg9U9v/ux4

# HsM63cT3UhaHJFEPEKLyAyGJAgMBAAGjggEbMIIBFzAdBgNVHQ4EFgQUVh6andYb

# +9UlY+SwHT3zROz4Sy8wHwYDVR0jBBgwFoAU1WM6XIoxkPNDe3xGG8UzaFqFbVUw

# VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j

# cmwvcHJvZHVjdHMvTWljVGltU3RhUENBXzIwMTAtMDctMDEuY3JsMFoGCCsGAQUF

# BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br

# aS9jZXJ0cy9NaWNUaW1TdGFQQ0FfMjAxMC0wNy0wMS5jcnQwDAYDVR0TAQH/BAIw

# ADATBgNVHSUEDDAKBggrBgEFBQcDCDANBgkqhkiG9w0BAQsFAAOCAQEAEEwPW6lQ

# ZseU0zIc4/kPM1pD0F4AnEkIqstmGFhdIVq+RhIjdi7QPhFnbtcvKMrGWruAj+0s

# zPFU0qt9QiyYjst/WeEbxKtpq9BH7Rb5l9gsUO2cs65IVjGWmUC5GGx+aGmyBcJ3

# Vt+J4ffNATmN/ebX5zUv2OjdH/o13aBZ+3yNnON0xWLFKiD1ozhyZaDHpLZQ+v7k

# umZ+MbHv5SLRZvn1jnAdgMclxAd2URHkoPY+/hqBJdcU/4iblf0qO05VncMmnELu

# Jb9zAbL8c0SGyoWcKw2KIJqMifq8IEAfJikuPzNUg0bSKbWpqExSeek5Og7lF8dS

# bnU6HpYIxGT2uTCCBnEwggRZoAMCAQICCmEJgSoAAAAAAAIwDQYJKoZIhvcNAQEL

# BQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNV

# BAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4X

# DTEwMDcwMTIxMzY1NVoXDTI1MDcwMTIxNDY1NVowfDELMAkGA1UEBhMCVVMxEzAR

# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p

# Y3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh

# bXAgUENBIDIwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHQ28

# dxGKOiDs/BOX9fp/aZRrdFQQ1aUKAIKF++18aEssX8XD5WHCdrc+Zitb8BVTJwQx

# H0EbGpUdzgkTjnxhMFmxMEQP8WCIhFRDDNdNuDgIs0Ldk6zWczBXJoKjRQ3Q6vVH

# gc2/JGAyWGBG8lhHhjKEHnRhZ5FfgVSxz5NMksHEpl3RYRNuKMYa+YaAu99h/EbB

# Jx0kZxJyGiGKr0tkiVBisV39dx898Fd1rL2KQk1AUdEPnAY+Z3/1ZsADlkR+79BL

# /W7lmsqxqPJ6Kgox8NpOBpG2iAg16HgcsOmZzTznL0S6p/TcZL2kAcEgCZN4zfy8

# wMlEXV4WnAEFTyJNAgMBAAGjggHmMIIB4jAQBgkrBgEEAYI3FQEEAwIBADAdBgNV

# HQ4EFgQU1WM6XIoxkPNDe3xGG8UzaFqFbVUwGQYJKwYBBAGCNxQCBAweCgBTAHUA

# YgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# 1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIw

# MTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w

# Ni0yMy5jcnQwgaAGA1UdIAEB/wSBlTCBkjCBjwYJKwYBBAGCNy4DMIGBMD0GCCsG

# AQUFBwIBFjFodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vUEtJL2RvY3MvQ1BTL2Rl

# ZmF1bHQuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAFAAbwBsAGkA

# YwB5AF8AUwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQAH

# 5ohRDeLG4Jg/gXEDPZ2joSFvs+umzPUxvs8F4qn++ldtGTCzwsVmyWrf9efweL3H

# qJ4l4/m87WtUVwgrUYJEEvu5U4zM9GASinbMQEBBm9xcF/9c+V4XNZgkVkt070IQ

# yK+/f8Z/8jd9Wj8c8pl5SpFSAK84Dxf1L3mBZdmptWvkx872ynoAb0swRCQiPM/t

# A6WWj1kpvLb9BOFwnzJKJ/1Vry/+tuWOM7tiX5rbV0Dp8c6ZZpCM/2pif93FSguR

# JuI57BlKcWOdeyFtw5yjojz6f32WapB4pm3S4Zz5Hfw42JT0xqUKloakvZ4argRC

# g7i1gJsiOCC1JeVk7Pf0v35jWSUPei45V3aicaoGig+JFrphpxHLmtgOR5qAxdDN

# p9DvfYPw4TtxCd9ddJgiCGHasFAeb73x4QDf5zEHpJM692VHeOj4qEir995yfmFr

# b3epgcunCaw5u+zGy9iCtHLNHfS4hQEegPsbiSpUObJb2sgNVZl6h3M7COaYLeqN

# 4DMuEin1wC9UJyH3yKxO2ii4sanblrKnQqLJzxlBTeCG+SqaoxFmMNO7dDJL32N7

# 9ZmKLxvHIa9Zta7cRDyXUHHXodLFVeNp3lfB0d4wwP3M5k37Db9dT+mdHhk4L7zP

# WAUu7w2gUDXa7wknHNWzfjUeCLraNtvTX4/edIhJEqGCAtIwggI7AgEBMIH8oYHU

# pIHRMIHOMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSkwJwYD

# VQQLEyBNaWNyb3NvZnQgT3BlcmF0aW9ucyBQdWVydG8gUmljbzEmMCQGA1UECxMd

# VGhhbGVzIFRTUyBFU046RDlERS1FMzlBLTQzRkUxJTAjBgNVBAMTHE1pY3Jvc29m

# dCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVABVuUoQMOXpExF7y

# /+FdbNK2w895oIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw

# DQYJKoZIhvcNAQEFBQACBQDkkdRRMCIYDzIwMjEwNzA4MjM0NTIxWhgPMjAyMTA3

# MDkyMzQ1MjFaMHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAOSR1FECAQAwCgIBAAIC

# Fa4CAf8wBwIBAAICEoswCgIFAOSTJdECAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYK

# KwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQUF

# AAOBgQAmSQCEpCkHIitGjoPiVSMZqcs3DLq1UJ7e4Wbg4CHz0z0kReVy/5Hu/VNB

# /izdDYa+CZM6JtRGGp5eFJj+15bNA2/AGSxTAFeeH0OlRnGec2zUCVwbju6/uWfs

# cr4WYUSJlm1dHIuvcrjgkbKsaw2rEhwP3bOfKHg69XGdOygStjGCAw0wggMJAgEB

# MIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV

# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAABYfWiM16gKiRp

# AAAAAAFhMA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcN

# AQkQAQQwLwYJKoZIhvcNAQkEMSIEIDCv1ekyGx5upT9jUXlJJwXl6nk7x99qfUXW

# 9tGUxaMeMIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgYc+Lp+ppEi3f8wPt

# DeWCwxqeL1v1QbTVv5aZobQJOG8wgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEG

# A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj

# cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt

# cCBQQ0EgMjAxMAITMwAAAWH1ojNeoCokaQAAAAABYTAiBCDcyAOvPK3SYFascpxb

# CYc6nvOy1EzmEJyKyof3741hYzANBgkqhkiG9w0BAQsFAASCAQB+YQcUspNNrt5D

# nNwBBUKJXMfaXk/ZDP+uE6Am1wtPY1332UOpPRbkWYeRyUPFfOToULmTR/C2bWuL

# VwOLkDKHC4ntTCN6ztj2rNRnH3g6i8YRkr3nGqMuPA9JCiZ3Cki+PT4dEGdA9JHv

# iOOSGgk9EZeRlkIVA7YTDbm5+lSbs4Q5OhctbUgDtztkPz9fEGKYiVPqkgFc5tHg

# fWcV33A21BrB9dyMLcLKH5Oz0xZbhkKhJJdWQviuEyZy4pChz6XRJCjY5xGbW/IT

# ej5x+qld1mRkiN6zcty0+HgQIAZwmQgz9f5MJJMyK5wyIQgk9V8GccTJcRODWWSl

# Xmv53SfP

# SIG # End signature block