Contingent Workforce Security Awareness Version 1 Cerner Corporation

Contingent Workforce: Security Awareness Version: 1 © Cerner Corporation. All rights reserved. This document contains Cerner confidential and/or proprietary information belonging to Cerner Corporation and/or its related affiliates which may not be reproduced or transmitted in any form or by any means without the express written consent of Cerner. March 24, 2010

Rules of the Road Definition: Cerner’s policy that describes a user’s responsibilities and expected behavior when accessing/using a company computer, device or connection to our information network All associates must understand this policy ü Failure to comply to Cerner’s “Rules of the Road” is grounds for corrective action, up to and including termination of employment ü Cerner reserves the right to modify, at any time, these Rules of the Road ü © 2011 Cerner Corporation. All rights reserved. This document contains Cerner confidential and/or proprietary information which may not be reproduced or transmitted without the express written consent of Cerner. 2

Rules of the Road cont. . . Key Takeaways: Cerner information must not be inappropriately used, modified, copied, transmitted, forwarded, downloaded or disclosed to anyone outside Cerner ü “Cerner Information” includes, but is not limited to: ü 4 All documentation, emails and email attachments 4 Postings on any Cerner sponsored Internet-based forums and/or social media accounts 4 Charts, business plans and strategies 4 Working papers, manuals, correspondence and notes 4 Contracts and agreements 4 Software (in source code, object code or any other form) and flowcharts which Cerner uses to conduct its business ü Associates are prohibited from disclosing confidential Cerner Information from Cerner Systems or non-Cerner Systems © 2011 Cerner Corporation. All rights reserved. This document contains Cerner confidential and/or proprietary information which may not be reproduced or transmitted without the express written consent of Cerner. 3

Rules of the Road cont. . . Key Takeaways: Neither Cerner nor client Sensitive Information may reside on any medium not provided by Cerner or the client ü “Sensitive Information” includes: ü 4 4 ü Protected Health Information (PHI) Individually identifiable health information as defined under state law Card holder data Any client confidential information Such media includes, but is not limited to: 4 4 4 SD memory cards Personal mobile devices USB/ Flash Drives Cloud storage services (Google Drive, Dropbox, etc. ) Non-Cerner email service, etc. © 2011 Cerner Corporation. All rights reserved. This document contains Cerner confidential and/or proprietary information which may not be reproduced or transmitted without the express written consent of Cerner. 4

Rules of the Road cont. . . Key Takeaways: Alteration or deletion of any copyright, trademark, patent or other proprietary rights notice appearing on or embedded within any Cerner Information is prohibited ü Never download unsupported data or disclose information externally ü Use information in a legal and ethical manner ü CTS Enterprise Security and/or Cerner management has the right to view at anytime, all information created, input, viewed, sent, received, stored or copied on or downloaded from Cerner Systems ü Associates must not use Cerner owned or supported information systems to engage in hacking activities ü Associates must not create new security protocols or test or attempt to compromise internal controls unless approved ü © 2011 Cerner Corporation. All rights reserved. This document contains Cerner confidential and/or proprietary information which may not be reproduced or transmitted without the express written consent of Cerner. 5

For questions, contact contingentworkforce@cerner. com