VANGUARD CORPORATE OVERVIEW Property of Vanguard Integrity Professionals

VANGUARD CORPORATE OVERVIEW Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

Agenda • About Vanguard • The Team • The Threat is Real • Cybersecurity Solutions • Services, Training and Support Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

About Vanguard Founded: 1986 Business: Cloud, Enterprise and z/OS Security Server – Cybersecurity, Professional Services, Education and Customer Service Customers: Vanguard Solutions Secure and Enterprise Markets: Financial, Insurance, Healthcare, Education, Communications, Utilities, Transportation, Retailers, and Government Agencies Operate: Proudly developed and supported in the U. S. A. to ensure the highest standards of quality HQ: Las Vegas, Nevada – United States of America Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

Who is Vanguard? Vanguard Integrity Professionals is the largest independent provider of enterprise-wide cybersecurity solutions addressing complex and regulatory compliance challenges. • Since 1986 we have helped customers safeguard mission critical data and applications. • Vanguard is the leader in Cyber Defense. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

Why Vanguard? The world’s largest Financial, Insurance, Government Agencies and Retailers entrust their security to Vanguard Integrity Professionals. • Vanguard proudly protects the nation’s critical infrastructure. • At least five times the revenue replacement is required for every dollar of LOSS, depending on the margin. • Vanguard Cybersecurity Solutions can help to mitigate the financial risk. • Vanguard Solutions provides comprehensive Cyber Attack Resiliency. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

THE TEAM Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

Executive Team Ronn Bailey – Founder Brian Marshall – President Mark Van. Wormer – VP of Corporate Operations Jeff Mc. Naughton – Manager of Pacific Rim Accounts Roxane Rosberg – VP of Customer Relations and Conferences Milton Rosberg – VP of Global Sales, Marketing and Business Development John Connors – VP of Technology Yvonne Shoup – VP of Administration Dan Townsend – Inside Legal Counsel Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

The Threat is Real Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

Threatscape • Over a billion personal records were stolen in 2017 • The FBI estimated Ransomware would become a $1 billion crime in 2018 • Over two billion records were stolen in 2017 • The DOD alone experiences 41 million scans, probes and attacks per month • The average cost of a data breach in the US is $7 million Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD CYBERSECURITY SOLUTIONS Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

CYBERSECURITY SOLUTIONS Vanguard’s Cybersecurity Solutions portfolio is an integrated, interoperable arsenal of hardened software designed to protect against the most advanced cybersecurity threats. • Vanguard defends Cloud, Enterprise and z/OS Security Server environments. • The world’s largest brands are shielded by Vanguard. • Vanguard Solutions secure four of the top 10 Financial Institutions. • Vanguard protects six of the top 10 Insurance Agencies. • We safeguard the largest Government Agencies. • Vanguard Solutions lock-down the largest Retailers. • Vanguard Solutions prevent destructive cyber attacks. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

SOLUTIONS Vanguard Administration is a powerful cybersecurity solution that automates processes, offers powerful reporting with real-time management and provides control over policy administration saving time, resources and money. Vanguard Audit & Compliance is a robust cybersecurity solution enabling configuration, adjustment and continuous monitor using the latest standards and data security policies to determine, isolate and ensure standards compliance. Vanguard Authentication is a scalable, modular integrated authentication solution that enables enterprises to control and secure access to the entire IT infrastructure. Vanguard simplifies enterprise authentication and access control. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD ADMINISTRATION • Administrator • Cleanup • ez/Integrator • Password Reset • Security Center • Security Manager Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Administrator Vanguard Administrator saves time and money by simplifying and automating security administration tasks. Administrator enables enterprises to operate with reduced headcount and improved security, while increasing workload. Features • Enables security staff to automate recurring, time consuming tasks-oriented enterprise administration. • Delivers extensive reporting and data mining. • Provides easy-to-use digital certificate administration. • Supplies easy-to-use UNIX files system reporting and management. • Allows comparing profiles on the same or different databases. • DB 2 Administration Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Clean. Up With Vanguard Cleanup, security administrators can easily and automatically monitor z/OS Security Server access to identify and report on unreferenced security rules. Features • Generates commands to delete (and restore) unused and unwanted profiles. • Produces a wide range of usage reports for auditors and security administrators. • Provides complete accounting of all authorization requests. • Analyze the database to identify and report on all unreferenced or unused security entities. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD ez/Integrator Vanguard ez/Integrator is an easy-to-use toolkit that provides Authentication, Authorization and Accounting for enterprises to extend security database to their applications. Features • Provides the capability to authenticate user IDs and passwords from many applications against the most secure password repository in your enterprise. • Allows an application to use the z/OS Security Server to perform authorization checking. • Delivers customizable, enterprise-wide, mainframe-strength, centralized accounting facilities with a simple-to-use web enabled API. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Password Reset Vanguard Password Reset saves time and money by allowing users to reset their own password. Features • Web-based end user self-service password reset. • Uses standard challenge and respond technology for user validation. • Operates on various web server technologies. • All web-based transactions are fully secure and encrypted. • Integrates with Vanguard Tokenless Technologies to deliver token passcodes. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Security Center Vanguard Security Center is a Windows GUI interface to provide point-andclick security administration for both z/OS Security Server and DB 2 environments. Features • Provides real-time administration functionality for z/OS Security Server and DB 2, with point-and-click, across windows compatible desktop and mobile devices. • Enables automated recurring, time-consuming task-oriented administration. • Allows comparing profiles on the same or different databases. • Automatically generates the correct commands to accompany each action. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Security Manager Vanguard Security Manager is an easy-to-use solution for non-technical personnel to administer and report on all z/OS Security Server and z/VM systems across the enterprise with a simple-to-use web-based interface. Features • Enables security administrators to automate recurring, time-consuming, taskoriented administration. • Delivers extensive reporting and data mining. • Allows comparing profiles on the same or different databases. • Vanguard Security Manager includes comprehensive analytics and reporting capabilities to help security teams rapidly identify problems and allow auditors to quickly view changes and report findings. • Pre-built Vanguard Best Practice reports that analyze databases for potential security threats that can be run on an ad-hoc or ongoing basis. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD AUDIT & COMPLIANCE • Advisor • Analyzer • Configuration Manager • Enforcer • ez/Integrator • In. Compliance • Offline • Policy Manager • Compliance Manager Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Advisor Vanguard Advisor provides complete collection and reporting of system events to enable powerful forensic analysis. Features • Provides powerful system event reporting and data mining capabilities. • Advisor’s active alerts provides immediate notification of security events or combinations of events. • Automates removal of operations attributes. • Automates remediation of warning on profiles. • Advisor had the ability to reconstruct any or all z/OS Security Server commands issued on the system. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Analyzer Vanguard Analyzer provides Vanguard expertise on z/OS Security Server. Analyzer delivers expert-level vulnerability assessments of z/OS Security Server configuration controls and security settings with the ability to produce audit results in minutes. Features • Analyzer runs thousands of integrity checks for z/OS Security Server. • Smart link provides integration with other Vanguard software products. • Smart assist describes discovered issues and remediation in plain language. • Provides file change detection for sensitive corporate data. • Delivers “find-it-fix-it-fast” functionality proving direct remediation from a finding. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Configuration Manager Vanguard Configuration Manager automates review of current z/OS Security Server configurations against prevailing standards to include DISA STIG, NIST and DB 2 hardening standards and Vanguard Best Practices dramatically reducing personnel cost and time to verify compliance. Features • Designed to provide the fastest, most cost-effective and accurate method to verify that security configuration controls are in accordance with published prevailing standards. • Allows organizations to easily move to continuous monitoring from periodic compliance reporting. • Organizations can perform tests and report findings in a few hours instead of the hundred or thousands of hours required when using published standards. • Creates summary and detailed reports to provide the proper documentation required. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Enforcer Vanguard Enforcer provides continuous monitoring of security controls with an automated process to compare your current z/OS Security Server configuration controls against the previously established baseline. Features • Detects and corrects changes to the system that would violate security policies. • Enforcer’s active alerts provides immediate notification of security events or combinations of events. • Captures and baselines current security configurations and profiles for future comparison. • Monitors system critical resources including the most privileged data sets and programs. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD ez/Integrator Vanguard ez/Integrator is an easy-to-use toolkit that provides Authentication, Authorization and Accounting for enterprises to extend security database to their applications. Features • Provides the capability to authenticate user IDs and passwords from many applications against the most secure password repository in your enterprise. • Allows an application to use the z/OS Security Server to perform authorization checking. • Delivers customizable, enterprise-wide, mainframe-strength, centralized accounting facilities with a simple-to-use web enabled API. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD In. Compliance Vanguard In. Compliance performs millions of critical compliance checks to guarantee adherence to Vanguard and industry best practices, without increasing processing overhead. Features • Findings are reported immediately at a summary level to satisfy management requirements. In. Compliance can also provide detail at the item-by-item level to understand remediate each finding rapidly. • Baseline checks can be marked with zero tolerance thereby immediately failing the complete compliance check upon any single deviation. • Delivers historical trending in graphical format. • Performs SOX, HIPPA, GLBA, PCI DSS, FISMA, GDPR, NYRR 500, and other regulatory compliance audits rapidly to prevent negative internal and external findings. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Offline Vanguard Offline is a simulation-testing application that allows security administrators to test and evaluate the impact of new commands before being implemented in a production environment. Features • Security administrators can execute commands against a copy of their database as if against a production system and analyze the potential impact of the new commands and all consequences thereof. • Collects and aggregates all security decisions into a database. • Produces a wide range of usage reports for auditors and security administrators. • Provides complete accounting of all authorization requests. • Provides a simple method for remediation of elevated access and authorities. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Policy Manager Vanguard Policy Manager dramatically reduces security risks and improves regulatory compliance, minimizing the need for expensive remediation, while increasing staff productivity. Features • • • Ensures all commands comply with company policies. Where possible, modifies commands to be compliant. Provides an audit trail within the profile of the command history. Provides pre-defined best practices policies. Delivers the ability to create and customize user defined policies. Provides proactive enforcement, corrects commands in accordance with policies, while controlling security administrators. • Provides real-time audit trail of all commands for authorized users to view. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Compliance Manager Vanguard Compliance Manager performs critical compliance checks that exposes adherence to industry specific and clients’ custom checks without increasing processing overhead. Features • Identifies potential company-wide compliance violations immediately and takes corrective actions. • Works with IBM z/OS, RACF, ACF 2, and Top Secret. • Enforces company specific security and compliance with industry standard requirements like SOX, HIPAA, GLBA, PCI DSS, FISMA, GDPR, HITRUST, and NYCRR 500. • Easy-to-use and delivers immediate results for “C” level intelligence and closes any exposed gaps. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD AUTHENTICATION • Authentication • ez/Integrator • ez/PIV Card • ez/Sign. On • ez/Token • Tokenless Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Authenticator Vanguard Authenticator is a protocol converter and LDAP directory. This middleware allows for simplification and centralization of security authentication services. Features • Simplifies administration of security for a diverse set of devices and protocols. • Reduces the complexity by reducing the number of passwords required. • Centralizes authentication requests from many applications, devices and operating systems. • Provides conversion of multiple authentication protocols. • Processes all incoming authentication requests and performs authentication. • Performs as a LDAP virtual directory. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD ez/Integrator Vanguard ez/Integrator is an easy-to-use toolkit that provides Authentication, Authorization and Accounting for enterprises to extend security database to their applications. Features • Provides the capability to authenticate user IDs and passwords from many applications against the most secure password repository in your enterprise. • Allows an application to use the z/OS Security Server to perform authorization checking. • Delivers customizable, enterprise-wide, mainframe-strength, centralized accounting facilities with a simple-to-use web-enabled API. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD ez/PIV CARD Vanguard ez/PIV Card satisfies FIPS 201, HSPD-12. It allows your users to authenticate to z/OS Security Server through the use of a government PIV or CAC Card. Features • ez/PIV Card is a PIV Card authentication solution that ensures z/OS Security Server complies with Homeland Security Presidential Directive 12 (HSPD-12) and Federal Information Processing Standards 201 (FIPS 201). • ez/PIV Card increases system security by requiring multifactor authentication to validate employees and external contractors before they gain access to an enterprise’s most critical resources. • Provides out-of-band password generation and validation. • Provides enhanced PIV Card and Password validation. • Once a PIV Card has been revoked, a user is immediately denied access to z/OS Security Server. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD ez/Sign. On Vanguard ez/Sign. On is a single password solution for multi-platform environments. It provides sign-on controls, password synchronization and centralized user authentication on z/OS Security Server, Windows, Linus, and i. Series. Features • Allows for a single point of administration for password change and revocation of users across the enterprise. • Enables users to sign on to different systems utilizing a single password solution. • When users change their password on any one system, ez/Sign. On will update other systems in the enterprise to keep their password synchronized. • Automates password authentication and authenticates users from nearly any system or hardware device – the same password is used to safely sign on to multiple systems in the enterprise. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD ez/Token Vanguard ez/Token is a multifactor authentication solution that allows users to authenticate through common token technologies including but not limited to RSA Secur. ID, YUBi. KEY, OAUTH tokens, Safe. Sign, or Activ. Identity tokens to the z/OS Security Server or any other application currently using RACF authentication. Features • Validates user logon to the mainframe using external authentication authorities. • Supports multiple token technologies from well known token providers such as Pink, DUO, RSA, Safe. Sign, OAUTH, and YUBi. KEY. • Provides selective inclusion or exclusion of multifactor authentication at both an application and user level. • Allows for easy user ID to distributed identity mapping, providing the ability for a one-to-one or one-to-many relationship to exist. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Tokenless Authentication Vanguard Tokenless Authentication delivers strong authentication capabilities by generating and sending a one-time use, time sensitive passcode to a mobile communication device the user already possesses. Features • Provides a cost effective alternative to tokens, can deliver a time sensitive passcode to a mobile device or tablet. • Provides selective inclusion or exclusion of multifactor authentication at both an application and user level. • Integration with other Vanguard Authentication solutions extends Tokenless Authentication across the enterprise. • A complete, economical, multifactor authentication solution that generates and sends a one-time use, time-sensitive passcode to a mobile communication device the user already possesses. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

CONTINUOUS MONITORING Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Continuous Monitoring Cyber threats have become more prevalent and are increasing risks to all enterprises and federal information systems today. • As a result, there is a need for better, more actionable intelligence about the security status of systems. Continuous monitoring of information systems security provides organizations with near real-time information about security risk exposure and vulnerabilities. The Next Line of Defense – Vanguard Continuous Monitoring • Requirements for continuous monitoring of federal information systems deliver a higher level of cybersecurity protection and address the growing threatscape facing federal government agencies. The need for continuous monitoring requires organizations to implement new processes and automated tools to assist them. NIST regards automation tools as important for the success of continuous monitoring. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

SERVICES Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Services The most effective way for organizations to reduce the cost of maintaining enterprise security and improve security postures is to automate and optimize information security. Vanguard Professional Services offers many security services to enable security automation and optimization. Vanguard Professional Services include penetration testing, security assessments and remediation. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Services Implementation Services • Include increasing efficiency of existing security and compliance capabilities, deploying new security proficiencies, supporting industry and regulatory requirements, and training. Remediation Services • Vanguard has the largest and most experienced group of security specialist in the world and proven expertise remediation enterprise systems. Security Assessments • Quickly identify and prioritize penetration risks, determine best practices for security and integrity and evaluate the potential impact and exposure of any findings. Staff Augmentation • Enable organizations to quickly add qualified staff to their enterprise security team. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD Services Migrations • Organizations are turning to the Vanguard Professional Services to assist them with DB 2 -to-RACF security migrations. Penetration Testing • Vanguard Penetration Testing services discover high-risk vulnerabilities, determines if sufficient defenses are in place, offers remediation guidance, and recommends a plan and methodology for ongoing testing. Role-Based Access Control • Role-based Access Control software, developed by Vanguard is used to help organizations reduce provisioning time, eliminate errors and adhere to role structure over time. The Team • The Professional Services team are renowned worldwide for their expertise as cybersecurity experts. Team members have on average 30 years enterprise security experience. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

TRAINING Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD z. Security University Vanguard z. Security University is a year-round training program providing comprehensive IT security education for any enterprise security staff and IT security professionals. For nearly 30 years, Vanguard has trained thousands of IT security professionals worldwide. Vanguard z. Security University is the industry’s leading source to obtain enterprise, cloud Security Server-Specific IT security training. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

VANGUARD z. Security University Vanguard Classroom Training • Experience actual classroom setting while attending the industry leading VCS Conference or experience training at your location with actual hands -on, instructor provided training and certification. Online Training • Many organizations don’t have the time or budget to send security team members to days of expensive training. Yet team members often lack basic skills they need to do their jobs accurately and effectively. On. Demand sessions provide subscribers with everything they need to perform security administration. Webinars • Webinars provide yet another opportunity to stay current on the latest standards and technologies with comprehensive instructor led webinars. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.

Vanguard Integrity Professionals in the largest independent provider of enterprise security software addressing complex security and regulatory compliance challenges. The World’s Largest Financial, Insurance, Government Agencies, and Retailers entrust their Security to Vanguard Integrity Professionals. Property of Vanguard Integrity Professionals -2018 Nevada All Rights Reserved.