NON-CONFIDENTIAL 1 Request IR-8: 2 3 Did the post-breach forensic audit identify any specific failures, gaps, or misconfigurations 4 in the IAM/PAM systems deployed under the previous projects listed in IR-7(a)? 5 6 Response IR-8: 7 8 No....
AI summary The post-breach forensic audit did not identify any specific failures, gaps, or misconfigurations in the IAM/PAM systems deployed under the previous projects listed in IR-7(a).
REDACTED 1 2 While the combined scope provides comprehensive coverage across identity security, governance, 3 and operations, certain gaps remain intentionally client-owned or out of scope, including data 4 quality remediation, infrastruct...
AI summary The document discusses the 2025 IBM contract and 2026 capital project, addressing increased costs due to vendor underestimation, complexity from zero-trust network implementation, and migration to SaaS systems. It also outlines financial risk allocation under the IBM Managed Security Services (MSS) arrangement, with NSPI primarily bearing the burden of deductibles, uninsured losses, and remediation costs.