1. What systems listed on your Pure Land Network Diagram do you consider to be the most critical systems? Why did you pick these systems as most critical?

2. What do you feel are the most important elements of a successful change management process? How will you ensure that changes made to the Cyber systems at Pure Land Wastewater won’t lead to Cyber Security Incidents?

3. Is there currently any segregation of systems at Pure Land based on criticality of the systems? If yes, please explain the segregation strategy. If not, please explain what plans are being developed to segregate assets on the network based on risk.

4. What methods are used or planned for implementation to manage passwords? Is there any differentiation in how end user and privileged accounts are managed?

5. Is there currently any Cyber Security awareness and training program in place at Pure Land? If yes, please explain the frequency and method of documenting completion. If not, please explain what topics will be included in your awareness program and how you plan to document and track compliance.