1. WHY CHOOSE CEO-PE?  We employ International Association of Privacy Professionals (IAPP) Certified and Health Insurance Portability & Accountability Act (HIPAA) trained experts – familiar with the universe of privacy requirements & concerns  Our professional staff has actively applied privacy policy and practices to Information Technology (IT) components including: websites, data standards, Enterprise Architecture, Information Life Cycle & IT Security  Our Pros apply proven techniques & their “hands-on” experience in: Evaluating programs for Privacy Vulnerabilities & Solutions Evaluating Systems for Privacy Concerns Establishing Risk Management Strategies Developing & Conducting Privacy Training Performing Privacy Impact Assessment Evaluations Establishing a VIABLE plan of action for breaches WHY CHOOSE CEO-PE?  We employ International Association of Privacy Professionals (IAPP) Certified and Health Insurance Portability & Accountability Act (HIPAA) trained experts – familiar with the universe of privacy requirements & concerns  Our professional staff has actively applied privacy policy and practices to Information Technology (IT) components including: websites, data standards, Enterprise Architecture, Information Life Cycle & IT Security  Our Pros apply proven techniques & their “hands-on” experience in: Evaluating programs for Privacy Vulnerabilities & Solutions Evaluating Systems for Privacy Concerns Establishing Risk Management Strategies Developing & Conducting Privacy Training Performing Privacy Impact Assessment Evaluations Establishing a VIABLE plan of action for breaches PROTECT your Tribal members - Personally Identifiable Information (PII) - Includes ANY piece of information that can be used to uniquely identify, contact, or locate a single member of your Tribe. It can be used with other sources to uniquely identify and COMPROMISE an individual’s identity. WE CAN HELP!! Our Comprehensive Privacy Integration Approach will :  Apply Privacy Impact Assessment Models  Integrate Privacy Requirements in Systems Life Cycles  Privacy Training and Education  Partner with your IT Security, Records Management, & Enterprise-wide Architecture functions to include privacy throughout CEO-PECEO-PE CEO-PE WILL PUT YOUR ORGANIZATION ON THE ROAD TO A SUCCESSFUL PRIVACY PROGRAM:  AUDITS / EVALUATIONS  PRIVACY STRATEGIES  AFFECTS OF TECHNOLOGY  PRIVACY ASSESSMENTS  BREACH STRATEGIES  ESSENTIAL TRAINING http://www.ceo-pe.com CEO-PE: 5006 North 25th Road Arlington, VA 22207 703 328 3790 Fax: 703 534-4921 CEO-PE WILL PUT YOUR ORGANIZATION ON THE ROAD TO A SUCCESSFUL PRIVACY PROGRAM:  AUDITS / EVALUATIONS  PRIVACY STRATEGIES  AFFECTS OF TECHNOLOGY  PRIVACY ASSESSMENTS  BREACH STRATEGIES  ESSENTIAL TRAINING http://www.ceo-pe.com CEO-PE: 5006 North 25th Road Arlington, VA 22207 703 328 3790 Fax: 703 534-4921 Our Philosophy: In today’s complex world, YOUR time and resources are a priority Let us provide you a PRIVACY PROTECTION FRAMEWORK to protect your core business needs Our Philosophy: In today’s complex world, YOUR time and resources are a priority Let us provide you a PRIVACY PROTECTION FRAMEWORK to protect your core business needs PRIVACY PROTECTION SERVICES CUSTOMIZED & FOCUSED TO MEET TRIBAL NEEDS! Outsource your Privacy Protection with Hands-on Experts – Our Professionals have over 30 years of expertise in the field & can develop comprehensive Privacy services for your needs – that work! Headquartered in Washington, DC Metropolitan Area —with easy access to the Federal Work & Regulatory Environment.. YET READY to Meet Your On-Site Needs When & Where You Decide Competitive Edge Opportunities – Practical Expertise, LLC CEO-PE http://www..ceo-e.com Hbrown@ceo-pe.com CEO-PE: 5006 North 25th Road Arlington, VA 22207 703 328 3790 Fax: 703 534-4921 Metropolitan Area —with easy access to the Federal Work & Regulatory Environment.. YET READY to Meet Your On-Site Needs When & Where You Decide Competitive Edge Opportunities – Practical Expertise, LLC CEO-PE http://www..ceo-e.com Hbrown@ceo-pe.com CEO-PE: 5006 North 25th Road Arlington, VA 22207 703 328 3790 Fax: 703 534-4921

2.  Evaluate your Current Privacy Program  Develop a Successful Privacy & Data Protection Strategy  Establish a Data Breach Response Strategy  Include Privacy Requirements in Data Standards, new technology, & Enterprise Architecture  Develop a Privacy Impact Assessment for your Tribe’s sensitive systems  Provide Training & Awareness  Create Policies & Procedures  Audit & Monitor Programs for Compliance  Build an Organization Inventory & Classification Map of Personal Data CUSTOMIZED TRAINING : Privacy Act (USC 552a ); E-Government Act; & Other Privacy Laws & Requirements Privacy Requirement Modules to fit your needs Combine Our Privacy Module with Records Management Training CUSTOMIZED TRAINING : Privacy Act (USC 552a ); E-Government Act; & Other Privacy Laws & Requirements Privacy Requirement Modules to fit your needs Combine Our Privacy Module with Records Management Training Our Pros— Our Experts have 20+ years of Federal practical experience & knowledge; providing a full scope of records and information management services DON’T LET THIS HAPPEN TO YOU! The information you maintain (tribal records, health records, financial records) on individuals is valuable – & deserves protection DON’T LET THIS HAPPEN TO YOU! The information you maintain (tribal records, health records, financial records) on individuals is valuable – & deserves protection The best privacy protection program will ensure that tribal members, employees & others are confident in the way you manage & use their information – how you protect the organization from legal concern, and an adverse impact on the reputation of the organization IDENTITY THEFT ! We can apply our Checklist Tool to help you upgrade privacy protection performance to the levels you want! How Good are Your Privacy Protections ? Learn about data the breach risk landscape & how we can best practices for prevention, detection and resolution. Let us work with you through our 5 Critical Module Process: Assessing the information environment Identifying risks — applying immediate protections & longer term strategies Prescribing /Applying mitigation tactics & breach strategies Training—Best Practices/ Comprehensive Privacy Overviews Work as Service Provider - YOU select from a full complement of options Chose and Customize from CEO-PE’s Range of Comprehensive Privacy Services