VII-4 Implementation Milestones Date (Actual/Estimated) Propose comprehensive cyber security Q4 2016 (E) awareness training program for approval from Cyber Security Committee. Select and implement first time cyber Q3 2017 (E) security training program Implement refresher program to Q4 2017 (E) maintain ongoing security awareness training and communications. VII 5 - Staff’s Follow-Up Recommendation Actively ensure third-party – – contractor compliance with company security standards. Accept Response: Aqua PA believes that it should actively ensure cyber security compliance by its third party vendors. Aqua PA does have a process in place for many of its vendors but recognizes there are gaps. Implementation Plan: VII-5 Implementation Milestones Date (Actual/Estimated) Form a workgroup to evaluate current Q1 2017 (E) compliance with company security standards Formulate recommendations Q3 2017 (E) Implement recommendations Q1 2018 (E) Responsible Officer: Steve Tagert, President, Aqua Pennsylvania, Inc. Whitney Kellett, Chief Information Officer Responsible Manager: John Childers, Senior Manager, Information Security
VII-4 Implementation Milestones Date (Actual/Estimated) Propose comprehensive cyber security awareness training program for approval from Cyber Security Committee. Q4 2016 (E) Select and implement first time cyber security training program Q3 2017 (E) Implement refresher program to maintain ongoing security awareness training and communications. Q4 2017 (E) VII – 5 - Staff’s Follow-Up Recommendation – Actively ensure third-party contractor compliance with company security standards. Response: Accept Aqua PA believes that it should actively ensure cyber security compliance by its third party vendors. Aqua PA does have a process in place for many of its vendors but recognizes there are gaps. Implementation Plan: VII-5 Implementation Milestones Date (Actual/Estimated) Form a workgroup to evaluate current compliance with company security standards Q1 2017 (E) Formulate recommendations Q3 2017 (E) Implement recommendations Q1 2018 (E) Responsible Officer: Steve Tagert, President, Aqua Pennsylvania, Inc. Whitney Kellett, Chief Information Officer Responsible Manager: John Childers, Senior Manager, Information Security