ICEBERG INSIGHT

Computer software, namely, computer software for reporting on business and business enterprise risk assessment; computer software, namely, computer software for assessing business and business enterprise compliance and risk management during audit; computer software, namely, computer software for assessing compliance against external frameworks, namely, technical guidelines and industry best practices, and applicable government laws and regulations and internal business polices; computer software for use in computer security, namely, the prevention, measurement and management of computer risks; computer software, namely, computer software for implementing and evaluation support of risk intelligence programs containing risk data that are tied to the business goals of an organization for executive decision-making; computer software, namely, computer software for supporting the automation, and integration of business enterprise, operational, and IT risk management processes and data; computer software, namely, computer software for assessing and managing operational risk, namely, risks and impacts resulting from inadequate and failed business processes, namely, collection of linked activities and tasks that accomplish an organization goal, or are required for the delivery of an organization's products or services, and people, systems, namely, physical assets and information technology assets, namely information, systems, and hardware that is used in the course of business activities, and external events, namely natural disasters, geopolitical activities, civil disruptions, and malicious and criminal acts; computer software, namely, computer software for assessing and managing IT risk, namely, computer risk or impacts caused by performance, availability, and compliance issues associated with the use, ownership, operation, involvement, and influence of technology in the nature of software and hardware tools within an organization; computer software, namely, computer software for assessing and managing computer risk, namely, risks or impacts associated with systems and equipment in the nature of servers, computers, data centres, networking devices, and operating systems in the in regards to aspects such as availability/uptime, acceptable service levels and reliability; computer software, namely, computer software for planning and developing procedures that enable an organization to continue critical business functions during events or disruptions; computer software, namely, computer software for identifying and evaluating the potential effects of a disruption of business operations, and gathering information to develop recovery strategies; computer software, namely, computer software for identifying potential risks from the collection, use, sharing and administration of personal information by an organization; computer software, namely, computer software for determining possible risks to a business's IT infrastructure assets, namely data centres, networks, hardware, and software required for the existence, operation, and management of an organization, and providing recommendations to lower the risks to acceptable levels

Business and business enterprise risk assessment services; business and business enterprise risk management services; business risk management and assessment services, namely, managing risks against and assessing compliance with external frameworks, industry mandates, government regulations and internal policies; business risk assessment services, namely, assessing business and enterprise compliance and risk management for audit purposes; preparing business reports on business and enterprise compliance and risk management for audit purposes; business risk assessment services, namely, assessing third party business risks and risk management; business risk assessment services, namely, assessing supplier business risks and risk management; preparing business reports on supplier business risk assessment and risk management; business management consultation, namely, developing, implementing and supporting risk intelligence, namely, business processes that allow businesses to evaluate risk data that are tied to the business goals of an organization for executive decision-making; business management consultation services directed towards supporting the integration of business enterprises, operational, and IT risk management processes, namely, management consulting for integration and implementation of the areas of business process technology, organizational learning, change management, and operational sustainability; assessing and managing operational business risk, namely, business risks or business impacts resulting from inadequate or failed processes, namely, collections of linked activities and tasks that accomplish an organizational goal or that are required for the delivery of an organization's products or services, and people, infrastructure systems, namely, data centres, networks, hardware, and software required for the existence, operation, and management of an organization, and external events, namely, natural disasters, geopolitical activities, civil disruptions, and malicious and criminal acts; business strategic planning services, namely, planning and developing business procedures that enable an organization to continue critical business functions during events or disruptions; business strategy services, namely, identifying and evaluating the potential business effects of a disruption of business operations, and gathering information to develop business recovery strategies; business risk assessment services, namely, identifying potential risks from the collection, use, sharing and administration of personal information by an organization; management consulting services, namely, business management consulting in the field of risk assessment and risk management provided to business and business enterprises; all used for risk assessment and management to businesses and business enterprises

providing workshops, education in the nature of classes and seminars, and training in the field of business risk assessment and management; all used for risk assessment and management to businesses and business enterprises

business management consultation, namely, developing, implementing and supporting risk intelligence software and computer programs that are tied to the business goals of an organization for executive decision-making; business information technology consultation services directed towards supporting the automation, and integration of business enterprise, operational, and IT risk management processes and data, namely, information technology management, integration and implementation of software services, technical support in the nature of monitoring technological functions of computer network systems; computer security services, namely, assessing and managing IT risks or impacts caused by performance, availability, and compliance issues associated with the use, ownership, operation, involvement, and influence of computer software and hardware within an organization; computer security services, namely, assessing and managing technology risk, namely, risks or impacts associated with infrastructure systems, namely, namely data centres, networks, hardware, and software required for the existence, operation, and management of an organization, and equipment, namely, servers, computers, data centres, networking devices and operating systems in regards to aspects such as computer system availability/uptime, acceptable service levels and reliability; computer security services, namely, determining possible computer security risks to a business's IT assets in the nature of the information technology infrastructure, namely data centres, networks, hardware, and software required for the existence, operation, and management of an organization, and providing recommendations to lower the computer security risks to acceptable levels; maintenance of computer software relating to the assessment and management of computer risks; software as a service (SAAS) services featuring software that combine Security Information Management (SIM) and Security Event Management (SEM) to deploy applications and computer hardware in the field of governance, risk and compliance technology; providing temporary use of nondownloadable software that combine Security Information Management (SIM) and Security Event Management (SEM) to deploy applications and computer hardware in the field of governance, risk and compliance technology; application product support, namely, monitoring technological functions of computer applications, troubleshooting of computer application problems, and remote and on-site infrastructure management services for monitoring, administration and management of application systems; all used for risk assessment and management to businesses and business enterprises