BUSINESS CONTINUITY for HULMAN & COMPANY LLC

1. BUSINESS CONTINUITYforHULMAN & COMPANY LLC

2. Lost Data Disaster Recovery Time Frame Cost Recovery Point Objective Maximum Tolerable Downtime Work Recovery Time Recovery Time Objective Collect Data Manually Recover Lost Data Recover Work Backlog Recover Collected Data Time to Recover Last Backup Recovery Operations Cost to Recover Disaster Declaration Point IT Resources Recovered User Function Recovered Event Assessment Business Units use emergency, manual, and normal procedures Work Backlog Created Reconstruct Lost Data Time

3. BC Planning Process • The six stages of the Business Continuity Planning Life-cycle Process will be executed iteratively to establish the required continuity/recovery capabilities across the H&C enterprise. • The first iteration will focus on the centralized IT operations in Indianapolis. Six Stages 1 Risk Management 2 BIA 3 BC Strategy Development 4 Capability Development 5 Plan Testing 6 Plan Maintenance

4. BC Planning Process • Stage 1: Risk Management • Objectives • 1. Assess the risk of interruption to the H&C IT Operations in terms of • Potential threats • Existing controls • Potential disaster impacts • Likelihood of disaster events 2. Control the risk to IT Operations through recommended mitigation strategies BC Planning Life-cycle Risk Management 1

5. BC Planning Process • Stage 2: Business Impact Analysis (BIA) • Objectives • Identify mission-critical H&C business functions and processes • Analyze impacts to the business if the critical business processes are disrupted • Identify dependencies and recovery requirements BC Planning Life-cycle Risk Management 1 2 BIA

6. BC Planning Process • Stage 3: BC Strategy Development • Objectives • Assess the requirements to recover IT Operations based on critical business process recovery requirements • Identify alternative options for recovering It Operations based on these requirements • Select the most cost-effective option that meets these requirements BC Planning Life-cycle Risk Management 1 2 BIA 3 BC Strategy Development

7. BC Planning Process • Stage 4: BC Capability Development • Objective: Develop and Implement • The operational recovery/continuity IT environment(s) for the H&C IT Production Operations based on the approved strategy • The Plan Documentation supporting the deployment of the environment(s) in an actual crisis scenario BC Planning Life-cycle Risk Management 1 2 4 BIA BC Capability Development 3 BC Strategy Development

8. BC Planning Process • Stage 5: BC Plan Testing • Objective • Test the H&C IT contingency environment(s) and supporting plan documentation to ensure that they are • Current • Viable • Complete • Test the team’s performance • Test the capability’s conformance to business requirements BC Planning Life-cycle Risk Management BC Plan Testing 5 1 2 4 BIA BC Plan Development 3 BC Strategy Development

9. BC Planning Process • Stage 6: BC Plan Maintenance • Objective • Maintain the H&C IT contingency capability in a ready state • Set the procedures to insure that maintenance is regularly performed BC Planning Life-cycle Risk Management BC Plan Testing 5 1 6 2 4 BC Plan Maintenance BIA BC Plan Development 3 BC Strategy Development