create a policy - Use of organizational technology, networks and Internet services, including Email and the Web.

1

COMPUTER GAMING TECHNOLOGY INC., A Software-4-All Company

ABOUT COMPUTER GAMING TECHNOLOGIES INC.

CGT Inc. is a premier developer of games and entertainment software. Thanks to an experienced staff and creative environment CGT has developed an impressive string of successful titles. By combining cutting edge technology, enchanting graphics, and superior game design, CGT has become a leading force in the world of interactive entertainment software.

CGT Inc. develops and publishes each for PC and all popular video games system platforms. The company employs a diverse staff of people whose talents range from computer programming and game design, to writing screenplays and composing sound tracks.

History

In 1992, Alan Hake set to work in a garage in Las Vegas. From those humble beginnings came CGT Inc., one of the most successful entertainment software companies in the history of the industry. Among its early creations are Space Saga (1992), Robo-Wars (1994), and Quest for the Staffs (1997), which garnered the young company its first taste of widespread recognition at home and abroad.

In 2000, the company was acquired by Software-4-All, which enabled CGT Inc. to partner directly with a software publisher and enjoy Software-4-All’s superior worldwide distribution network. It was also the year CGT released two now legendary titles in the gaming word: Fanastica (2000), followed shortly by the game that defined the real-time strategy genre, Destiny (2001). Soon after came Seek & Destroy (2003) and Seek & Destroy: Apocalypse (2005), which set sales records all over the world and redefined the real-time strategy genre.

In 2007, the company relocated to Atlanta, Ga, in order to take advantage of the increased pool of talent in the game design and programming fields. CGT relocated the programming facilities to a remote area north of Atlanta, to provide a higher quality of life for CGT’s employees yet retain access to Atlanta’s large employee base and transportation network.

CGT set new standards in 2010 with the release of Hacker (2010), which combined groundbreaking graphic technologies with a depth of storytelling rarely seen in computer games. The next year, the Seek & Destroy series topped the 10-million-unit sales mark, a rare achievement in the interactive entertainment industry. Many successful titles followed, including additional titles in their award-winning series: Seek & Destroy: Suicide Squad (2012) and Destiny II: Afterlife (2014). Several other successes have followed since then.

Today, CGT Inc. is already exploring new technologies like Virtual Reality and developing games that will set trends well into the future.

Organization

CGT is headed by CEO Alan Hake, who is supported by his three executives: Chief Operations Officer Richard Xavier, Chief Business Officer Rachel Xieng, and Chief Information Officer, Paul Alexander.

2

Corporate Org Chart

CGT, Inc. is currently organized into the following divisions to support past, present and future software offerings.

GAMING DEVELOPMENT DIVISION

The gaming development division is headed by the Chief Operations Officer and is comprised of the following departments:

Development

Development handles new software development. A series of teams each address the various aspects of the different game packages under development. These programmers use their specialized graphical design workstation to integrate video, computer-generated graphics, and multimedia formats to create the high impact games most popular in today’s market. All data is stored on the servers and, except for scheduled backups, it cannot be removed until released for testing or to production.

Testing

Testing handles in-house testing of new games. Once the Development department creates and delivers a coded product, the Testing Specialists assist in identifying and diagnosing system critical code defects. Once a “kill list” is compiled, the Development teams work through the bugs to create an improved program. This division is also responsible for the identification and administration of external product testers. These individuals are identified from the local area and brought into a specially prepared test lab, where they are encouraged to “stress test” the packages. The Testing department works with the Development department to collect and catalog additional deficiencies in the coding.

Client Support

Client Support handles technical support problems from the end clients (the gamers) for published games. They use standardized helpdesk and diagnostic software to identify and provide resolution on problems resulting from the installation and use of a CGT product. Client support handles the bulk of their support through their online web server which contains user forums and direct customer support chat sessions. Client support also provides email-based support, but not phone-based support.

3

Gaming Development Division Org Chart

BUSINESS SERVICES DIVISION

The Business Services Division (BSD) is headed by the Chief Business Officer. Most of the administrative support falls under this division. BSD is organized into the following departments:

Accounting

The Accounting department provides traditional accounting functions (accounts payable, receivable, procurement and general ledger).

Human Resources

The HR department provides traditional human resources functions (time management, payroll, health/liability insurance management and retirement benefits) as well as supports hiring and termination activities.

Marketing

There is a small Marketing department that coordinates with the downstream software publishers for marketing purposes. The department also handles public relations functions.

4

Business Services Division Org Chart

IT DIVISION

The IT Division manages all internal IT functions. CGT has a very mature IT department with a centralized data center. In the data center, all applications run on a dedicated server, with all applications and their internal data backed up daily to their rack’s Network Attached Storage (NAS) unit. No data is stored locally on user systems, only on corporate servers.

There are three departments within the IT Division:

Systems Operations Group

The Systems Operations Group (SysOps) is responsible for the installation, maintenance and change of all hardware, software, and computing equipment used internally by CGT. SysOps maintains a standing inventory of systems and peripheral components to facilitate operations and maintains a 24-hour helpdesk for internal support. Employees can call, email, or just stop by with a problem, and a support representative is be available to answer questions, resolve problems, or replace defective systems.

Network Operations Group

The Networking Operations Group (NetOps) is responsible for all networking functions, including internetworking company networks to the Internet through the ISP. NetOps is also responsible for the administration of all perimeter defense equipment (firewalls, VPNs, and DMZs).

Server Operations Group

The Server Operations Group (ServOps) is responsible for the management and support for all corporate servers, including Active Directory, DNS, Email, Web, Backup (NAS), and servers for all internal support functions.

5

IT Division Org Chart

CGTs IT infrastructure While there currently is no formal cybersecurity department or structure at CGT, the IT department manages its security systems for the data center, internal networks, and applications. All corporate applications have a secure intranet interface that employees use to connect to the systems from their office desktop systems. No data is stored on users’ systems. All server-based applications have internal databases. The Corporate offices connect to the Internet through a Palo Alto Firewall. In the data center, all applications have their own dedicated servers, with all applications backed up daily to their server rack’s Network Attached Storage (NAS). Each NAS backs its data up to another NAS daily as a single encrypted file once application backups have completed. A NAS also backs up its own backup software to an internal drive. All NAS data is encrypted and backed up weekly to an off-site backup service – Redundant Redundancies, Ltd. (known as Software-as-a- Service). No development clients or servers are connected to the Internet. In the data center, only a NAS can upload to the Internet to store its encrypted backups with the backup provider via a VPN connection. All employees access their networked applications over desktops through physical wired LAN connections within the branch offices (no laptops, tablets or mobile devices can connect to the corporate network), which uses a secure VPN connection for all traffic between the data center and the client systems. CGT does not use Wi-Fi networking in any of its offices. The current informal policy is no BYOD on premises. All employees must keep their cell phones in their vehicles, personal lockers, briefcases, or purses and only use them during authorized breaks.

6

The CGT Secured Server Data Center contains the following: Rack 1: Servers containing internal Corporate IT Applications:

Server A. HRIS - Human Resources Information System from CGT which handles hiring, employee records, annual reviews, benefits, and other HR functions.

Server B. PAYROLL – Payroll processing system from CGT which handles time management, wages, payroll deduction, taxes etc.

Server C. Account-Master – Accounting software which handles accounts payable, accounts receivable, procurement and general ledger functions.

Server D. Regu-Nation – Specialized software used to track and document critical legal and regulatory requirements and mandates across the software industry.

Server E. HelpMe – Customer service software used to manage client technical support. Server F. Clientz – Customer order management software, also manages non-technical customer

support, order support etc. Server G. Sell-IT – Specialized software used to support the sales and service for company products. Server H. Market-IT – Specialized software used to support the development and delivery of marketing

and sales support materials. Server I. Dell Storage Network Attached Storage (NAS) #1 Backup and Recovery Software (BARS) – Runs

Windows 2016 R2 – multi-terabyte data backup capability for Rack 1 server applications and NAS#3 Data.

Rack 2: Servers each containing the “Develop-IT” software used to support the development platforms, testing environments, and source code for various CGT products – used by the software design teams. All Develop-IT servers act as file shares within their development group. Server J. Develop-IT – Legacy (Space Saga, Robo Wars, and Quest of the Staffs) Server K. Develop-IT – Fantastica line Server L. Develop-IT – Destiny line Server M. Develop-IT – Seek & Destroy line Server N. Develop-IT – Hacker line Server O. Develop-IT – New Title Research & Development Server P. Dell Storage Network Attached Storage (NAS) #2 Backup and Recovery Software (BARS) – Runs

Windows 2016 R2 – multi-terabyte data backup capability for Rack 2 server applications and NAS#1 Data.

Rack 3: Infrastructure servers to support internal web, email and IT operations. Server Q. Manage-IT – Specialized software used to monitor, inventory and report on corporate and data

center IT resources and functions. Includes network monitoring software. Server R. Webz – the CGT web site (not an ecommerce server), runs on Windows 2016 IIS Server Server S. Support-IT – used by IT department to manage systems configuration, updates, and internal

helpdesk tickets. Server T. Active Directory Service – manages users, their login and account privileges, drive storage and

other administrative network functions. Server U. Domain Name Service – used to route internal web content to intranet servers and to/from

external web sites.

7

Server V. MailCall – IMAP/Web-based Email system. All email retained on server; no independent mail clients allowed.

Server W. Office FileShare – location for all employee files, including the records created and stored through the Online Microsoft Office 365 application.

Server X. Dell Storage Network Attached Storage (NAS) #3 Backup and Recovery Software (BARS) – Runs Windows 2016 R2 – multi-terabyte data backup capability for Rack 3 server applications and NAS#2 Data.

All NAS data is backed up weekly to a Cloud-based backup service (Software-as-a-Service) as a single encrypted file.

Summary (used in the project tables):

All Applications have internal data and are stored on Servers and accessed by Internal Users from their Desktops over the Internal Network-Wired. Some of the assets aren’t applications (NAS data and Office FileShare). Some assets are considered File-Shares (The Develop-IT applications and the Office FileShare). All applications are backed up their rack’s NAS (External Storage) daily. Each NAS backs its data up to another NAS. Each NAS backs up its data to the Cloud Backup Service Provider (Software-as-a-Service) weekly as a single encrypted file.

Security

There currently is no formal cybersecurity department or structure at CGT. Physical security is outsourced to Ironclad Security, Inc., of Atlanta. All employees are issued a photo ID keycard used to enter the facility and property. All visitors to the facility must be coordinated through the corporate office, and escorted on the premises at all times. A closed-circuit video monitoring system records all major hallways and entrances to the building. The video feed is routed to the central physical security office, which is manned 24/7.

There are currently no formal cybersecurity policies, standards or guidelines identified or implemented.