{ "document_id": 13949, "filename": "Security_Incident_Response_Procedure.pdf", "engine": "paddleocr_vl", "source_run_id": 14060, "generated_at": "2026-11-03T22:38:54+00:00", "page_count": 10, "counts_by_type": { "caption": 2, "figure": 2, "form_field": 44, "header": 1, "heading": 41, "link": 3, "list": 16, "list_item": 57, "table": 15, "table_cell": 123, "text": 30, "title": 2 }, "timings": { "total_ms": 2682, "structure_ms": 1093, "text_layer_ms": 41, "build_ms": 35 }, "pages": [ { "document_id": 13949, "page": 1, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 17, "counts_by_type": { "figure": 2, "header": 1, "heading": 4, "list": 1, "list_item": 3, "text": 5, "title": 1 }, "build_ms": 2, "items": [ { "id": "p1.1", "order": 1, "type": "figure", "bbox": { "l": 256.8, "t": 758.16, "r": 354.24, "b": 687.6 }, "text": "", "attrs": { "role": "page_header", "block_label": "header_image" }, "reading_order": 0 }, { "id": "p1.2", "order": 2, "type": "header", "bbox": { "l": 229.92, "t": 679.92, "r": 381.12, "b": 650.4 }, "text": "KENTUCKY STATE UNIVERSITY", "attrs": { "block_label": "header" }, "level": 2, "reading_order": 1 }, { "id": "p1.3", "order": 3, "type": "figure", "bbox": { "l": 232, "t": 756, "r": 379.56, "b": 621.4 }, "text": "", "attrs": { "source": "pdf_image" }, "reading_order": 2 }, { "id": "p1.4", "order": 4, "type": "title", "bbox": { "l": 241.92, "t": 644.4, "r": 369.6, "b": 631.2 }, "text": "Policies and Regulations", "attrs": { "block_label": "doc_title" }, "level": 2, "reading_order": 3 }, { "id": "p1.5", "order": 5, "type": "text", "bbox": { "l": 34.08, "t": 606, "r": 332.4, "b": 590.88 }, "text": "PROCEDURE TITLE: SECURITY INCIDENT RESPONSE", "reading_order": 4 }, { "id": "p1.6", "order": 6, "type": "heading", "bbox": { "l": 34.08, "t": 571.92, "r": 107.28, "b": 557.76 }, "text": "APPLIES TO:", "level": 3, "reading_order": 5 }, { "id": "p1.7", "order": 7, "type": "text", "bbox": { "l": 33.6, "t": 541.2, "r": 564.72, "b": 491.28 }, "text": "All KSU students, faculty, staff, Board of Regent members, and all others who use, have access to, store, transmit or oversee KSU information technology resources. This applies to access of any KSU information resource from any device.", "reading_order": 6 }, { "id": "p1.8", "order": 8, "type": "heading", "bbox": { "l": 33.6, "t": 474.72, "r": 215.28, "b": 460.32 }, "text": "ADMINISTRATIVE AUTHORITY:", "level": 3, "reading_order": 7 }, { "id": "p1.9", "order": 9, "type": "list", "bbox": { "l": 36, "t": 446.21856, "r": 379.4084, "b": 363.03504 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p1.9.1", "order": 10, "type": "list_item", "bbox": { "l": 36, "t": 446.21856, "r": 379.4084, "b": 426.73104 }, "text": "APPROVED BY: Kentucky State University Board of Regents", "reading_order": 0 }, { "id": "p1.9.2", "order": 11, "type": "list_item", "bbox": { "l": 36, "t": 414.37056, "r": 222.233198, "b": 394.88304 }, "text": "EFFECTIVE DATE: August 8, 2025", "reading_order": 1 }, { "id": "p1.9.3", "order": 12, "type": "list_item", "bbox": { "l": 36, "t": 382.52256, "r": 242.394564, "b": 363.03504 }, "text": "NEXT REVIEW DATE: August 8, 2028", "reading_order": 2 } ], "reading_order": 8 }, { "id": "p1.10", "order": 13, "type": "heading", "bbox": { "l": 33.84, "t": 328.32, "r": 183.84, "b": 314.16 }, "text": "PROCEDURE STATEMENT:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 9 }, { "id": "p1.11", "order": 14, "type": "text", "bbox": { "l": 33.6, "t": 294.96, "r": 575.28, "b": 254.16 }, "text": "The purpose of this policy is to establish the appropriate response to identify, investigate, contain, eradicate, and remedy a security incident. The policy will also provide procedures to document, report and communicate the incident. Responsibility for each step will be established in this policy.", "reading_order": 10 }, { "id": "p1.12", "order": 15, "type": "heading", "bbox": { "l": 34.32, "t": 237.12, "r": 115.68, "b": 223.2 }, "text": "DEFINITIONS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 11 }, { "id": "p1.13", "order": 16, "type": "text", "bbox": { "l": 33.84, "t": 203.76, "r": 578.16, "b": 150 }, "text": "Confidential Data: This classification applies to the most sensitive data or information that is intended for use strictly within KSU, protected by any confidentiality agreements, or data protected by federal or state law, such as FERPA, HIPPA, GLBA or PCI-DSS. Its unauthorized disclosure could seriously and adversely impact KSU, its customers, its business partners, and its suppliers.", "reading_order": 12 }, { "id": "p1.14", "order": 17, "type": "text", "bbox": { "l": 34.08, "t": 137.04, "r": 578.16, "b": 84.24 }, "text": "Restricted Data: This classification applies to less-sensitive business data or information that is intended for use within KSU. By default, all information that is not defined as confidential or public should be treated as restricted. Its unauthorized disclosure could adversely impact KSU, or its customers, suppliers, business partners, or employees, but would not violate law.", "reading_order": 13 } ] }, { "document_id": 13949, "page": 2, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 29, "counts_by_type": { "heading": 3, "list": 4, "list_item": 18, "text": 4 }, "build_ms": 4, "items": [ { "id": "p2.1", "order": 1, "type": "text", "bbox": { "l": 33.84, "t": 755.28, "r": 577.92, "b": 715.2 }, "text": "Information Security Incident: An actual or suspected event such as a violation of computer security policies, acceptable use policies, or standard security practices. These events may adversely affect the security of KSU's information resources or systems. Examples include:", "reading_order": 0 }, { "id": "p2.2", "order": 2, "type": "list", "bbox": { "l": 50.88, "t": 711.9952, "r": 543.6, "b": 585.84 }, "text": "", "attrs": { "item_count": 9 }, "children": [ { "id": "p2.2.1", "order": 3, "type": "list_item", "bbox": { "l": 50.88, "t": 711.9952, "r": 170.4, "b": 698.16 }, "text": "Web site defacement", "reading_order": 0 }, { "id": "p2.2.2", "order": 4, "type": "list_item", "bbox": { "l": 50.88, "t": 698.0752, "r": 523.44, "b": 684 }, "text": "Theft or loss of a computing device that may contain PII whether or not such device is owned by KSU", "reading_order": 1 }, { "id": "p2.2.3", "order": 5, "type": "list_item", "bbox": { "l": 51.36, "t": 684.0352, "r": 543.6, "b": 670.32 }, "text": "Unauthorized access to data, especially confidential data like a person's name and social security number", "reading_order": 2 }, { "id": "p2.2.4", "order": 6, "type": "list_item", "bbox": { "l": 50.88, "t": 669.9952, "r": 432, "b": 656.16 }, "text": "Computer infected with malware such as a worm, virus, Trojan Horse, or botnet", "marker": "-", "reading_order": 3 }, { "id": "p2.2.5", "order": 7, "type": "list_item", "bbox": { "l": 51.36, "t": 655.9552, "r": 439.92, "b": 641.52 }, "text": "Reconnaissance activities such as scanning the network for security vulnerabilities", "reading_order": 4 }, { "id": "p2.2.6", "order": 8, "type": "list_item", "bbox": { "l": 51.84, "t": 641.9152, "r": 128.4, "b": 628.43536 }, "text": "Data Breach", "reading_order": 5 }, { "id": "p2.2.7", "order": 9, "type": "list_item", "bbox": { "l": 51.84, "t": 627.9952000000001, "r": 272.64, "b": 613.92 }, "text": "Misuse of Information Resources or Systems", "marker": "•", "reading_order": 6 }, { "id": "p2.2.8", "order": 10, "type": "list_item", "bbox": { "l": 52.08, "t": 613.9552, "r": 179.04, "b": 600.24 }, "text": "Denial of Service attack", "reading_order": 7 }, { "id": "p2.2.9", "order": 11, "type": "list_item", "bbox": { "l": 51.6, "t": 599.9152, "r": 316.08, "b": 585.84 }, "text": "Security weakness such as an un-patched vulnerability", "reading_order": 8 } ], "reading_order": 1 }, { "id": "p2.3", "order": 12, "type": "text", "bbox": { "l": 34.08, "t": 567.84, "r": 562.08, "b": 528.72 }, "text": "Personal Identifiable Information (PII): Per KRS 365.732 this is defined as individual's first name or first initial and last name in combination with any one (1) or more of the following data elements, when the name or data element is not redacted:", "reading_order": 2 }, { "id": "p2.4", "order": 13, "type": "list", "bbox": { "l": 51.36, "t": 528.3652, "r": 575.04, "b": 472.32 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p2.4.1", "order": 14, "type": "list_item", "bbox": { "l": 51.36, "t": 528.3652, "r": 179.52, "b": 514.8 }, "text": "Social Security number;", "marker": "•", "reading_order": 0 }, { "id": "p2.4.2", "order": 15, "type": "list_item", "bbox": { "l": 51.84, "t": 514.4452, "r": 194.64, "b": 500.96536 }, "text": "Driver's license number; or", "reading_order": 1 }, { "id": "p2.4.3", "order": 16, "type": "list_item", "bbox": { "l": 51.6, "t": 500.4052, "r": 575.04, "b": 472.32 }, "text": "Account number or credit or debit card number, in combination with any required security code, access code, or password to permit access to an individual's financial account.", "reading_order": 2 } ], "reading_order": 3 }, { "id": "p2.5", "order": 17, "type": "text", "bbox": { "l": 33.36, "t": 450.48, "r": 563.52, "b": 391.68 }, "text": "Information Technology Security Incident Response Team: – Members vary depending upon nature of the incident. Should contain at a minimum, General Counsel, CIO and Public relations. May include other individuals as needed such as the senior administrator for the affected unit, a representative from the police department, or director from human resources.", "reading_order": 4 }, { "id": "p2.6", "order": 18, "type": "heading", "bbox": { "l": 33.84, "t": 360.48, "r": 93.36, "b": 346.08 }, "text": "PROCESS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 5 }, { "id": "p2.7", "order": 19, "type": "heading", "bbox": { "l": 33.84, "t": 326.64, "r": 169.44, "b": 314.64 }, "text": "Reporting Security Incidents:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 6 }, { "id": "p2.8", "order": 20, "type": "list", "bbox": { "l": 50.4, "t": 313.2, "r": 566.16, "b": 204.48 }, "text": "", "attrs": { "item_count": 4 }, "children": [ { "id": "p2.8.1", "order": 21, "type": "list_item", "bbox": { "l": 50.4, "t": 313.2, "r": 565.2, "b": 286.08 }, "text": "Any member of the KSU community who suspects or becomes aware of an Information Security Incident must report the incident immediately by:", "marker": "1.", "reading_order": 0 }, { "id": "p2.8.2", "order": 22, "type": "list_item", "bbox": { "l": 50.88, "t": 276.96, "r": 510, "b": 263.28 }, "text": "Contacting the IT Help Desk or Chief Information Officer by phone (preferred), e-mail or in person.", "marker": "2.", "reading_order": 1 }, { "id": "p2.8.3", "order": 23, "type": "list_item", "bbox": { "l": 51.12, "t": 253.92, "r": 424.8, "b": 240.72 }, "text": "Contacting the department supervisor, who must contact the CIO immediately.", "marker": "3.", "reading_order": 2 }, { "id": "p2.8.4", "order": 24, "type": "list_item", "bbox": { "l": 50.64, "t": 231.6, "r": 566.16, "b": 204.48 }, "text": "If the department supervisor is not available, then the individual must contact the division Vice President, who must contact the CIO immediately.", "marker": "4.", "reading_order": 3 } ], "reading_order": 7 }, { "id": "p2.9", "order": 25, "type": "heading", "bbox": { "l": 33.84, "t": 179.76, "r": 150.24, "b": 167.76 }, "text": "Responding to Incidents:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 8 }, { "id": "p2.10", "order": 26, "type": "text", "bbox": { "l": 33.36, "t": 166.32, "r": 569.52, "b": 127.68 }, "text": "Once reported, the Chief Information Officer and General Counsel will conduct an initial investigation to determine if an information security incident has occurred by reviewing the type, scope and impact of the incident (see Appendix A). Based on the findings, one of the following processes will take place:", "reading_order": 9 }, { "id": "p2.11", "order": 27, "type": "list", "bbox": { "l": 50.16, "t": 126.48, "r": 577.68, "b": 40.32 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p2.11.1", "order": 28, "type": "list_item", "bbox": { "l": 50.88, "t": 126.48, "r": 570.72, "b": 99.12 }, "text": "If it has been determined that an information security incident has not occurred, the event will be documented and closed.", "marker": "1.", "reading_order": 0 }, { "id": "p2.11.2", "order": 29, "type": "list_item", "bbox": { "l": 50.16, "t": 83.28, "r": 577.68, "b": 40.32 }, "text": "If it has been determined that an information security incident has occurred and restricted or confidential data/information has been impacted, on a per incident basis, the creation of an Information Technology Security Incident Response Team (IT-SIRT), will be created to further investigate the incident. The incident will be", "marker": "2.", "reading_order": 1 } ], "reading_order": 10 } ] }, { "document_id": 13949, "page": 3, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 43, "counts_by_type": { "heading": 14, "list": 6, "list_item": 21, "text": 2 }, "build_ms": 5, "items": [ { "id": "p3.1", "order": 1, "type": "text", "bbox": { "l": 69.6, "t": 755.76, "r": 505.2, "b": 741.12 }, "text": "prioritized as high or critical and IT-SIRT will take necessary actions including but not limited to:", "reading_order": 0 }, { "id": "p3.2", "order": 2, "type": "heading", "bbox": { "l": 87.84, "t": 726.96, "r": 212.4, "b": 714 }, "text": "1. Detection and Analysis", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 1 }, { "id": "p3.3", "order": 3, "type": "heading", "bbox": { "l": 105.12, "t": 704.4, "r": 175.2, "b": 692.16 }, "text": "Key Functions:", "level": 3, "reading_order": 2 }, { "id": "p3.4", "order": 4, "type": "list", "bbox": { "l": 126.02, "t": 689.74, "r": 319.02608, "b": 649.78 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p3.4.1", "order": 5, "type": "list_item", "bbox": { "l": 126.02, "t": 689.74, "r": 257.76512, "b": 678.7 }, "text": "Following impact analysis", "marker": "a.", "reading_order": 0 }, { "id": "p3.4.2", "order": 6, "type": "list_item", "bbox": { "l": 126.02, "t": 675.22, "r": 282.59408, "b": 664.1800000000001 }, "text": "Determining systems impacted", "marker": "b.", "reading_order": 1 }, { "id": "p3.4.3", "order": 7, "type": "list_item", "bbox": { "l": 126.02, "t": 660.8199999999999, "r": 319.02608, "b": 649.78 }, "text": "Determining the exact type of incident.", "marker": "c.", "reading_order": 2 } ], "reading_order": 3 }, { "id": "p3.5", "order": 8, "type": "heading", "bbox": { "l": 87.84, "t": 632.88, "r": 181.44, "b": 620.4 }, "text": "2. Communication", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 4 }, { "id": "p3.6", "order": 9, "type": "heading", "bbox": { "l": 105.12, "t": 610.32, "r": 175.44, "b": 598.32 }, "text": "Key Functions:", "level": 3, "reading_order": 5 }, { "id": "p3.7", "order": 10, "type": "list", "bbox": { "l": 126.02, "t": 595.9, "r": 471.7876, "b": 555.8199999999999 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p3.7.1", "order": 11, "type": "list_item", "bbox": { "l": 126.02, "t": 595.9, "r": 367.2488, "b": 584.86 }, "text": "Determine appropriate notification requirements.", "marker": "a.", "reading_order": 0 }, { "id": "p3.7.2", "order": 12, "type": "list_item", "bbox": { "l": 126.02, "t": 581.38, "r": 471.7876, "b": 570.34 }, "text": "If required, complete determined breach notification form in Appendix C.", "marker": "b.", "reading_order": 1 }, { "id": "p3.7.3", "order": 13, "type": "list_item", "bbox": { "l": 126.02, "t": 566.86, "r": 421.15712, "b": 555.8199999999999 }, "text": "Develop an action plan for meeting notification requirements.", "marker": "c.", "reading_order": 2 } ], "reading_order": 6 }, { "id": "p3.8", "order": 14, "type": "heading", "bbox": { "l": 87.6, "t": 538.8, "r": 168.96, "b": 526.32 }, "text": "3. Containment", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 7 }, { "id": "p3.9", "order": 15, "type": "heading", "bbox": { "l": 103.2, "t": 517.44, "r": 174.24, "b": 504 }, "text": "Key functions:", "level": 3, "reading_order": 8 }, { "id": "p3.10", "order": 16, "type": "list", "bbox": { "l": 122.64, "t": 503.04, "r": 560.4, "b": 403.68 }, "text": "", "attrs": { "item_count": 6 }, "children": [ { "id": "p3.10.1", "order": 17, "type": "list_item", "bbox": { "l": 123.12, "t": 503.04, "r": 265.44, "b": 490.56 }, "text": "Stop potential loss of data.", "marker": "a.", "reading_order": 0 }, { "id": "p3.10.2", "order": 18, "type": "list_item", "bbox": { "l": 122.88, "t": 488.88, "r": 444, "b": 476.16 }, "text": "Prevent further damage or comprised systems and/or information.", "marker": "b.", "reading_order": 1 }, { "id": "p3.10.3", "order": 19, "type": "list_item", "bbox": { "l": 122.64, "t": 474, "r": 360.96, "b": 462.24 }, "text": "Protect other Information systems or resources.", "marker": "c.", "reading_order": 2 }, { "id": "p3.10.4", "order": 20, "type": "list_item", "bbox": { "l": 123.12, "t": 459.36, "r": 560.4, "b": 433.2 }, "text": "Identify the location and owner of the device in order to engage in containment, eradication, and recovery.", "marker": "d.", "reading_order": 3 }, { "id": "p3.10.5", "order": 21, "type": "list_item", "bbox": { "l": 122.64, "t": 430.8, "r": 444.24, "b": 418.56 }, "text": "Determine if delayed containment is necessary to collect evidence.", "marker": "e.", "reading_order": 4 }, { "id": "p3.10.6", "order": 22, "type": "list_item", "bbox": { "l": 122.88, "t": 415.92, "r": 322.8, "b": 403.68 }, "text": "Maximize the preservation of evidence.", "marker": "f.", "reading_order": 5 } ], "reading_order": 9 }, { "id": "p3.11", "order": 23, "type": "heading", "bbox": { "l": 87.6, "t": 387.36, "r": 220.32, "b": 374.64 }, "text": "4. Preservation of Evidence", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 10 }, { "id": "p3.12", "order": 24, "type": "heading", "bbox": { "l": 105.36, "t": 364.8, "r": 175.44, "b": 352.56 }, "text": "Key Functions:", "level": 3, "reading_order": 11 }, { "id": "p3.13", "order": 25, "type": "list", "bbox": { "l": 126.02, "t": 350.09, "r": 554.6804, "b": 295.61 }, "text": "", "attrs": { "item_count": 4 }, "children": [ { "id": "p3.13.1", "order": 26, "type": "list_item", "bbox": { "l": 126.02, "t": 350.09, "r": 554.6804, "b": 339.05 }, "text": "Make backups (preferably disk image backups, not file system backups) of affected systems.", "marker": "a.", "reading_order": 0 }, { "id": "p3.13.2", "order": 27, "type": "list_item", "bbox": { "l": 126.02, "t": 335.57, "r": 453.42704, "b": 324.53 }, "text": "Make copies of log files that contain evidence related to the incident.", "marker": "b.", "reading_order": 1 }, { "id": "p3.13.3", "order": 28, "type": "list_item", "bbox": { "l": 126.02, "t": 321.17, "r": 329.26016, "b": 310.13 }, "text": "Preserve evidence not already preserved.", "marker": "c.", "reading_order": 2 }, { "id": "p3.13.4", "order": 29, "type": "list_item", "bbox": { "l": 126.02, "t": 306.65, "r": 360.9008, "b": 295.61 }, "text": "Perform additional evidence gathering activities.", "marker": "d.", "reading_order": 3 } ], "reading_order": 12 }, { "id": "p3.14", "order": 30, "type": "heading", "bbox": { "l": 87.84, "t": 271.92, "r": 161.04, "b": 259.2 }, "text": "5. Eradication", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 13 }, { "id": "p3.15", "order": 31, "type": "heading", "bbox": { "l": 105.12, "t": 249.6, "r": 174.96, "b": 236.88 }, "text": "Key Functions:", "level": 3, "reading_order": 14 }, { "id": "p3.16", "order": 32, "type": "list", "bbox": { "l": 126.02, "t": 234.76999999999998, "r": 408.58256, "b": 209.21000000000004 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p3.16.1", "order": 33, "type": "list_item", "bbox": { "l": 126.02, "t": 234.76999999999998, "r": 408.58256, "b": 223.73000000000002 }, "text": "Identify and mitigate all vulnerabilities that were exploited.", "marker": "a.", "reading_order": 0 }, { "id": "p3.16.2", "order": 34, "type": "list_item", "bbox": { "l": 126.02, "t": 220.25, "r": 347.73008, "b": 209.21000000000004 }, "text": "Remove all traces of the attack or the breach.", "marker": "a.", "reading_order": 1 } ], "reading_order": 15 }, { "id": "p3.17", "order": 35, "type": "heading", "bbox": { "l": 87.84, "t": 192.48, "r": 167.28, "b": 180 }, "text": "6. Remediation", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 16 }, { "id": "p3.18", "order": 36, "type": "heading", "bbox": { "l": 105.12, "t": 170.16, "r": 173.52, "b": 157.68 }, "text": "Key functions:", "level": 3, "reading_order": 17 }, { "id": "p3.19", "order": 37, "type": "list", "bbox": { "l": 126.02, "t": 155.41999999999996, "r": 390.75296, "b": 115.34000000000003 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p3.19.1", "order": 38, "type": "list_item", "bbox": { "l": 126.02, "t": 155.41999999999996, "r": 390.75296, "b": 144.38 }, "text": "Return affected system to an operationally ready state.", "marker": "a.", "reading_order": 0 }, { "id": "p3.19.2", "order": 39, "type": "list_item", "bbox": { "l": 126.02, "t": 140.89999999999998, "r": 364.16072, "b": 129.86 }, "text": "Ensure system returns to fully operational status.", "marker": "b.", "reading_order": 1 }, { "id": "p3.19.3", "order": 40, "type": "list_item", "bbox": { "l": 126.02, "t": 126.38, "r": 323.50832, "b": 115.34000000000003 }, "text": "Improve physical security of equipment.", "marker": "c.", "reading_order": 2 } ], "reading_order": 18 }, { "id": "p3.20", "order": 41, "type": "heading", "bbox": { "l": 87.6, "t": 98.64, "r": 179.76, "b": 85.92 }, "text": "7. Documentation", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 19 }, { "id": "p3.21", "order": 42, "type": "heading", "bbox": { "l": 105.12, "t": 76.32, "r": 175.44, "b": 62.88 }, "text": "Key Functions:", "level": 3, "reading_order": 20 }, { "id": "p3.22", "order": 43, "type": "text", "bbox": { "l": 123.36, "t": 59.04, "r": 278.64, "b": 45.84 }, "text": "a. Create and issue final reports.", "reading_order": 21 } ] }, { "document_id": 13949, "page": 4, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 46, "counts_by_type": { "form_field": 13, "heading": 2, "list": 2, "list_item": 7, "table": 2, "table_cell": 19, "text": 1 }, "build_ms": 5, "items": [ { "id": "p4.1", "order": 1, "type": "list", "bbox": { "l": 51.36, "t": 754.8, "r": 575.04, "b": 623.28 }, "text": "", "attrs": { "item_count": 5 }, "children": [ { "id": "p4.1.1", "order": 2, "type": "list_item", "bbox": { "l": 124.08, "t": 754.8, "r": 313.68, "b": 742.8 }, "text": "Archive evidence and documentation.", "marker": "b.", "reading_order": 0 }, { "id": "p4.1.2", "order": 3, "type": "list_item", "bbox": { "l": 87.84, "t": 723.6, "r": 284.16, "b": 711.12 }, "text": "Identify post-incident activities needed", "marker": "8.", "reading_order": 1 }, { "id": "p4.1.3", "order": 4, "type": "list_item", "bbox": { "l": 123.36, "t": 708.48, "r": 575.04, "b": 695.76 }, "text": "Determine lessons learned and make recommendations to prevent subsequent similar incidents", "marker": "a.", "reading_order": 2 }, { "id": "p4.1.4", "order": 5, "type": "list_item", "bbox": { "l": 124.32, "t": 693.6, "r": 244.8, "b": 682.08 }, "text": "Close out the incident", "marker": "b.", "reading_order": 3 }, { "id": "p4.1.5", "order": 6, "type": "list_item", "bbox": { "l": 51.36, "t": 665.52, "r": 565.2, "b": 623.28 }, "text": "If it has been determined that an information security incident has occurred and restricted or confidential data/information has not been impacted, the CIO under the guidance of Legal Counsel will determine steps to communicate, contain, eradicate, remediate, document and as well determine any post-incident activities.", "marker": "3.", "reading_order": 4 } ], "reading_order": 0 }, { "id": "p4.2", "order": 7, "type": "text", "bbox": { "l": 34.08, "t": 600.72, "r": 559.92, "b": 573.84 }, "text": "KSU will adhere to federal, state laws, rules, regulations, policies and procedures governing the confidentiality of data and notification of security breaches.", "reading_order": 1 }, { "id": "p4.3", "order": 8, "type": "heading", "bbox": { "l": 33.6, "t": 543.6, "r": 266.64, "b": 529.2 }, "text": "REFERENCES AND RELATED MATERIALS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 2 }, { "id": "p4.4", "order": 9, "type": "list", "bbox": { "l": 36, "t": 508.366, "r": 295.404, "b": 474.466 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p4.4.1", "order": 10, "type": "list_item", "bbox": { "l": 36, "t": 508.366, "r": 279.36, "b": 497.266 }, "text": "Appendix A: Security Incident Reporting Form", "reading_order": 0 }, { "id": "p4.4.2", "order": 11, "type": "list_item", "bbox": { "l": 36, "t": 485.566, "r": 295.404, "b": 474.466 }, "text": "Date Submitted:___/___/___", "children": [ { "id": "p4.4.2.1", "order": 12, "type": "form_field", "bbox": { "l": 36, "t": 489.85, "r": 295.4039, "b": 473.362 }, "text": "", "attrs": { "field_kind": "text", "label": "Date Submitted:___/___/___", "source": "blank_line", "label_source": "parent_text", "label_ref": "p4.4.2" }, "reading_order": 0 } ], "reading_order": 1 } ], "reading_order": 3 }, { "id": "p4.5", "order": 13, "type": "table", "bbox": { "l": 36.48, "t": 443.52, "r": 503.76, "b": 195.6 }, "text": "", "attrs": { "block_label": "table", "n_rows": 9, "n_cols": 2, "integrity": { "cells_checked": 9, "cells_flagged": 0 } }, "children": [ { "id": "p4.5.1", "order": 14, "type": "table_cell", "bbox": { "l": 41.64, "t": 439.246, "r": 232.75824, "b": 428.146 }, "text": "1. Reported By Contact Information", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p4.5.2", "order": 15, "type": "table_cell", "bbox": { "l": 41.64, "t": 412.75672, "r": 94.84176, "b": 402.54472 }, "text": "Full Name:", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 1 }, { "id": "p4.5.3", "order": 16, "type": "table_cell", "bbox": { "l": 270.12, "t": 415.9733, "r": 503.76, "b": 388.4267 }, "text": "", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 2 }, { "id": "p4.5.4", "order": 17, "type": "table_cell", "bbox": { "l": 41.64, "t": 386.95672, "r": 86.352, "b": 376.74472 }, "text": "Job Title:", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 3 }, { "id": "p4.5.5", "order": 18, "type": "table_cell", "bbox": { "l": 270.12, "t": 388.4267, "r": 503.76, "b": 360.88 }, "text": "", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 4 }, { "id": "p4.5.6", "order": 19, "type": "table_cell", "bbox": { "l": 41.64, "t": 361.13672, "r": 142.4904, "b": 350.92472 }, "text": "Department/College:", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 5 }, { "id": "p4.5.7", "order": 20, "type": "table_cell", "bbox": { "l": 270.12, "t": 360.88, "r": 503.76, "b": 333.3333 }, "text": "", "attrs": { "row": 3, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 6 }, { "id": "p4.5.8", "order": 21, "type": "table_cell", "bbox": { "l": 41.64, "t": 335.33672, "r": 147.97728, "b": 325.12472 }, "text": "Office Room Number:", "attrs": { "row": 4, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 7 }, { "id": "p4.5.9", "order": 22, "type": "table_cell", "bbox": { "l": 270.12, "t": 333.3333, "r": 503.76, "b": 305.7867 }, "text": "", "attrs": { "row": 4, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 8 }, { "id": "p4.5.10", "order": 23, "type": "table_cell", "bbox": { "l": 41.64, "t": 309.53672, "r": 147.39216, "b": 299.32472 }, "text": "Work Phone Number:", "attrs": { "row": 5, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 9 }, { "id": "p4.5.11", "order": 24, "type": "table_cell", "bbox": { "l": 270.12, "t": 305.7867, "r": 503.76, "b": 278.24 }, "text": "", "attrs": { "row": 5, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 10 }, { "id": "p4.5.12", "order": 25, "type": "table_cell", "bbox": { "l": 41.64, "t": 283.73672, "r": 136.49568, "b": 273.52472 }, "text": "Cellphone Number:", "attrs": { "row": 6, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 11 }, { "id": "p4.5.13", "order": 26, "type": "table_cell", "bbox": { "l": 270.12, "t": 278.24, "r": 503.76, "b": 250.6933 }, "text": "", "attrs": { "row": 6, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 12 }, { "id": "p4.5.14", "order": 27, "type": "table_cell", "bbox": { "l": 41.64, "t": 257.93672000000004, "r": 115.59696, "b": 247.72472000000005 }, "text": "Email Address:", "attrs": { "row": 7, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 13 }, { "id": "p4.5.15", "order": 28, "type": "table_cell", "bbox": { "l": 270.12, "t": 250.6933, "r": 503.76, "b": 223.1467 }, "text": "", "attrs": { "row": 7, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 14 }, { "id": "p4.5.16", "order": 29, "type": "table_cell", "bbox": { "l": 41.64, "t": 232.13671999999997, "r": 192.15936, "b": 221.92471999999998 }, "text": "Additional Contact Information:", "attrs": { "row": 8, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true }, "reading_order": 15 } ], "reading_order": 4 }, { "id": "p4.6", "order": 30, "type": "heading", "bbox": { "l": 38.64, "t": 172.32, "r": 276.72, "b": 157.92 }, "text": "2. Type of Incident (Check all that apply)", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 5 }, { "id": "p4.7", "order": 31, "type": "table", "bbox": { "l": 37.68, "t": 170.03599999999994, "r": 499.2, "b": 71.04 }, "text": "", "attrs": { "block_label": "table", "n_rows": 2, "n_cols": 2, "integrity": { "cells_checked": 3, "cells_flagged": 0 } }, "children": [ { "id": "p4.7.1", "order": 32, "type": "table_cell", "bbox": { "l": 41.64, "t": 170.03599999999994, "r": 275.664, "b": 158.93600000000004 }, "text": "2. Type of Incident (Check all that apply)", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p4.7.2", "order": 33, "type": "table_cell", "bbox": { "l": 58.68, "t": 151.17128000000002, "r": 243.6372, "b": 74.88228000000004 }, "text": "□ Compromised/Stolen/Altered Data\\n□ Theft and use of Others ID's\\n□ Denial of Service\\n□ Unauthorized Access\\n□ Data Breach\\n□ Social Engineering (e.g. Phishing, scams)", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "children": [ { "id": "p4.7.2.1", "order": 34, "type": "form_field", "bbox": { "l": 58.68, "t": 151.17, "r": 70.68, "b": 139.17 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "□ Compromised/Stolen/Altered Data\\n□ Theft and use of Others ID's\\n□ Denial of Service\\n□ Unauthorized Access\\n□ Data Breach\\n□ Social Engineering (e.g. Phishing, scams)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.2", "text_offset": 0, "text_span": 1 }, "reading_order": 0 }, { "id": "p4.7.2.2", "order": 35, "type": "form_field", "bbox": { "l": 58.68, "t": 138.46, "r": 70.68, "b": 126.46 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Theft and use of Others ID's", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.2", "text_offset": 35, "text_span": 1 }, "reading_order": 1 }, { "id": "p4.7.2.3", "order": 36, "type": "form_field", "bbox": { "l": 58.68, "t": 125.74, "r": 70.68, "b": 113.74 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Denial of Service", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.2", "text_offset": 67, "text_span": 1 }, "reading_order": 2 }, { "id": "p4.7.2.4", "order": 37, "type": "form_field", "bbox": { "l": 58.68, "t": 113.03, "r": 70.68, "b": 101.03 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Unauthorized Access", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.2", "text_offset": 88, "text_span": 1 }, "reading_order": 3 }, { "id": "p4.7.2.5", "order": 38, "type": "form_field", "bbox": { "l": 58.68, "t": 100.31, "r": 70.68, "b": 88.31 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Data Breach", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.2", "text_offset": 111, "text_span": 1 }, "reading_order": 4 }, { "id": "p4.7.2.6", "order": 39, "type": "form_field", "bbox": { "l": 58.68, "t": 87.6, "r": 70.68, "b": 75.6 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Social Engineering (e.g. Phishing, scams)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.2", "text_offset": 126, "text_span": 1 }, "reading_order": 5 } ], "reading_order": 1 }, { "id": "p4.7.3", "order": 40, "type": "table_cell", "bbox": { "l": 273.65, "t": 151.17128000000002, "r": 477.94952, "b": 74.88228000000004 }, "text": "□ Website Defacement or Redirection\\n□ Reconnaissance (e.g. scans, probes)\\n□ Malicious Code (e.g. worms, virus, Trojan)\\n□ Computing Device Lost, Stolen or Damaged\\n□ Violation of Security Policy or Policies\\n□ Other or Unknown (Provide description below)", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "children": [ { "id": "p4.7.3.1", "order": 41, "type": "form_field", "bbox": { "l": 273.65, "t": 151.17, "r": 285.65, "b": 139.17 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "□ Website Defacement or Redirection\\n□ Reconnaissance (e.g. scans, probes)\\n□ Malicious Code (e.g. worms, virus, Trojan)\\n□ Computing Device Lost, Stolen or Damaged\\n□ Violation of Security Policy or Policies\\n□ Other or Unknown (Provide description below)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.3", "text_offset": 0, "text_span": 1 }, "reading_order": 0 }, { "id": "p4.7.3.2", "order": 42, "type": "form_field", "bbox": { "l": 273.65, "t": 138.46, "r": 285.65, "b": 126.46 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Reconnaissance (e.g. scans, probes)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.3", "text_offset": 37, "text_span": 1 }, "reading_order": 1 }, { "id": "p4.7.3.3", "order": 43, "type": "form_field", "bbox": { "l": 273.65, "t": 125.74, "r": 285.65, "b": 113.74 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Malicious Code (e.g. worms, virus, Trojan)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.3", "text_offset": 76, "text_span": 1 }, "reading_order": 2 }, { "id": "p4.7.3.4", "order": 44, "type": "form_field", "bbox": { "l": 273.65, "t": 113.03, "r": 285.65, "b": 101.03 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Computing Device Lost, Stolen or Damaged", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.3", "text_offset": 122, "text_span": 1 }, "reading_order": 3 }, { "id": "p4.7.3.5", "order": 45, "type": "form_field", "bbox": { "l": 273.65, "t": 100.31, "r": 285.65, "b": 88.31 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Violation of Security Policy or Policies", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.3", "text_offset": 166, "text_span": 1 }, "reading_order": 4 }, { "id": "p4.7.3.6", "order": 46, "type": "form_field", "bbox": { "l": 273.65, "t": 87.6, "r": 285.65, "b": 75.6 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Other or Unknown (Provide description below)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p4.7.3", "text_offset": 210, "text_span": 1 }, "reading_order": 5 } ], "reading_order": 2 } ], "reading_order": 6 } ] }, { "document_id": 13949, "page": 5, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 47, "counts_by_type": { "caption": 1, "form_field": 21, "table": 4, "table_cell": 21 }, "build_ms": 5, "items": [ { "id": "p5.1", "order": 1, "type": "table", "bbox": { "l": 37.44, "t": 757.92, "r": 503.28, "b": 711.6 }, "text": "", "attrs": { "block_label": "table", "n_rows": 1, "n_cols": 1, "integrity": { "cells_checked": 1, "cells_flagged": 0 } }, "children": [ { "id": "p5.1.1", "order": 2, "type": "table_cell", "bbox": { "l": 41.64, "t": 753.31128, "r": 143.20212, "b": 744.09828 }, "text": "Description of Incident:", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 0 } ], "reading_order": 0 }, { "id": "p5.2", "order": 3, "type": "table", "bbox": { "l": 38.4, "t": 688.32, "r": 503.28, "b": 460.08 }, "text": "", "attrs": { "block_label": "table", "n_rows": 5, "n_cols": 2, "integrity": { "cells_checked": 5, "cells_flagged": 0 } }, "children": [ { "id": "p5.2.1", "order": 4, "type": "table_cell", "bbox": { "l": 41.64, "t": 685.756, "r": 483.59948, "b": 604.03828 }, "text": "3. Scope of Incident (Check all that apply)\n□ Critical (e.g. KSU is no longer able to provide some critical services to any user).□ High (e.g. KSU has lost the ability to provide critical service to a subset of system users).□ Medium (e.g. KSU can still provide critical services to all users and has lost no efficiency).□ Low (e.g. No effect to the organization's ability to provide services to all users. Individual impact)□ Unknown (Provide description below)", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "children": [ { "id": "p5.2.1.1", "order": 5, "type": "form_field", "bbox": { "l": 41.64, "t": 644.9, "r": 53.64, "b": 632.9 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Critical (e.g. KSU is no longer able to provide some critic…", "source": "glyph_estimate", "bbox_estimated": true, "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "label_source": "parent_text", "label_ref": "p5.2.1", "text_offset": 44, "text_span": 1 }, "reading_order": 0 }, { "id": "p5.2.1.2", "order": 6, "type": "form_field", "bbox": { "l": 132.57, "t": 644.9, "r": 144.57, "b": 632.9 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "High (e.g. KSU has lost the ability to provide critical ser…", "source": "glyph_estimate", "bbox_estimated": true, "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "label_source": "parent_text", "label_ref": "p5.2.1", "text_offset": 130, "text_span": 1 }, "reading_order": 1 }, { "id": "p5.2.1.3", "order": 7, "type": "form_field", "bbox": { "l": 233.01, "t": 644.9, "r": 245.01, "b": 632.9 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Medium (e.g. KSU can still provide critical services to all…", "source": "glyph_estimate", "bbox_estimated": true, "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "label_source": "parent_text", "label_ref": "p5.2.1", "text_offset": 225, "text_span": 1 }, "reading_order": 2 }, { "id": "p5.2.1.4", "order": 8, "type": "form_field", "bbox": { "l": 334.52, "t": 644.9, "r": 346.52, "b": 632.9 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Low (e.g. No effect to the organization's ability to provid…", "source": "glyph_estimate", "bbox_estimated": true, "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "label_source": "parent_text", "label_ref": "p5.2.1", "text_offset": 321, "text_span": 1 }, "reading_order": 3 }, { "id": "p5.2.1.5", "order": 9, "type": "form_field", "bbox": { "l": 444.48, "t": 644.9, "r": 456.48, "b": 632.9 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Unknown (Provide description below)", "source": "glyph_estimate", "bbox_estimated": true, "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "label_source": "parent_text", "label_ref": "p5.2.1", "text_offset": 425, "text_span": 1 }, "reading_order": 4 } ], "reading_order": 0 }, { "id": "p5.2.2", "order": 10, "type": "table_cell", "bbox": { "l": 41.64, "t": 580.0112799999999, "r": 219.35628, "b": 570.79828 }, "text": "Estimated number of systems impacted:", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 1 }, { "id": "p5.2.3", "order": 11, "type": "table_cell", "bbox": { "l": 270.84, "t": 612.24, "r": 503.28, "b": 574.2 }, "text": "", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 2 }, { "id": "p5.2.4", "order": 12, "type": "table_cell", "bbox": { "l": 41.64, "t": 553.0112799999999, "r": 207.04572, "b": 543.79828 }, "text": "Estimated number of users impacted:", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 3 }, { "id": "p5.2.5", "order": 13, "type": "table_cell", "bbox": { "l": 270.84, "t": 574.2, "r": 503.28, "b": 536.16 }, "text": "", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 4 }, { "id": "p5.2.6", "order": 14, "type": "table_cell", "bbox": { "l": 41.64, "t": 525.98128, "r": 189.7452, "b": 516.76828 }, "text": "Impact on Third Parties? If so list.", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 5 }, { "id": "p5.2.7", "order": 15, "type": "table_cell", "bbox": { "l": 270.84, "t": 536.16, "r": 503.28, "b": 498.12 }, "text": "", "attrs": { "row": 3, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 6 }, { "id": "p5.2.8", "order": 16, "type": "table_cell", "bbox": { "l": 41.64, "t": 498.98128, "r": 169.93476, "b": 489.76828 }, "text": "Additional scope information:", "attrs": { "row": 4, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true }, "reading_order": 7 } ], "reading_order": 1 }, { "id": "p5.3", "order": 17, "type": "table", "bbox": { "l": 37.2, "t": 435.36, "r": 503.52, "b": 262.32 }, "text": "", "attrs": { "block_label": "table", "n_rows": 4, "n_cols": 2, "integrity": { "cells_checked": 5, "cells_flagged": 0 } }, "children": [ { "id": "p5.3.1", "order": 18, "type": "table_cell", "bbox": { "l": 41.64, "t": 434.446, "r": 287.652, "b": 423.346 }, "text": "4. Impact Categories (Check all that apply)", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p5.3.2", "order": 19, "type": "table_cell", "bbox": { "l": 58.68, "t": 415.58128, "r": 191.95476, "b": 366.04828 }, "text": "□ Loss of Access to Services□ Loss of Productivity□ Loss of Reputation or Integrity□ Loss of Revenue", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "children": [ { "id": "p5.3.2.1", "order": 20, "type": "form_field", "bbox": { "l": 58.68, "t": 415.58, "r": 70.68, "b": 403.58 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "□ Loss of Access to Services□ Loss of Productivity□ Loss of Reputation or Integrity□ Loss of Revenue", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.3.2", "text_offset": 0, "text_span": 1 }, "reading_order": 0 }, { "id": "p5.3.2.2", "order": 21, "type": "form_field", "bbox": { "l": 96, "t": 415.58, "r": 108, "b": 403.58 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Loss of Productivity", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.3.2", "text_offset": 28, "text_span": 1 }, "reading_order": 1 }, { "id": "p5.3.2.3", "order": 22, "type": "form_field", "bbox": { "l": 125.32, "t": 415.58, "r": 137.32, "b": 403.58 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Loss of Reputation or Integrity", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.3.2", "text_offset": 50, "text_span": 1 }, "reading_order": 2 }, { "id": "p5.3.2.4", "order": 23, "type": "form_field", "bbox": { "l": 169.3, "t": 415.58, "r": 181.3, "b": 403.58 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Loss of Revenue", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.3.2", "text_offset": 83, "text_span": 1 }, "reading_order": 3 } ], "reading_order": 1 }, { "id": "p5.3.3", "order": 24, "type": "table_cell", "bbox": { "l": 273.65, "t": 415.58128, "r": 477.94952, "b": 366.04828 }, "text": "□ Propagation to other networks□ Unauthorized disclosure of data/information□ Unauthorized modification of data/information□ Other or Unknown (Provide description below)", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "children": [ { "id": "p5.3.3.1", "order": 25, "type": "form_field", "bbox": { "l": 273.65, "t": 415.58, "r": 285.65, "b": 403.58 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "□ Propagation to other networks□ Unauthorized disclosure of data/information□ Unauthorized modification of data/information□ Other or Unknown (Provide description below)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.3.3", "text_offset": 0, "text_span": 1 }, "reading_order": 0 }, { "id": "p5.3.3.2", "order": 26, "type": "form_field", "bbox": { "l": 311.13, "t": 415.58, "r": 323.13, "b": 403.58 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Unauthorized disclosure of data/information", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.3.3", "text_offset": 31, "text_span": 1 }, "reading_order": 1 }, { "id": "p5.3.3.3", "order": 27, "type": "form_field", "bbox": { "l": 365.52, "t": 415.58, "r": 377.52, "b": 403.58 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Unauthorized modification of data/information", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.3.3", "text_offset": 76, "text_span": 1 }, "reading_order": 2 }, { "id": "p5.3.3.4", "order": 28, "type": "form_field", "bbox": { "l": 422.34, "t": 415.58, "r": 434.34, "b": 403.58 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Other or Unknown (Provide description below)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.3.3", "text_offset": 123, "text_span": 1 }, "reading_order": 3 } ], "reading_order": 2 }, { "id": "p5.3.4", "order": 29, "type": "table_cell", "bbox": { "l": 41.64, "t": 348.00128, "r": 133.75008, "b": 338.78828 }, "text": "Estimated total Cost:", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 3 }, { "id": "p5.3.5", "order": 30, "type": "table_cell", "bbox": { "l": 270.36, "t": 348.84, "r": 503.52, "b": 305.58 }, "text": "", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 4 }, { "id": "p5.3.6", "order": 31, "type": "table_cell", "bbox": { "l": 41.64, "t": 304.32128, "r": 173.78928, "b": 295.10828 }, "text": "Additional Impact Information:", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true }, "reading_order": 5 } ], "reading_order": 2 }, { "id": "p5.4", "order": 32, "type": "caption", "bbox": { "l": 38.16, "t": 240, "r": 262.56, "b": 224.16 }, "text": "5. Affected Data (Check all that apply)", "attrs": { "block_label": "figure_title" }, "reading_order": 3 }, { "id": "p5.5", "order": 33, "type": "table", "bbox": { "l": 37.2, "t": 236.78599999999994, "r": 504, "b": 65.76 }, "text": "", "attrs": { "block_label": "table", "n_rows": 4, "n_cols": 2, "integrity": { "cells_checked": 5, "cells_flagged": 0 } }, "children": [ { "id": "p5.5.1", "order": 34, "type": "table_cell", "bbox": { "l": 41.64, "t": 236.78599999999994, "r": 261.06, "b": 225.68600000000004 }, "text": "5. Affected Data (Check all that apply)", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p5.5.2", "order": 35, "type": "table_cell", "bbox": { "l": 58.68, "t": 217.92128000000002, "r": 245.26068, "b": 168.47828000000004 }, "text": "□ Restricted or Confidential data/information□ Public data/information□ Financial data/information□ FERPA related data/information", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "children": [ { "id": "p5.5.2.1", "order": 36, "type": "form_field", "bbox": { "l": 58.68, "t": 217.92, "r": 70.68, "b": 205.92 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "□ Restricted or Confidential data/information□ Public data/information□ Financial data/information□ FERPA related data/information", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.5.2", "text_offset": 0, "text_span": 1 }, "reading_order": 0 }, { "id": "p5.5.2.2", "order": 37, "type": "form_field", "bbox": { "l": 123.27, "t": 217.92, "r": 135.27, "b": 205.92 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Public data/information", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.5.2", "text_offset": 45, "text_span": 1 }, "reading_order": 1 }, { "id": "p5.5.2.3", "order": 38, "type": "form_field", "bbox": { "l": 159.15, "t": 217.92, "r": 171.15, "b": 205.92 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Financial data/information", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.5.2", "text_offset": 70, "text_span": 1 }, "reading_order": 2 }, { "id": "p5.5.2.4", "order": 39, "type": "form_field", "bbox": { "l": 199.33, "t": 217.92, "r": 211.33, "b": 205.92 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "FERPA related data/information", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.5.2", "text_offset": 98, "text_span": 1 }, "reading_order": 3 } ], "reading_order": 1 }, { "id": "p5.5.3", "order": 40, "type": "table_cell", "bbox": { "l": 273.65, "t": 217.92128000000002, "r": 493.09868, "b": 168.47828000000004 }, "text": "□ Personally Identifiable Information (PII)□ Intellectual Property/Copyrighted data/information□ Critical Infrastructure□ Other or Unknown (Provide description below)", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "children": [ { "id": "p5.5.3.1", "order": 41, "type": "form_field", "bbox": { "l": 273.65, "t": 217.92, "r": 285.65, "b": 205.92 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "□ Personally Identifiable Information (PII)□ Intellectual Property/Copyrighted data/information□ Critical Infrastructure□ Other or Unknown (Provide description below)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.5.3", "text_offset": 0, "text_span": 1 }, "reading_order": 0 }, { "id": "p5.5.3.2", "order": 42, "type": "form_field", "bbox": { "l": 330.5, "t": 217.92, "r": 342.5, "b": 205.92 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Intellectual Property/Copyrighted data/information", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.5.3", "text_offset": 43, "text_span": 1 }, "reading_order": 1 }, { "id": "p5.5.3.3", "order": 43, "type": "form_field", "bbox": { "l": 399.24, "t": 217.92, "r": 411.24, "b": 205.92 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Critical Infrastructure", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.5.3", "text_offset": 95, "text_span": 1 }, "reading_order": 2 }, { "id": "p5.5.3.4", "order": 44, "type": "form_field", "bbox": { "l": 432.29, "t": 217.92, "r": 444.29, "b": 205.92 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Other or Unknown (Provide description below)", "source": "glyph_estimate", "bbox_estimated": true, "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "label_source": "parent_text", "label_ref": "p5.5.3", "text_offset": 120, "text_span": 1 }, "reading_order": 3 } ], "reading_order": 2 }, { "id": "p5.5.4", "order": 45, "type": "table_cell", "bbox": { "l": 41.64, "t": 150.33128, "r": 212.6532, "b": 141.11828000000003 }, "text": "Quantity of Data/Information impacted:", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 3 }, { "id": "p5.5.5", "order": 46, "type": "table_cell", "bbox": { "l": 270.6, "t": 149.28, "r": 504, "b": 107.52 }, "text": "", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 4 }, { "id": "p5.5.6", "order": 47, "type": "table_cell", "bbox": { "l": 41.64, "t": 106.65527999999995, "r": 204.24696, "b": 97.44227999999998 }, "text": "Additional Affected Data/Information:", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true }, "reading_order": 5 } ], "reading_order": 4 } ] }, { "document_id": 13949, "page": 6, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 26, "counts_by_type": { "table": 3, "table_cell": 23 }, "build_ms": 2, "items": [ { "id": "p6.1", "order": 1, "type": "table", "bbox": { "l": 36.72, "t": 734.4, "r": 503.52, "b": 569.76 }, "text": "", "attrs": { "block_label": "table", "n_rows": 4, "n_cols": 2, "integrity": { "cells_checked": 4, "cells_flagged": 0 } }, "children": [ { "id": "p6.1.1", "order": 2, "type": "table_cell", "bbox": { "l": 41.64, "t": 729.936, "r": 208.10148, "b": 701.8382799999999 }, "text": "6. Analysis\nAttack Sources (e.g. IP address, port)", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p6.1.2", "order": 3, "type": "table_cell", "bbox": { "l": 41.64, "t": 675.05128, "r": 173.19168, "b": 665.8382799999999 }, "text": "IP address of affected system", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 1 }, { "id": "p6.1.3", "order": 4, "type": "table_cell", "bbox": { "l": 270.12, "t": 668.544, "r": 503.52, "b": 635.616 }, "text": "", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 2 }, { "id": "p6.1.4", "order": 5, "type": "table_cell", "bbox": { "l": 41.64, "t": 631.3712800000001, "r": 208.68912, "b": 622.15828 }, "text": "Physical Location of Affected System:", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 3 }, { "id": "p6.1.5", "order": 6, "type": "table_cell", "bbox": { "l": 270.12, "t": 635.616, "r": 503.52, "b": 602.688 }, "text": "", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 4 }, { "id": "p6.1.6", "order": 7, "type": "table_cell", "bbox": { "l": 41.64, "t": 587.69128, "r": 181.03176, "b": 578.47828 }, "text": "Additional Analysis Information:", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true }, "reading_order": 5 } ], "reading_order": 0 }, { "id": "p6.2", "order": 8, "type": "table", "bbox": { "l": 37.44, "t": 524.4, "r": 504.24, "b": 247.2 }, "text": "", "attrs": { "block_label": "table", "n_rows": 6, "n_cols": 2, "integrity": { "cells_checked": 6, "cells_flagged": 0 } }, "children": [ { "id": "p6.2.1", "order": 9, "type": "table_cell", "bbox": { "l": 41.64, "t": 520.246, "r": 244.15668, "b": 479.68828 }, "text": "7. Timeline\nDate and time when first detected, discovered or reported:", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "merged_continuation": true }, "reading_order": 0 }, { "id": "p6.2.2", "order": 10, "type": "table_cell", "bbox": { "l": 41.64, "t": 465.26128, "r": 203.26092, "b": 443.68828 }, "text": "Date and time when the incident first occurred:", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 1 }, { "id": "p6.2.3", "order": 11, "type": "table_cell", "bbox": { "l": 270.84, "t": 445.2, "r": 504.24, "b": 405.6 }, "text": "", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 2 }, { "id": "p6.2.4", "order": 12, "type": "table_cell", "bbox": { "l": 41.64, "t": 421.70128, "r": 204.79476, "b": 400.00828 }, "text": "Date and time when the incident was contained or services restored:", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 3 }, { "id": "p6.2.5", "order": 13, "type": "table_cell", "bbox": { "l": 270.84, "t": 405.6, "r": 504.24, "b": 366 }, "text": "", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 4 }, { "id": "p6.2.6", "order": 14, "type": "table_cell", "bbox": { "l": 41.64, "t": 378.02128, "r": 223.2108, "b": 343.9184 }, "text": "Date and time when Commonwealth “Determination of Breach Completed and Submitted”(If applicable)", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 5 }, { "id": "p6.2.7", "order": 15, "type": "table_cell", "bbox": { "l": 270.84, "t": 366, "r": 504.24, "b": 326.4 }, "text": "", "attrs": { "row": 3, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 6 }, { "id": "p6.2.8", "order": 16, "type": "table_cell", "bbox": { "l": 41.64, "t": 334.32128, "r": 246.94548, "b": 312.74828 }, "text": "Date and time when Affected Users Notified (If applicable)", "attrs": { "row": 4, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 7 }, { "id": "p6.2.9", "order": 17, "type": "table_cell", "bbox": { "l": 270.84, "t": 326.4, "r": 504.24, "b": 286.8 }, "text": "", "attrs": { "row": 4, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 8 }, { "id": "p6.2.10", "order": 18, "type": "table_cell", "bbox": { "l": 41.64, "t": 290.64128, "r": 155.433, "b": 281.42828 }, "text": "Detailed incident timeline:", "attrs": { "row": 5, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true }, "reading_order": 9 } ], "reading_order": 1 }, { "id": "p6.3", "order": 19, "type": "table", "bbox": { "l": 36.96, "t": 227.76, "r": 503.76, "b": 40.32 }, "text": "", "attrs": { "block_label": "table", "n_rows": 4, "n_cols": 2, "integrity": { "cells_checked": 4, "cells_flagged": 0 } }, "children": [ { "id": "p6.3.1", "order": 20, "type": "table_cell", "bbox": { "l": 41.64, "t": 223.226, "r": 241.00808, "b": 182.63828 }, "text": "8. Remediation and Post-Incident Summary\nActions Taken to Identify Affected Resources or Systems", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "merged_continuation": true }, "reading_order": 0 }, { "id": "p6.3.2", "order": 21, "type": "table_cell", "bbox": { "l": 41.64, "t": 168.21128, "r": 204.85452, "b": 158.99828000000002 }, "text": "Actions Taken to Remediate Incident", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 1 }, { "id": "p6.3.3", "order": 22, "type": "table_cell", "bbox": { "l": 270.36, "t": 152.784, "r": 503.76, "b": 115.296 }, "text": "", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 2 }, { "id": "p6.3.4", "order": 23, "type": "table_cell", "bbox": { "l": 41.64, "t": 124.65128000000004, "r": 227.58324, "b": 115.43827999999996 }, "text": "Actions Taken to Prevent Future Incidents", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 3 }, { "id": "p6.3.5", "order": 24, "type": "table_cell", "bbox": { "l": 270.36, "t": 115.296, "r": 503.76, "b": 77.808 }, "text": "", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 4 }, { "id": "p6.3.6", "order": 25, "type": "table_cell", "bbox": { "l": 41.64, "t": 80.97528, "r": 239.80416, "b": 59.40228000000002 }, "text": "Does existing administrative controls need to be amended?", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 5 }, { "id": "p6.3.7", "order": 26, "type": "table_cell", "bbox": { "l": 270.36, "t": 77.808, "r": 503.76, "b": 40.32 }, "text": "", "attrs": { "row": 3, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 6 } ], "reading_order": 2 } ] }, { "document_id": 13949, "page": 7, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 33, "counts_by_type": { "caption": 1, "table": 2, "table_cell": 30 }, "build_ms": 4, "items": [ { "id": "p7.1", "order": 1, "type": "table", "bbox": { "l": 36.48, "t": 757.68, "r": 503.28, "b": 581.76 }, "text": "", "attrs": { "block_label": "table", "n_rows": 4, "n_cols": 2, "integrity": { "cells_checked": 4, "cells_flagged": 0 } }, "children": [ { "id": "p7.1.1", "order": 2, "type": "table_cell", "bbox": { "l": 41.64, "t": 753.31128, "r": 180.99036, "b": 744.09828 }, "text": "Was the response appropriate?", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p7.1.2", "order": 3, "type": "table_cell", "bbox": { "l": 269.88, "t": 757.68, "r": 503.28, "b": 713.7 }, "text": "", "attrs": { "row": 0, "col": 1, "rowspan": 1, "colspan": 1, "column_header": true, "header_source": "pdf" }, "reading_order": 1 }, { "id": "p7.1.3", "order": 4, "type": "table_cell", "bbox": { "l": 41.64, "t": 709.61128, "r": 226.57728, "b": 688.03828 }, "text": "What lessons have been learned from the incident?", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 2 }, { "id": "p7.1.4", "order": 5, "type": "table_cell", "bbox": { "l": 269.88, "t": 713.7, "r": 503.28, "b": 669.72 }, "text": "", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 3 }, { "id": "p7.1.5", "order": 6, "type": "table_cell", "bbox": { "l": 41.64, "t": 665.93128, "r": 225.95976, "b": 656.71828 }, "text": "Should any Security Policies be updated?", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 4 }, { "id": "p7.1.6", "order": 7, "type": "table_cell", "bbox": { "l": 269.88, "t": 669.72, "r": 503.28, "b": 625.74 }, "text": "", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1 }, "reading_order": 5 }, { "id": "p7.1.7", "order": 8, "type": "table_cell", "bbox": { "l": 41.64, "t": 622.3712800000001, "r": 139.26792, "b": 613.15828 }, "text": "Additional Comments:", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true }, "reading_order": 6 } ], "reading_order": 0 }, { "id": "p7.2", "order": 9, "type": "caption", "bbox": { "l": 34.08, "t": 558.24, "r": 251.04, "b": 541.92 }, "text": "Appendix B: Incident Handling Checklist", "attrs": { "block_label": "figure_title" }, "reading_order": 1 }, { "id": "p7.3", "order": 10, "type": "table", "bbox": { "l": 34.8, "t": 513.12, "r": 504.48, "b": 143.76 }, "text": "", "attrs": { "block_label": "table", "n_rows": 9, "n_cols": 3, "integrity": { "cells_checked": 16, "cells_flagged": 0 } }, "children": [ { "id": "p7.3.1", "order": 11, "type": "table_cell", "bbox": { "l": 34.8, "t": 513.12, "r": 191.36, "b": 499.44 }, "text": "", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p7.3.2", "order": 12, "type": "table_cell", "bbox": { "l": 233.21, "t": 509.23672, "r": 267.55544, "b": 499.02472 }, "text": "Action", "attrs": { "row": 0, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 1 }, { "id": "p7.3.3", "order": 13, "type": "table_cell", "bbox": { "l": 439.15, "t": 509.23672, "r": 496.18264, "b": 499.02472 }, "text": "Completed", "attrs": { "row": 0, "col": 2, "rowspan": 1, "colspan": 1, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 2 }, { "id": "p7.3.4", "order": 14, "type": "table_cell", "bbox": { "l": 209.57, "t": 496.15672, "r": 330.74504, "b": 485.94472 }, "text": "Detection and Analysis", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 3, "bbox_refit": true }, "reading_order": 3 }, { "id": "p7.3.5", "order": 15, "type": "table_cell", "bbox": { "l": 41.64, "t": 482.95672, "r": 311.83784, "b": 420.18472 }, "text": "1\n1.1\n1.2\n1.3\nCommunication", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 4 }, { "id": "p7.3.6", "order": 16, "type": "table_cell", "bbox": { "l": 75.024, "t": 482.95672, "r": 369.2544, "b": 433.38472 }, "text": "Determine whether an incident has occurred\nReview Impact Categories\nDetermine if Restricted or Confidential Info was breached\nDetermine Systems Impacted", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 5 }, { "id": "p7.3.7", "order": 17, "type": "table_cell", "bbox": { "l": 347.92, "t": 485.76, "r": 504.48, "b": 472.08 }, "text": "", "attrs": { "row": 2, "col": 2, "rowspan": 1, "colspan": 1 }, "reading_order": 6 }, { "id": "p7.3.8", "order": 18, "type": "table_cell", "bbox": { "l": 41.64, "t": 417.19672, "r": 405.41456, "b": 380.70472 }, "text": "2\n3\nContainment, Eradication, Preservation of Evidence", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 7 }, { "id": "p7.3.9", "order": 19, "type": "table_cell", "bbox": { "l": 75.024, "t": 417.19672, "r": 368.03672, "b": 393.90472 }, "text": "Determine appropriate notification requirements.\nDevelop an action plan for meeting notification requirements", "attrs": { "row": 3, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 8 }, { "id": "p7.3.10", "order": 20, "type": "table_cell", "bbox": { "l": 347.92, "t": 417.36, "r": 504.48, "b": 403.68 }, "text": "", "attrs": { "row": 3, "col": 2, "rowspan": 1, "colspan": 1 }, "reading_order": 9 }, { "id": "p7.3.11", "order": 21, "type": "table_cell", "bbox": { "l": 41.64, "t": 377.83672, "r": 56.9856, "b": 288.64472 }, "text": "4\n5\n5.1\n5.2\n6\n6.1\n6.2", "attrs": { "row": 4, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 10 }, { "id": "p7.3.12", "order": 22, "type": "table_cell", "bbox": { "l": 75.024, "t": 377.83672, "r": 380.02944, "b": 276.04472 }, "text": "Acquire, preserve, secure and document evidence\nContain the incident\nStop potential loss of data\nPrevent further damage of compromised system and/or info\nEradicate the incident\nIdentify and mitigate all vulnerabilities that were exploited\nRemove all traces of the attack (Malware, inappropriate materials and/or other components)", "attrs": { "row": 4, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 11 }, { "id": "p7.3.13", "order": 23, "type": "table_cell", "bbox": { "l": 347.92, "t": 376.32, "r": 504.48, "b": 362.64 }, "text": "", "attrs": { "row": 4, "col": 2, "rowspan": 1, "colspan": 1 }, "reading_order": 12 }, { "id": "p7.3.14", "order": 24, "type": "table_cell", "bbox": { "l": 209.93, "t": 273.05672000000004, "r": 330.46472, "b": 262.84472000000005 }, "text": "Remediate the Incident", "attrs": { "row": 5, "col": 0, "rowspan": 1, "colspan": 3, "bbox_refit": true }, "reading_order": 13 }, { "id": "p7.3.15", "order": 25, "type": "table_cell", "bbox": { "l": 41.64, "t": 259.97672, "r": 310.2932, "b": 223.36472000000003 }, "text": "7\n8\nDocumentation", "attrs": { "row": 6, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 14 }, { "id": "p7.3.16", "order": 26, "type": "table_cell", "bbox": { "l": 75.024, "t": 259.97672, "r": 358.68576, "b": 236.56471999999997 }, "text": "Return affected system to an operationally ready state\nConfirm that the affected systems are functioning normally", "attrs": { "row": 6, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 15 }, { "id": "p7.3.17", "order": 27, "type": "table_cell", "bbox": { "l": 347.92, "t": 266.88, "r": 504.48, "b": 253.2 }, "text": "", "attrs": { "row": 6, "col": 2, "rowspan": 1, "colspan": 1 }, "reading_order": 16 }, { "id": "p7.3.18", "order": 28, "type": "table_cell", "bbox": { "l": 41.64, "t": 220.49671999999998, "r": 331.11224, "b": 183.97472000000005 }, "text": "9\n10\nPost-Incident Activities", "attrs": { "row": 7, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 17 }, { "id": "p7.3.19", "order": 29, "type": "table_cell", "bbox": { "l": 75.024, "t": 220.49671999999998, "r": 258.54192, "b": 197.08471999999995 }, "text": "Create and issue final reports.\nArchive evidence and documentation.", "attrs": { "row": 7, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 18 }, { "id": "p7.3.20", "order": 30, "type": "table_cell", "bbox": { "l": 347.92, "t": 225.84, "r": 504.48, "b": 212.16 }, "text": "", "attrs": { "row": 7, "col": 2, "rowspan": 1, "colspan": 1 }, "reading_order": 19 }, { "id": "p7.3.21", "order": 31, "type": "table_cell", "bbox": { "l": 41.64, "t": 180.98672, "r": 53.89828, "b": 144.49472000000003 }, "text": "11\n12\n13", "attrs": { "row": 8, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 20 }, { "id": "p7.3.22", "order": 32, "type": "table_cell", "bbox": { "l": 75.024, "t": 180.98672, "r": 388.68144, "b": 144.49472000000003 }, "text": "Determine lessons learned.\nMake recommendations to prevent subsequent similar incidents.\nClose out the incident.", "attrs": { "row": 8, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 21 }, { "id": "p7.3.23", "order": 33, "type": "table_cell", "bbox": { "l": 347.92, "t": 184.8, "r": 504.48, "b": 171.12 }, "text": "", "attrs": { "row": 8, "col": 2, "rowspan": 1, "colspan": 1 }, "reading_order": 22 } ], "reading_order": 2 } ] }, { "document_id": 13949, "page": 8, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 44, "counts_by_type": { "form_field": 4, "heading": 12, "list": 1, "list_item": 2, "table": 1, "table_cell": 19, "text": 4, "title": 1 }, "build_ms": 4, "items": [ { "id": "p8.1", "order": 1, "type": "title", "bbox": { "l": 33.6, "t": 756.96, "r": 480.24, "b": 718.08 }, "text": "Appendix C: Determined Breach Notification Form (Commonwealth Form FAC-001)\nDetermined Breach Notification Form", "attrs": { "block_label": "doc_title" }, "level": 2, "reading_order": 0 }, { "id": "p8.2", "order": 2, "type": "table", "bbox": { "l": 52.56, "t": 689.26, "r": 576.72, "b": 469.92 }, "text": "", "attrs": { "block_label": "table", "n_rows": 10, "n_cols": 2, "integrity": { "cells_checked": 10, "cells_flagged": 0 } }, "children": [ { "id": "p8.2.1", "order": 3, "type": "table_cell", "bbox": { "l": 55.92, "t": 689.26, "r": 463.84256, "b": 647.62 }, "text": "Section 1\nComplete and submit within 72 hours of determination or notification.\nDetermined", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 2, "bbox_refit": true, "merged_continuation": true }, "reading_order": 0 }, { "id": "p8.2.2", "order": 4, "type": "table_cell", "bbox": { "l": 52.56, "t": 644.64, "r": 314.64, "b": 630.08 }, "text": "□", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 1 }, { "id": "p8.2.3", "order": 5, "type": "table_cell", "bbox": { "l": 120.38, "t": 644.14, "r": 236.60912, "b": 633.1 }, "text": "Finance Cabinet Secretary", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 2 }, { "id": "p8.2.4", "order": 6, "type": "table_cell", "bbox": { "l": 52.56, "t": 630.08, "r": 314.64, "b": 615.52 }, "text": "□", "attrs": { "row": 2, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 3 }, { "id": "p8.2.5", "order": 7, "type": "table_cell", "bbox": { "l": 120.38, "t": 629.74, "r": 266.42624, "b": 618.7 }, "text": "Auditor of Public Accounts (APA)", "attrs": { "row": 2, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 4 }, { "id": "p8.2.6", "order": 8, "type": "table_cell", "bbox": { "l": 52.56, "t": 615.52, "r": 314.64, "b": 600.96 }, "text": "□", "attrs": { "row": 3, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 5 }, { "id": "p8.2.7", "order": 9, "type": "table_cell", "bbox": { "l": 120.38, "t": 615.1, "r": 241.8752, "b": 604.06 }, "text": "Kentucky State Police (KSP)", "attrs": { "row": 3, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 6 }, { "id": "p8.2.8", "order": 10, "type": "table_cell", "bbox": { "l": 52.56, "t": 600.96, "r": 314.64, "b": 586.4 }, "text": "□", "attrs": { "row": 4, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 7 }, { "id": "p8.2.9", "order": 11, "type": "table_cell", "bbox": { "l": 120.38, "t": 600.58, "r": 220.33616, "b": 589.54 }, "text": "Attorney General (AG)", "attrs": { "row": 4, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 8 }, { "id": "p8.2.10", "order": 12, "type": "table_cell", "bbox": { "l": 52.56, "t": 586.4, "r": 314.64, "b": 571.84 }, "text": "□", "attrs": { "row": 5, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 9 }, { "id": "p8.2.11", "order": 13, "type": "table_cell", "bbox": { "l": 120.38, "t": 586.06, "r": 456.9896, "b": 575.02 }, "text": "Commissioner of Department of Library and Archives, if breach determined", "attrs": { "row": 5, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 10 }, { "id": "p8.2.12", "order": 14, "type": "table_cell", "bbox": { "l": 52.56, "t": 571.84, "r": 314.64, "b": 557.28 }, "text": "□", "attrs": { "row": 6, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 11 }, { "id": "p8.2.13", "order": 15, "type": "table_cell", "bbox": { "l": 120.38, "t": 571.42, "r": 471.0332, "b": 545.86 }, "text": "Chief Information Officer of Commonwealth Office of Technology\nIf Department of Local Government under KRS 61.931(1)(b) or (c) also contact:", "attrs": { "row": 6, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 12 }, { "id": "p8.2.14", "order": 16, "type": "table_cell", "bbox": { "l": 52.56, "t": 542.72, "r": 314.64, "b": 528.16 }, "text": "□", "attrs": { "row": 7, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 13 }, { "id": "p8.2.15", "order": 17, "type": "table_cell", "bbox": { "l": 120.38, "t": 542.35, "r": 396.41312, "b": 516.79 }, "text": "Commissioner of Department of Local Government\nIf Public School District listed in KRS 61.931(1)(d) also contact:", "attrs": { "row": 7, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 14 }, { "id": "p8.2.16", "order": 18, "type": "table_cell", "bbox": { "l": 52.56, "t": 513.6, "r": 314.64, "b": 499.04 }, "text": "□", "attrs": { "row": 8, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 15 }, { "id": "p8.2.17", "order": 19, "type": "table_cell", "bbox": { "l": 120.38, "t": 513.4300000000001, "r": 401.97296, "b": 487.75 }, "text": "Commissioner of Kentucky Department of Education\nIf Educational entity listed under KRS 61.931(1)(e) also contact:", "attrs": { "row": 8, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 16 }, { "id": "p8.2.18", "order": 20, "type": "table_cell", "bbox": { "l": 52.56, "t": 484.48, "r": 314.64, "b": 469.92 }, "text": "□", "attrs": { "row": 9, "col": 0, "rowspan": 1, "colspan": 1 }, "reading_order": 17 }, { "id": "p8.2.19", "order": 21, "type": "table_cell", "bbox": { "l": 141.14, "t": 484.39, "r": 359.85344, "b": 473.35 }, "text": "President of Council on Postsecondary Education", "attrs": { "row": 9, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true }, "reading_order": 18 } ], "reading_order": 1 }, { "id": "p8.3", "order": 22, "type": "heading", "bbox": { "l": 39.12, "t": 443.52, "r": 108, "b": 429.36 }, "text": "Agency Name:", "level": 3, "reading_order": 2 }, { "id": "p8.4", "order": 23, "type": "heading", "bbox": { "l": 38.88, "t": 413.76, "r": 116.16, "b": 399.84 }, "text": "Agency Contact:", "level": 3, "reading_order": 3 }, { "id": "p8.5", "order": 24, "type": "heading", "bbox": { "l": 39.12, "t": 393.12, "r": 142.56, "b": 379.2 }, "text": "Agency Contact Email:", "level": 3, "reading_order": 4 }, { "id": "p8.6", "order": 25, "type": "heading", "bbox": { "l": 37.44, "t": 372, "r": 577.2, "b": 356.16 }, "text": "Agency Contact Phone Number:", "level": 3, "reading_order": 5 }, { "id": "p8.7", "order": 26, "type": "list", "bbox": { "l": 41.4, "t": 334.85, "r": 480.2332, "b": 302.81 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p8.7.1", "order": 27, "type": "list_item", "bbox": { "l": 41.4, "t": 334.85, "r": 480.2332, "b": 323.81 }, "text": "Date of Notification to Agencies: ___ Time of Notification: ___", "reading_order": 0 }, { "id": "p8.7.2", "order": 28, "type": "list_item", "bbox": { "l": 41.4, "t": 313.85, "r": 155.08992, "b": 302.81 }, "text": "Date Breach Determined: ___", "reading_order": 1 } ], "reading_order": 6 }, { "id": "p8.8", "order": 29, "type": "heading", "bbox": { "l": 280.56, "t": 282.72, "r": 330.96, "b": 269.52 }, "text": "Section 2", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 7 }, { "id": "p8.9", "order": 30, "type": "text", "bbox": { "l": 38.64, "t": 267.84, "r": 565.68, "b": 223.92 }, "text": "Complete this portion after the conclusion of the investigation regarding whether the Security Breach has resulted in or is likely to result in the misuse of personal information. Provide notice to agencies within 48 hours of completing investigation.", "reading_order": 8 }, { "id": "p8.10", "order": 31, "type": "text", "bbox": { "l": 39.12, "t": 200.16, "r": 269.04, "b": 185.52 }, "text": "Personal Information Breached: □ Yes □ No", "children": [ { "id": "p8.10.1", "order": 32, "type": "form_field", "bbox": { "l": 212.96, "t": 200.16, "r": 224.96, "b": 188.16 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Yes", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p8.10", "text_offset": 31, "text_span": 1 }, "reading_order": 0 }, { "id": "p8.10.2", "order": 33, "type": "form_field", "bbox": { "l": 246.61, "t": 200.16, "r": 258.61, "b": 188.16 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "No", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p8.10", "text_offset": 37, "text_span": 1 }, "reading_order": 1 } ], "reading_order": 9 }, { "id": "p8.11", "order": 34, "type": "heading", "bbox": { "l": 66.72, "t": 180.48, "r": 135.84, "b": 167.04 }, "text": "If Yes, Explain:", "level": 3, "reading_order": 10 }, { "id": "p8.12", "order": 35, "type": "text", "bbox": { "l": 66.96, "t": 161.76, "r": 473.04, "b": 148.8 }, "text": "Total Number of Individuals Impacted: Date Individuals Notified:", "reading_order": 11 }, { "id": "p8.13", "order": 36, "type": "text", "bbox": { "l": 66.96, "t": 142.32, "r": 359.04, "b": 129.12 }, "text": "Type of Notices Sent Out (select all that apply and provide explanations):", "reading_order": 12 }, { "id": "p8.14", "order": 37, "type": "heading", "bbox": { "l": 336.48, "t": 125.04, "r": 383.52, "b": 110.4 }, "text": "Email:", "level": 3, "reading_order": 13 }, { "id": "p8.15", "order": 38, "type": "heading", "bbox": { "l": 67.2, "t": 124.56, "r": 383.04, "b": 110.16 }, "text": "Web Posting:", "level": 3, "reading_order": 14 }, { "id": "p8.16", "order": 39, "type": "heading", "bbox": { "l": 336.48, "t": 106.08, "r": 405.84, "b": 92.4 }, "text": "Telephone:", "level": 3, "reading_order": 15 }, { "id": "p8.17", "order": 40, "type": "heading", "bbox": { "l": 68.64, "t": 105.84, "r": 405.6, "b": 92.88 }, "text": "Local or Regional Media:", "level": 3, "reading_order": 16 }, { "id": "p8.18", "order": 41, "type": "heading", "bbox": { "l": 336.48, "t": 88.32, "r": 384.72, "b": 73.92 }, "text": "□ Other:", "children": [ { "id": "p8.18.1", "order": 42, "type": "form_field", "bbox": { "l": 336.48, "t": 88.32, "r": 348.48, "b": 76.32 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "□ Other:", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p8.18", "text_offset": 0, "text_span": 1 }, "reading_order": 0 } ], "level": 3, "reading_order": 17 }, { "id": "p8.19", "order": 43, "type": "heading", "bbox": { "l": 67.44, "t": 87.84, "r": 383.52, "b": 73.68 }, "text": "□ Letter:", "children": [ { "id": "p8.19.1", "order": 44, "type": "form_field", "bbox": { "l": 67.44, "t": 87.84, "r": 79.44, "b": 75.84 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "□ Letter:", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p8.19", "text_offset": 0, "text_span": 1 }, "reading_order": 0 } ], "level": 3, "reading_order": 18 } ] }, { "document_id": 13949, "page": 9, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 30, "counts_by_type": { "form_field": 6, "heading": 3, "link": 2, "list": 1, "list_item": 2, "table": 1, "table_cell": 1, "text": 14 }, "build_ms": 3, "items": [ { "id": "p9.1", "order": 1, "type": "text", "bbox": { "l": 296.64, "t": 750.96, "r": 450.24, "b": 735.6 }, "text": "□ Yes □ No If Yes, Date:", "children": [ { "id": "p9.1.1", "order": 2, "type": "form_field", "bbox": { "l": 296.64, "t": 750.96, "r": 308.64, "b": 738.96 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Yes", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p9.1", "text_offset": 0, "text_span": 1 }, "reading_order": 0 }, { "id": "p9.1.2", "order": 3, "type": "form_field", "bbox": { "l": 335.04, "t": 750.96, "r": 347.04, "b": 738.96 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "No If Yes, Date:", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p9.1", "text_offset": 6, "text_span": 1 }, "reading_order": 1 } ], "reading_order": 0 }, { "id": "p9.2", "order": 4, "type": "text", "bbox": { "l": 40.08, "t": 750.24, "r": 455.76, "b": 735.6 }, "text": "Did You Notify Consumer Credit Reporting Agencies?", "reading_order": 1 }, { "id": "p9.3", "order": 5, "type": "text", "bbox": { "l": 455.04, "t": 736.08, "r": 576.96, "b": 724.56 }, "text": "___", "reading_order": 2 }, { "id": "p9.4", "order": 6, "type": "text", "bbox": { "l": 39.36, "t": 724.32, "r": 578.88, "b": 696.96 }, "text": "Any Other Breach Compliance Requirements Apply such as □ Yes □ No\nFederal?", "children": [ { "id": "p9.4.1", "order": 7, "type": "form_field", "bbox": { "l": 495.88, "t": 724.32, "r": 507.88, "b": 712.32 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Yes", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p9.4", "text_offset": 55, "text_span": 1 }, "reading_order": 0 }, { "id": "p9.4.2", "order": 8, "type": "form_field", "bbox": { "l": 545.68, "t": 724.32, "r": 557.68, "b": 712.32 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "No", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p9.4", "text_offset": 61, "text_span": 1 }, "reading_order": 1 } ], "reading_order": 3 }, { "id": "p9.5", "order": 9, "type": "heading", "bbox": { "l": 75.84, "t": 688.56, "r": 144, "b": 675.36 }, "text": "If Yes, Explain:", "level": 3, "reading_order": 4 }, { "id": "p9.6", "order": 10, "type": "text", "bbox": { "l": 152.16, "t": 646.8, "r": 225.36, "b": 630.72 }, "text": "□ Yes □ No", "children": [ { "id": "p9.6.1", "order": 11, "type": "form_field", "bbox": { "l": 152.16, "t": 646.8, "r": 164.16, "b": 634.8 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "Yes", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p9.6", "text_offset": 0, "text_span": 1 }, "reading_order": 0 }, { "id": "p9.6.2", "order": 12, "type": "form_field", "bbox": { "l": 196.08, "t": 646.8, "r": 208.08, "b": 634.8 }, "text": "", "attrs": { "field_kind": "checkbox", "label": "No", "source": "glyph_estimate", "bbox_estimated": true, "label_source": "parent_text", "label_ref": "p9.6", "text_offset": 6, "text_span": 1 }, "reading_order": 1 } ], "reading_order": 5 }, { "id": "p9.7", "order": 13, "type": "heading", "bbox": { "l": 39.84, "t": 646.32, "r": 225.84, "b": 631.2 }, "text": "Third Party Breach:", "level": 3, "reading_order": 6 }, { "id": "p9.8", "order": 14, "type": "list", "bbox": { "l": 78.144, "t": 622.9, "r": 297.5088, "b": 590.86 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p9.8.1", "order": 15, "type": "list_item", "bbox": { "l": 78.144, "t": 622.9, "r": 188.45136, "b": 611.86 }, "text": "If Yes, Third Party Name: ___", "reading_order": 0 }, { "id": "p9.8.2", "order": 16, "type": "list_item", "bbox": { "l": 78.144, "t": 601.9, "r": 297.5088, "b": 590.86 }, "text": "If Third Party Involved, When Did They Notify the", "reading_order": 1 } ], "reading_order": 7 }, { "id": "p9.9", "order": 17, "type": "heading", "bbox": { "l": 75.84, "t": 587.76, "r": 115.2, "b": 575.52 }, "text": "Agency:", "level": 3, "reading_order": 8 }, { "id": "p9.10", "order": 18, "type": "text", "bbox": { "l": 34.08, "t": 548.88, "r": 564.96, "b": 521.52 }, "text": "If a delay then please attach the delay notification record along with supporting documentation. Was there a delay due to:", "reading_order": 9 }, { "id": "p9.11", "order": 19, "type": "text", "bbox": { "l": 57.36, "t": 507.12, "r": 390.72, "b": 493.92 }, "text": "Law enforcement investigation. Reference to KRS 61.933 (3)(a)", "reading_order": 10 }, { "id": "p9.12", "order": 20, "type": "text", "bbox": { "l": 55.2, "t": 492.48, "r": 570.96, "b": 438 }, "text": "An agency determines that measures necessary to restore the reasonable integrity of the data system cannot be implemented within the timeframe established and will delay the breach determination. Delay will need to be approved in writing from the Office of the Attorney General. Reference to KRS 61.933 (3)(b)", "reading_order": 11 }, { "id": "p9.13", "order": 21, "type": "table", "bbox": { "l": 33.6, "t": 411.6, "r": 575.04, "b": 378.24 }, "text": "", "attrs": { "block_label": "table", "n_rows": 1, "n_cols": 1, "integrity": { "cells_checked": 1, "cells_flagged": 0 } }, "children": [ { "id": "p9.13.1", "order": 22, "type": "table_cell", "bbox": { "l": 86.424, "t": 406.51, "r": 525.34128, "b": 379.87 }, "text": "Section 3\nComplete and submit at the conclusion of the investigation and any notice and resolution process.", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 } ], "reading_order": 12 }, { "id": "p9.14", "order": 23, "type": "text", "bbox": { "l": 34.08, "t": 361.2, "r": 576.96, "b": 319.44 }, "text": "Actions Taken to Resolve Breach:", "reading_order": 13 }, { "id": "p9.15", "order": 24, "type": "text", "bbox": { "l": 39.12, "t": 295.68, "r": 360.72, "b": 282.72 }, "text": "Actions Taken to Prevent Additional Security Breaches in Future, if any:", "reading_order": 14 }, { "id": "p9.16", "order": 25, "type": "text", "bbox": { "l": 38.64, "t": 231.84, "r": 534.24, "b": 204.96 }, "text": "A General Description of what Actions are Taken as a Matter of Course to Protect Personal Data from Security Breaches:", "reading_order": 15 }, { "id": "p9.17", "order": 26, "type": "text", "bbox": { "l": 34.8, "t": 190.56, "r": 577.44, "b": 176.88 }, "text": "
\"Image\"
", "reading_order": 16 }, { "id": "p9.18", "order": 27, "type": "text", "bbox": { "l": 38.88, "t": 153.84, "r": 397.44, "b": 140.16 }, "text": "Any Quantifiable Financial Impact to the Agency Reporting the Security Breach:", "reading_order": 17 }, { "id": "p9.19", "order": 28, "type": "text", "bbox": { "l": 33.6, "t": 81.6, "r": 454.32, "b": 53.28 }, "text": "KRS 61.931 to 61.934 - https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=43575\nKRS 42.726 - https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=55894", "children": [ { "id": "p9.19.1", "order": 29, "type": "link", "bbox": { "l": 136.83, "t": 81.608, "r": 454.93, "b": 67.977 }, "text": "https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=43575", "attrs": { "uri": "https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=43575", "action_type": "/URI" }, "reading_order": 0 }, { "id": "p9.19.2", "order": 30, "type": "link", "bbox": { "l": 91.828, "t": 67.977, "r": 395.61, "b": 54.549 }, "text": "https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=55894", "attrs": { "uri": "https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=55894", "action_type": "/URI" }, "reading_order": 1 } ], "reading_order": 18 } ] }, { "document_id": 13949, "page": 10, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14060, "item_count": 21, "counts_by_type": { "heading": 3, "link": 1, "list": 1, "list_item": 4, "table": 2, "table_cell": 10 }, "build_ms": 1, "items": [ { "id": "p10.1", "order": 1, "type": "heading", "bbox": { "l": 33.6, "t": 739.68, "r": 266.64, "b": 725.52 }, "text": "REFERENCES AND RELATED MATERIALS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 0 }, { "id": "p10.2", "order": 2, "type": "list", "bbox": { "l": 54, "t": 706.9, "r": 282.3968, "b": 653.74 }, "text": "", "attrs": { "item_count": 4 }, "children": [ { "id": "p10.2.1", "order": 3, "type": "list_item", "bbox": { "l": 54, "t": 706.9, "r": 184.83504, "b": 695.86 }, "text": "KSU Data Classification Policy", "reading_order": 0 }, { "id": "p10.2.2", "order": 4, "type": "list_item", "bbox": { "l": 54, "t": 692.86, "r": 224.47968, "b": 681.8199999999999 }, "text": "KSU Data Security Controls Regulation", "reading_order": 1 }, { "id": "p10.2.3", "order": 5, "type": "list_item", "bbox": { "l": 54, "t": 678.8199999999999, "r": 240.6864, "b": 667.78 }, "text": "KSU Data Access Management Regulation", "reading_order": 2 }, { "id": "p10.2.4", "order": 6, "type": "list_item", "bbox": { "l": 54, "t": 664.78, "r": 282.3968, "b": 653.74 }, "text": "KSU Data Backup and Disaster Recovery Regulation", "reading_order": 3 } ], "reading_order": 1 }, { "id": "p10.3", "order": 7, "type": "heading", "bbox": { "l": 34.56, "t": 629.04, "r": 102.24, "b": 615.36 }, "text": "CONTACTS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 2 }, { "id": "p10.4", "order": 8, "type": "table", "bbox": { "l": 34.56, "t": 599.76, "r": 576.96, "b": 570.24 }, "text": "", "attrs": { "block_label": "table", "n_rows": 1, "n_cols": 4, "integrity": { "cells_checked": 4, "cells_flagged": 0 } }, "children": [ { "id": "p10.4.1", "order": 9, "type": "table_cell", "bbox": { "l": 41.64, "t": 596.62, "r": 124.52832, "b": 571.66 }, "text": "Subject\nGeneral Questions", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p10.4.2", "order": 10, "type": "table_cell", "bbox": { "l": 189.86, "t": 596.62, "r": 264.12608, "b": 571.66 }, "text": "Office\nOffice of the CIO", "attrs": { "row": 0, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 1 }, { "id": "p10.4.3", "order": 11, "type": "table_cell", "bbox": { "l": 328.27, "t": 596.62, "r": 396.61768, "b": 571.66 }, "text": "Telephone\n(502) 597-7000", "attrs": { "row": 0, "col": 2, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 2 }, { "id": "p10.4.4", "order": 12, "type": "table_cell", "bbox": { "l": 438.91, "t": 596.62, "r": 545.37976, "b": 571.66 }, "text": "E-mail\nWendy.Dixie@kysu.edu", "attrs": { "row": 0, "col": 3, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "children": [ { "id": "p10.4.4.1", "order": 13, "type": "link", "bbox": { "l": 436.65, "t": 584.9, "r": 547.48, "b": 571.48 }, "text": "Wendy.Dixie@kysu.edu", "attrs": { "uri": "mailto:Wendy.Dixie@kysu.edu", "action_type": "/URI", "row": 0, "col": 3, "rowspan": 1, "colspan": 1 }, "reading_order": 0 } ], "reading_order": 3 } ], "reading_order": 3 }, { "id": "p10.5", "order": 14, "type": "heading", "bbox": { "l": 34.32, "t": 554.4, "r": 90, "b": 540.72 }, "text": "HISTORY:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 4 }, { "id": "p10.6", "order": 15, "type": "table", "bbox": { "l": 35.04, "t": 524.88, "r": 575.76, "b": 468.24 }, "text": "", "attrs": { "block_label": "table", "n_rows": 2, "n_cols": 3, "integrity": { "cells_checked": 6, "cells_flagged": 0 } }, "children": [ { "id": "p10.6.1", "order": 16, "type": "table_cell", "bbox": { "l": 41.64, "t": 521.95, "r": 103.16592, "b": 510.91 }, "text": "Revision Type", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p10.6.2", "order": 17, "type": "table_cell", "bbox": { "l": 302.45, "t": 521.95, "r": 382.50104, "b": 497.47 }, "text": "Date of Issuance/Revision", "attrs": { "row": 0, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 1 }, { "id": "p10.6.3", "order": 18, "type": "table_cell", "bbox": { "l": 423.91, "t": 521.95, "r": 509.4148, "b": 510.91 }, "text": "Drafter(s)/Editor(s)", "attrs": { "row": 0, "col": 2, "rowspan": 1, "colspan": 1, "bbox_refit": true, "column_header": true, "header_source": "pdf" }, "reading_order": 2 }, { "id": "p10.6.4", "order": 19, "type": "table_cell", "bbox": { "l": 41.64, "t": 494.59, "r": 268.85424, "b": 469.51 }, "text": "Issued (New Policy)\nRevised (New Template and Substantive Revisions)", "attrs": { "row": 1, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 3 }, { "id": "p10.6.5", "order": 20, "type": "table_cell", "bbox": { "l": 302.45, "t": 494.59, "r": 376.64984, "b": 469.51 }, "text": "September 2019\nJune 2025", "attrs": { "row": 1, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 4 }, { "id": "p10.6.6", "order": 21, "type": "table_cell", "bbox": { "l": 423.91, "t": 494.59, "r": 480.40168, "b": 469.51 }, "text": "Wendy Dixie\nZach Atwell", "attrs": { "row": 1, "col": 2, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 5 } ], "reading_order": 5 } ] } ] }