The purpose of this document is to outline Andrews Duffy’s project plan to supporting your Risk Management and IT Compliance function in the form of independently assess the; • The IT Infrastructure Risk from an external security perspective, Penetration Test. • Security review of the IT internal network for CU CLIENT A. The objective is to support IT’s Compliance and Governance obligations and address the Regulatory IT Governance and Compliance expectations.