persons in (1), (2), or (3), or had but such person died before the payment is made, the portion of the payment otherwise entitled to such person shall be allocated to the persons who are alive in the

defining responsible personnel to report and deal with malware threats; (4) regular reviews of the software and data content of systems supporting critical activities . The presence of any unapproved