5-Attachment 8_Supplement 4 of 5.pdf

This document is a Certificate of Registration issued by Coalfire ISO, Inc., certifying that Iron Mountain Information Management, LLC, located at 1 Federal Street in Boston, Massachusetts, operates an Information Security Management System (ISMS) that conforms to the ISO/IEC 27001:2013 standard. The certificate was originally registered on December 20, 2019, with a certification issue date of December 16, 2020, and an expiration date of December 20, 2022. The certification is accredited by ANAB (ANSI National Accreditation Board) and includes multiple locations: the central office in Boston, MA, and two data centers in Kansas City, MO, and Boyers, PA.

The scope of the certification covers Iron Mountain's Information Security Management System supporting operations underlying the Iron Mountain Insight service offering. The organizational scope encompasses Engineering, Product Support, DevOps, Product Management, Business Operations/Program Management, Sales, and InSight Governance, Risk, and Compliance teams. The site categorization indicates that the central office is where top management personnel report and facilitate centralized management activities, while the data centers in Kansas City and Boyers securely house organizational assets and information processing facilities. The certificate emphasizes that it relates to the management system and not specific products or services.