The TELUS Chief Security Office has procedures, guidance and controls to manage data privacy and security, including: y Policies governing our information technology: these policies govern the management of information technology assets and resources, enterprise networks, telecommunications networks and other physical assets used to deliver safe and secure products and services to our customers y Security development methods and governance controls: security is a core foundation in the governance processes related to project design for products and services y Vulnerability Management Program: this includes both a daily vulnerability assessment and emerging security threat assessment y Intrusion prevention systems: these systems monitor TELUS’ network for malicious traffic and drop traffic based on certain rules y Mobile encryption: TELUS protects data on laptops to mitigate data leakage risks from the loss or theft of portable devices.