Mitigating actions taken: Existing mitigating factors include IT recovery centers in multiple regions, a Crisis Management Framework and the option to duplicate some critical data to international hubs.