We face risk of attack from outside the company as well as risk from internal threats to information security, ranging from negligent employees to dishonest consultants, which could compromise our business or disrupt operations.