By receiving at least quarterly reports, the board of directors and the risk mitigation and investment policy committee help ensure that Essential is devoting the appropriate amount of resources to prevent a cybersecurity breach and that there is a clear response plan in the event of a breach.