We obtain independent audits of our information security program, engage third-party companies annually to conduct internal and external penetration testing, and conduct internal security risk assessments.