In addition, the Company undergoes an annual data penetration test, vulnerability assessment, and off-site disaster recovery test, to assess our data security infrastructure and recovery abilities, and the Company has external information security assurance and audit activities performed by qualified, independent professional service firms which validate the effectiveness of the information systems and cyber security program and controls.