Besides formulating relevant procedures for the timely reporting and handling of information security incidents and to lower the scope of damage, we commissioned a third-party auditor to conduct annual audits and reviews of our information security performance.