Our information technology owners remediate vulnerabilities identified within established timeframes and report to management on a weekly basis regarding the security risk posture of our information technology assets.