In order to prepare for and respond to cybersecurity threats, AIG’s Information Security Office maintains a program that is designed to protect and preserve the confidentiality, integrity and availability of all information owned by, or in the care of, th 	AIG is also an active member of sector-wide cyber information sharing organizations and partners with other companies, industries, and law enforcement to communicate information about the latest cyber threats and to leverage threat modeling insights into 	Additionally, AIG continues to mature its threat-hunting, defense, and analytics capabilities, proactively searching for and identifying evidence of malicious attacks and testing the company’s cybersecurity defenses to analyze how the firm should continua 	AIG maintains a suite of information security, privacy and data protection-related policies, standards, procedures, and guidelines—specifically leveraging widely accepted industry frameworks such as National Institute of Standards and Technology (NIST) Cy 	We also maintain cyber and privacy incident response plans that outline the appropriate processes and procedures for incident management (including minimizing impact, investigating, and remediating root cause) and complying with applicable legal requireme 	We require mandatory cybersecurity awareness and information handling and privacy training for all of our employees, at the time of onboarding and on an annual basis.