The Board Enterprise Risk Committee (ERC) provides oversight of our Information Security Program and receives regular reports on the status of the Program and related items of importance including, but not limited to: technology risk assessments, testing, monitoring, patching, security awareness training, contingency planning, oversight of service providers, control procedures, response programs, significant violations of security policy, and breaches resulting in the loss or misuse of information.