Annual audits Multiple internal audits of the company’s information risk management practices are conducted each year, including an annual holistic audit covering the company’s information security processes.