■ Internal audits: through our Internal Audit program we review information technology and data protection issues when they are identified as high risk through our annual Enterprise Risk and Control Assessment Survey ■ Security development methods and governance controls: security is a core foundation in both the design and the associated governance processes that result in designs being approved ■ Vulnerability Management Program: this includes both a vulnerability assessment and a security threat assessment.