In addition, various mechanisms are used to ensure that information security and cyber security remains relevant, such as management self-assessments, independent security reviews, internal- and external audits and management oversight processes.