The security plan includes regular vulnerability assessments, security audits, mitigation efforts, at all levels of the company from site to corporate and physical security upgrades designed to reduce vulnerability.