Senior management reviews BMO’s information security management program at regular intervals in order to ensure that its provisions remain appropriate, effective and sufficient, and to make timely decisions in support of continuous improvement.