Papa John’s conducts both annual internal and third-party risk assessments to continuously evaluate the effectiveness of its security controls and identify new threats and vulnerabilities and appropriate controls to mitigate risks.