Our program includes multiple components that act as an additional line of defense—among them are regular testing, tabletop exercises, cybersecurity exercises, audit and maintenance, awareness and training, business impact analysis, and risk evaluation and controls.