Our Information Security Office defines and implements enterprise-wide policies and has developed a security framework, which controls user authentication and authorization and includes intrusion detection software and firewalls at all entry points to the network.