We require our external suppliers and partners to meet defined minimum security standards and we conduct risk assessments and due diligence exercises to provide assurance that these are being met in practice.