Security Program suspicious security related activity, multi-factor authentication, least privileged access rights, endpoint security, vulnerability and patch management policies and processes, and continuous penetration testing.