We have established an operational risk governance framework that addresses these risks through policies and procedures, risk assessments, risk tolerance, information risk oversight, supplier risk management and training.