Management briefs the Audit Committee on an annual basis about Cigna’s cyber security and privacy strategy and program, with a focus on items such as current trends in the environment, incident preparedness, business continuity management, program governance, and program components, including updates on security processes, external testing, and employee training and awareness initiatives.