Our Internal Audit function performs regular (and at a minimum annual) audits of our systems, and works with third-party auditors on an as needed basis, but at least annually, to test not only our operational systems but also our incident response plans and storage services.