Webster’s program and its components are assessed periodically by various external and internal parties, including expert cybersecurity firms and penetration testers, banking regulators and Webster Internal Audit.