An Information Security Governance Committee reviews, approves, ranks, and treats all risks that could potentially impact the organization and is overseen by the Audit Committee of the Board of Directors.