Primerica institutes a three-lines-of-defense model for information security risk assurance, in which our internal management owns risk, our enterprise risk management team oversees risk and assesses compliance with policy, and our internal audit team provides independent assurance.