Such ongoing improvement efforts may include the results of incident response readiness and maturity capability assessments, periodically led by third parties who provide an independent assessment of the company’s technical program and the company’s internal response preparedness.