The Firm’s information security and data protection program, led by our Chief Information Security Officer, includes security governance, security awareness, employee training, access management, perimeter and end-point security, vulnerability management, penetration testing, security monitoring and incident response.