The policy-level committees, which are cross-functional, meet periodically and review and assess relevant information regarding our practices to manage privacy and information security risk and make recommendations to enhance our existing practices that are then implemented through operational and information services groups.