To achieve these objectives, the Data Protection and Privacy Program coordinates and oversees risk and control assessments across our information security, privacy, physical security and enterprise readiness risk programs, as well as business line quality assurance programs.