Four years into the strategy, many of our operations are still in the first ‘be disciplined’ compliance-based stage – though some are now targeting the more advanced ‘be proactive’ and ‘build resilience’ stages.