In response to information security risk, the Risk Management Working Group not only summarizes patterns of potential losses (including loss of goodwill, interruptions to operations, and data leakage), but also works with the IT Department to consolidate the basic capital operation principles and plans laid out below, as well as the gradual implementation of the ISO security specification standard.