Incident logging Policy our Audit and Risk Committee oversees the Information Security Policy and has designated our Chief Financial officer as the executive responsible for: establishing and maintaining the practices and procedures necessary to implement the Information Security Policy, providing training to our personnel on the substance of the Information Security Policy when appropriate and, at least once annually, reporting to the Audit and Risk Committee on the operation of and compliance with the Policy.