It also directly oversees information technology and information security activities and risks through regular reports from management on information technology, cyber security, and related risk assessments.