On an annual basis, and more frequently as needed, the Chief Security Officer (CSO) provides a comprehensive assessment of the program and related risks and vulnerabilities to the Audit Committee of the Board of Directors.