Additionally, the effectiveness of Cigna’s overall cybersecurity program is frequently evaluated by reputable and independent firms through various levels of controls assessments such as external penetration tests, advanced attack simulations (red team exercises), and Service Organizational Control (SOC) 2 audits.