P. Threat management An established threat management program is in place, which includes regular antivirus updates, threat intelligence, security information & event management), and security operations centre.