The DPISC assists the Board in the performance of its functions to (i) promote and foster a culture of data privacy and information security governance; ( ii ) review and approve the Company’s strategic plans on data privacy and information security; ( iii ) ensure accountability for compliance with regulatory standards and best practices on data privacy and information security; and (iv) oversee Management’s adoption and implementation of a system for identifying, assessing, monitoring, and managing enterprise-wide data privacy and information security risks, including its framework, structure, policies, standards, and processes.