The Information Security Program includes layered controls of network intrusion detection and prevention, enterprise malware protection, advanced persistent threat monitoring and data protection capabilities; further, this program adopts the philosophy of least privileged, which is the practice for limiting access rights for users to the minimum permissions needed to perform work responsibilities.