IAD’s reports are provided to the global head of information technology and the chief information security officer for review and correction, and updates are provided to the audit committee during quarterly meetings.