In response to information security risk, the Risk Management Working Group not only summarizes patterns of potential losses (including loss of goodwill, interruptions to operations, and data leakage), but also works with the IT Department to consolidate the basic capital operation principles and work toward ongoing refinements, helping earn ISO information security certification in 2019.