The team evaluates the security posture against internal Zillow Group policies and standards and industry best practices using information gathered from product teams, vendors, third-party management tools and media or news outlets.