We strengthened and automated our processes for the detection of fraudulent browsing, established guidelines for the development of information security awareness campaigns, provided follow-up in connection with security breaches and with our risk management processes and access controls, and defined our strategy for mitigating advanced persistent threats (APTs)2.