The Audit and Oversight Committee regularly hears reports from management on our major risk exposures in such areas as regulatory compliance, environmental, legal/litigation, technology security (cybersecurity) and ethical conduct, as well as steps taken to monitor and control such exposures.