The chief operating officer and chief information officer report regularly to the board and its Audit and Oversight committee about the company’s enterprise risks, which include cybersecurity matters.