We continually test the effectiveness of our controls and data protection processes through internal and independent systems audits and assessments, including regular penetration tests, application code reviews, vulnerability scans, disaster recovery tests and cyber exercises to simulate hacker attacks.