Metrics and Accountability

Third party threat metrics have been set and accountability for monitoring systems (including the disclosure hotline) and identifying gaps and vulnerabilities has been assigned to management