… , and operational controls as well as specific management elements such as background checking of employees, data security reviews, business oversight of performance …