Data Trust and Resilience Report 2026

A little over a year ago, there was an event related to one of our cybersecurity platforms that created a quality assurance issue. That forced us into a resiliency and recoverability mindset. While I think our policies were good and helped control some of the chaos, most of the recoverability was based on heroics, not necessarily from sound governance and good practices that validate that resiliency."

We are constantly working toward educating each employee and having a safe zero trust approach to physical security, as well as software and hardware security, with multi-factor authentication (MFA) and biometrics. We always need to be using the latest patches, processes, and methods to make our risk surface as small as possible and are trying to use AI tools to manage known and unknown threats."

We communicate our cybersecurity KPIs to the board of directors in every board meeting, and they are communicated to executives weekly, monthly, and quarterly. It's part of running our operations. We need to be very clear and concise about what represents a significant risk, though, because we don't want to steal time or energy from the board of directors and the executives to do their primary jobs."