{"values":["Our IT infrastructure and information security management systems have been audited by external auditors in the last fiscal year. Please provide letter of opinion from the external auditor.","We conduct third-party vulnerability analysis including simulated hacker attacks. Please provide supporting evidence.","We do not have processes and infrastructure in place to prevent and\/or respond to cyberattacks."]}