{"values":["Yes, we have implemented policies and procedures for all employees","A clear escalation process which employees can follow in the event an employee notices something suspicious is in place.","Information security\/cybersecurity is part of the employee performance evaluation (e.g. disciplinary actions).","No, we have not implemented policies and procedures for employees with access to critical information.","Not applicable. Please provide explanations in the comment box below.","Not known"],"last":null}