Yes, it's a critical piece.
What we've found is that we have quite a robust.... I would describe it as a matrix of reporting standards for internal incidents that look at a wide variety of factors around risk considerations. That determines what level it has escalated to in the organization, and in what time frame.