Entity’s Senior Management reviews and approves the state of the Information Security program annually