evaluating its security efforts