I can confirm there are many layers of controls, there's analysis, there's logging, data science analysis, minimum privilege — all these things that you would expect in these systems.