As discussed below , these efforts included testing controls , monitoring compliance with policies , analyzing security incidents , and accounting for procedural accomplishments and other indicators that efforts to promote awareness were effective .
Analysis of security incidents revealed that there was significant progress in minimizing securiy breach risk .