2.37 Companies which have assessed their assistance as possible to be accessed by kids will be expected to conduct a baby security risk evaluation of their company exclusively for children, determine and implement proportionate mitigations to defend youngsters, and observe these for success. The regulator’s codes of exercise will consist of steering on the threat assessment process.