how do you assess the security level of the exchanges?