You have clearly no idea that you are still liable if you are not actively reducing the threat against your employees.