The confidentiality, Integrity & Availability of information is protected, maintained to ensure accuracy and meet business needs and prevent disclosure of valuable or sensitive information.

Business continuity plans are developed, maintained and tested.

Information security awareness is provided to all employees.

Incident management process has been established and implemented to ensure that all breaches of information security, actual or suspected are reported and investigated.

Risks are mitigated to an acceptable level through a risk assessment and investigation procedure.

Regulatory and legislative requirements are met.

The information security management system is continually improved.