- To safeguard the integrity, confidentiality and availability of information assets, and the sustainability of the ISMS,
- To comply with all legislation relating to information security,
- To provide all the resources required by information security work,
- To operate a sustainable information security system founded on risk assessment and risk management,
- To deliver training that develops technical and behavioural competence, so as to raise information security awareness,
- To conduct business with information security obligations in mind throughout the processes of receiving and providing services to customers and other stakeholders.