Confidentiality of information is assured in protecting valuable or sensitive information from unauthorised disclosures or intelligible interruption.

Integrity of information is maintained in safeguarding the accuracy and completeness of information by protecting against unauthorised modification.

Availability of information ensures that only authorised people have access to information and associated assets when required.

Business, regulatory and legislative requirements of information and information systems are met.

Business continuity plans will be developed, maintained and tested.

Security risks are analysed and relevant information circulated within the organisation to develop appropriate risk mitigation strategies and raise security awareness.

Security training shall be made available to all employees and all managers shall be directly responsible for implementing this policy within their business areas and for adherence by their employees.

Procedures exist to support this policy, including virus control measures, passwords and continuity plans and shall be regularly reviewed for continuing suitability.