Security across the institution
Intelligence and digital work depend on information moving between people and systems. Security considerations follow those movements, including access, storage, collaboration and the use of external infrastructure.
Understanding the scope
Security statements need to be assessed in relation to the activity and systems they cover. Principles, operating controls and independent verification represent different forms of information and should be understood accordingly.