– ensures that risks to the confidentiality, integrity and availability of information are managed to an acceptable level using a standard risk management framework; – protects information from accidental or intentional damage, loss, unauthorised disclosure or modification; – provides secure and reliable information to enable job effectively; and – ensures compliance with legal and statutory obligations.