theoretical objectives and application areas of information security, the principles of risk assessment, the requirements of compliance and those of the security awareness training, and also declares the Bank’s commitment to the continuous enhancement of the information security management system.