The unimpeded operation of its information systems, through the application of appropriate security mechanisms, and the protection and retrieval of critical corporate information, through the adoption of the necessary measures to prevent, deter and correct any harmful events.