The framework was developed on the basis that everyone involved with the Company’s activities (e.g. employees, contractors, partners etc.) should be risk-aware, identify and manage sources of risk, and communicate incidents.