The standard sets strict requirements in all areas concerning the confidentiality, integrity and availability of corporate information at all stages of its “lifecycle” (creation, use, processing, transmission, storage and destruction).