A group-wide cybersecurity policy and a special supplementary policy for non-office areas define the guidelines, while several manuals and standards govern the design and implementation of specific topics.