A commitment to observing the spirit, not just the letter, of the law, to ethical operations, to high levels of regulatory compliance, along with a proactive approach to information security and risk management are all considered essential.