These are the application of our best practice Corporate Information Security Policy & Standards (aligned with ISO Request for Information from IT Vendors that may potentially be handling sensitive information.