Indices Annex The Group-wide guideline on Information Security and Business Continuity Management – the ISM & BCM Policy sets binding targets, minimum requirements, responsibilities, processes and reporting procedures for the protection of information and for ensuring business continuity.