Reduce risk to acceptable levels ACI has an Information Security policy that governs security requirements and expectations to ensure that ACI protects information at rest, in-transit and being processed.