� ensure the confidentiality, integrity and availability of client and personal data and proprietary information irrespective of form; � protect against anticipated threats to the confidentiality, integrity and availability of the IT infrastructure and information systems; and � ensure ongoing compliance with regulatory requirements.