The main topics covered by these policies and procedures are: Information Security, Security Incident management, IT Change & Configuration management, Backup, Hardening, Logging, Cloud Security, BYOD (Bring your own device) and Removable Devices management.