The Group-wide guideline on information security and business continuity management – the ISM & BCM Policy sets binding targets, minimum requirements, responsibilities, processes and reporting procedures for the protection of information and for ensuring business continuity.