Implement an Information Security Management System (ISMS) appropriate for the	business	as	defined	in	the	Information	Security	Framework	 Apply appropriate measures to reduce security threats to an acceptable level, in compliance	with	Group	security	policies.