Information security Scotiabank has a comprehensive information security and control structure founded on the Board-approved Information Security Policy and the associated governance framework, policies, directives and standards.