These policies relate to topics such as the handling, classification and encryption of information; the prevention of leaks via external units, the Internet, or e-mail; the protection of our networks; the establishment of access controls and physical security measures; risk and anti-virus management; and business continuity assurance, among others.