Principles 263. The Board should establish systems for- (a) managing the company’s information assets and the performance of its data functions; (b) ensuring the timeous availability of information through effective information systems; (c) implementing a suitable information security management programme; (d) ensuring that all sensitive information is identified, classified and assigned appropriate handling criteria; (e) […]