Principles

263. The Board should establish systems for-

(a) managing the company’s information assets and the performance of its data functions;
(b) ensuring the timeous availability of information through effective information systems;
(c) implementing a suitable information security management programme;
(d) ensuring that all sensitive information is identified, classified and assigned appropriate handling criteria;
(e) managing the risks associated with information and information systems;
(f) establishing processes to ensure continuous monitoring of all aspects of information and maintaining and monitoring of data quality; and
(g) formulating business continuity programmes addressing the company’s information recovery requirements and ensuring that such programmes are effectively aligned to the company’s business activities.

264. The Board should ensure that regular, accurate, complete, timely, reliable, easy to understand and relevant material is made available to all shareholders and directors without compromising the confidentiality and commercial sensitivity of such material.

• According to the NATIONAL CODE ON CORPORATE GOVERNANCE ZIMBABWE