Information & data security management
BC187 What the organization does to assess, mark, monitor, manage and maintain information security, and intervene/escalate in the event of breach of the Information Security policy. This will include complying with regulation, legislation and internal risk management.