The purpose of information security [link: 17.8.7] is to protect Information Assets from unauthorized access or damage, and ensure accordance with all applicable laws, regulations and compliance requirements [link: 17.8.8].