The Compliance Policy aims to ensure both compliance with legal obligations and compliance with the organisation’s
own information security standards. The policy document sets out the processes for identifying any legal obligations
which may bind the organisation; defines measures to avoid any breaches of those obligations, and describes the
controls necessary to ensure that the standards in the organisational security policy are met.