The policy requires all employees to manage risks. It provides guidance on risk management and business continuity planning by integrating risk identification, assessment and reporting into everyday operations.

This policy provides information for employees in relation to their obligations and responsibilities with respect to privacy and responsible information sharing.

These procedures provide information for employees in relation to their obligations and responsibilities with respect to managing information breaches.