AIS Chap 7

Access to the system and its data is controlled and restricted to legitimate users

Sensitive organization information (marketing plans, trade secrets) is protected from unauthorized disclosure.

Personal information about customers is collected, used, disclosed and maintained only in compliance with internal policies and external regulatory requirements.

data is processed accurately, completely, in atimely manner, and only with proper authorization

The system and its information is avalible to meet operational and contractual obligations.