| 2.29 | The Council and members shall ensure that all information, in whatever form, that is created, processed, communicated or retained (referred to in these rules collectively as "processed information") shall be processed subject to a degree of information security that is appropriate, having regard to the nature of the information and the purpose for which it is processed. In assessing the appropriateness of information security for purposes of this rule the Council and members must have regard to all applicable laws and rules, as well as relevant codes, guidelines and practices pertaining to the establishment and maintenance of information security. |
