Guide application and fulfilment of relevant industry standards, best practices and legal requirements for information security.