Policies and procedures to assure proper operation of computer systems, including controls over data centre and network operations, software acquisition and maintenance, and access security.