The ISMS covers the management, operation and maintenance of the information assets and information systems by the company in pursuit of the company’s business activities; providing strategic consultancy and design, deployment, end-user adoption, application development and support services to public and private sector clients. It also relates where appropriate to external risk sources including functions which are outsourced.