1. To protect information data and assets
2. To comply with ISO/IEC 27001:2022 standard
3. To improve data confidentiality, integrity and availability
4. To foster a security-aware culture