A guide to effective management of technology and communications risks. It covers: accessibility of information; acceptable use of information; directors legal duties; general legal compliance; protecting networks from external and internal threats; encouraging security awareness at management and employee level; and reputational risk management.