In order to demonstrate the operation of the Plan-Do-Check-Act cycle within an organization.

In order to ensure that staff do not break any laws.

In order to give direction to how information security is set up within an organization.

In order to ensure that everyone knows who is responsible for carrying out the backup procedures.