Securing the information-processing infrastructure via standardized security measures. These security measures include infrastructural, organizational, personnel and technical measures to adequately secure institutions with a normal need for protection.