Legislation, structures, policies, procedures, processes and controls required to manage information in support of an organisation's regulatory, legal, risk, environmental and operational requirements.