Risk that the improper handling of important information and personal information could damage confidence and trust and affect business continuity. The scope covers the handling of such information generally, rather than being limited to specific information incidents such as leaks, tampering or unauthorized use.