12548 evsjv‡`k †M‡RU, AwZwi³, GwcÖj 6, 2014 b. Objective of this guideline, c. Scope of this guideline, d. Information classification and different state of information, e. Roles and responsibility of the information owner and information custodian, f. Information security strategy, g. Identification of probable risks, threats and vulnerabilities, h. Assessment of risks, threats and vulnerabilities, i. Procedure to set security controls to protect information, j. Legal issues of information security, k. Standards to follow to establish Information Security Management System (ISMS), l. Importance of auditing for information security, m. Monitoring and improving, n. Certification as an agency, o. Procedures for incident handling and disaster recovery, p. Backup & restore mechanism, q. Business continuity plan, r. Sample Information security policy. 3. Guideline Governance and Enforcement (1) Ministry of ICT on behalf of the Government of Bangladesh will have the ownership of this guideline. Ministry of ICT will monitor the implementation of this guideline. Bangladesh Computer Council, Office of the CCA and Bangladesh Telecommunication Regulatory Commission (BTRC) will jointly coordinate the implementation of this guideline. (2) All the agencies of Bangladesh Government are to develop their own Information Security Policy and implement accordingly within six (6) months of the commencement of the guideline. Any query regarding this document can be forwarded either to Ministry of ICT or to BCC. If any agency requires assistance for preparing their Information Security Policy, It may request support from BCC. 4. Definition (1) Agency : Agency includes ministry/division, departments and subordinate bodies of the Government of Bangladesh