4. Applicability, Authority and Compliance Agencies understand and follow the requirements of GOBISM. Protection of government information and systems is a core accountability Protection of government information and systems is a core accountability of each governmental agency. The role of Information Security Manual is to promote a consistent approach to information assurance and information security across entire Government of Bangladesh. GOBISM is intended to structure and assist the implementation of Bangladeshi laws and government policy on information security. Compliance with the GOBISM is not required as a matter of law. However, the controls in the GOBISM could be made binding on departments and agencies, either by legislation, or by Government direction. Smaller government agencies may not always have sufficient staffing or budgets to comply with all the requirements of this manual. In such circumstances smaller agencies may choose to either operate on systems fully hosted by another agency using their information security policies and information security resources. 9

Select target paragraph3