Methods for ensuring that information systems are used for their intended purpose by those entitled to use them and that the information they contain retains its integrity and, where appropriate, confidentiality.