Outlines the basic standards required to meet all areas of the bank's data processing operations. Provides structure and guidance to management, establishes controls, and addresses outside vendors, program security, and documentation.