National Security standards which must be observed by all Government Departments and List X companies so that they may pass information to each other with confidence that it will be handled with adequate care by all recipients. Note: minimum computer security standards are based on a risk assessment combined with an assessment of the value of assets to be protected.