This document specifies the principles and requirements for security-minded information management, particularly at a BIM maturity level compliant with the ISO 19650 series and ISO 19650-1, as well as for sensitive information obtained, created, processed, or stored in connection with any initiative, project, asset, product, or service. It describes the steps required to establish and develop, within the organizations concerned, an appropriate and proportionate security culture and mindset, including compliance monitoring and verification. This approach applies throughout the entire lifecycle of initiatives, projects, assets, products, or services. The document is intended for organizations in the built environment and is also relevant to those wishing to protect their commercial and personal information, as well as their intellectual property.