(1) Directors may undertake any services for the company that the directors decide. (2) Directors are entitled to such remuneration as the directors determine- (run 3 online) for their services to the company as directors, and (b) for any other service which they undertake for the company. (3) Subject to the articles, a director's remuneration may- (a) take any form, and (b) include any arrangements in connection with the payment of a pension, allowance or gratuity, or any death, sickness or disability benefits, to or in respect of that director.

•The Plan Phase– This phase serves to plan the basic organization of information security, set objectives for information security and choose the appropriate security controls (the standard contains a catalogue of 133 possible controls). •The Do Phase– This phase includes carrying out everything that was planned during the previous phase. •The Check Phase – The purpose of this phase is to monitor the functioning of the ISMS through various “channels”, and check whether the results meet the set objectives. •The Act Phase – The purpose of this phase is to improve everything that was identified as non-compliant in the previous phase.

These phases are given as follows: •The Plan Phase– This phase serves to plan the basic organization of information security, set objectives for information security and choose the appropriate security controls (the standard contains a catalogue of 133 possible controls). •The Do Phase– This phase includes carrying out everything that was planned during the previous phase. •The Check Phase – The purpose of this phase is to monitor the functioning of the ISMS through various “channels”, and check whether the results meet the set objectives. •The Act Phase – The purpose of this phase is to improve everything that was identified as non-compliant in the previous phase.

**Four phases of ISMS:** ISO 27001: 2005 prescribes ‘how to manage information security through a system of information security management’. Such a management system, just like ISO 9001 or ISO 14001, consists of four phases that should be continuously implemented in order to minimize risks to the CIA of information. These phases are given as follows: ---------------------------------- •The Plan Phase– This phase serves to plan the basic organization of information security, set objectives for information security and choose the appropriate security controls (the standard contains a catalogue of 133 possible controls). •The Do Phase– This phase includes carrying out everything that was planned during the previous phase. •The Check Phase – The purpose of this phase is to monitor the functioning of the ISMS through various “channels”, and check whether the results meet the set objectives. •The Act Phase – The purpose of this phase is to improve everything that was identified as non-compliant in the previous phase.