IT and CR: Regulations? Guidelines? Standards? Principles? 

Regulation, guidelines, standards, principles may come to pass, but they won’t necessarily improve things; http://eicker.at/CR