The Code contains 14 principles that each sit within four themes. The 14 principles cover security and resilience measures that organizations should implement to mitigate cyber risks.