(4)The internal rules should apply to all processing operations carried out by the SRB in the performance of its activities for the security & safety matters, for the prevention, detection or investigation of security incidents, protection of the agency’s staff, property and information and the SRB’s visitors.