CMA publishes draft info-security guidelines for joint stock