CIPM - Protecting Personal Data - Administrative Safeguards: Vendor and HR Policies