CIPM - Protecting Personal Data - Organizational Measures for Residual Risk Mitigation