Cybersecurity & data management policy

Company has a policy in place to protect against cybersecurity risks and govern data management. This can be - but does not have to be - a separate, standalone policy. Such a policy can cover a cybersecurity risks programme, cybersecurity insurance, business continuity policy, phishing and penetration tests (frequency).