Implementation Tier

Provides a point of reference on how an organization views privacy risk and whether it has sufficient processes and resources in place to manage that risk.