The RSI security website breaks down the steps in certain element, but the method in essence goes similar to this: Quite a few rival insurance plan companies have adhered towards the Code. While adhering is voluntary, the adherence to your Code will help in demonstrating compliance Together with the GDPR. https://www.nathanlabsadvisory.com/nist-800-cyber-security-frame-work.html