Adoption of Key Risk Indicators (KRIs) for monitoring the Organisation’s level of compliance with the GDPR and definement of Key Performance Indicators (KPIs) for assessing the effectiveness of the Personal Data Protection Framework.