Consequently, all cyber security activities – managed with a risk-based approach following the security by design principle – give rise to a continuous due diligence process that also includes self-assurance activities.