on recognized international standards (ISO assess and rank data privacy and information security risks, as well as an information security management system encompassing many global standards, such as ISO 27001/2.