(provide the requirements for coordinated activities that will direct and control the PLDT Group and its subsidiaries with regard to risk management and ensures that privacy risks identified from PLDT Group’s data processing activities, processes, and systems are addressed by implementing appropriate controls.