Consequently, all cyber security activities – which are managed with a risk-based approach following the principle of security by design – give rise to a continuous due diligence process that also includes self-as surance activities.