The data controller decides the needs for which plus the means by which private data is processed. Set up firewalls and router standards, which set principles for enabling and denying usage of your programs. Firewall configurations need to be reviewed bi-on a yearly basis to be sure there aren't any https://www.nathanlabsadvisory.com/blog/nathan/navigating-data-protection-impact-assessments-dpias-under-gdpr-a-comprehensive-guide/