Standard Five: Process Reviews

5.1. Process reviews are held at least once per year where data security is put at risk and following data security incidents

Standard Four: Data Access
Standard Six: Responding to Incidents