Measures implemented by an organisation, with the purpose of protecting the privacy of individuals in respect of its public-facing systems (i.e. firewalls, threat detection systems, penetration testing etc.).