This whitepaper is for historical reference only. Some content might be outdated and some links might not be available.

# REQ5 - Continuous evaluation of security procedures
<a name="req5---continuous-evaluation-of-security-procedures"></a>

 **Key principle** **–** The Operator must have in place internal documentation that regulates the processes of personal data processing.