—ID.GV-3: Governance

Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed.