| 2. Glossary of Terms: |
| ISM means Information Security Manager as the person responsible. |
| DPO means Data Protection Officer as the person responsible - jointly and severally. |
| ISS means Information Technology Infrastructure Library as ISO 27001 and associated family of standards. |
| ISMS means Information Security Management Service as the documentation application that makes it all happen. |
| ICO means Information Commissioners Office as the enforcement regulator. |
| GDPR means General Data Protection Regulations as the legal obligations to protect Personally Identifiable Information. |
| PII means Personally Identifiable Information that is subject to data protection principles. |
| PECR means Privacy and Electronic Communication Regulations as the legal obligations when dealing with marketing and sales information. |