Chapter 4  –  Report on the review of the simplified ICT risk management framework