Provision for the services of an Information Security and Privacy Protection Officer