includes data protection inspection approach used
https://ico.org.uk/media/action-weve-taken/audits-and-advisory-visits/2616180/northern-education-trust-final-audit-report-executive-summary-v1_0.pdf
[protecting people by good design, solid security, efficient processes and trusted services]