https://www.ldi.nrw.de/system/files/media/document/file/27_datenschutzbericht_2022_ldi_nrw.pdf
includes page 125ff the audit questionnaire used by them for energy companies:
[protecting people by good design, solid security, efficient processes and trusted services]