Technical and Organizational Measures (TOM)
Technisch-organisatorische Maßnahmen (TOM)
Technical and organizational measures are the concrete safeguards — such as encryption, access controls, or staff training — through which a company actually implements and demonstrates the level of processing security required by the GDPR.