A regular check of technical and organizational measures (TOM) is essential for sustainable data protection and to improve cyber resilience.