Reduction of Cyber Security and Privacy risks to tolerable levels ()