Outcome one-liner
Protect data and respond to problems within agreed time.
Some of the things you do
Some of the things you do (replace with your own examples)
Turn on 2-step login, keep software updated, review who has access, follow a simple breach plan, handle requests to see or delete info.
Top six capabiltiy