At Splashtop, for example, we developed “Security Policies” as a subset of our Technical and Organizational Measures (TOMs). These describe the security measures and controls implemented and maintained by Splashtop to protect and secure the data we store and process.