A practical guide will be created, so that small and medium companies can aply measures regarding information systems management, data protection and privacy.