PrismTen through its PRISM10 framework provides a process to organisations that enables them to satisfy privacy compliance requirements and information security. PRISM10 uses a maturity approach to information management, which is cloud based, flexible and scalable. This enables organisation to have an evidence based system to manage business risk. PRISM10 provides a governance framework that is extremely flexible and enables organisations to maintain compliance with privacy legislation cost effectively. It also provides a governance framework to manage information and contribute to a reduction in risk form cyber-attack.