Service level agreement (SLA) framework -- Part 4: Components of security and of protection of PII