The principle of proportionality means that organizations must implement security measures appropriate to their size, risk exposure, and impact on society.
This allows SMEs to adopt simplified and cost-effective approaches, while still meeting regulatory requirements.