Here is the reference and several security controls which are mapped to this reference. Can you detect whether these controls fully cover the reference and if not, generate a list of additional controls specifically applicable to this reference?

Reference: The declared object of APP 1 is ‘to ensure that APP entities manage personal information in an open and transparent way’ (APP 1.1). This enhances the accountability of APP entities for their personal information handling practices and can build community trust and confidence in those practices.

Control 1: The Data Privacy Officer shall be responsible for defining, implementing and enforcing measures to protect personal or commercially important information in a transparent way.

Control 2: A Data Privacy Officer shall be appointed if the organisation is regularly involved in systematic monitoring of data subjects or processing of sensitive personally identifiable information at a large scale.