Through strong governance and well written policies a business can naturally improve their level of security and reduce their susceptibility to a variety of risks, both external and internal. By applying and combining this approach with appropriate IT Infrastructure and Training any business of any size can achieve a high level of resilience. These levels of resilience and compliance will meet GDPR which comes into force on 25th May 2018 so by working with businesses, not only can we help them avoid a variety of pitfalls and dangers, we will also help them ready for GDPR.