Investment in IT security systems Customer privacy and data protection Potential risk linked to lack in protecting customer data and information Non-compliance with regulatory requirements on data privacy can lead to monetary sanctions.