The Data Protection Officer (DPO), Chief Information Security Officer (CISO), Information Technology Security Officer (ITSO), Non-Financial Risk department (NFR), legal department and compliance department all work together to ensure ongoing compliance with the GDPR across the whole organisation and its activities.