By abiding by the General Data Protection Regulation, Sarbanes Oxley Act, ISO (Telecommunications) (CAS(T)) and Payment Card Industry Data Security Standard legislation, we can ensure that we have implemented appropriate security controls to protect our assets.