The GDPR became active last Friday, bringing with is a wide swathe of changes that impact how personal data is handled in the European Union. EU citizens have to be specifically asked when personal data is collected and they have the right to be forgotten by companies that collect their data. But one of the effects of this is that website operators are changing what they do.

Even though Australian companies don't have to comply with the General Data Protection Regulation (GDPR) when it comes into effect on Friday, that doesn't make it irrelevant. But compliance with the GDPR, our own National Data Breach (NBD) notification laws and updated privacy laws being introduced in New Zealand is not enough to ensure your systems and users are safe in today's threat landscape.

Maintaining IT security is a constant struggle for enterprises in both the public and private sectors. The adoption of cloud computing, bring-your-own-device (BYOD) policies as well as the pervasiveness of 'Shadow IT' within organisations are compounding the issue. We break things down in five steps to make security compliance just that little bit easier for your business.