In the last month we’ve seen airlines, online retailers and local government suffer breaches in one form or another. So while there’s clearly a pressing need for companies to improve internal resilience and security, coping with the aftermath of a breach is almost as crucial. As many technical experts will tell you – for most it is a matter of when there is a breach rather than when.

We spoke to Tim Rawlins, a senior adviser at the leading global cyber assurance company, NCC Group. Top on his list of priorities: preparation, getting the fundamentals right, and always having a communications adviser on hand during a crisis.

On 28 May 2018 the European Union will bring into force the General Data Protection Regulation (GDPR), an effort to unify and improve data protection safeguards for individuals and bring about greater transparency and accountability from those companies that hold their data.