Ensure that your entire company is equipped with the necessary awareness training on the basics of GDPR and IT security.