Data: Advancements in new technologies and new services, an increasing external threat landscape, and changing regulatory requirements increase the need for the Group to effectively govern, manage, and protect its data (or the data shared with third-party suppliers). Failure to manage data risk effectively can result in unethical decisions, poor customer outcomes, loss of value to the Group and mistrust.