Steps to maintain security such as to obtain GDPR certification are usually taken after an incident has occurred Unfortunately  the brain brings to attention the importance of cybersecurity after the personal IDs have taken an important data hacked