We work with many large and small organizations to ensure that information is managed through a risk based approach management system.The GDPR applies to two types of users, of which we will undoubtedly all fall; Controllers and Processors. Briefly put; the controller determines how and why the personal veri is used or processed and the processor a