Information security is a growing concern – and budget item – for most, if not all, organisations. It’s a technology-related area that has done what most fail to do – that’s raising itself to be a topic for board-level attention and concern. In Q2 2018, and just before the introduction of the new EU General Data Protection Regulation (GDPR) law, the Service Desk Institute (SDI) undertook a survey of UK-based IT Service Desk Managers to understand more about how their organisations are tackling both information security and the implications of the impending GDPR go live.