With 25 years in the IT Security, Data Protection and Information Governance environment, working in both public and private sectors in some of the most highly regulated organisations you would think I have seen it all; however nothing could be further from the truth and delivering effective data protection risk management for clients requires constant exposure, education and awareness to the rapidly evolving world we operate in.