According to FCA rules, firms with access to sensitive customer information are required to implement best practice in risk mitigation and information security, with the appropriate controls. Particular areas of concern include:

• GDPR, MiFID II, FCA rules, PCI DSS (where applicable) and compliance rules
• Trading floor security and preventing insider trading
• Unrecordable communication channels and camera functionality
• DLP and regulatory compliance, safeguarding against conduct sanctions

Contact centres are a significant customer-facing aspect of many organisations' operations with access to confidential and sensitive information, necessitating high standards of information security, compliance and regulation. Contact centres processing any kind of payment must also take precautionary steps to protect customer data. Particular areas of concern include:

• GDPR, MiFID II, FCA rules and PCI DSS (where applicable)
• Protecting PII (personally identifiable information)
• Data loss and fraud prevention (e.g. photos, screenshots and payment card details)
• Risk management
• Productivity/wrap-time on enquiries

Transport and logistics providers employ workforces who spend the majority of their time on the road. As a consequence drivers are active smart device users, keen to stay in touch with their lives. However, legislation on mobile phone usage whilst driving has done little to stop drivers being tempted to use their smart devices whilst on the move. In many cases this leads to minor accidents, but in more serious cases distracted drivers have caused, (or been involved in) accidents where there has been severe loss of life. Many drivers have faced fines and in some cases prison sentences. For employers the challenges include:

1. Loss of life
2. Higher insurance and compensation costs
3. Reputational damage from accidents
4. Loss of business and/or cargo
5. Customer information security

Management of healthcare information has become more challenging for regulatory compliance with increased integration of patient records and expanded access to data for individuals and clinicians. In a strictly regulated, high-risk industry information security and the protection of patient privacy is vital. Legislation governing data processessing standards focuses on security, ensuring patient data doesn't fall into the wrong hands, (potentially causing insurance issues for consumers, enabling fraud or identity theft and eroding patient trust in the NHS). Particular areas of concern include:

1. GDPR and PCI DSS where appropriate
2. Data Leakage Prevention and the Caldicott audit
3. NHS (Data Protection Act), N3 compliance, and in the US the HIPAA and HITECH Act
4. Risk mitigation (inclusive of Safeguarding against fines and legal consequences)
5. Secure controls and operational efficiency

The UK spends a sum equivalent to 1.66% of GDP on average on R&D, with organisations seeking new innovations across nearly all sectors of the economy, especially healthcare, software, chemicals and materials, and TMT (Technology, Media, and Telecoms). Protecting R&D departments from data leakage and industrial espionage requires significant investment in secure systems and facilities. Organisations particularly focus on:

1. Data Leakage Prevention and IP Protection
2. Risk mitigation
3. Secure systems controls and operational efficiency

Governmental organisations – whether departments of state, local government or arms-length organisations – handle significant quantities of sensitive information on a daily basis. Whilst physical security measures are well understood, cybersecurity has become the principal preoccupation of operatonal managers. The threats posed by smart devices can be easily overlooked, especially camera functionality and encrypted messaging. Public sector organisations operate in the same data and security framework as private sector frms, wth a particular focus on:

1. GDPR and, where applicable, MiFID II, the FCA rules and PCI DSS
2. Protecting PII (personally identifiable information)
3. Data Leakage Prevention from unregulated communications channels
4. Risk mitigation
5. Secure controls and operational efficiency

Security providers and Facilities Management employ large workforces to ensure the safety of their people, property and information. Blackout can provide the tools necessary to ensure that companies' workforces are not distracted by their smart devices, improve productivity and optimise workforce efficiency. Blackout can help companies address:

1. Operational efficiency
2. Data Leakage Prevention and information security
3. Use of unregulated communications channels
4. Risk mitigation (BYOD / COPE / personal devices)