"The amount of investment a company can potentially be looking at is highly dependent on where an organisation is in its data protection control deployment and the size of the organisation. For organisations under 250 people, investment may be insignificant but for larger organisations that have not implemented an effective data protection function the cost can be substantial,” adds Brian Chappell, Senior Director, Enterprise & Solution Architecture, BeyondTrust