Executive Summary Information security management plays an integral role in the performance of every organization. In the era of advanced development of information technologies, numerous companies have become attractive victims of hackers in terms of customers’ information. British Airways, as a noticeable member of the airline industry, actively integrate the collection and processing of personal data to improve the passengers’ experience and enhance performance. As a result, the company experienced several data breaches that had substantial effects on the business and the stakeholders. British Airways had significant financial losses in the penalties due to the last violation in 2018, following the provisions of the new GDPR. It is critical for the company to implement new information security management strategies and policies, to involve top management in protection measures’ development, increase awareness, and provide the customers with the most effective security level. Introduction Information technology advancements and the integration of numerous services that require the users to provide personal data impose challenges for organizations in terms of security and protection. Data breaches and violations represent significant risks for the companies in terms of their image, reputation, and potential financial losses. Due to the high stakes, security awareness becomes “the most important factor that mitigates the risk of information security breaches in organizations” (Safa, Von Solms, & Futcher, 2016, p. 15). Consequently, different businesses have a threat of breaks in the data security system, which implies the necessity of rigid and thorough information security management. British Airways is an example of a large company that has severe data security issues, which had a critical impact on the organization and the consequences of which it is still bearing. The purpose of this paper is to analyze the fundamental principles and practices of information security management within British Airways, considering the requirements for managing digital data. Below you can see the outline for the paper.   * The description of personal data collection and processing within the airline industry organizations.   * The history of the information security breaches at British Airways.   * A thorough investigation of the 2018 data breach at British Airways and its implications for the company.   * Information security risks at British Airways and the significance of proper protection measures within the organization.   * Recommendations to integrate to improve data security management at British Airways. Big Data as Top Priority British Airways is operating within the airline industry that portrays the field with substantial usage of personal data due to the nuances of the industry’s primary activities. Every airline is seeking to improve the services to the customers, which motivates them to utilize big data technology in the operations (Chang, Ji, & Arami, 2019). In such a way, the companies in this type of business aim to optimize existing services, such as booking, searching for flights, or payment options, making them more satisfying to customers. The statistics show that 61% of the airline companies’ CEOs view big data as a “top priority” because collection and assessment of information are cruc