One of the main missions and obligations of a CISO is to be fully aware of the regulations and compliance requirements for his company. To achieve this, it is essential to set up a regulatory and standards watch with his team of security experts. He has also to work with the Data Protection Officer (DPO) , the supervisory authority for personal data, as the conductor of data protection compliance within the organization. It provides support for RGPD compliance, responds to requests to exercise people’s rights, and reduces the risk of litigation.