Security measures are the steps your business takes to protect information from being accidentally or deliberately compromised. Security measures include:
organisational measures - ensuring data security within your business (eg having an employee responsible for information security and for entering into data processing agreements)
technical measures - including physical measures (eg how the workplace is protected) and cybersecurity (eg how network security is ensured)
For more information, read Data protection principles.