POPIA requires all organisations to implement and maintain appropriate, reasonable, organisations and technical security measures or safeguards. These should include information security policies, contracts with Operators, staff awareness training, as well as technical security measures such as firewalls, antivirus software, antimalware software, strong passwords, file encryption and data loss prevention software