The protection of personal data and security by design have become central topics since the GDPR came into force. I will present the techniques used and I will also address the awareness of management on these important aspects. Indeed, even being in the internal network of a datacenter, we are not safe from an intrusion. The 0 risk does not exist.