We've had a fair bit of work around cyber-security - being a bit sharper on checking project dependencies, encrypting all data (including things like access logs) restricting firewalls even further, better audit trails, and also things like automatic password rotation.

I'd say this is all good stuff, and in most cases we were already doing it, but it is difficult to retrofit in one go.

Going forward it will be a lot easier though as new projects will simply be designed better from a security-perspective.