data protection law it security it service management management change management customer information security data protection newsletter relationship internet security data protection itil network computer security data protection guidance security audit security data protection act 1998 crm itsm data protection journal