(Source: Lexology) The company also must implement and maintain a comprehensive data security software program that is reasonably designed to (1) address software security …