This report provides a detailed examination of information governance and cyber security within the context of PFJ Bank, a European retail and investment bank. It begins by introducing the importance of information governance in managing customer data and ensuring secure operations. The report explores the implementation of information governance and cyber security policies, including the Information Governance Policy and Cyber Security Policy, and discusses the significance of these policies in safeguarding sensitive information. It highlights the importance of information governance and cyber security in the banking sector, particularly for an institution like PFJ Bank. The report also delves into the justification for implementing information governance, outlining the benefits such as legal compliance, operational transparency, and risk minimization. Furthermore, it addresses personal responsibility and initiatives related to information governance and cyber security. The report also covers topics such as information governance framework, cyber-attacks, data breaches, and security practices like two-factor authentication. Finally, it discusses the key requirements that must be addressed before implementing the policy in PFJ bank, such as sponsorships, current state and checkpoints. The report concludes with a summary of the key findings and recommendations.