Bupa interview question

what security controls required for data security