The ESG Guide on Data Protection and Cyber Security offers a simplified yet robust account of Data protection as a core component of both cybersecurity and GDPR compliance. It explores aspects of the General Data Protection Regulation (GDPR) for corporations’ ESG compliance and focuses on the importance of companies’ disclosing cyber risk management practices and providing information about a company’s data security policies and procedures; all a sign of improvement in transparency and accountability towards stakeholders, including investors, customers and regulators. The relevant GRI and SASB sustainability reporting standards are referred to in the Guide and key metrics are thoroughly explored, one of which is the metric regarding recent developments of the global workforce pivoting to remote work and how that requires measures that guarantee cybersecurity and data protection in the remote context. Information Technology, Consumer Discretionary, Financials, and Communications Services are all sectors that are considered when it comes to data protection and cyber security ESG compliance. The Guide offers insight into the distinction between traditional and specialised ESG Data Providers, also offering information on the USA paradigm as a model for the EU to consider in its ESG compliance regarding Cybersecurity. The Guide offers a condense account of all the relevant information of EU regulations relevant to Cyber and ESG regulation. It provides a checklist for companies to use to create links between security and ESG compliance, for all pillars, that of the E, S and G and offers specific practical examples that companies can consider to secure ESG compliance in this sector.