Like federal agencies, the organizations we studied must protect the integrity, confidentiality, and availability of the information resources they rely on.
Confidential information can include client personal and financial information.