Failure to maintain confidentiality of information

Control

Design and maintain an appropriate IT security plan