ABSTRACT
In any organization there are privacy concerns. Privacy is personal information being disclosed to the wrong person at the wrong time. It could be personnel ™les, medical records, or customer records. Every organization has personal information. žere are rules and various legislation regarding the disclosure of personal information. Inappropriate disclosure of personal information is a risk. Mitigation of the risk and the protection of personal information are security controls. Security controls may be technical, procedural, or physical.
