An ongoing management priority concerning the risk that personal and confidential information may cause claims for damages, loss of trust and other harm through not only leaks but also tampering and unauthorized use, and the framework for preventing and managing these risks.