Fundamentals of Information Systems Security, 4th Edition

Compliance Is the Law

Organizations use and store a lot of data, and, for many organizations, data (i.e., ­information) is one of the most important assets that they use to conduct business. Moreover, they use large and complex databases (i.e., information technology [IT] systems) to keep track of customer product preferences and to manage the products and services that they offer their customers. Organizations also transfer data to other businesses. In addition, they often collect personal data that most people consider sensitive, known as personally identifiable information (PII), which, as the name suggests, could allow organizations (or others) to identify a person. PII includes the following:

• First, middle, and last name

• Home mailing address ...