Guidelines and procedures for protecting sensitive information from unauthorized access or disclosure.