Ensure the security and confidentiality of customer records and corporate information c. Protect against unauthorized access to or use of such records d. Detect, prevent and mitigate identity theft in connection with covered accounts e. Provide security protections that are consistent with the value of the information asset f.