Through planning, building, implementing, and monitoring mechanisms, we can protect confidentiality, integrity, and availability of information assets while also completing comprehensive information service risk assessments and global personal information inventories.