These reviews seek to identify internal and external risks to the security, confidentiality and integrity of personal information that could result in the unauthorized disclosure, misuse, loss, alteration, destruction, or other compromise of information as well as an assessment of the sufficiency of any safeguards in place to control these risks.