which place responsibility on those working in consumer finance and payments to protect client information through physical security, administrative security, data access security, and behavioral security such as reporting suspicious behavior of clients or co-workers.