As explained in the case, sensitive data contained in the system includes performance reviews, medical records for filing insurance claims, salaries, etc. Privacy is an important aspect of security. In today's world, much of our information is exposed on the Internet and susceptible to data and identity theft for malicious purposes. Computing and communications technologies have allowed us to collect and exchange information on a large scale, but this advantage also exposes us to threats of privacy violations (ACM). The responsibility of professionals is to maintain the confidentiality and integrity of data describing individuals. This includes taking precautions to ensure data accuracy, as well as protecting it from unauthorized access or accidental disclosure to an inappropriate person. With the data types listed above, we can see that in the event of a cyber attack, many people's private information will be at risk. Since privacy is the core value of security, it is certainly one of the most important criteria to consider when building a system. In our case, Diane did her job and developed a proper security plan for the system. It truly takes into account the confidentiality aspect of the data that will circulate in the system. So it came up with a highly secure plan, suited for extremely sensitive data, that was a bit more expensive than what the company could offer.