As the world becomes increasingly connected, it is critical to view information security and privacy not merely as information technology (IT) issues, but also as essential business priorities. Security threats, vulnerabilities and privacy exposures challenge every organization; often organizations do not know what risks they face or how they will manage these risks.

If managed properly, recognized leadership in handling personally identifiable information and driving personalized service can be a differentiator to consumers and partners and become a driver of business growth. This booklet provides legal overviews and insight regarding current laws and regulations, and guidance to implement and maintain an effective privacy and information security program from an operational perspective.