preventative and protective measures to safeguard Personally Identifiable Information (PII) against cyber attacks