Collecting Confidential Information U17: Only the minimum information reasonably necessary to accomplish the intended business purpose should be obtained
Sharing Confidential Information U7: Confidential information (Level 2+) must only be shared with those authorized to receive it.
Accessing Confidential Information U6: Confidential information must only be accessed for authorized purposes.
Configure Devices All devices must be configured for secure storage, transport, and disposal of confidential information.
