As explained in the case, sensitive data contained in the system includes performance evaluations, medical records for filing insurance claims, salaries, and so on. Privacy is an important aspect of security. In today's world, much of our information is exposed on the Internet and subject to data and identity theft for illicit purposes. Information and communication technologies have allowed us to collect and exchange information on a large scale, but with this advantage we also risk the threat of violation of our privacy (ACM). The responsibility of professionals is to maintain the privacy and integrity of data describing individuals. This includes taking precautions to ensure data accuracy, as well as protecting against unauthorized access or accidental disclosure to inappropriate parties. With the types of data listed above, we can see that in the event of a cyber attack, many people's private information will be at risk. Since privacy is the core value of security, it is definitely one of the most important criteria to consider when building a system. In our case, Diane did her job and came up with a proper security plan for the system. It really takes into account the privacy aspect of the data that will be circulating in the system. So he proposed a highly secure plan suitable for extremely sensitive data that was a little more expensive than what the company could do