Objective: Protect client and internal data from unauthorized access or loss.