. "Additionally, there are situations where you must consider whether the confidentiality, integrity, or availability of the data is a factor." . . .