Adequate security

Adequate security is "security commensurate with the risk and the magnitude of harm resulting from the loss, misuse, or unauthorized access to or modification of information.