∘ Provide education and training for staffs treating personal information∘ Establish and execute internal management plan∘ Establish rules for writing passwords which is hard to be estimated∘ Ensure safe storage of record of access to personal information processing system∘ Classify the level of authority to access to personal information processing system