CYBERSECURITY POLICY AND PROTECTION OF PERSONAL INFORMATION