The protection of private information should not have to be driven by a compliance requirement. It is a business concern that, if addressed effectively, will curb data as well as customer loss. At Ubusha we passionately explore options for our customer to address the issue of private information protection.Too often a business’ attitude towards the protection of private information is that of “patching holes”. It is driven by a compliance requirement and the threat of litigation. Added to this is the challenge that businesses face that they cannot always effectively identify their high risk areas. This leads to a further inability to prioritise their efforts and budgets.The question is: How does an organisation go about identifying its Identity, Access & Data Governance priorities?We would suggest that this process is driven by your risk profile: Whether it is Reputation, Financial, Operational, Compliance or Social Responsibility. By understanding your risk profile, it will assist an organisation to define its Capability Maturities which will lead to a set of clear priorities.Once your organisational priorities are defined, and qualified in detail, the path to follow in Protecting your Private Information, will be significantly clearer. Protection of the information will then be a matter of classifying the data, whether it is structured or unstructured, and managing the access to it.