My employer has developed a new rule in our information policy within the last 4 years to discontinue printing SSN's on any report. Initially only the last four digits of the SSN were printed until the new software system was implemented and every employee was assignment an Employee ID Number (EIN). Another rule only allows certain types or groups of users to be able to view SSN's on any screen. This is accomplished through user security roles in the software. What are some other examples of ways data administrators can enforce an information policy?