The organization employs security controls as needed to protect the confidentiality and integrity of the information being transmitted.