Pendant Publishing has not yet updated its policies and procedures to safeguard sensitive information for both its employees and the organization in the digital age. What types of procedures should its HR department establish to safeguard the following electronic information, which were historically stored in physical files and folders:

• Personnel records;
• Medical records; and
• Confidential company information?