Which of the following is not an example of an administrative safeguard that organizations use to protect PII?
A. Conduct risk assessments
B. Reduce the volume and use of Social Security Numbers
C. List all potential future uses of PII in the System of Records Notice (SORN)
D. Ensure employees are trained to properly use and protect electronic records