What measures does the policy suggest for protecting sensitive information?
The policy suggests measures such as using strong passwords, encrypting data, restricting access to authorized personnel, and regularly updating software to protect sensitive information.