The Board of Directors of the long-term care facility (LTC) wants justification for putting in new security measures within the current health information system (HIS). Therefore, the Chief Information Officer (CIO) has asked you as the IT manager to create a report that explains the organizational impact of a breach to health care information systems, focusing on the financial and privacy liabilities.