The objective of this policy is to implement a Commission-wide program for all WSSC business areas that process and store data that can be used in identity theft. This program must implement policies, procedures, and other arrangements that control reasonably foreseeable risks to customers or to the safety and soundness of the Commission from identity theft. (GMO 09-01 § I)