Which action is appropriate for an organization to consider when integrating a new application or platform that deals with sensitive information?