This self-assessment tool was developed using the concepts outlined in the Federal Trade Commission booklet Protecting Personal Information - A Guide for Business.1 It can be used to help identify areas where a data security plan could be improved.