The article discusses strategies on protecting against cyber breaches, which affected the business of eBay, Home Depot and Target in 2014 after hackers were able to obtain their customers' data. Topics discussed include the three states of personally identifiable information (PII), aspects related to PII that should be fully understood by auditors and areas that needs greatest attention during auditing.