What is a consideration when determining the potential impact an organization faces in the event of the loss of confidentiality of Personally Identifiable Information (PII)?

A. Quantity
B. Availability
C. Quality
D. Criticality