This policy protects the access of PMI membership identification numbers. Currently the OSS system login references PMI membership identification numbers as the member's password.
When Board members create an Event Registration, some creators select 'attendees' button to display with the registration. When the event's attendees are displayed on the front-end, it shows the PMI membership numbers. This could become a backdoor for malice to occur.
For the future, no 'attendees' button should be active with the event on the front-end. If you need to know who are attending the event and you want a list, create an export file and download it from the administration side.
When members login, the event registration atomically applies their membership discount. The solution to knowing if attendees are a member is seeing on the download list their membership discount. In addition, members should have their membership card available.