Whenever you're ready, walk me through how you'd approach this.
Explain how you would secure a backend service that handles sensitive PII (Personally Identifiable Information).