sentence1: But attacking the problem requires a strategy appropriate to the organization involved and its particular risks, including a consideration of the legal requirements surrounding security and privacy issues.
sentence2: Attacking the problem requires attention to security and privacy matters.