The Secretary of the Office of Policy and Management, or the secretary’s designee, may require additional protections or alternate measures of security assurance for any requirement of section 4e-70 where the facts and circumstances warrant such additional requirement or alternate measure after taking into consideration, among other factors, (1) the type of confidential information being shared, (2) the amount of confidential information being shared, (3) the purpose for which the information is being shared, and (4) the types of goods or services being contracted for.