In the context of atlassian certified professional, which principle most directly governs atlassian professional security & compliance best practices practices?