Which of the following is a fundamental principle of nist & iso 27001 compliance as it applies to Certified Cybersecurity Professional?