The European Union (EU)’s General Data Privacy Regulation (GDPR) places a broad number of restrictions on the collection and transfer of individuals’ personal data. A company based in the US that does business with several clients in the EU realizes that not all of its current security practices align with GDPR standards. The company drafts an action plan to address these issues and resolve them accordingly. Which security principle is illustrated in this example?.

Sue peters is the controller at vroom, a car dealership. dale miller recently has been hired as the bookkeeper. dale wanted to attend a class in excel spreadsheets, so sue temporarily took over dale's duties, including overseeing a fund used for gas purchases before test drives. sue found a shortage in the fund and confronted dale when he returned to work. dale admitted that he occasionally uses the fund to pay for his own gas. sue estimated the shortage at $450. what should sue do?