security principles for ensuring application and data