which one is to ensure that no one employee becomes a pervasive security threat, that data can be recovered from backups?