The MOST important objective of information security controls is to: