When designing security controls, it is MOST important to: