A solar energy company learns of several recent cyber-attacks targeting other companies in their industry and realizes they could be next. The company initiates an analysis to weigh the measures needed to counter the potential threat and minimizing the impact to their business in case those are exploited. Which security principle is illustrated in this example?