Both individuals need to know what data is most critical to the organization so they can focus on placing the right ____________________ and monitoring controls on that data.