Mechanisms exist to require all employees and contractors to apply security and privacy principles in their daily work.