Can you give me a set of security principles that should be adhered to for systems being designed to run on the corporate administrative network of a company in a highly regulated industry?