In the context of Systems Security Certified Administrator, which of the following is the PRIMARY purpose of safety compliance programs?