A large healthcare organization holds quarterly meetings of a committee composing its compliance officer, privacy officer, information security officer, chief information officer, and vice president of HIM. These meetings review recent breaches, the need for new policies, and compliance with requirements for employee training and education related to information management. Which generally accepted recordkeeping principle (GARP) is this an example of