This principal employs multiple layers of controls to avoid having a single point of failure; the idea is that redundancy increases effectiveness because if one procedure fails, another may function as planned