A company's security policy requires that all employees use smart cards for building access and passwords for computer login. A security consultant recommends adding fingerprint scanners to the computer login process.

Which security principle is the consultant trying to implement?