A hospital hosts a service that processes sensitive patient billing information. In the event of a failure, the confidentiality and integrity of the patient data must take priority. What failure mode configuration is most suitable for this service?