Author Seeks Name of a Security Law Similar to Murphy's Law

The author of the post is trying to recall the name of a law in cybersecurity that states if you are responsible for the security of a system but do not have the authority to enforce it, your role is to take the blame in case of a problem. The author eventually finds the answer shortly after posting the question: it is the "First principle of Security Administration" by Spaf.