What is a fundamental principle of Incident Response & Recovery in Certified Authorization Professional practice?