Which of the following is a fundamental principle of soc operations & alert triage as it applies to Certified Cyber Professional?