Which of the following is a fundamental principle of red flag & anomaly detection as it applies to Certified Fraud Analyst?