Which of the following is a fundamental principle of operational risk events & kris as it applies to Certified Risk Analyst?