Which of the following is a fundamental principle of risk appetite & tolerance frameworks as it applies to Certified Risk Analyst?