In the context of CRO certification, what is the most important consideration when implementing insurance & risk transfer?