Which GRC model principle emphasizes that risk management activities should be proportional to the size and complexity of the organization?
