What is the PRIMARY consideration when performing patient assessment in Information Security Analyst Certification practice?