What is the foundational principle of industry best practices in the Physical Security Certification field?