In the context of CMO certification, what is the most important consideration when implementing records management & foia?