Which of the following is a fundamental principle of risk & opportunity assessment as it applies to ISO 9001 Certified Auditor?