Which of the following is a correct guiding principle of composite risk management (crm)?

Which of the following is a correct guiding principle of composite risk management (crm)?