When performing compliance-based assessments, which of the following is the MOST important Key consideration?