Which of the following is the MOST important characteristic of an effective risk management program?