Principle 1: Lay solid foundations for management and oversight