The Instrument does not prescribe how the certifying officers should conduct their DC&P and ICFR evaluations. Certifying officers should exercise their judgment, acting reasonably, and should apply their knowledge and experience in determining the nature and extent of the evaluation.