Why should the QMS make provision for the allocation of responsibilities and authority?