Second, the pursuit of documenting just about “all risks” and “all controls” implies a big amount of function and actually limitations the 1st line’s ability to go deep on issues that actually issue, generating prolonged qualitative inventories of challenges and controls as opposed to pinpointing materials risk exposures and examining the