Due to the framework both able to assess the level of process risk, identify the need for establishment of mitigating control activities or assess the effectiveness of controls by management supervision.