Assessing risks and identifying needed policies and controls for general support systems, such as organizationwide networks or central data processing centers, that supported multiple business units.
Figuring out risks and policies as well as controls for general support systems.