Top suggestions for rewrite: [Risk description attempts to ‘catch-all’ and is too broad. Doesn’t support understanding of key risks for thebusienss,andconseqeutnly doesn’t support identification of effective key controls; Risk description is specific to the business area – allows identification/understanding of key compliance risks relevant fo the area, and supports formulation of key controls,e tc. To adequately mitigate the risk ] |