For information security , as with other types of internal controls , these views and requirements generally flow directly from risk considerations , as illustrated in the management cycle depicted above .
Information security and risk considerations are illustrated in several other graphs .