anchor: Assessing risks and identifying needed policies and controls for general support systems, such as organizationwide networks or central data processing centers, that supported multiple business units.
positive: Figuring out risks and policies as well as controls for general support systems.
negative: Ignoring the risks for the general support systems.