sentence1: Assessing risks and identifying needed policies and controls for general support systems, such as organizationwide networks or central data processing centers, that supported multiple business units.
sentence2: Ignoring the risks for the general support systems. 