sentence1: Assessing risks and identifying needed policies and controls for general support systems, such as organizationwide networks or central data processing centers, that supported multiple business units.
sentence2: Figuring out risks and policies as well as controls for general support systems. 