Assessing risks and identifying needed policies and controls for general support systems , such as organizationwide networks or central data processing centers , that supported multiple business units .
Ignoring the risks for the general support systems .