Second, the pursuit of documenting almost “all pitfalls” and “all controls” implies an important quantity of get the job done and actually boundaries the first line’s capability to go deep on troubles that actually matter, developing prolonged qualitative inventories of hazards and controls instead of figuring out material threat exposure