Management needs to comprehensively identify risks and should consider all significant interactions between the entity and other parties as well as internal factors at both the entitywide and activity level.
391085
The risks must be identified comprehensively by management.
391086
Management doesn't have to identify the risks to any comprehensive degree.