https://idgol.com/the-ultimate-purpose-of-control-risk-assessment-is-to