А Тор-Down Approach to Risk Management and Internal Control: Issue #2: Using an Aggregated Risk Assessment to Reduce Documentation Costs