Text: They are not all-inclusive and may not include particular control activities that an agency may need.
Entailment: Agencies might need controls that aren't included.
Contradiction: These are all-inclusive and so agencies never find themselves with controls they need left off the list.