Sentence 1: For information security, as with other types of internal controls, these views and requirements generally flow directly from risk considerations, as illustrated in the management cycle depicted above.

Sentence 2: The management cycle depicts views and requirements flowing from a state of anarchy.
Is this second sentence entailed by the first sentence?
no