They are not all-inclusive and may not include particular control activities that an agency may need.
Agencies might need controls that aren't included.
If she wants to write a sketch of her pencil box, I for one will gladly read it.