 Premise is: There are certain categories of control activities that are common to all agencies.
Hypothesis is: Control activities such as safe business practices are universally common across all agencies.