Neil thibodaux at 01:53, 16 August 2026

2026-08-16T01:53:16Z

← Older revision		Revision as of 01:53, 16 August 2026
Line 10:		Line 10:
	* '''Integrity''' - Guarding against improper information modification or destruction, which includes ensuring information's nonrepudiation and authenticity.		* '''Integrity''' - Guarding against improper information modification or destruction, which includes ensuring information's nonrepudiation and authenticity.
	* '''Availability''' - Ensuring timely and reliable access to and use of information, thus preventing the disruption of access to or use of information or information technology.		* '''Availability''' - Ensuring timely and reliable access to and use of information, thus preventing the disruption of access to or use of information or information technology.

			'''>>>Navigational Buttons<<<'''
			* '''[[Index of Attributes]]'''
			* '''Previous Attribute - ?'''
			* '''Next Attribute - ?'''
			__FORCETOC__

			=== '''No Examples''' ===

Neil thibodaux: Created page with "'''Control Activities''' '''Principle 11 - Design General Control Activities over Information Technology''' '''Attribute 11.07''' - Management designs appropriate types of general control activities to mitigate information security risks. General control activities are the actions established through policies and procedures that apply to all or a large segment of an entity's information technology. They support the proper operation of the entity's information technol..."

2026-08-16T01:39:07Z

Created page with "'''Control Activities''' '''Principle 11 - Design General Control Activities over Information Technology''' '''Attribute 11.07''' - Management designs appropriate types of general control activities to mitigate information security risks. General control activities are the actions established through policies and procedures that apply to all or a large segment of an entity's information technology. They support the proper operation of the entity's information technol..."

New page

'''Control Activities'''

'''Principle 11 - Design General Control Activities over Information Technology'''

'''Attribute 11.07''' -

Management designs appropriate types of general control activities to mitigate information security risks. General control activities are the actions established through policies and procedures that apply to all or a large segment of an entity's information technology. They support the proper operation of the entity's information technology by creating a suitable environment for effective operation of application and user control activities. When designing general control activities, management evaluates information security objectives to meet the defined information requirements. General control activities are designed to achieve one or more of the following information security objectives:

* '''Confidentiality''' - Preserving authorized restrictions on information access and disclosure, including means for protecting privacy and sensitive information.
* '''Integrity''' - Guarding against improper information modification or destruction, which includes ensuring information's nonrepudiation and authenticity.
* '''Availability''' - Ensuring timely and reliable access to and use of information, thus preventing the disruption of access to or use of information or information technology.

11.07 - Revision history

Neil thibodaux at 01:53, 16 August 2026