Index of Attributes: Difference between revisions
| (4 intermediate revisions by the same user not shown) | |||
| Line 5: | Line 5: | ||
=== '''<u>Control Environment</u>''' === | === '''<u>Control Environment</u>''' === | ||
[[File:Control Environment.jpg|border|center | [[File:Control Environment.jpg|border|center]] | ||
==== Principle 1 - Demonstrate Commitment to Integrity and Ethical Values ==== | ==== [[Principle 1 - Demonstrate Commitment to Integrity and Ethical Values]] ==== | ||
* '''Attribute [[1.01]]''' | * '''Attribute [[1.01]]''' | ||
| Line 14: | Line 14: | ||
* '''Attribute [[1.02]]''' | * '''Attribute [[1.02]]''' | ||
* '''Attribute [[1.03]] | * '''Attribute [[1.03]]''' | ||
* '''Attribute [[1.04]]''' | * '''Attribute [[1.04]]''' | ||
* '''Attribute [[1.05]]''' | * '''Attribute [[1.05]]''' | ||
| Line 29: | Line 29: | ||
* '''Attribute [[1.10]] ''' | * '''Attribute [[1.10]] ''' | ||
==== Principle 2 - Exercise Oversight Responsibility ==== | ==== [[Principle 2 - Exercise Oversight Responsibility]] ==== | ||
* '''Attribute [[2.01]]''' | * '''Attribute [[2.01]]''' | ||
| Line 54: | Line 54: | ||
* '''Attribute [[2.13]]''' | * '''Attribute [[2.13]]''' | ||
==== Principle 3 - Establish Structure, Responsibility, and Authority ==== | ==== [[Principle 3 - Establish Structure, Responsibility, and Authority]] ==== | ||
* '''Attribute [[3.01]]''' | * '''Attribute [[3.01]]''' | ||
| Line 78: | Line 78: | ||
* '''Attribute [[3.12]]''' | * '''Attribute [[3.12]]''' | ||
==== Principle 4 - Demonstrate Commitment to Competence ==== | ==== [[Principle 4 - Demonstrate Commitment to Competence]] ==== | ||
* '''Attribute [[4.01]]''' | * '''Attribute [[4.01]]''' | ||
| Line 98: | Line 98: | ||
* '''Attribute [[4.08]]''' | * '''Attribute [[4.08]]''' | ||
==== Principle 5 - Enforce Accountability ==== | ==== [[Principle 5 - Enforce Accountability]] ==== | ||
* '''Attribute [[5.01]]''' | * '''Attribute [[5.01]]''' | ||
| Line 118: | Line 118: | ||
[[File:Risk Assessment.jpg|border]] | [[File:Risk Assessment.jpg|border]] | ||
==== Principle 6 - Define Objectives and Risk Tolerances ==== | ==== [[Principle 6 - Define Objectives and Risk Tolerances]] ==== | ||
* '''Attribute [[6.01]]''' | * '''Attribute [[6.01]]''' | ||
| Line 137: | Line 137: | ||
* '''Attribute [[6.10]]''' | * '''Attribute [[6.10]]''' | ||
==== Principle 7 - Identify, Analyze, and Respond to Risks ==== | ==== [[Principle 7 - Identify, Analyze, and Respond to Risks]] ==== | ||
* '''Attribute [[7.01]]''' | * '''Attribute [[7.01]]''' | ||
| Line 165: | Line 165: | ||
* '''Attribute [[7.15]]''' | * '''Attribute [[7.15]]''' | ||
==== Principle 8 - Assess Fraud, Improper Payment, and Informati<big>on</big> ==== | ==== [[Principle 8 - Assess Fraud, Improper Payment, and Information|Principle 8 - Assess Fraud, Improper Payment, and Informati<big>on</big>]] ==== | ||
* '''Attribute [[8.01]]''' | * '''Attribute [[8.01]]''' | ||
| Line 204: | Line 204: | ||
* '''Attribute [[8.20]]''' | * '''Attribute [[8.20]]''' | ||
==== Principle 9 - Identify, Analyze, and Respond to Change ==== | ==== [[Principle 9 - Identify, Analyze, and Respond to Change]] ==== | ||
* '''Attribute [[9.01]]''' | * '''Attribute [[9.01]]''' | ||
| Line 230: | Line 230: | ||
=== '''<u>Control Activities</u>''' === | === '''<u>Control Activities</u>''' === | ||
[[File:Control Activities.jpg|border|center]] | |||
==== Principle 10 - Design Control Activities ==== | ==== [[Principle 10 - Design Control Activities]] ==== | ||
* '''Attribute [[10.01]]''' | * '''Attribute [[10.01]]''' | ||
| Line 275: | Line 276: | ||
* '''Attribute [[10.23]]''' | * '''Attribute [[10.23]]''' | ||
==== Principle 11 - Design General Control Activities over Information ==== | ==== [[Principle 11 - Design General Control Activities over Information]] ==== | ||
* '''Attribute [[11.01]]''' | * '''Attribute [[11.01]]''' | ||
| Line 304: | Line 305: | ||
* '''Attribute [[11.17]]''' | * '''Attribute [[11.17]]''' | ||
==== Principle 12 - Implement Control Activities ==== | ==== [[Principle 12 - Implement Control Activities]] ==== | ||
* '''Attribute [[12.01]]''' | * '''Attribute [[12.01]]''' | ||
| Line 319: | Line 320: | ||
=== '''<u>Information and Communication</u>''' === | === '''<u>Information and Communication</u>''' === | ||
[[File:Information and Communication.jpg|border|center]] | |||
==== Principle 13 - Use Quality Information ==== | ==== [[Principle 13 - Use Quality Information]] ==== | ||
* '''Attribute [[13.01]]''' | * '''Attribute [[13.01]]''' | ||
| Line 339: | Line 341: | ||
* '''Attribute [[13.07]]''' | * '''Attribute [[13.07]]''' | ||
==== Principle 14 - Communicate Internally ==== | ==== [[Principle 14 - Communicate Internally]] ==== | ||
* '''Attribute [[14.01]]''' | * '''Attribute [[14.01]]''' | ||
| Line 356: | Line 358: | ||
* '''Attribute [[14.08]]''' | * '''Attribute [[14.08]]''' | ||
==== Principle 15 - Communicate Externally ==== | ==== [[Principle 15 - Communicate Externally]] ==== | ||
* '''Attribute [[15.01]]''' | * '''Attribute [[15.01]]''' | ||
| Line 375: | Line 377: | ||
=== '''<u>Monitoring</u>''' === | === '''<u>Monitoring</u>''' === | ||
[[File:Monitoring.jpg|border|center]] | |||
==== Principle 16 - Perform Monitoring Activities ==== | ==== [[Principle 16 - Perform Monitoring Activities]] ==== | ||
* '''Attribute [[16.01]]''' | * '''Attribute [[16.01]]''' | ||
| Line 398: | Line 401: | ||
* '''Attribute [[16.10]]''' | * '''Attribute [[16.10]]''' | ||
==== Principle 17 - Evaluate Issues and Remediate Deficiencies ==== | ==== [[Principle 17 - Evaluate Issues and Remediate Deficiencies]] ==== | ||
* '''Attribute [[17.01]]''' | * '''Attribute [[17.01]]''' | ||
Latest revision as of 06:38, 16 September 2026
Overview
This page is an index, referencing Green Book Attributes (potential deviations) to parts of my story.
Control Environment

- Attribute 1.01
Tone at the Top
Standards of Conduct
Adherence to Standards of Conduct
- Attribute 2.01
Oversight Structure
- Attribute 2.02
- Attribute 2.03
- Attribute 2.04
- Attribute 2.05
- Attribute 2.06
- Attribute 2.07
- Attribute 2.08
Oversight for the Internal Control System
Input for Remediation of Deficiencies
- Attribute 3.01
Organizational Structure
Assignment of Responsibility and Delegation of Authority
Documentation of the Internal Control System
- Attribute 4.01
Expectations of Competence
Recruitment, Development, and Retention of Individuals
- Attribute 4.05
Succession and Contingency Plans and Preparation
- Attribute 5.01
Enforcement of Accountability
Consideration of Excessive Pressures
Risk Assessment
- Attribute 6.01
Definitions of Objectives
Definitions of Risk Tolerances
- Attribute 7.01
Identify Risks
Analyze Risks
Respond to Risks
- Attribute 8.01
Identify Risks Related to Fraud, Improper Payments, and Information Security
Types of Fraud and Fraud Risk Factors
Types of Improper Payments and Improper Payment Risk Factors
- Attribute 8.13
Types of Information Security Risk and Information Security Risk Factors
Analyze and Respond to Identified Risks
- Attribute 9.01
Identify Significant Changes
Establish a Change Assessment Process
Identify, Analyze and Respond to Risks Related to Significant Changes
Control Activities

- Attribute 10.01
Response to Risks
- Attribute 10.02
Design of Appropriate Types of Control Activities
Design of Automated and Manual Control Activities
Design of Preventive and Detective Control Activities
Design of Control Activities at Various Levels
- Attribute 10.14
- Attribute 10.15
- Attribute 10.16
- Attribute 10.17
- Attribute 10.18
- Attribute 10.19
- Attribute 10.20
Segregation of Duties
- Attribute 11.01
Response to Risks
- Attribute 11.02
Design of the Entity’s Information Technology
Design of Appropriate Types of General Control Activities
- Attribute 11.07
- Attribute 11.08
- Attribute 11.09
- Attribute 11.10
- Attribute 11.11
- Attribute 11.12
- Attribute 11.13
- Attribute 11.14
- Attribute 11.15
- Attribute 11.16
- Attribute 11.17
- Attribute 12.01
Documentation of Control Activities Through Policies and Procedures
Periodic Review of Control Activities
- Attribute 12.05
Information and Communication

- Attribute 13.01
Identification of Information Requirements
Relevant Data from Reliable Sources
- Attribute 13.04
Data Processed into Quality Information
- Attribute 14.01
Communication Throughout the Entity
Appropriate Methods of Communication
- Attribute 15.01
Communication with External Parties
Appropriate Methods of Communication
Monitoring

- Attribute 16.01
Establishment of a Baseline
Internal Control System Monitoring
Evaluation of Results
- Attribute 17.01
Reporting of Issues
Evaluation of Issues
- Attribute 17.05
Corrective Actions

