10.04
From Corrective Action Plan AZ
Control Activities
Principle 10 - Design Control Activities
Attribute 10.04 - The common categories of control activities listed in table 1 illustrate the range and variety of control activities that may be useful to management. The list is not all inclusive and may not include all categories of control activities that an entity may need.
Common Categories of Control Activities
- Top-level reviews of actual performance
- Reviews by management at the functional or activity level
- Establishment and review of performance measures and indicators
- Management of human capital
- Control activities over information processing
- Physical control activities over vulnerable assets
- Access restrictions to and accountability for resources and records
- Authorization of transactions
- Control activities over complete, accurate, and timely recording of valid transactions
- Appropriate documentation of transactions and control activities
- Oversight of entity business processes assigned to service organizations
- Segregation of duties
- Program-related control activities
- Fraud-related control activities
- Improper-payment-related control activities
- Compliance-related control activities
