10.08

Control Activities

Principle 10 - Design Control Activities

Attribute 10.08 - General control activities are designed to mitigate information security risks and are the actions established through policies and procedures that apply to all or a large segment of an entity's information technology. General control activities support the proper operation of the entity's information technology by creating a suitable environment for effective operation of application and user control activities. General control activities can be designed and implemented in either an automated or a manual manner.

>>>Navigational Buttons<<<

• Index of Attributes
• Previous Attribute - 10.07
• Next Attribute - 10.09

Jamie's Story

No examples are available to illustrate governance gaps for this attribute.

Election Anomalies

No examples are available to illustrate governance gaps for this attribute.