3.09
From Corrective Action Plan AZ
Principle 3: Establish Structure, Responsibility, and Authority
Attribute 3.09: Management develops and maintains documentation of its internal control system [documentation requirement].
Emphasis was added to Attribute 3.09 by the US Government Accountability Office.
