3.10

Principle 3: Establish Structure, Responsibility, and Authority

Attribute 3.10: Effective documentation assists in management's design of internal control by establishing and communicating the who, what, when, where, and why of internal control execution to personnel. Documentation also provides a means to retain organizational knowledge and mitigate the risk of having that knowledge limited to a few personnel, and to communicate that knowledge as needed to external parties, such as external auditors.