Procedures implemented to define the roles, responsibilities, policies, and administrative functions needed to manage the control environment.

$*$

Integrity

Risk transfer

Compensating controls

Administrative controls