The organization
obtains or generates
and uses relevant,
quality information
to support the
functioning of internal
control.
The organization
internally communicates
information, including
objectives and
responsibilities for
internal control,
necessary to support
the functioning of
internal control.
The organization
communicates with
external parties
regarding matters
affecting the
functioning of
internal control.