CONTROL ACTIVITIES
In such cases where the control activities are not stated, the control activities may either be the same
as the response action or had been integrated into regular business activities.
INFORMATION AND COMMUICATION
The effectiveness of their communication and the flow of information are evaluated from the
“Assignment of responsibility and authority” part of section 1 – Internal environment.
MONITORING
Apart from the regular or periodic reviews, other monitoring activities which may be specific to the
particular topic or risk in question may be stated. Where no one is given in the analysis table, or not
explicitly stated that there is none, it is taken that the regular ongoing monitoring is in place.
ROLES AND RESPONSIBILITIES
Please, see the “Assignment of responsibility” part of section 1- Internal Environment.