f. Control Activities
1) These policies and procedures help ensure that management directives are carried out. Whether automated or manual, they are applied at various levels of the entity and stages of processes. They may be preventive or detective, and segregation of duties is usually present. Three principles relate to control activities.
a) The organization selects and develops control activities that contribute to the mitigation of risks to the achievement of objective to acceptable levels.
b) The organization selects and develops general control activities over technology to support the achievement of objective.
c) The organization deploys control activities through policies that establish what is expected and procedures that put policies into action.