Risks are appropriately identified and managed.
• Interaction with the various governance groups occurs as needed.
• Significant financial, managerial, and operating information is complete, accurate, reliable,
and timely.
• Employees’ actions are in compliance with policies, standards, procedures, and applicable
laws and regulations.
• Resources are acquired economically, used efficiently, and adequately protected.
• Programs, plans, and objectives are achieved.
• Quality and continuous improvement are fostered in the organization’s control processes.
• Significant legislative or regulatory issues impacting the organization are recognized and
addressed appropriately.
Opportunities for improving management control, profitability, and the organization’s image may
be identified during audits. They will be communicated to the appropriate level of management.