Control environment - structure, authority, and responsibility

Management establishes structures, reporting lines, and appropriate authorities and responsibilities.

Trust Service Criterion

CC

Audit period

type-2

Points of focus

• Organizational structure supports control objectives
• Reporting lines are documented
• Authority and responsibility are assigned