| 💼 CC5.1 The entity selects and develops control activities that contribute\ \ to the mitigation of risks to the achievement of objectives to acceptable levels. | 6 | | | |
| 💼 CC5.1-1 Integrates With Risk Assessment | | | | |
| 💼 CC5.1-2 Considers Entity-Specific Factors | | | | |
| 💼 CC5.1-3 Determines Relevant Business Processes | | | | |
| 💼 CC5.1-4 Evaluates a Mix of Control Activity Types | | | | |
| 💼 CC5.1-5 Considers at What Level Activities Are Applied | | | | |
| 💼 CC5.1-6 Addresses Segregation of Duties | | | | |
| 💼 CC5.2 The entity also selects and develops general control activities over\ \ technology to support the achievement of objectives. | 4 | | | |
| 💼 CC5.2-1 Determines Dependency Between the Use of Technology in Business Processes and Technology General Controls | | | | |
| 💼 CC5.2-2 Establishes Relevant Technology Infrastructure Control Activities | | | | |
| 💼 CC5.2-3 Establishes Relevant Security Management Process Controls Activities | | 16 | 17 | |
| 💼 CC5.2-4 Establishes Relevant Technology Acquisition, Development, and Maintenance Process Control Activities | | | | |
| 💼 CC5.3 The entity deploys control activities through policies that establish\ \ what is expected and in procedures that put policies into action. | 6 | | | |
| 💼 CC5.3-1 Establishes Policies and Procedures to Support Deployment of\ \ Management's Directives | | | | |
| 💼 CC5.3-2 Establishes Responsibility and Accountability for Executing Policies and Procedures | | | | |
| 💼 CC5.3-3 Performs in a Timely Manner | | | | |
| 💼 CC5.3-4 Takes Corrective Action | | | | |
| 💼 CC5.3-5 Performs Using Competent Personnel | | | | |
| 💼 CC5.3-6 Reassesses Policies and Procedures | | | | |