Third Internal Control Standards: Policies And Processes

The third internal control standard addresses control activities. Internal control activities are the policies, procedures, techniques, and mechanisms that help ensure that management’s directives to mitigate risks identified during the risk assessment process are carried out. Control activities are an integral part of the agency’s planning, implementing, and reviewing. They are essential for proper stewardship and accountability for government resources and for achieving effective and efficient program results. Control activities occur at all levels and functions of the agency. They include a wide range of diverse activities, such as approvals, authorizations, verifications, reconciliations, performance reviews, security activities, and the