3 / 5

Establishes Structure, Authority, and Responsibility

CC1 — Control Environment · Last reviewed Mar 29, 2026

Status

○ NOT STARTED ◑ IN PROGRESS ✓ IMPLEMENTED — NOT APPLICABLE

What this control requires

Management establishes organizational structure, reporting lines, and appropriate authorities and responsibilities in pursuit of objectives.

Details

Risk Level

— LOW MEDIUM HIGH

Control Owner

Next Review Date

Notes — what's been done, what's missing, any gaps