What this control requires
The entity deploys control activities through policies that establish what is expected and in procedures that put policies into action. Responsibilities are clearly assigned, executed by competent personnel, and taken in a timely manner.