Nov 13, 2018
A series of statements made by an organization, which:
1) provide a specific target for control evaluation; and
2) define the processes, policies, and procedures in place in the organization’s control environment.