Control activities mitigate risks that threaten objectives and thus provide reasonable assurance that objectives will be achieved.

Risks cover both:

Threats of bad things happening

And threats of missing opportunities.

Some control activities are visible and therefore can be

Instructions

Photograph two different controls you observe around campus and/or the surrounding community. Use your imagination and ingenuity. Each team must work independently to produce a unique set of pictures.

One of the controls photographed must be control designed to mitigate risks of bad things happening

The other control photographed must be control designed to mitigate risks of missing opportunities (that is, controls designed to help something good happen).

For each control activity photographed:

Clearly indicate whether the control is designed to mitigate the threat of bad things happening or the threat of missing opportunities.

Then briefly and separately describe:

The objective that the control activity is designed to help achieve.

The risk that the control activity is designed to mitigate. (Note: The risk you describe must be something other than merely the inverse of the objective.)

How the control activity is meant to operate (that is, how the control works).

As an internal auditor, how would you test the control activity to determine whether it is operating effectively?

/// Welcome 9 15 41 OK D TUE ESC MENU OUT INA Fingerprint door access control BBI Intrusion alarm