ABSTRACT
The Control Formulation Process A properly functioning control process will ensure the overall value and productivity of the information and communication technology (ICT) operation while ensuring all legal and regulatory requirements for performance of the business process are met. e function of an established set of discrete behavioral and technical controls is to assure the status of some aspect of the ICT operation at a given point in time. is is accomplished by identifying organizational functions that require protection by controls and then deploying them. A concrete framework of best practice behaviors is deployed in order to ensure a desired level of organizational assurance. at framework is usually based on a standard model, which is appropriate to the control target.
e resultant control set is then assess or audited in order to determine the status of the target function with respect to its desired state. e resultant reviews or audits should provide sucient knowledge about the performance of the assigned control set in order to judge their eectiveness.
