System and Organization Controls (SOC) 2/CC1 Control Environment/9 of 61
CC1.4COSO Principle 4: The entity demonstrates a commitment to attract , develop, and retain competent individuals in alignment with objectives
Control family: CC1 Control Environment
Control description
The following points of focus highlight important characteristics relating to this criterion:
Points of focus specified in the COSO framework:
• Establishes Policies and Practices — Policies and practices reflect expectations of competence necessary to support the achievement of objectives.
• Evaluates Competence and Addresses Shortcomings — The board of directors and management evaluate competence across the entity and in outsourced service providers in relation to established policies and practices and act as necessary to ad?dress shortcomings.
• Attracts, Develops, and Retains Individuals — The entity provides the mentoring and training needed to attract, develop, and retain sufficient and competent person?nel and outsourced service providers to support the achievement of objectives.
• Plans and Prepares for Succession — Senior management and the board of directors develop contingency plans for assignments of responsibility important for internal control.