Implement supervisory practices

Status: Live

The organization will ensure that it implements adequate supervisory practices within the IT organization. [UCF ID 00773]

Supporting and supported controls

This control directly supports:

Maintain the IT staff structure in line with strategic goals [UCF Control ID 00764]

There are no supporting controls.

Authority documents complied with:

Protection of Assets Manual, ASIS International, Revised Volume 1 Pg 2-I-26; TITLE 49, Subtitle VII - Aviation Programs, December 5, 2001, § 44935(a); CobiT 4.1, PO4.10; Archer Control Table, ATCS-066, ATCS-787

US Federal Security Guidance

The organization should ensure communications, responsibilities, and lines of authority are clear and direct. The communications channels should allow interaction amongst personnel and the accomplishment of the organization's mission. [Revised Volume 1 Pg 2-I-26, Protection of Assets Manual, ASIS International]

Employment standards must include minimum staffing levels. [§ 44935(a), TITLE 49, Subtitle VII - Aviation Programs, December 5, 2001]

General Guidance

The organization should implement adequate supervisory practices in the IT function to ensure that roles and responsibilities are properly exercised, to assess whether all personnel have sufficient authority and resources to execute their roles and responsibilities, and to generally review key performance indicators. [PO4.10, CobiT 4.1]