Implement supervisory practices within IT.

UCF ID: 00773

Control Type: Process or Activity

Status: Live

Supporting and supported controls

This control directly supports:

Establish and maintain the IT staff structure in line with strategic goals. [UCF Control ID 00764]

There are no supporting controls.

Authority documents complied with:

Protection of Assets Manual, ASIS International, Revised Volume 1 Pg 2-I-26; TITLE 49, Subtitle VII - Aviation Programs, December 5, 2001, § 44935(a); CobiT, Version 4.1, PO4.10

US Federal Security Guidance

Employment standards must include minimum staffing levels. [§ 44935(a), TITLE 49, Subtitle VII - Aviation Programs, December 5, 2001]

General Guidance

The organization should ensure communications, responsibilities, and lines of authority are clear and direct. The communications channels should allow interaction amongst personnel and the accomplishment of the organization's mission. [Revised Volume 1 Pg 2-I-26, Protection of Assets Manual, ASIS International]

The organization should implement adequate supervisory practices in the IT function to ensure that roles and responsibilities are properly exercised, to assess whether all personnel have sufficient authority and resources to execute their roles and responsibilities, and to generally review key performance indicators. [PO4.10, CobiT, Version 4.1]