D. Information and Communications

Information should be communicated to relevant personnel at all levels within an organization.  The information should be relevant, reliable, and timely.  It is also crucial that an organization communicate with outside organizations as well, whether providing information or receiving it.  

Examples include:

• Receiving updated guidance from central oversight agencies.

• Management communicating requirements to the operational staff.

• Operational staff communicating with the information systems staff to modify application software to extract data requested in the guidance.

Return to Internal Controls