CC5.3 CC5
Control Activities / CC5.3
Deploying controls through policies people can follow
In plain English
Controls are put into effect through policies that establish what is expected and procedures that turn those policies into action, performed by competent people at a sensible frequency.