Principle 9 - Identifies and Analyzes Significant Change

Principle 9 requires an organization to systematically detect any significant internal or external changes that could affect its objectives and to evaluate the related risks. By analyzing these changes, management can adjust control activities, information processes, or risk-responses to keep the internal-control system effective.