This COSO-based guide provides a list of control objectives, potential risks, and points-of-focus for potential control activities for Manage Information Technology activities. This is a sub-activity of Administration, which is the fourth of the primary generic ‘infrastructure’ activities identified in the ‘Value Chain’ model of a business enterprise.