The AICPA has provided points of focus for each criteria or principle that can guide organizations while implementing controls to address the criteria. There are more than 30 points of focus related to the information and communication criteria.