Control activities will not be fully effective until everyone, from the person on the counter through to the head of the agency, takes responsibility for managing risk from the perspective of their respective positions.
In order for control activities to maximize their effectiveness, it's important for everyone in the agency to take a responsible approach to risk management.