Control activities will not be fully effective until everyone , from the person on the counter through to the head of the agency , takes responsibility for managing risk from the perspective of their respective positions .
When everyone decides to manage risk from their particular positions , it becomes easier to implement control activities .