Management sets the objectives, puts the control mechanisms and activities in place, and monitors and evaluates the control.
The objectives are created by management.
Management only supervises and is not responsible for objective creation.