Which of the following is considered a control environment factor by the COSO definition of internal control?