COSO Framework Flashcards
COSO Internal Control
Internal Controls are Processes, designed, and implemented by an entity’s management, BOD, and other employees to provide reasonable assurance about the achievement of entity objectives.
T/F COSO Internal Controls are rule based?
F - principals, tailored to the particular company in a particular industry
Reporting Objectives
Timeliness, reliability, transparency of an entity’s external and internal financial and non-financial reporting
Operational Objectives
Effectiveness and efficiency of an entity’s operations and ensuring assets of the organization are properly safeguarded
Compliance Objectives
Reasonable assurance the entity will comply with applicable laws and regulations
Control Environment
Tone at the top; includes processes, structures and standards that provide the foundation for an entity to establish a system of internal control
What are principles related to Control Environment?
Competence
Accountability
Board Independence
Lines of Authority
Ethics
Competence
Organization demonstrates commitment to attract, develop, and retain competent individuals as well as prepare for turnover and succession planning
Accountability
Organizations need to hold employees accountable for their internal control responsibilities, need to measure performance, possible incentives and rewards as appropriate, disciplinary actions as necessary
Board Independence
Board oversees internal control from initial development of controls to performance oversight
Lines of Organizational Structure
Organizational structure is tailored to the entity and reporting relationships do no undermine the commitment to effective financial reporting and internal control
Ethics
Commitment to ethics from top down through behavior, code of conduct
Risk Assessment
Relates to objective setting, assessing risks, fraud, and change management
What are the principles of Risk Assessment?
Objective Setting
Assessment of Risk
Fraud
Change Management
Objective Setting
Understanding the organization’s mission, vision, and core values to ensure the objectives are aligned with the overall goals and direction of the organization
Assessment of Risk
Assessment of operational, reporting, and compliance risks and determining how to respond
Fraud Risk
Considers incentives and pressures to commit fraud and ability to rationalize it
Fraud triangle
Incentives & pressure, opportunity, ability to rationalize
Change Management
Assessing changes that could significantly impact the system of internal control such as changes in industry trends or key employees leaving the company
Control Activities
Methods used to implement the response to risk