COSO model of internal control
COSO’s Enterprise Risk Management—Integrated Framework (COSO, 2004) states that internal control is an integral part of enterprise risk management. This is described in COSO’s Internal Control—Integrated Framework (COSO, 1992) which is encompassed within the ERM framework.
The COSO, internal control framework contains five elements:
1. Control environment
2. Risk assessment
3. Control activities
4. Monitoring
5. Information and communication.
The control environment was discussed above. The risk assessment section of the model identifies the risks of failing to meet financial reporting objectives; failing to meet compliance and failing to meet operational objectives. This is consistent with the CIMA definition (above) of internal control. COSO recommends the identification of external and internal risks to the organization and its activities.
Control activities are the policies and procedures that help ensure management directives are carried out and objectives are achieved. These include both accounting and Nona counting controls.MATLAB仿真在信号处理中的应用+GUI界面设计
Information and communications covers the need to capture relevant internal and external information about competition, economic and regulatory matters and the potential of strategic and integrated information systems. Monitoring is concerned with the need for management to monitor the entire control system through specific evaluations.
上一页 [1] [2] [3] [4] [5] [6] [7] [8] [9] 下一页