{"id":2845,"date":"2020-08-14T17:04:39","date_gmt":"2020-08-14T14:04:39","guid":{"rendered":"https:\/\/teolupus.com\/?p=2845"},"modified":"2023-10-25T16:44:02","modified_gmt":"2023-10-25T13:44:02","slug":"internal-control-qa","status":"publish","type":"post","link":"https:\/\/teolupus.com\/en\/internal-control-qa\/","title":{"rendered":"Question and Answers about Internal Control"},"content":{"rendered":"<h2><b>Internal Control<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The organization and method established by the Company to ensure that activities are carried out effectively, economically, and efficiently in accordance with the Company&#8217;s objectives, determined policies, and legislation, assets, and resources are protected, accounting records are kept accurately and completely, and financial and management information is produced in a timely and reliable manner. It refers to the set of financial and other controls covering the process and internal audit.<\/span><\/p>\n<h2><b>Automatic Controls<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">They are computer-aided controls placed within the system.<\/span><\/p>\n<h2><b>Principle of Separation of Duties<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">It is the sharing of the duties of approving, implementing, recording, and controlling activities and financial decisions and transactions among the personnel to reduce the risks of errors, omissions, inaccuracies, irregularities, and corruption.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To implement this principle, the duties of approving, implementing, recording, and controlling each activity, financial decision, or transaction should be assigned to different people.<\/span><\/p>\n<h2><b>What is Coso?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">COSO: Committee of Sponsoring Organizations of the Treadway Commission &#8211; It consists of the initials of the Committee of Sponsoring Organizations Supporting the Treadway Commission.<\/span><\/p>\n<h2><b>Treadway Commission<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The National Commission to Combat Fraudulent Financial Reporting was established after the US Watergate Scandal that emerged in the mid-1970s and the enactment of the Foreign Corrupt Practices Act in 1977, the main subject of which was internal control. It was established upon the call of this commission to prevent fraudulent reporting.<\/span><\/p>\n<h2><b>COSO founding date<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">It was founded in 1985 by the American Institute of Certified Public Accountants, the American Accounting Association, the Financial Executives Institute, the Institute of Internal Auditors, and the Institute of Management Accountants.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<h2><b>Frameworks Published by Coso<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">COSO\u00a0<\/span><i><span style=\"font-weight: 400;\">(The Committee of Sponsoring Organizations of the Treadway Commission)\u00a0<\/span><\/i><span style=\"font-weight: 400;\">There are two frameworks initially published:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Internal Control-Integrated Framework, one of which was published in 1992, was revised in 2013.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The other one is \u201cEnterprise Risk Management-Integrated Framework,\u201d published in 2004.<\/span><i><span style=\"font-weight: 400;\">yes&#8221; say<\/span><\/i><span style=\"font-weight: 400;\">(Enterprise Risk Management \u2013 \u200b\u200bIntegrated Framework). It was republished in 2017 under the name Corporate Internal Control Framework Aligned with Strategy and Performance.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<h2><b>Basic Principles of Internal Control<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Internal control activities are carried out within the framework of management responsibility.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Risky areas are primarily taken into account in internal control activities and regulations.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Responsibility for internal control covers all officials involved in the transaction process.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Internal control covers all financial and non-financial transactions.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The internal control system is evaluated at least once a year and determines the measures to be taken.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Internal control regulations and practices are based on corporate governance principles such as compliance with legislation, transparency, accountability, economy, and effectiveness.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<h2><b>Benefits of Effective Internal Control<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">It gives greater confidence to management, the board of directors, and other stakeholders in achieving goals,<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Helping companies institutionalize offers the ability to meet certain conditions required to access capital markets.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It gives confidence to external investors in providing capital.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It provides reliable reporting supporting management and the board&#8217;s decision-making on product pricing, capital investment, and resource allocation.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Provides increased efficiency in functions and processes;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The opportunity to protect assets is provided.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It provides a basis for decisions that are highly dependent on the individual and require significant judgment.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It creates consistent mechanisms for the success and reliability of operations.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Provides the ability to accurately communicate business performance to business partners and customers to help maintain relationships.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Internal Control Risk Management Relationship<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">The internal control system is the basis of the risk management system.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The internal control system supports the management against the risks inherent in business activities in controlling and managing these risks. This support is the first step in risk management.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Businesses determine their goals, then internal (natural) risks that will prevent achieving them.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In general, the primary purpose of the risk management system is to eliminate internal (natural) risks through measures to be taken.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If there are still some risks despite the control measures, these are called residual risks.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<h2><b>Internal Control Internal Audit Relationship<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Internal control provides reasonable assurance as a tool built into processes and workflows, influenced by people, and used to achieve the objectives of the business. In this respect, internal control is the responsibility of the business management.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Internal Audit activity is needed to evaluate the effectiveness and appropriateness of Internal Control. Therefore, internal control and internal audit should be considered two different but complementary concepts.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">While the existence of an internal control system constitutes one of the foundations of an organization&#8217;s institutionalization, the internal controls&#8217; appropriateness and quality are valued by the Internal Audit activity.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<h2><b>Internal Control and Independent Audit Relationship<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The Independent Auditor must understand the internal control system of the business. The Independent Auditor uses the information obtained about the internal control system in the processes of identifying possible types of material misstatement, reviewing the factors affecting the risk of material misstatement, and designing the timing, scope, and structure of additional independent audit techniques.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">There is an inverse relationship between the internal control system and Audit risk. As the effectiveness of the internal control system increases, audit risk decreases, and as the effectiveness of the internal control system decreases, audit risk rises.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If an effective internal control system exists, the auditor can narrow the scope and work with a smaller sample size. In this case, it will naturally reduce the resources that need to be allocated to auditing.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<h2><b>COSO Internal Control Components and Principles<\/b><\/h2>\n<ul>\n<li aria-level=\"1\">\n<h3><b>control environment<\/b><\/h3>\n<\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 1:\u00a0Ethical Values \u200b\u200band Integrity<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 2: Oversight Responsibility of the Board<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 3: Establishing Structure Authority and Responsibilities<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 4: Commitment to Competence<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 5: Accountability<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\">\n<h3><b>Risk assessment<\/b><\/h3>\n<\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle\u00a06: Setting Appropriate Goals<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 7: Identifying and Analyzing Risks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 8:\u00a0Assessing the Risk of Fraud<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 9: Identify and Analyze Significant Changes<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\">\n<h3><b>Control activities<\/b><\/h3>\n<\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 10: Selecting and Developing Control Actions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 11: Selecting and Developing General Controls to Apply to Technology<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 12: Implementation through Policies and Procedures<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\">\n<h3><b>information contact<\/b><\/h3>\n<\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 13: Using Relevant Information<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 14: Communicating Within the Organization<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 15: Communicating with External Parties<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\">\n<h3><b>Tracing<\/b><\/h3>\n<\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 16: Conduct Continuous and\/or Separate Evaluations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principle 17: Assessing and reporting deficiencies<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-level=\"1\">\n<h3><b>Classification of Control Actions<\/b><\/h3>\n<\/li>\n<\/ul>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">router,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Inhibitor,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">detecting<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Corrective<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Alternative<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<h2><b>Resources<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IPPF (International Professional Practice Framework) &#8211; Standards, Practice Recommendations, Practice Guides)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Public Internal Audit Guide (Public Internal Audit Coordination Board Ankara September 2013)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">\u0130SMMMO-Practical Information for Internal Audit in SMEs 2013<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Teolupus Internal Audit Guide Studies<\/span><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Internal Control The organization and method established by the Company to ensure that activities are carried out effectively, economically, and efficiently in accordance with the Company&#8217;s objectives, determined policies, and&#8230;<\/p>\n","protected":false},"author":2,"featured_media":4030,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[845,842],"tags":[70,995],"class_list":{"0":"post-2845","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-insights","8":"category-publications","9":"tag-coso","10":"tag-internal-controls-en"},"_links":{"self":[{"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/posts\/2845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/comments?post=2845"}],"version-history":[{"count":0,"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/posts\/2845\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/media\/4030"}],"wp:attachment":[{"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/media?parent=2845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/categories?post=2845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teolupus.com\/en\/wp-json\/wp\/v2\/tags?post=2845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}