Internal Control Discussions
COSO’s definition of internal control is
“a process, affected by an entity’s board of
directors, management, and other personnel,
designed to provide reasonable assurance
regarding the achievement of objectives relating
to operations, reporting, and compliance.”
It also identifies five components of internal
control: the control environment, risk
assessment, control activities, information
and communication, and monitoring. CPAs
can use the framework and its underlying
directions on operational, reporting, and compliance
objectives to advise small and
entrepreneurial organizations on how they
can improve both their business operations
and bottom line.
Achieving entity objectives relating to
the efficiency and effectiveness of operations
includes suggestions to minimize
errors, as well as the time spent correcting
errors that may occur (e.g., automation
of business processes). Financial reporting
objectives include controls that ensure
all conducted transactions are reported in