COSO states that information is needed at all levels of an organization to run the business and achieve the company’s control objectives. However, the identification, management, and communication of relevant information represent an ever increasing challenge to the IT department. The determination of which information is required to achieve control objectives and the communication of this information in a form and time frame that allow people to carry out their duties support and other four components of the COSO framework.