related Technology framework (COBIT), state and federal compliance laws1 and other applicable
federal and state information security laws and regulations,2 as well as supplemental evidence, which
you will be required to discover through research of credible sources and cite in your report, to analyze
the case narrative provided on TJX. Upon your review, you are required to prepare a comprehensive
written report discussing your evaluation of TJX’s internal controls. The report will first be presented to
your firm’s top management team and then in summary to TJX’s management team.
In preparation for your involvement with this task force, you are required to review the internal
control framework(s) that you are assigned to use to assess compliance (i.e., COSO and/or COBIT).
The focus of your review will be only on those aspects of COSO and/or COBIT that are significant
to financial reporting and information security.