After the various financial scandals that have shaken investors worldwide, corporate
governance best practices have stressed in particular the key role played by the internal
control system (ICS) in the governance of the firm. Internal control systems contribute to the
protection of investors’ interests both by promoting and giving assurance on the reliability of
financial reporting, and by addressing the boards’ attention on the timely identification,
evaluation and management of risks that may compromise the attainment of corporate goals.
These functions have been widely recognized by the most diffused frameworks for the design
of ICS that have stated the centrality of internal control systems in providing reasonable
assurance to investors regarding the achievement of objectives concerning the effectiveness
and efficiency of operations, the reliability of financial reporting and the compliance with
laws and regulations (COSO, 1992; 2004).