Our integration of COSO into the audit process is similar to one described in The IIA Research Foundation report, The Internal Auditor’s Role in Management Reporting on Internal Control. The report suggests that audit results be cataloged in terms of the COSO framework and that this information be utilized in top-level reports to management and the board of directors. Our approach builds on some of these concepts by incorporating COSO criteria into each stage of the audit process.