COSO’s Internal Control – Integrated Framework was introduced in 1992 as guidance
on how to establish better controls so companies can achieve their objectives with
minimal surprises. COSO categorizes entity-level objectives into operations, financial
reporting, and compliance. The framework includes more than 20 basic principles
representing the fundamental concepts associated with its five components: control
environment, risk assessment, control activities, information and communication,
and monitoring. Some of the principles include key elements for compliance, such as
integrity and ethical values, authorities and responsibilities, policies and procedures,
and reporting deficiencies