In 1978, Cohen Commission (the Commission on Audi- tors’ Responsibilities) required that the management should assess internal control system. In 1992, COSO (The Committee of Sponsoring Organizations of The National Commission of Fraudulent Financial Reporting) issued Internal Control-Integrated Framework, providing a more comprehensive framework of internal control. Internal control disclosure changed from voluntary dis- closure to mandatory one, after Sarbanes-Oxley Act was passed and implemented in July 2002.