Need the latest on the new, revised COSO internal controls framework? Executive's Guide to COSO Internal Controls provides a step-by-step plan for installing and implementing effective internal controls with an emphasis on building improved IT as well as other internal controls and integrating better risk management processes. The COSO internal controls framework forms the basis for establishing Sarbanes-Oxley compliance and internal controls specialist Robert Moeller looks at topics including the importance of effective systems on internal controls in today's enterprises, the new COSO framework for effective enterprise internal controls, and what has changed since the 1990s internal controls framework.
Under the Sarbanes-Oxley Act, every corporation has to assert that their internal controls are adequate and public accounting firms certifying those internal controls are attesting to the adequacy of those same internal controls, based on the COSO internal controls framework. Executive's Guide to COSO Internal Controls thoroughly considers improved risk management processes as part of the new COSO framework; the importance of IT systems and processes; and risk management techniques.
Key Features
- Written by Robert Moeller, an authority in internal controls and IT governance.
- Practical, no-nonsense coverage of all three dimensions of the new COSO framework.
- Helps you change systems and processes when implementing the new COSO internal controls framework.
- Includes information on how ISO internal control and risk management standards as well as COBIT can be used with COSO internal controls.
- Other titles by Robert Moeller: IT Audit, Control, and Security, Executives Guide to IT Governance.
Contents
Chapter 1: Importance of the COSO Internal Control Framework
- The Importance of Enterprise Internal Controls
- What Are Enterprise Internal Controls?
- Understanding the COSO Internal Control Framework: How to Use This Book
Chapter 2: How We Got Here: Internal Control Background
- Early Defi nitions of Internal Controls: Foreign Corrupt Practices Act of 1977
- The FCPA and Internal Controls Today
- Events Leading Up to the Treadway Commission
- Earlier AICPA Auditing Standards: SAS Nos. 55 and
- The Treadway Committee Report
- The Original COSO Internal Control Framework
- The Sarbanes-Oxley Act and Internal Accounting Controls
- Notes
Chapter 3: COSO Internal Controls: The New Revised Framework
- Understanding Internal Controls
- Revised Framework Business and Operating Environment Changes
- The Revised COSO Internal Control Framework
- COSO Internal Control Principles
- COSO Objectives and Business Operations
- Sources for More Information
Chapter 4: COSO Internal Control Components: Control Environment
- Importance of the Control Environment
- Control Environment Principle 1: Integrity and Ethical Values
- Control Environment Principle 2: Role of the Board of Directors
- Control Environment Principle 3: The Need for Authority and Responsibility
- Control Environment Principle 4: Human Resource Strengths
- Control Environment Principle 5: Individual Internal Control Responsibilities
- COSO Control Environment in Perspective
Chapter 5: COSO Internal Control Components: Risk Assessment
- Risk Assessment Component Principles
- Risk Identification and Analysis
- Risk Response Strategies
- Fraud Risk Analysis
- COSO Risk Assessment and the Revised Internal Control Framework
Chapter 6: COSO Internal Control Components: Control Activities
- COSO Control Activity Principles
- COSO Control Activities Today
Chapter 7: COSO Internal Control Components: Information and Communication
- Information and Communications: What Has Changed?
- Information and Communication Principle 1: Use of Relevant Information
- Information and Communication Principle 2: Internal Communications
- Information and Communication Principle 3: External Communications
- The Importance of COSO Information and Communication
Chapter 8: COSO Internal Control Components: Monitoring Activities
- Importance of COSO Monitoring Internal Control Activities
- COSO Monitoring Principle 1: Conduct Ongoing and Separate Evaluations
- COSO Monitoring Principle 2: Evaluate and Communicate Deficiencies
- COSO Internal Control Monitoring in Perspective
Chapter 9: COSO Internal Control GRC Operations Controls
- COSO Operations Objectives
- Planning and Budgeting Operations Controls
- IT Systems Operations Controls
- Operations Procedure Controls and Service Catalogs
- Importance of COSO Operations Controls
Chapter 10: COSO Reporting Processes
- COSO Reporting Objectives
- COSO External Financial Reporting Controls
- COSO Internal Financial Reporting Controls
- COSO External Nonfinancial Reporting Controls
- COSO Internal Nonfinancial Reporting Controls
- Importance of COSO Reporting Controls
Chapter 11: COSO Legal, Regulatory, and Compliance Objectives
- Importance of Enterprise Compliance Controls
- Regulatory Compliance Control Issues
- Internal Controls and Legal Issues
- Compliance with Professional and Other Standards
Chapter 12: Internal Control Entity and Organizational GRC Relationships
- Internal Controls from an Organizational GRC Perspective
- Enterprise Governance Overall Concepts
- Business Entity–Level Internal Controls
- Divisional and Functional Unit Internal Controls
- Department- and Unit-Level Internal Controls
- Organization and GRC Controls in Perspective
Chapter 13: COSO, Service Management, and Effective IT Controls
- Importance of IT General Controls
- IT Governance General Controls
- IT Management General Controls
- Client-Server and Smaller Systems General IT Controls
- ITIL Service Management Best Practices
- Service Delivery Best Practices
Chapter 14: Cloud Computing, Virtualization, and Wireless Networks
- Internal Controls for IT Wireless Networks
- Cloud Computing and COSO Internal Controls
- Storage Management Virtualization
- COSO Internal Controls and Newer Technologies
Chapter 15: Another Framework: COSO ERM
- ERM Definitions and the ERM Portfolio View of Risk
- The COSO ERM Framework Model
- Other Dimensions of the ERM Framework
- COSO ERM and the Revised Internal Control Framework
Chapter 16: Understanding and Using COBIT
- An Executive’s Introduction to COBIT
- Using COBIT to Assess Enterprise Internal Controls
- Mapping COBIT to COSO Internal Controls
Chapter 17: ISO Internal Control and Risk Management Standards
- Background and Importance of ISO Standards in a Global Commerce World
- ISO Standards Overview
- ISO Standards and the COSO Internal Control Framework
Chapter 18: COSO Internal Controls in the Board Room
- Board Decisions and Internal Control Processes
- Board Organization and Governance Rules
- Corporate Charters and the Board Committee Structure
- The Audit Committee and Managing Internal Controls
- Board Member Internal Control Knowledge Requirements
- COSO Internal Controls and Corporate Governance
- Notes
Chapter 19: Service Organization Control Reports and COSO Internal Controls
- Importance of Service Organization Internal Controls
- Early Steps to Gain Assurance: SAS 70
- Service Organization Control (SOC) Reports
- Right-to-Audit Clauses
- Internal Control Limitations
Chapter 20: Implementing the Revised COSO Internal Control Framework
- Understanding What Is New in the 2013 Framework
- Transitioning to the New COSO Guidance
- Steps to Begin Implementing the New COSO Internal Control Framework
- Index
About the Authors
- ROBERT R. MOELLER, CPA, CISA, CISSP, is an internal audit specialist and project manager with a strong understanding of information systems, corporate governance, and security. He has over twenty-five years of experience in internal auditing, ranging from launching new internal audit functions in several companies to serving as audit director for a Fortune 50 corporation. He held positions with Grant Thornton (National Director of Computer Auditing) and Sears Roebuck (Audit Director). He is the former president of the Institute of Internal Auditors' Chicago chapter and has served on the IIA's International Advanced Technology Committee. He is also the former chair of the AICPA's Computer Audit Subcommittee. Moeller has written six other books.
Book Details
- Hardcover: 320 pages
- Publisher: Wiley; 1 edition (December 31, 2013)
- Language: English
- ISBN-10: 1118626419
- ISBN-13: 978-1118626412
- Product Dimensions: 7.5 x 5.3 x 0.6 inches
- List Price: $94.95