MSG Team's other articles

10006 Interpersonal Relationship Development – Meaning and its Models

A strong association between individuals with similar interests and mindsets is called as interpersonal relationship. No one on this earth can ever stay alone and it is really important for people to have trustworthy friends around. Interpersonal Relationship Development Every relationship needs time to grow. One needs time to come really close to someone and […]

12862 Managing Conflict in Virtual Teams

Conflict is an inevitable characteristic of all work teams. Considering the complex dynamics of virtual teams, understanding and managing conflict becomes a big challenge. Conflict can be both – constructive and destructive. When members of the team present different viewpoints about a task and positively contribute to decision making, it leads to constructive conflict. Destructive […]

11725 Unexpected Loss and Economic Capital Buffer

In the previous articles, we have seen how we can use exposure at default (EAD), loss given default (LGD), and probability of default to calculate the value of expected losses. However, it needs to be understood that expected losses are at best a crude estimate of the amount of money that would be required to […]

10676 Post Weberian Models of Public Administration

In the previous section we read about the Weberian Model of Bureaucracy and its various aspects, however like all models this one too has its share of criticism and dissection performed by scholars and subject matter experts. The critics of the Weber model said that his theories of bureaucracy heavily discounted the human aspect in […]

12822 What is Compassionate Capitalism and Why We Need it in These Times of Planetary Crisis ?

What is Compassionate Capitalism and What Does it Entail for us? In recent years, there has been much talk about Capitalism evolving into a model of economy wherein corporations ensure that communitarian and people oriented business models are embraced so that profit is not the only criterion or reason why they are in business. In […]

Search with tags

  • No tags available.

Internal frauds are a big part of the operational risk faced by any organization. This is truer of multinational companies who have business interests in various countries across the globe. This is because there are thousands of people in important positions making business decisions on behalf of the company. Hence, ensuring that all these employees always act in conformity with the company’s principles is a difficult task.

This issue shot into prominence during the turn of the century. The Enron scandal which shook the entire world economy in the early 2000’s also accentuated the need for having proper internal controls in any organization. In response to the Enron Scandal, the United States government passed a landmark piece of legislation called the Sarbanes Oxley Act or SOX. As per the provisions of this act, the management and the auditors of the company are jointly responsible for clearly documenting the internal controls processes and having them certified.

Research has suggested that the lack of properly defined internal controls is the reason for more than 50% of internal frauds in the world. Now, since each company has to document these processes, the Committee of Sponsoring Organizations (COSO) has come up with a framework that can be followed by all organizations in order to develop and document their internal controls. This system has been designed by experts and can be used by any organization to augment its risk management endeavors. The COSO is a committee which composes of five major associations

What is the COSO Framework?

The COSO framework was first developed in the year 1992. Over the years, it has gone through several iterations and has been revised several times. The model has three dimensions which are why it is often displayed on a cube.

The First Dimension: The Functions

The COSO framework mentions actions that need to be taken within three different functions. They are:

  1. Operations: The COSO framework suggests that the operations of the organization be thoroughly studied in order to develop internal controls

  2. Reporting: The COSO framework also suggests that any information source which feeds into internal or external reporting must be audited for accuracy. These audits must happen at periodic intervals and must ensure that the information system of the company work in a timely, reliable, and transparent manner

  3. Compliance: Lastly, the internal control goals must be aligned with the different laws and regulations that the company is supposed to follow.

The Second Dimensions: The Levels

The COSO framework suggests that the organization must be divided into various levels for the purpose of managing internal controls. The internal controls should be continuously monitored at various levels such as subsidiary level, business-unit level, division level as well as entity level.

The Third Dimension: The Environment

  1. Internal Environment: The internal environment of the company refers to the culture propagated by the top management. One of the reasons behind the debacle at Enron was that the unethical values propagated by the top management seeped through in lower levels of management. It is for this reason, the board of directors, as well as outside parties, are supposed to keep a keen eye on whether the top management is committed to maintaining a fraud-free internal environment in the company.

  2. Risk Assessment: This refers to a system of routinely identifying and classifying the various types of risks. The organization should have a system of scanning its environment for possible causes which could lead to failure in the future.

  3. Control Activities: Control procedures are activities listed out by the management in order to mitigate the threats that may arise. These are activities such as approvals, reconciliations, and verifications which are performed in order to identify whether any risk is being missed. Internal controls help point out the flaws in the system.

  4. Information and Communication: This step involves building a strong internal communication system. This means that all the internal parties must be clear about what their responsibilities are. Also, the expectations should also be made clear with external parties. The protocols to escalate any risks amongst the internal as well as external parties in order to ensure a speedy resolution must be put into place.

  5. Monitoring: The last step includes continuously monitoring all the steps which have been taken in the earlier steps. It is as important to monitor a system for internal controls as it is important to create one.

The COSO model emphasizes that all five components work together as an integrated system. The malfunction of any one component would also impact all the other components as well. The idea behind the framework is to provide a set of tools that will have to be used by every company. The specific organization can then go ahead and decide on the specific methods that they want to follow for controls or for information management. The standardized model makes the implementation of risk management comparatively easier.

Article Written by

MSG Team

An insightful writer passionate about sharing expertise, trends, and tips, dedicated to inspiring and informing readers through engaging and thoughtful content.

Leave a reply

Your email address will not be published. Required fields are marked *

Related Articles

The Cost Structure in the Insurance Industry

MSG Team

Credit Derivatives: An Introduction

MSG Team

Credit Linked Note

MSG Team