All 18 Internal Controls Evaluation questions
More in Internal Controls Evaluation
What is internal control? What is segregation of duties? What is the control environment and why is it foundational? What is a walkthrough test? What is the difference between preventive and detective controls? How does the auditor obtain an understanding of internal control? What is the difference between design effectiveness and operating effectiveness? What are entity-level controls versus process-level (transaction) controls? What is the difference between manual and automated controls? When does the auditor decide to test controls versus take a fully substantive approach?
Advertisement
Auditing & Assurance › Internal Controls Evaluation

What are the five components of internal control (COSO framework)?

Beginner

Answer

COSO's five components are: the control environment (governance, integrity, tone at the top), risk assessment (identifying and analyzing risks), control activities (policies/procedures like approvals and reconciliations), information and communication (relevant, timely information flow), and monitoring activities (ongoing/separate evaluations). Together they form an integrated system supporting reliable reporting.
COSO: Control Environment, Risk Assessment, Control Activities,
Information & Communication, Monitoring.
Real-world example The auditor assesses each COSO component to understand the client's control system before testing specific controls.

Common follow-ups: What is the control environment? | How do the components interrelate?

Audit Risk & Materiality ISA Standards Internal Controls Evaluation
All 18 Internal Controls Evaluation questions