Skip to content
The Tell
← Internal controls & ICFR

Framework · COSO

Internal Control — Integrated Framework

The most widely used framework for designing and evaluating internal control, including over financial reporting.

Go to the official source ↗

Our summary

COSO’s Internal Control — Integrated Framework defines what effective internal control looks like. The 2013 update is the version most organisations and auditors use today.

It describes five components of internal control — control environment, risk assessment, control activities, information and communication, and monitoring — supported by seventeen principles. COSO also publishes supplemental guidance, including on controls over sustainability reporting.

How auditors use it: as the reference framework for ICFR and SOX-style assessments, and to structure control testing and deficiency evaluation.

More in Internal controls & ICFR

Achieving Effective Internal Control over Sustainability Reporting (ICSR)

Shows how to apply the 17 COSO internal control principles to ESG and sustainability data, so it can be trusted and assured like financial data.

Corporate Governance Regulations (Saudi Capital Market Authority)

The Saudi rules that require listed companies to have a board-approved internal control system, an internal audit unit and an independent audit committee.

Enterprise Risk Management framework

COSO's 2017 framework that links enterprise risk management to strategy and performance.