Skip to content
The Tell
← Internal controls & ICFR

Guide · COSO

Achieving Effective Internal Control over Sustainability Reporting (ICSR)

Shows how to apply the 17 COSO internal control principles to ESG and sustainability data, so it can be trusted and assured like financial data.

Go to the official source ↗

Our summary

This free COSO publication (March 2023) explains how to use the COSO Internal Control — Integrated Framework (2013) for sustainability and ESG information, not only for financial reporting. It goes through all five components and 17 principles and explains what each one means for sustainability data. It also covers how ESG data differs from financial data, gives five recommendations, three illustrative cases and a “top 10 takeaways” list.

It is useful for finance, sustainability and internal audit teams preparing for CSRD/ESRS, ISSB or other reporting, especially where external assurance is coming. The guidance is non-authoritative but widely referenced.

How auditors use it: Use the principle-by-principle sections as a control checklist when reviewing ESG data processes, before limited or reasonable assurance work begins.

More in Internal controls & ICFR

Corporate Governance Regulations (Saudi Capital Market Authority)

The Saudi rules that require listed companies to have a board-approved internal control system, an internal audit unit and an independent audit committee.

Enterprise Risk Management framework

COSO's 2017 framework that links enterprise risk management to strategy and performance.

Internal Control — Integrated Framework

The most widely used framework for designing and evaluating internal control, including over financial reporting.