Internal Controls Essay

“The control environment sets the tone of an organization, influencing the control consciousness of its people. It is the foundation for all other components of internal control, providing discipline and structure.” The Committee of Sponsoring Organizations of the Treadway Commission (COSO) published the Internal Control–Integrated Framework in 1992. As summarized above one can see the importance of the implementation of an effective control environment, as it sets the foundation for the other 4 components of internal control. The control environment is made up fundamental smaller components. The ones that were particularly relevant to BMIS are the use of board of directors and audit committee, management philosophy and operating style, and human resource policies and practices. If management doesn’t prioritize control, then the rest of the organization will not put precedence on following policies and procedures either. This was clearly evident at Bernard L. Madoff Investment Securities LLC (BMIS), and ultimately led to their downfall.

The design and implementation and objectives of company controls are not adequate to meet the control objectives. The control environment control objective is ineffective. This control objective lacks a written policy on ethical conduct, is lacking oversight from the board of directors and audit committee, lacks a consistent style and philosophy from management, and lacks a strong commitment to competence. The risk assessment control objective is effective but lacks any antifraud program and controls. The information and communication control is ineffective. A virus has been detected and is affecting the files of the company. This control is lacking a strong IT department. The general controls financial reporting control objective is effective but is weak in detecting or preventing material misstatement. The monitoring control objective is ineffective; this control has need of an internal auditor.

Having internal controls is one thing, but how the company evaluates that control is a matter all by itself. Being an independent auditor, it is our job to understand an entity and

Internal control is one of the integral parts of an organization. It is a system which controls different types of risks,

Senators Paul Sarbanes and Michael Oxley were the sponsors of the Sarbanes-Oxley Act of 2002, which represented a tremendous change to federal securities law. The act was signed into law by president George W. Bush who described it as “the most far reaching reforms of American business practices since the time of Franklin Delano Roosevelt1.” After the financial scandals implicating Enron, WorldCom and Global Crossing, the public needed to restore their trust in the public financial statements of the companies and that’s where the SOX Act of 2002 came into place. The act is composed of eleven titles which require numerous reforms to prevent accounting fraud, increase corporate responsibilities, among others.

The Sarbanes - Oxley Act of 2002 is the most important piece of legislation since the 1933 and 34 securities exchange act, affecting everything from corporate governance to the accounting industry and much more. This law was in direct response to the failure of corporate governance at Enron, Tyco, and WorldCom. The Sarbanes - Oxley seeks to bring back the confidence in all publicly held corporations to the shareholders, while placing more responsibility on CEOs and CFOs for the actions of the corporation. "Sarbanes - Oxley is more than just another piece of legislation - it has become synonymous with a new culture of corporate accountability and reform1." The SOX, as it has come to be known, covers a myriad amount of corporate

Prior to the 2002 scandal of Enron, the standards for financial reporting were much more relax than the regulations that businesses encounter today. The Sarbanes Oxley Act of 2002(SOX) came into play as a response to the unruly financial reporting to the public from companies such as Enron, Arthur Andersen, Tyco and WorldCom. The public scandals created insecurities for any American to invest in big companies, due to fear of additional fraud encounters. The Sarbanes Oxley Act was enacted to try create some trust between these big companies and the hardworking individuals who were investing in them. The fraud scandals were front page news stories and the government hoped that passing this legislation

Despite major loses, the companies grew because Enron essentially believed that “saying the right words, turning around three times and throwing salt over your shoulder could somehow transform something without economic substance into something with economic substance. (SEC Historical Society)” Due to this misleading and fraudulent act, shareholders lost billions of dollars when the companies crashed and the share prices went down with it (Citeseer). After uncovering several scandals from companies such as Enron, Worldcom, and Tyco, people found it difficult to trust and invest in companies again. As a result to this unforeseen and unethical scandal, the Sarbanes-Oxley Act was passed on July 25, 2002. The House approved this act with a vote of “423 in favor, 3 opposed, and 8 abstained”, showing a unanimous favor in the necessity and practicality of the act.

Internal controls, no matter how well designed and operated, provide only reasonable assurance to management regarding the achievement of a department’s objectives. Certain limitations are inherent in all internal control systems. Despite these limitations, the reasonable assurance that internal control does provide enables a department to focus on reaching its objectives while minimizing undesirable events. Managers can start by analyzing the two circumstances most likely to threaten the achievement of objectives, change and inherent risk. The examples listed below are not all-inclusive, nor will every item apply to every department. The risk to accomplishing objectives increases dramatically during a time of change. Because any change increases risk, managers must diligently monitor and assess all significant changes within their departments. Some examples of change that expose a department to increased risk are: Changes in personnel. Changes in the regulatory environment. New or revamped information systems and technology. Rapid growth or expansion of operations Moving to a new location. New programs or services. Reorganizations within or between

So what are internal controls? And why are they so important? Internal controls describe the policies, plans, and procedures

Internal controls represent an organization’s processes and procedures used to meet its goals and objectives and serve as a defense in safeguarding assets and preventing and detecting errors, fraud, and abuse. Effective internal controls provide reasonable assurance that an organization’s objectives are achieved through (1) reliable financial reporting, (2) compliance with laws and regulations, and (3) effective and efficient operations. The passing of the Sarbanes-Oxley Act of 2002, as well as the numerous corporate frauds and bankruptcies over the past decade—including some

      The Sarbanes-Oxley Act (SOX) was enacted in July 30, 2002, by Congress to protect shareholders and the general

The final responsibility for the integrity of an SEC registrant’s internal controls lies on the management team. U.S. companies need to refer to a comprehensive framework of internal control when assessing the quality of financial reporting to determine that financial statements are being presented under General Accepted Accounting Principles, GAAP. The widely used framework is referred as COSO, Committee of Sponsoring Organizations of the Treadway Commission, sponsored by the following organizations American Accounting Association, the American Institute of CPA’s, Financial Executives International, the Institute of Internal Auditors, and the Institute of Management Accountants. COSO’s defines internal control as:

The control environment is what sets the tone for an organization and is the foundation for all other components of internal control. It provides discipline and structure and reflects the ethical values, integrity and competencies of the organization. The control environment is very important to effective internal control over financial reporting to an audit client like WorldCom, because good designs can prevent and detect frauds and errors. But because WorldCom had such a poor control environment, the company would require more testing for an audit. This shows that the board did not exercise oversight responsibilities over financial reporting or internal controls.

Effective internal controls protect a company’s assets, maintain compliance, improve operations, prevent fraud, and promote accuracy in financial reporting. In 1992 the