Linking Risk Management to Strategic Controls: a Case Study of Tesco Plc

According to the Sarbanes-Oxley Section 404 Act, it is the responsibility of the management to establish and maintain internal controls required for financial reporting. The company’s latest year assessment of

Prior to the advent of the Sarbanes-Oxley Act of 2002, referred to herein as “SOX,” the board of directors’ pivotal role was to advise senior leaders on the organization’s strategy, business model, and succession planning (Larcker, 2011, p. 3). Additionally, the board had the responsibility for risk management identification and risk mitigation oversight, determining executive benefits, and approval of significant acquisitions (Larcker, 2011, p. 3). Furthermore, for many public organizations, audit committees existed before SOX and provided oversight of internal processes and controls. Melissa Maleske (2012) advised that the roles and responsibilities of the board were viewed “…from a perspective that the board serves management” (p. 2). In contrast, Maleske (2012) noted that SOX regulations altered the landscape “…to a perspective that management is working for the board” (p. 2). SOX expanded not only the duties of the board and the audit committee, but also the authority of these bodies (Maleske, 2012, p. 2).

2. Chan, K., Kleinman, G., & Lee, P. (2009). The impact of Sarbanes-Oxley on internal control

There are many rules companies must follow whenever documenting financial information or any other data which is gather during any business transactions. In order for said companies to report financial information internal controls have to be put in place as companies have to adhere to certain laws and regulations. Internal controls can be defined as a process which companies follow in order to ensure all financial reporting is done in a reliable and lawful manner. Some think of it as a system which works within a system as it plays a major role on the success of a company’s accounting system. At the organizational level, internal control objectives relate to the reliability of financial

The swath of change brought about by Sarbanes-Oxley is wide and deep. The primary changes resulted in the creation of the Public Company Accounting Oversight Board, the assessment of personal liability to auditors, executives and board members and creation of the Section 404. That section refers to required internal control procedures, which did not exist before Sarbanes-Oxley. Public companies are now required to include an internal control report with their annual audit. The oversight board is responsible for monitoring public accounting companies, and works with the SEC. Based on size, accounting forms undergo reviews every one to three years. In addition to the board reviews, public accounting firms now carry personal liability for their

Corporate fraud was the cornerstone for the strict implementation of the Sarbanes-Oxley Act of 2002 (SOX). SOX implements many compliance regulations, but one of its regulations, specifically Section 404, relates to an organization’s internal control procedures with the purpose of protecting organizational assets and investors’ interest. Consequently, organizations, big or small, private or public, are prone to fraud. SOX’s compliance of internal control procedures is developed through the Committee of Sponsoring Organizations of the Treadway Commission (COSO) known as the COSO framework that consists of the following procedures: control environment, risk assessment, control activities, information and communication and monitoring. Each variable address a layer that builds upon each other by

Internal controls represent an organization’s processes and procedures used to meet its goals and objectives and serve as a defense in safeguarding assets and preventing and detecting errors, fraud, and abuse. Effective internal controls provide reasonable assurance that an organization’s objectives are achieved through (1) reliable financial reporting, (2) compliance with laws and regulations, and (3) effective and efficient operations. The passing of the Sarbanes-Oxley Act of 2002, as well as the numerous corporate frauds and bankruptcies over the past decade—including some

The Committee of Sponsoring Organizations (COSO) defines internal control as a process, effected by and entity’s board of directors, management and other personnel, designed to provide reasonable assurance regarding the reliability or financial reporting, the effectiveness and efficiency of operations, and compliance with applicable laws and regulations. (Louwers, Ramsay, Sinason, Strawser, & Thibodeau, 2015). Internal Control helps entities achieve important objectives and sustain and impose performance. A properly

Internal Controls are to be an integral part of any organization's financial and business policies and procedures. Internal controls consists of all the measures taken by the organization for the purpose of; (1) protecting its resources against waste, fraud, and inefficiency; (2) ensuring accuracy and reliability in accounting and operating data; (3) securing compliance with the policies of the organization; and (4) evaluating the level of performance in all organizational units of the organization. Internal controls are simply good business practices (Strauss, 2003). And, since internal controls can have many more meanings in the world of accounting, the more we understand what were dealing with, the better we can analyze internal

Internal controls are regulated by the Sarbanes-Oxley Act of 2002. This act assigns responsibility for a company’s internal controls on its executives and directors (Kiesco et.al., 2008). This assignment of responsibility forces the company to use effective internal controls by making a certain group responsible. The act also established the Public Company Accounting Oversight Board which regulates the activities of auditors. Together, assigning responsibility and defining the standards of auditors, the Sarbanes-Oxley Act of 2002 helps to safeguard a company’s investments, assets and future successes by discouraging fraud and theft.

Despite the aforementioned efforts to strengthen the internal controls provision, violations persist. In 2008, BHP Billiton failed to implement a thorough internal controls system. The SEC report noted BHP Billiton did not prepare or train its employees to handle riskier situations. However, the SEC acknowledged BHP Billiton implemented a few internal controls (U.S. Securities and Exchange Commission, 2015a). This case reflects an uncertainty over the SEC’s inconsistent interpretation of the internal controls

The final responsibility for the integrity of an SEC registrant’s internal controls lies on the management team. U.S. companies need to refer to a comprehensive framework of internal control when assessing the quality of financial reporting to determine that financial statements are being presented under General Accepted Accounting Principles, GAAP. The widely used framework is referred as COSO, Committee of Sponsoring Organizations of the Treadway Commission, sponsored by the following organizations American Accounting Association, the American Institute of CPA’s, Financial Executives International, the Institute of Internal Auditors, and the Institute of Management Accountants. COSO’s defines internal control as:

Under the Sarbanes-Oxley Act of 2002, reports on internal control are required. Did the company’s management acknowledge its responsibility for establishing and

The control environment is what sets the tone for an organization and is the foundation for all other components of internal control. It provides discipline and structure and reflects the ethical values, integrity and competencies of the organization. The control environment is very important to effective internal control over financial reporting to an audit client like WorldCom, because good designs can prevent and detect frauds and errors. But because WorldCom had such a poor control environment, the company would require more testing for an audit. This shows that the board did not exercise oversight responsibilities over financial reporting or internal controls.

Effective internal controls protect a company’s assets, maintain compliance, improve operations, prevent fraud, and promote accuracy in financial reporting. In 1992 the