Big4GuyWelcome to Big4Guy.com. Big4Guy is an online resource where I will share with you the latest news, insights, knowledge and some experiences as a Big 4 consultant. We will discuss some of the important issues which organisations are facing today in the areas of information security, security and controls in SAP R/3, Oracle Applications, J.D.Edwards, Peoplesoft and various other ERP's. You will also find information on latest complaince regulations like Sarbanes Oxley, Basel II and so on. Big4guy will also attempt to provide valuable resources for individuals interested in examinations the CISA, CISM, CISSP, PMP and various other security certifications considered essential for entry in any Big 4 accounting, auditing and consulting firms. You are invited to post your comments and viewpoints to posts here. I sincerely hope this online journal will be useful to everyone from a budding student to a professional in the accounting, auditing, management and consultancy professions.
|
Internal Control designing is a step by step process. If correctly understood one can easily design internal controls for any process irrespective of the company. I am today discussing the brief steps for designing efficient and effective internal controls. The steps below are intended to just give an overview. I would be discussing the entire internal control design process in detail later on.
Four Steps in Designing Effective Internal Controls
Undertand the Risk - The first step in designing internal controls is to understand the risk that you are trying to mitigate. Without a clear understanding of risk, its unlikely that you would be able to design good internal controls.
Identify Control Activity - Once you have identified the risk, identify the control activity which would reduce the identified risk to an acceptable level.
Benefit Vs. Costs - In any controls design process it very important to compare cost of controls with the benefits to be derived. Controls no doubt have a cost, however, cost of controls should not overweigh the benefits. It's no point protecting an assets worth a couple of hundred dollars with a biometric control costing thousands.
Establish Internal Control - Having accomplished the above three steps, the last step is establishing the identified activity as an internal control.
SOX Applicability to Foreign Issuers
| Mon | Tue | Wed | Thu | Fri | Sat | Sun |
|---|---|---|---|---|---|---|
| << < | > >> | |||||
| 1 | 2 | 3 | 4 | |||
| 5 | 6 | 7 | 8 | 9 | 10 | 11 |
| 12 | 13 | 14 | 15 | 16 | 17 | 18 |
| 19 | 20 | 21 | 22 | 23 | 24 | 25 |
| 26 | 27 | 28 | 29 | 30 | 31 | |