scholarly journals Evaluation Blockchain Using COSO

Author(s):  
Nishani Edirisinghe Vincent ◽  
Reza Barkhi

As companies begin to explore and develop technology solutions based on blockchain and smart contracts, there is a need to understand the impact of blockchain and smart contracts on the assessment of internal controls and enterprise risk. Especially, since the distributed ledger and smart contracts blur the system boundaries between trading partners, there is a need to understand whether internal control assessments based on a single company approach is adequate in an integrated and collaborative environment. We provide an overview of smart contracts for practitioners and describe the associated risks of engaging in a blockchain consortium. We also list potential questions related to internal controls that may be considered when either engaging in a consortium or executing a smart contract. We then discuss whether current frameworks, specifically the Committee of Sponsoring Organization (COSO) integrated and COSO Enterprise Risk Management (ERM) frameworks, adequately address a collaborative supply chain ecosystem.

Author(s):  
Abdullah Albizri ◽  
Deniz Appelbaum

Although research shows that blockchain provides fairly immutable virtual provenance workflows, proof that the Blockchain accurately represents physical events lacks truly independent verification. This dilemma, the Oracle Paradox, challenges blockchain architecture and is perhaps one reason why businesses have hesitated to adopt smart contracts. Blockchain proponents claim that people can serve as trusted Oracles in a smart contract. However, auditing research shows that people are the weak link in almost every internal control application, including those pertaining to blockchain. People are susceptible to collusion, bribery, error, and fraud and these tendencies are not entirely mitigated by blockchain technologies (Balagurusamy et al. 2019; Nakamoto 2008). This research proposes a framework to mitigate the paradox of the Oracle: A Business Process Management (BPM) model of a Blockchain Smart Contract-enabled Supply Chain with IoT as the sole "third-party" Oracle participant, utilizing Design Science research.


2017 ◽  
Vol 8 (3) ◽  
pp. 246-280 ◽  
Author(s):  
Orhan Akisik ◽  
Graham Gal

Purpose The purpose of this study is to empirically examine whether two major stakeholder groups – customers and employees – consider third party-reviewed corporate social responsibility (CSR) reports and assurance on the quality of internal controls as value determinant in their decisions, and how their decisions influence financial performance through the halo effect of these reports. Design/methodology/approach Using Compustat North America and Global Reporting Initiative data, the authors used first-order autoregressive models over the period from 2006 to 2012. Findings The results indicate that the impacts of customers and employees on financial performance are influenced by third party-reviewed CSR reports and effective internal control. Moreover, it is found that the third party-reviewed CSR reports and effective internal control enable the persistence of financial performance. Social implications The findings have implications for stakeholders in terms of third party-reviewed CSR reports and effective internal control. The findings are important due to the influence that these stakeholders (customers and employees) have on the financial performance of firms and the impact that CSR actions can have on society as a whole. Originality/value To the authors' knowledge, this is the first study that contributes to the literature by demonstrating that information about third party-reviewed CSR reports and internal control reviews may influence the perceptions of firms by two primary stakeholders – customers and employees.


2010 ◽  
Vol 24 (1) ◽  
pp. 1-21 ◽  
Author(s):  
Roberta Ann Barra

ABSTRACT: Little prior research exists on the parameters of internal control activities. The Sarbanes-Oxley Act of 2002 (SOX 2002) makes identifying the properties of these parameters under various conditions important. In this paper, an analytical/reliability engineering methodology is used to investigate the relative impact of penalties versus other types of internal controls on managerial and non-managerial employees’ propensity to commit fraud. Ceteris paribus, increasing required effort with internal controls and/or increasing employee penalties, increases the minimum amount stolen when a fraud incident occurs; that is, more net assets will be taken per fraud incident with controls than without controls. The findings show that the firm’s least-cost scenario with managerial employees is to enforce maximum penalties. The firm’s least-cost scenario with non-managerial employees is to utilize alternative internal controls while imposing minimum penalties. Further, the effectiveness of separation of duties is dependent on the detective controls in the internal control system.


2019 ◽  
Vol 42 (1) ◽  
pp. 83-102
Author(s):  
Victoria J. Hansen

ABSTRACT This study investigates the impact of the internal controls over financial reporting requirements (ICFR) on the decision making of corporate tax executives. I examine tax executives' decisions to disclose an internal control deficiency by amending a prior year return when the internal control deficiency will be classified as either a significant deficiency or a material weakness. I also examine if tax executives' decisions are impacted by whether amending results in a refund or additional tax due. I find tax executives are less likely to disclose (amend) when the internal control deficiency is classified as a material weakness. When facing a material weakness, 16.7 percent choose not to disclose. Tax executives are also less likely to disclose (amend) when amending results in additional tax due. These results indicate the ICFR requirements may have unintended consequences. If executives do not disclose internal control deficiencies, the reliability of financial reporting is limited.


2012 ◽  
Vol 24 (2) ◽  
pp. 39-49 ◽  
Author(s):  
Lemuria D. Carter ◽  
Brandis Phillips ◽  
Porche Millington

Since the introduction of the Sarbanes-Oxley (SOX) Act in 2002, companies have begun to place more emphasis on information technology (IT) internal controls. IT internal controls are policies that provide assurance that technical systems operate as intended, provide reliable data, and comply with regulations. Research suggests that firms with strong internal controls perform better than those with internal control weaknesses. In this study, the authors evaluate the impact of IT internal controls on firm performance. The sample includes 72 publicly traded firms, 36 that reported IT internal control weaknesses and 36 that did not. The results of ordinary least squares (OLS) regression indicate that substantive IT internal control weaknesses negatively impact firm performance. Results and implications for research and practice are discussed.


2020 ◽  
Vol 12 (8) ◽  
pp. 134
Author(s):  
Nikolaos Kapsoulis ◽  
Alexandros Psychas ◽  
Georgios Palaiokrassas ◽  
Achilleas Marinakis ◽  
Antonios Litke ◽  
...  

Private and permissioned blockchains are conceptualized and mostly assembled for fulfilling corporations’ demands and needs in the context of their own premises. This paper presents a complete and sophisticated end-to-end permissioned blockchain application for governance and management of musical rights endorsed by smart contract development. In a music industry use case, this disclosed solution monitors and regulates conflicting musical rights of diverse entities under a popular permissioned distributed ledger technology network. The proposed implementation couples various and distinct business domains across the music industry organizations and non-profit blockchain associations.


2020 ◽  
Vol 15 (1) ◽  
pp. 119
Author(s):  
Efrizon Efrizon ◽  
Rahmat Febrianto ◽  
Rayna Kartika

This study aims to obtain evidence to determine whether there are differences in the likelihood to commit fraud between individuals under the conditions of present and absent internal control and between individuals with high and low levels of individual morality. The study also aims to determine whether the interaction between individual morality and internal controls lead to fraud. Results show differences among individuals under the conditions of present or absent internal control to commit fraud. Moreover, there are differences among individuals who have high and low levels of individual morality to commit fraud. Finally, results reveal that the interaction between individual morality and internal controls lead to fraud. Keywords: Fraud; internal control; individuals moral


2011 ◽  
Vol 25 (1) ◽  
pp. 129-157 ◽  
Author(s):  
John J. Morris

ABSTRACT: Software vendors that market enterprise resource planning (ERP) systems have taken advantage of the increased focus on internal controls that grew out of the Sarbanes-Oxley (SOX) legislation by emphasizing that a key feature of ERP systems is the use of “built-in” controls that mirror a firm’s infrastructure. They argue that these built-in controls and other features will help firms improve their internal control over financial reporting as required by SOX. This study tests that assertion by examining SOX Section 404 compliance data for a sample of firms that implemented ERP systems between 1994 and 2003. The results suggest that ERP-implementing firms are less likely to report internal control weaknesses (ICW) than a matched control sample of non-ERP-implementing firms. It also finds that this difference exists for both general (entity-wide), and individual (account-level) controls.


Author(s):  
Ashmita Pandey

Abstract: A decentralised, Secure, Peer-to-Peer Multi-Voting System on Ethereum Blockchain is a distributed ledger technology (DLT) that permits virtual votes to be transacted in a peer-to-peer decentralized network. Those transactions are validated and registered through every node of the network, so creating a transparent and immutable series of registered events whose truthfulness is supplied through a consensus protocol. Smart contract automates the execution of agreement that runs routinely as soon as the conditions are satisfied. Smart contract would not need any third parties consequently prevents time loss. By Eliminating the requirement for third parties, consequently, allows numerous processes to be extra efficient and economical. The system is secure, reliable, and anonymous. Smart contract is enforced for the Ethereum network using the Ethereum wallets and also the Solidity language. Users are capable of submit their votes immediately from their Ethereum wallets, and those transaction requests is handled with the consensus of each single Ethereum node. This creates a transparent environment for evoting. A lot of concerning efficiency of the peer-to-peer decentralized electoral system on Ethereum network along with application and the outcomes of implementation are provided in this paper. Keywords: Blockchain, Distributed Ledger Technology (DLT), Consensus Protocol, Smart Contracts, Ethereum, Solidity


2019 ◽  
Vol 3 (1) ◽  
pp. 4-22
Author(s):  
Hisar Pangaribuan ◽  
Raynald Wilbert P. Donni ◽  
Oluwatoyin Muse Johnson Popoola ◽  
Jenny Sihombing

Information disclosure carried out by management as an appointed agent is increasing in importance and hence, a source of concerns to users.  It is widely believed that information received by the stakeholders should be appropriate and sufficient for useful decision making, especially in the era of the Fourth industrial revolution. An appropriate and sufficient disclosure in the Annual report indicates a reflection of the effective implementation of the company's operational, strategic, financial and compliance objectives that have been carried out by the management. This study employed secondary data obtained from the annual report for the banks listed in the Indonesia Stock Exchange (IDX). The data for internal control disclosure was observed through a content analysis approach by calculating the internal control system index obtained in the annual report. This study has shown that companies with high earnings quality report more openly convey the application of internal controls system disclosure. This study demonstrated that company with the high characteristics of the audit committee would significantly increase disclosure of internal controls system than a company without audit committee.  Supervision, as one of the internal controls established by the management, enhances the performances of the audit committee in ensuring compliance through full disclosure of the financial statements. Thus, restoring users’ trust and confidence in making informed and useful decisions on information emanating from the management.  


Sign in / Sign up

Export Citation Format

Share Document