Using a Movie to Study the COSO Internal Control Framework: An Instructional Case

2008 ◽  
Vol 22 (1) ◽  
pp. 63-76 ◽  
Author(s):  
Arline Savage ◽  
Carolyn Strand Norman ◽  
Kathryn A. S. Lancaster

Following enactment of the Sarbanes-Oxley Act (SOX) of 2002 (U.S. House of Representatives 2002), public accounting firms and publicly traded companies are much more focused on internal controls. Accordingly, many accounting graduates will be asked to evaluate, document, and perhaps test the adequacy of an organization's internal control structure. The Committee of Sponsoring Organizations' (COSO 1992) Internal Control—Integrated Framework is the most widely used tool for this purpose. This instructional case, based on the movie, Rogue Trader, gives students the opportunity to see the consequences of lax corporate governance and weak internal controls at the Barings Bank. Students view the movie and then use the COSO framework to critically analyze the collapse of a well-established financial institution.

2021 ◽  
Author(s):  
Ujkan Bajra ◽  
Rrustem Asllanaj

Abstract This paper investigate whether compliance with the Sarbanes–Oxley Act of 2002 (SOX) Sect. 302 (financial reporting) and 404 (internal controls) enhances financial reporting quality (FRQ). This study focuses on EU publicly traded companies that are cross-listed in the US markets. Using a novel approach with respect to operationalization of the SOX, the empirical research integrated into this paper advances the understanding of financial reporting quality for both practitioners and policymakers. The study argues that financial reporting quality increased after SOX entered into force but, notably, we find that FRQ improves with compliance with SOX302 but not with SOX404. Examination of the latter relationship at the subsection level also reveals that compliance with certain SOX requirements is not satisfactory. We find that three out of six subsections of SOX302 are directly associated with financial reporting, while subsections (1), (5) and (6) of SOX302 are not related with FRQ, indicating that the management team, albeit not entirely, provides a reliable financial reporting systems. We also find that compliance with some SOX404’s subsections has been relatively low (i.e. subsections (1) and (3) of SOX404)), suggesting that corporations have not established and are not maintaining suitable internal control systems over financial reporting.


2012 ◽  
Vol 24 (2) ◽  
pp. 39-49 ◽  
Author(s):  
Lemuria D. Carter ◽  
Brandis Phillips ◽  
Porche Millington

Since the introduction of the Sarbanes-Oxley (SOX) Act in 2002, companies have begun to place more emphasis on information technology (IT) internal controls. IT internal controls are policies that provide assurance that technical systems operate as intended, provide reliable data, and comply with regulations. Research suggests that firms with strong internal controls perform better than those with internal control weaknesses. In this study, the authors evaluate the impact of IT internal controls on firm performance. The sample includes 72 publicly traded firms, 36 that reported IT internal control weaknesses and 36 that did not. The results of ordinary least squares (OLS) regression indicate that substantive IT internal control weaknesses negatively impact firm performance. Results and implications for research and practice are discussed.


2009 ◽  
Vol 84 (2) ◽  
pp. 559-587 ◽  
Author(s):  
Vic Naiker ◽  
Divesh S. Sharma

ABSTRACT: This study examines the association between internal control deficiencies (ICDs) reported under Section 404 of the Sarbanes-Oxley Act (SOX, U.S. House of Representatives 2002) and the presence of former audit partners on the audit committee who are affiliated (AFAPs) and unaffiliated (UFAPs) with the firm's external auditor. We find a negative association between AFAPs and UFAPs on the audit committee and ICDs. We also find results that suggest the NYSE and NASDAQ three-year “cooling-off” rule applying to AFAPs may be unwarranted and deserves further empirical and regulatory attention. Further tests suggest AFAPs do not allow management to circumvent the disclosure of ICDs when conditions appear to suggest this may be so, and that AFAPs are negatively related to performance-adjusted discretionary accruals. Collectively, we interpret these findings to suggest that AFAPs and UFAPs on the audit committee are associated with more effective monitoring of internal controls and financial reporting.


2021 ◽  
Author(s):  
Amanuel F Tadesse ◽  
Gina Cavalier Rosa ◽  
Robert J. Parker

COSO has developed frameworks for firms to improve their internal controls with the objective of reducing fraud and managing enterprise risk. The frameworks are widely used by firms and their auditors to comply with the internal control requirements of the Sarbanes-Oxley Act (SOX). We investigate two issues involving the most recent COSO internal control framework (COSO 2013): the determinants of a firm's decision to adopt it in a timely manner; and the consequences of adoption on internal controls. In our sample, firms that report internal control problems under SOX 404, especially firms with information technology (IT) problems, are likely to be late adopters. Regarding the consequences of adoption, for late adopters, we find that firms using the revised COSO framework have a lower probability of reporting weaknesses in IT-related controls. We also find evidence that COSO 2013 adoption is helpful in remediating internal control weaknesses.


Author(s):  
Martin Samuel ◽  
David Sabot ◽  
Peter DelPiano

With the increase in the number of people who had a stake in the Stock market coupled with 9/11 and Enron (which created a climate of uncertainty); a need was created for more assurance in the Stock market. Sarbanes-Oxley (SOX) was created to answer the need for accuracy and reliability of financial reporting. SOX imposed unprecedented close government oversight of publicly traded companies through rigid internal control of corporate processes.


2009 ◽  
Vol 2 (1) ◽  
pp. 59-62
Author(s):  
James Specht ◽  
Albert Kagan ◽  
Scott D. Maanum

The Sarbanes Oxley Act of 2002 brought about major changes in how accounting firms conduct audits of publicly traded companies. Corporate officials have additional responsibilities in the areas of internal controls and financial reports. In addition there is a new organization responsible for established auditing standards for publicly traded companies, the Public Company Accounting Oversight Board. Accordingly, there are new requirements and responsibilities for auditors of publicly traded companies. In effect, the emergence of separate auditing standards for publicly traded companies and for companies that are not publicly traded is creating two distinct fields of auditing. These changes require a different approach to teaching auditing to accounting students. This article proposes one approach to teaching these significant changes for entry level auditors.


2009 ◽  
Vol 23 (2) ◽  
pp. 221-237 ◽  
Author(s):  
Steven M. Glover ◽  
Douglas F. Prawitt ◽  
Mark H. Taylor

SYNOPSIS: The Sarbanes-Oxley Act of 2002 (SOX) established the Public Company Accounting Oversight Board (PCAOB) to oversee the accounting firms that audit publicly traded companies in the United States. In this commentary we outline why we believe the PCAOB’s audit standard-setting and inspection models are inefficient and dysfunctional. We assert that the Board’s ability to achieve its mission is limited by its early choices, together with its incentives, organizational composition, and structure. We support our assertions with a number of indicators of serious problems and flaws in the current approach. We also present high-level recommendations for change for policy makers, regulators, and leaders in the profession to consider in developing improved approaches to audit standard setting, inspection, and enforcement.


2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Ach Maulidi ◽  
Jake Ansell

Purpose The purpose of this study is to provide theoretical guidance that enables local governments to deal with occupational fraud. Design/methodology/approach The quantitative approach is used to examine the efficacy of the Committee of Sponsoring Organisations of the Treadway Commission (COSO) internal control framework in tackling occupational fraud in local government. To achieve the goals, the authors performed a survey of the Indonesian auditor institutions. Findings It is not appropriate to argue that all types of local government fraud can be deterred by a single internal control. The study suggests that COSO internal controls are not effective for dealing with corruption cases. However, the authors do find the efficacy of those controls are obvious for controlling asset misappropriation and financial statement fraud. This result indicates that if the COSO internal control framework is only designed for routine financial control and asset protection, it significantly and negatively influences its efficacy to deal with occupational fraud. This study has both theoretical and managerial implications, discussed separately. Originality/value In the field of prevention, the authors cannot make generalised theories and approaches for dealing with occupational fraud. Whilst previous authors have offered fraud deterrents in terms of internal controls, they have failed to realise the need to understand their effectiveness for particular forms of fraud. This paper sheds light on the effectiveness of internal controls in achieving their goals. This has both practical applications and stimulates theoretical insights.


2010 ◽  
Vol 24 (1) ◽  
pp. 1-21 ◽  
Author(s):  
Roberta Ann Barra

ABSTRACT: Little prior research exists on the parameters of internal control activities. The Sarbanes-Oxley Act of 2002 (SOX 2002) makes identifying the properties of these parameters under various conditions important. In this paper, an analytical/reliability engineering methodology is used to investigate the relative impact of penalties versus other types of internal controls on managerial and non-managerial employees’ propensity to commit fraud. Ceteris paribus, increasing required effort with internal controls and/or increasing employee penalties, increases the minimum amount stolen when a fraud incident occurs; that is, more net assets will be taken per fraud incident with controls than without controls. The findings show that the firm’s least-cost scenario with managerial employees is to enforce maximum penalties. The firm’s least-cost scenario with non-managerial employees is to utilize alternative internal controls while imposing minimum penalties. Further, the effectiveness of separation of duties is dependent on the detective controls in the internal control system.


Sign in / Sign up

Export Citation Format

Share Document