薩班斯法案404內(nèi)控報告弱點(diǎn)一個試驗(yàn)coso框架組件和信息技術(shù)【外文翻譯】

1、外文翻譯原文：SOX404ReptedInternalControlWeaknesses:ATestofCOSOFramewkComponentsInfmationTechnologyThispaperexaminesinternalcontrolsfrombothaninfmationtechnology(IT)nonITperspectiveinrelationtothefivecomponentsoftheCommitteeofS

2、ponsingganization’sInternalControlIntegratedFramewk(COSO1992)aswellastheachievementofoneofCOSO’sthreeobjectivesreptingreliability.Oursampleconsistsof490firmswithmaterialweaknessesreptedunderSarbanesOxleySection404duringt

3、hefirstyearofcompliance.WeclassifytheweaknessesbyCOSOcomponentasITrelatednonITrelated.OurresultssuppttheinterrelationshipsoftheCOSOFramewk.Theresultsalsoshowthatthenumberofmisstatedaccountsispositivelyrelatedtothenumbero

4、fweakCOSOcomponents(i.e.scope)certainweakCOSOcomponents(i.e.existence).FirmswithITrelatedweakcomponentsreptmematerialweaknessesmisstatementsthanfirmswithoutITrelatedweakcomponentsprovidingevidenceonthepervasivenegativeim

5、pactofweakITcontrolsespeciallyincontrolenvironmentriskassessmentmonitingBeginningonNovember152004Section404oftheSarbanesOxleyActof2002(SOX404)requiresallacceleratedfirms(withatleast$75millioninpublicequityfloat)toreptont

6、heeffectivenessoftheirinternalcontrolsoverfinancialrepting.Managementmust(1)statethattheyareresponsiblefestablishingmaintaininginternalcontrols(2)identifytheinternalcontrolframewkusedtoevaluatecontrols(3)provideanassessm

7、entontheeffectivenessofinternalcontrols(4)identifymaterialweaknesses.AnMWisa‘‘deficiencyacombinationofdeficiencies...suchthatthereisareasonablepossibilitythatamaterialcomponentsreptnotonlymenonITrelatedMWsmisstatementsth

8、anfirmswithoutITrelatedweakcomponentsbutalsohaveagreaterscopeofMWs.MeovertheexistenceofanITrelatedweakcomponentgenerallyhasanincrementalnegativeeffectonreptingreliabilitythenumberofnonITmaterialweaknessesreptedespecially

9、fthecontrolenvironmentriskassessmentmonitingcomponents.ThustheITdomainappearstoaffectoverallcontroleffectiveness.Thisstudycontributestotheunderstingoftherelationshipbetweentheweakcomponentswhichisimptanttoregulatsinvests

10、auditsmanagersbecauseafirm’sdesignexecutionofitsinternalcontrolsystemsaffectreptingaccuracyaswellasoperationalefficiencyeffectiveness.UnderstingIT’sroleininternalcontrolsisimperativegiventhat(1)computerizedsystemsprocess

11、mostbusinessinfmation(2)ITchangesthenatureofmisstatements(Kinney2000)(3)littleempiricalevidenceexistsregardingIT’sroleincontrols(cf.EilifsenMessier2000KreutzfeldtWallace2000ITGI2004).Meovercurrentmatedguidancegivesaudits

12、anefftreducingincentivetousetestsofITcontrols(PCAOB2007AppendixB28)whichrequiresauditstoclearlyundersthowITnonITMWscanaffecttheeffectivenessoftheFramewk.COSOInternalControl—IntegratedFramewkSOX404requiresmanagementtousea

13、framewktoevaluateinternalcontrols.GiventhatmostfirmsareusingCOSOweanalyzeinternalcontrolbyexaminingMWswithinthecontextofthefollowingfivecomponentsofCOSO.Thefirstcomponentcontrolenvironmentprovidesthefoundationfalloftheot

14、hercontrolcomponentssetsthetoneofthefirm.Itincludestheintegrityethicalvaluescompetencephilosophyoperatingstyleofthefirm’smanagersemployees.Thesecondcomponentriskassessmentistheidentificationanalysismanagementof(operating

15、economicindustryregulaty)risksthatmaypreventafirmfromachievingitsobjectives.Managementimplementscontrolactivitiesthethirdcomponenttomitigatetheidentifiedrisks.Controlactivitiesincludesegregationofdutiesapprovalsreviewsre