The thesis aims to raise the knowledge about operation of Sarbanes-Oxley Act and its effective application. The thesis describes historical background and arguments for its creation. It presents each section of the law with a focus on the internal control section. The thesis characterizes recommended methodes of successful application of the SOX Act. The main factors of effective control environment are discussed on the example of the COSO control framemork along with a description of the testing. Then, the thesis examines the impact of the law on external audit. Next chapter clarifies progression of the law followed with an analysis of the impact on the economy and companies. High-quality internal control system has positively influenced accuracy and reliability of the financial statements and has also improved investor´s confidence and reduced likelihood of a fraud. For effective application of the SOX Act it is crucial to understand internal processes and clearly determine the internal control objectives.

The diploma thesis is focused on corporate fraud problematic, on The Sarbanes-Oxley Act of 2002 and on problematics of internal control systems and corporate governance, which relate closely with the Sarbanes-Oxley act. The goal of my diploma thesis is to highlight the significance of corporate fraud problematic and create an integrated summary of requirements placed on companies, which either have to or want to comply with the Sarbanes-Oxley act. The opening part of the diploma thesis is focused on fraud theory, which is after that demonstrated on accounting scandal cases Enron, WorldCom and Arthur Andersen. The biggest losses were caused by fraudulent financial reporting. The Sarbanes Oxley act is a reaction on this fraud cases. The Sarbanes-Oxley act brought a range of significant changes in financial reporting, internal control, corporate governance, audit and other areas.

La presente investigación, tiene como objetivo analizar el Sistema de Control Interno COSO 2013, y su influencia en la gestión financiera en las empresas de fabricación del calzado del distrito de San Juan de Lurigancho. El control interno resulta un componente capital en el momento de administrar una empresa, el estudio realizado intenta determinar la realidad del conjunto de empresas de calzados en relación con el control interno y su influencia en la gestión financiera, para lo cual se realizó un diagnóstico, evaluación financiera y una propuesta de mejora. Detectando una falta de control en estas empresas lo que repercute en un desajuste económico y financiero. La aplicación del sistema COSO 2013 al control interno de estas empresas permitiría mejorar la situación financiera de las mismas, dirigiendo óptimamente la utilización de los recursos y la supervisión de los procesos de las empresas, ese es un aporte a la dirección de las empresas para que puedan trabajar y desarrollarse confiando en una gestión sistematizada. El presente trabajo de investigación se encuentra dividido en 5 capitulos que son: Capitulo I Marco teórico, se analiza la evolución histórica y comtemporanea de las variables estudiadas, para contextualizar la investigación con documentación de diversas fuentes, opinione y contrastes teóricos. Capítulo II Planteamiento del problema, se analiza la realidad problemática de un conjunto de empresas se identifica el problema principal y secundarios, justificación objetivos e hipótesis que son los criterios en torno al cual se desarrolla la investigación. Capítulo III Metodología de la investigación, se definen las características metodológicas empleadas en la investigación, diseño de la investigación, la técnica, la población. Capítulo IV Desarrollo de la investigación, se aplica las herramientasy la metodología elegida y se observan los resultados obtenidos por medio de encuestas y caso el práctico. Capítulo V Análisis de los resultados, en este capítulo se analizan y sistematizan los resultados obtenidos del trabajo de campo, se realiza al análisis cualitativo y el cuantitativo, se propone un plan de mejora. / The present research aims for an analysis of the Internal Control System COSO 2013 and its financial impact among the enterprises of the shoe making industry within San Juan de Lurigancho District. Internal Control is an essential factor when administrating an enterprise; these research intents to determine the reality of the group of shoemaking enterprises in relation to Internal Control strategies and its influence in the economic impact, and in order to so, we have performed a diagnosis, a financial evaluation and a proposal for improvement. The implementation of COSO 2013 into the Internal Control system of our group of enterprises will allow them to improve their financial situation by specifically directing resources to certain areas and also by supervising their various production processes. This hypothesis is a hint to the management itself of the enterprises, so they can work and evolve trusting a systemized management. Our research is divided in five chapters, arranged as follows: Chapter I Theoretical Framework analysis of historic and current evolution of studied variables in order to circumscribe our investigation with documentation from various fonts, opinions and theory contrast. Chapter II Problem Planning, analysis of the problematic of a group of enterprises, identification of the main and secondary problems, justification, objetctives, and hypothesis, criteria our investigation is based upon. Chapter III Methodology of the Investigation, defining the methodological characteristics used in the investigation design, the techniques, and the population. Chapter IV Development of the investigation, the tools and methodology chosen are used and results are observed thru surveys and the practice case. Chapter V Analysis of results, in this chapter fieldwork results are analyzed and systematized, performing cuantitative and qualitative analysis, proposing an improvement plan. / Tesis

Modern businesses are trying to employ sustainability as part of their business structure. The alongside terms internal control and corporate social responsibility has also become a key concern for businesses in the ever changing business environment. Changes in business environment are unavoidable. In this paper, we have tried to link these three terms together. We have tried to find out the role of internal control and corporate social responsibility in sustainability of a business. We have selected Boeing as our case as it is a reputed giant corporation, who has practice COSO internal control framework and corporate social responsibility (CSR). We have discussed the models related to the terms and tried to find out how the company used those model into their organization. This paper also tried to find out if there is any direct link between internal control and CSR with a company being sustainable and profitable. Our study showed Boeing’s proper adaptation of COSO framework and CS model. Nevertheless, the study could not suggest any clear connection of internal control and CSR as a key mean for sustainability or profitability. However, a clear rise in goodwill has pointed out in the paper that could be a key outcome from effective internal control and CSR.

[pt] A auditoria e o monitoramento contínuo visam melhorar a eficiência das operações na empresa, identificando e avaliando riscos de maneira tempestiva e provendo rapidamente informações críticas à alta administração para uma melhor tomada de decisão. Mediante a adoção de ferramentas de controle incorporadas aos sistemas de informação ou a utilização de softwares apropriados, a auditoria e o monitoramento contínuo propiciam o acompanhamento em tempo real dos processos empresariais. Esta dissertação tem como objetivo principal desenvolver e aplicar em uma empresa do setor elétrico brasileiro uma metodologia para estabelecer e hierarquizar regras de monitoramento de processos de negócio, na perspectiva de implementação futura de uma plataforma tecnológica de auditoria contínua. Mais especificamente, a metodologia compreende a seleção dos processos auditáveis com maior exposição ao risco; identificação de eventos de risco associados a esses processos; e estabelecimento e hierarquização de regras de monitoramento propriamente ditas. A pesquisa pode ser considerada aplicada, descritiva e participativa e teve como estratégia principal a adoção do método de estudo de caso, com a realização de oficinas de trabalho para a coleta de dados primários. Destacam-se como resultados: (i) a revisão crítica da literatura existente sobre auditoria contínua; (ii) uma metodologia para estabelecer e hierarquizar regras de monitoramento associadas a processos de maior exposição a risco para fins do projeto de auditoria continua em uma empresa do setor elétrico brasileiro; e (iii) demonstração da aplicabilidade e efetividade da metodologia proposta, conforme descrito no estudo de caso. / [en] Continuous monitoring and audit aim at improving the efficiency of operations at the company, identifying and timely assessing risks for providing critical information to senior management for better decision-making processes. By adopting control tools embedded in company s information systems or by using specialized software, continuous monitoring and audit provide real-time assessment of business processes. This dissertation aims to develop and apply in a Brazilian power energy company a methodology for establishing and hierarchizing monitoring rules for the purpose of continuous monitoring and audit. The proposed methodology encompasses selection of business processes with greater exposure to risk; identification of risk events associated with those processes; and establishment of monitoring rules themselves. This research can be classified as applied, descriptive, methodological and participatory. Its methodological approach includes the development of a case study and workshops for collecting primary data. The main results can be summarized as follows: (i) critical review of existing literature on continuous audit; (ii) a methodology designed for establishing and hierarchizing monitoring rules with the purpose of continuous monitoring and audit at a Brazilian power energy company selected for this research; and (iii) demonstration of the applicability and effectiveness of the proposed methodology according to the results presents in the case study.

Bolagsstyrningen har förändrats på grund av vissa negativa företagshändelser som inträffade under 2000-talet. Det har blivit ett större fokus på internkontroll och etik. Som ett led i detta har även betydelsen av internrevision ökat. För att öka effektiviteten och kvaliteten på revisionen måste en samverkan mellan interna och externa revisorer äga rum. Förhållandet mellan parterna är avgörande för att fastställa styrningen av företaget. Denna bakgrund ledde oss fram till uppsatsens syfte som är att undersöka hur den externa revisionen påverkas av internrevision sett utifrån en externrevisors perspektiv. För att besvara uppsatsens frågeställningar har en kvalitativ fallstudie använts. Semistrukturerade intervjuer genomfördes med fem externa revisorer för insamlandet av data. Från fallstudien framkom det att internrevisionen påverkar externa revisorer. Ytterligare visade studien att det sker ett samarbete mellan den interna och externa revisionen. En bra internrevision leder till ett mer effektivt arbetssätt samt en mindre riskfylld revision. Resultatet som framkom i studien visar att externa revisorer använder den interna revisionens underlag om den bedöms som tillförlitlig. Samarbetet mellan revisorerna bidrar till en mer effektiv revision.

Bakgrund och Problem: Det har visat sig att en gemensam nämnare bland de bakomliggande orsakerna till den senaste finanskrisen var bristande intern kontroll. Det var även en av orsakerna till att en svensk bank i augusti år 2010 gick i konkurs och det kan ses som högst oväntat med tanke på de utvecklade regler, ramverk och granskningar som finns för de svenska bankerna idag. För att den interna kontrollen i ett företag ska fungera väl måste den integreras i hela verksamheten. I dagsläget finns det tecken på att det råder en lucka mellan den interna kontroll som styrelse vill uppnå och den som når fram till medarbetarna i banken. Syfte: Uppsatsens syfte är att studera hur de fyra svenska storbankerna arbetar med intern kontroll idag samt analysera kommunikationen och integrationen av den interna kontrollen i verksamheten. Vidare vill vi bidra till en insikt om hur intern kontroll integreras och blir en del av det dagliga arbetet i banken. Metod/Empiri: Då studien undersöker hur kommunikationen och integrationen av intern kontroll ser ut i de svenska storbankerna, ansågs en enbart kvalitativ metod med intervjuer av personer som aktivt arbetar med intern kontroll inte vara tillräckligt. Det empiriska materialet består därför av intervjuer med personer som arbetar aktivt med den interna kontrollen i de fyra svenska storbankerna samt en enkätundersökning bland medarbetarna ute i verksamheten. Slutsats: Arbetet med den interna kontrollen i de svenska storbankerna fungerar väl och det går att märka en tendens till ökat fokus inom området. En samlad bedömning och en jämförelse av intervjurespondenternas svar och enkäternas svar visar att ett gap i kommunikationen angående den interna kontrollen kan anas. Det finns därmed också en brist i integrationen av den interna kontrollen. / Background and Problem: It was shown that the lack of internal control was a common denominator among the reasons for the recent financial crisis. It was also one of the reasons that a Swedish bank in August 2010 went bankrupt and this can be seen as highly unexpected due to the developed rules, frameworks and reviews that exist for the Swedish banks today. In order for a company to accomplish a well functional internal control it must be integrated throughout the whole organization. In the current situation there is evidence confirming an existence of a gap between the internal control a board request and what is accessible to employees in the bank. Aim: The purpose of this thesis is to study how the four major Swedish banks are operating the internal control today, also, analyzing the communication and integration of the internal control within the organization. We also wish to contribute to an understanding of how internal control is integrated and how it becomes a part of the daily work in the bank. Method/Empirics: Since this study examines how communication and integration of internal control appears in the major Swedish banks, a purely qualitative approach with interviews of people who actively work with the internal control was not considered as sufficient. Therefore, the empirical data consists of interviews with employees who are actively working with internal control in the four major Swedish banks and additionally, a survey was sent to the employees working in the daily business. Conclusions: The work with internal control in the major Swedish banks is well functioning and it is possible to notice a tendency for increased focus for the subject. An overall assessment and comparison of responses from the interviews and the survey indicates a gap in communication regarding internal control. Thus, there is a lack of integration of the internal control.

This master's thesis is focused on the system of internal controls which is, in some form or another, implemented in every organization. In the theoretical part, the internal controls are specified according to the worldwide accepted integrated COSO framework for internal controls. Furthermore, there is briefly characterized internal audit, its aims and relation to the system of internal controls. The practical part deals with internal controls implemented in a specific organization. There were analysed control mechanisms implemented into the basic enterprise's process, the Order to Cash process.

Efter 2000-talets stora skandaler fick den interna kontrollen en central roll på de flesta företagen. En stark intern kontroll kan enligt tidigare forskning skydda företag ifrån bedrägerier, fel och misstag. Denna studien syftar till att förklara variationen i företags upplysningar om intern kontroll. En kvantitativ metod har använts för att lyckas besvara detta syfte och empirin har insamlats ifrån 235 börsnoterade bolags årsredovisningar. Uppsatsen har en teoretisk referensram som är byggd på tidigare forskning samt flera olika teorier. De teorier som kommer att användas är legitimitetsteorin, agentteorin, positive accounting theory och institutionell teori. Utifrån denna referensram har fem hypoteser utvecklats. Dessa hypoteser har sedan testats med hjälp av olika statistiska analyser. Resultatet ifrån denna studien indikerar på att det finns flera faktorer som kan påverka företagens upplysningar om intern kontroll i årsredovisningarna. Slutsatsen påvisade att storlek, ägarstruktur samt tillämpningen av COSO: ramverket påverkar mängden upplysningar som anges i bolagens årsredovisningar. Studien indikerade vidare på att bransch och revisionsbyrå inte påverkar mängden upplysningar som anges i årsredovisningarna. / After the big scandals of the 21st century, internal control became a crucial role amongst most companies. According to previous research, strong internal control can protect companies from frauds, errors and mistakes. This study clarifies the variation in companies’ information concerning internal control. Furthermore, a quantitative method is used to successfully respond to this purpose and the information is composed from the annual reports of 235 listed companies in Sweden. This study has a theoretical framework that is based on previous research and several different theories. The theories that are used is legitimacy theory, agent theory, positive accounting theory and institutional theory. Consequently, based on this outline, five hypotheses are developed. Further, these hypotheses are tested using various statistical analyzes. The result of this study indicates that there are numerous of factors that may affect the company's information regarding internal control in the annual report. Conclusively, the study indicates that size, ownership structure and the application of the COSO framework affect the amount of disclosures in the company's annual reports. In addition, the study indicates that the quantity of information disclosed in the annual reports is not depended on the industry or audit firms used.

Made available in DSpace on 2016-04-25T18:40:13Z (GMT). No. of bitstreams: 1 Joseth Ferreira Brandao.pdf: 1284075 bytes, checksum: 1fbf41051d6cee86095f7b8f3639df96 (MD5) Previous issue date: 2015-12-22 / Internal control of a public institution must be suited to your needs, in order to provide reasonable security of your information. It is true that information is one of the basic inputs of society becoming thus a fundamental good for any activity. Thus, this rummage aimed to conduct a study on the Internal Control System of the Federal University of Alagoas analyzing their suitability to the model proposed by COSO in order to foster a culture of internal controls in the institution, with the risk assessment, activities control, information and communication, as well as by monitoring through ongoing management activities. The data collection was conducted through survey research using a structured questionnaire with closed and open questions, which was applied to teachers and technicians of the University. During the processing and analysis of the results it was applied Palfi and Boot- Avram model that consists of comparing international models of internal control obtaining the degree of similarity and dissimilarity between them from the calculation of the Jaccard coefficient. The results show that there is high dissimilarity among the COSO model and Internal Control System UFAL especially with regard to the monitoring component / O controle interno de uma instituição pública deve estar adequado às suas necessidades, de modo a proporcionar uma razoável segurança de suas informações. É certo que a informação é um dos insumos básicos da sociedade tornando-se, portanto, um bem fundamental para qualquer atividade. Nesse sentido, esta pesquisa teve por objetivo conduzir um estudo sobre o Sistema de Controles Internos da Universidade Federal de Alagoas analisando sua adequação ao modelo proposto pelo COSO com o intuito de fomentar a cultura de Controles Internos na Instituição, com a avaliação de riscos, atividades de controle, informação e comunicação, bem como através do monitoramento por meio de atividades gerenciais contínuas. A coleta de dados foi realizada por meio de pesquisa survey com a utilização de questionário estruturado com questões fechadas e abertas, o qual foi aplicado aos docentes e técnicos da Universidade. Durante o processamento e as análises do resultado foi aplicado o modelo Palfi e Bota-Avram, que consiste na comparação entre modelos internacionais de controle interno obtendo-se o grau de semelhança e dessemelhança entre eles a partir do cálculo do Coeficiente de Jaccard. Os resultados mostram que há grande dissimilaridade entre o modelo COSO e o Sistema de Controles Internos da UFAL, principalmente no que tange ao componente de Monitoramento