COSO17

Requirements in this framework

• Principle 1: Demonstrates commitment to integrity and values
• Principle 10: Selects and develops control activities that help mitigate risks
• Principle 11: Selects and develops general controls over technology
• Principle 12: Bases controls on thorough policies and procedures
• Principle 13: Uses relevant, high-quality information
• Principle 14: Communicates internally to support controls
• Principle 15: Communicates externally
• Principle 16: Conducts ongoing and/or separate evaluations
• Principle 17: Evaluates and communicates deficiencies
• Principle 2: Demonstrates independence and exercises oversight responsibility
• Principle 3: Establishes structure, authority and responsibility
• Principle 4: Demonstrates commitment to attracting, developing and retaining competent staff
• Principle 5: Enforces accountability
• Principle 6: Specifies suitable, specific objectives
• Principle 7: Identifies and analyzes risks
• Principle 8: Assesses fraud risk
• Principle 9: Identifies and analyzes significant changes