PCAOB standards require management to uses an acceptable internal control framework; the most common used framework between public companies is “COSO” (Committee of Sponsoring Organization of the Tradeway Commission)(Becker CPA Review), which requires:
-As the design of control is evaluated, it should be tested, if is capable of preventing or detect material misstatement.
-Evaluates internal control related with operating unit or business functions, following COSO framework
-Evaluates IT regarding the flow of transactions process and methodology
-Evaluate if the control has been implemented and were in used and also, evaluates the limitations
-Evaluates controls of the financial reporting process at year end (PCAOBUS)
-Evaluates the company risk assessment and management practices and procedures
-Obtain enough evidence to support an opinion on internal control over financial reporting and financial