编者按:国际
会计师联合会(IFAC)下设的工商业界职业会计师(PAIB)委员会近日发布了新的国际良好实务指南—《组织
内部控制评价与改善》,为工商业界职业会计师改善组织内部控制提供支持。IFAC高级技术经理文森特?托普霍夫(Vincent Tophoff)特针对该指南撰写了文章。现将该文章全文转发,供参考。
*44E'Dxv New IFAC Publication Provides Support for Professional Accountants Improving Internal Control
E@Yq2FBpnn Evaluating and Improving Internal Control in Organizations
'f7s*VKG by Vincent Tophoff
M^/ZpKeT" Senior Technical Manager, IFAC
~>3#c#[ The Professional Accountants in Business (PAIB) Committee of the International Federation of Accountants (IFAC) has issued new International Good Practice Guidance (IGPG), Evaluating and Improving Internal Control in Organizations, highlighting areas where the practical application of existing internal control standards and frameworks often fails in many organizations.
I$fm"N This new guidance is important to a professional accountant in business who works with his/her organization to continuously evaluate and improve internal control, and ensure that internal control is an integrated part of the organization’s systems of governance and risk management.
07,&weQ In this guidance, internal control is defined as “an integral part of an organization’s system of governance and ability to manage risk, which is understood, effected, and actively monitored by the governing body, management, and other personnel to take advantage of the opportunities and to counter the threats to achieving the organization’s objectives.” Better integrated internal control can save the organization time and money, and promote the creation and preservation of value.
Z,,q mwd At the heart of the IGPG are nine key principles for evaluating and improving internal control systems (see Key Principles) complemented by guidance on how to implement them. Questions that the guidance is designed to help answer are:
o4
B%TW · What should be the scope of internal control?
LdX'V]ITh · Who should be responsible for internal control?
=MmAnjo · How should controls be selected, implemented, and applied?
vC^n_ · How can internal control be better ingrained into the DNA of the organization?
qcBamf · How should the organization report on internal control performance?
aSfAu!j) Evaluating and improving internal control are among the core competencies of many professional accountants in business. Therefore, professional accountants can play a leading role in ensuring that internal control forms an integral part of an organization’s governance system and risk management. With an integrated, organization-wide approach to risk management and internal control, professional accountants in business also encourage the practice that risks be viewed and treated in a more holistic way; that is, with improved internal control.
@@6c{r^P The guidance concludes with a limited list of relevant resources from IFAC, its member bodies, and other relevant organizations. It can be downloaded free of charge from
www.ifac.org/paib. z{U^j:A Key Principles of Evaluating and Improving Internal Control
bI)%g The principles below represent good practice for evaluating and improving systems for internal control.
iis}=i7| A. Internal control should be used to support the organization in achieving its objectives by managing its risks, while complying with rules, regulations, and organizational policies. The organization should therefore make internal control part of risk management and integrate both in its overall governance system.
;xu&%n[6@ B. The organization should determine the various roles and responsibilities with respect to internal control, including the governing body, management at all levels, employees, and internal and external assurance providers, as well as coordinate the collaboration among participants.
mr XmM< C. The governing body and management should foster an organizational culture that motivates members of the organization to act in line with risk management strategy and policies on internal control set by the governing body to achieve the organization’s objectives. The tone and action at the top are critical in this respect.
^`9O$.'@ D. The governing body and management should link achievement of the organization’s internal control objectives to individual performance objectives. Each person within the organization should be held accountable for the achievement of assigned internal control objectives.
8;(3fSNC E. The governing body, management, and other participants in the organization’s governance system should be sufficiently competent to fulfill the internal control responsibilities associated with their roles.
W3B:)<