COSO stands for Committee of Sponsoring Organisations of the Treadway Commission. Principal 11 refers to the maintenance of proper internal controls over information technology. This principal is the updated internal control framework and provides guidelines for assessing the effectiveness of controls over IT. Internal controls are defined as “a process, effected by an entity’s Board of Directors, Management, and other personnel, designed to provide reasonable assurance regarding the achievement of objectives relating to operations, reporting, and compliance”. Collectively, policies, processes, procedures, and controls make up a company’s system of internal control. In East Africa, we are now noting many organisations,
[…]