Design a compliance control test that produces reviewable evidence and a defensible conclusion.
The company must test whether sanctions screening operated for all outbound payments last quarter, including potential-match resolution. COSO control testing chain: objective, assertion, population, evidence, exception, conclusion. The common shortcut is to collect impressive-looking artifacts such as screenshots, attestations, and policy excerpts without proving completeness or operating precision. That creates a thick evidence file but leaves the conclusion unsupported. Objective and assertion Objective: prevent payments to restricted parties. Assertion: every outbound payment was screened before release and potential matches were resolved by an authorized reviewer. The assertion defines what the evidence must prove. Without it, testing becomes document collection. Population…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in