Control Objective Before Control Activity
Write a control objective that connects a business risk to a specific activity.
Control is useful only when it changes a real management decision. Teach COSO-style control starts with objectives. In controlling, the objective says what must remain true: revenue is complete, spend is authorized, access is appropriate, or margin exceptions are intentional. Only after that should you design the activity. The mechanism is objective -> risk -> control -> evidence. If you skip the objective, you can add checks that slow people down while leaving the actual exposure untouched. Example The team changed "VP reviews large credits" to "recognized revenue and customer credits remain complete and matched." The new control reviewed unmatched…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in