Course
Overview:
Supervising internal control testing
and everyday compliance requires a robust understanding of framework mechanics
and field execution. This specialized course is designed for audit seniors,
team leads, and operational supervisors who guide day-to-day internal control
evaluations under the COSO Integrated Framework. Participants will learn how to
coach staff on applying the 5 components and 17 principles, review process
documentation and risk-control matrices, and ensure high working paper quality.
Target
Participants
- Audit seniors, team leads, and audit supervisors
- Senior internal and external auditors managing field
execution teams
- Operational and finance supervisors overseeing
departmental controls
- Compliance and risk analysts stepping into supervisory
roles
Course
Objectives
By the end of this course,
participants will be able to:
- Guide Framework Application: Direct staff on how to apply the 17 COSO principles
during fieldwork and routine operations.
- Review Documentation & RCMs: Critically evaluate process narratives, workflow maps,
and risk-control matrices (RCMs) for completeness.
- Supervise Testing Execution: Monitor tests of design and operating effectiveness
for both manual and automated controls.
- Ensure Working Paper Integrity: Review audit working papers for technical compliance,
appropriate evidence, and clear cross-referencing.
- Coach on Deficiency Reporting: Guide team members on identifying, classifying, and
reporting control exceptions accurately.
Course
Content / Outline
Plaintext
[
MODULE 1: Supervisory Responsibilities & COSO Principles ]
│
▼
[
MODULE 2: Reviewing Process Narratives and RCMs ]
│
▼
[
MODULE 3: Overseeing Control Design & Walkthroughs ]
│
▼
[
MODULE 4: Managing Testing & Working Paper Reviews ]
│
▼
[
MODULE 5: Coaching on Deficiency Grading & Follow-Up ]
- Module 1: Supervisory Responsibilities & COSO
Principles
- The unique supervisory role in bridging framework
theory with field execution
- Guiding staff in interpreting and applying the 17 COSO
principles locally
- Establishing clear expectations for quality,
timeliness, and professional skepticism
- Module 2: Reviewing Process Narratives and RCMs
- Supervisory standards for reviewing operational
flowcharts and process documentation
- Validating that key financial and operational risks
are accurately mapped to mitigating controls
- Identifying gaps where controls may be missing,
inadequate, or redundant
- Module 3: Overseeing Control Design & Walkthroughs
- Coaching staff on conducting effective, collaborative walkthroughs
with process owners
- Supervising design adequacy assessments to ensure
risks are appropriately mitigated
- Reviewing basic IT general control and system report
dependencies
- Module 4: Managing Testing & Working Paper Reviews
- Overseeing tests of operating effectiveness, sample
selection, and evidence collection
- Best practices for reviewing working paper headers,
indexing, tick marks, and conclusions
- Resolving field testing roadblocks and providing
real-time technical coaching
- Module 5: Coaching on Deficiency Grading &
Follow-Up
- Coaching team members on evaluating control exceptions
and analyzing root causes
- Standardizing how deficiencies are graded and written
up for management review
- Tracking remediation action plans and verifying
prior-period audit corrections


