COSO Internal Control Framework Training Course

Duration 10 days 20 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Financial Controllers, Finance Managers and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-A-118

Before you join: Participants should understand core accounting processes such as general ledger close, accounts payable, accounts receivable, payroll or fixed assets.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Financial reporting failures, fraud losses, regulatory findings and delayed audits often stem from unclear control ownership, poorly designed processes, undocumented evidence or management override. Accountants and finance managers need to distinguish a policy from a control, identify where material misstatement can occur, and establish evidence that controls operated as intended. The COSO Internal Control—Integrated Framework provides a disciplined structure for doing this across financial reporting, operations and compliance objectives.

This course develops practical capability in applying COSO’s five components and 17 principles to finance and accounting processes. Participants map processes, identify risks, define control objectives, design preventive and detective controls, assess control deficiencies and document control conclusions. The course covers entity-level controls, risk assessment, information and communication, monitoring, IT-dependent controls, segregation of duties, management review controls, journal-entry controls and evidence standards. It also addresses the relationship between COSO, SOX-style control testing, internal audit work and external audit expectations.

Teaching combines concise instructor briefings with financial-services, public-sector, manufacturing and NGO cases. Participants work through realistic processes including procure-to-pay, order-to-cash, record-to-report, payroll and fixed assets. They prepare working papers, risk-and-control matrices, control narratives, test plans and remediation actions. The final capstone requires participants to build, review and present a complete COSO-based internal control assessment for a selected accounting process.

The course is suited to finance professionals who own, operate, review or test controls. It is particularly valuable where organisations are strengthening governance, preparing for audit, responding to control deficiencies, implementing ERP changes or formalising finance procedures.

What you will be able to do

  • Apply the COSO Internal Control—Integrated Framework to finance and accounting processes
  • Map end-to-end accounting processes using narratives, flowcharts and control points
  • Develop risk-and-control matrices for material financial reporting risks
  • Design preventive, detective and compensating controls with clear ownership and evidence
  • Assess control design and operating effectiveness using documented testing procedures
  • Evaluate control deficiencies using likelihood, magnitude and aggregation criteria
  • Prepare remediation plans that address root causes, owners, milestones and residual risk
  • Present a COSO-based internal control assessment and management action plan

Benefits of attending

For you

  • Produce audit-ready risk-and-control matrices for accounting processes
  • Identify weak controls before they cause reporting errors or audit findings
  • Document management review controls with defensible evidence requirements
  • Contribute confidently to control testing, remediation and audit discussions
  • Build a practical portfolio of finance-control working papers

For your organisation

  • More reliable financial reporting through clearly designed key controls
  • Faster audit response through consistent control documentation and evidence
  • Reduced control failures in payments, journals, reconciliations and close processes
  • Clearer accountability for control owners, reviewers and remediation actions
  • Better prioritisation of control improvements using documented risk assessments

Course modules

20 modules over 10 days

Participants can explain COSO’s structure and relate it to financial control responsibilities.

  • Purpose and scope of the COSO Internal Control—Integrated Framework
  • Three COSO objectives: operations, reporting and compliance explained
  • Five components connected through the COSO integrated framework
  • Seventeen principles used to assess effective internal control
  • Reasonable assurance and inherent limitations of internal control
  • Finance leadership responsibilities for designing and maintaining controls

Participants can translate financial reporting risks into specific control objectives.

  • Financial statement assertions: existence, completeness, accuracy, valuation and presentation
  • Material misstatement risks arising from routine accounting transactions
  • Control objectives linked to account balances and disclosures
  • Fraud risks considered under management override and pressure factors
  • Risk appetite statements translated into finance control priorities
  • Documenting inherent risk before considering existing control activities

Participants can assess governance arrangements that support reliable finance controls.

  • Board and audit committee oversight of financial reporting controls
  • Tone at the top evidenced through policies and decisions
  • Organisational structure, reporting lines and delegated financial authority
  • Competence requirements for preparers, reviewers and control owners
  • Accountability mechanisms for late reconciliations and unresolved exceptions
  • Ethics reporting channels and investigation escalation responsibilities

Participants can document an accounting process from initiation through reporting.

  • Narrative process descriptions identifying inputs, outputs, systems and owners
  • Swimlane flowcharts showing handoffs, approvals and segregation points
  • Walkthroughs tracing one transaction from source document to ledger
  • Key control points identified at process handoffs and exceptions
  • System interfaces mapped between operational applications and general ledger
  • Process boundaries defined for outsourced activities and shared services

Participants can build a risk-and-control matrix for a defined finance process.

  • Risk-and-control matrix fields: objective, risk, control and owner
  • Assertions linked directly to process risks and control activities
  • Control frequency, population, precision and evidence clearly specified
  • Key controls distinguished from supporting operational control activities
  • Residual risk assessed after considering control design and coverage
  • Matrix review criteria for completeness, clarity and accountability

Participants can design controls that address identified accounting risks effectively.

  • Preventive, detective and corrective controls matched to risk timing
  • Manual and automated controls compared for reliability and evidence
  • Segregation of duties matrices for incompatible finance responsibilities
  • Approval controls defined by authority limits and transaction thresholds
  • Reconciliations designed with preparer, reviewer and escalation requirements
  • Exception reporting criteria linked to investigation and resolution actions

Participants can identify entity-level controls and document effective management reviews.

  • Entity-level controls supporting financial reporting risk management
  • Management review controls defined by precision, criteria and follow-up
  • Budget-to-actual analysis supported by documented variance investigation
  • Analytical review controls addressing unusual trends and relationships
  • Closing review meetings evidenced through agendas, decisions and actions
  • Escalation thresholds established for material unresolved financial exceptions

Participants can assess and strengthen controls across the procure-to-pay cycle.

  • Vendor master-data controls preventing duplicate or fictitious suppliers
  • Three-way matching between purchase orders, receipts and invoices
  • Payment run approvals supported by exception reports and evidence
  • Duplicate invoice detection using invoice number and amount rules
  • Bank detail changes independently verified before supplier payment release
  • Accounts payable reconciliations resolving aged debit balances promptly

Participants can design controls for revenue recognition and receivables reliability.

  • Customer master-data approvals controlling credit terms and limits
  • Revenue recognition controls linked to contract performance obligations
  • Sales cut-off testing around period-end shipment and invoicing dates
  • Credit note approvals preventing unauthorised revenue reversals
  • Receivables ageing reviews driving collection and impairment actions
  • Cash application reconciliations matching receipts to customer accounts

Participants can document key controls supporting an accurate and timely financial close.

  • Close calendars assigning tasks, deadlines, reviewers and dependencies
  • Journal-entry controls addressing authorisation, support and unusual postings
  • Balance sheet reconciliations supported by ageing and investigation evidence
  • Consolidation controls governing eliminations, translations and intercompany balances
  • Financial statement disclosure checklists addressing completeness and consistency
  • Post-close review procedures for late adjustments and reporting changes

Participants can assess controls for selected high-risk accounting cycles.

  • Payroll master-file changes approved independently from payroll processing
  • Payroll-to-general-ledger reconciliations resolving unexplained differences each period
  • Fixed asset capitalisation controls applying defined recognition thresholds
  • Asset disposals authorised and reconciled to asset register changes
  • Inventory count instructions controlling custody, count sheets and adjustments
  • Obsolescence reviews supported by ageing, usage and forecast evidence

Participants can establish documentation and communication practices that support control operation.

  • Control descriptions written with action, owner, frequency and evidence
  • Information quality assessed for completeness, accuracy, timeliness and accessibility
  • Policy hierarchies linking accounting policies, procedures and control instructions
  • Control owner attestations structured around operation and known exceptions
  • Issue reporting channels distinguishing deficiencies, incidents and improvement opportunities
  • Document retention schedules aligned with audit and regulatory requirements

Participants can identify IT general controls supporting reliance on finance-system controls.

  • User access provisioning authorised through role-based access requirements
  • Segregation-of-duties conflicts identified within ERP security roles
  • Privileged access reviews covering administrators and emergency access
  • Change management controls governing finance system configuration changes
  • Interface monitoring controls detecting failed or incomplete data transfers
  • Backup and recovery evidence supporting availability of accounting records

Participants can assess automated controls, spreadsheets and reports used in financial reporting.

  • Automated application controls configured for validation and approval rules
  • Key report controls establishing report logic, parameters and completeness
  • Spreadsheet inventory based on financial reporting materiality and complexity
  • End-user computing controls covering access, formulas, versioning and review
  • Report-to-ledger reconciliations confirming data completeness and accuracy
  • Configuration evidence retained for significant automated finance controls

Participants can evaluate whether a control is suitably designed to address a stated risk.

  • Design effectiveness criteria: precision, frequency, competence and independence
  • Risk-control linkage tested against relevant financial statement assertions
  • Control population defined before selecting testing procedures and samples
  • Inquiry, observation, inspection and reperformance compared for design assessment
  • Compensating controls evaluated for timeliness, coverage and reliability
  • Design gaps documented with clear causes and financial reporting implications

Participants can plan and document tests of operating effectiveness for finance controls.

  • Testing objectives specify control attributes, period and required evidence
  • Sample selection methods matched to frequency, risk and population size
  • Inspection procedures assess evidence of performance and review quality
  • Reperformance tests verify calculations, approvals and reconciliations independently
  • Exceptions recorded with dates, causes, impact and supporting evidence
  • Testing conclusions distinguish isolated deviations from systemic failures

Participants can evaluate control deficiencies and determine appropriate corrective action priorities.

  • Deficiencies classified by design failure, operating failure or documentation gap
  • Likelihood and magnitude considered when assessing potential misstatement
  • Aggregation analysis identifies related deficiencies affecting the same assertion
  • Five Whys analysis traces recurring control failures to root causes
  • Fishbone diagrams structure people, process, system and policy causes
  • Issue ratings aligned with defined escalation and governance criteria

Participants can create remediation plans and monitor whether corrective actions resolve deficiencies.

  • Corrective actions address root cause rather than visible symptoms
  • Remediation plans assign owners, milestones, resources and acceptance criteria
  • Interim compensating controls reduce exposure before permanent remediation
  • Action tracking logs record status, evidence and overdue escalations
  • Validation testing confirms remediation design and sustained operation
  • Monitoring dashboards report open issues, ageing and risk exposure

Participants can communicate control conclusions clearly to management, auditors and oversight bodies.

  • Control assessment reports distinguish scope, findings, ratings and recommendations
  • Management representations supported by documented control evaluation evidence
  • Audit requests coordinated through evidence logs and accountable owners
  • External auditor reliance considerations explained without assuming audit responsibility
  • Audit committee reporting focuses on significant issues and remediation
  • Control narratives updated following process, system or policy changes

Participants can build, review and present a complete COSO-based internal control assessment for an accounting process.

  • Select a material accounting process and define assessment scope
  • Map process steps, systems, roles, risks and control points
  • Build a risk-and-control matrix linked to COSO principles
  • Assess design and operating effectiveness using documented test evidence
  • Rate deficiencies, analyse root causes and prioritise corrective actions
  • Present control conclusions, remediation plan and management reporting pack

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. COSO-based risk-and-control matrix template
  2. Accounting process narrative and swimlane flowchart template
  3. Management review control documentation checklist
  4. Control design and operating effectiveness test plan
  5. Control deficiency evaluation and root-cause analysis template
  6. Finance control remediation action plan

Who should attend

  • Financial Controllers — strengthen financial reporting controls and audit readiness
  • Finance Managers — establish accountable controls across core accounting processes
  • Internal Auditors — assess control design and operating effectiveness systematically
  • Accountants — document, operate and evidence key financial controls
  • Risk and Compliance Managers — align finance control activities with governance requirements
  • External Audit Liaisons — prepare control documentation and respond to audit findings

Skills and tools covered

COSO framework applicationControl risk assessmentProcess control mappingControl effectiveness testingDeficiency evaluationRemediation planning

Tools and standards

COSO Internal Control—Integrated Framework, Risk-and-Control Matrix, Five Whys, Fishbone Diagram

How the course runs

Training methodology

The course uses short instructor briefings followed by structured case analysis, group work, control-design workshops and simulated review discussions. Participants apply COSO concepts to accounting cycles, assess control failures, inspect sample evidence and prepare practical working papers. Cases include payment fraud indicators, unsupported journal entries, incomplete reconciliations, weak access management and delayed remediation. Facilitated peer review helps participants test the clarity of control language, evidence requirements and proposed corrective actions. Each participant builds materials that can be adapted for their own finance processes.

Requirements and prerequisites

Participants should understand core accounting processes such as general ledger close, accounts payable, accounts receivable, payroll or fixed assets. Familiarity with financial statements, reconciliations, approval workflows and basic business risks is expected. Prior exposure to internal audit, risk management, compliance or external audit is useful but not essential. Participants do not need prior COSO certification, formal audit qualifications, specialist IT audit knowledge or experience of SOX reporting. The course explains COSO terminology before applying it to finance control design and testing.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should understand basic accounting processes and financial reporting concepts. Prior COSO, internal audit or SOX experience is helpful but not required.

Bring a laptop if possible and, where permitted, a non-confidential example of a finance process, audit finding or control concern. Course templates and case materials are provided.

The course suits accountants, controllers, finance managers, internal auditors and risk professionals with responsibility for financial controls. It also benefits professionals preparing for audit, ERP change or finance process standardisation.

This course concentrates on applying COSO to the design, operation and assessment of finance and accounting controls. Internal audit courses typically place greater emphasis on audit planning, assurance engagements and reporting methodology.

Participants can use the risk-and-control matrix, process mapping and test-plan templates on a selected accounting cycle. The materials support reviews of reconciliations, journal entries, payments, access controls and close procedures.

The first part establishes COSO, financial reporting risks, process mapping and control design. The later sessions address accounting cycles, IT controls, testing, deficiencies, remediation and a final assessed capstone presentation.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.

Ask on WhatsApp info@skillsetdevelopment.com

More courses in Accounting

Accounting Certificate Course in Financial Reporting and Analysis 10 days · from USD 2,200 · next 16 Nov Accounting Certificate Course in International Financial Reporting Standards 10 days · from USD 2,200 · next 16 Nov Accounting Certificate Course in International Public Sector Accounting 10 days · from USD 2,200 · next 16 Nov Accounting Corporate Finance and Reporting Training Course 5 days · from USD 1,100 · next 16 Nov Accounting Cost Accounting Training Course 5 days · from USD 1,100 · next 16 Nov Accounting Cost Analysis and Control Training Course 5 days · from USD 1,100 · next 16 Nov Accounting Excel for Finance and Accounting Training Course 5 days · from USD 1,100 · next 16 Nov Accounting Fast Closing of Financial Accounts Training Course 5 days · from USD 1,100 · next 16 Nov