ORC
Objectives
Reporting
Compliance
CRIME
Control environment Risk assessment Control activities Information and communication Monitoring activities
EBOCA
Ethical Values Board Independence and oversight Organizational structure Competence Accountability
Risk Assessment
Specify objectives
Analyze risk
Fraud potential
Assess changes
Info and communication
Obtain and use info
Internally communicate
External communication
Monitoring activities
Separate & Ongoing eval
Deficiencies communicated
Existing control activities
Control Activities- select and develop
Technology controls
Policies and procedures
Control Environment
eBOCA
Risk Assessment
SAFR
Information and communication
OIE
Monitoring activities
SO D
Existing control activities
CA T P