Auditing and Governance Risk and Compliance

Internal Control Frameworks: COSO in Practice

The COSO internal control framework is widely used to design and evaluate internal controls. This course covers the five components and 17 principles, risk assessment, control activities, information and communication, monitoring, control documentation, testing and evaluating deficiencies.

5 days Classroom or live online English

Smart Horizon Certified - Global Leadership Consultants

Take the course details with you.

Download the full standard outline: why attend, methodology, objectives, audience, competencies, the daily outline and current plans.

Download course PDF

Why attend

From knowledge to real-world impact.

Strong internal control protects assets and supports reliable reporting. This course helps you apply COSO practically.

Workplace challenges

Professional Problems This Course Is Designed to Solve

The programme explores practical approaches to the following challenges. Results depend on how the learning is applied in your organisation.

Difficulty translating subject knowledge into practical workplace decisions.
Inconsistent approaches to the activities covered in the course outline.
Lack of a structured plan for applying and reviewing new skills.

Course methodology

How you will learn.

The course uses case studies, control design workshops, documentation exercises and deficiency evaluation.

Course objectives

What you'll take away.

By the end of this course, participants will be able to:

Explain the COSO framework components and principles
Assess control environment and risks
Design effective control activities
Document controls and processes
Monitor and test controls
Evaluate and report control deficiencies

Target audience

Who should attend.

This course is suitable for:

Internal auditors
Finance managers and controllers
Risk and compliance professionals
Process owners
Audit committee members

Target competencies

Capabilities you will build.

Participants will develop competencies in:

COSO framework
Control design
Risk assessment
Control documentation
Control testing
Deficiency evaluation

Course outline

Your learning journey.

A focused, practical outline with time to explore, apply and reflect.

Day 1COSO Framework

09:00–09:54Internal control objectives
09:54–10:48Five components
10:48–11:0017 principles
11:00–11:30Coffee break
11:30–12:1217 principles (continued)
12:12–13:06Roles
13:06–14:00Exercise: Control environment review

Day 2Risk Assessment

09:00–09:54Objectives and risks
09:54–10:48Fraud risk
10:48–11:00Change
11:00–11:30Coffee break
11:30–12:12Change (continued)
12:12–13:06Risk responses
13:06–14:00Workshop: Risk and control matrix

Day 3Control Activities

09:00–09:54Types of controls
09:54–10:48Segregation of duties
10:48–11:00IT controls
11:00–11:30Coffee break
11:30–12:12IT controls (continued)
12:12–13:06Policies
13:06–14:00Exercise: Control design

Day 4Information and Monitoring

09:00–09:54Information quality
09:54–10:48Communication
10:48–11:00Ongoing monitoring
11:00–11:30Coffee break
11:30–12:12Ongoing monitoring (continued)
12:12–13:06Separate evaluations
13:06–14:00Case study: Control failure

Day 5Evaluation and Reporting

09:00–09:54Deficiency evaluation
09:54–10:48Remediation
10:48–11:00Reporting
11:00–11:30Coffee break
11:30–12:12Reporting (continued)
12:12–13:06Continuous improvement
13:06–14:00Capstone: Control framework review

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Dates & venues

Find a session that works for you.

Confirmed dates accept registration requests. Tentative dates are enquiry only.

Good to know

A few things to know.

How is the course delivered?

Our classroom programmes combine facilitated discussion, case studies, exercises and reflection. The precise format will be confirmed before enrolment.

Can you deliver this programme for our team?

Yes, you can enquire about a tailored programme. Share your goals, group size and preferred dates with our learning team.

Will I receive a certificate?

Participants who complete the programme receive a Smart Horizon UK certificate of attendance. Smart Horizon UK programmes are not externally accredited and do not award a professional qualification, licence or designation. Where a course title or outline refers to a professional certification (for example, AACE International's Certified Cost Professional), the programme supports learning and preparation only; the credential itself is awarded solely by the relevant professional body under its own application and examination requirements.

What should I confirm before booking travel?

Please confirm the session, exact venue, accessibility arrangements, fees and any visa requirements with the team before arranging travel. Tentative dates are not confirmed sessions.

Keep exploring

Your next horizon awaits.

All courses

The full course agenda and dates are available above. Use the session links in Dates & venues to choose a session. Registration and quotation forms require JavaScript; you can also contact our learning team directly.