The Sarbanes-Oxley Act of 2002 (SOX) created a resurgence of organizational focus on internal controls. In this study, we examine the extent to which the information technology (IT) controls suggested by the ISO 17799 security framework have been integrated into organizations’ internal control environments. We collected survey data from 636 members of the Institute of Internal Auditors (IIA) on the current usage of IT controls in their organizations. In addition to identifying the most and least commonly implemented IT controls, the survey results indicate that control implementation differences exist based on a company’s status as public or private, the size of the company, and the industry in which the company operates. Training of internal auditors and/or IT personnel is also associated with significant differences in implemented controls. We discuss the implications of our research and offer suggestions for future research.
The purpose of this research is to investigate the relationship between internal control material weaknesses (ICMWs), as measured by presence, number, and type, and Foreign Corrupt Practices Act (FCPA) violations. Our results indicate that firms with ICMWs are more likely to violate the FCPA and firms with multiple ICMWs have a higher likelihood of violating the FCPA than firms with fewer ICMWs. Further, firms with ICMWs related to the risk assessment, control environment, and control activities components of internal controls (based on COSO internal control framework) present a higher risk of FCPA violations than firms without ICMWs in those areas. These findings substantiate the importance of effective internal controls in supporting firms' regulatory compliance.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.