Internal Controls Exhibit
Fin Bomb Internal Controls Exhibit (COSO Framework)
Mapped 31 internal controls to specific risks using the COSO framework.
Designed as an audit-style exhibit with risk ownership, documentation, and improvement identification.
Context
This was a structured internal controls mapping exercise built to simulate real internal audit methodology. The focus was on identifying risks, clarifying ownership, and applying documentation discipline so each control could be tested and improved.
Method
Inputs
- Process documentation
- Risk categories
- COSO framework principles
Process
- Identified key risk areas
- Mapped controls to specific risks
- Assigned owners
- Documented evidence trail
- Flagged control gaps
Output
- 31 mapped controls
- Risk–control matrix
- Audit-style exhibit
- Improvement opportunities identified
Evidence
- Risk–control mapping table
- Screenshots of documentation
- Assigned control ownership
- Gap identification summary
What I’d Improve
Next iteration, I would expand testing procedures, add walkthrough documentation, include control testing samples, and formalize a short reporting summary so findings and recommendations are easier to review at a glance.