[barelystayingsane]

When SOX says that auditors are required to attest to management’s assessment of the effectiveness of internal control over financial reporting, is that just saying that the auditor must audit the effectiveness of internal controls (i.e., perform an integrated audit)? I know that you can report directly on the internal control, or you can report on management’s assertion. Reporting on management’s assertion sounds like attesting to management’s assessment of internal control to me. Is that correct? So if you report directly on internal control, do you still have to attest to management’s assessment?

Thanks!

[tough_kitty]

So now I am confused – what are you confused about? 🙂

FAR: 81 (May 2013)
BEC: 81 (July 2013)
REG: 83 (August 2013)
AUD: 82 (November 2013)
California CPA since 1/30/14

[Author]

Replies