This final lesson synthesises the module by examining the broader governance framework, ethical issues in internal controls, and future trends such as the integration of ESG factors and the impact of technology. It covers the legal and regulatory requirements, the role of the audit committee, and the evolving landscape of internal controls .

• Corporate Governance and the Role of the Audit Committee: Corporate governance is the system by which companies are directed and controlled. The audit committee is a sub-committee of the board of directors, responsible for overseeing financial reporting, internal controls, and the audit function. The audit committee plays a critical role in ensuring the integrity of financial reporting and the effectiveness of internal controls .

• Ethical Issues in Internal Controls and Data Analytics: Management accountants must address ethical issues related to data collection, storage, and use . This includes ensuring the integrity, confidentiality, and availability of information. The CIMA P3 syllabus includes corporate governance and internal controls as key topics, and the IMA CMA exam includes professional ethics as a core element.

• Legal and Regulatory Frameworks:

  • Sarbanes-Oxley Act (SOX): A key US law that mandates strict internal controls over financial reporting for public companies.

  • Foreign Corrupt Practices Act (FCPA): Prohibits bribery of foreign officials and requires companies to maintain accurate books and records and have adequate internal controls. The FCPA does not prescribe the use of a specific framework like COSO, but requires internal controls to ensure transactions are appropriately recorded .

• Future Trends:

  • ESG and Sustainability Reporting: The demand for reliable ESG information will continue to increase, driving the adoption of internal controls over sustainability reporting . Regulatory bodies worldwide are focusing on sustainability reporting, as seen with the EU’s CSRD and the new California Climate Corporate Data Accountability Act .

  • Technology and Automation: The increasing complexity and automation of transactions and reliance on IT systems heighten the role of management accountants in ensuring adequate internal controls . The presence and complexity of automated computer and ERP systems hardware and software increase risk, requiring robust IT controls .

  • Integrated Frameworks: As technology becomes more central to business processes, organisations need to adopt an integrated internal control and governance approach that combines business control frameworks like COSO with IT control frameworks like COBIT and ITIL .