The object details specific to the EPC object document are (including the basic object details):

  • Identifier: An identifier that is unique to each module. Please note that the character limit for this field is 255 characters.
  • Name: The name of the control. Please note that the character limit of this field is 450 characters.
  • Type: The type of the control.
  • Category: The category of the control.
  • Description: The description of the control.
  • COSO Component: The COSO components associated with the control. Multiple attributes are separated by a pipe ( | ). The legend for the abbreviations is:IE: Internal Environment
    • OS: Objective Setting
    • EI: Event Identification
    • RA: Risk Assessment
    • RR: Risk Response
    • IC: Information & Communication
    • M: Monitoring
  • Control Activities: The activity type state of the control. Cells with a value “X” indicate an existing value in the column “Control Activity Type”. Otherwise, a control without an activity type is represented with a blank value for “Control Activities”.
  • Control Activity Type: The activity type of the control. Cells in the “Control Activity Type” column can have a type only if the value in the adjoining “Control Activities” field has a value of “X”. The valid control activity types are:
    • Authorization
    • Configuration/Account Mapping
    • Exception/Edit Report
    • Interface/Conversion Controls
    • Key Performance Indicator
    • Management Review
    • Reconciliation
  • Key Control: The key control state of the control. Cells with a value “X” indicate that the control is a key control. Otherwise, a non-key control is represented with a blank value for “Key Control”.
  • Preventive/Detective: The preventive or detective nature of the control. The recognized options are:
    • Preventive
    • Detective
    • Not Applicable
    • (Empty)
  • Manual/Computer: The manual or computer nature of the control. The recognized options are:Manual
    • Computer
    • Not Applicable
    • (Empty)
  • Frequency: The frequency of the control. The recognized options are:
    • Transaction
    • Daily
    • Weekly
    • Bimonthly
    • Monthly
    • Quarterly
    • Yearly
    • (Empty)
  • IT Control: The IT control state of the control. Cells with a value “X” indicate that the control is an IT control. Otherwise, a non-IT control is represented with a blank value for “IT Control”.
  • IT Control Type: The IT control type of the control. Cells in the “IT Control Type” column can have a type only if the value in the adjoining “IT Control” field has a value of “X”. The valid IT control types are:
    • General
    • Application
    • (Empty)
  • IT Assertions: The abbreviated IT assertions of the control. Cells in the “IT Assertions” column can have an assertion only if the value in the adjoining “IT Control” field has a value of “X”. Multiple values are separated by a pipe “|”. The assertions and their abbreviations are:
    • C: Completeness
    • AC: Accuracy
    • V: Validity
    • AU: Authorization
  • Financial Assertions: The abbreviated financial assertion of the control. Multiple values are separated by a pipe “|”. The financial assertions and their abbreviations are:
    • EO: Existence & Occurrence
    • CO: Completeness
    • RO: Rights & Obligations
    • PD: Presentation & Disclosure
  • Valuation & Allocation: The valuation and allocation state of the control. Cells with a value “X” indicate an existing value in the column “Valuation & Allocation Attributes”. Otherwise, a control without a valuation and allocation attribute is represented with a blank value for “Valuation & Allocation”.
  • Valuation & Allocation Attributes: The valuation and allocation attributes of the control. Cells in the “Valuation & Allocation Attributes” column can have an attribute only if the value in the adjoining “Control Activities” field has a value of “X”. Multiple values are separated by a pipe “|”. The valid control activity attributes are:
    • A: Accuracy
    • CL: Classification
    • TC: Timing or Cut-off
    • PS: Posting & Summarization
    • DT: Detail Tie-in
    • RV: Realizable Value
  • Financial Statements Impacted: The financial statements impacted of the control. Multiple values are separated by a pipe “|”. The financial statements and their abbreviations are:
    • BS: Balance Sheet
    • RE: Retained Earnings
    • IS: Income Statement
    • SCF: Statement of Cash Flow
    • NFS: Notes to Financial Statements

Need more help with this?
Visit the Support Portal

Thanks for your feedback.