EN
1. Evaluating internal control risk, divided into two parts;
1.1 COSO–ICIF (in accordance with The SEC internal control sufficiency assessment form)
1.2 Evaluate internal control system on each process as follows
Purchasing, sale, payment, safeguard of assets, IT and HR. Including the specific process for some business i.e. production, warehouse, branch offices management, etc.
EN1. Evaluating internal control risk, divided into two parts
![]()
PLANNING
![]()
EVALUATING
![]()
DRAFTING REPORT
![]()
CLOSING MEETING
2. Auditing internal control system (Assurance services)
2.1 Entirely performing substantive testing.
2.2 Following up the remaining risks.
![]()
PLANNING
![]()
SUBSTANTIVE-TESTING
![]()
DRAFTING REPORT
![]()
CLOSING MEETING