Summary of design effectiveness evaluations

The Summary of Design Effectiveness Evaluations under Internal Control summarizes your previous conclusions regarding design effectiveness.
This summary can help you assess whether:
  • Client communications regarding design deficiencies are necessary (for nonpublic entities).
  • Design deficiencies indicate identified risks that should be listed in the right-hand pane.
  • Your conclusions about design effectiveness should be reevaluated.
  • For a public company audit of internal control, whether you've performed sufficient tests of design effectiveness to address the assessed risk of misstatement to each relevant assertion of each significant account and disclosure.
The Summary of Design Effectiveness Evaluations also lets you view the transaction classes you plan to test controls for.
  • Consider whether those plans are appropriate given design conclusions reached in each area.
  • Generally, it's not effective to test controls over transaction classes that contain design deficiencies.
  • It also may not be effective to test controls if design deficiencies exist in related transaction classes for a given assertion or in any of the first four COSO components (Control Environment, Risk Assessment, Information and Communication, and Monitoring).