12.1.4.5.1.3.2 Object Details – Control

*NOTE: A legend containing the following information is found on a separate sheet when control data are exported to an Excel spreadsheet file.

The object details specific to the EPC object document are (including the basic object details):

• Identifier: An identifier that is unique to each module. Please note that the character limit for this field is 255 characters.
• Name: The name of the control. Please note that the character limit of this field is 450 characters.
• Type: The type of the control.
• Category: The category of the control.
• Description: The description of the control.
• COSO Component: The COSO components associated with the control. Multiple attributes are separated by a pipe ( | ). The legend for the abbreviations is:
  • IE: Internal Environment
  • CA: Control Activities
  • OS: Objective Setting
  • EI: Event Identification
  • RA: Risk Assessment
  • RR: Risk Response
  • IC: Information & Communication
  • M: Monitoring

• Control Activities: The activity type state of the control. Cells with a value “X” indicate an existing value in the column “Control Activity Type”. Otherwise, a control without an activity type is represented with a blank value for “Control Activities”.

• Control Activity Type: The activity type of the control. Cells in the “Control Activity Type” column can have a type only if the value in the adjoining “Control Activities” field has a value of “X”. The valid control activity types are:
  • Authorization
  • Configuration/Account Mapping
  • Exception/Edit Report
  • Interface/Conversion Controls
  • Key Performance Indicator
  • Management Review
  • Reconciliation

*NOTE: If the “Control Activity Type” column is aligned in the Align Columns step, then the “Control Activities” column must also be aligned.

• Key Control: The key control state of the control. Cells with a value “X” indicate that the control is a key control. Otherwise, a non-key control is represented with a blank value for “Key Control”.

• Preventive/Detective: The preventive or detective nature of the control. The recognized options are:
  • Preventive
  • Detective
  • Not Applicable
  • (Empty)

• Manual/Computer: The manual or computer nature of the control. The recognized options are:
  

• Computer
• Not Applicable
• (Empty)

• Frequency: The frequency of the control. The recognized options are:
  • Transaction
  • Daily
  • Weekly
  • Bimonthly
  • Monthly
  • Quarterly
  • Yearly
  • (Empty)

• IT Control: The IT control state of the control. Cells with a value “X” indicate that the control is an IT control. Otherwise, a non-IT control is represented with a blank value for “IT Control”.

• IT Control Type: The IT control type of the control. Cells in the “IT Control Type” column can have a type only if the value in the adjoining “IT Control” field has a value of “X”. The valid IT control types are:
  • General
  • Application
  • (Empty)

• IT Assertions: The abbreviated IT assertions of the control. Cells in the “IT Assertions” column can have an assertion only if the value in the adjoining “IT Control” field has a value of “X”. Multiple values are separated by a pipe “|”. The assertions and their abbreviations are:
  • C: Completeness
  • AC: Accuracy
  • V: Validity
  • AU: Authorization

*NOTE: If the “IT Assertions” and/or “IT Control Type” column is aligned in the Align Columns step, then the “IT Control” column must also be aligned.

• Financial Assertions: The abbreviated financial assertion of the control. Multiple values are separated by a pipe “|”. The financial assertions and their abbreviations are:
  • EO: Existence & Occurrence
  • CO: Completeness
  • RO: Rights & Obligations
  • PD: Presentation & Disclosure

• Valuation & Allocation: The valuation and allocation state of the control. Cells with a value “X” indicate an existing value in the column “Valuation & Allocation Attributes”. Otherwise, a control without a valuation and allocation attribute is represented with a blank value for “Valuation & Allocation”.

• Valuation & Allocation Attributes: The valuation and allocation attributes of the control. Cells in the “Valuation & Allocation Attributes” column can have an attribute only if the value in the adjoining “Control Activities” field has a value of “X”. Multiple values are separated by a pipe “|”. The valid control activity attributes are:
  • A: Accuracy
  • CL: Classification
  • TC: Timing or Cut-off
  • PS: Posting & Summarization
  • DT: Detail Tie-in
  • RV: Realizable Value

*NOTE: If the “Valuation & Allocation Attributes” column is aligned in the Align Columns step, then the “Valuation & Allocation” column must also be aligned.

• Financial Statements Impacted: The financial statements impacted of the control. Multiple values are separated by a pipe “|”. The financial statements and their abbreviations are:
  • BS: Balance Sheet
  • RE: Retained Earnings
  • IS: Income Statement
  • SCF: Statement of Cash Flow
  • NFS: Notes to Financial Statements