Internal Control Best Practices for Small- and Medium-Sized Entities

Back to Catalog


This course provides practical guidance for those involved with internal control responsibilities (auditing, monitoring, implementing, etc.) in adapting the 2013 COSO Internal Control - Integrated Framework (the COSO framework) to small- and medium-sized entities. Internal control concepts are applicable to every entity, regardless of size. However, there is no "one size fits all" set of rules that can be applied to all entities. Often times the internal control "best practices" that have evolved over time are based upon large entity environments and these "best practices" are not necessarily relevant to small- and medium-sized entities. This course will show you some best practices for designing, implementing, monitoring, evaluating, and auditing cost-effective internal controls for small- and medium- sized entities.




Identify a variety of specific internal controls that can be implemented in a cost-effective manner for each component of the updated COSO framework in both small and medium-sized entities and larger entities with decentralized operations. Recall why a "one-size fits all best practices" approach might not be appropriate for many entities. Recognize the risks associated with the failure to implement internal controls and recall inexpensive compensating controls that could decrease these risks. Identify different IT and manual controls that should be present in a variety of small and medium-sized entities. Recall mitigating controls when primary controls are not available.


The components of the COSO framework and related principles Adapting the COSO framework principles for small and medium-sized entities Cost-effective controls that can be implemented in very small entities Cost-effective transaction processing systems controls IT and manual controls that can be implemented in a variety of processing environments

Event Materials

Please select your preferred format.

Printed manuals can be ordered by in-person attendees 7+ days in advance of most seminars or conferences. Pick these up at registration the day of the event. Electronic versions can be saved to your desktop, laptop or storage device and can be printed in part or wholly by registered attendees.

Register Now

Materials are generally available 3 days in advance of an event. Once you have downloaded the manual, we are unable to cancel your registration.

Event Code:


8 CPE Credits
Auditing: 8 Credits


Member Price:
$299 $349
Non-member Price:
$399 $449
  • AICPA Members save an additional $30
Register by July 25th for Early Bird Pricing.

Registration is open through 08/14.

Thursday, August 15th

8:00am to 4:00pm
(Check-In 7:30am)

Add to Calendar

Gratzer Education Center

1735 Alliant Ave.
Louisville, KY 40299

Map and Directions


Richard Reisig