Adoption of the COSO methodology for internal Sharīʿah audit

Abstract

PurposeIslamic financial institutions (IFIs) are required to establish a Shariīʿah Governance Framework (SGF) to strengthen their Sharīʿah-compliance mechanism and ensure that all relevant IFI regulations are in line with Sharīʿah rules and principles. Effective implementation of the Shariīʿah-compliance function will further promote stakeholder confidence, as well as the integrity of IFIs, by reducing Shariīʿah non-compliance risks. This study aims to examine the internal control framework developed by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) and explore the extent to which it can be incorporated in the Sharīʿah-compliance function of IFIs.Design/methodology/approachThis study adopts a qualitative method of inquiry, utilizing the inductive method and content analysis to build comprehensive knowledge that will assist in exploring the framework of COSO methodology and the extent to which it can be adopted by IFIs.FindingsThe findings indicate that the existing frameworks of Sharīʿah governance, whether that of the Accounting and Auditing Organization for Islamic Financial Institutions (AAOIFI) or Bank Negara Malaysia (BNM), need to be further developed. Therefore, the adoption of COSO methodology in the internal Sharīʿah audit of IFIs, as suggested by AAOIFI, is not only possible but desirable. The study also finds that the COSO framework places the highest priority on risk management in that it makes it an integral part of the decision-making process in all the institution's activities. As a result, incorporating the comprehensive COSO risk management structure within the Sharīʿah-compliance function will enhance risk management in IFIs.Originality/valueThis study highlights the importance of the COSO internal control framework and examines its components, principles and the possibility of its adoption by IFIs. The findings of this study are expected to contribute to enhancing the Sharīʿah-compliance function of IFIs.

Effect of internal audit, internal control, and audit quality on fraud prevention: Evidence from the public sector in Indonesia

“…This conceptualization of internal control transcends temporal limitations and remains an ongoing framework integral to operational activities (Bouheraoua & Djafri, 2022). The internal control system plays a fundamental role in overseeing an organization's operational activities and should be seamlessly integrated into the organizational framework as an indispensable element.…”

Analysing the Internal Control System in Malaysian Statutory Bodies: How Well Do They Adhere to the Global Standard?

“…COSO framework also prioritises risk management by making it an integral part of the decision-making process in all the institution's activities (Bouheraoua & Djafri, 2022). Based on a study by COSO (2013), internal control must be present to function together with all five components as guided in the framework.…”

Control interno e información financiera en la Industria Fitness de Arequipa

“…Los controles internos desempeñan un papel fundamental en el ámbito de la información financiera al garantizar el registro preciso y confiable de las transacciones y la preparación de reportes financieros (Bouheraoua. & Djafri, 2022).…”

“…En esa línea, tal es la relevancia del control interno dentro de una organización que se desarrolló un enfoque no excluyente que congenia diversos aspectos de aseguramiento del cumplimiento de operaciones: El enfoque COSO (Puma, 2019). También, el COSO es un marco reconocido a nivel internacional que establece principios y prácticas para el control interno, este enfoque desempeña un rol fundamental en la garantía de la calidad e integridad de la información financiera que incluso las entidades y organizaciones de todo el mundo desean obtener una certificación (Bouheraoua. & Djafri, 2022).…”

“…La importancia del enfoque COSO en la información financiera radica en su capacidad para proporcionar un marco estructurado y completo para diseñar, implementar y evaluar los controles internos. Este enfoque se estructura bajo cinco componentes que se interrelacionan entre sí, los cuales son: el entorno de control, la evaluación de riesgos, las actividades de control, la información y comunicación, y el monitoreo (Bouheraoua. & Djafri, 2022).…”