A tailored course, built for your situation
Direct sign-off on COSO control framework decisions
Build the artefact, own the narrative, ship with confidence
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Control frameworks stuck in review loops
The situation this course is for
Too many control designs bounce between teams, delay audits, and dilute ownership. Practitioners lose momentum when sign-off relies on higher-level approval.
Who this is for
Senior controls or compliance practitioner shaping COSO-aligned frameworks in a regulated financial environment
Who this is not for
Entry-level analysts, auditors without design authority, or professionals outside financial services controls
What you walk away with
- Own the full scope of COSO control decisions including domain boundaries and control objectives
- Finalise evidence requirements for automated and manual controls without escalation
- Ship updated control narratives that stand up to internal audit and external reviewer scrutiny
- Route only exceptions, not standard updates, to senior stakeholders
- Build repeatable templates that accelerate future control refreshes
The 12 modules (with all 144 chapters)
Module 1. Defining COSO-aligned control domains
Map data systems to COSO components using current PNC-like environments. Establish clear boundaries for control ownership.
12 chapters in this module
- COSO domain definition principles
- Data system boundary mapping
- Identifying financial reporting touchpoints
- Linking systems to account groups
- Controlled vs uncontrolled data paths
- Documenting legacy system exceptions
- Ownership assignment by tier
- Creating domain decision logs
- Versioning control domain charts
- Integrating with data lineage tools
- Automated boundary validation
- Stakeholder alignment checklist
Module 2. Scoping testable control objectives
Translate compliance requirements into specific, auditable control statements. Focus on outcomes, not activities.
12 chapters in this module
- From regulation to testable assertion
- Precision in control language
- Identifying failure modes
- Evidence type selection criteria
- Designing for re-performance
- Control frequency decision rules
- Segregation of duties mapping
- Exception handling thresholds
- Third-party dependency flags
- Automated control triggers
- Manual override documentation
- Control objective version control
Module 3. Selecting evidence types and sources
Choose logs, reports, and system outputs that satisfy auditor expectations. Prioritise reliability and access stability.
12 chapters in this module
- Evidence hierarchy for COSO
- Direct vs indirect data paths
- System log validation standards
- Report timestamp authenticity
- Sampling strategy alignment
- Real-time vs batch evidence
- Vendor-provided evidence rules
- Access permission documentation
- Evidence retention policies
- Change control linkage
- Metadata completeness checks
- Evidence source audit trail
Module 4. Designing automated controls
Build rules that detect, prevent, or alert on control failures. Focus on integration with existing data pipelines.
12 chapters in this module
- Automated control trigger points
- Threshold setting methodology
- False positive reduction
- Alert routing logic
- Integration with monitoring tools
- Failure mode simulation
- Exception approval workflows
- Logging control execution
- Maintenance window handling
- Version comparison rules
- Data integrity checks
- Automated remediation steps
Module 5. Documenting manual control procedures
Write instructions that survive personnel changes. Include decision logic and escalation paths.
12 chapters in this module
- Standard operating procedure format
- Role-specific action steps
- Decision trees for exceptions
- Required documentation fields
- Reviewer independence rules
- Time-based completion checks
- Evidence collection timing
- Multi-party approval design
- Remote execution protocols
- Training verification steps
- Temporary override process
- Control suspension criteria
Module 6. Linking controls to financial statements
Trace each control to specific account risks and disclosure impact. Strengthen external audit narrative.
12 chapters in this module
- Materiality threshold application
- Account group mapping
- Disclosure-level linkage
- Risk of material misstatement
- Control precision levels
- Fraud risk indicators
- Estimation uncertainty flags
- Related party transaction rules
- Subsequent event handling
- Interim reporting controls
- Consolidation risk points
- Currency translation controls
Module 7. Building control testing plans
Create test scripts that validate design and operating effectiveness. Align with auditor expectations.
12 chapters in this module
- Test objective definition
- Sample size calculation rules
- Period coverage requirements
- Re-performance methodology
- Observation checklist design
- Inquiry protocol standards
- Documentation sufficiency
- Remote testing procedures
- Third-party testing coordination
- Deficiency classification
- Remediation tracking
- Test evidence packaging
Module 8. Managing control deficiencies
Classify, prioritise, and track issues. Maintain executive visibility without delays.
12 chapters in this module
- Deficiency severity criteria
- Material weakness indicators
- Significant deficiency rules
- Root cause analysis method
- Remediation timeline setting
- Interim control design
- Escalation path mapping
- Stakeholder notification
- Progress tracking metrics
- Closure validation
- Regulator disclosure flags
- Trend analysis reporting
Module 9. Updating controls during system changes
Maintain compliance during upgrades, migrations, and new feature rollouts. Avoid control gaps.
12 chapters in this module
- Change request intake
- Impact assessment method
- Temporary control design
- Parallel run requirements
- Cutover validation steps
- Post-implementation review
- Legacy system deprecation
- Vendor change coordination
- Integration point flags
- Data migration controls
- User access transition
- Decommissioning checklist
Module 10. Producing SoD matrices
Map incompatible duties across roles and systems. Support automated monitoring.
12 chapters in this module
- SoD risk identification
- Role-based access review
- Segregation by function
- User exception rules
- Compensating control design
- Automated detection setup
- SoD rule versioning
- Conflict resolution workflow
- Third-party access checks
- Temporary access controls
- Periodic recertification
- Reporting threshold settings
Module 11. Aligning with external audit
Streamline evidence delivery and walkthroughs. Strengthen trust through consistency.
12 chapters in this module
- Audit request triage
- Evidence packaging standards
- Walkthrough preparation
- Representative sample selection
- Deficiency response drafting
- Timeline alignment
- Escalation avoidance
- Audit communication protocol
- Feedback integration
- Prior year comparison
- Remote audit support
- Post-audit follow-up
Module 12. Sustaining control frameworks
Maintain relevance through leadership changes and new regulations. Build organisational memory.
12 chapters in this module
- Control review cycle design
- Owner succession planning
- Knowledge transfer process
- Regulation change monitoring
- Framework update protocol
- Stakeholder re-alignment
- Training refresh schedule
- Documentation versioning
- Lessons learned capture
- Benchmarking participation
- Cross-functional feedback
- Continuous improvement loop
How this maps to your situation
- After a control fails audit
- Before a system migration
- When designing a new financial report
- During external audit preparation
Before vs. after
Before
Control designs require multiple reviews, delay sign-off, and depend on senior approval for standard updates
After
Direct sign-off on control scope, evidence selection, and assertion language, no escalation needed for routine decisions
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 2.5 hours per module, designed for completion over six weeks with real-world application between modules.
If nothing changes
Continuing to route standard control decisions upstream slows delivery, weakens ownership, and limits visibility into design rationale during audits
How this compares to the alternatives
Generic COSO training covers principles. This course delivers decision authority on specific control design, evidence selection, and assertion language, precisely what senior practitioners need to act independently.
Frequently asked
Who is this course for?
Senior practitioners shaping internal control frameworks in financial services, especially those preparing for SOX or COSO audits.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does this cover SOX 404 requirements?
Yes, with direct application to SOX 404 through COSO-aligned control design, evidence selection, and testing plans.
$199 one-time. Approximately 2.5 hours per module, designed for completion over six weeks with real-world application between modules..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours