{"id":472,"date":"2025-08-15T15:29:44","date_gmt":"2025-08-15T15:29:44","guid":{"rendered":"https:\/\/cfo-ready.com\/?p=472"},"modified":"2025-08-15T15:29:46","modified_gmt":"2025-08-15T15:29:46","slug":"coso-y-sox-relacion-aplicacion-practica","status":"publish","type":"post","link":"https:\/\/cfo-ready.com\/en\/coso-y-sox-relacion-aplicacion-practica\/","title":{"rendered":"COSO and SOX: How they interrelate in internal control and financial reporting"},"content":{"rendered":"<p class=\"wp-block-paragraph\">In the corporate world, ensuring the reliability of financial information and preventing fraud is not just a good practice: in many jurisdictions, it is a legal obligation. Two of the most influential frameworks and regulations in this area are <strong>ARENA<\/strong> and the <strong>Sarbanes\u2013Oxley Act (SOX)<\/strong>Although they perform distinct functions, their interrelationship is key to a strong internal control system, especially in companies listed on the United States stock exchange or reporting to international investors.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">1. What is COSO?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>ARENA<\/strong> (Committee of Sponsoring Organizations of the Treadway Commission) is a <strong>internal control framework<\/strong> internationally recognized.<br>Its objective is to provide principles and guidelines for:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Design and evaluate internal control systems.<\/li>\n\n\n\n<li>Identify and manage risks.<\/li>\n\n\n\n<li>Ensure regulatory compliance and operational effectiveness.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The best known model is the <strong>COSO 2013<\/strong>, which establishes <strong>five components<\/strong>:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Control environment.<\/li>\n\n\n\n<li>Risk assessment.<\/li>\n\n\n\n<li>Control activities.<\/li>\n\n\n\n<li>Information and communication.<\/li>\n\n\n\n<li>Monitoring activities.<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">2. What is SOX?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The <strong>Sarbanes\u2013Oxley Act (SOX)<\/strong> is a <strong>US federal law<\/strong> enacted in 2002, following corporate scandals such as Enron and WorldCom.<br>Its purpose is <strong>protect investors<\/strong> ensuring that the financial information of public companies is accurate, complete and free from manipulation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Key points:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>It applies primarily to publicly traded companies in the US.<\/li>\n\n\n\n<li>Introduces severe penalties for falsification or manipulation of financial data.<\/li>\n\n\n\n<li>The <strong>Section 404<\/strong> requires management and external auditors to evaluate and report on the effectiveness of internal control over financial reporting (<em>Internal Control over Financial Reporting<\/em> or ICFR).<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">3. How COSO and SOX interrelate<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Although SOX <strong>does not impose a specific framework<\/strong>, in practice <strong>COSO is the most widely used standard<\/strong> to meet its requirements, especially in Section 404. This is because COSO:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Provides a clear methodology for identifying and mitigating risks affecting financial information.<\/li>\n\n\n\n<li>Establishes principles and measurable criteria to evaluate the effectiveness of controls.<\/li>\n\n\n\n<li>Facilitates the documentation and evidence required for audits and certifications.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In simple terms:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>SOX establishes the \u201cwhat\u201d<\/strong>: requires effective and verifiable internal controls.<\/li>\n\n\n\n<li><strong>COSO provides the \u201chow\u201d<\/strong>: offers practical guidance for designing, implementing and evaluating these controls.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">4. Practical application in companies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In a company subject to SOX, the typical process is:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Evaluate risks<\/strong>: COSO guides the identification of risks relevant to financial reporting.<\/li>\n\n\n\n<li><strong>Design controls<\/strong>: Preventive and detective controls are implemented following the COSO framework.<\/li>\n\n\n\n<li><strong>Document processes<\/strong>: Policies, procedures and approval flows are recorded.<\/li>\n\n\n\n<li><strong>Test effectiveness<\/strong>: Periodic tests are performed to verify that the controls are working.<\/li>\n\n\n\n<li><strong>Report results<\/strong>: Management certifies compliance to the SEC, with evidence supported by the COSO framework.<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">5. Benefits of using COSO to comply with SOX<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Standardization<\/strong>: provides a common language for managers, auditors and regulators.<\/li>\n\n\n\n<li><strong>Comprehensive approach<\/strong>: covers not only financial aspects, but also operational and compliance aspects.<\/li>\n\n\n\n<li><strong>Solid evidence<\/strong>: facilitates the generation of reliable reports that support annual certification.<\/li>\n\n\n\n<li><strong>Continuous improvement<\/strong>: promotes the constant review and optimization of internal control processes.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">6. Real example<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Let&#039;s imagine a <strong>Mexican company listed on the New York Stock Exchange<\/strong>.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Under SOX, you must report annually on the effectiveness of your internal control over financial reporting.<\/li>\n\n\n\n<li>You decide to implement the COSO framework to map risks, document key processes (sales, purchasing, payments, accounting closing), and establish specific controls.<\/li>\n\n\n\n<li>Thanks to the COSO methodology, the company not only complies with SOX, but also improves its operational efficiency and reduces the likelihood of errors or fraud.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">COSO and SOX are two pieces that fit together perfectly:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>SOX<\/strong> establishes the legal obligation to have effective and verifiable internal controls.<\/li>\n\n\n\n<li><strong>ARENA<\/strong> provides the proven methodology to implement, evaluate and demonstrate their effectiveness.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In an increasingly regulated corporate environment, understanding this interrelationship is not only vital for regulatory compliance, but also for strengthening the confidence of investors, customers, and business partners.<\/p>","protected":false},"excerpt":{"rendered":"<p>En el mundo corporativo, garantizar la confiabilidad de la informaci\u00f3n financiera y prevenir fraudes no es solo una buena pr\u00e1ctica: en muchas jurisdicciones, es una obligaci\u00f3n legal. Dos de los marcos y regulaciones m\u00e1s influyentes en este \u00e1mbito son COSO y la Ley Sarbanes\u2013Oxley (SOX). Aunque cumplen funciones distintas, su interrelaci\u00f3n es clave para un [&hellip;]<\/p>","protected":false},"author":2,"featured_media":114,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[70],"tags":[33,137,120,214],"class_list":["post-472","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-auditoria","tag-control-interno","tag-coso","tag-sox","tag-sox-y-coso"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>COSO y SOX: relaci\u00f3n y aplicaci\u00f3n pr\u00e1ctica en el control interno<\/title>\n<meta name=\"description\" content=\"Descubre c\u00f3mo se relacionan COSO y SOX, y c\u00f3mo su integraci\u00f3n fortalece el control interno y el cumplimiento normativo en las empresas.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cfo-ready.com\/en\/coso-y-sox-relacion-aplicacion-practica\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"COSO y SOX: relaci\u00f3n y aplicaci\u00f3n pr\u00e1ctica en el control interno\" \/>\n<meta property=\"og:description\" content=\"Descubre c\u00f3mo se relacionan COSO y SOX, y c\u00f3mo su integraci\u00f3n fortalece el control interno y el cumplimiento normativo en las empresas.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cfo-ready.com\/en\/coso-y-sox-relacion-aplicacion-practica\/\" \/>\n<meta property=\"og:site_name\" content=\"cfo ready\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-15T15:29:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-15T15:29:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cfo-ready.com\/wp-content\/uploads\/revslider\/onepage-hero-1\/515-5152431_edificio-png.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1917\" \/>\n\t<meta property=\"og:image:height\" content=\"1011\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"hgalicia@cfo-ready.com\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"hgalicia@cfo-ready.com\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/\",\"url\":\"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/\",\"name\":\"COSO y SOX: relaci\u00f3n y aplicaci\u00f3n pr\u00e1ctica en el control interno\",\"isPartOf\":{\"@id\":\"https:\/\/cfo-ready.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cfo-ready.com\/wp-content\/uploads\/revslider\/onepage-hero-1\/515-5152431_edificio-png.png\",\"datePublished\":\"2025-08-15T15:29:44+00:00\",\"dateModified\":\"2025-08-15T15:29:46+00:00\",\"author\":{\"@id\":\"https:\/\/cfo-ready.com\/#\/schema\/person\/f135be1eaf73b90855169ac5f77488f0\"},\"description\":\"Descubre c\u00f3mo se relacionan COSO y SOX, y c\u00f3mo su integraci\u00f3n fortalece el control interno y el cumplimiento normativo en las empresas.\",\"breadcrumb\":{\"@id\":\"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#primaryimage\",\"url\":\"https:\/\/cfo-ready.com\/wp-content\/uploads\/revslider\/onepage-hero-1\/515-5152431_edificio-png.png\",\"contentUrl\":\"https:\/\/cfo-ready.com\/wp-content\/uploads\/revslider\/onepage-hero-1\/515-5152431_edificio-png.png\",\"width\":1917,\"height\":1011},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/cfo-ready.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"COSO y SOX: C\u00f3mo se interrelacionan en el control interno y la informaci\u00f3n financiera\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cfo-ready.com\/#website\",\"url\":\"https:\/\/cfo-ready.com\/\",\"name\":\"cfo ready\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cfo-ready.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cfo-ready.com\/#\/schema\/person\/f135be1eaf73b90855169ac5f77488f0\",\"name\":\"hgalicia@cfo-ready.com\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cfo-ready.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9d0d733043e1790b9a099cfebe8c88eb95d509f7a90bfb0cb1c24de874c8e49a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9d0d733043e1790b9a099cfebe8c88eb95d509f7a90bfb0cb1c24de874c8e49a?s=96&d=mm&r=g\",\"caption\":\"hgalicia@cfo-ready.com\"},\"url\":\"https:\/\/cfo-ready.com\/en\/author\/hgaliciacfo-ready-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"COSO y SOX: relaci\u00f3n y aplicaci\u00f3n pr\u00e1ctica en el control interno","description":"Descubre c\u00f3mo se relacionan COSO y SOX, y c\u00f3mo su integraci\u00f3n fortalece el control interno y el cumplimiento normativo en las empresas.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cfo-ready.com\/en\/coso-y-sox-relacion-aplicacion-practica\/","og_locale":"en_US","og_type":"article","og_title":"COSO y SOX: relaci\u00f3n y aplicaci\u00f3n pr\u00e1ctica en el control interno","og_description":"Descubre c\u00f3mo se relacionan COSO y SOX, y c\u00f3mo su integraci\u00f3n fortalece el control interno y el cumplimiento normativo en las empresas.","og_url":"https:\/\/cfo-ready.com\/en\/coso-y-sox-relacion-aplicacion-practica\/","og_site_name":"cfo ready","article_published_time":"2025-08-15T15:29:44+00:00","article_modified_time":"2025-08-15T15:29:46+00:00","og_image":[{"width":1917,"height":1011,"url":"https:\/\/cfo-ready.com\/wp-content\/uploads\/revslider\/onepage-hero-1\/515-5152431_edificio-png.png","type":"image\/png"}],"author":"hgalicia@cfo-ready.com","twitter_card":"summary_large_image","twitter_misc":{"Written by":"hgalicia@cfo-ready.com","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/","url":"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/","name":"COSO y SOX: relaci\u00f3n y aplicaci\u00f3n pr\u00e1ctica en el control interno","isPartOf":{"@id":"https:\/\/cfo-ready.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#primaryimage"},"image":{"@id":"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#primaryimage"},"thumbnailUrl":"https:\/\/cfo-ready.com\/wp-content\/uploads\/revslider\/onepage-hero-1\/515-5152431_edificio-png.png","datePublished":"2025-08-15T15:29:44+00:00","dateModified":"2025-08-15T15:29:46+00:00","author":{"@id":"https:\/\/cfo-ready.com\/#\/schema\/person\/f135be1eaf73b90855169ac5f77488f0"},"description":"Descubre c\u00f3mo se relacionan COSO y SOX, y c\u00f3mo su integraci\u00f3n fortalece el control interno y el cumplimiento normativo en las empresas.","breadcrumb":{"@id":"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#primaryimage","url":"https:\/\/cfo-ready.com\/wp-content\/uploads\/revslider\/onepage-hero-1\/515-5152431_edificio-png.png","contentUrl":"https:\/\/cfo-ready.com\/wp-content\/uploads\/revslider\/onepage-hero-1\/515-5152431_edificio-png.png","width":1917,"height":1011},{"@type":"BreadcrumbList","@id":"https:\/\/cfo-ready.com\/coso-y-sox-relacion-aplicacion-practica\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/cfo-ready.com\/"},{"@type":"ListItem","position":2,"name":"COSO y SOX: C\u00f3mo se interrelacionan en el control interno y la informaci\u00f3n financiera"}]},{"@type":"WebSite","@id":"https:\/\/cfo-ready.com\/#website","url":"https:\/\/cfo-ready.com\/","name":"cfo ready","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cfo-ready.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cfo-ready.com\/#\/schema\/person\/f135be1eaf73b90855169ac5f77488f0","name":"hgalicia@cfo-ready.com","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cfo-ready.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9d0d733043e1790b9a099cfebe8c88eb95d509f7a90bfb0cb1c24de874c8e49a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9d0d733043e1790b9a099cfebe8c88eb95d509f7a90bfb0cb1c24de874c8e49a?s=96&d=mm&r=g","caption":"hgalicia@cfo-ready.com"},"url":"https:\/\/cfo-ready.com\/en\/author\/hgaliciacfo-ready-com\/"}]}},"_links":{"self":[{"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/posts\/472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/comments?post=472"}],"version-history":[{"count":1,"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/posts\/472\/revisions"}],"predecessor-version":[{"id":473,"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/posts\/472\/revisions\/473"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/media\/114"}],"wp:attachment":[{"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/media?parent=472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/categories?post=472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cfo-ready.com\/en\/wp-json\/wp\/v2\/tags?post=472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}