INTRODUCTION

Public companies subject to the requirements of the US Sarbanes-Oxley Act of 2002 (SOX) have widely adopted two internal control frameworks over financial reporting: CobiT and COSO. CobiT is used for IT controls, while COSO is used for business processes and entity-level controls. These two frameworks, along with guidelines from the PCAOB (Public Company Accounting Oversight Board), can be mapped and integrated with one another to provide an overall plan for SOX and global compliance.