internal control and risk management内部控制与风险管理 外文翻译学士学位论文

Internal control and risk management1.Internal control --, standard and legislationIn 1985, the United States in order to curb the growing business of accounting fraud activities, formed a committee against financial fraud Treadway committee), (accounting fraud activities investigation led to reason and proposed solutions. The scheme emphasized the importance of internal control, requests and Suggestions of all listed companies should provide in the annals of internal control reports. The report shall include admit management authorities of financial reporting and internal control is responsible, and discuss the implementation of these responsibilities.In The end The mission Treadway Committee after The five, The commission launched organization jointly established a new Committee - The Com - mittee COSO (Sponsoring Organizations of The Treadway of ordinary), namely The organizing Committee Treadway Committee launched. It consists of the American public institute of certified public accountants (AICPA), American accounting association (AAA), international financial management association (FEI), internal auditors association (type IIA), international accounting association (NAA would) (a managerial accounting association jointly sponsored IMA predecessor). COSO continue to study and in 1992 it issued a programmatic document about the Internal Control, namely "Internal Control - the overall framework" (Internal Control - IntegratedFramework). The reports are put forward the COSO U.S. federal reserve, the United States securities and exchange commission, the Basel committee regulators or international organizations such as the recognition and adopted, many of these definitions, Suggestions and ideas absorbed into the legislation and regulations, worldwide has had a broad impact. Since THE end of 2001, THE United States broke with enron, worldcom, xerox and other companies financial cases of fraud as a representative of accounting scandals, hit U.S. capital markets and THE economy, also concentrated exposure for American companies in THE existing problem of internal control, thus causing THE United States adopted THE "sasha class nice --, THE extension of THE law (SARBANES OXLEY ACT) -. The bill made clear company managers CEO and CFO finance director of internal control, and will be held directly responsible shall undertake economic and criminal consequences; Greatly improve the punishment of accounting fraud; Strengthening the internal audit, external audit and audit supervision. This legislation represents a large capital marketsystem, also make the progress of the importance of internal control people have more deeply.2.The internal control and risk management comparisonInternal control and risk management has the close relation. COSO internal control is that part of the risk management. Therefore, the committee in the whole framework of internal control - the basis of, and in 2003 issued a new report --, "enterprise risk management framework". At present the report was only a rough draft, in public, revised later, is expected to formally released this year. The enterprise risk management framework "inherit and contains the whole framework of internal control - the main content also expanded the three elements, added a goal, updated some ideas for countries to provide a unified enterprise risk management terms and concepts of comprehensive application guide system.COSO internal control and risk management of the definition and elements were: Internal control: enterprise internal control is by the enterprise board of directors, managers, and other staff to implement, for financial reporting accuracy, business activity of efficiency and effect, the relevant laws and regulations such as the follow to achieve the goal of the process and provide reasonable assurance. It includes five elements: control environment, risk assessment, control activities, information and communication, the surveillance.Risk management: enterprise risk management is a process of the board of directors, the management of enterprises and other personnel to implement, applied in strategy formulation and enterprise all levels of activity, aims to identify possible influence enterprise various potential events, and according to enterprise's risk preference for enterprises to manage risk, to achieve the goal of providing reasonable assurance. It has eight elements: the internal environment, goal setting, event risk identification, risk assessment, countermeasures, control activities, information and communication, the surveillance.The two reports from the COSO perspective, the enterprise risk management and internal control has the following similar or different places:First, they are made by "enterprise board, management and other personnel to implement", emphasize the point, says the participation parties on the internal control and risk management has a corresponding roles and responsibilities.Second, they are all clearly is a "process", not as a static thing, such as system files, technical model and so on, also not be alone or extra activities, such asinspection, evaluation is best placed inside enterprise daily management process, as a kind of routine operation mechanism to construction.Third, they are for the realization of the goal of enterprise provide reasonable assurance. Risk management objectives are four categories, including three categories and internal control collocated, namely report targets, business targets and follow the targets. But the report targets have expanded, it not only include financial report, also requires all the accuracy of internal and external non-financial class report issued by the accurate and reliable. In addition, risk management increased the strategic target, namely and enterprise vision or mission related high-level objectives. This means that risk management is not only ensure management efficiency and effect, and intervention in the enterprise strategy (including business objectives) formulation process.Fourth, risk management and internal control elements have five aspects, i.e. (overlap is control or internal) environment, risk assessment, control activities, information and communication, the surveillance. These coincide most of their goals and realization mechanism coincide of similar decision. Risk management increased goal setting, event identification and risk countermeasures three factors. Coincide elements, connotation, for example, has been extended internal control environment including honest character and moral values, staff quality and ability, the board of directors and the audit committee, management philosophy and management style, the organizational structure, the power and the allocation of responsibility, human resource policies and practices seven aspects. Risk management "internal environment" in addition to include these seven aspects outside, still include risk management philosophy, risk preference (appetite) and risks associated cultural three new content. In the risk assessment elements, risk management requires the consideration of the inherent risk and residual risk, with expectations, worst case values or probability distribution measure risk and to consider time preferences and risk association between the role. In information and communication, risk management emphasized the past, present and future of the relevant data about obtaining and analysis, provides information of the depth and timeliness, etc.Fifth, risk management proposes risk portfolio and the overall risk management (in tegrated management) - are new idea. The enterprise risk management framework "in the theory of modern financial borrowing portfolio risk theory, this paper puts forward the concept of combination and overall management from enterprise level,demanding dispersed in the overall grasp all levels and departments of enterprise, the risk exposure with overall consideration risk countermeasures, prevent dispersed consider and coping by department, such as will risk the risk in technology, financial, separated by information technology, environment, safety, quality, auditing departments, and considering the interaction between risk events, prevent two tendencies: one is the department's risk in risk preference can withstand ability, but within the overall effect may be beyond sustaining limit, because individual risk influence is not always add, may be multiplied; Second is the risk of individual departments over its limits, but exposure to the overall risk level haven't beyond sustaining range, because sometimes has offset the effects of the event of the effect. At this time, and further, strive for higher return risk with room to grow. According to risk portfolio and the overall management point of view, need unification consideration risk events as risk countermeasures between interaction between, overall risk management plan formulated.3. Internal control and risk management inner linkEnterprise system evolution and risk associated with the development. The establishment of a limited liability system is running or partnership enterprise organization from the key turning into a modern shares, it enables shareholders steps possessions and enterprise property and enterprise economic responsibility independent, shareholder transformation will no longer affect the enterprise credit capacity for equity transactions, expanded range and increased liquidity, which reduces the risk of investment and promoting enterprise financing, contributed to today a giant corporation.In order to make equity trading and the shareholders transform business continuity, influence and to make capital and management ability realize more optimal combination of ownership and management, enterprise in the modern enterprise of altitude, which also separate brings new risks, namely professional operators might not perform its accountability and shareholders' expense. In addition, limited liability may also lure enterprise engaged in high risk and damage the project's creditors. Because in limited liability, the potential revenue mainly by the enterprise (shareholders) to obtain, and the risk of failure, the major that bankruptcy is borne by the obligee. The risk is not marketization, the market competition spontaneous constraints or market transactions, such as providing a hedge product quality or natural disasters, but mechanism, belongs to the organization or trade in agency issues,need to regulate rules and system. These systems include corporate governance in the liability system, such as financial report, an internal control and audit, etc.Internal control and risk management is the fundamental role maintenance, security enterprise asset investor interest, and create new value. Fama&Jensen (1983) analyzed under the board of directors of ownership and separation of the internal control functions; Jensen (1993) further analyzed the American board of directors in internal control with reasons for the failure of performance. Theoretically, the enterprise internal control is the enterprise system component, is in the enterprise management and ownership of the separation of investor benefit under the condition of the protection mechanism. Its purpose is to ensure the accuracy and reliability of the accounting information management, prevent manipulation of statements and fraud and protect the company's property security, comply with the law in order to maintain the company's reputation and avoid incur pecuniary loss, etc. The historical origin of internal control, the requirements to earlier more basic, easier or appropriate rise to legislative level. Enterprise risk management is in the new technology and the market conditions of natural extension of internal control. COSO in the enterprise risk management framework of risk management of significance about when this is the case discussion: "enterprise risk management strategy and organization used in the various levels activities. It enables managers in the face of uncertainty can identify, evaluate and manage risk, play the role of creation and maintain value. Risk management can make risk preference and strategic keeps consistent, will risk and growth and return overall consideration, promote the decision against risks and reduce the risk and losses, identify business management and enterprise crossover risk, for various risks to provide overall countermeasures, capture opportunities and make capital rationalization." COCO in explaining the generalized control and risk discusses way: "' leadership 'in the face of uncertainty include choice." risk "refers to individuals or organizations are making choices adverse consequences after the possibility of suffering. The risk is opportunity counterparts." Obviously, these discussions have realized that enterprise exists for shareholders or stakeholders (for nonprofit organization, etc.), and create value value creation is not only passive assets security, it should also include the use of opportunity. Moreover, the threat of shareholder value comes not from the operator internal factors such as accounting frauds, including from the market risk, etc.Technology and market conditions, promote the new progress of internal controlto risk management. In advanced information technology conditions, accounting records realized the electronic control, real-time update, make traditional error-detection and prevent disadvantages accounting control seems outdated. However, the risk is often caused by trading or organization innovation, these innovation comes from emerging market practice, such as enron will energy trading large developed into similar financial derivatives trading. On the other hand, environmental protection and the enforcement of protection of consumer rights, strengthened the social responsibility of the enterprise, if an enterprise may have inadvertently, suffer from commodity market or capital market for the enterprise, and punish the performance brand value, or the capital market capitalisation put-downs. Therefore, the enterprise need a daily operation function and structure to guard against risks, including abide by laws and regulations, and ensure the trust of investors and ensure financial information management efficiency, etc. Therefore, from maintenance and promote this basic function value creation standpoint, risk management and internal control target is consistent, just in new technology and the market conditions, in order to effectively protect the interests of investors need in the basis of the development of internal control more active and more comprehensive risk management.4.From internal control to risk managementThere is a debate that risk management include internal control, or internal control contains risk management. The author thinks that what kind of conclusion that is not very important, the most important is to clear risk management and internal control of the relation between the superposition place. Who's wider, may be with time, technology, market conditions, legal and regulatory practice and different, for example, in the early development of internal control, market risk management tools and technology conditions are not fully (such as computer systems, statistics theory, quantity model, hedge tools and insurance etc.), then the internal control contains (alternative) risk management function is very natural. Even in the same era, different industry their emphasis may also different, for example, in the financial industry regulatory strict or involving the people's lives and health pharmacy and medical industry, the urgency of risk management, enterprise stronger with risk management leading internal control may be more convenient. And in some other enterprise, in order to comply with information disclosure requirements of internal control reports with the internal control system, enterprise for leading, give attention to two ormorethings risk management may be more suitable.Because of the internal control and risk management is the intrinsic relation, countries with different ways were gradually integrate internal control and risk management connected. January 8, 2004, China's relevant aspects held the "commercial bank risk management and internal control BBS", this shows that our banking also began to internal control and risk management connected.The Basel committee "issued by the banking group of internal control system framework said:" the board of directors approved and regularly check the overall strategy, and important system, understand the main risk, the bank for these risks setting acceptable level, ensure management to take necessary steps to identifying, measuring, supervision and control these risks..." Here, the risk management is obviously the content into the internal control framework. In the UK the FSA comprehensive standards (TheCombined Code) about the internal control regulation, it is first in official documents containing definitely in risk management in internal under control. This code is that the board should keep sound internal control system to protect shareholders investment and enterprise assets (principle d. 2). The board of directors at least once a year, and check the effectiveness of enterprise internal control systems, and to shareholders and report. Reports should include all the control, such as financial, management, follow control and risk management (d. 2.1). This rule is listed on the London stock exchange enterprise must abide by.Canadian association of certified accountants control standards committee (COCO) think "control should include risk identification and reduce the risk of", in which not only include the risk of achieving specific goals related, but also include general, if can't identify and took advantage of the opportunity, cannot make enterprise in the face of not anticipate events and uncertain information while maintaining flexibility or resilient. In 1992 the COSO internal control - in the whole framework will risk assessment of the internal control as one of the five elements, in the latest on the introduction of the "enterprise risk management framework" and further integrate internal control expanded to risk management, clearly put risk management include internal control.The author believes that in the actual business process, risk management and internal control is inseparable in rule or legislative process, consideration scope and control strength, the requirements, the greater the control range will be weaker. For its core problems, such as financial reporting accurate and reliable, the most suitable forlegislation to form to constraint, and other more broad content may be more suitable for rules and guidelines. The different levels of the enterprise internal risk management and internal control, the leading relative order can also be different, for example, from the enterprise strategic risk in turn to the management risk, financial risk, and finally to the financial report, risk management and internal control the relative importance should vary. In strategic risk, the risk management should play a leading role play complexation and internal control. This role reversal to financial report, gradually level, should play a leading role is the internal control, risk management play complexation.Despite the risk management and internal control an inner link, but the reality of or on behalf of the current application level of internal control and risk management and lots of gap. The typical risk management attention in particular business with strategic choice or business decisions related to compare the benefits and risks of, for example, banking credit management or market (price) risk management such as exchange rate, interest rate risk, etc. The typical internal control refers to accounting control, audit activities, are generally confined to financial related department. What they all have in common is low level, small range, confined to a few functional departments, and no penetration or applied in enterprise management process and the whole management system, therefore, sometimes looks risk management and internal control or independent of each other two things. Along with the internal control and risk management constantly improve and become more comprehensive, they inevitably overlapping and fusion between until unity.内部控制与风险管理周兆生1、内部控制———标准与立法1985年美国为了遏制日益猖獗的会计舞弊活动,成立了一个反财务舞弊委员会(Treadway委员会),调查导致会计舞弊活动的原因,并提出了解决方案。