In the COSO framework, which component focuses on the flow of information and communication to support internal control?

In the COSO framework, which component focuses on the flow of information and communication to support internal control?

• A. Monitoring
• B. Information and communication
• C. Control environment
• D. Risk assessment

Answer: (D)

The flow of information and communication is handled by the Information and Communication component. It ensures that relevant information is identified, captured, and communicated in a timely and clear way so the people who need it can carry out their responsibilities. This includes internal channels—upward, downward, and across the organization—as well as external communications with stakeholders such as regulators, customers, and suppliers when needed. This information flow supports all other parts of the framework by enabling informed decision-making, proper risk response, and effective monitoring. The other components address the environment, how risks are identified and analyzed, the actions taken to control processes, and how ongoing monitoring occurs, but the specific focus on getting the right information to the right people at the right time belongs to Information and Communication.

The flow of information and communication is handled by the Information and Communication component. It ensures that relevant information is identified, captured, and communicated in a timely and clear way so the people who need it can carry out their responsibilities. This includes internal channels—upward, downward, and across the organization—as well as external communications with stakeholders such as regulators, customers, and suppliers when needed. This information flow supports all other parts of the framework by enabling informed decision-making, proper risk response, and effective monitoring. The other components address the environment, how risks are identified and analyzed, the actions taken to control processes, and how ongoing monitoring occurs, but the specific focus on getting the right information to the right people at the right time belongs to Information and Communication.