In Smaller Companies Where Management's Interaction with Its Controls Provides

Multiple Choice

In smaller companies where management's interaction with its controls provides the basis for its assessment of ICFR, management should provide documentation of how its interaction provided it with sufficient evidence. Appropriate documentation includes:

A) memos and emails with instructions and directions to and from management to company employees.
B) evidence of formal, direct testing and ongoing monitoring evaluations.
C) daily checklists and questionnaires indicating the extent of interaction and monitoring.
D) All of the above are appropriate for small companies as well as larger companies.