ELC_Assessment_Template_Risk_Oversight.xlsx

	B	D	F
1
2	Entity Level Controls Assessment		RISK OVERSIGHT
3	A lean, 14-point ELC review mapped to COSO 2013
4
5
6	Your controls can only thrive in the right environment. Entity Level Controls (ELCs) are the foundation that lets every other control, process and program work. This template takes a lean approach: 14 core areas that ask the bigger questions, each mapped back to the 17 COSO 2013 principles and their points of focus.
7
8	THREE PRIORITIES BEHIND THIS TEMPLATE
9
10	1	2	3
11	Gauge maturity	Stay lean	Improve, not pass/fail
12	Treat ELCs as a living assessment of maturity for your size, risk level, industry and regulatory environment. Be reasonable and pragmatic, and raise the bar as you grow.	Group questions into logical buckets rather than working a laundry list. The model was never meant to be prescriptive, so apply professional judgment.	Use each cycle to decide what to do differently. The most value comes from naming tangible improvements year over year.
13
14	HOW TO USE THIS WORKBOOK
15	ELC Assessment	For each of the 14 areas, record the owner and evidence reviewed, rate current and target maturity (1 to 5), and note observations and the improvement you will make in the next 12 months.
16	Maturity Scale	Reference definitions for the 1 to 5 ratings, plus the events that should prompt you to raise the bar.
17	Summary	Updates automatically: current versus target maturity, gaps and priorities for Management and the Audit Committee.
18	COSO 2013 Mapping	Shows how each ELC maps to the COSO points of focus, with coverage counts.
19	Points of Focus	All 87 points of focus in one list. Use it for the periodic full review of every point of focus.
20
21	LEGEND
22		Cream cells are for your input.
23		Teal cells calculate automatically. Do not overwrite.
24
25	EXAMPLE ENTRY (ELC1, FOR FORMAT ONLY)
26	Control owner	VP Finance
27	Evidence reviewed	FY budget deck and Board approval minutes; Q2 reforecast
28	Current / target maturity	3 Defined / 4 Managed
29	Observation	Budget is approved by the Board but forecast assumptions are not documented after the recent acquisition.
30	Improvement (next 12 months)	Document forecast assumptions and add a quarterly reforecast review to the Audit Committee plan.
31	Priority / status	High / In progress
32
33	A NOTE ON SCOPE
34	A lean approach is a starting point, not a substitute for judgment. Best practice is to consider every COSO 2013 point of focus periodically, and especially after significant change: rapid growth or decline, acquisitions or divestitures, going public, or moving to a new exchange or regime (for example TSXV to TSX, or CSOX to SOX 404).
35
36	Risk Oversight Inc. \| riskoversight.ca \| Template for general guidance; tailor to your organization.
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100