Reliable financial reporting is built on more than accurate numbers—it depends on effective internal controls.

Many organizations continue to rely on manual processes, undocumented procedures, or key individuals to manage critical financial reporting activities. While these practices may appear sufficient during day-to-day operations, they often expose the business to significant risks when undergoing external audits, regulatory reviews, due diligence, fundraising, or business expansion.

At TGS AU Partners, we help organizations establish and strengthen their Internal Control over Financial Reporting (ICoFR) framework through comprehensive assessments, internal control reviews, risk analysis, and practical implementation support.

Our objective is not simply to improve compliance, but to help businesses build a sustainable internal control environment that enhances financial reporting quality, strengthens corporate governance, and supports long-term business growth.

Why Internal Control over Financial Reporting Matters

As businesses continue to grow and regulatory expectations become increasingly demanding, stakeholders expect more than timely financial statements. Investors, lenders, regulators, shareholders, and auditors also assess the reliability of the internal processes used to generate financial information.

An effective ICoFR framework enables organizations to better prepare for:

  • External financial statement audits.

  • Regulatory inspections and compliance reviews.

  • Financial and tax due diligence engagements.

  • Bank financing applications.

  • Investment and fundraising activities.

  • Corporate restructuring.

  • Initial Public Offerings (IPO).

  • Cross-border expansion and multinational operations.

Conversely, weak internal controls can significantly increase the likelihood of:

  • Financial reporting errors.

  • Material misstatements.

  • Fraud and asset misappropriation.

  • Unauthorized transactions.

  • Operational inefficiencies.

  • Poor management decisions based on unreliable financial information.

  • Repeated audit findings.

  • Loss of stakeholder confidence.

In today's business environment, strong internal controls are no longer viewed solely as a compliance requirement. They have become a critical component of effective Corporate Governance, Risk Management, and Financial Reporting Excellence.

Signs Your Organization May Need an ICoFR Assessment

Many organizations only identify weaknesses in their internal controls after external auditors, regulators, or investors raise concerns.

A proactive assessment enables management to identify and address control deficiencies before they develop into significant financial or operational risks.

Your organization should consider conducting an ICoFR Assessment if you are experiencing one or more of the following situations:

  • Rapid business growth and increasing operational complexity.

  • Implementation of a new ERP or accounting information system.

  • Organizational restructuring or management changes.

  • Preparation for an external financial statement audit.

  • Seeking financing from banks or financial institutions.

  • Raising capital from investors.

  • Preparing for an Initial Public Offering (IPO).

  • Increasing transaction volumes requiring stronger control mechanisms.

  • Regulatory changes affecting financial reporting.

  • Recurring audit findings related to internal controls.

  • Expansion into new business units or international markets.

Conducting an assessment at an early stage enables organizations to strengthen governance, improve operational efficiency, and reduce the risk of costly control failures in the future.

Our ICoFR Implementation Methodology

Establishing an effective Internal Control over Financial Reporting (ICoFR) framework involves far more than preparing documentation or introducing additional procedures. An effective internal control system should strengthen financial reporting while supporting day-to-day business operations without creating unnecessary administrative burdens.

At TGS AU Partners, we adopt a structured, risk-based approach tailored to each organization's business model, operational complexity, and financial reporting environment. Every engagement begins with a comprehensive understanding of the client's business before we assess existing controls and develop practical recommendations for improvement.

Our ICoFR methodology generally consists of the following phases:

1. Business Understanding & Initial Assessment

The first step is to gain a comprehensive understanding of the organization's business operations, governance structure, and financial reporting processes. During this phase, we:

  • Conduct discussions with management and process owners.

  • Identify key business cycles and operational processes.

  • Review existing policies, procedures, and internal control documentation.

  • Assess the organization's ERP system or accounting software environment.

  • Identify areas with elevated financial reporting risks.

This initial assessment enables us to develop a thorough understanding of the organization's current internal control environment and establish the scope of the engagement.

2. Risk Identification & Process Mapping

Once we understand the organization's business processes, we identify risks that could affect the accuracy, completeness, and reliability of financial reporting. These risks are mapped across key business cycles, including:

  • Revenue & Accounts Receivable

  • Procurement & Accounts Payable

  • Inventory Management

  • Fixed Assets

  • Treasury & Cash Management

  • Payroll

  • General Ledger & Financial Closing

  • Financial Reporting

During this phase, we also develop process flow documentation and perform risk mapping to establish the foundation for subsequent control evaluations.

3. Internal Control Evaluation

We then assess whether existing internal controls are appropriately designed and operating effectively to mitigate identified risks. Our evaluation focuses on two key dimensions:

Design Effectiveness: We assess whether the organization's control activities have been appropriately designed to address identified financial reporting risks. Typical evaluation criteria include:

  • Appropriate segregation of duties.

  • Clearly defined authorization and approval procedures.

  • Adequate documentation and record-keeping.

  • Controls designed in proportion to the organization's operational complexity.

Operating Effectiveness: In addition to evaluating control design, we assess whether internal controls are consistently executed in day-to-day operations. Our assessment procedures may include:

  • Process walkthroughs.

  • Operational observations.

  • Interviews with key personnel.

  • Review of supporting documentation.

  • Transaction sampling.

  • Control testing.

4. Gap Analysis & Recommendations

Following the evaluation, we conduct a comprehensive Gap Analysis by comparing the organization's existing control environment against recognized best practices and internationally accepted frameworks, including the COSO Internal Control Framework. Each identified issue is evaluated and documented with:

  • Risk rating.

  • Potential impact on financial reporting.

  • Root cause analysis.

  • Practical recommendations for improvement.

  • Implementation priority.

  • Recommended remediation timeline.

5. Implementation Assistance

Where required, we continue to support organizations during the implementation of recommended improvements. Our implementation assistance may include:

  • Developing or enhancing Standard Operating Procedures (SOPs).

  • Strengthening internal policies and governance documentation.

  • Developing a comprehensive Risk & Control Matrix (RCM).

  • Improving business process documentation.

  • Enhancing ongoing monitoring mechanisms.

  • Conducting workshops and knowledge transfer sessions for management and employees.

Our objective is to help organizations establish practical and sustainable internal controls that can be effectively integrated into daily operations while supporting long-term financial reporting reliability and corporate governance.

Why Choose TGS AU Partners?

Internal Control over Financial Reporting is more than a compliance exercise—it is a strategic investment in governance, operational excellence, and long-term business resilience.

Organizations choose TGS AU Partners because we combine technical expertise with practical business understanding to deliver solutions that are both effective and commercially realistic.

As a professional firm, we have:

  • Risk-Based Advisory Approach: We focus our assessment on the areas that present the highest financial reporting risks, allowing management to prioritize improvements where they will have the greatest impact.

  • Practical, Business-Oriented Solutions: Every organization operates differently. Rather than applying generic internal control templates, we tailor our recommendations to your business model, organizational structure, industry characteristics, operational complexity, financial reporting environment, and growth objectives.

  • Expertise in Audit and Advisory Services:  Our professionals understand both financial reporting requirements and operational realities. By combining experience in assurance and advisory engagements, we help organizations strengthen internal controls while supporting reliable financial reporting, audit readiness, and informed management decision-making.

  • Strengthening Corporate Governance: Strong internal controls contribute directly to stronger corporate governance as our ICoFR services help organizations improve accountability, transparency, risk management, financial reporting quality, decision-making processes, and organizational resilience.

  • International Perspective with Local Insight:  As a member of an international professional network, TGS AU Partners combines global advisory practices with an in-depth understanding of Indonesia's business, regulatory, and financial reporting environment.

Build a Stronger Financial Control Environment

Effective internal controls provide more than regulatory compliance—they establish the foundation for reliable financial reporting, sound governance, informed decision-making, and sustainable business growth.

At KAP Agus Ubaidillah & Rekan (TGS AU Partners), we help organizations design, assess, and strengthen Internal Control over Financial Reporting frameworks that align with international best practices while addressing the practical realities of doing business in Indonesia.

Whether your organization is preparing for an audit, attracting investors, implementing new systems, or improving corporate governance, our professionals are ready to support your journey toward stronger financial controls.

[ Discuss your Internal Control over Financial Reporting needs ]