Which statement best describes the role of Information and Communication in the COSO framework?

Which statement best describes the role of Information and Communication in the COSO framework?

• A. Information and Communication creates internal control activities.
• B. Information and Communication provides reliable reporting and timely communication.
• C. Control Environment defines ethical values and governance.
• D. It identifies external stakeholders' requirements.

Answer: (B)

Information and Communication in the COSO framework ensures that the right information is identified, captured, and communicated in a timely manner so people can carry out their responsibilities. It focuses on delivering reliable reporting and timely communication, both internally (to management and operating personnel) and externally (to regulators, investors, and other stakeholders), so decisions are based on accurate, complete data. This role supports the other components by providing the information needed for effective control activities, monitoring, and governance. If information isn’t reliable or timely, controls can fail and reporting can be distorted. The other statements describe different aspects: creating internal control activities belongs to Control Activities, while the Control Environment concerns ethical values and governance structure, and identifying external stakeholders' requirements is not a direct function of Information and Communication.

Information and Communication in the COSO framework ensures that the right information is identified, captured, and communicated in a timely manner so people can carry out their responsibilities. It focuses on delivering reliable reporting and timely communication, both internally (to management and operating personnel) and externally (to regulators, investors, and other stakeholders), so decisions are based on accurate, complete data.

This role supports the other components by providing the information needed for effective control activities, monitoring, and governance. If information isn’t reliable or timely, controls can fail and reporting can be distorted.

The other statements describe different aspects: creating internal control activities belongs to Control Activities, while the Control Environment concerns ethical values and governance structure, and identifying external stakeholders' requirements is not a direct function of Information and Communication.