Control Self-Assessment and Costs of Compliance with Sarbanes-Oxley Section 404

Abstract

ABSTRACT Control self-assessment (CSA) represents the practice of making operational-level managers responsible for internal control monitoring. We investigate the association between the use of CSA and certain costs incurred in maintaining internal control systems and complying with regulatory requirements. We find a negative association between CSA and external audit fees paid for the audit of internal control over financial reporting. Moreover, we find an incremental fee reduction resulting from the interaction between CSA and Section 404 assistance provided to the external auditor by the internal auditor. Additionally, we find a negative association between the use of CSA and some costs of the internal audit's own evaluation of operational and financial controls for managerial purposes. In sum, our study suggests that CSA can lessen at least some internal control costs while reducing control risk as proxied by external costs of internal control compliance. We discuss implications for broader management control systems.