Preparing a Risk Control Matrix

The U.S. Sarbanes-Oxley Act requires evaluation of how public companies implement financial reporting
controls. Many companies prepare a risk control matrix to assess risk. Preparing a risk control matrix can help
identify pertinent data and often identifies the risks, controls, and monitoring methods to help ensure accurate
financial reporting. Based on your employer, prepare a risk control matrix for a particular area within your
company. For example, a risk control matrix regarding the filing of corporate taxes. Create a professional
memo of 3–4 pages communicating this profile to the organization’s board of directors, including details of the
risk and your recommendations for a system of control. Be sure to identify within the memo the strengths and
weaknesses of your recommended system.