Actividad 3 Analisis de Caso
Actividad 3 Analisis de Caso
Actividad 3 Analisis de Caso
Análisis de caso
Maricela Ruiz
ID: 722871
ID:718752
ID:718785
ID 721508
Auditoria y Aseguramiento
Soacha, 03 abril
2021
ANALISIS DE CASO PRODUCTOS RAMO SAS
Proveedores:
INGENIO RISARALDA S A
COOPERATIVA COLANTA
CAMACHO DELGADO DAVID
ESCANDON SALCEDO JOSE FRANCISCO
POSITIVA COMPANIA DE SEGUROS S A
SAPORE S A S
CAVELIER ABOGADOS SAS
ALPINA PRODUCTOS ALIMENTICIOS S A BIC
ESPECIALES CONDOR ESCONDOR S A
DORFAN S A S
PLASTICOS ESPECIALES DE COLOMBIA LTDA
C I MAYAGUEZ S A
ZUME ARQUITECTURA LTDA
AGROINSUMOS S A S
COOPERATIVA DE MOTORISTAS DE MOSQUERA Y FUNZA COOMOFU LTDA
IMPRESOS J C SAS
MESA HERMANOS Y COMPANIA SAS
INDUSTRIAS ESTRA S A
PLASTIPACK S A
IMPORTADORA INDUSTRIAL COLOMBIANA LTDA
TECNOPRES GRAFICA S A
AVICULTURA INDUSTRIAL AVINSA S A S Vigilar todos
Clientes:
PERSONAS NATURALES
CENCOSUD COLOMBIA S A
ALMACENES EXITO S A. Vigilar todos
Aplicación del modelo COSO en ramo:
El informe COSO es una metodología para implementar un sistema de control interno. Ramo no
lo tiene implementado. la forma en que Ramo podemos implementar el modelo coso es aplicando
los 5 componentes de coso que incluyen principios como los exponemos de manera general a
continuación:
1. Ambiente de control: los administradores ejercen un control eficiente en la organización; la
supervisión se encuentra ceñida al principio de independencia y los miembros de la organización
demuestran compromiso por los valores corporativos y la ética profesional; se establecen los
lineamientos para la búsqueda de objetivos y se busca personal competente y comprometido que
responda al cumplimiento de estos.
2. Evaluación de riesgos: se especifican objetivos claros que permitan gestionar los riesgos a los
que se expone la compañía; la organización requiere que se identifiquen y analicen los riesgos y
que se evalúen los posibles fraudes que se puedan presentar.
3. Actividades de control: debe existir un plan de acción para desarrollar actividades de control
que permitan gestionar y mitigar los riesgos para que la organización pueda alcanzar los
objetivos; para esto puede apoyarse en sistemas y tecnologías que le ayuden a mitigar los riesgos.
4. Información y comunicación: la información que obtiene la empresa de sus diferentes áreas es
una información oportuna y de calidad que permite una buena comunicación tanto a nivel externo
como a nivel interno.
5. Actividades de monitoreo: existe un monitoreo y una evaluación continua de la información, se
evalúa y comunica las deficiencias que encuentra en la gestión de control interno a las directivas
de la organización.
Como conclusión, podemos decir que el informe COSO es una herramienta que se ha venido
transformando a la par de las empresas y provee unos lineamientos para una adecuada gestión del
control interno, la identificación de eventos que puedan afectar el negocio en marcha y diferentes
estrategias para mitigar riesgos."
• Audit: constant process of systematic, critical, independent and documented evaluation, to obtain
audit evidence and evaluate it objectively in order to determine if the audit criteria are met, if they
are effectively implemented and if they are appropriate.
•Auditor: qualified person with the necessary competence to carry out an audit.
•Auditee: organization, process, area, agency or project to which the audit is performed.
• Audit criteria: set of policies, standards, guidelines, guidelines, regulations, manuals, laws,
procedures or requirements that will be a reference to compare the audit evidence.
• Audit object: refers to the audit to be performed; that is, if it is to a process, procedure, area or
dependency, project, contract, activity, task, among others.
• Schedule of activities: it is the programming of the approved audits, which are expected to be
carried out on scheduled dates, distributed in the two semesters of the year.
• Audit program: detailed description of the activities agreed to carry out the audit, contains
objectives, scope, resources, among other procedures that guide the development of the audit.
•Audit scope: limits and extent of the audit according to the audit object to be covered.
• Audit evidence: these are the records, statements of fact or any information relevant and pertinent
to the audit criteria and that are verifiable.
• Audit Findings: Results of the evaluation of the evidence collected from the audits against the
criteria. Findings may indicate opportunities for improvement.
• Internal control system: internal control is understood as the system made up of the organization
scheme and the set of plans, methods, principles, standards, procedures and verification and
evaluation mechanisms adopted by an entity, in order to ensure that all the activities, operations
and actions, as well as the administration of information and resources, are carried out in
accordance with the constitutional and legal norms in force within the policies outlined by the
management and in accordance with the goals or objectives set.
• Risk assessment: involves the identification and analysis of risks relevant to the achievement of
objectives and the basis for determining the way in which such risks should be managed.
• Control activities: These are those carried out by the Management and other personnel of the
Organization to fulfill assigned activities on a daily basis.
• Supervision and monitoring of the control system: In general, control systems are designed to
operate in certain circumstances, however, it is necessary to take into account the risks and
limitations inherent to control; however, conditions evolve due to both external and internal factors,
thereby causing the controls to lose their efficiency.
• MECI: The Standard Model of Internal Control provides State entities with a structure for
controlling strategy, management and evaluation, the purpose of which is to guide them towards
the fulfillment of their institutional objectives and their contribution to the essential purposes of
the Condition.
• Internal control: The process designed, implemented and maintained by those responsible for
the governance of the entity, the management and other personnel, in order to provide reasonable
assurance about the achievement of the entity's objectives related to the reliability of the
information. Financial.