This tool helps to assist management in analyzing the effectiveness of the internal control structure over financial reporting as it relates to information systems (IS).

This tool suggests an approach for integrating the general (environmental or pervasive) controls in the IS function with management's overall assessment of the management control structure (MCS) and its impact on the reliability of financial reporting. The MCS consists of the environment and processes put into place by management to ensure that significant risks presenting threats to the successful achievement of key business objectives are identified, evaluated, and reduced to an acceptable level.