{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-210.50","name":"Financial Controls","level":2,"parent_id":"BC-210","l1_id":"BC-210","industry":"cross-industry","macro_id":"MC-20","path":["Accounting & Financial Reporting","Financial Controls"],"description":"Design and operate the controls that stop errors and fraud from reaching the financial statements, and keep the evidence that each control ran as designed.","aliases":["Internal Control over Financial Reporting","ICFR"],"in_scope":["Control design and the risk-control matrix","Segregation of duties in finance processes","Control evidence and deficiency remediation"],"out_of_scope":["Independent assurance over the controls (see BC-160)","Enterprise-wide risk appetite (see BC-130)"],"csdm_note":null,"status":"active","successor_id":null,"child_ids":["BC-210.50.10","BC-210.50.20","BC-210.50.30","BC-210.50.40"]},"crosswalk":{"realized_by":[{"product_id":"PR-110","product":"SAP S/4HANA","pc_id":"PC-110.90","pc":"Governance, Risk and Compliance","maturity":"partial","via":null},{"product_id":"PR-150","product":"Oracle Fusion Cloud Applications","pc_id":"PC-150.70","pc":"Risk Management and Compliance","maturity":"partial","via":null}],"used_in":[{"vs_id":"VS-70","vs":"Record-to-Report","stage_id":"VS-70.60","stage":"Assure Controls","order":6,"via":null}],"patterns":[],"stacks":[],"books":[]},"ancestors":[{"id":"BC-210","name":"Accounting & Financial Reporting","level":1}],"children":[{"id":"BC-210.50.10","name":"Control Design","level":3,"child_count":0},{"id":"BC-210.50.20","name":"Segregation of Duties","level":3,"child_count":0},{"id":"BC-210.50.30","name":"Control Operation & Evidence","level":3,"child_count":0},{"id":"BC-210.50.40","name":"Deficiency Remediation","level":3,"child_count":0}]}