Application of COSO framework in whistle-blowing activities of public higher-learning institutions

The purpose of this study is to determine whether higher-learning institutions have sufficient internal controls to manage whistle-blowing or similar means when encountering repetitive complaints requiring similar corrective actions. This study attempts to classify complaints as per categories, criteria and components of the COSO framework using a checklist called self-assessment checklist of internal control kits so that complaint activities can be efficiently and effectively managed.

As a case study, one public university in Malaysia was selected, and 740 complaints were examined over a four-year period. Two methods of data collection, namely, document analysis and interviews, were used.

This study found no internal controls established to oversee the complaints that were received. Hence, repetitive complaints were received for similar areas and functions over a period. The application of COSO framework on complaints and whistle-blowing activities, however, led to more organised and visible problems; therefore, effective corrective and preventive action may be conducted.

This study was conducted on only one organisation with several series of interviews and limited period of document analysis because of privacy and confidentiality of the information. Future research should collect and analyze data from a higher number of organisations with more respondents for interviews and a longer period for document analysis to obtain more accurate results.

This study provides further evidence on the suitability of COSO framework for different types of organisations, either public or private, and has been successfully adopted globally. It is effective not only to manage the operation and financial matters but also to manage complaints and whistle-blowing activities in organisations.

This study is original because it focuses on the current practices of internal control in government entities, particularly for organisations that operate as higher-learning institutions, which is scarce in the literature. In addition, this study analysed the drawbacks of internal control systems, especially in dealing with whistle-blower reports and complaints by referring to the list of complaints made by their stakeholders.