# Internal Control Standards

**Canonical:** https://apis.io/providers/internal-control-standards/  
**Website:** https://www.coso.org/internal-control  
**APIs profiled:** 0

Internal Control Standards are frameworks of policies and procedures designed to provide reasonable assurance regarding the achievement of objectives in operational effectiveness, reliable financial reporting, and compliance with laws and regulations. The COSO Internal Control - Integrated Framework (originally released in 1992 and refreshed as ICIF-2013) is the most widely adopted standard for internal controls and underpins SOX 404 compliance, with supplemental 2023 guidance for internal control over sustainability reporting (ICSR) addressing modern risks including generative AI and robotic process automation.

## Kin Score — 5.0 / 100 (minimal)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 5.0).

| Facet | Score |
|---|---|
| Discoverability | 50.0 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 0.0 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 0.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## Security (1)

- **Internal Control Standards Domain Security** — TLSv1.3 · HSTS

## Tags

Auditing, Compliance, COSO, Governance, Internal Controls, Risk Management, SOX

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/internal-control-standards/). Scores are computed from the provider's own public artifacts under a published rubric.