If an internal audit engagement is built around the COSO internal control components, when combined with an internal control maturity model, it can:
1. Provide a clear conclusion on effectiveness of the various control elements.
2. Where an audit may be performed periodically, it can show control improvement over time – refer example shown where the solid circles indicate the current maturity assessment and dotted circles indicate maturity at time of the previous audit.