Internal controls, important to business and audit Flashcards
Risk committee
oversee the system of Internal control
Principle
the board should establish procedures to manage risk, oversee internal control framework, and determine the nature and extent of the principal risks the company is willing to take in order to achieve its long-term strategic objectives
What is internal control for?
- achieve business objectives
- manage risk effectively
- safeguard company’s assets and shareholders’ investments
three key objectives of system of internal control
- reliable financial reports
- effective and efficient business operations
- ensures compliance with laws and policies
5 components of internal control
- the control environment
- the entity’s risk assessment process
- the information system
- control activities
- monitoring of controls
the control environment
- is the overall attitude, awareness and actions of management regarding internal controls and their importance.
- ‘tone form the top’
- sets clear authority and responsibility
the entity’s risk assesment process
- treated as a separate system in ‘system of risk management’
- an important part of the overall system of control
Information systems
- good accurate information
- management information for planning, decision making and control
control activities
- Actions (interventions) that increase the likelihood of specific business objectives being achieved
SPAMSOAP - control activities
Segregation of duties
Personnel
Accounting
Management
Supervision
Organisation
Authorisation
Physical
Internal control process example steps
- identifying risk
- identifying necessary controls
- External or internal auditor controls
controls - inherent limitations
- infrequent, unusual transactions
- human error
- management override
- collision
- changes in environment
monitoring of controls
- Aims to ensure the system of internal control is adequate and operates effectively, with weaknesses reported and root causes corrected.
- on going motoring of activities by line managers
- separate evaluations supported by internal audit
- external audit can be seen as monitoring controls