Internal Control
Internal Control
Internal control refers to the system of policies and procedures put into place to prevent fraud , damage
and errors in a business
- These encourage working ethically and give managers the tools to understand, detect & minimise
risks.
Types of controls
1. Preventive
- Prevent unwanted events
- Limited access to accounts
2. Detective
- Find and report unwanted events
- Reconciling books and physical items
3. Corrective
- Corrects effects of unwanted events
- Water sprays when a fire is detected
Audit evidence
• Information collected during the internal audit
• Evidence is sued to make recommendations
1. Samples
- Statistical sampling: statistics are used to determine the sample
○ Random sampling: all items stand an equal chance to be chosen. Random numbers are generated
to determine which items to use in a sample
○ Systematic sampling: A random item is chosen. A number is chosen. Count the number of items
after the first random item that was selected and then systematically adding items to the
sampling.
- Non-statistical sampling
○ Judgement is used to determine samples
○ Selected based on what the auditors believe should form part of the sample
2. Methods to gather Audit evidence
- Evidence should be relevant and reliable
○ Observation
▪ To see whether the employees are working correctly and efficiently
▪ e.g. ensure employee is ordering items correctly
○ Analysis
▪ The information being collected and determine unusual results
▪ e.g. the GP was lower than other years. Auditor finds reasons to ensure no mistakes or fraud
was present
○ Inspection
▪ The physical accounting records and the assets need to be checked to see if internal controls
are being followed.
▪ e.g. checking if receipts were recorded correctly in the CRJ
○ Enquiry and confirmation
▪ Discuss the procedures that are followed with relevant people
▪ Creditors can be contacted to confirm purchases and payments
▪ e.g. auditor interviews managers and find out how they ensure that everyone in their division
is following procedures
○ Recalculation
▪ To ensure figures were calculated correctly
▪ e.g. auditor does the calculations again
Report
• A report is created at the end of the audit
• It must include objectives, methods used, important findings and recommendations
• CAE (Chief Audit Executive) is the senior in the audit team
- They present the internal report to the management and the relevant committees
- Works closely with the management to ensure all resources are available for an effective internal audit
- e.g. financial statements and relevant staff