• INTERNAL CONTROL
Introduction to Internal Control
• • Internal control refers to the policies, procedures, and processes established by an
organization.
• • It helps organizations achieve goals efficiently and effectively.
• • It protects company assets from fraud, misuse, and loss.
• • It ensures reliability and accuracy of financial information.
• • It promotes compliance with laws, rules, and regulations.
• Example:
• A school requiring approval before releasing school funds is an example of internal control.
Importance of Internal Control
• • Prevents fraud and theft.
• • Improves operational efficiency.
• • Helps management monitor employees and processes.
• • Ensures accurate financial reporting.
• • Protects organizational reputation.
• • Supports better decision-making.
• Without proper internal control, organizations may experience financial losses and
operational problems.
Objectives of Internal Control
• 1. Safeguarding Assets
• - Protect cash, equipment, and inventory.
• 2. Reliability of Records
• - Ensure accurate accounting and reports.
• 3. Operational Efficiency
• - Improve productivity and minimize waste.
• 4. Compliance
• - Follow laws, regulations, and company policies.
Five Components of Internal Control (COSO
Framework)
• 1. Control Environment
• 2. Risk Assessment
• 3. Control Activities
• 4. Information and Communication
• 5. Monitoring Activities
• These components work together to ensure organizational effectiveness.
Control Environment
• • The foundation of internal control.
• • Reflects management’s attitude toward integrity and ethics.
• • Includes organizational structure and employee responsibilities.
• • Encourages accountability and discipline.
• Example:
• A company implementing strict ethical standards for employees.
Risk Assessment
• • Identifying risks that may prevent achievement of objectives.
• • Risks may include fraud, cyber threats, errors, and operational failures.
• • Organizations evaluate likelihood and impact of risks.
• • Appropriate actions are developed to reduce risks.
• Example:
• A bank assessing risks of online hacking.
Control Activities
• • Policies and procedures designed to reduce risks.
• • Includes authorization, approvals, and verification.
• • Segregation of duties prevents one employee from controlling all processes.
• • Physical controls protect assets.
• Examples:
• • Password protection
• • CCTV cameras
• • Approval signatures
Information and Communication
• • Important information must be communicated clearly.
• • Employees should understand their duties and responsibilities.
• • Management must receive accurate reports on time.
• • Communication may be internal or external.
• Example:
• Monthly financial reports sent to managers.
Monitoring Activities
• • Continuous review of internal control effectiveness.
• • Helps identify weaknesses and problems.
• • Includes internal audits and evaluations.
• • Corrective actions improve systems.
• Example:
• An auditor reviewing inventory procedures regularly.
Types of Internal Control
• 1. Preventive Controls
• 2. Detective Controls
• 3. Corrective Controls
• Each type plays a role in reducing organizational risks.
Preventive Controls
• • Prevent problems before they happen.
• • Focus on avoiding fraud and errors.
• Examples:
• • Employee training
• • Segregation of duties
• • Password systems
• • Approval requirements
Detective Controls
• • Detect errors or fraud after they occur.
• • Helps management identify issues quickly.
• Examples:
• • Audits
• • Reconciliation
• • Inventory counts
• • CCTV monitoring
Corrective Controls
• • Correct problems discovered by detective controls.
• • Restore operations and prevent recurrence.
• Examples:
• • Backup recovery systems
• • Updating procedures
• • Employee disciplinary actions
Segregation of Duties
• • One of the most important internal controls.
• • Different employees handle authorization, recording, and custody of assets.
• • Prevents fraud and misuse.
• Example:
• The employee receiving cash should not record accounting transactions.
Internal Control in Schools
• • Monitoring student attendance.
• • Approval of school expenditures.
• • Securing student records.
• • Inventory management of school equipment.
• These controls help maintain accountability in educational institutions.
Internal Control in Businesses
• • Cash handling procedures.
• • Payroll systems.
• • Inventory management.
• • Customer data protection.
• Businesses rely on internal control to reduce risks and improve efficiency.
Advantages of Internal Control
• • Reduces fraud and theft.
• • Improves efficiency.
• • Increases reliability of financial reports.
• • Encourages employee accountability.
• • Supports organizational growth.
Limitations of Internal Control
• • Human error may occur.
• • Employees may collude.
• • Controls may be costly.
• • Management override can weaken controls.
• • Technology risks may still exist.
Role of Internal Audit
• • Evaluates effectiveness of controls.
• • Identifies weaknesses.
• • Recommends improvements.
• • Ensures compliance with policies.
• • Helps management reduce risks.
Internal Control in the Digital Age
• • Cybersecurity measures are essential.
• • Data protection prevents information leaks.
• • Online transactions require secure systems.
• • Businesses use firewalls and encryption.
• Example:
• Banks use multi-factor authentication for online banking.
Summary
• • Internal control is essential in every organization.
• • It protects assets, improves efficiency, and ensures compliance.
• • The five components work together to reduce risks.
• • Effective monitoring strengthens internal control systems.
• • Organizations must continuously improve controls.
Recap Questions
• 1. What is internal control?
• 2. Why is internal control important?
• 3. What are the five components of internal control?
• 4. Differentiate preventive, detective, and corrective controls.
• 5. Why is segregation of duties necessary?
Quiz
• Identification / True or False
• 1. It is the foundation of internal control.
• 2. These controls prevent problems before they happen.
• 3. It refers to reviewing effectiveness of controls.
• 4. True or False: Internal control completely eliminates fraud.
• 5. Give one example of detective control.
• Answers:
• 1. Control Environment
• 2. Preventive Controls
• 3. Monitoring Activities
• 4. False
• 5. Audit/Reconciliation/CCTV