Internal Control

Internal control is the process designed to provide reasonable assurance regarding operational effectiveness, reporting reliability, and compliance.

Controls include policies and procedures such as approvals, reconciliations, segregation of duties, access controls, and monitoring activities.

- Used in audit planning to understand risks and design procedures.
- Used during testing (controls/substantive) and documentation of audit evidence and conclusions.

- Example: The auditor references **Internal Control** when designing procedures and documenting conclusions in the audit file.

- Why it matters: Supports high-quality, defensible audit conclusions and helps detect material misstatements and control weaknesses.