What is an internal control
A system designed, implemented and maintained by governance and management to provide assurance that the company is meeting their objectives regarding reliability of their financial reporting, efficiency of operations and compliance with regulation.
Why we have internal controls
To Minimising the company’s business risk
Ensuring compliance with regulations
To continue effective functioning e.g helps financial statement preparation
Components of internal control nmonic
CRIME
C
Control activities
Policies and procedures to ensure managements instructions are carried out and risk addressed.
The purpose is to prevent, detect and correct errors and fraud
e.g
reconciliation
verification
Authorisation
Segregation of duties
Physical controls
reviews of performance
R
Risk assessment of entity.
Assessing different risks to company
I
Information system and communication.
Refers to business processes helping with financial reporting.
The systems identify info, record, and communicate too who is needed.
Some are manual while some are IT systems.
Examples
How staff are informed and how info moves through organisation
Quality and reliability of info
It systems recording transactions
M
Monitoring the Internal control.
Ensure the controls are actually happening. e.g if say we will do a bank rec, will we actually do it.
E
control Environment
Control environment refers to governance and management. The culture they create and attitudes helping to prevent fraud/ errors
What is control environment
Focuses on the governance and management and how they create a culture and ethical behaviour prevent and detect errors/ fraud.
How can directors create a strong environment
Use of training
Disciplinary process for those who break the rules.
What does a board of directors consist of
Executive directors- Run the company
Non-executive directors- Not part of day to day management but do get involved in policies and planning.
Chairperson to run the board and direct activities between 2 types of directors.
Audit committee
Subcommittee of the board of directors ( a committee composed of some members part of a larger committee), consisting of non- exec directors ONLY with a particular interest in the accounting and finance of the company.
The committee is part of the control environment and is a control.
Audit committee roles
Monitor FS
Review internal controls
Monitor safeguarding of whistleblowing ( report of fraud)
External audit duties
Review service supplied by external audit.
monitor independence and objectivity of external auditor.
Approve remuneration/ engagement letter of external auditor
Recommend appointment/ removal of external auditor.
Rules regarding need of an audit committee
All Uk listed companies need an audit committee and it is recommended for all large companies.
What is the Risk assessment process (cRime)
Identify relevant business risks
Estimate the significance of the risks
Assess the likelihood of occurrence of risk
Decide upon the appropriate action e.g internal controls, insurance, change in operation.
What is managements responsibility in the RAP
Ensure they have effective controls in place to identify risks and act upon those that impact Financial statements
3 different business risks
Financial business risks e.g run out of money
Operating business risks
Product supply issues
Strikes of workforce
Regulatory business risk
Risk of not being able to comply with laws/ regulations.
Consequence of a weak risk assessment e.g not identifying risks well/ creating internal controls
Increased control risk
Auditor may have to change approach and do more tests reducing detection risk
What is a business risk
A risk that may affect a business to achieve its objectives.
What is information processes and communication
Includes the main business processes relevant to financial reporting.
It includes manual processes and those generated by IT.
What do information systems consist of
software, people, procedures and data.
It can be manual e.g using a spreadsheet or more automated.
Are senior management in a position to override controls
Yes