Module 6 - Aud1
Module 6 - Aud1
Assessing control Risk- It is the process of evaluating the design and operating effectiveness of an
entity’s internal control.
Assessed level of control risk- the conclusion reached as a result of assessing control risk.
Nature of Internal control (4Is)
1. Internal control is a process.
- Internal control is not an end in itself. Instead, it is a means of achieving the entity’s objectives.
2. Internal control is effected by those charged with governance, management and other
personnel.
- Internal control is accomplished by people at every level of organization.
- Management responsibility is to establish a control environment and maintain policies and procedures.
- Governance ensures integrity of accounting and financial reporting system.
- Staff personnel perform their respective function to accomplish the objectives of the entity
3. Internal control can be expected to provide reasonable assurance of achieving the entity’s
objectives.
4. Internal control is designed to help achieve the entity’s objectives.
- Internal control is geared towards the achievement of an entity’s objectives in the following
categories: (ECR)
Effectiveness and efficiency of operations
Compliance with laws and regulations
Reliability of financial reporting
*auditor is only concerned with those policies and procedures within the accounting and internal control
systems that are relevant to the financial statement assertions. Therefore, the objective that is most relevant to
the audit is the financial reporting objective.