Internal controls are based on management's policies and processes. So with all controls and plans there are limitations as well as unforeseen risks that cannot always be prevented. Each time we make a change to an existing system, we run the risk of weakening the underlying internal controls. No matter how well internal controls are designed, they can only provide reasonable assurance that a positive outcome can be achieved.
When we talk about internal controls, there are 5 basic concepts to consider:
Environment - defines organisational culture and influences the acceptable behavior of employees. This concept includes such things as staff competency, integrity, management’s philosophy and ethical values.
Risk - is the way of identifying that something at work may well go wrong and assessing and identifying risks before they become a problem. These could be linked to external sources but either way, every aspect needs to be measured to ensure all objectives are being met with satisfaction.
Activities - details the policies and procedures that provide direction as to how management expects actions or activities to be performed.
Information and Communication - explains how necessary information (both internal and external) must be obtained and analysed at the appropriate time, addressing the right people, so that they may carry out their duties accurately. This is perhaps one of the more important concepts.
Monitoring - assesses the quality of internal controls. This is when feedback from members of staff, not necessarily in management can make a difference in how internal controls is working.
The limitations is that although present policies and plans may work now, they may not achieve consistently and they may need to be changed. These changes could weaken internal controls as mentioned before and these are the risks that internal control brings.
When we talk about internal controls, there are 5 basic concepts to consider:
Environment - defines organisational culture and influences the acceptable behavior of employees. This concept includes such things as staff competency, integrity, management’s philosophy and ethical values.
Risk - is the way of identifying that something at work may well go wrong and assessing and identifying risks before they become a problem. These could be linked to external sources but either way, every aspect needs to be measured to ensure all objectives are being met with satisfaction.
Activities - details the policies and procedures that provide direction as to how management expects actions or activities to be performed.
Information and Communication - explains how necessary information (both internal and external) must be obtained and analysed at the appropriate time, addressing the right people, so that they may carry out their duties accurately. This is perhaps one of the more important concepts.
Monitoring - assesses the quality of internal controls. This is when feedback from members of staff, not necessarily in management can make a difference in how internal controls is working.
The limitations is that although present policies and plans may work now, they may not achieve consistently and they may need to be changed. These changes could weaken internal controls as mentioned before and these are the risks that internal control brings.