Internal Controls

Introduction to Internal Control

  • Small Business Managers: Directly engage in hiring, employee management, goal setting, and financial transactions.

    • Need strong interpersonal skills and understanding of business performance.

    • Ensure quality delivery of goods and services.

  • Larger Entities:

    • Delegation of tasks, relying on formal procedures over personal interaction.

    • Emphasizes structured management approaches.

  • Role of Internal Control Systems:

    • Observe and regulate operations, identify and assess risks.

    • Develop operational strategies and monitor resources.

    • Mitigate risks impacting organizational objectives, akin to banking or retail transaction controls.


Purpose of Internal Control

  • Main Objectives: Internal controls are implemented to achieve four key objectives.

  1. Operational Efficiency

  2. Detection of errors and protection against fraud

  3. Safeguarding assets and records

  4. Providing accurate and reliable information

Operational Efficiency

  • Goals: Maximize resource utilization, minimize costs, enforce management policies.

  • Requirements:

    • Report necessary adjustments and comply with regulations.

    • Efficient management supports cost control and policy enforcement.

Detection of Errors and Fraud

  • Importance: Actively detecting and preventing errors and fraud to protect resources.

  • Consequences:

    • Significant financial losses if not addressed; potential legal consequences.

    • Underlines the necessity for strong fraud prevention measures.

Safeguarding Assets and Records

  • Focus: Protect company assets against wastage.

  • Records Management: Ensuring accuracy and completeness aids effective decision-making.

  • Supports overall operational efficiency and strategic planning.

Accurate and Reliable Information

  • Requirements: Ensuring provision of accurate accounting records essential for informed decisions.

  • Outcomes:

    • Facilitates transparency, accountability, and trust in dealings with stakeholders.


Additional Purposes of Internal Control

  • Ensures compliance with laws and regulations.

  • Aligns business objectives.

  • Encourages effective management.

  • Reduces risk exposure.


Adequate System of Internal Control

  • Each business transaction must be:

    • Complete

    • Accurate

    • Authorized

    • Valid

    • Authentic

  • Types of Controls:

    • Preventive: Avoid negative incidents preemptively.

    • Detective: Identification of errors to ensure timely corrections.


Internal Control Principles

  • Five Components:

  1. Control Environment

  2. Risk Assessment Process

  3. Control Procedures

  4. Control Monitoring Process

  5. Information Systems and Technology

Control Environment

  • Driven by management attitudes and behavior - sets an example.

  • Organizational structure clarifies roles and responsibilities essential for accountability.

  • Personnel policies help retain capable and ethical employees.

Risk Assessment Process

  • Identifies and evaluates a variety of risks.

    • Examples: food safety concerns, airlines managing weather-related disruptions.

  • Financial Insolvency Risks:

    • Pressure in tough times may lead to falsifying financial statements.

Control Procedures

  • Guidelines to assure effective implementation of management's instructions.

  • Example controls:

    • Hire competent personnel, rotate duties, take mandatory vacations.

    • Use pre-numbered documents (invoices, receipts).

    • Employ strong data encryption for transmitted data.

    • Make employees handling cash bonded for security.

Control Monitoring Process

  • Engaging auditors to check internal control systems for weaknesses.

  • In smaller firms, management oversees control operations.

  • Monitoring includes evaluating employee conduct and accounting accuracy.

Information Systems & Technology

  • Role of technology: decreases processing errors, allows extensive testing controls.

  • Challenge: Limited access to historical processing evidence.


Internal Control Importance

  • Critical for management, necessitating support from all stakeholders.

  • Collective commitment to internal controls aligned with organizational objectives enhances effectiveness.


Internal Control for E-Commerce

  • Unique cybersecurity risks are prominent in e-commerce.

  • Cyber threats can compromise sensitive customer information.

  • Importance of robust cybersecurity measures in online transactions

  • Risks: credit card fraud, phishing, and security breaches from wireless networks.


Internal Control Limitations

  • Internal controls do not always guarantee the achievement of business objectives.

  • Key Concepts:

    • Events beyond management's control and the inevitability of imperfections in control systems.

    • Expectations: Provide reasonable assurance of general effectiveness.

Specific Limitations:

  • Judgment Errors: Negligence or confusion leading to flawed decisions.

  • Cost-Benefit Standard: Balancing costs of controls against impacts.

  • Breakdown Due to Human Error: Personnel failing due to overload or poor training.

  • Management Override: Deliberately bypassing established controls.

  • Collusion: Teaming up to manipulate their actions beyond oversight.


Internal Control over Cash Receipts & Payments

  • Cash includes coins, paper money, and electronic transactions (EFT).

  • Important management practices: Separate cash handling from record-keeping; deposit cash regularly; make payments by cheque.

Cash Receipts Sources

  • Cash sales, cheques for receivables, interest receipts, dividends, owners' investment, bank loans.

Over the Counter Cash Receipts

  • Trend: Decreasing cash transactions; preference for debit/credit cards.

  • Modern cash registers prevent unauthorized changes, integrate transactions records automatically.

Cash Receipts by Mail

  • Requires dual custody in large organizations for handling cheques.

  • Recordkeeping crucial for accuracy between bank deposits and accounting records.

Electronic Funds Transfer (EFT)

  • Electronic transfers are more prevalent in financial transactions.

  • Examples: Bill payments, smart cards, ATM withdrawals.


Internal Control over Cash Disbursements

  • Cash disbursements require tighter control procedures.

  • Cheque and EFT are recommended over cash carrying for enhanced control.

Control Activities Over Cash Payments

  • Authorized personnel handle signing payments.

  • Separated duties are enforced between approving and recording payments.

  • Use of secure safes for cash and strict access protocols for cheque signing.

    • Monthly reconciliation of bank statements for accuracy.

Cheque Transactions

  • Recommended dual signatures on cheques for added security and documentation.

    • Clear process includes customer (drawer), payee, and the bank (drawee).

Electronic Payments

  • Benefits: Enhanced control efficiency, reduced costs, and improved transaction processing.


Petty Cash Fund

  • Used for minor expenses without the need for writing cheques.

  • Management involves establishing, using, and evaluating the fund's balance based on expenditure patterns.