Internal Control and Basic Control Measures
Fundamental Principles and Definitions of Internal Control
Societal Foundation of Control Measures:
Normal societies establish control measures to maintain order, structure, and safety.
Everyday societal controls include traffic rules, security measures, and school regulations.
Control functions as an integral element of life, established to exercise orderliness, ensure community safety, and provide a structured framework for managing society.
Definition in a Business Context:
In a business organization, internal control denotes the systems and measures implemented to ensure compliance with established rules, policies, and regulations.
The primary purposes of these measures are to ensure that enterprise goals are achieved systematically and to prevent fraudulent activities.
Determinants of Internal Control Design:
Internal control mechanisms and actions are not uniform across all organizations; they must be tailored specifically to the enterprise.
The design and complexity of internal control systems depend on several business characteristics:
The operational and financial risk profile of the business.
The size of the organization.
The type of business.
The overall diversity of business operations.
Internal Business and Accounting Control Measures
Internal Business Control Measures:
Internal controls are established and operationalized to guarantee the realization of business objectives.
Key objectives of internal business control include, inter alia:
Ensuring that all financial information generated is accurate, dependable, and reliable.
Ensuring that all employees strictly abide by corporate policies, operational guidelines, and organizational rules.
Ensuring that all employees respect, uphold, and honour the core norms and values of the enterprise.
Safeguarding and protecting the physical and financial assets of the business.
Ensuring that all business resources are utilized economically, efficiently, and effectively.
Internal Accounting Control Measures:
Internal accounting control and operational management represent essential sub-components of an organization's total internal control system.
These controls are designed not only to guarantee accurate, orderly, and correct bookkeeping, but also to protect the organization against financial losses arising from fraud, embezzlement, and other forms of white-collar crime.
Key goals of internal accounting controls include ensuring that:
All income earned is collected, received in full, and recorded correctly.
All business expenses and disbursements are fully authorised and correctly recorded.
All assets are properly protected from misuse or misappropriation and accurately reflected in the accounting records.
All creditors and other operational liabilities are discharged on time and recorded accurately.
All accounting reports, statements, and summaries are correct and reliable.
Any errors, omissions, or irregularities occurring in the accounting records are promptly detected and rectified.
Control Over Cash Transactions: Payments and Receipts
Control Over Cash Payments:
Internal control systems must ensure that disbursements are made strictly for valid, verified business expenses, carry proper managerial authorisation, and are recorded accurately in the accounting records.
Mechanisms to enforce control over cash payments include:
Documentation and Authorisation for EFTs: Electronic fund transfers (EFTs) must be executed only after all required supporting documentation has been completed and formal authorisation has been granted.
Authorisation Hierarchy: Only members of top management have the authority to approve EFTs; this authority is strictly prohibited to the bookkeeper.
Prohibition of Blank Approvals: Blank authorisations must never be signed under any circumstances.
Restriction of ATM Withdrawals: Cash withdrawals at automated teller machines (ATMs) for business disbursements must be avoided as far as possible.
Dual Authorisation for Material Amounts: Electronic payment authorisations involving large sums of money considered material to the enterprise must require mandatory dual authorization (signatures from two authorized persons).
Prompt Recording: Every electronic fund transfer must be entered into the Cash Payments Journal immediately after the payment is loaded into the banking system.
Stamping Paid Invoices: All paid invoices must be physically or electronically stamped as "paid" to support the EFT authorization. The stamp must clearly state the date of payment and the specific EFT authorization reference number to prevent duplicate payments.
Monthly Bank Reconciliations: At the end of every calendar month, the official bank statement must be systematically compared and reconciled with the Cash Payments Journal.
Segregation of Incompatible Duties: To prevent collusion and fraud, responsibilities must be divided among different employees. Specifically, the person who authorises EFTs, the person who loads EFT payments, the person who conducts bank reconciliations, and the person who issues cash receipts must all be separate individuals.
Control Over Cash Receipts:
Controls over incoming cash must ensure that all earned revenue is collected, accurately and promptly recorded, and banked without unnecessary delay.
Mechanisms to enforce control over cash receipts include:
Physical Protection: Physical cash receipts must be kept secure against theft, burglary, and unauthorized access using safes, locked cash registers, or secure vaults.
Timely Banking and Verification: All collected cash must be deposited into the business's current bank account as soon as possible. Bank deposit slips must be systematically checked against the entries in the Cash Receipts Journal.
Immediate Recording of Physical Cash: Cash receipts must be entered into the Cash Receipts Journal immediately upon collection.
Timing of Electronic Transfer Entries: Inward electronic fund transfers must only be entered into the Cash Receipts Journal after they appear on the official bank statement, rather than prematurely when a customer issues a proof of payment notification.
Monthly Reconciliation: At month-end, the Cash Receipts Journal must be reconciled against the incoming transactions on the bank statement.
Control Over Petty Cash
Core Objectives of Petty Cash Controls:
Controls must guarantee that petty cash funds are disbursed strictly for legitimate, official business expenses.
The system must safeguard cash on hand and ensure that all petty cash payments are accurately documented.
Specific Petty Cash Control Mechanisms:
Physical Custody: Petty cash currency must be held securely in a locked cash box or safe to prevent theft.
Payment Restrictions: Petty cash disbursements are permitted only when an expenditure cannot be processed through EFT or credit card facilities.
Restricted Access: Access to the petty cash float must be restricted solely to the designated petty cash cashier.
Source Documents: Every single payment disbursed from petty cash must be backed by a valid underlying source document (such as a cash register slip or till receipt).
Petty Cash Vouchers: The petty cash cashier must complete and sign an individual petty cash voucher for each transaction.
Disbursement Limits: A strict maximum financial limit must be imposed on the amount that can be drawn in a single petty cash transaction.
Surprise Inspections: Regular, unannounced physical cash counts and reconciliations must be conducted by an independent supervisor or auditor other than the petty cash cashier.
Imprest System Operation: The total petty cash imprest amount must be fixed in advance. The float must be restored to its original imprest balance whenever cash reserves drop to a predetermined minimum threshold.
Segregation during Imprest Restoration: When restoring the petty cash imprest float, the formal request, the management authorization, the bank receipt, and the ATM withdrawal slip must be verified and recorded by an employee other than the petty cash cashier.
Control Over Debtors and Accounts Receivable
Core Objectives of Debtors Controls:
Ensure credit facilities are extended exclusively to creditworthy customers.
Verify that credit sales are recorded accurately.
Maintain regular reconciliation between individual customer ledger balances and the general ledger control account.
Actively manage and collect outstanding balances to avoid bad debts.
Key Debtors Control Mechanisms:
Formal Credit Policy: The business must implement a structured credit policy that dictates the procedures for screening the creditworthiness of applicants and establishing credit limits.
Credit Monitoring for Arrears: Credit control personnel must review debtors regularly to identify overdue accounts and accounts in arrears.
Transaction Authorisation: Every individual credit sale must receive formal approval regarding unit price, credit terms, credit availability, and adherence to the debtor's established credit limit.
Pre-numbered Sales Invoices: All credit sales must be documented using sequentially pre-numbered credit sales invoices signed by the salesperson. Complete numerical control must be maintained so that every invoice number is accounted for.
Independent Statement Distribution: Monthly customer account statements showing outstanding balances must be reviewed and dispatched by someone other than the bookkeeper.
Control Account Reconciliation: At the end of each month, the total of the individual account balances in the Debtors ledger (the Debtors list) must be reconciled with the balance of the Debtors Control account in the General Ledger.
Authorisation of Adjustments: All adjustments to debtor balances, including credit notes, discounts, and the writing off of bad debts, must be formally authorised by senior management.
Overdue Interest: Contractual interest must be calculated and levied consistently on all accounts that exceed standard payment terms.
Control Over Creditors and Accounts Payable
Core Objectives of Creditors Controls:
Ensure all credit purchase invoices received match physical goods received.
Ensure liabilities are recorded accurately, reconciled against creditor records, and monitored regularly to avoid overdue status, penalty interest, and damaged supplier relationships.
Key Creditors Control Mechanisms:
Verification of Prices and Calculations: Invoices received from creditors must be inspected to verify unit prices, calculations, terms, and overall mathematical accuracy.
Verification of Quantities: The actual physical quantity of goods received must be checked and clearly ticked or marked off against the supplier invoice.
Negotiation of Terms and Trade Discounts: The business should actively secure optimal credit terms and trade discounts by nurturing long-term relationships with suppliers or leveraging bulk purchasing power.
Invoice Stamping and Validation: Each invoice must undergo formal verification, approval, and recording before payment is processed (for example, by imprinting a verification stamp on the document).
Segregation of Procurement and Receiving: The staff member responsible for ordering or purchasing goods must not be the same individual responsible for receiving physical shipments.
Optimized Payment Timing: Creditor payments should be scheduled as late as commercially possible within credit terms to optimize internal cash flow, while ensuring payments occur before suppliers levy penalty interest.
Control Over Wages, Salaries, and Payroll
Core Objectives of Payroll Controls:
Ensure salary and wage disbursements are made strictly to bona fide (legitimate) employees of the business.
Ensure all disbursements are properly authorised and correctly reflected in payroll and general accounting records.
Key Payroll Control Mechanisms:
Personnel Files: A confidential personnel file must be created and maintained for every worker, containing their assigned salary scale, authorized deductions, and official records of any changes in employment status.
Restricted Access to Records: Physical and digital access to confidential personnel files must be strictly restricted to designated human resources and payroll personnel.
Verified Time Sheets: Detailed time sheets or clock cards must track standard hours worked and overtime. All time records must be checked and signed off by the employee's direct superior to authorize payment for hours worked.
Payroll Calculation Verification: The mathematical accuracy of all gross wage calculations, statutory/voluntary deductions, and net wage payouts must be independently verified.
Electronic Remuneration: Salaries for permanent personnel must be paid directly into their individual bank accounts through electronic fund transfers (EFTs) rather than cash.
Elimination of Ghost Employees: Management must conduct regular reviews of the official salary register to confirm that every listed worker physically exists and is actively employed, thereby preventing the creation of "ghost employees" on payroll records.
Control Over Non-Current Assets
Core Objectives of Asset Controls:
Ensure non-current (fixed) assets are acquired and disposed of solely with proper administrative authorisation.
Protect fixed assets against physical loss, damage, or theft.
Ensure accurate accounting records and valuations are maintained throughout an asset's useful life.
Key Non-Current Asset Control Mechanisms:
Physical Security: All non-current property, plant, and equipment must be physically safeguarded using security measures to prevent theft, burglary, and vandalism.
Acquisition Authorisation: Explicit managerial authorization must be obtained prior to the procurement of any new capital asset.
Fixed Asset Register Maintenance: A comprehensive and thorough asset register must be maintained, containing bookkeeping entries and descriptions for every newly acquired asset.
Physical Stocktaking and Verification: The asset register must be audited periodically through physical stocktaking inspections. Any missing, stolen, damaged, or unaccounted-for assets/inventory must be reported to management immediately.
Depreciation Policy: A formalized depreciation policy must be established, approved, and systematically implemented to reflect wear, tear, and obsolescence in the financial records.